last executing test programs: 4m2.797729801s ago: executing program 0 (id=45): personality(0x4100001) uname(&(0x7f0000000640)=""/4096) 4m2.796193105s ago: executing program 0 (id=47): r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) preadv(r0, &(0x7f0000001880)=[{&(0x7f00000018c0)=""/98, 0xbb}], 0x1, 0x0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000040)={@local, 0x0}, &(0x7f0000000080)=0x14) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f00000000c0)={@loopback, r2}, 0x14) 4m2.733239638s ago: executing program 0 (id=50): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) getsockopt$inet6_int(r0, 0x29, 0x31, 0x0, &(0x7f0000000080)) r1 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x55}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) r5 = socket(0x10, 0x3, 0x0) socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x4, &(0x7f0000000500)={0x7ff, {{0xa, 0x4e22, 0x7fffffff, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1a}}, 0x8}}, {{0xa, 0x4e22, 0xd14, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x9}}}, 0x108) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003140)=ANY=[@ANYBLOB="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", @ANYRES32=r5, @ANYBLOB="08001a00", @ANYRES32=r5, @ANYBLOB="08001b"], 0x18c0}, 0x1, 0x0, 0x0, 0x880}, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r6, 0x6, 0x9, &(0x7f00000001c0)={{0xfc, @loopback, 0x100, 0x80000, 'lc\x00', 0x8, 0x2, 0x41ffff7b}, {@private=0xa010106, 0x0, 0x0, 0x200004, 0x6, 0xab19}}, 0x44) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r5) r9 = add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480)={'fscrypt:', @auto=[0x0, 0x0, 0x0, 0x34]}, &(0x7f00000000c0)={0x0, "3e82554dc8ccfbc2e85ec82d4ee9df60f6ae16b1a5f2c848722ba3b132e4fde178c945bd950b0477e801fc8a1be9b4ebbe9c2289a6b0aa00"}, 0x48, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) mkdir(&(0x7f0000000040)='./bus\x00', 0x49) r11 = fanotify_init(0x1a, 0x800) r12 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0xa8) fanotify_mark(r11, 0x441, 0x4800001a, r12, 0x0) fanotify_mark(r11, 0x1, 0x20, r12, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x109000, 0x8) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r10, 0x5761, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000000000001"]) socket$packet(0x11, 0x2, 0x300) keyctl$KEYCTL_WATCH_KEY(0x20, r9, r10, 0x0) r13 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) ioctl$UBLK_U_CMD_GET_FEATURES(0xffffffffffffffff, 0x80207513, &(0x7f0000000340)={0x0, 0xffff, 0x8, &(0x7f0000000300)}) syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000480)=@ublk_get_dev_info_sqe={0x2e, 0x22, 0x0, r10, 0x80207502, 0x0, 0x0, 0x0, 0x1, 0xffff, 0x0, r13, '\x00', {r14, 0xffff, 0x40, &(0x7f00000003c0)}}) r15 = syz_open_dev$vim2m(&(0x7f0000000040), 0x88a, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r15, 0xc0405602, &(0x7f00000001c0)={0x19, 0x1, 0x0, "14a5593b595ccb9e289f1548f12ec9745f90084a013424cf6dc99d2466980300", 0x38414761}) sendmsg$NL80211_CMD_GET_WIPHY(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001240)={0x24, r8, 0xff99, 0x8, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x7}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x240001c5}, 0x4) syz_io_uring_submit(r2, r3, r4, &(0x7f00000001c0)=@IORING_OP_FUTEX_WAITV={0x35, 0x44, 0x0, 0x0, 0x0, &(0x7f00000019c0)=[{0x5, 0x0, 0x2}], 0x1, 0x0, 0x1}) ioctl$SIOCGSTAMP(r5, 0x8906, &(0x7f0000000000)) 4m1.639684865s ago: executing program 0 (id=53): syz_open_dev$ttys(0xc, 0x2, 0x0) close(0x3) openat$pmem0(0xffffffffffffff9c, &(0x7f0000003f80), 0xc64e80, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000500)=@ccm_128={{0x303}, "0e57b3d487e2db32", "4f2c3e223509000000000000000000d3", '\x00', "6775c975b6b15e11"}, 0x28) sendmsg$inet6(r1, &(0x7f00000002c0)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)}, 0x48043) r4 = dup(r1) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f0000000340)=0x3, 0x4) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) shutdown(r0, 0x1) write$P9_RSETATTR(r5, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) r6 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000200), 0x20a00, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x234a094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r7 = open(&(0x7f0000000000)='.\x00', 0x0, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f00000004c0)='./file1/file0\x00', &(0x7f0000000500)='./file1/file0\x00', 0x0, 0x5040, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r7, 0x40049366, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000480)=0x1) 4m0.66879015s ago: executing program 0 (id=64): r0 = socket$kcm(0x10, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x0, 0x36}, @l2cap_cid_signaling={{0x32}, [@l2cap_cmd_rej_unk={{0x1, 0x2, 0x2}, {0x8000}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x3, 0x2}, {0xb9}}, @l2cap_conf_req={{0x4, 0x4, 0x1a}, {0x8000, 0x0, [@l2cap_conf_flushto={0x2, 0x2, 0xfff8}, @l2cap_conf_efs={0x6, 0x10, {0x6, 0x2, 0x9, 0x6, 0xc3b, 0x9}}]}}, @l2cap_move_chan_rsp={{0xf, 0x9, 0x4}, {0x5b, 0x6}}]}}, 0x3b) (async) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 4m0.266368584s ago: executing program 0 (id=67): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) sendmsg$inet(r2, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, 0x0}, 0x30004084) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000140)={@host}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r4, 0x7a8, &(0x7f00000001c0)={{@host}, @host, 0x0, 0x6, 0x244c, 0xffffffffffffffff, 0x101, 0x0, 0xfffffffc}) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f00000000c0)=0xb0000) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r6) sendmsg$ETHTOOL_MSG_DEBUG_SET(r6, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r1, @ANYRES16=r7, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r6, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="c8000000", @ANYRES16=r8, @ANYBLOB="00082bbd7000fddbdf2513000000580004801300010062726f6164636173030000006e6b00000900010073797a30000000001300010062726f6164636173742d6c696e6b00000900010073797a31000000001300010062726f6164636173742d6c696e6b00005c00068008000100030000004d0003002c6efc81e532291e0177b29fa12958a0b977c581a53e61f5c7cd9d3c9e9d3a7cf19a5fa5703a40af7d6fe4dcdcd7b38a0931aae6eda41e8ada909d574f554921a92d504ec3589998d7000000"], 0xc8}, 0x1, 0x0, 0x0, 0x1}, 0x48094) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000040)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r5, 0x7a8, &(0x7f00000000c0)={{@hyper, 0xffffffff}, @hyper, 0xc, 0x0, 0x1, 0x4, 0x5a, 0x4, 0x800}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r4, 0x7a4, &(0x7f0000000000)={{@host}, 0x200000000000, 0x0, 0x0, 0xfffffffc}) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x32000, 0x0) listen(r9, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYRES32=r9], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x40f00, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r11, @ANYRES32=r10, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r11, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r9}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) 4m0.252074513s ago: executing program 32 (id=67): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) sendmsg$inet(r2, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, 0x0}, 0x30004084) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000140)={@host}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r4, 0x7a8, &(0x7f00000001c0)={{@host}, @host, 0x0, 0x6, 0x244c, 0xffffffffffffffff, 0x101, 0x0, 0xfffffffc}) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f00000000c0)=0xb0000) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r6) sendmsg$ETHTOOL_MSG_DEBUG_SET(r6, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r1, @ANYRES16=r7, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r6, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="c8000000", @ANYRES16=r8, @ANYBLOB="00082bbd7000fddbdf2513000000580004801300010062726f6164636173030000006e6b00000900010073797a30000000001300010062726f6164636173742d6c696e6b00000900010073797a31000000001300010062726f6164636173742d6c696e6b00005c00068008000100030000004d0003002c6efc81e532291e0177b29fa12958a0b977c581a53e61f5c7cd9d3c9e9d3a7cf19a5fa5703a40af7d6fe4dcdcd7b38a0931aae6eda41e8ada909d574f554921a92d504ec3589998d7000000"], 0xc8}, 0x1, 0x0, 0x0, 0x1}, 0x48094) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000040)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r5, 0x7a8, &(0x7f00000000c0)={{@hyper, 0xffffffff}, @hyper, 0xc, 0x0, 0x1, 0x4, 0x5a, 0x4, 0x800}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r4, 0x7a4, &(0x7f0000000000)={{@host}, 0x200000000000, 0x0, 0x0, 0xfffffffc}) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x32000, 0x0) listen(r9, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYRES32=r9], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x40f00, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r11, @ANYRES32=r10, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r11, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r9}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) 3m51.235629851s ago: executing program 2 (id=141): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6, 0x0, 0x0, 0x40000}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet(0x2, 0x3, 0x2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) (async) ioctl$TUNSETLINK(r3, 0x400454cd, 0x306) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f00000001c0)={{0x2, 0x4e24, @broadcast}, {0x320}, 0x10, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x14}}, 'syzkaller0\x00'}) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x28, r5, 0x401, 0x70bd27, 0xa, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random='\x00'}, @crypto_settings=[@NL80211_ATTR_AKM_SUITES={0x4}]]}, 0x28}}, 0x0) (async) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$inet_int(r7, 0x0, 0x3, 0x0, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="9806007f0000000001000d1e81b8b45c60691000cae39df7408fe7c5e76c6ce65172133a2054f1395434a1c0d0d91606102743", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3m51.042339568s ago: executing program 2 (id=144): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x14) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x1) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) write$input_event(r0, &(0x7f0000000080)={{}, 0x1, 0x1, 0x1}, 0x18) write$uinput_user_dev(r0, &(0x7f0000000840)={'syz1\x00', {0x9, 0x8000, 0x5, 0x1}, 0x39, [0xfffffff8, 0x15, 0x0, 0x1ff, 0x2, 0xb2b3, 0x8, 0x2, 0xa6, 0x3, 0xaad, 0x7fff, 0x200, 0x1c, 0x3c0, 0xfffffff8, 0x0, 0xed48, 0x101, 0xffffffe4, 0xb6c0, 0x9, 0x5, 0x82, 0x2, 0xf9, 0x0, 0xfffffffb, 0xfffff000, 0x6, 0x7e2, 0xb8, 0x7, 0x9, 0x1ff, 0x3ff, 0x3, 0x5, 0xffffffff, 0x5, 0x9, 0x9, 0xd, 0x100, 0xffffffff, 0xffffa190, 0xe, 0x0, 0x2, 0x1, 0x8, 0x3, 0x5, 0x6, 0x202000, 0x3, 0x8000006, 0x4, 0xfffff800, 0x2000, 0x4, 0x3, 0xe0, 0x6], [0x8e, 0x5, 0x6, 0x7, 0x10000, 0x1ff, 0x3, 0x8, 0x20, 0x6, 0xffffffff, 0xf, 0x4, 0x7, 0x1, 0xfffffffd, 0x8, 0x3, 0xf6a, 0x4, 0x47, 0x0, 0x8, 0xfffff801, 0x4, 0x5, 0x25a6, 0x5, 0x5, 0x10001, 0x95, 0x1, 0x8, 0x2, 0x7fff, 0x5ea, 0x2, 0x0, 0xaf99, 0x3, 0x1, 0xfffffffc, 0x7, 0x2d, 0xfffffffa, 0x75, 0x1dd1, 0x5, 0x1, 0x9, 0x2, 0x7, 0x3, 0x7, 0x8, 0x9, 0x100, 0x32, 0x7f, 0x9, 0x0, 0xf, 0xc0000000, 0xfffffffa], [0xfc, 0x58, 0x3, 0x7, 0x8001, 0x9, 0x80000000, 0xfffffffb, 0x1, 0x8, 0x9, 0xffffff30, 0x7, 0x1, 0x0, 0xd, 0xf, 0x0, 0x48a6, 0x6, 0x7c92c89, 0xffffffff, 0x7, 0x300, 0x6, 0x0, 0x7, 0x4, 0x8, 0x4, 0x29c, 0x1ff, 0x7, 0xfffffffe, 0x5, 0x2, 0xf, 0x5, 0x4, 0xfffffff9, 0x8, 0x5, 0xff, 0x4, 0x2, 0x6, 0x7, 0x406, 0x1, 0x7, 0xf, 0x2, 0xfff, 0x9, 0x8, 0x7, 0x1c, 0x9, 0x9, 0x6, 0x6, 0x6, 0x7, 0x7], [0x3a5, 0x9f6, 0x4, 0x401, 0xff, 0xa, 0x9, 0x0, 0xaad, 0x8, 0xd, 0x3, 0x3, 0x51, 0xfffffffa, 0x98ea, 0xffffff81, 0x3, 0x80000000, 0x7fff, 0x800, 0x1b3, 0x9, 0xa8ed, 0xc5a, 0xfff, 0x8, 0x8, 0x3698, 0x6, 0x97ea, 0x3, 0xffff, 0x3, 0x9, 0x8, 0x2, 0x1, 0x80, 0x8, 0xc, 0x10159529, 0x7, 0x101, 0x7, 0x1, 0x8000, 0x3, 0x9, 0x81, 0x9, 0x39f, 0xfffffff1, 0x2, 0x7, 0x35f, 0x10001, 0xc29, 0x2, 0x0, 0xffff65bd, 0x4, 0x5, 0x9]}, 0x45c) 3m50.973594819s ago: executing program 2 (id=145): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0x4}, {0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x5, [0xc, 0x9, 0x0, 0xf, 0x10, 0x2, 0x6, 0x2, 0x8, 0x2, 0x0, 0x1, 0x8, 0x1, 0x10, 0x4], 0x3, [0xc, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x6, 0xd03, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfffd, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x2a, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x4]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r8, 0x0, 0x0, 0x48040, &(0x7f00000001c0)={0x11, 0x7, r7, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r9) sendmsg$TIPC_CMD_ENABLE_BEARER(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0xfffffffffff10000, 0x0, 0x44081}, 0x40000) 3m49.512535921s ago: executing program 2 (id=149): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x2000000000000247, &(0x7f0000000240)=ANY=[@ANYRES16=0x0], &(0x7f00000001c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x7c}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x141) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xa4) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x100) renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000280)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="cf0400000000000000001300000008000300", @ANYRES32=r5, @ANYRES64], 0x44}, 0x1, 0x0, 0x0, 0x40000c0}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r0, r6, 0x25, 0x4, @val=@netfilter={0x7, 0x0, 0x9}}, 0x20) syz_emit_ethernet(0x15, &(0x7f00000003c0)={@remote, @empty, @val={@void, {0x8100, 0x5, 0x1, 0x4}}, {@x25={0x805, {0x1, 0x6, 0xf3}}}}, 0x0) r7 = socket$inet6(0xa, 0x80002, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'syz_tun\x00'}) socket$inet6_sctp(0xa, 0x5, 0x84) timer_create(0x7, &(0x7f0000000080)={0x0, 0x7, 0x2, @thr={&(0x7f0000000e40)="9f1dbea54ec3d837cc2bdd5aca2397db00933951f7ee7bfe6efafd5ba702eb7f9396d52a7f9f81b88941d35e72e1405f060f658faa9f35b33ed23a31404cecb73a65cbf2d326ebfba0990de85e14893fa78cb60eafc9565b978be980d6a02bcd638a5376cd2fcef194b075a31d36e89d91dcf9bc059a4b27cac4a4aa93faee7223fd3f8d3928bc750cd8b9c79301b057d4d419b411e8570f58b0be09673705ea146ff7ce23b8f2346adfc7ace3ef3e0f3acd81889864f2be", &(0x7f0000000f00)="533bfe53c597814e2f7fd46ed4fee7731f4ebb67656d2baa8b3cec0fe6351c2b79741181b2436e655f356101cc05d4b40f27085d85df4c19c0ad729c44ccb99cafc44d9a259abfe27406e61fd7dced2181f462bc2e1d20337330b54b7901f253f747da4462"}}, &(0x7f0000000200)) pread64(0xffffffffffffffff, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000300) write$binfmt_elf64(0xffffffffffffffff, &(0x7f000001a240)=ANY=[@ANYBLOB="7f454c46f903164e010400000000000002000000ff010000b4020000000000004000000000000000e7030000000000000000000001003800020000000700040051e574640100000004000000000000000800000000000000030000000000000001000000000000000000000000000000020000000000000000000070ff7f000008000000000000000200000000000000080000000000000000000000c0ffffffff00000000000000d80000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000014000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000386b7bb907c216c77b4034b38b3626ad00eb555cbbb04a7f49df2fa6a08cc0703782ed"], 0xab0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) socket(0x22, 0x2, 0x2) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r9 = syz_clone(0x5002011, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r9) 3m49.374185738s ago: executing program 2 (id=152): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4010000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@getneigh={0x14, 0x1e, 0x8, 0x70bd25, 0x6, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8044080}, 0x4004080) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_4ADDR={0x5}]}, 0x24}}, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x4e, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000800)=@newtfilter={0x64, 0x2c, 0xd3f, 0x70b524, 0x25dfdbfa, {0x0, 0x0, 0x0, r7, {0xe, 0xffe0}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_flow={{0x9}, {0x34, 0x2, [@TCA_FLOW_EMATCHES={0x20, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x5, 0x2, 0x4}, {0x7, 0x0, 0x1}}}]}]}, @TCA_FLOW_KEYS={0x8, 0x1, 0x18d0b}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4008848}, 0xc884) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0xb}, {0x65}}, [@printk={@lld, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x4, 0x1, 0x4, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffffffff}, {0x15}}], {{0x7, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3m49.030757257s ago: executing program 2 (id=156): ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000080)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x7, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x10, 0x9]}}) r0 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000240)="166ec4b16abf8d77", 0x8, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) (fail_nth: 28) 3m48.889396422s ago: executing program 33 (id=156): ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000080)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x7, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x10, 0x9]}}) r0 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000240)="166ec4b16abf8d77", 0x8, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) (fail_nth: 28) 38.487692s ago: executing program 5 (id=1731): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) socket$netlink(0x10, 0x3, 0x0) mlock(&(0x7f0000400000/0xc00000)=nil, 0xc00000) mremap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x400000, 0x7, &(0x7f0000000000/0x400000)=nil) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r2, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="1800120076000d0b"], 0x18}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000888}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=@getchain={0x3c, 0x66, 0x2, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xe, 0x4}, {0x2, 0x6}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x40}, {0x8, 0xb, 0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008084) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', 0x0, &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/platform/drivers/i8042/unbind\x00', 0x1, 0x0) write(r3, &(0x7f0000000200)='i8042\x00', 0x6) syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/packet\x00') r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x3c}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc0}}, &(0x7f0000000080)='GPL\x00', 0xf, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x25, r4, 0x8, &(0x7f0000000180)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) 37.31772652s ago: executing program 1 (id=1737): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) statx(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x10, &(0x7f00000001c0)) 37.253600321s ago: executing program 1 (id=1739): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000001140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01010000000000000000020000000900010073797a3000000000080002400000000350000000120a01010000000000000000020000000900010073797a3000000000070002006f303000080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303100080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303200080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303300080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303400080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303500080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303600080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303700080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303800080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303900080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313000080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313100080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313200080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313300080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313400080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313500080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313600080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313700080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313800080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313900080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f323000080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f323100080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f323200080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f323300080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f323400080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f323500080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f323600080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f323700080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f323800080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f323900080003400000000720000480060001000002000005000200110000000c000300080001000000001e14000000110001"], 0xcd0}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0) openat(0xffffffffffffff9c, 0x0, 0x4c0142, 0x161) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180), 0x8100, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) getpid() close(0x3) 3.298678152s ago: executing program 1 (id=1741): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./debug/tracing/trace_pipe\x00', 0x8000, 0x0) read(r1, &(0x7f0000001000)=""/8192, 0x2000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)='u', 0x1}], 0x1}, 0x4040001) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) 3.285202991s ago: executing program 4 (id=1743): syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcf"], 0x0) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000140)=""/210) 3.284815439s ago: executing program 1 (id=1744): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xc, 0xe, &(0x7f0000001200)=ANY=[@ANYBLOB="b702000047000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a876d839240d29c035055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7e8dc34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bb44b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334583239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bf4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc508afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd360000000000000000ae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c97a088a22e8b15c3e233db00002e30d46a0024d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x94) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/74, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000400)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x1, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92, 0x4000}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000001500)={@my=0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001540)=""/4092}) r2 = eventfd(0x10000) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000040)={0x0, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 3.284554844s ago: executing program 5 (id=1745): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22, 0x8000, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, 0x0, 0x1d2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x40) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r3 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt(r3, 0x6b, 0xffff, 0x0, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r4, &(0x7f0000000580)='1\x00', 0x2) write$sysctl(r4, &(0x7f00000000c0)='2\x00', 0x2) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x8c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x100}}, 0x0) 2.355040941s ago: executing program 3 (id=1747): r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f0000000500), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$dsp(0xffffffffffffff9c, 0x0, 0x62f82, 0x0) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, 0x0) mkdir(0x0, 0x1ff) mkdir(0x0, 0x1ff) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) recvmmsg(r3, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x2, 0x0) ioctl$SIOCGETSGCNT(0xffffffffffffffff, 0x89a0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800}, 0x1c) r4 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r4, 0x403c6f2b, 0x0) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) 2.354736978s ago: executing program 5 (id=1748): mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x200000e, 0x6c2f2, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000100)={&(0x7f000018e000/0x3000)=nil, &(0x7f00000da000/0x4000)=nil, 0x3000}) 2.354549955s ago: executing program 1 (id=1749): r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$CDROM_LOCKDOOR(r0, 0x5329, 0x0) ioctl$CDROMEJECT(r0, 0x5309) ioctl$CDROM_NEXT_WRITABLE(r0, 0x5394, 0x0) 2.201517435s ago: executing program 5 (id=1750): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/connector\x00') setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x2, 0x1, 0x2, 0xc, 0xbc, 0x101}, 0x20) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001004629122e169f", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/25], 0xe) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000030000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000007000000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704c6f9150000008500"], &(0x7f0000000ac0)='syzkaller\x00', 0xf, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r1, 0x8b32, &(0x7f0000000040)) r2 = syz_open_dev$dri(0x0, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r3, 0x0, 0x6, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000400)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR2(r2, 0xc02464bb, &(0x7f00000003c0)={0x1, r4, 0x9, 0x4, 0xeb0, 0x0, 0x0, 0x40, 0xffffff4f}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) getsockopt$sock_buf(r7, 0x1, 0x1f, &(0x7f00000005c0)=""/4096, &(0x7f0000000180)=0x1000) r8 = io_uring_setup(0x2e08, &(0x7f00000001c0)={0x0, 0xfffffffc, 0x0, 0xffffffff, 0x1}) io_uring_register$IORING_REGISTER_BUFFERS(r8, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r9 = userfaultfd(0x80001) ioctl$UFFDIO_API(r9, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x1a5}) ioctl$UFFDIO_REGISTER(r9, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_COPY(r9, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) r10 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@generic={&(0x7f00000000c0)='./file0\x00', 0x0, 0x10}, 0x14) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) 2.01786484s ago: executing program 1 (id=1751): syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) writev(0xffffffffffffffff, &(0x7f0000000080), 0x0) syz_emit_ethernet(0x84, &(0x7f0000000200)={@link_local={0x3, 0x80, 0xc2, 0x0, 0x0, 0x3}, @multicast, @val={@void, {0x8100, 0x3, 0x1}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x72, 0x4, 0x0, 0x0, 0x1, 0x0, @multicast2, @local}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x15, 0x4, 0x3, 0x23, 0x7, 0x67, 0xfffd, 0x3, 0x29, 0x0, @local, @remote, {[@timestamp={0x44, 0xc, 0xcb, 0x0, 0x6, [0x8, 0x5]}, @cipso={0x86, 0x18, 0x3, [{0x5, 0x12, "29ed35fdfa26268201defa29e5c72c10"}]}, @generic={0x44, 0x7, "8d4a929e9e"}, @ssrr={0x89, 0x13, 0x7e, [@remote, @loopback, @dev={0xac, 0x14, 0x14, 0x2e}, @broadcast]}]}}, "6616"}}}}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001880)={0x24, 0x4, 0x6, 0x801, 0x0, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008804}, 0xc810) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x800) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[], 0x80}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000800) socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x100, 0x25dfdbfd, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x6048800) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NL80211_CMD_RADAR_DETECT(r2, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="10002dbd7000fedbdf255e0000000500180105000000080022013402000005001901040000000800a10001800000e4b2173304c795b6d7380e4f8ad304092afac8ae7a35c577e918d801d93b520aa3c6775df0cf71b1574f17261d2662e2f79a5f7a5a1154a4f6b116f774a036f405c5e8d83dca7432c135087d9f04cb73d50a710d69bf896f7b847f149447907822958b45447628c02d3cc68d228394e5809ecfaa9e71f0798c2083f49cf8262d31f54e0069a9ce7f7b92ddf2fe534eb67d38d26b7313cf142d13"], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x20000001) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r5, 0x0, 0x0, 0x40) writev(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="04093f2707001f14179c042791e4c58d04"], 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r6, 0x0, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000a00)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e402010902"], 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r4, 0x0, 0x0}, 0x10) openat$tun(0xffffff9c, &(0x7f0000000000), 0x6940, 0x0) syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0) 1.467848083s ago: executing program 4 (id=1752): r0 = socket(0x6, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x48, 0x30, 0x105, 0x70bd28, 0x0, {}, [{0x34, 0x1, [@m_simple={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x5c, 0x0, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0x9}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_SEQ_ADJ_ORIG={0xc, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x40000000}]}]}, 0x5c}}, 0x0) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="180100003000010003000000fbdbdf2506"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = openat$uhid(0xffffff9c, &(0x7f0000000100), 0x2, 0x0) write$UHID_INPUT(r2, &(0x7f00000003c0)={0x8, {"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", 0x1000}}, 0x1006) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, 0x0) lsm_get_self_attr(0x65, &(0x7f0000000000)={0x0, 0x0, 0xb0, 0x90, ""/144}, &(0x7f00000000c0)=0xb0, 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000000c0)={0x64, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x7}]}]}, 0x64}}, 0x0) sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0xd}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x80) recvmsg$inet_nvme(r0, &(0x7f0000001c80)={0x0, 0x0, 0x0}, 0x1) 1.467621029s ago: executing program 3 (id=1753): r0 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101301, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000000)={'comedi_bond\x00', [0x4, 0x0, 0x7fffffff, 0x5, 0x90000, 0x9, 0xed, 0x890, 0x280ffa, 0xfffffffb, 0x4, 0x1, 0x1030, 0x100000a, 0x4c, 0x40000009, 0xfff7ffa6, 0x3ff, 0x1ff, 0x9ea, 0x3, 0x663, 0x7, 0x101, 0x1, 0x990e, 0x5, 0x18, 0xf, 0x2000008, 0x879a]}) 1.448320112s ago: executing program 3 (id=1754): socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'veth1_to_bond\x00', 0x0}) open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x100) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, &(0x7f00000002c0)={0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/drivers/e1000e/new_id\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='8086 100e ffffffff fffnf', 0x18) 1.397946173s ago: executing program 3 (id=1755): add_key(0x0, 0x0, &(0x7f0000000200)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b05003034313230300603551c030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e", 0x63, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) syz_emit_ethernet(0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa080045000028006700000a06"], 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xf, 0xb}, {0x0, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40048b0}, 0x4890) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f0000000240)="800000800000210ee7decd7a000340008100", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r5, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 1.350002609s ago: executing program 4 (id=1756): socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000280)={@local, @link_local, @void, {@ipv4={0x800, @dccp={{0x6, 0x4, 0x1, 0x8, 0x28, 0x68, 0x0, 0x9, 0x21, 0x0, @rand_addr=0x64010100, @local, {[@generic={0x82, 0x2}]}}, {{0x4e21, 0x4e21, 0x4, 0x1, 0xb, 0x0, 0x0, 0x0, 0x2, "740e23", 0xd, '1\x00'}}}}}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000030000000000000000000a2c000000180a050000000000000000000a0000000900010073797a30000000000900010073797a30000000001400000011"], 0x54}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) 1.188006698s ago: executing program 3 (id=1757): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4c840) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/block/sda/device/scsi_disk/0:0:0:0/max_write_same_blocks\x00', 0x2, 0x0) setpriority(0x1, 0x0, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2}}, @int={0x1, 0x0, 0x0, 0x1, 0x5, 0x1}]}}, 0x0, 0x42}, 0x28) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) write(r3, &(0x7f0000000140)='65535\x00', 0x6) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/block/sda/device/scsi_disk/0:0:0:0/provisioning_mode\x00', 0x2, 0x0) write(r4, &(0x7f00000001c0)='writesame_16', 0xc) openat(r4, 0x0, 0xfe05d8376ee4aac0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}}, 0x20) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, 0x0, 0x0) 1.118834815s ago: executing program 4 (id=1758): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./proc/net/afs/sysname\x00', 0x2, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x111, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f00000003c0)={0xb, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0xab6}}, 0x18) 1.071442663s ago: executing program 4 (id=1759): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x4a, &(0x7f00000002c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "000100", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000001c0)={@local, @random="18fbb984c1f1", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x18, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x59, 0x0, 0x0, 0x4000, {[@mss={0x2, 0x4, 0x7}]}}}}}}}}, 0x0) 993.157196ms ago: executing program 5 (id=1760): socket$inet_tcp(0x2, 0x1, 0x0) epoll_create1(0x80000) socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000600)={"b8e50a31a002b94fcd8fc4db3056309d", 0x0, 0x0, {0x7, 0x100}, {0x0, 0x5}, 0x51, [0x7, 0x3, 0xe, 0x2, 0x9, 0x1, 0xd8e, 0x7fc0000, 0x5, 0x0, 0x6, 0x3, 0x5, 0x49, 0x0, 0xc]}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) write(r0, &(0x7f0000000900), 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0xffffffffffffff7c, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) r3 = openat$ttynull(0xffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000180)=0x22) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeeb, 0x8031, r0, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0xfffffffffffffeef, &(0x7f0000000240)=0x2) r6 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x80080, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00003, 0x1000007, 0x50, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r6, 0x80186803, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) chroot(&(0x7f0000000200)='./file0\x00') pipe(&(0x7f00000000c0)) 940.320456ms ago: executing program 4 (id=1761): syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) close(0x3) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) syz_usb_connect$midi(0x3, 0x47, &(0x7f0000000280)=ANY=[@ANYBLOB="1201710200000008"], 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 724.412553ms ago: executing program 3 (id=1762): syz_usb_connect(0x6, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="010000000000000000000100000038000180060001000200000008000500000000000c000700000000000000000008000900000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4800}, 0x0) mkdir(&(0x7f0000000140)='./sys/bus/pci/rescan\x00', 0x8) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) getpid() mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000004fc0), 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r2, 0x5421, &(0x7f0000005000)) socket$xdp(0x2c, 0x3, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x2a4081, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010025bd7000ffdbdf252100000008000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="24002d8005000400010000000800020001000000050002000b000000050001000300000008000300", @ANYRES32=r7, @ANYBLOB="1ae2f16e894bf09687e1917fff588f8586e6128acf0d16dc"], 0x50}, 0x1, 0x0, 0x0, 0x20008080}, 0x0) write(r3, &(0x7f00000000c0)='1\x00', 0x1) r8 = syz_open_dev$sg(&(0x7f0000000000), 0xf9ba, 0x501) ioctl$SCSI_IOCTL_SEND_COMMAND(r8, 0x1, &(0x7f00000003c0)=ANY=[@ANYBLOB="d20000000504000087000000757ec1471be8f8f93fd5e142eaf9cfd60c3eeb2be0de6a65860fd51df7bd4ad05d2e47a4311d59ff71b7393433e9fa5814913b02c46958961dab41eaf5ff41f17906ce0883498e542d5689f2f724a3c9346fe51101a197d212796eef655ff935f473d81a011e607a31ec47095549b6e20190e5b9daaecaeb7f7ecfdb47dd6e711ed28f125f5748bd051bb4c2d4ad915259138e07f79a13c528babbdccb83e2c92aa54006e802a791042ff39a41bf"]) r9 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r9, &(0x7f00000001c0)='1\x00', 0x1) 0s ago: executing program 5 (id=1763): ioctl$SOUND_MIXER_WRITE_VOLUME(0xffffffffffffffff, 0xc0044d1d, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r3 = io_uring_setup(0x2e08, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000240)=[{&(0x7f0000001700)=""/4095, 0xfff}], 0x1) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, 0x0) r5 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x1) fchdir(r6) openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) r7 = inotify_init() inotify_add_watch(r7, 0x0, 0xa50003d1) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="44000000190001090000000020000000021800000002fd010000000008000100ac1414000800050064010100100016800c"], 0x44}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='ecryptfs\x00', 0x0, 0x0) kernel console output (not intermixed with test programs): syz0 as /devices/virtual/input/input87 [ 178.014138][ T1343] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 178.074168][ T6948] usb 10-1: new full-speed USB device number 15 using dummy_hcd [ 178.098384][ T6948] usb 10-1: device descriptor read/8, error -71 [ 178.185225][ T1343] usb 8-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 178.190024][ T1343] usb 8-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 33, changing to 9 [ 178.198991][ T1343] usb 8-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 33, changing to 9 [ 178.206735][ T1343] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.210226][ T1343] usb 8-1: Product: syz [ 178.211876][ T1343] usb 8-1: Manufacturer: syz [ 178.213865][ T1343] usb 8-1: SerialNumber: syz [ 178.221554][ T1343] ti_usb_3410_5052 8-1:2.0: TI USB 5052 2 port adapter converter detected [ 178.232667][ T1343] usb 8-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 178.238304][ T1343] usb 8-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 178.354482][ T6948] usb 10-1: new full-speed USB device number 16 using dummy_hcd [ 178.385356][ T6948] usb 10-1: device descriptor read/8, error -71 [ 178.463648][T13031] netlink: 'syz.1.1228': attribute type 8 has an invalid length. [ 178.468613][T13031] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1228'. [ 178.472317][T13031] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1228'. [ 178.504929][ T6948] usb usb10-port1: unable to enumerate USB device [ 178.694120][T13050] input: syz0 as /devices/virtual/input/input88 [ 178.771307][T13056] syzkaller0: entered promiscuous mode [ 178.773120][T13056] syzkaller0: entered allmulticast mode [ 178.800540][T13056] tipc: Enabled bearer , priority 0 [ 178.803992][T13055] tipc: Resetting bearer [ 178.820068][T13055] tipc: Disabling bearer [ 178.927115][T13063] IPVS: persistence engine module ip_vs_pe_s not found [ 179.057297][T13075] __nla_validate_parse: 1 callbacks suppressed [ 179.057317][T13075] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1238'. [ 179.322894][T13097] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1244'. [ 179.330479][T13098] netlink: 'syz.1.1243': attribute type 9 has an invalid length. [ 179.700840][T13117] binder_alloc: 13116: binder_alloc_buf size 8 failed, no address space [ 179.706543][T13117] binder_alloc: allocated: 12288 (num: 1 largest: 12288), free: 0 (num: 0 largest: 0) [ 179.760359][T13122] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1248'. [ 180.112182][T13137] syzkaller0: entered promiscuous mode [ 180.113981][T13137] syzkaller0: entered allmulticast mode [ 180.329580][T12987] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set config on port 0, -110 [ 180.337394][T12987] ti_usb_3410_5052_2 ttyUSB0: ti_write_byte - failed, -32 [ 180.343697][T12987] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set modem control on port 0, -32 [ 180.348448][T12987] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot send open command (2), -32 [ 180.450895][ T6948] usb 8-1: USB disconnect, device number 18 [ 180.462452][ T6948] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 180.476110][ T6948] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 180.483414][ T6948] ti_usb_3410_5052 8-1:2.0: device disconnected [ 180.728949][T13169] netlink: 'syz.5.1257': attribute type 8 has an invalid length. [ 180.732344][T13169] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1257'. [ 180.736635][T13169] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1257'. [ 180.789802][T13173] comedi comedi0: Minor 2 could not be opened [ 180.795648][T13173] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 181.265947][T13211] input: syz0 as /devices/virtual/input/input89 [ 181.346414][ T42] kauditd_printk_skb: 189 callbacks suppressed [ 181.346428][ T42] audit: type=1400 audit(1786827215.691:4897): avc: denied { write } for pid=13207 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 181.359946][ T42] audit: type=1800 audit(1786827215.691:4898): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16801 res=0 errno=0 [ 181.385991][ T42] audit: type=1400 audit(1786827215.731:4899): avc: denied { write } for pid=13218 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 181.420941][ T42] audit: type=1800 audit(1786827215.771:4900): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16801 res=0 errno=0 [ 181.498747][ T42] audit: type=1800 audit(1786827215.851:4901): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16543 res=0 errno=0 [ 181.615294][ T42] audit: type=1800 audit(1786827215.961:4902): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16543 res=0 errno=0 [ 181.630187][ T42] audit: type=1400 audit(1786827215.981:4903): avc: denied { write } for pid=13225 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 181.673512][ T42] audit: type=1800 audit(1786827216.021:4904): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16801 res=0 errno=0 [ 181.691490][ T42] audit: type=1400 audit(1786827216.041:4905): avc: denied { write } for pid=13237 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 181.710637][ T42] audit: type=1800 audit(1786827216.061:4906): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16543 res=0 errno=0 [ 182.022247][ T64] Bluetooth: hci2: Malformed LE Event: 0x0d [ 182.054834][T13266] netlink: 'syz.3.1276': attribute type 8 has an invalid length. [ 182.060422][T13266] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1276'. [ 182.065409][T13266] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1276'. [ 182.142827][T13274] batadv_slave_1: entered promiscuous mode [ 182.156940][T13274] batadv_slave_1: entered allmulticast mode [ 182.166943][ T2319] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 182.316885][ T2319] usb 6-1: Using ep0 maxpacket: 16 [ 182.326993][ T2319] usb 6-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 182.329959][ T2319] usb 6-1: too many configurations: 123, using maximum allowed: 8 [ 182.333426][ T2319] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 182.339312][ T2319] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 182.345270][ T2319] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 182.356961][ T2319] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 182.367779][ T2319] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 182.371896][ T2319] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 182.377936][ T2319] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 182.383508][ T2319] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 182.399302][ T2319] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 182.402372][ T2319] usb 6-1: SerialNumber: syz [ 182.414295][ T2319] usb 6-1: config 0 descriptor?? [ 182.427774][ T2319] input: bcm5974 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input90 [ 182.631764][T13258] input: syz0 as /devices/virtual/input/input91 [ 182.688077][T13326] input: syz0 as /devices/virtual/input/input92 [ 183.292575][ T6948] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 183.447660][ T5870] page_pool_release_retry() stalled pool shutdown: id 53, 1 inflight 60 sec [ 184.208411][ T6948] usb 10-1: Using ep0 maxpacket: 8 [ 184.213115][ T6948] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 184.221849][ T6948] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 184.225286][ T6948] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 184.231555][ T6948] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 184.235508][ T6948] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 184.239676][ T6948] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 184.244905][ T6948] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.268289][ T5814] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 184.418085][ T5814] usb 9-1: Using ep0 maxpacket: 16 [ 184.421779][ T5814] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 184.425951][ T5814] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 184.431798][ T5814] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.434489][ T5814] usb 9-1: Product: syz [ 184.435849][ T5814] usb 9-1: Manufacturer: syz [ 184.437433][ T5814] usb 9-1: SerialNumber: syz [ 184.440499][ T5814] usb 9-1: config 0 descriptor?? [ 184.446256][ T5814] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 184.449441][ T5814] em28xx 9-1:0.0: DVB interface 0 found: bulk [ 184.456646][ T6948] usb 10-1: usb_control_msg returned -32 [ 184.458055][ T5869] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 184.459351][ T6948] usbtmc 10-1:16.0: can't read capabilities [ 184.598337][ T5869] usb 8-1: device descriptor read/64, error -71 [ 184.838247][ T5869] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 184.934416][ T5117] bcm5974 6-1:0.0: could not read from device [ 184.939506][ T5117] bcm5974 6-1:0.0: could not read from device [ 184.944522][ T2319] usb 6-1: USB disconnect, device number 21 [ 184.950511][ T5117] bcm5974 6-1:0.0: could not read from device [ 184.956091][ T5117] bcm5974 6-1:0.0: could not read from device [ 184.985723][ T5869] usb 8-1: device descriptor read/64, error -71 [ 184.996459][T13424] netlink: 220 bytes leftover after parsing attributes in process `syz.1.1295'. [ 185.050967][ T5814] em28xx 9-1:0.0: unknown em28xx chip ID (0) [ 185.118584][ T5869] usb usb8-port1: attempt power cycle [ 185.468564][ T5869] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 185.469498][ T5814] em28xx 9-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 185.475558][ T5814] em28xx 9-1:0.0: board has no eeprom [ 185.489145][ T5869] usb 8-1: device descriptor read/8, error -71 [ 185.526000][T13388] em28xx 9-1:0.0: reading from i2c device at 0xe failed (error=-5) [ 185.528743][ T2319] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 185.678646][ T2319] usb 6-1: Using ep0 maxpacket: 16 [ 185.681632][ T2319] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 185.686413][ T2319] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 185.690095][ T2319] usb 6-1: config 0 has no interface number 0 [ 185.692766][ T2319] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 185.697218][ T2319] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 185.703304][ T2319] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 185.706831][ T2319] usb 6-1: Product: syz [ 185.708514][ T2319] usb 6-1: SerialNumber: syz [ 185.712828][ T2319] usb 6-1: config 0 descriptor?? [ 185.720560][ T2319] cm109 6-1:0.8: invalid payload size 0, expected 4 [ 185.724825][ T2319] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.8/input/input93 [ 185.729188][ T5869] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 185.759509][ T5869] usb 8-1: device descriptor read/8, error -71 [ 185.809376][ T5814] em28xx 9-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 185.813350][ T5814] em28xx 9-1:0.0: dvb set to bulk mode. [ 185.816731][ T5418] em28xx 9-1:0.0: Binding DVB extension [ 185.879979][ T5869] usb usb8-port1: unable to enumerate USB device [ 185.923479][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 185.929137][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 185.932248][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 185.935886][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 185.936803][ T5814] usb 9-1: USB disconnect, device number 15 [ 185.938918][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 185.944554][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 185.947368][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 185.950328][ T5814] em28xx 9-1:0.0: Disconnecting em28xx [ 185.950362][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 185.955623][ T5418] em28xx 9-1:0.0: Registering input extension [ 185.956050][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 185.961236][ T5869] usb 6-1: USB disconnect, device number 22 [ 185.961252][ T5814] em28xx 9-1:0.0: Closing input extension [ 185.964865][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 185.969461][ C0] cm109 6-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 185.999847][ T5869] cm109 6-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 186.029966][ T2319] usb 10-1: USB disconnect, device number 17 [ 186.100787][ T5814] em28xx 9-1:0.0: Freeing device [ 186.259059][T13478] netlink: 256 bytes leftover after parsing attributes in process `syz.5.1301'. [ 186.262018][T13478] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1301'. [ 186.446518][ T42] kauditd_printk_skb: 167 callbacks suppressed [ 186.446532][ T42] audit: type=1800 audit(1786827220.798:5074): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16801 res=0 errno=0 [ 186.465516][ T42] audit: type=1800 audit(1786827220.818:5075): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16285 res=0 errno=0 [ 186.483811][ T42] audit: type=1400 audit(1786827220.818:5076): avc: denied { write } for pid=13489 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 186.497782][ T42] audit: type=1800 audit(1786827220.848:5077): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16672 res=0 errno=0 [ 186.546911][ T42] audit: type=1800 audit(1786827220.898:5078): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16285 res=0 errno=0 [ 186.561712][ T42] audit: type=1400 audit(1786827220.908:5079): avc: denied { write } for pid=13500 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 186.575875][ T42] audit: type=1800 audit(1786827220.928:5080): pid=13499 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.1303" name="new_device" dev="sysfs" ino=27648 res=0 errno=0 [ 186.686464][ T42] audit: type=1800 audit(1786827221.028:5081): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=167015 res=0 errno=0 [ 186.728166][ T42] audit: type=1800 audit(1786827221.078:5082): pid=13504 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.1303" name="sriov_numvfs" dev="sysfs" ino=167016 res=0 errno=0 [ 186.945625][ T42] audit: type=1400 audit(1786827221.298:5083): avc: denied { write } for pid=13509 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 187.827816][T13499] netlink: 7 bytes leftover after parsing attributes in process `syz.5.1303'. [ 188.362243][T13537] af_packet: packet size is too long (97 > 22) [ 188.713589][T13553] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 189.347041][T13572] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 189.642176][T13586] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1327'. [ 189.645492][T13586] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1327'. [ 189.710281][T13595] qrtr: Invalid version 0 [ 189.715715][T13595] syzkaller1: entered promiscuous mode [ 189.717606][T13595] syzkaller1: entered allmulticast mode [ 189.846074][T13609] random: crng reseeded on system resumption [ 189.900399][ T5418] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 190.051151][ T5418] usb 9-1: New USB device found, idVendor=8087, idProduct=0025, bcdDevice= 0.00 [ 190.057693][ T5418] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.345442][T13627] Bluetooth: MGMT ver 1.23 [ 190.520717][T13634] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1334'. [ 190.524444][T13634] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1334'. [ 190.713351][T13643] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1336'. [ 191.088696][T13662] ./bus: Can't lookup blockdev [ 191.279927][ T5827] usb 9-1: USB disconnect, device number 16 [ 191.290922][ T64] Bluetooth: hci4: Reading Intel version command failed (-71) [ 191.521631][ T42] kauditd_printk_skb: 91 callbacks suppressed [ 191.521647][ T42] audit: type=1400 audit(1786827225.876:5175): avc: denied { write } for pid=13676 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 191.566340][ T42] audit: type=1400 audit(1786827225.916:5176): avc: denied { write } for pid=13679 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 191.690909][ T42] audit: type=1400 audit(1786827226.036:5177): avc: denied { write } for pid=13681 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 191.753509][ T42] audit: type=1400 audit(1786827226.106:5178): avc: denied { write } for pid=13684 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 191.801069][ T42] audit: type=1800 audit(1786827226.156:5179): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16801 res=0 errno=0 [ 191.839834][ T42] audit: type=1800 audit(1786827226.186:5180): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16672 res=0 errno=0 [ 191.886975][ T42] audit: type=1800 audit(1786827226.236:5181): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=167490 res=0 errno=0 [ 191.914667][ T42] audit: type=1400 audit(1786827226.266:5182): avc: denied { write } for pid=13688 comm="syz.4.1341" name="/" dev="9p" ino=76573407 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 191.930133][ T42] audit: type=1400 audit(1786827226.266:5183): avc: denied { unlink } for pid=13688 comm="syz.4.1341" name="file0" dev="9p" ino=76573413 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 191.949066][ T42] audit: type=1800 audit(1786827226.296:5184): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16543 res=0 errno=0 [ 192.003518][T13689] netfs: Duplicate cookie detected [ 192.003958][T13695] No control pipe specified [ 192.005992][T13689] netfs: O-cookie c=00000004 [fl=4008 na=0 nA=0 s=-] [ 192.012277][T13689] netfs: O-cookie V=00000004 [9p,syz,] [ 192.014265][T13689] netfs: O-key=[8] 'ed6a900400000000' [ 192.015954][T13689] netfs: N-cookie c=00000005 [fl=8 na=0 nA=0 s=-] [ 192.017943][T13689] netfs: N-cookie V=00000004 [9p,syz,] [ 192.019890][T13689] netfs: N-key=[8] 'ed6a900400000000' [ 192.120881][T13699] block device autoloading is deprecated and will be removed. [ 192.500486][T13723] overlay: Unknown parameter '/' [ 192.546000][T13723] netlink: zone id is out of range [ 192.547952][T13723] netlink: zone id is out of range [ 192.573277][T13717] input: syz0 as /devices/virtual/input/input95 [ 193.570789][T13758] tipc: Enabling of bearer rejected, failed to enable media [ 194.021837][ T5418] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 194.171827][ T5418] usb 8-1: Using ep0 maxpacket: 8 [ 194.174045][ T5418] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 194.179523][ T5418] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 194.183821][ T5418] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 194.189040][ T5418] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 194.194235][ T5418] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 194.199502][ T5418] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 194.207334][ T5418] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.246502][T13755] syz.5.1353 (13755) used greatest stack depth: 19120 bytes left [ 194.420736][ T5418] usb 8-1: usb_control_msg returned -32 [ 194.422905][ T5418] usbtmc 8-1:16.0: can't read capabilities [ 194.749781][ T1435] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.752578][ T1435] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.779605][T13830] usbtmc 8-1:16.0: INITIATE_ABORT_BULK_OUT returned 0 [ 194.981541][ T2319] usb 8-1: USB disconnect, device number 23 [ 195.414996][T13856] device-mapper: ioctl: name not supplied when creating device [ 195.577910][T13874] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 195.585002][T13874] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 195.590948][T13874] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 195.605785][T13874] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 195.711481][T13876] netlink: 959 bytes leftover after parsing attributes in process `syz.1.1380'. [ 195.786620][T13874] nvmet_rdma: binding CM ID to 172.20.20.20:4421 failed (-99) [ 195.836520][T13874] nvme nvme0: rdma connection establishment failed (-104) [ 196.548084][ T42] kauditd_printk_skb: 121 callbacks suppressed [ 196.548466][ T42] audit: type=1400 audit(1786827230.895:5306): avc: denied { mount } for pid=13905 comm="syz.5.1386" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 196.587650][ T42] audit: type=1400 audit(1786827230.895:5307): avc: denied { write } for pid=13904 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 196.601256][T13909] binder: 13908:13909 ioctl c00c6211 0 returned -14 [ 196.615895][ T42] audit: type=1400 audit(1786827230.895:5308): avc: denied { read write } for pid=13905 comm="syz.5.1386" name="mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 196.642244][ T42] audit: type=1400 audit(1786827230.895:5309): avc: denied { open } for pid=13905 comm="syz.5.1386" path="/343/proc/mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 196.651859][T13893] Process accounting resumed [ 196.666007][ T42] audit: type=1400 audit(1786827230.895:5310): avc: denied { ioctl } for pid=13905 comm="syz.5.1386" path="/343/proc/mtrr" dev="proc" ino=4026531995 ioctlcmd=0x4d03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 196.681199][ T42] audit: type=1400 audit(1786827230.905:5311): avc: denied { unmount } for pid=6801 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 196.689997][ T42] audit: type=1800 audit(1786827230.925:5312): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16801 res=0 errno=0 [ 196.754241][ T42] audit: type=1400 audit(1786827231.105:5313): avc: denied { write } for pid=13912 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 196.810011][ T42] audit: type=1800 audit(1786827231.155:5314): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16285 res=0 errno=0 [ 196.846730][ T42] audit: type=1400 audit(1786827231.195:5315): avc: denied { write } for pid=13916 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 197.037180][T13928] macsec1: entered promiscuous mode [ 197.038979][T13928] dummy0: entered promiscuous mode [ 197.044881][T13928] macsec1: entered allmulticast mode [ 197.046698][T13928] dummy0: entered allmulticast mode [ 197.132049][T13930] xfrm0 speed is unknown, defaulting to 1000 [ 197.266952][T13932] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 197.546728][T13943] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1395'. [ 197.556463][T13938] xfrm0 speed is unknown, defaulting to 1000 [ 199.711739][T14010] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1419'. [ 199.871486][T14014] overlay: ./file0 is not a directory [ 199.894092][T14014] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1420'. [ 199.897597][T14014] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1420'. [ 199.900997][T14014] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1420'. [ 200.632560][T14038] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead [ 200.637227][T14038] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead [ 200.640615][T14038] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x209d instead [ 200.644121][T14038] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0xf438 instead [ 200.647445][T14038] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead [ 200.650695][T14038] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead [ 200.654618][T14038] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead [ 200.657960][T14038] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead [ 200.661300][T14038] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead [ 200.664906][T14038] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead [ 200.668271][T14038] jffs2: Further such events for this erase block will not be printed [ 200.671151][T14038] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead [ 200.674962][T14038] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead [ 200.678199][T14038] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0x209d instead [ 200.681505][T14038] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0xf438 instead [ 200.684861][T14038] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead [ 200.688082][T14038] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead [ 200.689990][T14040] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1429'. [ 200.691256][T14038] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead [ 200.697396][T14038] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead [ 200.700661][T14038] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead [ 200.703970][T14038] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead [ 200.707176][T14038] jffs2: Further such events for this erase block will not be printed [ 200.709913][T14038] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 200.712671][T14038] jffs2: empty_blocks 30, bad_blocks 0, c->nr_blocks 32 [ 201.270947][T14053] Console: switching to colour dummy device 80x25 [ 201.667427][T14058] netlink: 'syz.4.1435': attribute type 5 has an invalid length. [ 201.718479][ T42] kauditd_printk_skb: 54 callbacks suppressed [ 201.718501][ T42] audit: type=1800 audit(1786827236.054:5370): pid=14055 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.1434" name="/" dev="fuse" ino=1 res=0 errno=0 [ 201.728980][T14062] netlink: 'syz.4.1435': attribute type 5 has an invalid length. [ 201.809645][ T42] audit: type=1800 audit(1786827236.154:5371): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16672 res=0 errno=0 [ 201.823280][ T42] audit: type=1800 audit(1786827236.164:5372): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16801 res=0 errno=0 [ 201.829957][ T42] audit: type=1800 audit(1786827236.174:5373): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16543 res=0 errno=0 [ 201.884633][ T42] audit: type=1800 audit(1786827236.224:5374): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=2751 res=0 errno=0 [ 201.920565][ T42] audit: type=1800 audit(1786827236.264:5375): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16543 res=0 errno=0 [ 201.985394][ T42] audit: type=1800 audit(1786827236.334:5376): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16285 res=0 errno=0 [ 201.999832][ T42] audit: type=1800 audit(1786827236.344:5377): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=170143 res=0 errno=0 [ 202.015704][ T42] audit: type=1800 audit(1786827236.354:5378): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16672 res=0 errno=0 [ 202.035175][ T42] audit: type=1800 audit(1786827236.384:5379): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16285 res=0 errno=0 [ 202.275268][ T5869] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 202.323376][T14084] usb 1-1: USB disconnect, device number 2 [ 202.426359][ T5869] usb 9-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 202.430302][ T5869] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 65535, setting to 1024 [ 202.434341][ T5869] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 202.437257][ T5869] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.441703][T14076] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 202.445993][ T5869] spcp8x5 9-1:1.0: SPCP8x5 converter detected [ 202.451001][ T5869] usb 9-1: SPCP8x5 converter now attached to ttyUSB0 [ 202.590447][T14097] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead [ 202.593747][T14097] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead [ 202.596845][T14097] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x209d instead [ 202.600100][T14097] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0xf438 instead [ 202.603837][T14097] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead [ 202.607396][T14097] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead [ 202.610553][T14097] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead [ 202.614942][T14097] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead [ 202.618142][T14097] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead [ 202.621489][T14097] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead [ 202.625499][T14097] jffs2: Further such events for this erase block will not be printed [ 202.628342][T14097] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead [ 202.631469][T14097] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead [ 202.635731][T14097] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0x209d instead [ 202.639393][T14097] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0xf438 instead [ 202.643028][T14097] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead [ 202.655552][T14097] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead [ 202.662430][T14097] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead [ 202.673185][T14097] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead [ 202.680192][T14097] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead [ 202.683543][T14097] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead [ 202.686654][T14097] jffs2: Further such events for this erase block will not be printed [ 202.689497][T14097] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 202.692410][T14097] jffs2: empty_blocks 30, bad_blocks 0, c->nr_blocks 32 [ 202.814861][T14076] SPCP8x5 ttyUSB0: failed to set control lines: -110 [ 202.817403][T14076] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -32) [ 202.822124][T14076] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 202.939306][T14122] syzkaller0: entered promiscuous mode [ 202.942021][T14122] syzkaller0: entered allmulticast mode [ 202.946282][T14076] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 203.065795][ T5869] usb 9-1: USB disconnect, device number 17 [ 203.100733][ T5869] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 203.122507][ T5869] spcp8x5 9-1:1.0: device disconnected [ 203.139348][T14135] netdevsim netdevsim3 30: renamed from netdevsim0 (while UP) [ 203.149843][T14135] libceph: Failed to parse secret: -22 [ 203.829019][T14145] tipc: Enabled bearer , priority 0 [ 203.831721][T14145] syzkaller0: entered promiscuous mode [ 203.834816][T14145] syzkaller0: entered allmulticast mode [ 203.838699][T14145] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 203.988273][T14155] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1461'. [ 204.000030][T14144] tipc: Resetting bearer [ 204.049694][T14144] tipc: Disabling bearer [ 204.067678][T14155] serio: Serial port ptm0 [ 205.758912][T14217] tipc: Enabling of bearer rejected, failed to enable media [ 206.706455][T14237] siw: device registration error -23 [ 206.738037][ T42] kauditd_printk_skb: 66 callbacks suppressed [ 206.738052][ T42] audit: type=1800 audit(1786827241.073:5446): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16801 res=0 errno=0 [ 206.768641][ T42] audit: type=1800 audit(1786827241.073:5447): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=170961 res=0 errno=0 [ 206.787734][ T42] audit: type=1800 audit(1786827241.103:5448): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16672 res=0 errno=0 [ 206.832928][ T42] audit: type=1800 audit(1786827241.173:5449): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16543 res=0 errno=0 [ 206.864084][ T42] audit: type=1400 audit(1786827241.193:5450): avc: denied { append } for pid=14238 comm="syz.3.1491" name="uprobe_events" dev="tracefs" ino=3080 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 206.881691][T14243] random: crng reseeded on system resumption [ 206.912985][ T42] audit: type=1800 audit(1786827241.233:5451): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16801 res=0 errno=0 [ 206.942084][ T42] audit: type=1800 audit(1786827241.283:5452): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16801 res=0 errno=0 [ 207.040682][ T42] audit: type=1800 audit(1786827241.383:5453): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=170981 res=0 errno=0 [ 207.057868][ T42] audit: type=1800 audit(1786827241.383:5454): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=170996 res=0 errno=0 [ 207.069718][ T42] audit: type=1800 audit(1786827241.403:5455): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16543 res=0 errno=0 [ 207.078079][T14249] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1493'. [ 207.364891][T14241] netlink: 'syz.1.1490': attribute type 13 has an invalid length. [ 207.367105][T14259] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead [ 207.377177][T14259] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead [ 207.383728][T14259] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x209d instead [ 207.391299][T14259] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0xf438 instead [ 207.397978][T14259] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead [ 207.406292][T14259] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead [ 207.421035][T14259] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead [ 207.428856][T14259] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead [ 207.443263][T14259] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead [ 207.452097][T14259] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead [ 207.457827][T14259] jffs2: Further such events for this erase block will not be printed [ 207.462483][T14259] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead [ 207.470688][T14259] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead [ 207.474361][T14259] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0x209d instead [ 207.479941][T14259] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0xf438 instead [ 207.485903][T14259] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead [ 207.496350][T14259] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead [ 207.502228][T14259] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead [ 207.511168][T14259] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead [ 207.516934][T14259] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead [ 207.522612][T14259] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead [ 207.527828][T14259] jffs2: Further such events for this erase block will not be printed [ 207.532160][T14259] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 207.536375][T14259] jffs2: empty_blocks 30, bad_blocks 0, c->nr_blocks 32 [ 207.964203][ T5869] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 207.998815][T14278] netlink: 152 bytes leftover after parsing attributes in process `syz.5.1504'. [ 208.750861][ T5869] usb 9-1: Using ep0 maxpacket: 8 [ 208.753555][ T5869] usb 9-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 208.757978][ T5869] usb 9-1: config 0 has an invalid interface number: 55 but max is 0 [ 208.761176][ T5869] usb 9-1: config 0 has no interface number 0 [ 208.763324][ T5869] usb 9-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 208.767537][ T5869] usb 9-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 208.771308][ T5869] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 208.774939][ T5869] usb 9-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 208.779835][ T5869] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.786098][ T5869] usb 9-1: config 0 descriptor?? [ 208.791789][ T5869] ldusb 9-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 210.247749][T14306] overlayfs: failed to resolve './bus': -2 [ 210.312538][T14310] cgroup: Unknown subsys name 'measure' [ 210.327206][T14309] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 210.493409][T14315] lo: Caught tx_queue_len zero misconfig [ 210.894713][ T60] usb 9-1: USB disconnect, device number 18 [ 210.909422][ T60] ldusb 9-1:0.55: LD USB Device #0 now disconnected [ 211.194667][T14328] ima: policy update completed [ 211.294410][ T60] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 211.298108][ T6948] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 211.444414][ T60] usb 9-1: Using ep0 maxpacket: 8 [ 211.446836][ T60] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 211.450746][ T60] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 211.453352][ T60] usb 9-1: config 0 has no interface number 0 [ 211.455696][ T60] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 211.459288][ T60] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.463934][ T60] usb 9-1: config 0 descriptor?? [ 211.469986][ T6948] usb 8-1: unable to get BOS descriptor or descriptor too short [ 211.473458][ T60] iowarrior 9-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 211.475015][ T6948] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 211.480888][ T6948] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 211.483359][ T6948] usb 8-1: can't read configurations, error -71 [ 211.728279][T14347] Invalid ELF header magic: != ELF [ 211.752228][T14347] overlay: ./file0 is not a directory [ 211.925638][ T5869] usb 9-1: USB disconnect, device number 19 [ 211.986758][ T42] kauditd_printk_skb: 56 callbacks suppressed [ 211.986772][ T42] audit: type=1800 audit(1786827246.333:5512): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16543 res=0 errno=0 [ 212.095084][ T42] audit: type=1800 audit(1786827246.443:5513): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16801 res=0 errno=0 [ 212.126965][ T42] audit: type=1800 audit(1786827246.473:5514): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16543 res=0 errno=0 [ 212.146171][ T42] audit: type=1800 audit(1786827246.483:5515): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16801 res=0 errno=0 [ 212.174123][ T42] audit: type=1800 audit(1786827246.513:5516): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16543 res=0 errno=0 [ 212.223373][T14357] program syz.5.1532 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 212.260775][ T42] audit: type=1400 audit(1786827246.603:5517): avc: denied { write } for pid=14359 comm="syz.3.1533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 212.300360][ T42] audit: type=1800 audit(1786827246.643:5518): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16543 res=0 errno=0 [ 212.429945][ T42] audit: type=1800 audit(1786827246.773:5519): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16285 res=0 errno=0 [ 212.466450][ T42] audit: type=1800 audit(1786827246.813:5520): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16543 res=0 errno=0 [ 212.525947][ T42] audit: type=1800 audit(1786827246.873:5521): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16672 res=0 errno=0 [ 213.421100][T14396] netlink: 'syz.1.1549': attribute type 3 has an invalid length. [ 213.422814][ T64] Bluetooth: hci2: unexpected event for opcode 0x4ad0 [ 213.425892][T14396] netlink: 'syz.1.1549': attribute type 3 has an invalid length. [ 213.439869][T14396] netlink: 'syz.1.1549': attribute type 3 has an invalid length. [ 213.443046][T14396] netlink: 'syz.1.1549': attribute type 3 has an invalid length. [ 213.447940][T14396] netlink: 'syz.1.1549': attribute type 3 has an invalid length. [ 213.452290][T14396] netlink: 'syz.1.1549': attribute type 3 has an invalid length. [ 213.459381][T14396] netlink: 'syz.1.1549': attribute type 3 has an invalid length. [ 213.464963][T14396] netlink: 'syz.1.1549': attribute type 3 has an invalid length. [ 213.470517][T14396] netlink: 'syz.1.1549': attribute type 3 has an invalid length. [ 213.474527][T14396] netlink: 'syz.1.1549': attribute type 3 has an invalid length. [ 213.586748][T14396] 9p: Bad value for 'wfdno' [ 213.743903][T14409] netlink: 348 bytes leftover after parsing attributes in process `syz.3.1548'. [ 213.764489][T14409] netlink: 348 bytes leftover after parsing attributes in process `syz.3.1548'. [ 213.773427][T14409] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1548'. [ 213.917162][T14426] pim6reg: entered allmulticast mode [ 213.925678][T14420] pim6reg: left allmulticast mode [ 214.001068][T14431] qrtr: Invalid version 0 [ 214.019266][T14431] syzkaller1: entered promiscuous mode [ 214.021476][T14431] syzkaller1: entered allmulticast mode [ 214.108184][T14433] nvmet_tcp: enabling port 1 (127.0.0.1:4421) [ 214.377256][ T1343] hid_parser_main: 22 callbacks suppressed [ 214.377280][ T1343] hid-generic 000A:FFFFFF1D:0002.0003: unknown main item tag 0x0 [ 214.381908][ T1343] hid-generic 000A:FFFFFF1D:0002.0003: unknown main item tag 0x0 [ 214.386241][ T1343] hid-generic 000A:FFFFFF1D:0002.0003: unknown main item tag 0x0 [ 214.389311][ T1343] hid-generic 000A:FFFFFF1D:0002.0003: unknown main item tag 0x0 [ 214.391615][ T1343] hid-generic 000A:FFFFFF1D:0002.0003: unknown main item tag 0x0 [ 214.394130][ T1343] hid-generic 000A:FFFFFF1D:0002.0003: unknown main item tag 0x0 [ 214.397145][ T1343] hid-generic 000A:FFFFFF1D:0002.0003: unknown main item tag 0x0 [ 214.399679][ T1343] hid-generic 000A:FFFFFF1D:0002.0003: unknown main item tag 0x0 [ 214.402198][ T1343] hid-generic 000A:FFFFFF1D:0002.0003: unknown main item tag 0x0 [ 214.405137][ T1343] hid-generic 000A:FFFFFF1D:0002.0003: unknown main item tag 0x0 [ 214.429153][ T1343] hid-generic 000A:FFFFFF1D:0002.0003: hidraw0: HID v0.04 Device [syz0] on syz1 [ 214.503127][T14449] fido_id[14449]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 214.579545][T14459] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1571'. [ 214.855179][T14465] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 214.863362][T14465] syz.1.1572: vmalloc error: size 15032385536, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 214.870690][T14465] CPU: 3 UID: 0 PID: 14465 Comm: syz.1.1572 Tainted: G L syzkaller #0 PREEMPT(full) [ 214.870726][T14465] Tainted: [L]=SOFTLOCKUP [ 214.870731][T14465] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 214.870739][T14465] Call Trace: [ 214.870745][T14465] [ 214.870751][T14465] dump_stack_lvl+0x100/0x190 [ 214.870791][T14465] warn_alloc.cold+0x94/0xa8 [ 214.870811][T14465] ? __pfx_warn_alloc+0x10/0x10 [ 214.870839][T14465] ? __pfx___schedule+0x10/0x10 [ 214.870862][T14465] __vmalloc_node_range_noprof+0x136c/0x1630 [ 214.870888][T14465] ? irqentry_exit+0x24d/0xa00 [ 214.870904][T14465] ? lockdep_hardirqs_on+0x78/0x100 [ 214.870922][T14465] ? disksize_store+0x11a/0x4d0 [ 214.870943][T14465] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 214.870962][T14465] ? __pfx___might_resched+0x10/0x10 [ 214.870988][T14465] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 214.871012][T14465] ? disksize_store+0x11a/0x4d0 [ 214.871024][T14465] __vmalloc_node_noprof+0xad/0xf0 [ 214.871043][T14465] ? disksize_store+0x11a/0x4d0 [ 214.871058][T14465] disksize_store+0x11a/0x4d0 [ 214.871075][T14465] ? __pfx_disksize_store+0x10/0x10 [ 214.871089][T14465] dev_attr_store+0x58/0x80 [ 214.871105][T14465] ? __pfx_dev_attr_store+0x10/0x10 [ 214.871121][T14465] sysfs_kf_write+0xf2/0x150 [ 214.871133][T14465] kernfs_fop_write_iter+0x3e0/0x5f0 [ 214.871150][T14465] ? __pfx_sysfs_kf_write+0x10/0x10 [ 214.871164][T14465] vfs_write+0x6ac/0x1050 [ 214.871183][T14465] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 214.871201][T14465] ? __pfx_vfs_write+0x10/0x10 [ 214.871221][T14465] ksys_write+0x12a/0x250 [ 214.871231][T14465] ? __pfx_ksys_write+0x10/0x10 [ 214.871246][T14465] do_syscall_64+0x115/0x870 [ 214.871261][T14465] ? clear_bhb_loop+0x70/0xc0 [ 214.871288][T14465] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.871302][T14465] RIP: 0033:0x7fa34579e0d9 [ 214.871313][T14465] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 214.871324][T14465] RSP: 002b:00007fa3466ce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 214.871341][T14465] RAX: ffffffffffffffda RBX: 00007fa345a26180 RCX: 00007fa34579e0d9 [ 214.871348][T14465] RDX: 0000000000000003 RSI: 0000200000000340 RDI: 000000000000000b [ 214.871355][T14465] RBP: 00007fa345835024 R08: 0000000000000000 R09: 0000000000000000 [ 214.871362][T14465] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 214.871369][T14465] R13: 00007fa345a26218 R14: 00007fa345a26180 R15: 00007ffc1012f4a8 [ 214.871386][T14465] [ 214.871507][T14465] Mem-Info: [ 214.963719][T14465] active_anon:30164 inactive_anon:19860 isolated_anon:35 [ 214.963719][T14465] active_file:4247 inactive_file:24132 isolated_file:0 [ 214.963719][T14465] unevictable:10 dirty:35 writeback:0 [ 214.963719][T14465] slab_reclaimable:9333 slab_unreclaimable:77441 [ 214.963719][T14465] mapped:35748 shmem:30762 pagetables:5303 [ 214.963719][T14465] sec_pagetables:292 bounce:0 [ 214.963719][T14465] kernel_misc_reclaimable:0 [ 214.963719][T14465] free:425668 free_pcp:16967 free_cma:0 [ 214.980207][T14465] Node 0 active_anon:89944kB inactive_anon:79440kB active_file:16988kB inactive_file:91848kB unevictable:40kB isolated(anon):140kB isolated(file):0kB mapped:142460kB dirty:136kB writeback:0kB shmem:95116kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:17792kB pagetables:19504kB sec_pagetables:1164kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 214.992733][T14465] Node 1 active_anon:32944kB inactive_anon:0kB active_file:0kB inactive_file:4680kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:532kB dirty:4kB writeback:0kB shmem:30288kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:832kB pagetables:1708kB sec_pagetables:4kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 215.003177][T14465] Node 0 DMA free:11640kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:1612kB inactive_anon:116kB active_file:0kB inactive_file:124kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 215.012666][T14465] lowmem_reserve[]: 0 1225 1225 1225 1225 [ 215.015100][T14465] Node 0 DMA32 free:115776kB boost:0kB min:27396kB low:34244kB high:41092kB reserved_highatomic:0KB free_highatomic:0KB active_anon:91804kB inactive_anon:79324kB active_file:16988kB inactive_file:91724kB unevictable:40kB writepending:136kB zspages:0kB present:2080628kB managed:1255328kB mlocked:0kB bounce:0kB free_pcp:30696kB local_pcp:4360kB free_cma:0kB [ 215.025676][T14465] lowmem_reserve[]: 0 0 0 0 0 [ 215.027533][T14465] Node 1 Normal free:1573768kB boost:0kB min:39840kB low:49800kB high:59760kB reserved_highatomic:0KB free_highatomic:0KB active_anon:32944kB inactive_anon:0kB active_file:0kB inactive_file:4680kB unevictable:0kB writepending:4kB zspages:2316kB present:2097152kB managed:1781884kB mlocked:0kB bounce:0kB free_pcp:33276kB local_pcp:4352kB free_cma:0kB [ 215.037691][T14465] lowmem_reserve[]: 0 0 0 0 0 [ 215.039498][T14465] Node 0 DMA: 108*4kB (UM) 65*8kB (UM) 44*16kB (UM) 46*32kB (UM) 21*64kB (UM) 6*128kB (UM) 5*256kB (U) 2*512kB (UM) 2*1024kB (U) 1*2048kB (M) 0*4096kB = 11640kB [ 215.047714][T14465] Node 0 DMA32: 210*4kB (UME) 407*8kB (UE) 131*16kB (UM) 139*32kB (UE) 155*64kB (UME) 112*128kB (UME) 65*256kB (UME) 46*512kB (UM) 25*1024kB (UM) 2*2048kB (U) 2*4096kB (U) = 112976kB [ 215.053989][T14465] Node 1 Normal: 528*4kB (UM) 477*8kB (UM) 360*16kB (UME) 327*32kB (UME) 274*64kB (UME) 251*128kB (UME) 255*256kB (UME) 224*512kB (UM) 155*1024kB (UME) 10*2048kB (UM) 279*4096kB (UM) = 1573768kB [ 215.061094][T14465] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 215.064247][T14465] Node 0 hugepages_total=3 hugepages_free=0 hugepages_surp=1 hugepages_size=2048kB [ 215.067490][T14465] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 215.070908][T14465] Node 1 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 215.074903][T14465] 61617 total pagecache pages [ 215.077452][T14465] 0 pages in swap cache [ 215.082620][T14465] Free swap = 86172kB [ 215.084471][T14465] Total swap = 124996kB [ 215.086751][T14465] 1048443 pages RAM [ 215.088613][T14465] 0 pages HighMem/MovableOnly [ 215.091016][T14465] 285300 pages reserved [ 215.093030][T14465] 0 pages cma reserved [ 215.498040][T14486] overlayfs: failed to resolve './file1': -2 [ 215.746776][T14506] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 215.768583][T14506] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1579'. [ 215.772062][T14506] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1579'. [ 216.010654][T14520] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead [ 216.016615][T14520] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead [ 216.020984][T14520] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x209d instead [ 216.026500][T14520] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0xf438 instead [ 216.030935][T14520] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead [ 216.036391][T14520] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead [ 216.040712][T14520] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead [ 216.045372][T14520] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead [ 216.049682][T14520] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead [ 216.054013][T14520] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead [ 216.058598][T14520] jffs2: Further such events for this erase block will not be printed [ 216.061521][T14520] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead [ 216.064893][T14520] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead [ 216.068132][T14520] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0x209d instead [ 216.071357][T14520] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0xf438 instead [ 216.074666][T14520] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead [ 216.077927][T14520] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead [ 216.081208][T14520] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead [ 216.084404][T14520] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead [ 216.087726][ T1343] usb 10-1: new low-speed USB device number 18 using dummy_hcd [ 216.092728][T14520] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead [ 216.096650][T14520] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead [ 216.100082][T14520] jffs2: Further such events for this erase block will not be printed [ 216.103660][T14520] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 216.107002][T14520] jffs2: empty_blocks 30, bad_blocks 0, c->nr_blocks 32 [ 216.135091][T14522] device-mapper: ioctl: Invalid ioctl structure: name mypo, dev f800 [ 216.247803][ T1343] usb 10-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 216.252095][ T1343] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 216.254518][ T1343] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 216.258522][ T1343] usb 10-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 216.262827][ T1343] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 216.266582][ T1343] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 216.271033][ T1343] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 216.273523][ T1343] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 216.277945][ T1343] usb 10-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 216.282672][ T1343] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 216.290112][ T1343] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 216.294493][ T1343] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 216.297227][ T1343] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 216.300598][ T1343] usb 10-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 216.304258][ T1343] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 216.307775][ T1343] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 216.313461][ T1343] usb 10-1: string descriptor 0 read error: -22 [ 216.315580][ T1343] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.326373][ T1343] adutux 10-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 216.864427][T14535] infiniband syz0: set down [ 216.868009][T14535] infiniband syz0: added bond_slave_1 [ 216.931067][T14535] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 216.936090][T14535] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 216.941416][T14535] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 216.999427][ T42] kauditd_printk_skb: 439 callbacks suppressed [ 216.999554][ T42] audit: type=1800 audit(1786827251.312:5961): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=175390 res=0 errno=0 [ 217.048783][T14535] RDS/IB: syz0: added [ 217.051163][T14535] smc: adding ib device syz0 with port count 1 [ 217.053539][T14535] smc: ib device syz0 port 1 has no pnetid [ 217.438419][ T42] audit: type=1800 audit(1786827251.422:5962): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=175404 res=0 errno=0 [ 217.485592][ T42] audit: type=1800 audit(1786827251.832:5963): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=175418 res=0 errno=0 [ 217.500686][ T42] audit: type=1800 audit(1786827251.842:5964): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16543 res=0 errno=0 [ 217.509343][T14546] comedi comedi3: comedi_config --init_data is deprecated [ 217.511771][ T42] audit: type=1800 audit(1786827251.842:5965): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=172195 res=0 errno=0 [ 217.614918][ T42] audit: type=1800 audit(1786827251.872:5966): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16543 res=0 errno=0 [ 217.743669][ T42] audit: type=1800 audit(1786827252.082:5967): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16285 res=0 errno=0 [ 217.773344][ T42] audit: type=1800 audit(1786827252.112:5968): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16672 res=0 errno=0 [ 217.820240][ T42] audit: type=1800 audit(1786827252.162:5969): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16672 res=0 errno=0 [ 217.858221][ T42] audit: type=1800 audit(1786827252.202:5970): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16672 res=0 errno=0 [ 217.970109][T14563] pim6reg: entered allmulticast mode [ 217.977733][T14563] pim6reg: left allmulticast mode [ 218.950596][ T60] hid-generic 000A:FFFFFF1D:0002.0004: hidraw0: HID v0.04 Device [syz0] on syz1 [ 219.003349][T14584] fido_id[14584]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 219.091359][T14592] NILFS (loop1): device size too small [ 219.136540][T14592] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead [ 219.139958][T14592] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead [ 219.143213][T14592] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x209d instead [ 219.146766][T14592] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0xf438 instead [ 219.150082][T14592] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead [ 219.153426][T14592] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead [ 219.156770][T14592] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead [ 219.160059][T14592] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead [ 219.163496][T14592] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead [ 219.167088][T14592] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead [ 219.170443][T14592] jffs2: Further such events for this erase block will not be printed [ 219.176931][T14592] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead [ 219.180266][T14592] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead [ 219.183849][T14592] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0x209d instead [ 219.187593][T14592] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0xf438 instead [ 219.191035][T14592] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead [ 219.194392][T14592] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead [ 219.197792][T14592] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead [ 219.201153][T14592] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead [ 219.204505][T14592] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead [ 219.208008][T14592] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead [ 219.211354][T14592] jffs2: Further such events for this erase block will not be printed [ 219.215686][T14592] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 219.218794][T14592] jffs2: empty_blocks 30, bad_blocks 0, c->nr_blocks 32 [ 219.238344][T14601] batman_adv: batadv0: Adding interface: veth0 [ 219.241091][T14601] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 219.256766][T14601] batman_adv: batadv0: Interface activated: veth0 [ 219.267939][T14601] batman_adv: batadv0: Interface deactivated: veth0 [ 219.270764][T14601] batman_adv: batadv0: Removing interface: veth0 [ 219.315104][T14605] validate_nla: 3 callbacks suppressed [ 219.315118][T14605] netlink: 'syz.3.1612': attribute type 1 has an invalid length. [ 219.319446][T14605] netlink: 756 bytes leftover after parsing attributes in process `syz.3.1612'. [ 219.466761][ T5827] usb 10-1: USB disconnect, device number 18 [ 220.236531][T14641] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1626'. [ 220.384959][ T5827] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 220.434941][ T1343] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 220.524394][T14645] input: syz0 as /devices/virtual/input/input98 [ 220.546738][ T5827] usb 10-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 220.559431][ T5827] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.562945][ T5827] usb 10-1: Product: syz [ 220.565049][ T5827] usb 10-1: Manufacturer: syz [ 220.567385][ T5827] usb 10-1: SerialNumber: syz [ 220.573513][ T5827] usb 10-1: config 0 descriptor?? [ 220.584890][ T1343] usb 6-1: Using ep0 maxpacket: 8 [ 220.589451][ T1343] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 220.594238][ T1343] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 220.600126][ T1343] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 220.604391][ T1343] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 220.609104][ T1343] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 220.613314][ T1343] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 220.618860][ T1343] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.782957][ T6948] usb 10-1: USB disconnect, device number 19 [ 220.841733][ T1343] usb 6-1: usb_control_msg returned -32 [ 220.843625][ T1343] usbtmc 6-1:16.0: can't read capabilities [ 221.293302][T14658] netlink: 'syz.3.1630': attribute type 13 has an invalid length. [ 221.306220][T14658] tipc: Resetting bearer [ 221.309524][T14658] tipc: Resetting bearer [ 221.878574][T14689] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1642'. [ 221.898337][T14689] e1000e 0000:00:02.0 eth1: removed PHC [ 222.021339][T14693] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1642'. [ 222.030300][ T42] kauditd_printk_skb: 92 callbacks suppressed [ 222.030314][ T42] audit: type=1400 audit(1786827256.372:6063): avc: denied { write } for pid=14695 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 222.725523][ T42] audit: type=1800 audit(1786827257.062:6064): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16672 res=0 errno=0 [ 222.980448][T14701] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1643'. [ 223.224661][ T2319] usb 6-1: USB disconnect, device number 23 [ 223.251213][ T42] audit: type=1800 audit(1786827257.592:6065): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16285 res=0 errno=0 [ 223.635192][ T2319] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 223.786285][ T2319] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 223.791928][ T2319] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.794610][ T2319] usb 6-1: Product: syz [ 223.796025][ T2319] usb 6-1: Manufacturer: syz [ 223.797550][ T2319] usb 6-1: SerialNumber: syz [ 223.805077][ T42] audit: type=1800 audit(1786827258.142:6066): pid=12392 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=188387 res=0 errno=0 [ 223.820009][ T42] audit: type=1800 audit(1786827258.142:6067): pid=12392 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=188419 res=0 errno=0 [ 223.839033][ T42] audit: type=1800 audit(1786827258.152:6068): pid=12392 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=188394 res=0 errno=0 [ 223.850490][ T42] audit: type=1800 audit(1786827258.152:6069): pid=12392 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=188395 res=0 errno=0 [ 223.861895][ T42] audit: type=1800 audit(1786827258.162:6070): pid=12392 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=188416 res=0 errno=0 [ 223.871658][ T42] audit: type=1800 audit(1786827258.162:6071): pid=12392 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=188417 res=0 errno=0 [ 223.878656][ T10] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 223.881789][ T42] audit: type=1800 audit(1786827258.162:6072): pid=12392 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=188396 res=0 errno=0 [ 224.091358][T14708] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14708 comm=syz.4.1646 [ 224.320366][ T2319] usb 6-1: USB disconnect, device number 24 [ 224.895127][ T10] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 224.897548][ T10] ath9k_htc: Failed to initialize the device [ 224.905580][ T2319] usb 6-1: ath9k_htc: USB layer deinitialized [ 224.959129][T14689] e1000e 0000:00:02.0 eth1: Hardware Error [ 225.097648][T14719] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1651'. [ 225.101076][T14719] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1651'. [ 227.935485][T14689] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 228.092053][ T42] kauditd_printk_skb: 9 callbacks suppressed [ 228.092067][ T42] audit: type=1800 audit(1786827262.432:6082): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16543 res=0 errno=0 [ 228.116541][ T42] audit: type=1800 audit(1786827262.452:6083): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16672 res=0 errno=0 [ 228.127030][ T42] audit: type=1800 audit(1786827262.462:6084): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=188569 res=0 errno=0 [ 228.173436][ T42] audit: type=1800 audit(1786827262.512:6085): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16543 res=0 errno=0 [ 228.195771][ T5418] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 228.227451][T14720] xfrm0 speed is unknown, defaulting to 1000 [ 228.235927][ T42] audit: type=1800 audit(1786827262.572:6086): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16672 res=0 errno=0 [ 228.257347][ T42] audit: type=1800 audit(1786827262.582:6087): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=2815 res=0 errno=0 [ 228.281868][ T42] audit: type=1800 audit(1786827262.622:6088): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16801 res=0 errno=0 [ 228.330629][ T42] audit: type=1400 audit(1786827262.672:6089): avc: denied { write } for pid=14732 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 228.362690][ T42] audit: type=1800 audit(1786827262.702:6090): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16672 res=0 errno=0 [ 228.389903][ T42] audit: type=1800 audit(1786827262.732:6091): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16801 res=0 errno=0 [ 228.675221][ T6948] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 228.845185][ T6948] usb 9-1: Using ep0 maxpacket: 32 [ 228.848941][ T6948] usb 9-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 228.854044][ T6948] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 228.859003][ T6948] usb 9-1: config 0 has no interface number 0 [ 228.864171][ T6948] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.868513][ T6948] usb 9-1: Product: syz [ 228.870840][ T6948] usb 9-1: Manufacturer: syz [ 228.873550][ T6948] usb 9-1: SerialNumber: syz [ 228.885527][ T6948] usb 9-1: config 0 descriptor?? [ 228.896601][ T6948] usb 9-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 228.900377][ T6948] usb 9-1: selecting invalid altsetting 1 [ 228.902818][ T6948] usb 9-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 228.925966][ T6948] usb 9-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 228.932208][ T6948] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 228.938021][ T6948] usb 9-1: media controller created [ 228.961550][ T6948] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 229.153316][T14744] kvm: apic: phys broadcast and lowest prio [ 229.238916][ T6948] usb 9-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 229.246752][ T6948] zl10353_read_register: readreg error (reg=127, ret==-71) [ 229.252576][ T6948] usb 9-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 229.341739][T14775] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4234756656 (33878053248 ns) > initial count (25262286960 ns). Using initial count to start timer. [ 229.374009][T14782] ipvlan3: entered allmulticast mode [ 229.376084][T14782] bond0: entered allmulticast mode [ 229.381489][ T6948] usb 9-1: USB disconnect, device number 20 [ 229.634200][T14798] gadgetfs: bound to dummy_udc driver [ 229.691905][T14806] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1673'. [ 229.890833][T14796] block nbd3: shutting down sockets [ 230.179630][T14851] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1687'. [ 231.161565][ T64] Bluetooth: hci2: unexpected event for opcode 0x0413 [ 231.334814][T14865] program syz.4.1688 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 231.399314][T14878] syz0: rxe_newlink: already configured on bond_slave_1 [ 232.159097][T14902] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 232.161227][T14902] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 232.165330][ T5827] usb 10-1: new full-speed USB device number 20 using dummy_hcd [ 232.170677][T14902] vhci_hcd vhci_hcd.0: Device attached [ 232.326843][T14918] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1698'. [ 232.344945][ T5827] usb 10-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 232.367200][ T5827] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 232.378131][ T5827] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 232.381618][ T5827] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.545323][ T1343] usb 43-1: new high-speed USB device number 2 using vhci_hcd [ 232.616714][ T5827] usb 10-1: config 0 descriptor?? [ 232.891512][ T5827] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 232.906964][ T5827] dvb-usb: bulk message failed: -22 (3/0) [ 232.998531][T14904] vhci_hcd: connection reset by peer [ 233.007105][ T5799] vhci_hcd vhci_hcd.3: stop threads [ 233.009458][ T5799] vhci_hcd vhci_hcd.3: release socket [ 233.012266][ T5799] vhci_hcd vhci_hcd.3: disconnect device [ 233.096209][ T5827] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 233.133457][ T5827] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 233.141202][ T5827] usb 10-1: media controller created [ 233.143024][ T42] kauditd_printk_skb: 90 callbacks suppressed [ 233.143040][ T42] audit: type=1800 audit(1786827267.482:6182): pid=14724 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="name" dev="sysfs" ino=193275 res=0 errno=0 [ 233.202738][ T42] audit: type=1400 audit(1786827267.542:6183): avc: denied { write } for pid=14950 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 233.270686][ T42] audit: type=1400 audit(1786827267.612:6184): avc: denied { write } for pid=14953 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 233.421531][ T5827] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 233.423806][ T42] audit: type=1400 audit(1786827267.762:6185): avc: denied { write } for pid=14955 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 233.495047][ T42] audit: type=1800 audit(1786827267.832:6186): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16285 res=0 errno=0 [ 233.517544][ T42] audit: type=1800 audit(1786827267.862:6187): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=193262 res=0 errno=0 [ 233.535051][ T5827] dvb-usb: bulk message failed: -22 (6/0) [ 233.537612][ T5827] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 233.538076][ T42] audit: type=1800 audit(1786827267.862:6188): pid=14724 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="name" dev="sysfs" ino=193263 res=0 errno=0 [ 233.542671][ T5827] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb10/10-1/input/input99 [ 233.553202][ T5827] dvb-usb: schedule remote query interval to 150 msecs. [ 233.555636][ T5827] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 233.555709][ T42] audit: type=1800 audit(1786827267.872:6189): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16672 res=0 errno=0 [ 233.559298][ T5827] usb 10-1: USB disconnect, device number 20 [ 233.571658][ T42] audit: type=1800 audit(1786827267.882:6190): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16801 res=0 errno=0 [ 233.585967][ T42] audit: type=1800 audit(1786827267.882:6191): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=193286 res=0 errno=0 [ 233.625819][ T5827] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 238.005518][ T1343] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 238.192453][ T42] kauditd_printk_skb: 71 callbacks suppressed [ 238.192468][ T42] audit: type=1400 audit(1786827272.532:6263): avc: denied { write } for pid=15111 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 238.237159][ T42] audit: type=1400 audit(1786827272.582:6264): avc: denied { write } for pid=15114 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 238.324141][ T42] audit: type=1400 audit(1786827272.662:6265): avc: denied { write } for pid=15116 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 238.374212][ T42] audit: type=1400 audit(1786827272.712:6266): avc: denied { write } for pid=15119 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 238.457805][ T42] audit: type=1400 audit(1786827272.802:6267): avc: denied { write } for pid=15121 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 238.513334][ T42] audit: type=1400 audit(1786827272.852:6268): avc: denied { write } for pid=15124 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 238.601760][ T42] audit: type=1400 audit(1786827272.942:6269): avc: denied { write } for pid=15126 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 238.652641][ T42] audit: type=1400 audit(1786827272.992:6270): avc: denied { write } for pid=15129 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 238.758641][ T42] audit: type=1400 audit(1786827273.102:6271): avc: denied { write } for pid=15131 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 238.796309][ T42] audit: type=1400 audit(1786827273.142:6272): avc: denied { write } for pid=15134 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 243.287573][ T42] kauditd_printk_skb: 58 callbacks suppressed [ 243.287592][ T42] audit: type=1400 audit(1786827277.632:6331): avc: denied { write } for pid=15281 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 243.349764][ T42] audit: type=1400 audit(1786827277.692:6332): avc: denied { write } for pid=15284 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 243.471263][ T42] audit: type=1400 audit(1786827277.812:6333): avc: denied { write } for pid=15286 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 243.528611][ T42] audit: type=1400 audit(1786827277.872:6334): avc: denied { write } for pid=15289 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 243.645915][ T42] audit: type=1400 audit(1786827277.992:6335): avc: denied { write } for pid=15291 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 243.698803][ T42] audit: type=1400 audit(1786827278.042:6336): avc: denied { write } for pid=15294 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 243.794815][ T42] audit: type=1400 audit(1786827278.132:6337): avc: denied { write } for pid=15296 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 243.857048][ T42] audit: type=1400 audit(1786827278.202:6338): avc: denied { write } for pid=15299 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 243.957338][ T42] audit: type=1400 audit(1786827278.302:6339): avc: denied { write } for pid=15301 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 244.012357][ T42] audit: type=1400 audit(1786827278.352:6340): avc: denied { write } for pid=15304 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 248.333592][ T42] kauditd_printk_skb: 58 callbacks suppressed [ 248.333608][ T42] audit: type=1400 audit(1786827282.672:6399): avc: denied { write } for pid=15451 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 248.379116][ T42] audit: type=1400 audit(1786827282.722:6400): avc: denied { write } for pid=15454 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 248.471784][ T42] audit: type=1400 audit(1786827282.812:6401): avc: denied { write } for pid=15456 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 248.517417][ T42] audit: type=1400 audit(1786827282.862:6402): avc: denied { write } for pid=15459 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 248.617574][ T42] audit: type=1400 audit(1786827282.962:6403): avc: denied { write } for pid=15461 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 248.675215][ T42] audit: type=1400 audit(1786827283.012:6404): avc: denied { write } for pid=15464 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 248.759332][ T42] audit: type=1400 audit(1786827283.102:6405): avc: denied { write } for pid=15466 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 248.808846][ T42] audit: type=1400 audit(1786827283.152:6406): avc: denied { write } for pid=15469 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 248.905280][ T42] audit: type=1400 audit(1786827283.242:6407): avc: denied { write } for pid=15471 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 248.962664][ T42] audit: type=1400 audit(1786827283.302:6408): avc: denied { write } for pid=15474 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 253.354753][ T42] kauditd_printk_skb: 61 callbacks suppressed [ 253.354768][ T42] audit: type=1400 audit(1786827287.692:6470): avc: denied { write } for pid=15629 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 253.465459][ T42] audit: type=1400 audit(1786827287.802:6471): avc: denied { write } for pid=15631 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 253.516895][ T42] audit: type=1400 audit(1786827287.862:6472): avc: denied { write } for pid=15634 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 253.621192][ T42] audit: type=1400 audit(1786827287.962:6473): avc: denied { write } for pid=15636 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 253.676770][ T42] audit: type=1400 audit(1786827288.022:6474): avc: denied { write } for pid=15639 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 253.797956][ T42] audit: type=1400 audit(1786827288.142:6475): avc: denied { write } for pid=15641 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 253.859224][ T42] audit: type=1400 audit(1786827288.202:6476): avc: denied { write } for pid=15644 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 253.963248][ T42] audit: type=1400 audit(1786827288.302:6477): avc: denied { write } for pid=15646 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 254.024669][ T42] audit: type=1400 audit(1786827288.362:6478): avc: denied { write } for pid=15649 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 254.137930][ T42] audit: type=1400 audit(1786827288.482:6479): avc: denied { write } for pid=15651 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 255.447088][T15714] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1705'. [ 255.513059][T15719] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1707'. [ 255.516614][T15719] openvswitch: netlink: Flow actions attr not present in new flow. [ 255.756732][T15729] qrtr: Invalid version 0 [ 255.837615][T15733] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1710'. [ 256.189181][ T1435] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.738026][T15764] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 256.782838][T15766] syzkaller0: entered promiscuous mode [ 256.784692][T15766] syzkaller0: entered allmulticast mode [ 256.835025][T15775] qrtr: Invalid version 0 [ 256.864411][T15775] syzkaller1: entered promiscuous mode [ 256.873533][T15775] syzkaller1: entered allmulticast mode [ 257.020482][T15790] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 257.361896][T15811] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1726'. [ 257.418687][T15790] md/raid:md0: not clean -- starting background reconstruction [ 257.994736][T15790] md/raid:md0: not enough operational devices (4/4 failed) [ 258.520313][ T42] kauditd_printk_skb: 44 callbacks suppressed [ 258.520327][ T42] audit: type=1800 audit(1786827292.861:6524): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16543 res=0 errno=0 [ 258.567596][ T42] audit: type=1800 audit(1786827292.911:6525): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16801 res=0 errno=0 [ 258.744891][ T42] audit: type=1800 audit(1786827293.081:6526): pid=15873 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.1732" name="file0" dev="tmpfs" ino=2140 res=0 errno=0 [ 259.003919][T15790] md/raid:md0: failed to run raid set. [ 259.008073][T15790] md: pers->run() failed ... [ 259.193837][ T42] audit: type=1800 audit(1786827293.531:6527): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16672 res=0 errno=0 [ 259.710043][T15901] qrtr: Invalid version 0 [ 259.711341][ T42] audit: type=1800 audit(1786827294.021:6528): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16672 res=0 errno=0 [ 259.744807][T15901] syzkaller1: entered promiscuous mode [ 259.746736][T15901] syzkaller1: entered allmulticast mode [ 259.750812][ T42] audit: type=1400 audit(1786827294.041:6529): avc: denied { write } for pid=15892 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 259.831798][ T42] audit: type=1800 audit(1786827294.161:6530): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16285 res=0 errno=0 [ 259.858239][ T42] audit: type=1800 audit(1786827294.171:6531): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16543 res=0 errno=0 [ 259.879549][ T42] audit: type=1400 audit(1786827294.171:6532): avc: denied { write } for pid=15909 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 259.898815][T15915] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 259.900420][ T42] audit: type=1800 audit(1786827294.181:6533): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16285 res=0 errno=0 [ 263.559324][ T42] kauditd_printk_skb: 41 callbacks suppressed [ 263.559371][ T42] audit: type=1400 audit(1786827297.901:6575): avc: denied { write } for pid=16058 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 263.610130][ T42] audit: type=1400 audit(1786827297.951:6576): avc: denied { write } for pid=16061 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 263.803220][ T42] audit: type=1400 audit(1786827298.141:6577): avc: denied { write } for pid=16078 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 263.868313][ T42] audit: type=1400 audit(1786827298.211:6578): avc: denied { write } for pid=16081 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 263.984109][ T42] audit: type=1400 audit(1786827298.321:6579): avc: denied { write } for pid=16084 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 264.037779][ T42] audit: type=1400 audit(1786827298.381:6580): avc: denied { write } for pid=16087 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 264.128250][ T42] audit: type=1400 audit(1786827298.471:6581): avc: denied { write } for pid=16089 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 264.175145][ T42] audit: type=1400 audit(1786827298.511:6582): avc: denied { write } for pid=16092 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 264.272782][ T42] audit: type=1400 audit(1786827298.611:6583): avc: denied { write } for pid=16096 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 264.313144][ T42] audit: type=1400 audit(1786827298.651:6584): avc: denied { write } for pid=16099 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 268.612510][ T42] kauditd_printk_skb: 54 callbacks suppressed [ 268.612526][ T42] audit: type=1400 audit(1786827302.951:6639): avc: denied { write } for pid=16253 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 268.661992][ T42] audit: type=1400 audit(1786827303.001:6640): avc: denied { write } for pid=16256 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 268.794656][ T42] audit: type=1400 audit(1786827303.131:6641): avc: denied { write } for pid=16259 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 268.846705][ T42] audit: type=1400 audit(1786827303.191:6642): avc: denied { write } for pid=16262 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 268.947354][ T42] audit: type=1400 audit(1786827303.291:6643): avc: denied { write } for pid=16265 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 269.001327][ T42] audit: type=1400 audit(1786827303.341:6644): avc: denied { write } for pid=16268 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 269.104158][ T42] audit: type=1400 audit(1786827303.441:6645): avc: denied { write } for pid=16271 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 269.149954][ T42] audit: type=1400 audit(1786827303.491:6646): avc: denied { write } for pid=16274 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 269.255161][ T42] audit: type=1400 audit(1786827303.591:6647): avc: denied { write } for pid=16278 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 269.307458][ T42] audit: type=1400 audit(1786827303.651:6648): avc: denied { write } for pid=16281 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 273.690111][ T42] kauditd_printk_skb: 54 callbacks suppressed [ 273.690132][ T42] audit: type=1400 audit(1786827308.031:6703): avc: denied { write } for pid=16450 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 273.744106][ T42] audit: type=1400 audit(1786827308.081:6704): avc: denied { write } for pid=16453 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 273.838384][ T42] audit: type=1400 audit(1786827308.181:6705): avc: denied { write } for pid=16456 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 273.884176][ T42] audit: type=1400 audit(1786827308.221:6706): avc: denied { write } for pid=16459 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 273.977497][ T42] audit: type=1400 audit(1786827308.321:6707): avc: denied { write } for pid=16462 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 274.022366][ T42] audit: type=1400 audit(1786827308.361:6708): avc: denied { write } for pid=16465 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 274.135654][ T42] audit: type=1400 audit(1786827308.471:6709): avc: denied { write } for pid=16468 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 274.189738][ T42] audit: type=1400 audit(1786827308.531:6710): avc: denied { write } for pid=16471 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 274.308395][ T42] audit: type=1400 audit(1786827308.651:6711): avc: denied { write } for pid=16474 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 274.371545][ T42] audit: type=1400 audit(1786827308.711:6712): avc: denied { write } for pid=16477 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 278.762147][ T42] kauditd_printk_skb: 44 callbacks suppressed [ 278.762162][ T42] audit: type=1400 audit(1786827313.101:6757): avc: denied { write } for pid=16608 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 278.814581][ T42] audit: type=1400 audit(1786827313.151:6758): avc: denied { write } for pid=16611 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 278.900023][ T42] audit: type=1400 audit(1786827313.241:6759): avc: denied { write } for pid=16614 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 278.952747][ T42] audit: type=1400 audit(1786827313.291:6760): avc: denied { write } for pid=16617 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 279.049611][ T42] audit: type=1400 audit(1786827313.391:6761): avc: denied { write } for pid=16619 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 279.098390][ T42] audit: type=1400 audit(1786827313.441:6762): avc: denied { write } for pid=16622 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 279.203687][ T42] audit: type=1400 audit(1786827313.541:6763): avc: denied { write } for pid=16624 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 279.252950][ T42] audit: type=1400 audit(1786827313.591:6764): avc: denied { write } for pid=16627 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 279.364524][ T42] audit: type=1400 audit(1786827313.701:6765): avc: denied { write } for pid=16629 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 279.412083][ T42] audit: type=1400 audit(1786827313.751:6766): avc: denied { write } for pid=16632 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 283.833653][ T42] kauditd_printk_skb: 56 callbacks suppressed [ 283.833668][ T42] audit: type=1400 audit(1786827318.171:6823): avc: denied { write } for pid=16784 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 283.893112][ T42] audit: type=1400 audit(1786827318.231:6824): avc: denied { write } for pid=16787 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 284.004798][ T42] audit: type=1400 audit(1786827318.341:6825): avc: denied { write } for pid=16790 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 284.060958][ T42] audit: type=1400 audit(1786827318.401:6826): avc: denied { write } for pid=16793 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 284.171517][ T42] audit: type=1400 audit(1786827318.511:6827): avc: denied { write } for pid=16795 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 284.228542][ T42] audit: type=1400 audit(1786827318.571:6828): avc: denied { write } for pid=16798 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 284.330256][ T42] audit: type=1400 audit(1786827318.671:6829): avc: denied { write } for pid=16801 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 284.396364][ T42] audit: type=1400 audit(1786827318.741:6830): avc: denied { write } for pid=16804 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 284.497657][ T42] audit: type=1400 audit(1786827318.841:6831): avc: denied { write } for pid=16806 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 284.550527][ T42] audit: type=1400 audit(1786827318.891:6832): avc: denied { write } for pid=16809 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 288.912775][ T42] kauditd_printk_skb: 58 callbacks suppressed [ 288.912797][ T42] audit: type=1400 audit(1786827323.251:6891): avc: denied { write } for pid=16964 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 288.957589][ T42] audit: type=1400 audit(1786827323.301:6892): avc: denied { write } for pid=16967 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 289.053788][ T42] audit: type=1400 audit(1786827323.391:6893): avc: denied { write } for pid=16969 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 289.096693][ T42] audit: type=1400 audit(1786827323.441:6894): avc: denied { write } for pid=16972 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 289.204536][ T42] audit: type=1400 audit(1786827323.541:6895): avc: denied { write } for pid=16974 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 289.251049][ T42] audit: type=1400 audit(1786827323.591:6896): avc: denied { write } for pid=16977 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 289.339870][ T42] audit: type=1400 audit(1786827323.681:6897): avc: denied { write } for pid=16979 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 289.387434][ T42] audit: type=1400 audit(1786827323.731:6898): avc: denied { write } for pid=16982 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 289.488250][ T42] audit: type=1400 audit(1786827323.831:6899): avc: denied { write } for pid=16984 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 289.547370][ T42] audit: type=1400 audit(1786827323.891:6900): avc: denied { write } for pid=16987 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 294.123924][ T42] kauditd_printk_skb: 61 callbacks suppressed [ 294.124067][ T42] audit: type=1400 audit(1786827328.461:6962): avc: denied { write } for pid=17174 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 294.235718][ T5869] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 294.385691][ T5869] usb 9-1: Using ep0 maxpacket: 16 [ 294.388104][ T5869] usb 9-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 294.392355][ T5869] usb 9-1: config 0 has an invalid interface number: 8 but max is 0 [ 294.395031][ T5869] usb 9-1: config 0 has no interface number 0 [ 294.397503][ T5869] usb 9-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 294.400800][ T5869] usb 9-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 294.404953][ T5869] usb 9-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 294.407718][ T5869] usb 9-1: Product: syz [ 294.409078][ T5869] usb 9-1: SerialNumber: syz [ 294.413029][ T5869] usb 9-1: config 0 descriptor?? [ 294.415329][ T42] audit: type=1800 audit(1786827328.751:6963): pid=17173 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=193778 res=0 errno=0 [ 294.418920][ T5869] cm109 9-1:0.8: invalid payload size 0, expected 4 [ 294.423478][ T42] audit: type=1800 audit(1786827328.761:6964): pid=17173 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=193809 res=0 errno=0 [ 294.427715][ T5869] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.8/input/input101 [ 294.431686][ T42] audit: type=1800 audit(1786827328.761:6965): pid=17173 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=193785 res=0 errno=0 [ 294.441733][ T42] audit: type=1800 audit(1786827328.761:6966): pid=17173 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=193786 res=0 errno=0 [ 294.451916][ T42] audit: type=1800 audit(1786827328.791:6967): pid=17173 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=193807 res=0 errno=0 [ 294.459482][ T42] audit: type=1800 audit(1786827328.791:6968): pid=17173 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=193787 res=0 errno=0 [ 294.466756][ T42] audit: type=1800 audit(1786827328.791:6969): pid=17173 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=193808 res=0 errno=0 [ 294.473432][ T42] audit: type=1800 audit(1786827328.811:6970): pid=17173 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=193829 res=0 errno=0 [ 294.481369][ T42] audit: type=1800 audit(1786827328.811:6971): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=193848 res=0 errno=0 [ 294.670339][ C0] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 294.672880][ C0] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 294.675257][ C0] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 294.677627][ C0] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 294.680579][ C0] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 294.682960][ C0] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 294.685391][ C0] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 294.687758][ C0] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 294.690135][ C0] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 294.692505][ C0] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 294.705302][ C0] cm109 9-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 294.708302][ T5869] usb 9-1: USB disconnect, device number 21 [ 294.781129][ T5869] cm109 9-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 294.832295][T17188] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 295.125949][ T5827] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 295.276190][ T5827] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 295.285673][ T5827] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 295.288829][ T5827] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 295.291619][ T5827] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 295.294916][ T5827] usb 6-1: config 0 interface 0 has no altsetting 0 [ 295.302747][ T5827] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 295.305784][ T5827] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 295.309380][ T5827] usb 6-1: config 0 interface 0 has no altsetting 0 [ 295.314459][ T5827] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 295.317592][ T5827] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 295.322707][ T5827] usb 6-1: config 0 interface 0 has no altsetting 0 [ 295.325856][ T5827] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 295.330944][ T5827] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 295.334307][ T5827] usb 6-1: config 0 interface 0 has no altsetting 0 [ 295.340233][ T5827] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 295.344254][ T5827] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 295.350092][ T5827] usb 6-1: config 0 interface 0 has no altsetting 0 [ 295.353253][ T5827] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 295.357686][ T5827] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 295.363221][ T5827] usb 6-1: config 0 interface 0 has no altsetting 0 [ 295.366339][ T5827] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 295.369216][ T5827] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 295.372565][ T5827] usb 6-1: config 0 interface 0 has no altsetting 0 [ 295.375427][ T5827] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 295.379222][ T5827] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 295.382564][ T5827] usb 6-1: config 0 interface 0 has no altsetting 0 [ 295.386260][ T5827] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 295.388891][ T5827] usb 6-1: Product: syz [ 295.390244][ T5827] usb 6-1: Manufacturer: syz [ 295.391774][ T5827] usb 6-1: SerialNumber: syz [ 295.395839][ T5827] usb 6-1: config 0 descriptor?? [ 295.409596][ T5827] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0 [ 295.459386][T17218] comedi comedi0: comedi_bond: 4:2 attached, 32 channels from 1 devices [ 295.512279][T17220] netlink: 'syz.4.1752': attribute type 1 has an invalid length. [ 295.524484][T17220] netlink: 208 bytes leftover after parsing attributes in process `syz.4.1752'. [ 295.612983][T17229] syzkaller0: entered promiscuous mode [ 295.615328][T17229] syzkaller0: entered allmulticast mode [ 295.782801][T17236] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 295.791541][T17236] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 295.957799][T17248] netlink: 'syz.5.1760': attribute type 1 has an invalid length. [ 295.963417][T17248] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1760'. [ 296.355699][ T34] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 296.516874][ T34] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 296.615258][T17263] program syz.3.1762 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 296.691327][T17263] pci 0000:00:01.0: [1af4:1050] type 00 class 0x030000 conventional PCI endpoint [ 296.734434][T17263] pci 0000:00:01.0: BAR 0 [mem 0xfe000000-0xfe7fffff pref] [ 296.737909][T17263] pci 0000:00:01.0: BAR 2 [mem 0x380800000000-0x380800003fff 64bit pref] [ 296.740974][T17263] pci 0000:00:01.0: BAR 4 [mem 0xfeaf4000-0xfeaf4fff] [ 296.743724][T17263] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 296.758734][T17263] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 297.079112][T17263] pci 0000:00:01.0: Adding to iommu group 1 [ 297.155835][T17263] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 297.158182][T17263] pci 0000:00:01.0: vgaarb: bridge control possible [ 297.160272][T17263] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 297.192749][T17263] pci 0000:00:02.0: [8086:10d3] type 00 class 0x020000 PCIe Root Complex Integrated Endpoint [ 297.218977][T17263] pci 0000:00:02.0: BAR 0 [mem 0xfffe0000-0xffffffff] [ 297.221562][T17263] pci 0000:00:02.0: BAR 1 [mem 0x03fe0000-0x03ffffff] [ 297.224255][T17263] pci 0000:00:02.0: BAR 2 [io 0xffff0000-0xffff001f] [ 297.226688][T17263] pci 0000:00:02.0: BAR 3 [mem 0xffffc000-0xffffffff] [ 297.229329][T17263] pci 0000:00:02.0: ROM [mem 0x9d200000-0x9d23ffff pref] [ 297.233024][T17263] pci 0000:00:02.0: enabling Extended Tags [ 297.307528][T17263] pci 0000:00:02.0: Adding to iommu group 2 [ 297.367843][T17263] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x807fffff pref]: assigned [ 297.384656][T17263] pci 0000:00:02.0: ROM [mem 0x80800000-0x8083ffff pref]: assigned [ 297.395029][T17263] pci 0000:00:02.0: BAR 0 [mem 0x80840000-0x8085ffff]: assigned [ 297.399209][T17263] pci 0000:00:02.0: BAR 1 [mem 0x80860000-0x8087ffff]: assigned [ 297.403422][T17263] pci 0000:00:01.0: BAR 2 [mem 0x380800000000-0x380800003fff 64bit pref]: assigned [ 297.416367][T17263] pci 0000:00:02.0: BAR 3 [mem 0x80880000-0x80883fff]: assigned [ 297.419940][T17263] pci 0000:00:01.0: BAR 4 [mem 0x80884000-0x80884fff]: assigned [ 297.424385][T17263] pci 0000:00:02.0: BAR 2 [io 0x2000-0x201f]: assigned [ 297.469958][ T34] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 297.595494][ T50] usb 6-1: USB disconnect, device number 25 [ 297.607933][ T50] yurex 6-1:0.0: USB YUREX #0 now disconnected [ 297.736030][T17296] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1763'. [ 297.751797][T17296] Device name cannot be null; rc = [-22] [ 297.762729][T17263] [drm] pci: virtio-vga detected at 0000:00:01.0 [ 297.772573][T17263] virtio-pci 0000:00:01.0: vgaarb: deactivate vga console [ 297.782080][T17263] [drm] features: -virgl +edid -resource_blob -host_visible [ 297.782157][T17263] [drm] features: -context_init -blob_alignment [ 297.850834][T17263] ------------[ cut here ]------------ [ 297.854160][T17263] kmem_cache of name 'virtio-gpu-vbufs' already exists [ 297.856506][T17263] WARNING: mm/slab_common.c:111 at __kmem_cache_create_args+0xa6/0x420, CPU#2: syz.3.1762/17263 [ 297.859833][T17263] Modules linked in: [ 297.861453][T17263] CPU: 2 UID: 0 PID: 17263 Comm: syz.3.1762 Tainted: G L syzkaller #0 PREEMPT(full) [ 297.864721][T17263] Tainted: [L]=SOFTLOCKUP [ 297.866215][T17263] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 297.869368][T17263] RIP: 0010:__kmem_cache_create_args+0xa9/0x420 [ 297.871324][T17263] Code: 48 8b 43 60 48 8d 58 a0 48 3d b0 83 d8 8e 74 1f 48 8b 7b 58 48 89 ee e8 85 3c 5d 09 85 c0 75 e0 48 8d 3d da 2f cd 0e 48 89 ee <67> 48 0f b9 3a be 20 00 00 00 48 89 ef e8 05 3e 5d 09 48 85 c0 0f [ 297.877330][T17263] RSP: 0018:ffffc9000ae1ef58 EFLAGS: 00010246 [ 297.879238][T17263] RAX: 0000000000000000 RBX: ffff888025d7b400 RCX: fffff520015c3dc6 [ 297.881692][T17263] RDX: 0000000000000000 RSI: ffffffff8c6f3280 RDI: ffffffff912669c0 [ 297.884132][T17263] RBP: ffffffff8c6f3280 R08: 0000000000000000 R09: fffffbfff224325a [ 297.886662][T17263] R10: ffffc9000ae1ef58 R11: 0000000000000000 R12: 0000000000000000 [ 297.889103][T17263] R13: ffffc9000ae1efc8 R14: 00000000000000d8 R15: 0000000000000000 [ 297.891573][T17263] FS: 00007f7747e8b6c0(0000) GS:ffff8880d5fec000(0000) knlGS:0000000000000000 [ 297.894307][T17263] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 297.896455][T17263] CR2: 00007f2da055da08 CR3: 0000000058b74000 CR4: 0000000000352ef0 [ 297.898942][T17263] Call Trace: [ 297.900036][T17263] [ 297.901015][T17263] virtio_gpu_alloc_vbufs+0xc2/0x150 [ 297.902730][T17263] ? __pfx_virtio_gpu_alloc_vbufs+0x10/0x10 [ 297.904612][T17263] ? iowrite16+0x33/0xb0 [ 297.906021][T17263] ? vp_modern_find_vqs+0xd2/0x100 [ 297.907634][T17263] virtio_gpu_init.cold+0x51c/0x126e [ 297.909299][T17263] ? lockdep_hardirqs_on+0x78/0x100 [ 297.910970][T17263] ? __pfx_virtio_gpu_init+0x10/0x10 [ 297.912621][T17263] ? console_unlock+0x1c9/0x260 [ 297.914163][T17263] ? __pfx_console_unlock+0x10/0x10 [ 297.915908][T17263] ? con_is_bound+0x141/0x190 [ 297.917386][T17263] ? __pfx_virtio_gpu_ctrl_ack+0x10/0x10 [ 297.919151][T17263] ? __pfx_virtio_gpu_cursor_ack+0x10/0x10 [ 297.921077][T17263] ? vga_remove_vgacon+0x21/0x30 [ 297.922654][T17263] ? aperture_remove_conflicting_pci_devices+0x138/0x1e0 [ 297.924859][T17263] virtio_gpu_probe+0x21c/0x360 [ 297.926453][T17263] virtio_dev_probe+0x6a2/0xbe0 [ 297.927989][T17263] ? __pfx_virtio_dev_probe+0x10/0x10 [ 297.929674][T17263] ? kernfs_create_link+0x1bd/0x240 [ 297.931354][T17263] ? kernfs_put+0x3f/0x60 [ 297.932729][T17263] ? sysfs_do_create_link_sd+0xbb/0x140 [ 297.934487][T17263] ? sysfs_create_link+0x68/0xc0 [ 297.936125][T17263] ? __pfx_virtio_dev_probe+0x10/0x10 [ 297.937825][T17263] really_probe+0x241/0xa60 [ 297.939284][T17263] __driver_probe_device+0x20e/0x450 [ 297.940961][T17263] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 297.942840][T17263] driver_probe_device+0x4a/0x140 [ 297.944451][T17263] __device_attach_driver+0x1df/0x320 [ 297.946225][T17263] ? __pfx___device_attach_driver+0x10/0x10 [ 297.948108][T17263] bus_for_each_drv+0x159/0x1e0 [ 297.949665][T17263] ? __pfx_bus_for_each_drv+0x10/0x10 [ 297.951400][T17263] ? lockdep_hardirqs_on+0x78/0x100 [ 297.953051][T17263] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 297.955018][T17263] __device_attach+0x1e4/0x4d0 [ 297.956622][T17263] ? __pfx___device_attach+0x10/0x10 [ 297.958297][T17263] ? do_raw_spin_unlock+0x145/0x1e0 [ 297.959916][T17263] device_initial_probe+0xaf/0xd0 [ 297.961463][T17263] bus_probe_device+0x64/0x160 [ 297.962940][T17263] device_add+0x121d/0x1970 [ 297.964316][T17263] ? __pfx_device_add+0x10/0x10 [ 297.965879][T17263] ? iowrite8+0x2b/0xb0 [ 297.967186][T17263] ? iowrite8+0x2e/0xb0 [ 297.968448][T17263] register_virtio_device+0x4f0/0x5d0 [ 297.970086][T17263] ? __pfx_register_virtio_device+0x10/0x10 [ 297.971909][T17263] ? __pfx_pcibios_set_master+0x10/0x10 [ 297.973590][T17263] ? __raw_spin_lock_init+0x3a/0x110 [ 297.975195][T17263] ? __pfx_virtio_pci_probe+0x10/0x10 [ 297.976936][T17263] virtio_pci_probe+0x255/0x410 [ 297.978482][T17263] local_pci_probe+0xdd/0x1b0 [ 297.979983][T17263] pci_call_probe+0x176/0x800 [ 297.981488][T17263] ? __pfx_pci_call_probe+0x10/0x10 [ 297.983048][T17263] ? preempt_schedule_thunk+0x16/0x40 [ 297.984759][T17263] ? preempt_schedule_common+0x42/0xc0 [ 297.986530][T17263] ? preempt_schedule_thunk+0x16/0x40 [ 297.988229][T17263] ? pci_match_id+0x34d/0x3f0 [ 297.989721][T17263] ? pci_match_device+0xb4/0x5f0 [ 297.991299][T17263] pci_device_probe+0x1cd/0x370 [ 297.992781][T17263] ? __pfx_pci_device_probe+0x10/0x10 [ 297.994446][T17263] really_probe+0x241/0xa60 [ 297.995906][T17263] __driver_probe_device+0x20e/0x450 [ 297.997537][T17263] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 297.999400][T17263] driver_probe_device+0x4a/0x140 [ 298.000934][T17263] __device_attach_driver+0x1df/0x320 [ 298.002633][T17263] ? __pfx___device_attach_driver+0x10/0x10 [ 298.004425][T17263] bus_for_each_drv+0x159/0x1e0 [ 298.005996][T17263] ? __pfx_bus_for_each_drv+0x10/0x10 [ 298.007627][T17263] ? lockdep_hardirqs_on+0x78/0x100 [ 298.009233][T17263] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 298.011057][T17263] __device_attach+0x1e4/0x4d0 [ 298.012529][T17263] ? __pfx___device_attach+0x10/0x10 [ 298.014148][T17263] device_initial_probe+0xaf/0xd0 [ 298.015789][T17263] pci_bus_add_device+0xc5/0x100 [ 298.017319][T17263] pci_bus_add_devices+0x9a/0x1f0 [ 298.018849][T17263] pci_rescan_bus+0x2a/0x40 [ 298.020239][T17263] rescan_store+0xfb/0x130 [ 298.021665][T17263] ? __pfx_rescan_store+0x10/0x10 [ 298.023213][T17263] ? bus_attr_store+0x1b/0xb0 [ 298.024657][T17263] ? bus_attr_store+0x30/0xb0 [ 298.026103][T17263] ? __pfx_rescan_store+0x10/0x10 [ 298.027624][T17263] bus_attr_store+0x74/0xb0 [ 298.029053][T17263] ? __pfx_bus_attr_store+0x10/0x10 [ 298.030599][T17263] sysfs_kf_write+0xf2/0x150 [ 298.032062][T17263] kernfs_fop_write_iter+0x3e0/0x5f0 [ 298.033633][T17263] ? __pfx_sysfs_kf_write+0x10/0x10 [ 298.035198][T17263] vfs_write+0x6ac/0x1050 [ 298.036595][T17263] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 298.038354][T17263] ? __pfx_vfs_write+0x10/0x10 [ 298.039868][T17263] ksys_write+0x12a/0x250 [ 298.041185][T17263] ? __pfx_ksys_write+0x10/0x10 [ 298.042652][T17263] do_syscall_64+0x115/0x870 [ 298.044100][T17263] ? clear_bhb_loop+0x70/0xc0 [ 298.045650][T17263] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.047488][T17263] RIP: 0033:0x7f7746f9e0d9 [ 298.048816][T17263] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 298.054514][T17263] RSP: 002b:00007f7747e8b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 298.057111][T17263] RAX: ffffffffffffffda RBX: 00007f7747226090 RCX: 00007f7746f9e0d9 [ 298.059422][T17263] RDX: 0000000000000001 RSI: 00002000000001c0 RDI: 000000000000000e [ 298.061970][T17263] RBP: 00007f7747035024 R08: 0000000000000000 R09: 0000000000000000 [ 298.064466][T17263] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 298.067021][T17263] R13: 00007f7747226128 R14: 00007f7747226090 R15: 00007fff10049f18 [ 298.069516][T17263] [ 298.070515][T17263] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 298.072834][T17263] CPU: 2 UID: 0 PID: 17263 Comm: syz.3.1762 Tainted: G L syzkaller #0 PREEMPT(full) [ 298.076228][T17263] Tainted: [L]=SOFTLOCKUP [ 298.077591][T17263] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 298.080711][T17263] Call Trace: [ 298.081776][T17263] [ 298.082697][T17263] dump_stack_lvl+0x100/0x190 [ 298.084196][T17263] vpanic+0x552/0x970 [ 298.085466][T17263] ? __pfx_vpanic+0x10/0x10 [ 298.086903][T17263] panic+0xd1/0xe0 [ 298.088211][T17263] ? __pfx_panic+0x10/0x10 [ 298.089649][T17263] check_panic_on_warn.cold+0x19/0x34 [ 298.091361][T17263] ? __kmem_cache_create_args+0xa6/0x420 [ 298.093136][T17263] __warn.cold+0x191/0x318 [ 298.094556][T17263] __report_bug+0x30f/0x440 [ 298.096076][T17263] ? __kmem_cache_create_args+0xa6/0x420 [ 298.097858][T17263] ? __pfx___report_bug+0x10/0x10 [ 298.099460][T17263] ? irqentry_exit+0x24d/0xa00 [ 298.100983][T17263] ? __kmem_cache_create_args+0xa9/0x420 [ 298.102748][T17263] report_bug_entry+0xe1/0x290 [ 298.104277][T17263] ? __kmem_cache_create_args+0xa9/0x420 [ 298.106050][T17263] handle_bug+0x1cd/0x2a0 [ 298.107449][T17263] exc_invalid_op+0x17/0x50 [ 298.108905][T17263] asm_exc_invalid_op+0x1a/0x20 [ 298.110456][T17263] RIP: 0010:__kmem_cache_create_args+0xa9/0x420 [ 298.112487][T17263] Code: 48 8b 43 60 48 8d 58 a0 48 3d b0 83 d8 8e 74 1f 48 8b 7b 58 48 89 ee e8 85 3c 5d 09 85 c0 75 e0 48 8d 3d da 2f cd 0e 48 89 ee <67> 48 0f b9 3a be 20 00 00 00 48 89 ef e8 05 3e 5d 09 48 85 c0 0f [ 298.118545][T17263] RSP: 0018:ffffc9000ae1ef58 EFLAGS: 00010246 [ 298.120454][T17263] RAX: 0000000000000000 RBX: ffff888025d7b400 RCX: fffff520015c3dc6 [ 298.122934][T17263] RDX: 0000000000000000 RSI: ffffffff8c6f3280 RDI: ffffffff912669c0 [ 298.125409][T17263] RBP: ffffffff8c6f3280 R08: 0000000000000000 R09: fffffbfff224325a [ 298.127873][T17263] R10: ffffc9000ae1ef58 R11: 0000000000000000 R12: 0000000000000000 [ 298.130343][T17263] R13: ffffc9000ae1efc8 R14: 00000000000000d8 R15: 0000000000000000 [ 298.132861][T17263] ? __kmem_cache_create_args+0x9b/0x420 [ 298.134656][T17263] virtio_gpu_alloc_vbufs+0xc2/0x150 [ 298.136350][T17263] ? __pfx_virtio_gpu_alloc_vbufs+0x10/0x10 [ 298.138218][T17263] ? iowrite16+0x33/0xb0 [ 298.139572][T17263] ? vp_modern_find_vqs+0xd2/0x100 [ 298.141217][T17263] virtio_gpu_init.cold+0x51c/0x126e [ 298.142881][T17263] ? lockdep_hardirqs_on+0x78/0x100 [ 298.144524][T17263] ? __pfx_virtio_gpu_init+0x10/0x10 [ 298.146193][T17263] ? console_unlock+0x1c9/0x260 [ 298.147751][T17263] ? __pfx_console_unlock+0x10/0x10 [ 298.149398][T17263] ? con_is_bound+0x141/0x190 [ 298.150892][T17263] ? __pfx_virtio_gpu_ctrl_ack+0x10/0x10 [ 298.152697][T17263] ? __pfx_virtio_gpu_cursor_ack+0x10/0x10 [ 298.154549][T17263] ? vga_remove_vgacon+0x21/0x30 [ 298.156127][T17263] ? aperture_remove_conflicting_pci_devices+0x138/0x1e0 [ 298.158310][T17263] virtio_gpu_probe+0x21c/0x360 [ 298.159859][T17263] virtio_dev_probe+0x6a2/0xbe0 [ 298.161426][T17263] ? __pfx_virtio_dev_probe+0x10/0x10 [ 298.163118][T17263] ? kernfs_create_link+0x1bd/0x240 [ 298.164775][T17263] ? kernfs_put+0x3f/0x60 [ 298.166148][T17263] ? sysfs_do_create_link_sd+0xbb/0x140 [ 298.167902][T17263] ? sysfs_create_link+0x68/0xc0 [ 298.169476][T17263] ? __pfx_virtio_dev_probe+0x10/0x10 [ 298.171206][T17263] really_probe+0x241/0xa60 [ 298.172654][T17263] __driver_probe_device+0x20e/0x450 [ 298.174336][T17263] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 298.176210][T17263] driver_probe_device+0x4a/0x140 [ 298.177812][T17263] __device_attach_driver+0x1df/0x320 [ 298.179521][T17263] ? __pfx___device_attach_driver+0x10/0x10 [ 298.181413][T17263] bus_for_each_drv+0x159/0x1e0 [ 298.182954][T17263] ? __pfx_bus_for_each_drv+0x10/0x10 [ 298.184658][T17263] ? lockdep_hardirqs_on+0x78/0x100 [ 298.186301][T17263] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 298.188151][T17263] __device_attach+0x1e4/0x4d0 [ 298.189671][T17263] ? __pfx___device_attach+0x10/0x10 [ 298.191348][T17263] ? do_raw_spin_unlock+0x145/0x1e0 [ 298.193000][T17263] device_initial_probe+0xaf/0xd0 [ 298.194602][T17263] bus_probe_device+0x64/0x160 [ 298.196130][T17263] device_add+0x121d/0x1970 [ 298.197576][T17263] ? __pfx_device_add+0x10/0x10 [ 298.199124][T17263] ? iowrite8+0x2b/0xb0 [ 298.200474][T17263] ? iowrite8+0x2e/0xb0 [ 298.201815][T17263] register_virtio_device+0x4f0/0x5d0 [ 298.203517][T17263] ? __pfx_register_virtio_device+0x10/0x10 [ 298.205378][T17263] ? __pfx_pcibios_set_master+0x10/0x10 [ 298.207121][T17263] ? __raw_spin_lock_init+0x3a/0x110 [ 298.208795][T17263] ? __pfx_virtio_pci_probe+0x10/0x10 [ 298.210484][T17263] virtio_pci_probe+0x255/0x410 [ 298.212058][T17263] local_pci_probe+0xdd/0x1b0 [ 298.213580][T17263] pci_call_probe+0x176/0x800 [ 298.215069][T17263] ? __pfx_pci_call_probe+0x10/0x10 [ 298.216710][T17263] ? preempt_schedule_thunk+0x16/0x40 [ 298.218407][T17263] ? preempt_schedule_common+0x42/0xc0 [ 298.220141][T17263] ? preempt_schedule_thunk+0x16/0x40 [ 298.221842][T17263] ? pci_match_id+0x34d/0x3f0 [ 298.223349][T17263] ? pci_match_device+0xb4/0x5f0 [ 298.224880][T17263] pci_device_probe+0x1cd/0x370 [ 298.226361][T17263] ? __pfx_pci_device_probe+0x10/0x10 [ 298.228037][T17263] really_probe+0x241/0xa60 [ 298.229435][T17263] __driver_probe_device+0x20e/0x450 [ 298.231036][T17263] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 298.232873][T17263] driver_probe_device+0x4a/0x140 [ 298.234395][T17263] __device_attach_driver+0x1df/0x320 [ 298.236024][T17263] ? __pfx___device_attach_driver+0x10/0x10 [ 298.237836][T17263] bus_for_each_drv+0x159/0x1e0 [ 298.239298][T17263] ? __pfx_bus_for_each_drv+0x10/0x10 [ 298.240936][T17263] ? lockdep_hardirqs_on+0x78/0x100 [ 298.242494][T17263] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 298.244249][T17263] __device_attach+0x1e4/0x4d0 [ 298.245748][T17263] ? __pfx___device_attach+0x10/0x10 [ 298.247348][T17263] device_initial_probe+0xaf/0xd0 [ 298.248881][T17263] pci_bus_add_device+0xc5/0x100 [ 298.250352][T17263] pci_bus_add_devices+0x9a/0x1f0 [ 298.251909][T17263] pci_rescan_bus+0x2a/0x40 [ 298.253301][T17263] rescan_store+0xfb/0x130 [ 298.254664][T17263] ? __pfx_rescan_store+0x10/0x10 [ 298.256182][T17263] ? bus_attr_store+0x1b/0xb0 [ 298.257606][T17263] ? bus_attr_store+0x30/0xb0 [ 298.259011][T17263] ? __pfx_rescan_store+0x10/0x10 [ 298.260564][T17263] bus_attr_store+0x74/0xb0 [ 298.261981][T17263] ? __pfx_bus_attr_store+0x10/0x10 [ 298.263552][T17263] sysfs_kf_write+0xf2/0x150 [ 298.264944][T17263] kernfs_fop_write_iter+0x3e0/0x5f0 [ 298.266551][T17263] ? __pfx_sysfs_kf_write+0x10/0x10 [ 298.268167][T17263] vfs_write+0x6ac/0x1050 [ 298.269466][T17263] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 298.271248][T17263] ? __pfx_vfs_write+0x10/0x10 [ 298.272735][T17263] ksys_write+0x12a/0x250 [ 298.274083][T17263] ? __pfx_ksys_write+0x10/0x10 [ 298.275566][T17263] do_syscall_64+0x115/0x870 [ 298.276946][T17263] ? clear_bhb_loop+0x70/0xc0 [ 298.278389][T17263] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.280237][T17263] RIP: 0033:0x7f7746f9e0d9 [ 298.281695][T17263] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 298.287640][T17263] RSP: 002b:00007f7747e8b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 298.290187][T17263] RAX: ffffffffffffffda RBX: 00007f7747226090 RCX: 00007f7746f9e0d9 [ 298.292637][T17263] RDX: 0000000000000001 RSI: 00002000000001c0 RDI: 000000000000000e [ 298.294992][T17263] RBP: 00007f7747035024 R08: 0000000000000000 R09: 0000000000000000 [ 298.297415][T17263] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 298.299830][T17263] R13: 00007f7747226128 R14: 00007f7747226090 R15: 00007fff10049f18 [ 298.302189][T17263] [ 298.303737][T17263] Kernel Offset: disabled [ 298.305089][T17263] Rebooting in 86400 seconds..