last executing test programs: 8.799020227s ago: executing program 0 (id=506): openat2$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)={0x40, 0x100, 0x15}, 0x18) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000540)={0x2020}, 0xfffffffffffffdd8) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ed) mount(0x0, &(0x7f0000000280)='./nfsd/portlist\x00', &(0x7f0000000200)='overlay\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./nfsd/portlist\x00', 0x2, 0x0) write(r3, 0x0, 0x0) read$FUSE(r3, 0x0, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r5 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x41, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_CREATE_PIT2(r6, 0x4040ae77, &(0x7f0000000040)) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_PIT(r6, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x4043) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) close(0xffffffffffffffff) socket$inet6_sctp(0xa, 0x1, 0x84) r9 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r9, &(0x7f0000000100)=@name={0x1e, 0x2, 0x3, {{0x42, 0x1001}, 0x2}}, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000000500), r2) sendmsg$TIPC_CMD_SET_NODE_ADDR(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r11, 0x1, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x2007ff}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(r8, 0x40044160, 0x3) 8.380298952s ago: executing program 4 (id=508): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x2, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="120100001d9167204f17316a3f26010203010902120001000000000904"], 0x0) syz_usb_control_io$uac2(r1, 0x0, 0x0) syz_usb_control_io$uac2(r1, 0x0, 0x0) socket$kcm(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x5, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_connect$midi(0x5, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x26, &(0x7f00000001c0)=ANY=[@ANYBLOB="050f2600030c100a80c0004f09ff0a1003020800070200020b1001021000080c090001"], 0x1, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x404}}]}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, 0x0, 0x0, 0x2}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'syztnl1\x00', &(0x7f0000000180)={'ip6tnl0\x00', r3, 0x0, 0xff, 0x64, 0x7, 0x28, @empty, @empty, 0x8, 0x8000, 0xfffffffe}}) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000") r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r4, &(0x7f0000000200)='2', 0x1) ioctl$FIONREAD(r4, 0x541b, &(0x7f0000000000)) ioctl$FE_SET_PROPERTY(r4, 0x40106f52, &(0x7f0000000500)={0xf, &(0x7f00000002c0)=[{0x3f, '\x00', @st={0x4, [{0x3, @svalue}, {0x1, @uvalue=0xff}, {0xe269eb8d5f07a7ec, @svalue=0x1}, {0x0, @svalue=0x211f}]}, 0x3}, {0x2a, '\x00', @data=0x6, 0x1}, {0x16, '\x00', @data, 0x6}, {0x9, '\x00', @buffer={"924cac1a9bddb324bc1e9aa41c6b82439f55efceed93fd178041ce9748eb983f", 0x20}, 0x5}, {0x3b, '\x00', @buffer={"47a226e9015c2d7d3e1459f18f5103a628e4da56bc2032bc146e341fee86fa43", 0x20}, 0x4}, {0x53, '\x00', @data=0x8, 0x3}, {0x16, '\x00', @buffer={"983bdedc414625b0ea55eeaf5a3a880b14bae4a7970644516d9eea63d9a4cdd0", 0x20}, 0x3}]}) 8.286577567s ago: executing program 0 (id=510): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x4206, r0) ptrace(0x4207, r0) r1 = memfd_create(&(0x7f0000000a80)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x17?&^\xe1Ob\xe1Y\x01\xeb\x91\x83;\xeb\xf1\xd0\xe3\xe5\x19T\xff\x01\x00\x00\xe2\x9f\xd9\xae\xcf>/\x05V%$6\x9fU\x86\xbe\xcbx\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xe1*\xa2c\x12.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x06\xb5\xaa\xe6\x05\xe4\xc3\x90\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4\x84$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xf7\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6Pr\xd4\xb5X\\\xdbD\n\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8\x83\x87+nM\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?\x87\x84\\/y\xed\x01#?\xab\x1c\x11\x00\xc5\x8d\x1f\x00\x00\x00\x00\x00\x00\x00]\x81\xf3\xf9\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\xa3\xcc\x9b\f\xa7\x8f\x91O\xc9\xb9\x10M\xa3\xac9&\xe6\xbd\x1c4\xb59\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xdc\xc5\xe59\xa95\x1ag\x00\x8eCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5W\xfb\x82\xac\x19,\\D\x91T\xfd\x9c\xb8\x8b\x88\xa5\xcc\x8fI\x00\xf0\xc9\x1f\n\xa7\xd6\x0f:\xb0\xf5?\xc3\x88\x1e\xbb-\xa6\xecA\x92\xaf\xa4X,\v\xa5\xca\v|\xe2L\xac\x80\xc7\x11\x96fh\x83\x15\xc7\xea\xd5\xe8\x89W\x11=\x87\x93\x0f\x87I\xdf\xb1\xeb\x89\x11.\x01\x00\r`\x1e8\x94\v)\x06B\xf0\x01\x91 )y\xb4\xba\xba\xb7\xbc\xc3\xad\xf1\x92/(A=A\x8b\xa5\x92\xc3V\x116jY-\x83\xdf\xf4\xea\xc6\xc7\x10g\x1d\xd5\xb0\xbb\xd2\xfc]fC\x8d\x0f\xa6q\x0f\xef\x90\xfe\x94k\xf1\xb8\xfa\xbbb\xb1\x03\x99\xf7\xfd\'\xae\x906\xe0\xaa\xdbtWWH\xa4L\xb5pe,\xdfN\x0f8\t\xe7X_H\xd4\xe3\xb2,oj\xac\xd7\xbd\xd0\xadW\x1f<\xd0s\xa8\x1f(\x00/ \xe4]@\xf7mA\xe8\xd1\xf4:\xb3\xeb\x81\xb9\x018\x1c\x95%o\x05x\x1a\x90\xf4\x03\xe7\xe9\xa9\x00\x00\x00\x00\x00\x00\xba3?Q\x00\x00SDl\xc6\xe0\xc5\xbc\x9c\xe8\x15\xe5kJ\xc2\x8a\x9a7\xff\xd1\r\x96=\x81\xb6\xdb\xf8\x03\x91L\b\xa3\r#\x9cX\xc4\x92\x90[p\xbb]X\rm^}\xa3\xe46(\x9d-\xf8\xf9o\xa9\x13\x00\x00\x00\x00\x00\x00&2\xdfy\xd0\x15\x9d`\x83\xa4\xa6\x14^9]H\xd7/KP\xae\xa8\a.\fHo\xaa\x85@\xae\x8d\xfag\xa5F\xe6\xdf\xc1\x80Sv\x92\x01?\xf6\xad\xe2\xf9A\'\xf49\xb1uo\xc1\x95H\xd6\xdew-;\vR\x15z8\xfe\xcb\xd1]\xe1\xebF\xe8\xe7\x9b\xa81\x8eEp\x99\xd8X\x06\'\xff2\xa8Q\v\x19)\xc35\x03Z0\xfcd5\xb1\x89v?4R,\xd8\x1e\xb3\xfa \x80t\xd8\xc3 \x97A\xef\xc5.\xb1\x02b\xb9\xab\x12@\xa9\x18\x84\xb2\xf6\x16\xb7\xbb\xa4\x89G\b\xc1\n\x04\xbb\a\x14DC#V>\x88\xa09\x8aPU\xf1\xebXn%$\x13\xaa\x80\x86Fb\xc0\\Z\xb3U\x00\xd3\xbb\xbb\xe3\xfe\x9br\xa2\x06\xe63\x1a/(s\xce\xda\x83n-v\x17\xf1D\x8c\xf4x\xc1v\a%\x87\x11\x86\xc92\xb7\x06\xe2\x0e\xb1\xe3KoE#\x88\xdb\xa5\x7fc[\xfd]\r\x87\x94\xf4\x0e47Bo\x8a\xfc\xb9\xcd\xbcK\xc9\x02\x00&\xae*\xa7\xfc\xc6\xf6-T\x1f\xad.\xf0\x00\x00\xf2\xb5\xafq?/\xc0\xec7\xe6>\xa2\x02\xc7x\x98#\xb6\xac\xfd\x86\x91%\x0f\xca><\x02.\xcb3\xfc\ns\xea\xbf&\xae`\x1d\x0f\xd4g\xd7\x81g:u9\xa3\xb2(yK\xcd\xa7\xa1\xc9%\x1b\xee\xd6Ob>\x8c\xde-#W\xfc&-\xd2\xc9\x0eW\xfcV?\x81\x9f+\xdai\xf2\xd1\xb8[\xd0\x95\xa5\x04\xf9~\x93kj\xc3\xe1\xc2\xd8*SZ\xc3\xf9H/\xd7\v\xcb\x99_\x1d\xaan\"\xde\xc2\xc9\xe7>\a]Q\xce\\\xbas\xfcB\xaf\xf5\xb3-\xb95\xb9\f\x1f\xeb\xb3\xaf\xcb\x96\xfe \x81\xc0\xfb\xc7D\xf1)\x1d\xad\xf9V\xd1T\x9d\xb2\xba/\x0e\x17\xf6\xbd3F\x9e<\x1d\xf9\b\xd0\xe3Z\a\n\x14\nzY\xd2/\xe8\xdb\x066am\xad@\xbf\x11h\x9c\xcdQ\xf9\xc7\xd1g\r\x1bb\xc6\xc5\xba!`\xd7\xdcx\x92\'\x7f\xc4\xdf\xaf\x90\x94r\x93\x17\x18\xb8#gS:6\x93s\xcf\vqG', 0x0) fallocate(r1, 0x0, 0x0, 0x1) lseek(r1, 0x0, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x48, r3, 0x300, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x24, 0x33, @action={{{}, {}, @broadcast}, @sp_mp_confirm={0xf, 0x2, {0x2001, @random=0x4, {}, @void, @void}}}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x8, 0xcd, [0x0, 0x9]}]}, 0x48}, 0x1, 0x0, 0x0, 0x2800}, 0x10) 7.359728269s ago: executing program 0 (id=512): r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000040)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000100)=0x1d9, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000001fc0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="02017d29012918050e3580009f0001140000002f0600ac141414e0000003808a8972bd0b72e21082b1a3"], 0xdd12}], 0x1}, 0x8040) 7.129880024s ago: executing program 0 (id=513): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace(0x8, r3) wait4(0x0, 0x0, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r5, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0x78b}) add_key$user(0x0, 0x0, &(0x7f00000000c0)="e094a858c8511b87dab1ffb4dfccfb1f8cfdc6612deb52770a86c344a9c763ae4001c623e03f14a09620831644307c9da1509d7922df9dfc92e1b6a06d238774f3b2259a14108b70208832482a6bc6585f8ac59ae81e721c761671a7aa38ee6e62c267f8d10ea0a0fd2bbb557e2d988591d6f4e94ad57187e7310be66789c67e9a8c1b6e224c659a601417f34d234f923c69f1937866b60cf28bda7d766d2d73fa0874ab36735a7c240b829f6db101b31976e4858fc42931c129ea1e99", 0xbd, 0xfffffffffffffffe) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0xffffffffffffffff, &(0x7f0000000280)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r6, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {r7, 0x0, 0x30, 0x30, 0x0, @in6={0x1b, 0x4e21, 0x4, @loopback}, @ib={0x1b, 0x0, 0x9, {"0100"}}}}, 0x118) 6.137740753s ago: executing program 1 (id=516): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000780)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_KEY(r0, &(0x7f0000000880)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f00000008c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="20002bbd7000fedbdf25160000000c00060003000000000000000c00060003000000030000000800030007ea59f6c2eca86b6f47e3d5c9b343da0e227fbf9ab12db01a5c0f9d7142ff56a8769b034bffadf21529fa1fd3f2127330e4f482e9ab0b16b1e8d0ac076cea940c276d7018a8dc48e447fe04adcdbc3f4915076c45ae1b6ffa9c9ea3ae07f891ec899af3741a04144610c138161e6a57673b908e8af5223e7e3a66080efe5b0d08b2f981cd6c9c5380a7bd7b804509d5b2f2f99268cfceaf63d5813e469a0410764c51", @ANYRES32=r2, @ANYBLOB="0c000600020000000200000008000300", @ANYRES32=0x0, @ANYBLOB], 0x48}}, 0x1) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x58, 0x42, 0x1, 0x0, 0x0, {0x3, 0x1}, [@generic="000000002600010000112233445566778899aabb0800450000140000000001170000010203040506070800000c00020006000600810000000c0003000800170004"]}, 0x58}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001c00010000000000000000a007000000", @ANYRES32=r4, @ANYBLOB="400096040a000200aaaaaaaaaa0c00000600050001"], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) vmsplice(r3, &(0x7f0000000700)=[{&(0x7f0000000240)="6aa2d620f6c5182222a6718026b26314e884d13af8eefb8196ee7ec71be8cc1d6ccf471b2470553dcb825f9f12d17074f1e399ede808214ecadb1300e95e6f02a34238e86e808bd5b1a8fd022efdc84170c5d0b5671245067dc3c9ed24215646ffee86e264e608a608e91cba259c3904c8db91214b48091194d8ce1a568051217acf95486b", 0x85}, {&(0x7f0000000380)="056e57635a33585adbc6bb3badf5604b854cbfd42bf1cf995811812963121900d914e17664775b9558e2b21cd5e715cd3de543c1852e9be886e58cd2ac2ff16cc72090e304b9fa454307f3e004fd86f83d6403671c2476cd7850d0fe83f2ca36de1c662c5d58cbba2d963ecaf47b1917eb0307", 0x73}, {&(0x7f0000000400)="704ebcc2bbde373967548f0ee3c3b3190c4e243911319a7ffd19d18bdd9e06e4751e", 0x22}, {&(0x7f0000000440)="1221e8ca9878d8f0b022ea9ce41f8467bbb9432b83acecf40a99d7a38fd8d107b027740d0e66949bd483d17394d0310a5bed63499220fea515a8e44a991b31344eb2fb9aad82f897", 0x48}, {&(0x7f00000004c0)="8760a9d1eaa63e1cf67ef54d7f0a23a1552bcd5fce71bb0e0c8e706139499b243b512caee57806fc73020291408b867c7b1de882f649cf6331101de8e62d12c27301e101fee21314d747f37e48aa0c70d7aca59941aeb37db7e0fd737f642fa4eabe23958cc102357467cffef9fd91298cd6071c5d48a63e6e14f760109fdc52612ee5d78f83e4b9c3126e1ac855a6cc076e8bb846557d5052af9e1f9720bc124fe51967aeea32b95c25f0c537c23cb1fba8cc2bb515317cfedfdd634df5db93b9f45e0ebcdc8b2bd5caa80257dd0c541d32e3040c41f711", 0xd8}, {&(0x7f00000005c0)="fc0f15eca2b85dc4b0a64127ad0f55b38998a79dc056de36a652002005856c38927eccc80cf8321eec6b2c3dad7c309b01c0b2703ef6f330f0ec0e16935ac10055ed91db9416470f664db779dd5dd669836223a70a26de94649653f992", 0x5d}, {&(0x7f0000000640)="ff946f884fbeece3b8375e5c1569afd4e7d50a4e690972f067e463c91bbbe03110386e4745759f8737bb8cf6bc8f4cb8cc8ed5e481c5648eb8ddf70fe7a87ad526625331ea84689dc3580a3e078af461b6353b91acecba406701f395fdba9c274f902dcc02625f503dd51c3c931d9095e1e01d4e58fbd5caa6395b192325244580a93c7c37f63fb0bf0cba13b8753b43e1cb6a19516031452f0d3fce5661b3e60e2fb536d80f4bc921ce00", 0xab}], 0x7, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x8) setsockopt$inet6_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) bind$inet6(r5, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty, 0xfffffffc}, 0x1c) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @remote}, 0x1c) syz_emit_ethernet(0x38, &(0x7f00000007c0)={@local, @remote, @void, {@arp={0x806, @generic={0x104, 0xdada, 0x6, 0xc, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, "f6f025e480a94c0d2254f8da", @multicast, "3421fe6856a8c72976c6"}}}}, 0x0) r6 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000405a04105201010102030109022000010100803209040000020806f50007058102000200070502"], 0x0) syz_usb_ep_read(r6, 0x2, 0x0, 0x0) 6.034350441s ago: executing program 0 (id=517): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x92103, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000002080)=@newtfilter={0x34, 0x2c, 0x401, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x1, 0xe}, {0x0, 0xffff}, {0x300, 0x5}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000002000)=@newtfilter={0x34, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xa}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000001c0)={"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"}) r8 = syz_usb_connect(0x5, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff00070581020002000705"], 0x0) syz_usb_control_io(r8, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000001100)={0xc1, 0x14, 0x2, '\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KVM_CAP_HYPERV_SYNIC2(r2, 0x4068aea3, &(0x7f0000000140)) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x2, 0x0, [{0x400000b0, 0x0, 0x7fff}, {0x400000b1, 0x0, 0x89}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.675175886s ago: executing program 3 (id=518): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x40, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x2}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="250000000100000000000000004b5ee8be4b516c997eef67063480c280000000001000b4c5b6610ab4178a4924352b23bfe348b47270be202e556215e867d61333d16a60c456898461c5d9faf7d3cc05", @ANYRES32=r0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) syz_usb_connect(0x3, 0x24, &(0x7f0000000300)={{0x12, 0x1, 0x300, 0x9f, 0xac, 0x5, 0x40, 0x6e6e, 0x1874, 0xfedf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x3, 0x1, 0x50, 0x6, "", [{{0x9, 0x4, 0x31, 0x5, 0x0, 0x8, 0x6, 0x50, 0x40}}]}}]}}, 0x0) r2 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0xbb42) dup3(r2, r1, 0x80000) getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, 0x0, 0x0) r3 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6(0xa, 0x6, 0x7) connect$inet6(r4, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x4) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r5 = syz_open_dev$sndmidi(&(0x7f0000000780), 0x2, 0x143102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(0xffffffffffffffff, 0xc01c64a3, 0x0) connect$bt_l2cap(r6, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r6, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, 0x0, 0x0) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000280)='./cgroup\x00', &(0x7f00000002c0)='xfs\x00', 0x2a18005, 0x0) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x200, 0x807c2, 0x41414770, 0x32314152, 0x425, 0x10004, 0x3, 0x2, 0xfeedcafe, 0x3, 0x2, 0x1}}) syz_open_procfs(0x0, &(0x7f0000000280)='fd/3\x00') socket$nl_netfilter(0x10, 0x3, 0xc) 5.114260065s ago: executing program 2 (id=519): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000180)) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000140)={0x2, 0x6, 0x60000, 0x1000, &(0x7f0000001000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x10000000000002, 0x9, 0xfffffffffffffff9, 0x2, 0x0, 0x0, 0x4002004c4, 0x1004, 0x76, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x90], 0xeeee8000, 0x2018d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.894022033s ago: executing program 2 (id=520): r0 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x0}, 0x90) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x7, 0xfe, 0x7fff0006}]}) r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0x82000, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000000100)={0x20004, r4, 0x80000}) mmap$IORING_OFF_SQ_RING(0xfffff000, 0x3000, 0x1800000, 0x12, r6, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x4, 0x6, 0xff, 0x42}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000540), &(0x7f0000000080), 0x619, r7}, 0x38) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) r8 = syz_open_dev$vim2m(0x0, 0xb, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r8, 0xc0145608, &(0x7f00000000c0)={0x0, 0x2, 0x1}) readv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000440)=""/244, 0xf4}], 0x1) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r9, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)={0x18, r10, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x806}, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r11 = socket$igmp(0x2, 0x3, 0x2) getsockopt$MRT(r11, 0x0, 0xce, 0x0, 0x0) 3.951879699s ago: executing program 1 (id=521): pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$EXT4_IOC_GETFSUUID(r1, 0x8008662c, &(0x7f0000000300)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x450a}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @mcast1}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0xfffffffffffffffd, 0x8e, 0x4, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000440)="bf1891bc8ea3307253874a6150f8329c499c34d666e26f42e4475811261c48abf625c9412165f0174c39668d1939e3787f8e3b34e5ab7e1465d58859c73e030d8b9209486972b9c82d64f7269dc02a8ae26cbdeb739c130bf99d4fede1502a4b3bc72b1cefc705abf8fbed3ea56a4cae83c3527daaad85ce20046a9c11bc091e13b9e1acda251b41e4fa424d97b3", 0x0, 0x1000001, 0x10011, 0x200, 0x0}) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000500), r1) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, r4, 0xc7306ce7156a3157, 0x70bd2b, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x240}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000020}, 0x20000001) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000070000000000000000000a40000000160a05000000000000000000020000000900010073797a300000000014000380080001400000000008000240000000030900020073797a300000000014000000110001"], 0x68}}, 0x20000800) sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x84}}, 0x24040884) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=@newlink={0x3c, 0x10, 0x401, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2400, 0x4100}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0x3, r7}]}, 0x3c}, 0x1, 0x0, 0x2000000}, 0x4000000) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r0, 0x3d) pipe2$watch_queue(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r8, 0x0) r9 = syz_open_dev$dvb_demux(&(0x7f0000000400), 0x0, 0x700) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r9, 0x40146f2c, &(0x7f0000000000)={0xefb8, 0x1, 0x2, 0x3, 0x4}) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r9, 0x40146f2c, &(0x7f0000000040)={0x3, 0x0, 0x3, 0x13}) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x70) r10 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r10, &(0x7f0000000600)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x112) 3.874186161s ago: executing program 4 (id=522): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x2000000000000032, &(0x7f00000003c0)=ANY=[@ANYRES8], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x0, 0x2, 0xaf, &(0x7f0000000140)=""/175, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3a}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x86}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112}) ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f0000000980)=ANY=[@ANYBLOB="00000900bbbbbbbbbbbbaaaaaaaaaabb3dd4e472216caaaaaaaaaaaa0180c200000effffffffffffffffffffffffaaaaaaaaaabbbbbbbbbbbbbb50d928f433904ea42e6b7bb17dc91ecb4a52be65bf0b1175367f"]) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r5, 0x84, 0x1a, 0x0, &(0x7f0000000040)) recvmmsg(r5, &(0x7f0000002480)=[{{&(0x7f0000000400)=@qipcrtr, 0x80, &(0x7f0000000680)=[{&(0x7f0000000580)=""/201, 0xc9}], 0x1, &(0x7f00000006c0)}, 0xffff}, {{&(0x7f0000000700)=@can, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000780)=""/226, 0xe2}, {&(0x7f0000000880)=""/233, 0xe9}, {&(0x7f0000002600)=""/254, 0xfe}, {&(0x7f0000000a80)=""/90, 0x5a}], 0x4, &(0x7f0000000b40)=""/5, 0x5}, 0x4}, {{&(0x7f0000000b80)=@sco, 0x80, &(0x7f0000000d40)=[{&(0x7f0000000c00)=""/213, 0xd5}, {&(0x7f0000000d00)=""/23, 0x17}], 0x2, &(0x7f0000000d80)=""/241, 0xf1}, 0xb}, {{0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000e80)=""/186, 0xba}], 0x1}, 0x5}, {{&(0x7f0000000f80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000001080)=[{&(0x7f0000001000)=""/84, 0x54}], 0x1, &(0x7f00000010c0)=""/179, 0xb3}, 0x5}, {{&(0x7f00000011c0)=@qipcrtr, 0x80, &(0x7f0000002380)=[{&(0x7f0000001240)=""/4096, 0x1000}, {&(0x7f0000002240)=""/153, 0x99}, {&(0x7f0000002300)=""/70, 0x46}], 0x3, &(0x7f00000023c0)=""/158, 0x9e}}], 0x6, 0x2, 0x0) add_key$user(0x0, 0x0, &(0x7f0000000540)="7e5112", 0x3, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r7 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r7, r6, 0x0) socket$unix(0x1, 0x1, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r7, r6, 0xffffffffffffffff) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040)={0x0, 0x0}, 0x8) r10 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000000c0)=r9, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000200)={r10, r8, 0x4}, 0x5) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 3.658338941s ago: executing program 4 (id=523): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x103080, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x7c, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1000001}, @CTA_NAT_SRC={0x24, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @loopback}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}]}]}]}, 0x7c}}, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f"], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.450992635s ago: executing program 2 (id=524): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = dup(r0) ioctl$INCFS_IOC_FILL_BLOCKS(r0, 0x80106720, &(0x7f0000000780)={0x0, 0x0}) sendmsg$inet6(r1, &(0x7f0000000540)={&(0x7f00000000c0)={0xa, 0x4e24, 0x8004, @loopback, 0x7fff}, 0x1c, 0x0}, 0x400d4) openat(0xffffffffffffff9c, 0x0, 0x40042, 0x1) socket$unix(0x1, 0x5, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x10}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x101000, 0x800, 0x3, 0x1}, 0x20) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r2, &(0x7f00000001c0)={0x2c, 0x8}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) clock_adjtime(0x5, &(0x7f00000001c0)={0x8b8d, 0x9, 0x10, 0x0, 0x0, 0xfffffffffffffffa, 0x0, 0xfffffffffffffffd, 0x0, 0xffffffffffffffff, 0x1, 0x0, 0xfffffffd, 0x7, 0x0, 0x3, 0x2000000003, 0x0, 0x82a, 0x0, 0xd, 0x0, 0x0, 0x0, 0xfffffffffffffffd}) 2.410580892s ago: executing program 1 (id=525): getpgid(0x0) capset(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x55, &(0x7f0000000180)=ANY=[@ANYBLOB="12010002020000402505a7a400010000000109024300020100c001090400000102020100052400100104240202052401000105240600010705810308000a09040100020a00000007058202000200070503020002"], 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./dev/ttyACM0\x00', 0x2, 0x1) syz_usb_control_io(r0, 0x0, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0xfffffffffffffffa) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000003c0), 0x106, 0xa}}, 0x20) 2.305881878s ago: executing program 4 (id=526): add_key$user(0x0, 0x0, &(0x7f00000000c0)="a8a638d9da", 0x5, 0xfffffffffffffffe) r0 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x3}, &(0x7f00000007c0)="3ee4d3e05f208f90291d11b70ea30ae88868cfb319b60e4bd0d384ca2ef892d6f03bea1775650deac9e96f2df3b08aac8ab182883847815e0db4605056bb05799e6051c94cc896778e55e3bac48b943284fc1f8de280a36aa75b75ed0b3f2b4072e0d8699977ade6e8bf8af73d16b3ee8183a7aeac1705030dc9880d26d7f67f6facd67dae2754d9122aabd69e22dccb8012f2c14136093a0c08c0d2d67a55e93f7af01a0878c7defc9dd117433b192345362b6de697423db017b54d090e1bdf7757f909dd20dc7c1c00a668895a4565a0306afb9c405479b50db3d956363bbd90a086d6202e74d2fbf73dc1008a24900ffd83cdd5c2a00fbb54eb65317e6d04618af9a5b6fc791d10e1ef2d011705144a47732fe81a114e9e08f5d8f6c861000b7e0d66f65de1228903635698bfcb6247698276ae176b747c71ed13a3a651ab9fd750703974b4fccc350c2a084c5da125c068cc9f8d12212a315c30500d6eb900000000000000000037b64498e6e571ab87654b60442cb42495c2f8a062dbfd47eba5bf01bb2cf5e6750ad653351f806464fa7aaea7a52d4d495c3b1acb1eb3c85335dc75c011134e2c86145f569364d05d32ff6d335a6fe448b0e16965584225708e5dec0f6e0812076a34579b607577319e92706a30ed04e3ebd31d1fe442a7bed3c6812161e2f0b9b3ff2146e7a01b8b521669bdd2bf863c1ae498756d2d16", 0x201, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r0, r1, r2}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={'sha256\x00'}}) 2.242606534s ago: executing program 3 (id=527): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x2c000) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func={0x0, 0x0, 0x0, 0x90}]}}, 0x0, 0x26, 0x0, 0x1}, 0x20) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x840}, 0x84) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x7, 0x6, 0x9, 0x0, 0xffffffffffffffff, 0x100}, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0xb, 0x9, 0x0, 0x1, 0x20000000}, {0x66, 0x0, 0x0, 0x256c6c64}}, [@printk={@ld, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x5, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x15}}], {{0x7, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) r4 = accept$alg(0xffffffffffffffff, 0x0, 0x0) r5 = dup3(r4, 0xffffffffffffffff, 0x0) write$FUSE_INIT(r5, &(0x7f0000002380)={0x50, 0x0, 0x0, {0x7, 0x2d, 0x3, 0x200000, 0xfffa, 0x1000, 0x53d, 0x3, 0x0, 0x0, 0x80, 0x5}}, 0x50) bind$alg(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x40800) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00), 0x0, 0x1, 0x2) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000080)={0x2, 0x0, [{0x10, 0x0, 0xdb57}, {0x10, 0x0, 0x8}]}) 2.188414387s ago: executing program 4 (id=528): socket$nl_netfilter(0x10, 0x3, 0xc) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x88) r1 = dup2(r0, r0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f00000003c0)={'\x00', 0x40, 0xb, 0x5, 0x1, 0x101}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r3, &(0x7f0000000140)=[{&(0x7f0000000080)="c2", 0x1}], 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x200400, 0x0) fstatfs(0xffffffffffffffff, &(0x7f0000000500)=""/267) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r6, 0x0, 0xf3a, 0x0) write$cgroup_pid(r6, &(0x7f0000000000), 0xffffff98) splice(r2, 0x0, r6, 0x0, 0x82, 0xa) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2000020000004, &(0x7f0000000380)={0xffffffffffffffff}, 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r9, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000280)=0x1, r10, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r9, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r10, 0x7}}, 0x48) r11 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000440)={0xffffffffffffffff}, 0x111, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r11, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000280)=0x1, r12, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r11, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r12, 0x7}}, 0x48) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010427bd70000a0000002e00000008000300", @ANYRES32=r13, @ANYBLOB="050034000000000010004900"], 0x34}}, 0x0) r14 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) ioctl$SNDCTL_DSP_SETFMT(r14, 0xc0045005, &(0x7f0000000640)=0x10) 2.111358557s ago: executing program 2 (id=529): socket(0x400000000010, 0x3, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_LEAVE_IBSS(r1, 0x0, 0x80) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001840)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={&(0x7f00000018c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r0, @ANYBLOB="09082d9d7000fddbdf2568000000"], 0x14}, 0x1, 0x0, 0x0, 0x24000090}, 0x24080888) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x30}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xa, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r8) 1.594402786s ago: executing program 3 (id=530): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f00000001c0)={'ipvs\x00'}, &(0x7f0000000280)=0x1e) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0xcaf8, 0x40000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000380)={0xff, 0x3, 0xd83f}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000002c0)={0x8, 0xd7, 0x8}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0x96b, 0x1, 0x400}) r4 = syz_open_dev$dri(&(0x7f0000000180), 0xcaf8, 0x40000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000380)={0xff, 0x3, 0xd83f}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000380)={0x8, 0x4c, 0x2ba5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000100)={0x1, 0x3, 0x9}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r5, 0xc00464b4, &(0x7f0000000180)={r6}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f0000000100)={r6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f00000002c0)={0x8, 0xd7, 0x8}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0x96e, 0xb, 0x400}) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r9, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r8, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r9, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}, 0x0) ioctl$TUNGETFEATURES(r10, 0xff09, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000900)=ANY=[@ANYBLOB="40000000100039042abd70000000000000000000", @ANYRES32=r7, @ANYBLOB="011802000311000020001280080001007369740014000290080200ac1e0001000000000000000000"], 0x40}, 0x1, 0x0, 0x0, 0x40054d0}, 0x4000020) dup2(r9, r9) socket$netlink(0x10, 0x3, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r11, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="f400c62edb386a7e06b6c993be3c5fdfd87c0000", @ANYRES16, @ANYBLOB="000109000000fedbdf254f00000018007a8014000200f5c0300a3c3828b14b530d780ca3d3933c007a802400010096d31db17957bcea7cd1291f1d860bd1f491b9f07ceecd7662ca04f6b535f0a30c0003007ae14680632a000008000400008000001c007a800c00030005a4005625fffdb10c000300800000000000800070007a801c00020046f08cc57196bb5d29016180d03ce866d42bb673e27aa9b50c000300b2b9413ff62bfa470c0003003dc523e77ad291f10c0003000000000000000000140001008fd3d98d4f2ea65f6b2e3f094c3378880c0003001286d1f83837d8120c000300995506c2f3a595dc"], 0xf4}, 0x1, 0x0, 0x0, 0x24008001}, 0x8866) 1.533629954s ago: executing program 3 (id=531): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace(0x8, r3) wait4(0x0, 0x0, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r5, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0x78b}) add_key$user(0x0, 0x0, &(0x7f00000000c0)="e094a858c8511b87dab1ffb4dfccfb1f8cfdc6612deb52770a86c344a9c763ae4001c623e03f14a09620831644307c9da1509d7922df9dfc92e1b6a06d238774f3b2259a14108b70208832482a6bc6585f8ac59ae81e721c761671a7aa38ee6e62c267f8d10ea0a0fd2bbb557e2d988591d6f4e94ad57187e7310be66789c67e9a8c1b6e224c659a601417f34d234f923c69f1937866b60cf28bda7d766d2d73fa0874ab36735a7c240b829f6db101b31976e4858fc42931c129ea1e99", 0xbd, 0xfffffffffffffffe) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0xffffffffffffffff, &(0x7f0000000280)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r6, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {r7, 0x0, 0x30, 0x30, 0x0, @in6={0x1b, 0x4e21, 0x4, @loopback}, @ib={0x1b, 0x0, 0x9, {"0100"}}}}, 0x118) 1.504549866s ago: executing program 4 (id=532): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000062d14406d0470084761000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) lsm_get_self_attr(0x67, &(0x7f0000000600)={0x0, 0x0, 0xc2, 0xa2, ""/162}, &(0x7f0000000440)=0xc2, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000a80)={0x24, &(0x7f00000007c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.104459001s ago: executing program 0 (id=533): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x6c, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040b827ed0100000000000109022400010000000009040000010300000009210000200122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000b80)={0x24, 0x0, 0x0, &(0x7f0000000b00)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x9, "efb9ce47"}]}}, 0x0}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000540)=ANY=[@ANYBLOB="1b2388a84b83"], 0xffdd) 618.378515ms ago: executing program 1 (id=534): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x70, 0x0, 0x5, 0x70bd26, 0x80, {{}, {@val={0x8, 0x3, r1}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x43, 0xe, {{{}, {}, @broadcast}, 0x9, @default, 0x4000, @void, @void, @void, @val={0x4, 0x6, {0x8, 0x8, 0x6, 0x1}}, @void, @val={0x5, 0x3, {0x7, 0xc7, 0x6}}, @void, @void, @val={0x3c, 0x4, {0x0, 0x8, 0xaf, 0xe9}}, @void, @val={0x72, 0x6}, @void, @void}}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x70}}, 0x20000014) 440.577786ms ago: executing program 3 (id=535): openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) (async) close(0x3) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x80c80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r2 = syz_open_procfs(0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000001380)) getdents(r3, &(0x7f0000001000)=""/4085, 0xff5) sendmsg$nl_generic(r2, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000140)=ANY=[@ANYBLOB="146638562f000000270a0a0000bd7000fbdbdfa206b84f36bbf6"], 0x14}, 0x1, 0x0, 0x0, 0x4008000}, 0xc004) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) (async) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f00000001c0)={'syzkaller0\x00', 0x600}) (async) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000200)={0x1, 0x2, 0x48}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) write(r4, &(0x7f0000000500)='0123:abcd:a6d', 0xd) (async) ioctl$KVM_GET_SREGS2(r4, 0x8140aecc, &(0x7f00000002c0)) 307.269018ms ago: executing program 1 (id=536): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x201, 0x4000003e, r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r2 = creat(&(0x7f0000000240)='./file1\x00', 0x0) io_setup(0x200, &(0x7f0000000140)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x2, 0x1, 0x0, r2, 0x0}]) 94.190372ms ago: executing program 3 (id=537): syz_open_dev$video4linux(0x0, 0x2a2, 0x101000) syz_emit_ethernet(0x2a, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{0x0}, {&(0x7f00000002c0)="90", 0x1}], 0x2) mkdir(&(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/platform/drivers/dummy_udc/unbind\x00', 0x1, 0x0) write(r1, &(0x7f0000000400)='dummy_udc.0', 0xb) write(0xffffffffffffffff, &(0x7f0000000400)='dummy_udc.0', 0xb) r2 = socket$nl_generic(0x10, 0x3, 0x10) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x6e, &(0x7f00000024c0)=ANY=[], 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000280)={0x5, 0x7fffffff, 0x5, 0xfffff8ac, 0x4, 0x0, [{0x9, 0x2, 0x6, '\x00', 0x201}, {0x4, 0xd, 0x9, '\x00', 0x1fe5587ea49497b6}, {0x3, 0x6, 0x7, '\x00', 0x100}, {0x8000000000000001, 0x80000000000, 0x3ee, '\x00', 0x400}]}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)) getsockopt$IP_VS_SO_GET_TIMEOUT(r4, 0x0, 0x486, 0x0, 0x0) setsockopt$PNPIPE_ENCAP(r4, 0x113, 0x1, &(0x7f0000000080)=0x1, 0x4) 93.746721ms ago: executing program 2 (id=538): add_key$user(0x0, 0x0, &(0x7f00000000c0)="a8a638d9da", 0x5, 0xfffffffffffffffe) r0 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x3}, &(0x7f00000007c0)="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", 0x201, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r0, r1, r2}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={'sha256\x00'}}) 84.271216ms ago: executing program 1 (id=539): timer_create(0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mtu(r4, 0x0, 0xa, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFCONF(r5, 0x8912, &(0x7f0000000200)=@req={0x28, &(0x7f00000001c0)={'macsec0\x00', @ifru_mtu=0xfffffffc}}) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @local, 0x7}, 0x1c) listen(r6, 0xfffffffc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) socket$inet_mptcp(0x2, 0x1, 0x106) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x82042, 0x19d) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) r7 = fanotify_init(0xf00, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') symlink(&(0x7f00000012c0)='.\x00', &(0x7f0000001300)='./bus\x00') fanotify_mark(r7, 0x1, 0x10001049, r0, 0x0) fanotify_init(0x10, 0x1000) 0s ago: executing program 2 (id=540): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = dup(r0) ioctl$INCFS_IOC_FILL_BLOCKS(r0, 0x80106720, &(0x7f0000000780)={0x0, 0x0}) sendmsg$inet6(r1, &(0x7f0000000540)={&(0x7f00000000c0)={0xa, 0x4e24, 0x8004, @loopback, 0x7fff}, 0x1c, &(0x7f0000000440)}, 0x400d4) openat(0xffffffffffffff9c, 0x0, 0x40042, 0x1) socket$unix(0x1, 0x5, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x10}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x101000, 0x800, 0x3, 0x1}, 0x20) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r2, &(0x7f00000001c0)={0x2c, 0x8}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) clock_adjtime(0x5, &(0x7f00000001c0)={0x8b8d, 0x9, 0x10, 0x0, 0x0, 0xfffffffffffffffa, 0x0, 0xfffffffffffffffd, 0x0, 0xffffffffffffffff, 0x1, 0x0, 0xfffffffd, 0x7, 0x0, 0x3, 0x2000000003, 0x0, 0x82a, 0x0, 0xd, 0x0, 0x0, 0x0, 0xfffffffffffffffd}) kernel console output (not intermixed with test programs): -22 [ 111.828175][ T1213] garmin_gps 2-1:1.0: Garmin GPS usb/tty converter detected [ 111.837915][ T9] usb 5-1: disable ehci-hcd to run US-144 [ 111.854483][ T9] usb 5-1: USB disconnect, device number 10 [ 111.867341][ T1213] usb 2-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 111.886467][ T24] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 111.892344][ T5991] udevd[5991]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 111.936492][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 111.944354][ T24] usb 1-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 111.953974][ T24] usb 1-1: too many configurations: 123, using maximum allowed: 8 [ 111.964488][ T24] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 111.976361][ T24] usb 1-1: can't read configurations, error -61 [ 111.977391][ T5706] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 112.006594][ T5706] usb 4-1: device descriptor read/8, error -71 [ 112.035322][ T6427] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.044207][ T6427] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.052123][ T5598] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 112.054088][ T1213] usb 2-1: USB disconnect, device number 11 [ 112.071933][ T1213] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 112.082071][ T1213] garmin_gps 2-1:1.0: device disconnected [ 112.116197][ T5706] usb usb4-port1: unable to enumerate USB device [ 112.136175][ T24] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 112.156372][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 112.161989][ T24] usb 1-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 112.171522][ T24] usb 1-1: too many configurations: 123, using maximum allowed: 8 [ 112.180903][ T24] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 112.186033][ T5598] usb 3-1: device descriptor read/64, error -71 [ 112.188534][ T24] usb 1-1: can't read configurations, error -61 [ 112.202492][ T24] usb usb1-port1: unable to enumerate USB device [ 112.292705][ T6433] overlayfs: missing 'workdir' [ 112.856389][ T5598] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 112.986673][ T5598] usb 3-1: device descriptor read/64, error -71 [ 113.516866][ T5706] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 113.833357][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 113.833368][ T30] audit: type=1400 audit(1786294123.513:454): avc: denied { remount } for pid=6448 comm="syz.3.216" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 113.891679][ T6446] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 113.948677][ T5598] usb usb3-port1: attempt power cycle [ 113.957917][ T30] audit: type=1400 audit(1786294123.593:455): avc: denied { bind } for pid=6448 comm="syz.3.216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 114.006943][ T30] audit: type=1400 audit(1786294123.613:456): avc: denied { write } for pid=6448 comm="syz.3.216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 114.027581][ T5706] usb 2-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 114.039546][ T30] audit: type=1400 audit(1786294123.683:457): avc: denied { name_bind } for pid=6453 comm="syz.0.217" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 114.067871][ T30] audit: type=1400 audit(1786294123.683:458): avc: denied { node_bind } for pid=6453 comm="syz.0.217" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 114.147501][ T5706] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 114.164619][ T5706] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 114.198185][ T5706] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.229517][ T5706] usb 2-1: config 0 descriptor?? [ 114.354461][ T6458] overlayfs: missing 'lowerdir' [ 114.747415][ T5598] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 114.778076][ T5598] usb 3-1: device descriptor read/8, error -71 [ 114.931042][ T30] audit: type=1400 audit(1786294124.602:459): avc: denied { shutdown } for pid=6461 comm="syz.4.219" lport=46773 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 115.010693][ T6465] syzkaller0: entered promiscuous mode [ 115.024598][ T6465] syzkaller0: entered allmulticast mode [ 115.370202][ T30] audit: type=1400 audit(1786294125.052:460): avc: denied { connect } for pid=6470 comm="syz.4.222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 115.665836][ T5714] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 115.724707][ T4916] Bluetooth: hci3: link tx timeout [ 115.731355][ T4916] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 115.740518][ T4916] Bluetooth: hci3: link tx timeout [ 115.745662][ T4916] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 115.758365][ T4916] Bluetooth: hci3: link tx timeout [ 115.766091][ T4916] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 115.789431][ T4916] Bluetooth: hci3: link tx timeout [ 115.794660][ T4916] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 115.802845][ T4916] Bluetooth: hci3: link tx timeout [ 115.808420][ T4916] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 115.848313][ T5714] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 115.862334][ T5714] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.110603][ T5714] cdc_acm 1-1:1.0: ttyACM0: USB ACM device [ 116.284169][ T30] audit: type=1400 audit(1786294125.962:461): avc: denied { setattr } for pid=6489 comm="syz.2.225" name="filter" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 116.353033][ T30] audit: type=1400 audit(1786294126.002:462): avc: denied { read } for pid=6489 comm="syz.2.225" name="filter" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 116.779110][ T10] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 116.940062][ T10] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 116.965625][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.064019][ T6501] overlayfs: missing 'workdir' [ 117.195319][ T10] cdc_acm 5-1:1.0: ttyACM1: USB ACM device [ 117.628802][ T10] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 117.780631][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 117.788486][ T10] usb 3-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 117.798611][ T10] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 117.809942][ T5608] Bluetooth: hci3: command 0x0406 tx timeout [ 117.821525][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.829640][ T10] usb 3-1: Product: syz [ 117.834039][ T10] usb 3-1: Manufacturer: syz [ 117.848881][ T10] usb 3-1: SerialNumber: syz [ 117.866456][ T5706] usbhid 2-1:0.0: can't add hid device: -71 [ 117.872578][ T5706] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 117.883345][ T5706] usb 2-1: USB disconnect, device number 12 [ 117.947715][ T5594] block device autoloading is deprecated and will be removed. [ 117.960013][ T5609] udevd[5609]: symlink '../../loop1' '/dev/disk/by-diskseq/69.tmp-b7:1' failed: Read-only file system [ 118.124079][ T10] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 118.566315][ T30] audit: type=1400 audit(1786294128.131:463): avc: denied { connect } for pid=6506 comm="syz.1.231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 118.601230][ T6508] syzkaller1: entered promiscuous mode [ 118.606821][ T6508] syzkaller1: entered allmulticast mode [ 118.615176][ T1213] usb 1-1: USB disconnect, device number 16 [ 118.616200][ T10] usb 3-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 118.630276][ T10] usb 3-1: found format II with max.bitrate = 4, frame size=7372 [ 118.977907][ T5609] udevd[5609]: symlink '../../loop1' '/dev/disk/by-diskseq/69.tmp-b7:1' failed: Read-only file system [ 119.012883][ T5609] udevd[5609]: symlink '../../loop1' '/dev/disk/by-diskseq/69.tmp-b7:1' failed: Read-only file system [ 119.026594][ T10] usb 3-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 119.026636][ T1213] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 119.047390][ T10] usb 3-1: found format II with max.bitrate = 4, frame size=7372 [ 119.091146][ T4916] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 119.093236][ T5607] Bluetooth: hci5: command 0x1003 tx timeout [ 119.220333][ T1213] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 119.231185][ T10] usb 3-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 119.231783][ T1213] usb 1-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 119.231812][ T1213] usb 1-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 119.231835][ T1213] usb 1-1: config 1 interface 0 has no altsetting 0 [ 119.235063][ T1213] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.286157][ T1213] usb 1-1: Product: syz [ 119.299609][ T5598] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 119.309055][ T1213] usb 1-1: Manufacturer: syz [ 119.316580][ T1213] usb 1-1: SerialNumber: syz [ 119.326369][ T10] usb 3-1: USB disconnect, device number 15 [ 119.352498][ T6512] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 119.367946][ T6512] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 119.390601][ T5991] udevd[5991]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 119.460980][ T5598] usb 2-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 119.471197][ T5598] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 119.482739][ T5598] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.507892][ T5598] as10x_usb: device has been detected [ 119.522165][ T5598] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 119.557534][ T5598] usb 2-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 119.558386][ T5785] usb 5-1: USB disconnect, device number 11 [ 119.635287][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 119.635302][ T30] audit: type=1400 audit(1786294129.310:467): avc: denied { firmware_load } for pid=5598 comm="kworker/0:3" path="/lib/firmware/as102_data1_st.hex" dev="sda1" ino=297 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 119.636529][ T5598] as10x_usb: error during firmware upload part1 [ 119.676182][ T5598] Registered device Abilis Systems DVB-Titan [ 119.802400][ T5598] usb 2-1: USB disconnect, device number 13 [ 119.836524][ T1213] rtl8150 1-1:1.0: couldn't reset the device [ 119.915939][ T30] audit: type=1400 audit(1786294129.570:468): avc: denied { write } for pid=6526 comm="syz.4.239" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 120.121115][ T5991] udevd[5991]: symlink '../../loop1' '/dev/disk/by-diskseq/69.tmp-b7:1' failed: Read-only file system [ 120.268659][ T24] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 120.269800][ T6534] overlayfs: missing 'workdir' [ 120.277482][ T1213] rtl8150 1-1:1.0: probe with driver rtl8150 failed with error -5 [ 120.284530][ T5598] Unregistered device Abilis Systems DVB-Titan [ 120.297772][ T1213] usb 1-1: USB disconnect, device number 17 [ 120.306804][ T5598] as10x_usb: device has been disconnected [ 120.406266][ T6539] netlink: 4 bytes leftover after parsing attributes in process `syz.0.242'. [ 120.454217][ T5991] udevd[5991]: symlink '../../loop1' '/dev/disk/by-diskseq/69.tmp-b7:1' failed: Read-only file system [ 120.472987][ T24] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 120.477724][ T6541] netlink: 36 bytes leftover after parsing attributes in process `syz.1.243'. [ 120.493999][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 120.510033][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 120.524309][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.534724][ T24] usb 4-1: config 0 descriptor?? [ 120.541537][ T30] audit: type=1400 audit(1786294130.220:469): avc: denied { nlmsg_write } for pid=6540 comm="syz.1.243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 120.563927][ T24] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 120.590334][ T5785] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 120.625347][ T6543] ip6gre1: entered allmulticast mode [ 120.637232][ T5706] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 120.642342][ T1148] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 120.684929][ T5991] udevd[5991]: symlink '../../loop1' '/dev/disk/by-diskseq/69.tmp-b7:1' failed: Read-only file system [ 120.709349][ T6547] syz_tun: entered allmulticast mode [ 120.732275][ T30] audit: type=1807 audit(1786294130.409:470): action=measure res=1 [ 120.733517][ T6545] ima: policy update failed [ 120.750342][ T30] audit: type=1807 audit(1786294130.409:471): UNKNOWN=0x0000000000000000 res=0 [ 120.751562][ T24] usb 4-1: USB disconnect, device number 10 [ 120.765536][ T30] audit: type=1802 audit(1786294130.409:472): pid=6545 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=update_policy cause=invalid-policy comm="syz.1.245" res=0 errno=0 [ 120.766061][ T5785] usb 5-1: Using ep0 maxpacket: 32 [ 120.807830][ T5785] usb 5-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 120.810845][ T5706] usb 3-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 120.826821][ T5785] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 120.829166][ T30] audit: type=1802 audit(1786294130.469:473): pid=6545 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=policy_update cause=failed comm="syz.1.245" res=0 errno=0 [ 120.857862][ T5785] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.866893][ T5706] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.878389][ T5706] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 120.878675][ T5785] usb 5-1: Product: syz [ 120.890599][ T5706] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.901498][ T5785] usb 5-1: Manufacturer: syz [ 120.915839][ T5706] usb 3-1: config 0 descriptor?? [ 120.923006][ T5609] udevd[5609]: symlink '../../loop1' '/dev/disk/by-diskseq/69.tmp-b7:1' failed: Read-only file system [ 120.934562][ T5785] usb 5-1: SerialNumber: syz [ 120.947254][ T5785] usb 5-1: config 0 descriptor?? [ 120.961245][ T5785] cdc_ether 5-1:0.0: missing cdc header descriptor [ 120.979922][ T5785] usb 5-1: unsupported MDLM descriptors [ 120.980770][ T30] audit: type=1326 audit(1786294130.659:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6524 comm="syz.3.238" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe47179e0d9 code=0x0 [ 121.043516][ T5991] udevd[5991]: symlink '../../loop1' '/dev/disk/by-diskseq/69.tmp-b7:1' failed: Read-only file system [ 121.149951][ T30] audit: type=1400 audit(1786294130.819:475): avc: denied { write } for pid=6560 comm="syz.0.250" name="usb_gadget" dev="configfs" ino=2019 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 121.185727][ T30] audit: type=1400 audit(1786294130.819:476): avc: denied { create } for pid=6560 comm="syz.0.250" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 121.185989][ T629] nvmet: connect request for invalid subsystem t! [ 121.248303][ T6561] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "t" [ 121.411235][ T5785] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 121.540728][ T24] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 121.561260][ T5785] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 121.573399][ T5785] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 121.581737][ T5785] usb 2-1: config 0 has no interface number 0 [ 121.587887][ T5785] usb 2-1: config 0 interface 41 has no altsetting 0 [ 121.598977][ T5785] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.607584][ T5785] usb 2-1: Product: syz [ 121.614064][ T5785] usb 2-1: Manufacturer: syz [ 121.618926][ T5785] usb 2-1: SerialNumber: syz [ 121.627899][ T5785] usb 2-1: config 0 descriptor?? [ 121.700856][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 121.707857][ T24] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 121.718532][ T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 121.729602][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.741452][ T24] usb 1-1: config 0 descriptor?? [ 121.748903][ T24] iowarrior 1-1:0.0: no interrupt-in endpoint found [ 121.959966][ T6566] loop6: detected capacity change from 0 to 524287999 [ 121.986015][ T5598] usb 1-1: USB disconnect, device number 18 [ 122.148451][ T5609] udevd[5609]: symlink '../../loop6' '/dev/disk/by-diskseq/70.tmp-b7:6' failed: Read-only file system [ 122.476387][ T6557] mac80211_hwsim hwsim4 : renamed from wlan0 (while UP) [ 122.591794][ T6572] netlink: 8 bytes leftover after parsing attributes in process `syz.3.252'. [ 122.601490][ T6572] netlink: 12 bytes leftover after parsing attributes in process `syz.3.252'. [ 122.614619][ T5785] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffb9 [ 122.672270][ T6574] netlink: 284 bytes leftover after parsing attributes in process `syz.0.253'. [ 122.710412][ T24] usb 5-1: USB disconnect, device number 12 [ 122.717397][ T5785] CoreChips 2-1:0.41: probe with driver CoreChips failed with error -71 [ 122.719329][ T6574] tmpfs: Bad value for 'mpol' [ 122.767670][ T5785] usb 2-1: USB disconnect, device number 14 [ 122.808772][ T6578] netlink: 4 bytes leftover after parsing attributes in process `syz.4.254'. [ 123.068720][ T6587] ima: policy update completed [ 123.160684][ T6589] FAULT_INJECTION: forcing a failure. [ 123.160684][ T6589] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 123.174788][ T6589] CPU: 1 UID: 0 PID: 6589 Comm: syz.3.259 Not tainted syzkaller #0 PREEMPT(full) [ 123.174814][ T6589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 123.174825][ T6589] Call Trace: [ 123.174831][ T6589] [ 123.174837][ T6589] dump_stack_lvl+0x100/0x190 [ 123.174866][ T6589] should_fail_ex.cold+0x5/0xa [ 123.174889][ T6589] _copy_from_user+0x2e/0xd0 [ 123.174916][ T6589] copy_msghdr_from_user+0x9f/0x4c0 [ 123.174935][ T6589] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 123.174965][ T6589] ___sys_sendmsg+0x106/0x1e0 [ 123.174984][ T6589] ? __pfx____sys_sendmsg+0x10/0x10 [ 123.175000][ T6589] ? __lock_acquire+0x49f/0x1a40 [ 123.175023][ T6589] ? get_pid_task+0x106/0x250 [ 123.175069][ T6589] __sys_sendmsg+0x160/0x210 [ 123.175100][ T6589] ? __pfx___sys_sendmsg+0x10/0x10 [ 123.175135][ T6589] do_syscall_64+0x115/0x870 [ 123.175159][ T6589] ? clear_bhb_loop+0x70/0xc0 [ 123.175181][ T6589] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.175199][ T6589] RIP: 0033:0x7fe47179e0d9 [ 123.175215][ T6589] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 123.175236][ T6589] RSP: 002b:00007fe46f9f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 123.175253][ T6589] RAX: ffffffffffffffda RBX: 00007fe471a25fa0 RCX: 00007fe47179e0d9 [ 123.175265][ T6589] RDX: 0000000024044080 RSI: 0000200000000240 RDI: 0000000000000003 [ 123.175276][ T6589] RBP: 00007fe46f9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 123.175286][ T6589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 123.175296][ T6589] R13: 00007fe471a26038 R14: 00007fe471a25fa0 R15: 00007ffc6c442b38 [ 123.175321][ T6589] [ 123.490060][ T5991] udevd[5991]: symlink '../../loop1' '/dev/disk/by-diskseq/69.tmp-b7:1' failed: Read-only file system [ 123.543700][ T5706] usbhid 3-1:0.0: can't add hid device: -71 [ 123.555200][ T5706] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 123.589879][ T5706] usb 3-1: USB disconnect, device number 16 [ 123.767407][ T6600] netlink: 284 bytes leftover after parsing attributes in process `syz.2.263'. [ 123.811849][ T5598] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 123.982948][ T5598] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 124.002793][ T5598] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 124.018286][ T5598] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 124.027001][ T5598] usb 2-1: Product: syz [ 124.031183][ T5598] usb 2-1: Manufacturer: syz [ 124.036092][ T5598] usb 2-1: SerialNumber: syz [ 124.143071][ T5706] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 124.162191][ T5785] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 124.258313][ T5598] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 15 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 124.313137][ T5785] usb 4-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 124.313283][ T5706] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 124.335899][ T5785] usb 4-1: config 0 has an invalid interface number: 69 but max is 0 [ 124.348594][ T5706] usb 3-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 124.357062][ T5785] usb 4-1: config 0 has no interface number 0 [ 124.360695][ T5706] usb 3-1: config 253 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 124.379443][ T5706] usb 3-1: config 253 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 124.382895][ T5785] usb 4-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 124.399376][ T5706] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 124.411094][ T6608] use of bytesused == 0 is deprecated and will be removed in the future, [ 124.422309][ T6608] use the actual size instead. [ 124.422378][ T5785] usb 4-1: config 0 interface 69 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 124.427205][ T5706] usb 3-1: SerialNumber: syz [ 124.538955][ T5785] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.542528][ T187] usb 2-1: USB disconnect, device number 15 [ 124.552153][ T5785] usb 4-1: Product: syz [ 124.564809][ T5785] usb 4-1: Manufacturer: syz [ 124.570496][ T187] usblp0: removed [ 124.574532][ T5785] usb 4-1: SerialNumber: syz [ 124.612303][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 124.955910][ T5706] rndis_host 3-1:253.0: RNDIS init failed, -71 [ 125.007701][ T5706] rndis_host 3-1:253.0: probe with driver rndis_host failed with error -71 [ 125.148952][ T5706] usb 3-1: USB disconnect, device number 17 [ 125.302567][ T30] kauditd_printk_skb: 56 callbacks suppressed [ 125.302584][ T30] audit: type=1800 audit(1786294134.807:533): pid=5991 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=123511 res=0 errno=0 [ 125.347699][ T5609] udevd[5609]: symlink '../../loop1' '/dev/disk/by-diskseq/69.tmp-b7:1' failed: Read-only file system [ 125.349933][ T30] audit: type=1800 audit(1786294134.897:534): pid=5991 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=123532 res=0 errno=0 [ 125.381199][ T30] audit: type=1800 audit(1786294134.967:535): pid=4965 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=121605 res=0 errno=0 [ 125.404419][ T30] audit: type=1800 audit(1786294135.057:536): pid=5989 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=123616 res=0 errno=0 [ 125.425943][ T5785] usb 4-1: config 0 descriptor?? [ 125.431791][ T6605] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 125.441889][ T30] audit: type=1800 audit(1786294135.107:537): pid=5989 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=123648 res=0 errno=0 [ 125.465170][ T5785] cyberjack 4-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 125.481927][ T5785] cyberjack ttyUSB0: usb_submit_urb(read int) failed [ 125.495607][ T6615] ima: policy update completed [ 125.505037][ T5785] usb 4-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 125.512958][ T6614] netlink: 4 bytes leftover after parsing attributes in process `syz.1.268'. [ 125.514699][ T30] audit: type=1800 audit(1786294135.117:538): pid=5989 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=123623 res=0 errno=0 [ 125.607613][ T30] audit: type=1800 audit(1786294135.117:539): pid=5989 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=123624 res=0 errno=0 [ 125.680544][ T30] audit: type=1800 audit(1786294135.117:540): pid=4965 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15713 res=0 errno=0 [ 125.764402][ T30] audit: type=1807 audit(1786294135.177:541): action=measure res=1 [ 125.796602][ T30] audit: type=1802 audit(1786294135.187:542): pid=6615 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=policy_update cause=completed comm="syz.4.269" res=1 errno=0 [ 125.927480][ T6624] gretap1: entered promiscuous mode [ 126.408682][ T5991] udevd[5991]: symlink '../../loop1' '/dev/disk/by-diskseq/69.tmp-b7:1' failed: Read-only file system [ 126.413923][ T5714] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 126.424598][ T6634] netlink: 'syz.1.275': attribute type 10 has an invalid length. [ 126.561003][ T6634] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 126.601448][ T6634] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 126.620390][ T5785] usb 4-1: USB disconnect, device number 11 [ 126.644668][ T5714] usb 3-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 126.658236][ T5785] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 126.671083][ T5714] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 126.686676][ T5785] cyberjack 4-1:0.69: device disconnected [ 126.692501][ T5714] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 126.708816][ T5714] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.724189][ T5714] usb 3-1: config 0 descriptor?? [ 126.752126][ T5989] udevd[5989]: symlink '../../loop1' '/dev/disk/by-diskseq/69.tmp-b7:1' failed: Read-only file system [ 126.913444][ T5706] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 127.076500][ T5706] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 127.103643][ T5706] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.328606][ T5706] cdc_acm 5-1:1.0: ttyACM0: USB ACM device [ 127.428908][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 127.439766][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 127.749181][ T6668] ima: policy update completed [ 128.345288][ T6682] netlink: 4 bytes leftover after parsing attributes in process `syz.0.286'. [ 128.935104][ T5785] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 128.981726][ T5991] udevd[5991]: symlink '../../loop1' '/dev/disk/by-diskseq/69.tmp-b7:1' failed: Read-only file system [ 129.117374][ T5785] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 129.154936][ T5785] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 129.160269][ T5991] udevd[5991]: symlink '../../loop1' '/dev/disk/by-diskseq/69.tmp-b7:1' failed: Read-only file system [ 129.190732][ T5785] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.219459][ T5785] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.234360][ T6699] input: syz0 as /devices/virtual/input/input8 [ 129.249022][ T5785] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 129.284128][ T5785] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 129.304268][ T5785] usb 1-1: Manufacturer: syz [ 129.325834][ T5785] usb 1-1: config 0 descriptor?? [ 129.400903][ T5609] udevd[5609]: symlink '../../loop1' '/dev/disk/by-diskseq/69.tmp-b7:1' failed: Read-only file system [ 129.416534][ T6703] ima: policy update failed [ 129.496385][ T5609] udevd[5609]: symlink '../../loop1' '/dev/disk/by-diskseq/69.tmp-b7:1' failed: Read-only file system [ 129.558390][ T5714] usbhid 3-1:0.0: can't add hid device: -71 [ 129.570923][ T5714] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 129.615828][ T5714] usb 3-1: USB disconnect, device number 18 [ 129.657289][ T9] usb 5-1: USB disconnect, device number 13 [ 129.765598][ T5785] appleir 0003:05AC:8243.0002: unknown main item tag 0x0 [ 129.833553][ T5785] appleir 0003:05AC:8243.0002: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 129.876791][ T6722] netlink: 16 bytes leftover after parsing attributes in process `syz.1.300'. [ 129.917395][ T6722] netlink: 16 bytes leftover after parsing attributes in process `syz.1.300'. [ 130.063887][ T5965] udevd[5965]: symlink '../../loop1' '/dev/disk/by-diskseq/69.tmp-b7:1' failed: Read-only file system [ 130.069244][ T5785] usb 1-1: USB disconnect, device number 19 [ 130.390985][ T30] kauditd_printk_skb: 106 callbacks suppressed [ 130.391001][ T30] audit: type=1800 audit(1786294140.055:649): pid=4965 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15467 res=0 errno=0 [ 130.512798][ T30] audit: type=1400 audit(1786294140.185:650): avc: denied { module_request } for pid=6728 comm="syz.1.302" kmod="fs-" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 130.544340][ T6725] fido_id[6725]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 130.589261][ T30] audit: type=1800 audit(1786294140.185:651): pid=4965 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=121605 res=0 errno=0 [ 130.714340][ T30] audit: type=1400 audit(1786294140.305:652): avc: denied { execmem } for pid=6726 comm="syz.2.301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 130.733879][ T30] audit: type=1400 audit(1786294140.384:653): avc: denied { read write } for pid=5595 comm="syz-executor" name="loop4" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 130.780818][ T30] audit: type=1400 audit(1786294140.384:654): avc: denied { open } for pid=5595 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 130.826231][ T6731] syz.2.301 uses obsolete (PF_INET,SOCK_PACKET) [ 130.848966][ T5989] udevd[5989]: symlink '../../loop1' '/dev/disk/by-diskseq/69.tmp-b7:1' failed: Read-only file system [ 130.881512][ T30] audit: type=1400 audit(1786294140.414:655): avc: denied { ioctl } for pid=5595 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 130.923155][ T6737] ima: policy update failed [ 130.933533][ T30] audit: type=1400 audit(1786294140.494:656): avc: denied { prog_load } for pid=6726 comm="syz.2.301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 130.956537][ T30] audit: type=1400 audit(1786294140.494:657): avc: denied { bpf } for pid=6726 comm="syz.2.301" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 131.004756][ T30] audit: type=1800 audit(1786294140.494:658): pid=4965 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15713 res=0 errno=0 [ 131.059972][ T5991] udevd[5991]: symlink '../../loop1' '/dev/disk/by-diskseq/69.tmp-b7:1' failed: Read-only file system [ 131.235548][ T24] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 131.316722][ T5706] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 131.367280][ T9] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 131.410034][ T6755] random: crng reseeded on system resumption [ 131.421213][ T24] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 131.441944][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.460216][ T24] usb 4-1: Product: syz [ 131.470330][ T24] usb 4-1: Manufacturer: syz [ 131.477919][ T5706] usb 2-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 131.488604][ T24] usb 4-1: SerialNumber: syz [ 131.488817][ T5706] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.508618][ T24] usb 4-1: config 0 descriptor?? [ 131.509087][ T5706] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 131.524731][ T5706] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.537726][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 131.556702][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.574637][ T5706] usb 2-1: config 0 descriptor?? [ 131.581647][ T1165] wlan1: Trigger new scan to find an IBSS to join [ 131.717229][ T5598] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 131.789410][ T9] cdc_acm 1-1:1.0: ttyACM0: USB ACM device [ 131.820261][ T24] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 131.876025][ T5598] usb 3-1: Using ep0 maxpacket: 32 [ 131.913584][ T5598] usb 3-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 132.003371][ T5598] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.164529][ T5598] usb 3-1: config 0 descriptor?? [ 132.363823][ T5598] gspca_main: sq930x-2.14.0 probing 041e:403c [ 132.536260][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 132.740886][ T6770] netlink: 20 bytes leftover after parsing attributes in process `syz.4.317'. [ 132.748489][ T5598] gspca_sq930x: ucbus_write failed -71 [ 132.758668][ T5598] sq930x 3-1:0.0: probe with driver sq930x failed with error -71 [ 132.772482][ T5598] usb 3-1: USB disconnect, device number 19 [ 133.630008][ T6783] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=384 (768 ns) > initial count (6 ns). Using initial count to start timer. [ 133.751087][ T24] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 133.773939][ T24] usb 4-1: USB disconnect, device number 12 [ 133.787448][ T1213] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 133.947655][ T1213] usb 3-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 133.963227][ T1213] usb 3-1: config 0 has no interfaces? [ 133.969695][ T1213] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.982696][ T1213] usb 3-1: config 0 descriptor?? [ 134.537706][ T5785] usb 1-1: USB disconnect, device number 20 [ 134.610026][ T5706] usbhid 2-1:0.0: can't add hid device: -71 [ 134.620752][ T1213] usb 3-1: USB disconnect, device number 20 [ 134.628311][ T13] wlan1: Trigger new scan to find an IBSS to join [ 134.635145][ T5706] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 134.695262][ T5706] usb 2-1: USB disconnect, device number 16 [ 134.910262][ T6804] overlayfs: missing 'lowerdir' [ 134.926456][ T6805] SELinux: security_context_str_to_sid (5] S9q#) failed with errno=-22 [ 135.021492][ T5594] block device autoloading is deprecated and will be removed. [ 135.068361][ T5609] udevd[5609]: symlink '../../loop1' '/dev/disk/by-diskseq/72.tmp-b7:1' failed: Read-only file system [ 135.108850][ T5598] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 135.139033][ T1213] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 135.155291][ T5991] udevd[5991]: symlink '../../loop1' '/dev/disk/by-diskseq/72.tmp-b7:1' failed: Read-only file system [ 135.267912][ T5598] usb 4-1: Using ep0 maxpacket: 8 [ 135.278201][ T5598] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 135.288883][ T5598] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 135.297558][ T1213] usb 1-1: Using ep0 maxpacket: 32 [ 135.297566][ T5598] usb 4-1: config 0 has no interface number 0 [ 135.297601][ T5598] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 135.297635][ T5598] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.332598][ T1213] usb 1-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 135.333173][ T5598] usb 4-1: config 0 descriptor?? [ 135.873166][ T30] kauditd_printk_skb: 149 callbacks suppressed [ 135.873182][ T30] audit: type=1400 audit(1786294145.532:808): avc: denied { read } for pid=6809 comm="syz.1.331" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 135.874580][ T5598] iowarrior 4-1:0.1: no interrupt-in endpoint found [ 135.967412][ T30] audit: type=1400 audit(1786294145.532:809): avc: denied { open } for pid=6809 comm="syz.1.331" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 135.990606][ T1213] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.992383][ T30] audit: type=1800 audit(1786294145.582:810): pid=5991 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=125150 res=0 errno=0 [ 136.022985][ T30] audit: type=1800 audit(1786294145.632:811): pid=5991 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=125179 res=0 errno=0 [ 136.069563][ T1213] usb 1-1: config 0 descriptor?? [ 136.095568][ T1213] gspca_main: sq930x-2.14.0 probing 041e:403c [ 136.105100][ T5706] usb 4-1: USB disconnect, device number 13 [ 136.119884][ T5714] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 136.150305][ T30] audit: type=1800 audit(1786294145.632:812): pid=5991 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=125157 res=0 errno=0 [ 136.172180][ T30] audit: type=1800 audit(1786294145.632:813): pid=5991 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=125158 res=0 errno=0 [ 136.194018][ T30] audit: type=1800 audit(1786294145.632:814): pid=5991 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=125159 res=0 errno=0 [ 136.216060][ T30] audit: type=1800 audit(1786294145.632:815): pid=5991 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=125199 res=0 errno=0 [ 136.237270][ T30] audit: type=1800 audit(1786294145.692:816): pid=4965 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15467 res=0 errno=0 [ 136.259798][ T30] audit: type=1800 audit(1786294145.752:817): pid=5609 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=125233 res=0 errno=0 [ 136.309902][ T5714] usb 5-1: unable to get BOS descriptor or descriptor too short [ 136.317969][ T5714] usb 5-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 136.328848][ T5714] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 136.344852][ T5714] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.353310][ T5714] usb 5-1: Product: syz [ 136.357505][ T5714] usb 5-1: Manufacturer: syz [ 136.362475][ T5714] usb 5-1: SerialNumber: syz [ 136.388445][ T5598] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 136.483451][ T5609] udevd[5609]: symlink '../../loop1' '/dev/disk/by-diskseq/72.tmp-b7:1' failed: Read-only file system [ 136.505698][ T1213] gspca_sq930x: ucbus_write failed -71 [ 136.516842][ T1213] sq930x 1-1:0.0: probe with driver sq930x failed with error -71 [ 136.531160][ T1213] usb 1-1: USB disconnect, device number 21 [ 136.540795][ T5598] usb 3-1: Using ep0 maxpacket: 32 [ 136.563410][ T6814] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.572621][ T6814] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.598280][ T5714] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 136.611313][ T6814] netlink: 8 bytes leftover after parsing attributes in process `syz.2.332'. [ 136.645807][ T5598] usb 3-1: unable to get BOS descriptor or descriptor too short [ 136.671469][ T5598] usb 3-1: New USB device found, idVendor=15c2, idProduct=ffe1, bcdDevice=bd.30 [ 136.699008][ T5598] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 136.717204][ T5598] usb 3-1: can't read configurations, error -71 [ 136.789102][ T5714] usb 5-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 136.810142][ T5714] usb 5-1: found format II with max.bitrate = 4, frame size=7372 [ 137.193215][ T5714] usb 5-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 137.217388][ T5714] usb 5-1: found format II with max.bitrate = 4, frame size=7372 [ 137.280753][ T6832] kernel read not supported for file /policy (pid: 6832 comm: syz.3.337) [ 137.345042][ T6836] SELinux: security_context_str_to_sid (5] S9q#) failed with errno=-22 [ 137.401200][ T5714] usb 5-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 137.613836][ T5714] usb 5-1: USB disconnect, device number 14 [ 137.614634][ C0] vcan0: j1939_tp_rxtimer: 0xffff888056bab800: rx timeout, send abort [ 137.738295][ T5991] udevd[5991]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 137.873074][ T5706] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 137.929973][ T5699] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 138.082762][ T5706] usb 2-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 138.115254][ C0] vcan0: j1939_tp_rxtimer: 0xffff888036a1d400: rx timeout, send abort [ 138.131052][ C0] vcan0: j1939_tp_rxtimer: 0xffff888056bab800: abort rx timeout. Force session deactivation [ 138.287111][ T5706] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.302919][ T5706] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 138.316331][ T5706] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.329840][ T5699] usb 3-1: unable to get BOS descriptor or descriptor too short [ 138.352629][ T5699] usb 3-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 138.371216][ T5706] usb 2-1: config 0 descriptor?? [ 138.392170][ T5699] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 138.431875][ T5699] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.468975][ T5699] usb 3-1: Product: syz [ 138.486794][ T5699] usb 3-1: Manufacturer: syz [ 138.506941][ T5699] usb 3-1: SerialNumber: syz [ 138.539447][ T1148] wlan1: Trigger new scan to find an IBSS to join [ 138.623847][ C0] vcan0: j1939_tp_rxtimer: 0xffff888036a1d400: abort rx timeout. Force session deactivation [ 138.778361][ T5699] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 138.793550][ T5706] hid (null): invalid report_count 1204730351 [ 138.828794][ T5706] hid-led 0003:27B8:01ED.0003: invalid report_count 1204730351 [ 138.859255][ T5706] hid-led 0003:27B8:01ED.0003: item 0 4 1 9 parsing failed [ 138.885727][ T5706] hid-led 0003:27B8:01ED.0003: probe with driver hid-led failed with error -22 [ 139.488695][ T5699] usb 3-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 139.499785][ T9] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 139.507521][ T5699] usb 3-1: found format II with max.bitrate = 4, frame size=7372 [ 139.660067][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 139.676318][ T9] usb 4-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 139.711277][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.742573][ T9] usb 4-1: config 0 descriptor?? [ 139.755326][ T9] gspca_main: sq930x-2.14.0 probing 041e:403c [ 139.903562][ T5699] usb 3-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 140.178905][ T1165] wlan1: Creating new IBSS network, BSSID 36:71:f2:4a:e5:9d [ 140.288353][ T6884] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.297208][ T6884] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.728149][ T9] gspca_sq930x: ucbus_write failed -71 [ 140.807681][ T6884] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 140.836091][ T6884] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 141.139828][ T9] sq930x 4-1:0.0: probe with driver sq930x failed with error -71 [ 141.147881][ T5699] usb 3-1: found format II with max.bitrate = 4, frame size=7372 [ 141.159006][ T5699] usb 3-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 141.169800][ T9] usb 4-1: USB disconnect, device number 14 [ 141.205923][ T5699] usb 3-1: USB disconnect, device number 23 [ 141.346867][ T6890] netlink: 48 bytes leftover after parsing attributes in process `syz.4.348'. [ 141.355804][ T30] kauditd_printk_skb: 97 callbacks suppressed [ 141.355817][ T30] audit: type=1800 audit(1786294150.939:915): pid=5609 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=125664 res=0 errno=0 [ 141.383939][ T30] audit: type=1800 audit(1786294150.939:916): pid=5609 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=125665 res=0 errno=0 [ 141.439777][ T6892] netlink: 48 bytes leftover after parsing attributes in process `syz.4.348'. [ 141.461909][ T5991] udevd[5991]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 141.496809][ T30] audit: type=1800 audit(1786294150.939:917): pid=5609 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=125666 res=0 errno=0 [ 141.558802][ T6896] overlayfs: missing 'lowerdir' [ 141.574978][ T30] audit: type=1800 audit(1786294151.079:918): pid=4965 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15713 res=0 errno=0 [ 141.636510][ T30] audit: type=1800 audit(1786294151.129:919): pid=5991 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=26844 res=0 errno=0 [ 141.688828][ T30] audit: type=1400 audit(1786294151.339:920): avc: denied { read } for pid=6899 comm="syz.3.353" name="rtc0" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 141.803444][ T30] audit: type=1400 audit(1786294151.339:921): avc: denied { open } for pid=6899 comm="syz.3.353" path="/dev/rtc0" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 141.833205][ T30] audit: type=1400 audit(1786294151.339:922): avc: denied { map } for pid=6899 comm="syz.3.353" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=14232 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 141.894730][ T30] audit: type=1400 audit(1786294151.339:923): avc: denied { read write } for pid=6899 comm="syz.3.353" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=14232 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 141.958806][ T30] audit: type=1800 audit(1786294151.379:924): pid=4965 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15467 res=0 errno=0 [ 142.015599][ T6884] ip6gre1: left allmulticast mode [ 142.051377][ T5785] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 142.061324][ T1148] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.100206][ T6890] bond1: peer notification delay (2365) is not a multiple of miimon (20), value rounded to 2360 ms [ 142.116790][ T6892] bond1: peer notification delay (2365) is not a multiple of miimon (20), value rounded to 2360 ms [ 142.133983][ T13] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.149214][ T13] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.164487][ T13] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.211836][ T5785] usb 4-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 142.224479][ T5785] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 142.235261][ T5785] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.265516][ T5785] as10x_usb: device has been detected [ 142.306708][ T5785] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 142.354434][ T5785] usb 4-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 143.107571][ T5785] as10x_usb: error during firmware upload part1 [ 143.155020][ T5785] Registered device Abilis Systems DVB-Titan [ 143.431992][ T5785] usb 2-1: USB disconnect, device number 17 [ 143.728001][ T5594] block device autoloading is deprecated and will be removed. [ 143.770211][ T5991] udevd[5991]: symlink '../../loop1' '/dev/disk/by-diskseq/73.tmp-b7:1' failed: Read-only file system [ 143.822005][ T6939] netlink: 24 bytes leftover after parsing attributes in process `syz.1.362'. [ 143.895209][ T6946] netlink: 48 bytes leftover after parsing attributes in process `syz.2.359'. [ 143.922120][ T6939] netlink: 4 bytes leftover after parsing attributes in process `syz.1.362'. [ 143.987696][ T6952] overlayfs: missing 'lowerdir' [ 144.112468][ T5593] block device autoloading is deprecated and will be removed. [ 144.128105][ T5609] udevd[5609]: symlink '../../loop2' '/dev/disk/by-diskseq/74.tmp-b7:2' failed: Read-only file system [ 144.142127][ T5785] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 144.257407][ T5699] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 144.313913][ T5785] usb 1-1: unable to get BOS descriptor or descriptor too short [ 144.785536][ T5785] usb 1-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 144.792203][ T5699] usb 2-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 144.805226][ T5785] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 144.823916][ T5785] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.832116][ T5785] usb 1-1: Product: syz [ 144.839383][ T5785] usb 1-1: Manufacturer: syz [ 144.839962][ T5699] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 144.860989][ T5785] usb 1-1: SerialNumber: syz [ 144.867311][ T1213] usb 4-1: USB disconnect, device number 15 [ 144.880436][ T5699] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 144.919788][ T1213] Unregistered device Abilis Systems DVB-Titan [ 144.924960][ T1213] as10x_usb: device has been disconnected [ 144.946607][ T5699] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.977532][ T5699] usb 2-1: Product: syz [ 144.992146][ T5699] usb 2-1: Manufacturer: syz [ 145.062979][ T5699] usb 2-1: SerialNumber: syz [ 145.095878][ T5785] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 145.126220][ T5989] udevd[5989]: symlink '../../loop2' '/dev/disk/by-diskseq/74.tmp-b7:2' failed: Read-only file system [ 145.702723][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 145.852805][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 146.321184][ T5785] usb 1-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 146.331281][ T5785] usb 1-1: found format II with max.bitrate = 4, frame size=7372 [ 146.389399][ T5699] usblp 2-1:1.0: usblp0: USB Bidirectional printer dev 18 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 146.438131][ T30] kauditd_printk_skb: 57 callbacks suppressed [ 146.438148][ T30] audit: type=1800 audit(1786294156.107:982): pid=5609 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=126989 res=0 errno=0 [ 146.520383][ T30] audit: type=1800 audit(1786294156.137:983): pid=5609 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=126990 res=0 errno=0 [ 146.584565][ T30] audit: type=1800 audit(1786294156.147:984): pid=5609 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=126969 res=0 errno=0 [ 146.649041][ T30] audit: type=1800 audit(1786294156.147:985): pid=5609 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=126991 res=0 errno=0 [ 146.721858][ T30] audit: type=1800 audit(1786294156.167:986): pid=5609 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=127035 res=0 errno=0 [ 146.784559][ T30] audit: type=1800 audit(1786294156.167:987): pid=4965 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=127052 res=0 errno=0 [ 146.907553][ T5785] usb 1-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 146.945033][ T30] audit: type=1800 audit(1786294156.616:988): pid=4965 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15590 res=0 errno=0 [ 147.033083][ T30] audit: type=1800 audit(1786294156.696:989): pid=4965 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15713 res=0 errno=0 [ 147.096769][ T9] usb 2-1: USB disconnect, device number 18 [ 147.114583][ T9] usblp0: removed [ 147.131132][ T30] audit: type=1800 audit(1786294156.796:990): pid=5991 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=126928 res=0 errno=0 [ 147.133831][ T5785] usb 1-1: USB disconnect, device number 22 [ 147.216476][ T30] audit: type=1800 audit(1786294156.796:991): pid=5991 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=126929 res=0 errno=0 [ 147.243345][ T6976] netlink: 15231 bytes leftover after parsing attributes in process `syz.3.374'. [ 147.316663][ T6978] 9p: Bad value for 'wfdno' [ 147.350799][ T5609] udevd[5609]: symlink '../../loop2' '/dev/disk/by-diskseq/74.tmp-b7:2' failed: Read-only file system [ 147.453987][ T5699] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 147.613741][ T5699] usb 5-1: Using ep0 maxpacket: 32 [ 147.621935][ T5699] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0103, bcdDevice= 0.40 [ 147.633826][ T5785] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 147.638259][ T5699] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.653055][ T5699] usb 5-1: Product: syz [ 147.657417][ T5598] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 147.666220][ T5699] usb 5-1: Manufacturer: syz [ 147.679746][ T5699] usb 5-1: SerialNumber: syz [ 147.738762][ T5609] udevd[5609]: symlink '../../loop1' '/dev/disk/by-diskseq/73.tmp-b7:1' failed: Read-only file system [ 147.795936][ T5785] usb 1-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 147.826136][ T5785] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.844665][ T5598] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 147.847338][ T5785] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 147.865053][ T5598] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.877542][ T5785] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.900434][ T5699] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 147.936160][ T5785] usb 1-1: config 0 descriptor?? [ 147.936525][ T5699] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 148.089460][ T5699] usb 5-1: USB disconnect, device number 15 [ 148.101062][ T5598] cdc_acm 3-1:1.0: ttyACM0: USB ACM device [ 148.217128][ T5991] udevd[5991]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 148.303909][ T24] usb 3-1: USB disconnect, device number 24 [ 148.392787][ T5785] hid (null): invalid report_count 1204730351 [ 148.412710][ T5785] hid-led 0003:27B8:01ED.0004: invalid report_count 1204730351 [ 148.433264][ T5785] hid-led 0003:27B8:01ED.0004: item 0 4 1 9 parsing failed [ 148.521523][ T5785] hid-led 0003:27B8:01ED.0004: probe with driver hid-led failed with error -22 [ 148.849035][ T5991] udevd[5991]: symlink '../../loop1' '/dev/disk/by-diskseq/73.tmp-b7:1' failed: Read-only file system [ 148.960770][ T5609] udevd[5609]: symlink '../../loop2' '/dev/disk/by-diskseq/74.tmp-b7:2' failed: Read-only file system [ 149.147981][ T5991] udevd[5991]: symlink '../../loop2' '/dev/disk/by-diskseq/74.tmp-b7:2' failed: Read-only file system [ 149.379761][ T5609] udevd[5609]: symlink '../../loop1' '/dev/disk/by-diskseq/73.tmp-b7:1' failed: Read-only file system [ 149.459044][ T5991] udevd[5991]: symlink '../../loop2' '/dev/disk/by-diskseq/74.tmp-b7:2' failed: Read-only file system [ 149.479581][ T7017] netlink: 'syz.1.387': attribute type 2 has an invalid length. [ 149.501150][ T7017] netlink: 8 bytes leftover after parsing attributes in process `syz.1.387'. [ 149.513317][ T7019] 9p: Bad value for 'rfdno' [ 149.548085][ T7017] : entered promiscuous mode [ 149.661861][ T5991] udevd[5991]: symlink '../../loop2' '/dev/disk/by-diskseq/74.tmp-b7:2' failed: Read-only file system [ 149.736669][ T5989] udevd[5989]: symlink '../../loop1' '/dev/disk/by-diskseq/73.tmp-b7:1' failed: Read-only file system [ 149.893513][ T7030] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 150.265227][ T5699] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 150.299702][ T7026] db_root: cannot open:  [ 150.435773][ T5699] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 150.463710][ T5699] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.725575][ T5699] cdc_acm 3-1:1.0: ttyACM0: USB ACM device [ 150.910657][ T5785] usb 1-1: USB disconnect, device number 23 [ 150.929921][ T29] usb 3-1: USB disconnect, device number 25 [ 151.321817][ T7057] 9p: Bad value for 'rfdno' [ 151.406178][ T5785] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 151.654775][ T5785] usb 2-1: Using ep0 maxpacket: 8 [ 151.756313][ T5785] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 151.816163][ T5785] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 151.853018][ T5785] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 151.892994][ T5785] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 151.907040][ T30] kauditd_printk_skb: 93 callbacks suppressed [ 151.907057][ T30] audit: type=1800 audit(1786294161.574:1085): pid=4965 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15713 res=0 errno=0 [ 151.970464][ T5785] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 152.020962][ T30] audit: type=1800 audit(1786294161.624:1086): pid=4965 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=126776 res=0 errno=0 [ 152.042171][ T5785] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.179564][ T5785] hub 2-1:1.0: bad descriptor, ignoring hub [ 152.197075][ T5785] hub 2-1:1.0: probe with driver hub failed with error -5 [ 152.228367][ T5785] cdc_wdm 2-1:1.0: skipping garbage [ 152.236651][ T30] audit: type=1800 audit(1786294161.734:1087): pid=5991 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=128151 res=0 errno=0 [ 152.293697][ T5785] cdc_wdm 2-1:1.0: skipping garbage [ 152.310360][ T5785] cdc_wdm 2-1:1.0: skipping garbage [ 152.497504][ T5598] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 152.616303][ T5991] udevd[5991]: symlink '../../loop2' '/dev/disk/by-diskseq/74.tmp-b7:2' failed: Read-only file system [ 152.630122][ T30] audit: type=1800 audit(1786294161.834:1088): pid=5991 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=128180 res=0 errno=0 [ 152.666418][ T5785] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 152.705092][ T5785] cdc_wdm 2-1:1.0: Unknown control protocol [ 152.719795][ T30] audit: type=1800 audit(1786294161.844:1089): pid=5991 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=128158 res=0 errno=0 [ 152.809156][ T30] audit: type=1800 audit(1786294161.844:1090): pid=5991 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=128159 res=0 errno=0 [ 152.847543][ T5598] usb 1-1: Using ep0 maxpacket: 32 [ 152.872279][ T5598] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0103, bcdDevice= 0.40 [ 152.898266][ T5598] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.915569][ T30] audit: type=1800 audit(1786294161.844:1091): pid=5991 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=128160 res=0 errno=0 [ 152.947962][ T5598] usb 1-1: Product: syz [ 152.959336][ T5598] usb 1-1: Manufacturer: syz [ 152.970148][ T5598] usb 1-1: SerialNumber: syz [ 153.005170][ T30] audit: type=1800 audit(1786294161.874:1092): pid=5991 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=128208 res=0 errno=0 [ 153.060618][ T5785] usb 2-1: USB disconnect, device number 19 [ 153.114951][ T7053] xt_CT: No such helper "snmp" [ 153.127877][ T30] audit: type=1800 audit(1786294161.994:1093): pid=4965 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=126776 res=0 errno=0 [ 153.218764][ T5989] udevd[5989]: symlink '../../loop2' '/dev/disk/by-diskseq/74.tmp-b7:2' failed: Read-only file system [ 153.224909][ T7082] netlink: 8 bytes leftover after parsing attributes in process `syz.3.409'. [ 153.247338][ T30] audit: type=1800 audit(1786294162.334:1094): pid=4965 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=128235 res=0 errno=0 [ 153.300661][ T5598] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 153.321677][ T5598] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 153.521798][ T5598] usb 1-1: USB disconnect, device number 24 [ 153.662966][ T5991] udevd[5991]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 153.717969][ T7090] syzkaller0: entered promiscuous mode [ 153.769355][ T7090] syzkaller0: entered allmulticast mode [ 153.971798][ T5991] udevd[5991]: symlink '../../loop1' '/dev/disk/by-diskseq/73.tmp-b7:1' failed: Read-only file system [ 154.390696][ T7100] 9p: Bad value for 'rfdno' [ 154.417342][ T5706] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 154.515129][ T5609] udevd[5609]: symlink '../../loop2' '/dev/disk/by-diskseq/74.tmp-b7:2' failed: Read-only file system [ 154.546450][ T7102] bridge0: port 3(netdevsim0) entered blocking state [ 154.572271][ T7102] bridge0: port 3(netdevsim0) entered disabled state [ 154.594181][ T7102] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 154.610191][ T5706] usb 2-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 154.649366][ T5706] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 154.691942][ T5706] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 154.741513][ T7102] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 154.756377][ T7102] bridge0: port 3(netdevsim0) entered blocking state [ 154.764730][ T7102] bridge0: port 3(netdevsim0) entered forwarding state [ 155.037796][ T5706] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.080763][ T5706] usb 2-1: config 0 descriptor?? [ 155.167598][ T1213] usb 1-1: new full-speed USB device number 25 using dummy_hcd [ 155.177573][ T5598] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 155.280758][ T5991] udevd[5991]: symlink '../../loop2' '/dev/disk/by-diskseq/74.tmp-b7:2' failed: Read-only file system [ 155.437596][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 156.019109][ T5598] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 156.031403][ T5598] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.043763][ T1213] usb 1-1: unable to get BOS descriptor or descriptor too short [ 156.084866][ T1213] usb 1-1: not running at top speed; connect to a high speed hub [ 156.108968][ T1213] usb 1-1: New USB device found, idVendor=04e2, idProduct=1410, bcdDevice=78.22 [ 156.140444][ T1213] usb 1-1: config 5 has an invalid interface number: 29 but max is 0 [ 156.162991][ T1213] usb 1-1: config 5 has no interface number 0 [ 156.181982][ T1213] usb 1-1: config 5 interface 29 has no altsetting 0 [ 156.212852][ T1213] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.237418][ T1213] usb 1-1: Product: syz [ 156.257147][ T1213] usb 1-1: Manufacturer: syz [ 156.277646][ T5598] cdc_acm 4-1:1.0: ttyACM0: USB ACM device [ 156.297665][ T1213] usb 1-1: SerialNumber: syz [ 156.343595][ T5706] hid (null): invalid report_count 1204730351 [ 156.400040][ T5706] hid-led 0003:27B8:01ED.0005: invalid report_count 1204730351 [ 156.437985][ T5706] hid-led 0003:27B8:01ED.0005: item 0 4 1 9 parsing failed [ 156.473491][ T5706] hid-led 0003:27B8:01ED.0005: probe with driver hid-led failed with error -22 [ 156.565155][ T7107] geneve2: entered promiscuous mode [ 156.599574][ T1165] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 20003 - 0 [ 156.610092][ T7107] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.632737][ T1165] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 20003 - 0 [ 156.649338][ T7107] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.680070][ T1165] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 20003 - 0 [ 156.728913][ T1165] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 20003 - 0 [ 156.815493][ T1213] usb 1-1: USB disconnect, device number 25 [ 156.870453][ T7122] netlink: 4 bytes leftover after parsing attributes in process `syz.0.422'. [ 157.522238][ T30] kauditd_printk_skb: 52 callbacks suppressed [ 157.522248][ T30] audit: type=1800 audit(1786294167.181:1147): pid=4965 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=126776 res=0 errno=0 [ 157.576308][ T5991] udevd[5991]: symlink '../../loop2' '/dev/disk/by-diskseq/74.tmp-b7:2' failed: Read-only file system [ 157.844935][ T30] audit: type=1800 audit(1786294167.501:1148): pid=4965 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=126776 res=0 errno=0 [ 157.893539][ T1213] usb 4-1: USB disconnect, device number 16 [ 157.933449][ T5991] udevd[5991]: symlink '../../loop2' '/dev/disk/by-diskseq/74.tmp-b7:2' failed: Read-only file system [ 158.004315][ T30] audit: type=1800 audit(1786294167.661:1149): pid=4965 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15590 res=0 errno=0 [ 158.097904][ T30] audit: type=1400 audit(1786294167.731:1150): avc: denied { ioctl } for pid=7135 comm="syz.2.425" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=16745 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 158.125670][ T7141] syz.0.427: vmalloc error: size 9007199590285312, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 158.175629][ T7141] CPU: 1 UID: 0 PID: 7141 Comm: syz.0.427 Tainted: G L syzkaller #0 PREEMPT(full) [ 158.175650][ T7141] Tainted: [L]=SOFTLOCKUP [ 158.175655][ T7141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 158.175662][ T7141] Call Trace: [ 158.175667][ T7141] [ 158.175672][ T7141] dump_stack_lvl+0x100/0x190 [ 158.175691][ T7141] warn_alloc.cold+0x94/0xa8 [ 158.175704][ T7141] ? __pfx_warn_alloc+0x10/0x10 [ 158.175716][ T7141] ? do_syscall_64+0x115/0x870 [ 158.175732][ T7141] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.175747][ T7141] ? __lock_acquire+0x49f/0x1a40 [ 158.175762][ T7141] ? find_held_lock+0x2b/0x80 [ 158.175773][ T7141] ? avc_has_extended_perms+0x33a/0x1080 [ 158.175786][ T7141] ? avc_has_extended_perms+0x33a/0x1080 [ 158.175804][ T7141] __vmalloc_node_range_noprof+0x136c/0x1630 [ 158.175825][ T7141] ? trace_contention_end+0x126/0x160 [ 158.175840][ T7141] ? dvb_demux_do_ioctl+0x9e0/0x1200 [ 158.175859][ T7141] ? dvb_demux_do_ioctl+0x929/0x1200 [ 158.175878][ T7141] ? find_held_lock+0x2b/0x80 [ 158.175888][ T7141] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 158.175905][ T7141] ? __pfx___mutex_lock+0x10/0x10 [ 158.175922][ T7141] ? tomoyo_path_number_perm+0x188/0x580 [ 158.175941][ T7141] ? dvb_demux_do_ioctl+0x9e0/0x1200 [ 158.175958][ T7141] __vmalloc_node_noprof+0xad/0xf0 [ 158.175974][ T7141] ? dvb_demux_do_ioctl+0x9e0/0x1200 [ 158.175995][ T7141] dvb_demux_do_ioctl+0x9e0/0x1200 [ 158.176014][ T7141] ? do_vfs_ioctl+0x226/0x13e0 [ 158.176032][ T7141] dvb_usercopy+0x167/0x340 [ 158.176047][ T7141] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 158.176069][ T7141] ? __pfx_dvb_usercopy+0x10/0x10 [ 158.176101][ T7141] ? selinux_file_ioctl+0x13b/0x290 [ 158.176128][ T7141] ? selinux_file_ioctl+0xb6/0x290 [ 158.176157][ T7141] dvb_demux_ioctl+0x29/0x40 [ 158.176181][ T7141] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 158.176205][ T7141] __x64_sys_ioctl+0x18e/0x210 [ 158.176231][ T7141] do_syscall_64+0x115/0x870 [ 158.176254][ T7141] ? clear_bhb_loop+0x70/0xc0 [ 158.176275][ T7141] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.176292][ T7141] RIP: 0033:0x7f4abbf9e0d9 [ 158.176310][ T7141] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 158.176324][ T7141] RSP: 002b:00007f4abcdc4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 158.176341][ T7141] RAX: ffffffffffffffda RBX: 00007f4abc225fa0 RCX: 00007f4abbf9e0d9 [ 158.176352][ T7141] RDX: 0020000014000000 RSI: 0000000000006f2d RDI: 0000000000000003 [ 158.176361][ T7141] RBP: 00007f4abc035024 R08: 0000000000000000 R09: 0000000000000000 [ 158.176371][ T7141] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 158.176380][ T7141] R13: 00007f4abc226038 R14: 00007f4abc225fa0 R15: 00007ffef98ecb08 [ 158.176406][ T7141] [ 158.176551][ T7141] Mem-Info: [ 158.461636][ T7141] active_anon:34066 inactive_anon:0 isolated_anon:0 [ 158.461636][ T7141] active_file:2311 inactive_file:59257 isolated_file:0 [ 158.461636][ T7141] unevictable:0 dirty:519 writeback:0 [ 158.461636][ T7141] slab_reclaimable:11917 slab_unreclaimable:98981 [ 158.461636][ T7141] mapped:46314 shmem:21832 pagetables:1488 [ 158.461636][ T7141] sec_pagetables:0 bounce:0 [ 158.461636][ T7141] kernel_misc_reclaimable:0 [ 158.461636][ T7141] free:1228358 free_pcp:46571 free_cma:0 [ 158.560079][ T7141] Node 0 active_anon:136848kB inactive_anon:0kB active_file:9244kB inactive_file:236832kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:185256kB dirty:2076kB writeback:0kB shmem:88028kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12384kB pagetables:5568kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 158.594878][ T30] audit: type=1800 audit(1786294168.221:1151): pid=4965 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15590 res=0 errno=0 [ 158.657345][ T7141] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 158.738455][ T7141] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 158.848580][ T7141] lowmem_reserve[]: 0 2472 2473 2473 2473 [ 158.932065][ T30] audit: type=1800 audit(1786294168.590:1152): pid=4965 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15590 res=0 errno=0 [ 158.986996][ T7141] Node 0 DMA32 free:964576kB boost:0kB min:34012kB low:42512kB high:51012kB reserved_highatomic:0KB free_highatomic:0KB active_anon:141812kB inactive_anon:0kB active_file:9244kB inactive_file:236832kB unevictable:0kB writepending:2080kB zspages:0kB present:3129332kB managed:2532244kB mlocked:0kB bounce:0kB free_pcp:168500kB local_pcp:85464kB free_cma:0kB [ 159.040685][ T7141] lowmem_reserve[]: 0 0 0 0 0 [ 159.047040][ T7141] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:384kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 159.117460][ T7141] lowmem_reserve[]: 0 0 0 0 0 [ 159.132319][ T29] usb 2-1: USB disconnect, device number 20 [ 159.144680][ T30] audit: type=1800 audit(1786294168.790:1153): pid=7151 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.430" name="current_driver" dev="sysfs" ino=1505 res=0 errno=0 [ 159.225905][ T7141] Node 1 Normal free:3945772kB boost:0kB min:55880kB low:69848kB high:83816kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 159.292569][ T7141] lowmem_reserve[]: 0 0 0 0 0 [ 159.818570][ T7141] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 159.856392][ T5882] udevd[5882]: symlink '../../loop2' '/dev/disk/by-diskseq/74.tmp-b7:2' failed: Read-only file system [ 159.917724][ T30] audit: type=1800 audit(1786294168.940:1154): pid=4965 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=126776 res=0 errno=0 [ 159.952983][ T7141] Node 0 DMA32: 2070*4kB (UME) 1368*8kB (UM) 1016*16kB (UME) 587*32kB (UM) 249*64kB (UM) 109*128kB (UM) 51*256kB (UME) 20*512kB (UME) 11*1024kB (UME) 7*2048kB (UME) 207*4096kB (M) = 980920kB [ 160.183353][ T30] audit: type=1800 audit(1786294168.960:1155): pid=4965 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=129212 res=0 errno=0 [ 160.204556][ T7141] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 160.208091][ T30] audit: type=1400 audit(1786294169.030:1156): avc: denied { map } for pid=7150 comm="syz.2.430" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 160.267211][ T5991] udevd[5991]: symlink '../../loop1' '/dev/disk/by-diskseq/73.tmp-b7:1' failed: Read-only file system [ 160.286064][ T7141] Node 1 Normal: 3*4kB (UM) 6*8kB (UM) 7*16kB (UM) 6*32kB (UM) 7*64kB (UM) 4*128kB (UM) 4*256kB (UM) 2*512kB (M) 2*1024kB (UM) 0*2048kB 962*4096kB (M) = 3945772kB [ 160.343565][ T5609] udevd[5609]: symlink '../../loop2' '/dev/disk/by-diskseq/74.tmp-b7:2' failed: Read-only file system [ 160.366008][ T7141] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 160.419530][ T7141] Node 0 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 160.452644][ T7141] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 161.230574][ T7141] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 161.240277][ T7141] 100675 total pagecache pages [ 161.245162][ T7141] 0 pages in swap cache [ 161.249427][ T7141] Free swap = 124996kB [ 161.253630][ T7141] Total swap = 124996kB [ 161.257879][ T7141] 2097051 pages RAM [ 161.261709][ T7141] 0 pages HighMem/MovableOnly [ 161.267069][ T7141] 432279 pages reserved [ 161.272790][ T7141] 0 pages cma reserved [ 161.379296][ T5991] udevd[5991]: symlink '../../loop1' '/dev/disk/by-diskseq/73.tmp-b7:1' failed: Read-only file system [ 161.428653][ T5989] udevd[5989]: symlink '../../loop2' '/dev/disk/by-diskseq/74.tmp-b7:2' failed: Read-only file system [ 161.460362][ T7173] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 161.524427][ T7173] CIFS: Attempting to mount //127.0.0.1/share,ser=rojvK~ot [ 161.640883][ T5706] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 161.811492][ T5706] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 161.828308][ T5706] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.048262][ T5706] cdc_acm 1-1:1.0: ttyACM0: USB ACM device [ 162.264568][ T7173] CIFS: VFS: cifs_mount failed w/return code = -112 [ 162.370999][ T5991] udevd[5991]: symlink '../../loop2' '/dev/disk/by-diskseq/74.tmp-b7:2' failed: Read-only file system [ 162.420128][ T5991] udevd[5991]: symlink '../../loop1' '/dev/disk/by-diskseq/73.tmp-b7:1' failed: Read-only file system [ 162.453711][ T5706] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 162.507329][ T5991] udevd[5991]: symlink '../../loop1' '/dev/disk/by-diskseq/73.tmp-b7:1' failed: Read-only file system [ 162.557421][ T7201] netlink: 4 bytes leftover after parsing attributes in process `syz.1.444'. [ 162.566743][ T30] kauditd_printk_skb: 40 callbacks suppressed [ 162.566754][ T30] audit: type=1400 audit(1786294172.229:1197): avc: denied { create } for pid=7202 comm="syz.4.445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 162.614037][ T30] audit: type=1400 audit(1786294172.279:1198): avc: denied { read write } for pid=7202 comm="syz.4.445" name="sg0" dev="devtmpfs" ino=763 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 162.650994][ T5706] usb 4-1: Using ep0 maxpacket: 32 [ 162.664860][ T5706] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 162.671326][ T24] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 162.686111][ T30] audit: type=1400 audit(1786294172.279:1199): avc: denied { open } for pid=7202 comm="syz.4.445" path="/dev/sg0" dev="devtmpfs" ino=763 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 162.716996][ T30] audit: type=1400 audit(1786294172.299:1200): avc: denied { ioctl } for pid=7202 comm="syz.4.445" path="/dev/ppp" dev="devtmpfs" ino=708 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 162.745396][ T5706] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 162.755088][ T5706] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 162.764033][ T5706] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 162.773144][ T30] audit: type=1400 audit(1786294172.378:1201): avc: denied { append } for pid=7202 comm="syz.4.445" name="ppp" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 162.796375][ T5706] usb 4-1: config 1 has no interface number 0 [ 162.802631][ T5706] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 162.824395][ T5706] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 162.831377][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 162.839867][ T5706] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.874513][ T30] audit: type=1800 audit(1786294172.538:1202): pid=5609 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=129510 res=0 errno=0 [ 162.897458][ T5706] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 162.908779][ T30] audit: type=1800 audit(1786294172.568:1203): pid=5609 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=129539 res=0 errno=0 [ 162.915449][ T24] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 162.930715][ T30] audit: type=1800 audit(1786294172.568:1204): pid=5609 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=129517 res=0 errno=0 [ 162.965668][ T24] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 162.980672][ T24] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 163.012928][ T5991] udevd[5991]: symlink '../../loop1' '/dev/disk/by-diskseq/73.tmp-b7:1' failed: Read-only file system [ 163.036150][ T24] usb 3-1: Product: syz [ 163.044904][ T24] usb 3-1: Manufacturer: syz [ 163.049702][ T24] usb 3-1: SerialNumber: syz [ 163.059358][ T24] usb 3-1: config 0 descriptor?? [ 163.077646][ T5706] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached [ 163.079174][ T7207] netlink: 20 bytes leftover after parsing attributes in process `syz.1.446'. [ 163.097245][ T30] audit: type=1800 audit(1786294172.568:1205): pid=5609 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=129518 res=0 errno=0 [ 163.097387][ T7197] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 163.132930][ T24] hub 3-1:0.0: bad descriptor, ignoring hub [ 163.139450][ T24] hub 3-1:0.0: probe with driver hub failed with error -5 [ 163.191734][ T30] audit: type=1800 audit(1786294172.568:1206): pid=5609 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=129519 res=0 errno=0 [ 163.491899][ T9] usb 3-1: USB disconnect, device number 26 [ 163.571315][ T7193] netlink: 4 bytes leftover after parsing attributes in process `syz.3.440'. [ 163.658233][ T9] usb 4-1: USB disconnect, device number 17 [ 163.665941][ T9] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 163.761945][ T24] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 163.926778][ T24] usb 5-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 163.940031][ T5991] udevd[5991]: symlink '../../loop2' '/dev/disk/by-diskseq/74.tmp-b7:2' failed: Read-only file system [ 163.948845][ T24] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 163.978373][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.000445][ T24] keyspan 5-1:1.0: Keyspan 2 port adapter converter detected [ 164.023608][ T24] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 81 [ 164.037532][ T5991] udevd[5991]: symlink '../../loop1' '/dev/disk/by-diskseq/73.tmp-b7:1' failed: Read-only file system [ 164.058772][ T24] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 1 [ 164.144317][ T24] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 84 [ 164.155562][ T24] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 2 [ 164.401661][ T5598] usb 1-1: USB disconnect, device number 26 [ 164.424663][ T24] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 164.436778][ T7212] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.466439][ T24] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 88 [ 164.478239][ T7212] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.489724][ T24] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 6 [ 164.548407][ T24] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 164.679764][ T5609] udevd[5609]: symlink '../../loop1' '/dev/disk/by-diskseq/73.tmp-b7:1' failed: Read-only file system [ 164.681638][ T7229] lo speed is unknown, defaulting to 1000 [ 164.716500][ T7229] lo speed is unknown, defaulting to 1000 [ 164.792570][ T7232] overlayfs: conflicting lowerdir path [ 164.818228][ T7232] netlink: 16 bytes leftover after parsing attributes in process `syz.1.453'. [ 164.883021][ T7229] lo speed is unknown, defaulting to 1000 [ 164.898743][ T7229] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 164.916216][ T7229] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 164.933969][ T7229] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 164.945271][ T7240] netlink: 'syz.0.457': attribute type 178 has an invalid length. [ 164.983778][ T7229] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 165.009759][ T7229] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 165.106414][ T7229] lo speed is unknown, defaulting to 1000 [ 165.141714][ T7229] lo speed is unknown, defaulting to 1000 [ 165.150500][ T7246] jffs2: notice: (7246) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 165.167844][ T7229] lo speed is unknown, defaulting to 1000 [ 165.183062][ T7229] lo speed is unknown, defaulting to 1000 [ 165.207280][ T7229] lo speed is unknown, defaulting to 1000 [ 165.362380][ T5991] udevd[5991]: symlink '../../loop1' '/dev/disk/by-diskseq/73.tmp-b7:1' failed: Read-only file system [ 165.893001][ T29] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 166.064846][ T29] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 166.097840][ T29] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.221657][ T5991] udevd[5991]: symlink '../../loop2' '/dev/disk/by-diskseq/74.tmp-b7:2' failed: Read-only file system [ 166.331200][ T29] cdc_acm 4-1:1.0: ttyACM0: USB ACM device [ 166.386559][ T9] usb 5-1: USB disconnect, device number 16 [ 166.402327][ T5991] udevd[5991]: symlink '../../loop1' '/dev/disk/by-diskseq/73.tmp-b7:1' failed: Read-only file system [ 166.433293][ T9] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 167.224610][ T9] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 167.258308][ T5609] udevd[5609]: symlink '../../loop1' '/dev/disk/by-diskseq/73.tmp-b7:1' failed: Read-only file system [ 167.337715][ T9] keyspan 5-1:1.0: device disconnected [ 167.372604][ T5991] udevd[5991]: symlink '../../loop2' '/dev/disk/by-diskseq/74.tmp-b7:2' failed: Read-only file system [ 167.604420][ T24] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 167.699123][ T30] kauditd_printk_skb: 78 callbacks suppressed [ 167.699140][ T30] audit: type=1800 audit(1786294177.356:1285): pid=4965 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=126776 res=0 errno=0 [ 167.710117][ T5991] udevd[5991]: symlink '../../loop2' '/dev/disk/by-diskseq/74.tmp-b7:2' failed: Read-only file system [ 167.744258][ T9] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 167.759533][ T30] audit: type=1400 audit(1786294177.416:1286): avc: denied { write } for pid=7279 comm="syz.0.472" name="mice" dev="devtmpfs" ino=915 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 167.786954][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 167.799533][ T24] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0103, bcdDevice= 0.40 [ 167.833671][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.849474][ T24] usb 2-1: Product: syz [ 167.858302][ T7280] netlink: 16 bytes leftover after parsing attributes in process `syz.0.472'. [ 167.867471][ T24] usb 2-1: Manufacturer: syz [ 167.872344][ T24] usb 2-1: SerialNumber: syz [ 167.880194][ T30] audit: type=1800 audit(1786294177.536:1287): pid=5991 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=130295 res=0 errno=0 [ 167.903459][ T30] audit: type=1800 audit(1786294177.536:1288): pid=5991 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=130327 res=0 errno=0 [ 167.928319][ T30] audit: type=1800 audit(1786294177.566:1289): pid=5991 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=130302 res=0 errno=0 [ 167.950560][ T30] audit: type=1800 audit(1786294177.566:1290): pid=5991 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=130303 res=0 errno=0 [ 167.989447][ T9] usb 5-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 167.995256][ T7284] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7284 comm=syz.0.472 [ 168.029836][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 168.059117][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 168.084452][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.100111][ T9] usb 5-1: config 0 descriptor?? [ 168.102036][ T30] audit: type=1800 audit(1786294177.756:1291): pid=5609 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=130348 res=0 errno=0 [ 168.134007][ T24] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 168.151619][ T24] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 168.167929][ T30] audit: type=1800 audit(1786294177.786:1292): pid=5609 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=130377 res=0 errno=0 [ 168.216480][ T30] audit: type=1800 audit(1786294177.796:1293): pid=5609 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=130355 res=0 errno=0 [ 168.247351][ T24] usb 2-1: USB disconnect, device number 21 [ 168.256605][ T30] audit: type=1800 audit(1786294177.796:1294): pid=5609 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=130356 res=0 errno=0 [ 168.316506][ T5991] udevd[5991]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 168.457640][ T5991] udevd[5991]: symlink '../../loop2' '/dev/disk/by-diskseq/74.tmp-b7:2' failed: Read-only file system [ 168.513090][ T7288] netlink: 80 bytes leftover after parsing attributes in process `syz.2.473'. [ 168.555935][ T9] hid (null): invalid report_count 1204730351 [ 168.573049][ T9] hid-led 0003:27B8:01ED.0006: invalid report_count 1204730351 [ 168.595499][ T9] hid-led 0003:27B8:01ED.0006: item 0 4 1 9 parsing failed [ 168.612457][ T9] hid-led 0003:27B8:01ED.0006: probe with driver hid-led failed with error -22 [ 168.614407][ T5989] udevd[5989]: symlink '../../loop2' '/dev/disk/by-diskseq/74.tmp-b7:2' failed: Read-only file system [ 168.683164][ T9] usb 4-1: USB disconnect, device number 18 [ 168.814334][ T24] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 168.854011][ T5991] udevd[5991]: symlink '../../loop1' '/dev/disk/by-diskseq/73.tmp-b7:1' failed: Read-only file system [ 168.967455][ T24] usb 3-1: device descriptor read/64, error -71 [ 169.254667][ T5785] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 169.284820][ T24] usb 3-1: new full-speed USB device number 28 using dummy_hcd [ 169.454930][ T5785] usb 2-1: device descriptor read/64, error -71 [ 169.504703][ T24] usb 3-1: device descriptor read/64, error -71 [ 169.612038][ T7307] netlink: 788 bytes leftover after parsing attributes in process `syz.0.479'. [ 169.626645][ T24] usb usb3-port1: attempt power cycle [ 169.652623][ T1213] usb 5-1: USB disconnect, device number 17 [ 169.714821][ T5785] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 169.808432][ T29] hid-generic 0005:16C0:05DF.0007: item fetching failed at offset 0/1 [ 169.819736][ T29] hid-generic 0005:16C0:05DF.0007: probe with driver hid-generic failed with error -22 [ 169.845244][ T5785] usb 2-1: device descriptor read/64, error -71 [ 169.975684][ T5785] usb usb2-port1: attempt power cycle [ 169.995673][ T24] usb 3-1: new full-speed USB device number 29 using dummy_hcd [ 170.035030][ T5714] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 170.045272][ T24] usb 3-1: device descriptor read/8, error -71 [ 170.207391][ T5714] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 170.218427][ T5714] usb 4-1: config 0 has no interfaces? [ 170.238203][ T5714] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.258093][ T5714] usb 4-1: Product: syz [ 170.265367][ T5714] usb 4-1: Manufacturer: syz [ 170.274457][ T5714] usb 4-1: SerialNumber: syz [ 170.292767][ T5714] usb 4-1: config 0 descriptor?? [ 170.305062][ T24] usb 3-1: new full-speed USB device number 30 using dummy_hcd [ 170.315203][ T5785] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 170.336819][ T24] usb 3-1: device descriptor read/8, error -71 [ 170.343629][ T5785] usb 2-1: device descriptor read/8, error -71 [ 170.455504][ T24] usb usb3-port1: unable to enumerate USB device [ 170.515205][ T29] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 170.585734][ T5785] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 170.606236][ T5785] usb 2-1: device descriptor read/8, error -71 [ 170.667861][ T29] usb 5-1: not running at top speed; connect to a high speed hub [ 170.675727][ T29] usb 5-1: New USB device found, idVendor=0499, idProduct=1054, bcdDevice= 0.40 [ 170.686114][ T29] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 170.697624][ T29] usb 5-1: language id specifier not provided by device, defaulting to English [ 170.708233][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.720842][ T5785] usb usb2-port1: unable to enumerate USB device [ 170.727313][ T29] usb 5-1: Product: ࠉ [ 170.731487][ T29] usb 5-1: Manufacturer: 曯钎펊᮪첈躂敓ᵔ펠ꭧ襊횛蟇匜灔芌䮄䴱誁딼ފⰵ⁵ᔪ㡥톞䤞꣞띉᪝烲팭⳻龭㢥⮿ź엜 [ 170.747683][ T29] usb 5-1: SerialNumber: 핕͎ፈ☔涺 [ 170.860510][ T7320] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.869451][ T7320] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.875374][ T24] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 170.957229][ T7315] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=7315 comm=syz.4.481 [ 170.970670][ T7315] netlink: 'syz.4.481': attribute type 12 has an invalid length. [ 170.978781][ T7315] netlink: 'syz.4.481': attribute type 29 has an invalid length. [ 170.986604][ T7315] netlink: 148 bytes leftover after parsing attributes in process `syz.4.481'. [ 170.995674][ T7315] netlink: 'syz.4.481': attribute type 1 has an invalid length. [ 171.003350][ T7315] netlink: 'syz.4.481': attribute type 2 has an invalid length. [ 171.011073][ T7315] netlink: 11 bytes leftover after parsing attributes in process `syz.4.481'. [ 171.030650][ T7315] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7315 comm=syz.4.481 [ 171.035480][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 171.050754][ T24] usb 1-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 171.060314][ T24] usb 1-1: too many configurations: 123, using maximum allowed: 8 [ 171.069367][ T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 171.080794][ T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 171.092093][ T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 171.104348][ T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 171.118413][ T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 171.131538][ T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 171.144030][ T29] usb 5-1: 1:1 : no UAC_FORMAT_TYPE desc [ 171.150159][ T29] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 171.157857][ T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 171.170470][ T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 171.186344][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 171.204667][ T24] usb 1-1: SerialNumber: syz [ 171.212666][ T29] usb 5-1: USB disconnect, device number 18 [ 171.223440][ T24] usb 1-1: config 0 descriptor?? [ 171.242227][ T24] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 171.445687][ T7319] input: syz0 as /devices/virtual/input/input11 [ 171.467497][ T9] usb 1-1: USB disconnect, device number 27 [ 171.606059][ T5991] udevd[5991]: symlink '../../loop2' '/dev/disk/by-diskseq/74.tmp-b7:2' failed: Read-only file system [ 171.914179][ T29] IPVS: starting estimator thread 0... [ 172.096184][ T7335] IPVS: using max 43 ests per chain, 103200 per kthread [ 172.322232][ T5991] udevd[5991]: symlink '../../loop1' '/dev/disk/by-diskseq/73.tmp-b7:1' failed: Read-only file system [ 172.411785][ T5991] udevd[5991]: symlink '../../loop1' '/dev/disk/by-diskseq/73.tmp-b7:1' failed: Read-only file system [ 172.550758][ T5991] udevd[5991]: symlink '../../loop1' '/dev/disk/by-diskseq/73.tmp-b7:1' failed: Read-only file system [ 172.584819][ T5609] udevd[5609]: symlink '../../loop2' '/dev/disk/by-diskseq/74.tmp-b7:2' failed: Read-only file system [ 172.599102][ T29] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 172.619169][ T7347] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1 sclass=netlink_xfrm_socket pid=7347 comm=syz.1.491 [ 172.679396][ T5991] udevd[5991]: symlink '../../loop2' '/dev/disk/by-diskseq/74.tmp-b7:2' failed: Read-only file system [ 172.769199][ T7354] SELinux: security_context_str_to_sid (5] S9q#) failed with errno=-22 [ 172.779806][ T29] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 172.804293][ T5785] usb 4-1: USB disconnect, device number 19 [ 172.812118][ T30] kauditd_printk_skb: 76 callbacks suppressed [ 172.812136][ T30] audit: type=1800 audit(1786294182.463:1371): pid=4965 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15713 res=0 errno=0 [ 172.839534][ T29] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.886364][ T30] audit: type=1800 audit(1786294182.513:1372): pid=5991 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=131191 res=0 errno=0 [ 172.926517][ T30] audit: type=1800 audit(1786294182.513:1373): pid=5991 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=131220 res=0 errno=0 [ 172.986442][ T30] audit: type=1800 audit(1786294182.513:1374): pid=5991 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=131198 res=0 errno=0 [ 173.037003][ T30] audit: type=1800 audit(1786294182.513:1375): pid=5991 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=131199 res=0 errno=0 [ 173.098743][ T30] audit: type=1800 audit(1786294182.523:1376): pid=5991 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=131200 res=0 errno=0 [ 173.120620][ T29] cdc_acm 1-1:1.0: ttyACM0: USB ACM device [ 173.126919][ T30] audit: type=1800 audit(1786294182.523:1377): pid=5991 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=131240 res=0 errno=0 [ 173.153134][ T30] audit: type=1800 audit(1786294182.543:1378): pid=4965 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15590 res=0 errno=0 [ 173.187300][ T30] audit: type=1400 audit(1786294182.613:1379): avc: denied { accept } for pid=7357 comm="syz.3.495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 173.215629][ T30] audit: type=1800 audit(1786294182.773:1380): pid=4965 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=131258 res=0 errno=0 [ 173.303281][ T5785] usb 1-1: USB disconnect, device number 28 [ 173.452484][ T5594] block device autoloading is deprecated and will be removed. [ 173.476649][ T29] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 173.485410][ T5991] udevd[5991]: symlink '../../loop1' '/dev/disk/by-diskseq/75.tmp-b7:1' failed: Read-only file system [ 173.636746][ T29] usb 3-1: device descriptor read/64, error -71 [ 173.794691][ T5785] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 173.888293][ T29] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 173.936881][ T5785] usb 2-1: device descriptor read/64, error -71 [ 174.036923][ T29] usb 3-1: device descriptor read/64, error -71 [ 174.157664][ T29] usb usb3-port1: attempt power cycle [ 174.163231][ T629] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 174.188056][ T5785] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 174.267404][ T5714] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 174.327105][ T5785] usb 2-1: device descriptor read/64, error -71 [ 174.363462][ T7373] loop9: detected capacity change from 0 to 524287936 [ 174.437605][ T5785] usb usb2-port1: attempt power cycle [ 174.447587][ T5714] usb 1-1: Using ep0 maxpacket: 16 [ 174.454737][ T5714] usb 1-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 174.464864][ T5714] usb 1-1: too many configurations: 123, using maximum allowed: 8 [ 174.476311][ T5714] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 174.497878][ T5714] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 174.517207][ T29] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 174.528071][ T5714] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 174.548704][ T5714] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 174.561165][ T29] usb 3-1: device descriptor read/8, error -71 [ 174.570590][ T5991] udevd[5991]: symlink '../../loop9' '/dev/disk/by-diskseq/76.tmp-b7:9' failed: Read-only file system [ 174.586427][ T5714] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 174.609607][ T5714] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 174.633106][ T5714] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 174.649353][ T5714] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 174.665270][ T5714] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 174.674109][ T5714] usb 1-1: SerialNumber: syz [ 174.692246][ T5714] usb 1-1: config 0 descriptor?? [ 174.721632][ T5714] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input12 [ 174.777335][ T5785] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 174.817927][ T5785] usb 2-1: device descriptor read/8, error -71 [ 174.827692][ T29] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 174.859305][ T29] usb 3-1: device descriptor read/8, error -71 [ 174.935049][ T7368] input: syz0 as /devices/virtual/input/input13 [ 174.958811][ T5706] usb 1-1: USB disconnect, device number 29 [ 174.997775][ T29] usb usb3-port1: unable to enumerate USB device [ 175.068650][ T5785] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 175.108028][ T5785] usb 2-1: device descriptor read/8, error -71 [ 175.218148][ T5785] usb usb2-port1: unable to enumerate USB device [ 175.833603][ T7392] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 176.180025][ T5991] udevd[5991]: symlink '../../loop2' '/dev/disk/by-diskseq/74.tmp-b7:2' failed: Read-only file system [ 176.191974][ T7400] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 176.388117][ T29] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 176.438135][ T5785] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 176.548210][ T5714] usb 3-1: new full-speed USB device number 35 using dummy_hcd [ 176.561527][ T29] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 176.580813][ T29] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 176.600940][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.609608][ T5785] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 176.627375][ T29] usb 5-1: config 0 descriptor?? [ 176.633928][ T5785] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.692181][ T24] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 176.711045][ T5989] udevd[5989]: symlink '../../loop1' '/dev/disk/by-diskseq/75.tmp-b7:1' failed: Read-only file system [ 176.749055][ T5714] usb 3-1: unable to get BOS descriptor or descriptor too short [ 176.773110][ T5714] usb 3-1: not running at top speed; connect to a high speed hub [ 176.793298][ T24] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 176.809126][ T5714] usb 3-1: New USB device found, idVendor=1fb9, idProduct=0403, bcdDevice=4a.3b [ 176.836254][ T5714] usb 3-1: config 160 has an invalid interface number: 156 but max is 0 [ 176.858991][ T29] usbhid 5-1:0.0: can't add hid device: -71 [ 176.873053][ T5714] usb 3-1: config 160 has no interface number 0 [ 176.880302][ T5785] cdc_acm 4-1:1.0: ttyACM0: USB ACM device [ 176.890052][ T29] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 176.903699][ T5714] usb 3-1: config 160 interface 156 altsetting 8 has an endpoint descriptor with address 0xF4, changing to 0x84 [ 176.923370][ T29] usb 5-1: USB disconnect, device number 19 [ 176.937745][ T5714] usb 3-1: config 160 interface 156 altsetting 8 endpoint 0x84 has invalid maxpacket 49717, setting to 64 [ 176.967052][ T5714] usb 3-1: config 160 interface 156 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 176.987789][ T5714] usb 3-1: config 160 interface 156 altsetting 8 has a duplicate endpoint with address 0x7, skipping [ 177.027012][ T5714] usb 3-1: config 160 interface 156 altsetting 8 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 177.068307][ T5714] usb 3-1: config 160 interface 156 altsetting 8 has an endpoint descriptor with address 0xE9, changing to 0x89 [ 177.089650][ T24] usb 4-1: USB disconnect, device number 20 [ 177.120433][ T5714] usb 3-1: config 160 interface 156 altsetting 8 endpoint 0x89 has invalid maxpacket 18397, setting to 64 [ 177.161984][ T5714] usb 3-1: config 160 interface 156 altsetting 8 has 8 endpoint descriptors, different from the interface descriptor's value: 6 [ 177.204452][ T5714] usb 3-1: config 160 interface 156 has no altsetting 0 [ 177.236165][ T5714] usb 3-1: string descriptor 0 read error: -22 [ 177.241930][ T5882] udevd[5882]: symlink '../../loop9' '/dev/disk/by-diskseq/76.tmp-b7:9' failed: Read-only file system [ 177.267868][ T5714] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.278758][ T5991] udevd[5991]: symlink '../../loop9' '/dev/disk/by-diskseq/76.tmp-b7:9' failed: Read-only file system [ 177.316786][ T7407] UHID_CREATE from different security context by process 282 (syz.1.511), this is not allowed. [ 177.317440][ T5991] udevd[5991]: symlink '../../loop9' '/dev/disk/by-diskseq/77.tmp-b7:9' failed: Read-only file system [ 177.339893][ T7404] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 177.347252][ T7404] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 177.372227][ T7404] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 177.390694][ T5714] cp210x 3-1:160.156: cp210x converter detected [ 177.408918][ T29] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 177.598970][ T5714] usb 3-1: cp210x converter now attached to ttyUSB0 [ 177.731227][ T29] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 178.120582][ T30] kauditd_printk_skb: 89 callbacks suppressed [ 178.120598][ T30] audit: type=1800 audit(1786294187.761:1470): pid=5991 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bInterfaceNumber" dev="sysfs" ino=132233 res=0 errno=0 [ 178.162125][ T29] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 178.212665][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.231384][ T5609] udevd[5609]: symlink '../../loop1' '/dev/disk/by-diskseq/75.tmp-b7:1' failed: Read-only file system [ 178.273632][ T30] audit: type=1800 audit(1786294187.771:1471): pid=5991 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bInterfaceClass" dev="sysfs" ino=132236 res=0 errno=0 [ 178.303776][ T29] usb 5-1: config 0 descriptor?? [ 178.330604][ T30] audit: type=1800 audit(1786294187.831:1472): pid=5991 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="port_number" dev="sysfs" ino=132249 res=0 errno=0 [ 178.384029][ T7420] jffs2: notice: (7420) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 178.407398][ T5609] udevd[5609]: symlink '../../loop1' '/dev/disk/by-diskseq/75.tmp-b7:1' failed: Read-only file system [ 178.428362][ T30] audit: type=1800 audit(1786294187.851:1473): pid=4965 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=131361 res=0 errno=0 [ 178.489934][ T30] audit: type=1800 audit(1786294187.921:1474): pid=4965 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15590 res=0 errno=0 [ 178.537798][ T30] audit: type=1800 audit(1786294187.961:1475): pid=5609 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=132389 res=0 errno=0 [ 178.561449][ T30] audit: type=1800 audit(1786294187.961:1476): pid=5609 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=132418 res=0 errno=0 [ 178.609383][ T30] audit: type=1800 audit(1786294187.971:1477): pid=5609 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=132396 res=0 errno=0 [ 178.656573][ T30] audit: type=1800 audit(1786294187.971:1478): pid=5609 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=132397 res=0 errno=0 [ 178.704083][ T30] audit: type=1800 audit(1786294187.971:1479): pid=5609 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=132398 res=0 errno=0 [ 178.746896][ T7396] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.759858][ T7396] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.779759][ T5785] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 178.903353][ T7428] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3780442281 (7560884562 ns) > initial count (4669583980 ns). Using initial count to start timer. [ 178.933569][ T5785] usb 2-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 178.946527][ T5785] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 178.963122][ T5785] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.972517][ T5785] usb 2-1: Product: syz [ 178.978212][ T5785] usb 2-1: Manufacturer: syz [ 178.984188][ T5785] usb 2-1: SerialNumber: syz [ 179.009967][ T5785] ums-karma 2-1:1.0: USB Mass Storage device detected [ 179.026462][ T5785] ums-karma 2-1:1.0: This device (045a,5210,0101 S 06 P f5) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller) [ 179.026462][ T5785] Please send a copy of this message to and [ 179.066876][ T24] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 179.078551][ T24] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 179.216191][ T5785] usb 2-1: USB disconnect, device number 30 [ 179.232230][ T5598] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 179.266134][ T5699] usb 3-1: USB disconnect, device number 35 [ 179.312845][ T5699] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 179.349954][ T5699] cp210x 3-1:160.156: device disconnected [ 179.369675][ T5706] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 179.373695][ T5991] udevd[5991]: symlink '../../loop2' '/dev/disk/by-diskseq/74.tmp-b7:2' failed: Read-only file system [ 179.410121][ T5598] usb 1-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 179.430143][ T5598] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 179.454750][ T5598] usb 1-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x73, changing to 0x3 [ 179.482184][ T5598] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 179.515624][ T5598] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 179.537607][ T5598] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 179.552545][ T5598] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.561522][ T5598] usb 1-1: Product: syz [ 179.565882][ T5598] usb 1-1: Manufacturer: syz [ 179.571046][ T5598] usb 1-1: SerialNumber: syz [ 179.636944][ T5609] udevd[5609]: symlink '../../loop2' '/dev/disk/by-diskseq/74.tmp-b7:2' failed: Read-only file system [ 180.383488][ T5598] usb 1-1: Cannot retrieve CPort count: -110 [ 180.481871][ T5598] usb 1-1: Cannot retrieve CPort count: -110 [ 180.528709][ T5598] es2_ap_driver 1-1:1.0: probe with driver es2_ap_driver failed with error -110 [ 180.544530][ T5609] udevd[5609]: symlink '../../loop1' '/dev/disk/by-diskseq/75.tmp-b7:1' failed: Read-only file system [ 180.568916][ T29] usbhid 5-1:0.0: can't add hid device: -71 [ 180.580269][ T29] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 180.602558][ T29] usb 5-1: USB disconnect, device number 20 [ 180.695168][ T7457] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 182.040728][ T5991] udevd[5991]: symlink '../../loop2' '/dev/disk/by-diskseq/74.tmp-b7:2' failed: Read-only file system [ 182.110634][ T5989] udevd[5989]: symlink '../../loop1' '/dev/disk/by-diskseq/75.tmp-b7:1' failed: Read-only file system [ 182.150177][ T5706] usb 4-1: unable to get BOS descriptor or descriptor too short [ 182.172640][ T5706] usb 4-1: New USB device found, idVendor=6e6e, idProduct=1874, bcdDevice=fe.df [ 182.247782][ T5706] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 182.258034][ T5706] usb 4-1: can't read configurations, error -71 [ 182.371478][ T5714] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 182.606866][ T5714] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 182.721282][ T5714] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.748203][ T5991] udevd[5991]: symlink '../../loop2' '/dev/disk/by-diskseq/74.tmp-b7:2' failed: Read-only file system [ 182.978934][ T5714] cdc_acm 2-1:1.0: ttyACM0: USB ACM device [ 183.067651][ T5598] usb 1-1: USB disconnect, device number 30 [ 183.184116][ T5714] usb 2-1: USB disconnect, device number 31 [ 183.421737][ T5699] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 183.654004][ T5699] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 183.708952][ T5699] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.719751][ T5699] usb 5-1: config 0 descriptor?? [ 183.725067][ T30] kauditd_printk_skb: 60 callbacks suppressed [ 183.725082][ T30] audit: type=1800 audit(1786294193.368:1540): pid=5991 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=133068 res=0 errno=0 [ 183.753159][ T30] audit: type=1800 audit(1786294193.378:1541): pid=5991 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=133097 res=0 errno=0 [ 183.779500][ T5699] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 183.789333][ T30] audit: type=1800 audit(1786294193.378:1542): pid=5991 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=133075 res=0 errno=0 [ 183.819341][ T30] audit: type=1800 audit(1786294193.378:1543): pid=5991 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=133076 res=0 errno=0 [ 183.844392][ T30] audit: type=1800 audit(1786294193.378:1544): pid=5991 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=133077 res=0 errno=0 [ 183.874240][ T5991] udevd[5991]: symlink '../../loop1' '/dev/disk/by-diskseq/75.tmp-b7:1' failed: Read-only file system [ 183.898719][ T30] audit: type=1800 audit(1786294193.428:1545): pid=5991 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=133117 res=0 errno=0 [ 183.921113][ T30] audit: type=1800 audit(1786294193.508:1546): pid=4965 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=131361 res=0 errno=0 [ 183.977323][ T5706] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 184.061468][ T30] audit: type=1800 audit(1786294193.708:1547): pid=4965 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15590 res=0 errno=0 [ 184.131750][ T30] audit: type=1400 audit(1786294193.778:1548): avc: denied { append } for pid=7507 comm="syz.3.535" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 184.173476][ T5706] usb 1-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 184.187038][ T5706] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 184.204903][ T5706] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 184.216804][ T30] audit: type=1800 audit(1786294193.858:1549): pid=4965 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=131361 res=0 errno=0 [ 184.223023][ T5991] udevd[5991]: symlink '../../loop1' '/dev/disk/by-diskseq/75.tmp-b7:1' failed: Read-only file system [ 184.249094][ T5706] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.276917][ T5706] usb 1-1: config 0 descriptor?? [ 184.418223][ T5991] udevd[5991]: symlink '../../loop2' '/dev/disk/by-diskseq/74.tmp-b7:2' failed: Read-only file system [ 184.474799][ T5706] usbhid 1-1:0.0: can't add hid device: -71 [ 184.477721][ T5991] udevd[5991]: symlink '../../loop1' '/dev/disk/by-diskseq/75.tmp-b7:1' failed: Read-only file system [ 184.494198][ T5706] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 184.513740][ T7501] ================================================================== [ 184.521947][ T7501] BUG: KASAN: slab-use-after-free in string+0x471/0x4d0 [ 184.528883][ T7501] Read of size 1 at addr ffff88802c44e460 by task syz.0.533/7501 [ 184.534221][ T5609] udevd[5609]: symlink '../../loop2' '/dev/disk/by-diskseq/74.tmp-b7:2' failed: Read-only file system [ 184.536704][ T7501] [ 184.536722][ T7501] CPU: 0 UID: 0 PID: 7501 Comm: syz.0.533 Tainted: G L syzkaller #0 PREEMPT(full) [ 184.536748][ T7501] Tainted: [L]=SOFTLOCKUP [ 184.536755][ T7501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 184.536765][ T7501] Call Trace: [ 184.536771][ T7501] [ 184.536778][ T7501] dump_stack_lvl+0x100/0x190 [ 184.536802][ T7501] print_report+0x13d/0x4b0 [ 184.536825][ T7501] ? __virt_addr_valid+0x239/0x430 [ 184.536852][ T7501] ? string+0x471/0x4d0 [ 184.536870][ T7501] kasan_report+0xdf/0x1c0 [ 184.536894][ T7501] ? string+0x471/0x4d0 [ 184.536914][ T7501] string+0x471/0x4d0 [ 184.536934][ T7501] ? __pfx_string+0x10/0x10 [ 184.536958][ T7501] ? __kernel_text_address+0xd/0x30 [ 184.536976][ T7501] ? unwind_get_return_address+0x59/0xa0 [ 184.536994][ T7501] vsnprintf+0x422/0x1300 [ 184.537015][ T7501] ? __pfx_vsnprintf+0x10/0x10 [ 184.537034][ T7501] ? stack_depot_save_flags+0x27/0x9d0 [ 184.537059][ T7501] ? __lock_acquire+0x49f/0x1a40 [ 184.537079][ T7501] snprintf+0xc7/0x100 [ 184.537098][ T7501] ? __pfx_snprintf+0x10/0x10 [ 184.537116][ T7501] ? __kasan_slab_free+0x5f/0x80 [ 184.537135][ T7501] ? __x64_sys_ioctl+0xb7/0x210 [ 184.537156][ T7501] ? do_syscall_64+0x115/0x870 [ 184.537175][ T7501] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.537195][ T7501] dev_vprintk_emit+0x375/0x3e0 [ 184.537215][ T7501] ? __pfx_dev_vprintk_emit+0x10/0x10 [ 184.537237][ T7501] dev_printk_emit+0xd2/0x10d [ 184.537255][ T7501] ? __pfx_dev_printk_emit+0x10/0x10 [ 184.537276][ T7501] ? find_held_lock+0x2b/0x80 [ 184.537292][ T7501] __dev_printk+0xcb/0x100 [ 184.537311][ T7501] _dev_err+0xef/0x127 [ 184.537329][ T7501] ? __pfx__dev_err+0x10/0x10 [ 184.537348][ T7501] ? dummy_queue+0x3ca/0xb00 [ 184.537371][ T7501] ? find_held_lock+0x2b/0x80 [ 184.537385][ T7501] ? raw_process_ep0_io+0x314/0x9c0 [ 184.537412][ T7501] raw_process_ep0_io.cold+0x65/0x7f [ 184.537436][ T7501] raw_ioctl+0x1248/0x2b80 [ 184.537459][ T7501] ? __pfx_raw_ioctl+0x10/0x10 [ 184.537482][ T7501] ? selinux_file_ioctl+0xb6/0x290 [ 184.537505][ T7501] ? __pfx_raw_ioctl+0x10/0x10 [ 184.537528][ T7501] __x64_sys_ioctl+0x18e/0x210 [ 184.537551][ T7501] do_syscall_64+0x115/0x870 [ 184.537575][ T7501] ? clear_bhb_loop+0x70/0xc0 [ 184.537593][ T7501] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.537609][ T7501] RIP: 0033:0x7f4abbf9dd6b [ 184.537624][ T7501] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 184.537640][ T7501] RSP: 002b:00007f4abcdc1f50 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 184.537659][ T7501] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f4abbf9dd6b [ 184.537671][ T7501] RDX: 00007f4abcdc1fd0 RSI: 00000000c0085504 RDI: 0000000000000003 [ 184.537681][ T7501] RBP: 00007f4abc035024 R08: 0000000000000000 R09: 0000000000000000 [ 184.537691][ T7501] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f4abcdc1fd8 [ 184.537701][ T7501] R13: 0000000000000000 R14: 00007f4abc225fa0 R15: 00007ffef98ecb08 [ 184.537715][ T7501] [ 184.537721][ T7501] [ 184.849707][ T7501] Allocated by task 1: [ 184.853755][ T7501] kasan_save_stack+0x30/0x50 [ 184.858420][ T7501] kasan_save_track+0x14/0x30 [ 184.863684][ T7501] __kasan_kmalloc+0xaa/0xb0 [ 184.868256][ T7501] __kmalloc_node_track_caller_noprof+0x331/0x830 [ 184.874653][ T7501] kvasprintf+0xbc/0x150 [ 184.878883][ T7501] kvasprintf_const+0x66/0x1a0 [ 184.883632][ T7501] kobject_set_name_vargs+0x5a/0x140 [ 184.888900][ T7501] dev_set_name+0xc7/0x100 [ 184.893383][ T7501] usb_add_gadget+0x520/0x920 [ 184.898041][ T7501] usb_add_gadget_udc+0x26/0x70 [ 184.902870][ T7501] dummy_udc_probe+0x69e/0x960 [ 184.907625][ T7501] platform_probe+0x106/0x1d0 [ 184.912282][ T7501] really_probe+0x241/0xa60 [ 184.916771][ T7501] __driver_probe_device+0x20e/0x450 [ 184.922045][ T7501] driver_probe_device+0x4a/0x140 [ 184.927051][ T7501] __device_attach_driver+0x1df/0x320 [ 184.932405][ T7501] bus_for_each_drv+0x159/0x1e0 [ 184.937248][ T7501] __device_attach+0x1e4/0x4d0 [ 184.941994][ T7501] device_initial_probe+0xaf/0xd0 [ 184.947016][ T7501] bus_probe_device+0x64/0x160 [ 184.951759][ T7501] device_add+0x121d/0x1970 [ 184.956262][ T7501] platform_device_add+0x35a/0x800 [ 184.961370][ T7501] dummy_hcd_init+0x803/0xc00 [ 184.966041][ T7501] do_one_initcall+0x11d/0x700 [ 184.970795][ T7501] kernel_init_freeable+0x6ea/0x7b0 [ 184.975983][ T7501] kernel_init+0x1f/0x1e0 [ 184.980292][ T7501] ret_from_fork+0x72b/0xd50 [ 184.984869][ T7501] ret_from_fork_asm+0x1a/0x30 [ 184.989621][ T7501] [ 184.991926][ T7501] Freed by task 7515: [ 184.995882][ T7501] kasan_save_stack+0x30/0x50 [ 185.000554][ T7501] kasan_save_track+0x14/0x30 [ 185.005228][ T7501] kasan_save_free_info+0x3b/0x70 [ 185.010232][ T7501] __kasan_slab_free+0x5f/0x80 [ 185.015000][ T7501] kfree+0x22b/0x6c0 [ 185.018874][ T7501] kfree_const+0x5a/0x70 [ 185.023099][ T7501] kobject_put+0x218/0x640 [ 185.027493][ T7501] put_device+0x1f/0x30 [ 185.031634][ T7501] platform_remove+0x5f/0x80 [ 185.036210][ T7501] device_remove+0xcb/0x180 [ 185.040695][ T7501] device_release_driver_internal+0x44e/0x620 [ 185.046746][ T7501] unbind_store+0xf8/0x110 [ 185.051139][ T7501] drv_attr_store+0x74/0xb0 [ 185.055632][ T7501] sysfs_kf_write+0xf2/0x150 [ 185.060203][ T7501] kernfs_fop_write_iter+0x3e0/0x5f0 [ 185.065472][ T7501] vfs_write+0x6ac/0x1050 [ 185.069785][ T7501] ksys_write+0x12a/0x250 [ 185.074092][ T7501] do_syscall_64+0x115/0x870 [ 185.078670][ T7501] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.084543][ T7501] [ 185.086848][ T7501] The buggy address belongs to the object at ffff88802c44e460 [ 185.086848][ T7501] which belongs to the cache kmalloc-16 of size 16 [ 185.100704][ T7501] The buggy address is located 0 bytes inside of [ 185.100704][ T7501] freed 16-byte region [ffff88802c44e460, ffff88802c44e470) [ 185.114217][ T7501] [ 185.116537][ T7501] The buggy address belongs to the physical page: [ 185.122923][ T7501] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2c44e [ 185.131661][ T7501] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 185.138841][ T7501] page_type: f5(slab) [ 185.142817][ T7501] raw: 00fff00000000000 ffff88813fe21640 dead000000000100 dead000000000122 [ 185.151381][ T7501] raw: 0000000000000000 0000000800800080 00000000f5000000 0000000000000000 [ 185.159937][ T7501] page dumped because: kasan: bad access detected [ 185.166325][ T7501] page_owner tracks the page as allocated [ 185.172104][ T7501] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 8851233484, free_ts 0 [ 185.191098][ T7501] register_dummy_stack+0x74/0xb0 [ 185.196125][ T7501] init_page_owner+0x42/0xa10 [ 185.200782][ T7501] page_ext_init+0x71d/0x780 [ 185.205374][ T7501] mm_core_init+0x229/0x270 [ 185.209956][ T7501] page_owner free stack trace missing [ 185.215300][ T7501] [ 185.217604][ T7501] Memory state around the buggy address: [ 185.223217][ T7501] ffff88802c44e300: 00 04 fc fc 00 04 fc fc 00 04 fc fc 00 00 fc fc [ 185.231258][ T7501] ffff88802c44e380: 00 04 fc fc 00 00 fc fc 00 04 fc fc 00 04 fc fc [ 185.239299][ T7501] >ffff88802c44e400: 00 04 fc fc 00 01 fc fc 00 01 fc fc fa fb fc fc [ 185.247347][ T7501] ^ [ 185.254525][ T7501] ffff88802c44e480: 00 04 fc fc 00 04 fc fc 00 00 fc fc fa fb fc fc [ 185.262588][ T7501] ffff88802c44e500: fa fb fc fc 00 04 fc fc 00 04 fc fc 00 04 fc fc [ 185.270624][ T7501] ================================================================== [ 185.348740][ T5706] usb 1-1: USB disconnect, device number 31 [ 185.420103][ T5609] udevd[5609]: symlink '../../loop2' '/dev/disk/by-diskseq/74.tmp-b7:2' failed: Read-only file system [ 185.435388][ T7501] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 185.442623][ T7501] CPU: 1 UID: 0 PID: 7501 Comm: syz.0.533 Tainted: G L syzkaller #0 PREEMPT(full) [ 185.453386][ T7501] Tainted: [L]=SOFTLOCKUP [ 185.457698][ T7501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 185.467737][ T7501] Call Trace: [ 185.471002][ T7501] [ 185.473924][ T7501] dump_stack_lvl+0x100/0x190 [ 185.478590][ T7501] vpanic+0x552/0x970 [ 185.482572][ T7501] ? __pfx_vpanic+0x10/0x10 [ 185.487076][ T7501] ? string+0x471/0x4d0 [ 185.491216][ T7501] panic+0xd1/0xe0 [ 185.494923][ T7501] ? __pfx_panic+0x10/0x10 [ 185.499428][ T7501] ? string+0x471/0x4d0 [ 185.503589][ T7501] ? preempt_schedule_common+0x42/0xc0 [ 185.509051][ T7501] check_panic_on_warn.cold+0x19/0x34 [ 185.514429][ T7501] end_report.part.0+0x3a/0x90 [ 185.519195][ T7501] kasan_report.cold+0xe/0x18 [ 185.523899][ T7501] ? string+0x471/0x4d0 [ 185.528055][ T7501] string+0x471/0x4d0 [ 185.532023][ T7501] ? __pfx_string+0x10/0x10 [ 185.536780][ T7501] ? __kernel_text_address+0xd/0x30 [ 185.541982][ T7501] ? unwind_get_return_address+0x59/0xa0 [ 185.547599][ T7501] vsnprintf+0x422/0x1300 [ 185.551929][ T7501] ? __pfx_vsnprintf+0x10/0x10 [ 185.556676][ T7501] ? stack_depot_save_flags+0x27/0x9d0 [ 185.562121][ T7501] ? __lock_acquire+0x49f/0x1a40 [ 185.567046][ T7501] snprintf+0xc7/0x100 [ 185.571102][ T7501] ? __pfx_snprintf+0x10/0x10 [ 185.575763][ T7501] ? __kasan_slab_free+0x5f/0x80 [ 185.580688][ T7501] ? __x64_sys_ioctl+0xb7/0x210 [ 185.585539][ T7501] ? do_syscall_64+0x115/0x870 [ 185.590288][ T7501] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.596339][ T7501] dev_vprintk_emit+0x375/0x3e0 [ 185.601177][ T7501] ? __pfx_dev_vprintk_emit+0x10/0x10 [ 185.606540][ T7501] dev_printk_emit+0xd2/0x10d [ 185.611220][ T7501] ? __pfx_dev_printk_emit+0x10/0x10 [ 185.616491][ T7501] ? find_held_lock+0x2b/0x80 [ 185.621147][ T7501] __dev_printk+0xcb/0x100 [ 185.625549][ T7501] _dev_err+0xef/0x127 [ 185.629614][ T7501] ? __pfx__dev_err+0x10/0x10 [ 185.634286][ T7501] ? dummy_queue+0x3ca/0xb00 [ 185.638868][ T7501] ? find_held_lock+0x2b/0x80 [ 185.643533][ T7501] ? raw_process_ep0_io+0x314/0x9c0 [ 185.648723][ T7501] raw_process_ep0_io.cold+0x65/0x7f [ 185.654001][ T7501] raw_ioctl+0x1248/0x2b80 [ 185.658427][ T7501] ? __pfx_raw_ioctl+0x10/0x10 [ 185.663187][ T7501] ? selinux_file_ioctl+0xb6/0x290 [ 185.668308][ T7501] ? __pfx_raw_ioctl+0x10/0x10 [ 185.673077][ T7501] __x64_sys_ioctl+0x18e/0x210 [ 185.677919][ T7501] do_syscall_64+0x115/0x870 [ 185.682547][ T7501] ? clear_bhb_loop+0x70/0xc0 [ 185.687210][ T7501] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.693174][ T7501] RIP: 0033:0x7f4abbf9dd6b [ 185.697591][ T7501] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 185.717194][ T7501] RSP: 002b:00007f4abcdc1f50 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 185.725591][ T7501] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f4abbf9dd6b [ 185.733547][ T7501] RDX: 00007f4abcdc1fd0 RSI: 00000000c0085504 RDI: 0000000000000003 [ 185.741509][ T7501] RBP: 00007f4abc035024 R08: 0000000000000000 R09: 0000000000000000 [ 185.749469][ T7501] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f4abcdc1fd8 [ 185.757423][ T7501] R13: 0000000000000000 R14: 00007f4abc225fa0 R15: 00007ffef98ecb08 [ 185.765380][ T7501] [ 185.768693][ T7501] Kernel Offset: disabled [ 185.773436][ T7501] Rebooting in 86400 seconds..