last executing test programs: 34.561888347s ago: executing program 3 (id=98): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4080000000000006910280000000000c928e17700000000950000aa33000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x0, 0x10, &(0x7f0000000080), 0xffffffffffffffb2}, 0x48) 34.492155226s ago: executing program 3 (id=99): bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x4, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) r2 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x7, 0x100) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x0, 0x7}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) r5 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r5, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r5, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x1}}}, 0x10) bind$tipc(r4, &(0x7f00000001c0)=@name={0x1e, 0x2, 0x2, {{0x42, 0x4}}}, 0x10) r6 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r6, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0xfffffffd}}, 0x10) r7 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r7, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) close(0x3) ioctl$SNDRV_PCM_IOCTL_REWIND(r2, 0x40084146, &(0x7f0000000180)=0x2) 34.378214635s ago: executing program 3 (id=101): r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$VT_SETMODE(r0, 0x5602, &(0x7f0000000000)={0x1, 0x1, 0x2, 0x9, 0x3}) ioctl$VT_RELDISP(r0, 0x5605) bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_emit_vhci(&(0x7f00000024c0)=ANY=[@ANYBLOB="05c9"], 0xe) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x0, 0x55007}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0xfffffffffffffffa}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x9, 0x3, 0x378, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x2a8, 0xffffffff, 0xffffffff, 0x2a8, 0xffffffff, 0x3, &(0x7f0000000080), {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast1}, @private0={0xfc, 0x0, '\x00', 0x1}, [0xffffff00, 0xff], [0xff000000, 0xff, 0xffffffff, 0xffffff00], 'batadv_slave_1\x00', 'nr0\x00', {}, {}, 0x1d, 0x7, 0x6, 0xa}, 0x0, 0xf8, 0x168, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x5}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x2, 0x2, 0x9, 0x0, 0x0, "0604f07a3de91cbaf78e3fd2228ecd43cca71b13763b42dffe8d2d9755c00c306b53de040c6fecb4f56a5bea5807e3940d7ca6bff2d966439946fcb2d79c38c1"}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@inet=@esp={{0x30}, {[0x4d6, 0x4d6]}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x7, 0x3, 0x0, 'pptp\x00', 'syz0\x00', {0x7f}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d8) 34.281925522s ago: executing program 3 (id=102): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x2210088, &(0x7f0000000580)=ANY=[@ANYBLOB="74f5026e733d76697274696f2c70726976706f72742c646972656374696f2c63616368653d6c6f6f73652c6d73697a653d307830303030303030303030303031303030"]) r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) fadvise64(r0, 0x18, 0x0, 0x5) chdir(&(0x7f0000000100)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) ftruncate(r1, 0x4a8e) ioctl$sock_inet_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000040)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000280), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/drivers/ata_generic/new_id\x00', 0x1, 0x0) write(r4, &(0x7f00000000c0)='8086 100e\x00', 0x9) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0) write(r5, &(0x7f0000000140)='0000:00:03.0\x00', 0xd) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0) write(r6, &(0x7f00000001c0)='ata_generic\x00', 0xc) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/drivers/ata_generic/bind\x00', 0x1, 0x0) write(r7, &(0x7f0000000140)='0000:00:03.0\x00', 0xd) r8 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x4010012, r8, 0x0) 33.77832084s ago: executing program 3 (id=108): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = mq_open(&(0x7f0000001880)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\x1c`\xbd\xe1e\x80\x7f\xd2&l0\xc1b\xac\x8b\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL%Jw\x99y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3\x05\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xc8\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xc7\xa7\x82\xb9V}`\xb7\xfc@\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5m\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v>\x9b\n0\xb2 h\xad5\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\'/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f9\xce\x1eYV\xa2\xc4\x03PV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x9b\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xd1\x06F\xef\xbd\xeb\xf0\'\f\f\x003\xecp\x18\x9e\x1d\xeaH\xdaQ%+\xf4\xae\xab0\b\x17W\xba\xaf4E\xe62\xefm\xdd+\xb2\x1b:\xc0cc\x97\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x97s\x03`\xba\xf1\xdb\x05\xe5C)\x8f\xbchyL1:\xc2\xea\x8a\xfc\tq\xfa\xec&\xc7\xde\xf4\xf2\xb9\xe1\xa1\x80)1\xbe@Bt\xb7\xce\xc9\xee\xa8v\t\xfa,\xa2\x9a\xa3\\\xfbM\xb5\xfd\xa9\xe3\x9f\xf7\x85\x87w\x1d]& 8\xb5\xba\xea\xad\xa9\xd4V\xf1\xe9\xaaT\xc8\xff\xaf\xef\x91\xca\x9c\x80\xbeYd]\xfb\x1a\x96?\xb6\xd7{X\xa1H\xeb\xce\xd7\xb7\xf7\x15\xd6\x88\x91\xef{\xf8K@\xb6ch\x1e\x16\xd5m@\xa8\x91\xa5\xc5@\xa7\x00\xab\xc5\xc8\xc8\x9c\xe3:\xac\x1eG\xa0e\'/\x15G\x8e\xe5\x16\xd5S ]\xf8\xa1\xa46\x9a\xf0d!\xc8\x81S\xbc\x18\xdf\xa0\xfek\xb0(\xf7\xba5\x8e\xe5A\xd5l\xfbp\xcb\xa8\xf0b\x91\xc4\xd3+)Sy\x81\xe3\r%C\x03enM\xf1\xdf\xe3b\xb7\x9b\f\x82\xb1z\xcf^\x06\xcd\xa2\x96\xe3\xd5\xbd@1\xbe\x02\xad\\\x89\xd0\xe0\xa8\x11\xb4B\\\x14\\\xed5\x9c\xd7n\x8d\xec\xb5\xcc\xf8q', 0x42, 0x0, 0x0) mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r1, 0x0, 0x0, 0xa, 0x0) close(r1) mq_unlink(&(0x7f0000000000)='eth0\x00') syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x1) ioctl$I2C_RDWR(r2, 0x707, &(0x7f0000000140)={&(0x7f0000001680)=[{0x7, 0x0, 0x1, &(0x7f00000001c0)="ce"}], 0x1}) syz_usb_control_io$printer(r0, &(0x7f0000000300)={0x14, &(0x7f0000000040)={0x40, 0x7, 0x16, {0x16, 0x21, "3bbcb58f13a419c2c44861c250d6fff71c536693"}}, &(0x7f0000000200)={0x0, 0x3, 0xef, @string={0xef, 0x3, "2833d7b3ba3208ac04bf33f0a59d01ec3bccc87718b184ad6b895e353d395f3478647a15e655a760b1cae85de18ecbb209855a77b3e957d10665e4d843e3fa719f1f6e6da47109abe31a3a9e17cbbd86d981d8ea7bbfdbf6b543e8f1419f252de2c484be952591651ed92639042d1f529b22ce62a20d8ea1e3bf78e3481e80d9677ed790cceced3ace29869b8856c953d99087be589c03678258d5acc27645158092a33b64d8c12f6721c858f2ec1ba2594000f59972fab8c71ca806c23e0536618a605d296d314967fa9a66ea13117b58d3d7bf7099368be3b3beb5fb4c06275d83a68c6ea7257a7f66eddf19"}}}, &(0x7f0000000500)={0x34, &(0x7f0000000340)={0x40, 0x12, 0xf, "910486efe1be08b24223eb97dc174f"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000400)={0x20, 0x0, 0x64, {0x62, "182223a43fc982c1e586d8884bce3ab9de7dc14a25304340db4117a3ee29d812522ab860d513626f89ebc78be464db7ebd29a1f30fb17a2aae67663268069d26f20e154fde4bf79df6d9be8e913c7a8b3ae95c34c181531ae5ed3ff75cff2740b8dc"}}, &(0x7f0000000480)={0x20, 0x1, 0x1, 0x7}, &(0x7f00000004c0)={0x20, 0x0, 0x1, 0xd2}}) 33.181701058s ago: executing program 3 (id=124): setreuid(0xee01, 0xee01) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b7000000fdffffffbfa30000000000000703000020feffff720af0fff8ffffff71a4f0ff000000000f040000000000001d4002000000000065040000000000000f030000000000001d440000000000007a0a00fe000000000f14000000000000b5000000000000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b1100886475923906f88b53987ad0c33d39000d06a59ff616236fd9aa58f0177184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d64364f56e24e6d2105bd901128c7e0ec82770c8204a1deeed415561752f708ccfbd80b2bd6c72652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee7dfcb59b854e9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b4a595e487efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599ddd71063be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d96c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5905c6bbf1137548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0b4a26b702396df7e0c1e02b884114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea52acb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcc536cbae315c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0900000000000000ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fcdb4c2811e32f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96735600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15ecb4d91675767999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec865e160000000000004c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a419aa095e203c1bafbb9b9a7c2bca311a28ee4952f2d325a56390578f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b8074bf7df8b5e783637da7418fd3aa81cff202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035ab63de71a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a274000000000000000000000000000000000000000000000009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4120260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0d0274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d3b332240d450fdb0a9a69f432e277f3a0386eb2bd1305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cbf5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed425454b9a70cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200"/2759], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000080)={{{@in6=@loopback, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, &(0x7f0000000180)=0xe8) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000d80), 0x30000, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001880)={0x130, 0x1f, 0x301, 0x70bd2b, 0x0, "", [@nested={0x11e, 0x0, 0x0, 0x1, [@typed={0x14, 0x1, 0x0, 0x0, @ipv6=@remote}, @generic="f4000fbb79983800a5bdeaaa89160a11", @generic="ee02fd74ec9ea9b05250ee6b9b15838be8aee15a5682f320279591696a0588633668e9c2927e3ed6981da74e0278a9357c7cacf3a7a18e3b390d3913cf4f2344b235a553becf5213d401378944e9e6e54a5a50e475d290859d8f0b2fcc7d9d3bd47306287dce12fd979c53320ce77ef7845a882d83103816ec2a1dd9424a591c89245863a027a9a6ada1846eac07c9cefa0693e208ed7684e6adf121f1283ab4fff0e063e82a4fa86941", @typed={0xc5, 0x0, 0x0, 0x0, @binary="1d55efc186ad94883add2856b5b67fa80a09140d83f4db0a160f4b77552c2fdd3eb1ee0b2ebaa523b18b783cedd3ec6355f9135ace190b8dce7d1d04f1b751c52f283e0fbf2b62aa00e8c4b21b2bb155e1ac242f849a78fb782de50d18bbfc483288aabf7e088534737bf60da06dbae5a23d07831492fbfa193bbf8e95fade2ec53883c8ebd7c0d497b5f773b9c7eb9f0b9f6cefb2c0e8726a33a608bc3c85511a177395e44e01b31bb3b47d7f9a6827649e702a1d5c1712211111bb99a5d862ab"}, @nested={0x4, 0xea}, @typed={0xfffffd7f, 0xd7, 0x0, 0x0, @ipv4=@multicast1}, @generic="7ca38e5ba94b"]}]}, 0x130}], 0x1, 0x0, 0x0, 0x8091}, 0x0) symlinkat(&(0x7f0000000d40)='./file0\x00', r1, &(0x7f0000000dc0)='./file0\x00') quotactl$Q_GETINFO(0xffffffff80000502, &(0x7f0000000040)=@nullb, r0, &(0x7f0000000d00)) fcntl$getownex(r2, 0x10, &(0x7f0000001040)) fstat(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x2010000, &(0x7f00000014c0)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=r3, @ANYBLOB="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"]) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f0000002140)={0x2020}, 0x2020) r5 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r8, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) sendmmsg$unix(r6, &(0x7f0000000ec0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1c030000000000000100000002000000", @ANYRES32=r5, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r6, @ANYBLOB='\x00\x00\x00\x00'], 0x38, 0x20008041}}], 0x1, 0x4000090) statx(r1, &(0x7f0000001080)='./file0\x00', 0x100, 0x111, &(0x7f00000010c0)) r10 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) move_pages(r10, 0x0, 0x0, 0x0, 0x0, 0x0) statx(r1, &(0x7f00000011c0)='./file0\x00', 0x2000, 0x8, &(0x7f0000001200)) r11 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(r11, &(0x7f0000000040)='auxv\x00') statx(r1, &(0x7f0000001300)='./file0\x00', 0x400, 0x8, &(0x7f0000001340)) 33.162388136s ago: executing program 32 (id=124): setreuid(0xee01, 0xee01) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"/2759], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000080)={{{@in6=@loopback, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, &(0x7f0000000180)=0xe8) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000d80), 0x30000, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001880)={0x130, 0x1f, 0x301, 0x70bd2b, 0x0, "", [@nested={0x11e, 0x0, 0x0, 0x1, [@typed={0x14, 0x1, 0x0, 0x0, @ipv6=@remote}, @generic="f4000fbb79983800a5bdeaaa89160a11", @generic="ee02fd74ec9ea9b05250ee6b9b15838be8aee15a5682f320279591696a0588633668e9c2927e3ed6981da74e0278a9357c7cacf3a7a18e3b390d3913cf4f2344b235a553becf5213d401378944e9e6e54a5a50e475d290859d8f0b2fcc7d9d3bd47306287dce12fd979c53320ce77ef7845a882d83103816ec2a1dd9424a591c89245863a027a9a6ada1846eac07c9cefa0693e208ed7684e6adf121f1283ab4fff0e063e82a4fa86941", @typed={0xc5, 0x0, 0x0, 0x0, @binary="1d55efc186ad94883add2856b5b67fa80a09140d83f4db0a160f4b77552c2fdd3eb1ee0b2ebaa523b18b783cedd3ec6355f9135ace190b8dce7d1d04f1b751c52f283e0fbf2b62aa00e8c4b21b2bb155e1ac242f849a78fb782de50d18bbfc483288aabf7e088534737bf60da06dbae5a23d07831492fbfa193bbf8e95fade2ec53883c8ebd7c0d497b5f773b9c7eb9f0b9f6cefb2c0e8726a33a608bc3c85511a177395e44e01b31bb3b47d7f9a6827649e702a1d5c1712211111bb99a5d862ab"}, @nested={0x4, 0xea}, @typed={0xfffffd7f, 0xd7, 0x0, 0x0, @ipv4=@multicast1}, @generic="7ca38e5ba94b"]}]}, 0x130}], 0x1, 0x0, 0x0, 0x8091}, 0x0) symlinkat(&(0x7f0000000d40)='./file0\x00', r1, &(0x7f0000000dc0)='./file0\x00') quotactl$Q_GETINFO(0xffffffff80000502, &(0x7f0000000040)=@nullb, r0, &(0x7f0000000d00)) fcntl$getownex(r2, 0x10, &(0x7f0000001040)) fstat(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x2010000, &(0x7f00000014c0)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=r3, @ANYBLOB="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"]) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f0000002140)={0x2020}, 0x2020) r5 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r8, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) sendmmsg$unix(r6, &(0x7f0000000ec0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1c030000000000000100000002000000", @ANYRES32=r5, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r6, @ANYBLOB='\x00\x00\x00\x00'], 0x38, 0x20008041}}], 0x1, 0x4000090) statx(r1, &(0x7f0000001080)='./file0\x00', 0x100, 0x111, &(0x7f00000010c0)) r10 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) move_pages(r10, 0x0, 0x0, 0x0, 0x0, 0x0) statx(r1, &(0x7f00000011c0)='./file0\x00', 0x2000, 0x8, &(0x7f0000001200)) r11 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(r11, &(0x7f0000000040)='auxv\x00') statx(r1, &(0x7f0000001300)='./file0\x00', 0x400, 0x8, &(0x7f0000001340)) 3.719177604s ago: executing program 1 (id=471): ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000001ac0)={0xffffffffffffffff, 0x802000, {0x0, 0x0, 0x0, 0x9, 0x14a1fd, 0x0, 0x0, 0x1a, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a85a056f5d759ded130e04d528539f3d328973747a75df8a69ea917deb7d6193b3e7772fd29f35239d200", "24431a1e77a68e174f000000000000000010e200", [0x0, 0x6]}}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$XFS_IOC_GETPARENTS(r0, 0xc028583e, &(0x7f0000000480)={{[0x3, 0x7, 0x1, 0x4]}, 0x0, 0x1, 0x7, 0x0, &(0x7f0000000300)=[{{@_ha_fsid={[0x3, 0x40]}, {0x9b00, 0x871, 0x6}}, 0x1, 0x0, '/dev/cec#\x00'}, {{@align, {0x9, 0x4, 0x3, 0x3}}, 0x3, 0x0, '\x00'}, {{@_ha_fsid={[0xff, 0x5]}, {0x7, 0xc27, 0xfffffffd, 0x6}}, 0x7, 0x0, '+@]+*\x00'}, {{@align=0x10000, {0x0, 0x8000, 0xffffffff, 0x3}}, 0x9, 0x0, '.\x00'}, {{@_ha_fsid={[0x1, 0x7]}, {0x4, 0xf2, 0x0, 0x77}}, 0x1, 0x0, '+#)|\x00'}, {{@align=0x9, {0x4, 0x7, 0xe32, 0x3}}, 0x9, 0x0, '\x00'}, {{@align=0x4, {0xa, 0x5, 0x95a5, 0x10001}}, 0x0, 0x0, '\x00'}, {{@align=0x9, {0x4, 0x2, 0xd, 0x6}}, 0x3, 0x0, ']\'#,,)\\\x8e%*#)^^\\-\x00'}]}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1}]}, 0x10) (async) bind$bt_hci(r1, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r2, &(0x7f0000001d80)='.\x00', 0x0, &(0x7f0000000000)={0xb}, 0x20) (async) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xe) (async) r3 = syz_open_dev$cec(&(0x7f0000000100), 0x0, 0x2000) ioctl$CEC_DQEVENT(r3, 0xc0506107, &(0x7f0000000180)={0x0, 0x0, 0x0, @lost_msgs}) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r4, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000440)="ea", 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18, 0x81}, 0x4c800) (async) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000280)={0xfffffbff, 0xfffffffffffffffe, 0xa, 0x3, 0x8, 0x3}) r6 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$SNDCTL_TMR_TEMPO(r6, 0xc0045405, &(0x7f0000000240)=0x26) (async) recvmmsg(r5, &(0x7f0000001140), 0x700, 0x2, 0x0) 3.711643379s ago: executing program 1 (id=473): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000002c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x40, 0x3, 0x100007, 0x16, "b0bf2ebb48c8040018bfef400000000500"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0xff) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40, 0x0) 3.369549558s ago: executing program 1 (id=477): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)={0x58, r0, 0x1, 0x0, 0x1000000, {}, [@IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x26, 0x3}}]}]}, 0x58}}, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000240)={'bridge_slave_1\x00', {0x2, 0x4e22, @rand_addr=0xfffffffd}}) 3.311622527s ago: executing program 1 (id=478): setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000040)=@ccm_128={{0x304}, "d916aa009aa7dbde", "e6cb742dce3ac9181adadde0fa835126", "862e76d7", "86179cb9af900f8b"}, 0x28) r0 = syz_usb_connect(0x2, 0x58, &(0x7f0000000000)=ANY=[@ANYBLOB="120110038e3ac6209406010013780102030109024600020e061003090439d8011adaa8080905081020000709800904e40503b956da020905080000040112fc09051b00200007039a0705d15b89f26d090509"], &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000bc0)={0x24, 0x0, &(0x7f0000000b00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1c01}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000011c0)={0x24, 0x0, &(0x7f0000001040)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001600)={0x24, 0x0, &(0x7f0000001540)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000002040)={0x2c, &(0x7f00000001c0)={0x40, 0x8, 0x8, "fde61e0ee4a63b9e"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000002280)={0x84, &(0x7f0000001e00)={0x20, 0x14, 0x4, "348b35e5"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000540)='a', 0x1) 539.433606ms ago: executing program 0 (id=530): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x28, r0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x71}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x48001}, 0x2) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2082) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r1, 0xc04c5349, &(0x7f00000000c0)={0x0, 0x10000, 0x2}) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$PPPIOCGMRU(r2, 0x80047453, &(0x7f0000000140)) 539.232484ms ago: executing program 0 (id=531): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c40)={0x14, 0x3b, 0x301, 0xa70bd1d, 0x25dfdbff, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0)={0x80, 0x40000, 0xffffffff}, 0x10}, 0x94) 461.685184ms ago: executing program 2 (id=532): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(gcm(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r2 = accept4(r1, 0x0, 0x0, 0x800) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r2) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x14, 0x36, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRESOCT=r0], 0x58}}, 0x20000000) 461.298461ms ago: executing program 0 (id=533): syz_emit_ethernet(0x6c, &(0x7f00000000c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @multicast, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x1, 0x1c, 0x5e, 0x68, 0x0, 0xc0, 0x2f, 0x0, @local, @broadcast}, {{}, {}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x86dd, [0x2, 0x4, 0x800]}, {0x8, 0x88be, 0x0, {{0x5, 0x1, 0x96, 0x1, 0x1, 0x3, 0x6, 0x2}, 0x1, {0x9}}}, {0x8, 0x22eb, 0x2, {{0x6, 0x2, 0x4, 0x1, 0x1, 0x2, 0x4, 0xa2}, 0x2, {0x4, 0xd, 0x2, 0x6, 0x1, 0x0, 0x2, 0x1, 0x1}}}}}}}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000680)=[{&(0x7f0000001180)=""/4113, 0x1011}], 0x1, 0x16, 0xfffffff9) r2 = syz_open_dev$dvb_demux(&(0x7f0000000400), 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x24040040) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0xc31fe084736598c) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x811}, 0x4000804) ioctl$DVB_DEMUX_DMX_SET_BUFFER_SIZE(r2, 0x6f2d, 0xffffffffff60014a) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'veth1_vlan\x00', 0x0}) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), 0xffffffffffffffff) mmap(&(0x7f0000dde000/0x3000)=nil, 0x3000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000040)={0x0, 0x2}, &(0x7f0000000080)=0x8) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x200, 0x70bd29, 0x10000, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}}, 0x40000) ioctl$OCFS2_IOC_MOVE_EXT(r0, 0x40406f06, &(0x7f0000000000)={0x1, 0xb, 0x7ff, 0x5, 0x2}) 456.758986ms ago: executing program 0 (id=535): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000007fc0)=[@in={0x2, 0x0, @rand_addr=0x64010102}]}, &(0x7f0000000100)=0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x30, &(0x7f0000000200)={&(0x7f0000000180)={0x24, 0x3f, 0x1, 0x0, 0x0, {0x1, 0x1}, [@generic="7030020000000000000000040000000079"]}, 0x24}}, 0x0) recvfrom(r2, &(0x7f0000000400)=""/1024, 0x400, 0x0, 0x0, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x68, 0x42, 0x1, 0x0, 0x0, {0x3, 0x1}, [@generic="000000002600010000112233445566778899aabb0800450000140000000001170000010203040506070800000c00020006000600080000000c000300080017000400010004000400"]}, 0x68}}, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x55af) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) bind$bt_sco(r1, &(0x7f0000000140)={0x1f, @none}, 0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x7a, &(0x7f0000000080), &(0x7f0000000000)=0x8) socket(0x2, 0x80805, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000007fc0)=[@in={0x2, 0x0, @rand_addr=0x64010102}]}, &(0x7f0000000100)=0x10) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x30, &(0x7f0000000200)={&(0x7f0000000180)={0x24, 0x3f, 0x1, 0x0, 0x0, {0x1, 0x1}, [@generic="7030020000000000000000040000000079"]}, 0x24}}, 0x0) (async) recvfrom(r2, &(0x7f0000000400)=""/1024, 0x400, 0x0, 0x0, 0x0) (async) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x68, 0x42, 0x1, 0x0, 0x0, {0x3, 0x1}, [@generic="000000002600010000112233445566778899aabb0800450000140000000001170000010203040506070800000c00020006000600080000000c000300080017000400010004000400"]}, 0x68}}, 0x0) (async) write$binfmt_script(r1, &(0x7f0000000040), 0x55af) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) (async) bind$bt_sco(r1, &(0x7f0000000140)={0x1f, @none}, 0x8) (async) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x7a, &(0x7f0000000080), &(0x7f0000000000)=0x8) (async) 371.973321ms ago: executing program 4 (id=537): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-384\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r1) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xc000008}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, r2, 0x2, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_MRU={0x6}, @L2TP_ATTR_IFNAME={0x14}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x4}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x42085) (async, rerun: 32) sendmsg$nl_route_sched(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)=@getqdisc={0x24, 0x26, 0x400, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xffff, 0x10}, {0xe, 0x4}, {0xffe0, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x24040000}, 0x800) (rerun: 32) 371.665644ms ago: executing program 2 (id=538): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x1, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000003c0)={'comedi_parport\x00', [0x140, 0x3, 0x1000c, 0x100dddc, 0x0, 0x10000, 0x7fff, 0x0, 0x7, 0xc72c, 0x2000004, 0xf, 0xc000, 0x8, 0x4ce, 0x8e99, 0x1, 0xed, 0x6, 0x8, 0x10, 0x0, 0xa, 0x9, 0xffb, 0x9, 0xaf, 0x2, 0x283, 0x6, 0x9]}) ioctl$XFS_IOC_FSBULKSTAT_SINGLE(r0, 0xc0205866, &(0x7f00000004c0)={&(0x7f0000000000)=0x9a2, 0x4, &(0x7f00000000c0)=[{}, {}, {}, {}], &(0x7f0000000480)}) 291.920036ms ago: executing program 0 (id=539): mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='udf\x00', 0x20001b, 0x0) quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000240)=@nbd={'/dev/nbd', 0x0}, 0x0, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40186f40, &(0x7f0000000440)=0x10) 291.665009ms ago: executing program 2 (id=540): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) write(r0, &(0x7f0000001280)='\f', 0x1) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x14}, 0x1, 0x0, 0x0, 0x4000090}, 0x40000) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {r2, 0x1, 0x30, 0x30, 0x0, @in6={0x1b, 0x4000, 0x0, @loopback, 0xbff}, @ib={0x1b, 0xd9, 0x100fff, {"4a51abf0de57ff009163000000408000"}, 0x8000000000004201, 0x2, 0x3}}}, 0x118) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000140)={0x8, 0x120, 0xfa00, {0x4, {0x1, 0x2, "dbb8d91957ac91f28b7f97ec2018ef3eb95d9280f6f7aa6f6f4a29d91261fe6b0cf95fd2f5bbb12bd32b258ded60f318b4110903ceef359286c2d8b660e0abf9c8274d15801e00d806781753204672bd931ae90ff012ceb427d92276e902343f0cf13399a5224e98cc937737137c818809d88012539469a8e1823feeb61587d9b6f7647b439c3dab48ef7b690e3b41f271d1f819dc54aacc33c6485a38b2993ff63e19ee2d585e5a47f91a3696fd7df44007e2510333d91388551e52a1d98ca9c67a509b9a86d9518b35606b9ed191f7346d56b5ed80bad41d71b86cc7f3355070640b9233167b66ecb958c9112d8bc6e52e42d015d9ba6159bc5c332b635dfb", 0xa, 0x2, 0xba, 0x8, 0xe, 0x3, 0x6, 0x1}, r2}}, 0x128) 290.815794ms ago: executing program 4 (id=541): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000003c0)=@mangle={'mangle\x00', 0x8, 0x6, 0x788, 0x598, 0x480, 0x0, 0x480, 0x278, 0x6b8, 0x6b8, 0x6b8, 0x6b8, 0x6b8, 0x6, 0x0, {[{{@uncond, 0x0, 0xd8, 0x100, 0x0, {0x7a00000000000000}, [@common=@unspec=@cluster={{0x30}, {0x6, 0x2c, 0x99}}]}, @HL={0x28}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x80}, @loopback, [], [0x0, 0xffffffff, 0xff000000], 'veth1_to_batadv\x00', 'veth1_macvtap\x00', {0xff}}, 0x0, 0x150, 0x178, 0x0, {0x5002}, [@common=@unspec=@physdev={{0x68}, {'veth0_to_team\x00', {}, 'netpci0\x00', {}, 0x14, 0x14}}, @common=@unspec=@connlimit={{0x40}, {[0xff000000, 0xff, 0xff000000, 0xff000000], 0x401, 0x2}}]}, @common=@unspec=@NFQUEUE1={0x28}}, {{@uncond, 0x0, 0x1e0, 0x208, 0x0, {}, [@common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x38}, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast2, @local, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev, @rand_addr=' \x01\x00', @private1, @mcast2, @dev={0xfe, 0x80, '\x00', 0x3}, @private2, @empty, @mcast2, @loopback]}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x1, 'netbios-ns\x00'}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x0, 0x6}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@eui64={{0x28}}]}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x827) 231.763295ms ago: executing program 4 (id=542): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/functions/uvc.0\x00', 0x1ff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_ACTIVATE(r2, 0x5606, 0x8) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000000)=0x200000000) write$vhost_msg_v2(r3, &(0x7f0000000200)={0x2, 0x0, {&(0x7f0000000100)=""/94, 0x5e, 0x0, 0x3, 0x2}}, 0x48) write$vhost_msg_v2(r3, &(0x7f0000000c40)={0x2, 0x0, {&(0x7f0000000b00)=""/147, 0x93, 0x0, 0x1, 0x2}}, 0x48) write$vhost_msg(r3, &(0x7f00000007c0)={0x1, {&(0x7f0000000840)=""/71, 0x47, 0x0, 0x3, 0x2}}, 0x48) write$vhost_msg_v2(r3, &(0x7f00000003c0)={0x2, 0x0, {&(0x7f0000000700)=""/91, 0x5b, 0x0, 0x3, 0x2}}, 0x48) write$vhost_msg_v2(r3, &(0x7f0000000180)={0x2, 0x0, {&(0x7f0000000280)=""/184, 0x2562bac182d8b35a, 0x0, 0x2, 0x3}}, 0x48) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r1, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r0, 0x3ba0, &(0x7f0000001200)={0x48, 0x8, r4, 0x0, 0xffff, 0x1, &(0x7f0000000480)='|', 0x4}) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/uvc.0/streaming/mjpeg/m1\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/uvc.0/streaming/mjpeg/m1/bmaControls\x00', 0x2, 0x0) write(r5, &(0x7f0000000300)='0x01\x00', 0x4) syz_emit_ethernet(0x106, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x0) syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x98380) 231.273577ms ago: executing program 1 (id=543): syz_emit_ethernet(0x6c, &(0x7f00000000c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @multicast, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x1, 0x1c, 0x5e, 0x68, 0x0, 0xc0, 0x2f, 0x0, @local, @broadcast}, {{}, {}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x86dd, [0x2, 0x4, 0x800]}, {0x8, 0x88be, 0x0, {{0x5, 0x1, 0x96, 0x1, 0x1, 0x3, 0x6, 0x2}, 0x1, {0x9}}}, {0x8, 0x22eb, 0x2, {{0x6, 0x2, 0x4, 0x1, 0x1, 0x2, 0x4, 0xa2}, 0x2, {0x4, 0xd, 0x2, 0x6, 0x1, 0x0, 0x2, 0x1, 0x1}}}}}}}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000680)=[{&(0x7f0000001180)=""/4113, 0x1011}], 0x1, 0x16, 0xfffffff9) r2 = syz_open_dev$dvb_demux(&(0x7f0000000400), 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x24040040) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0xc31fe084736598c) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x811}, 0x4000804) ioctl$DVB_DEMUX_DMX_SET_BUFFER_SIZE(r2, 0x6f2d, 0xffffffffff60014a) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'veth1_vlan\x00', 0x0}) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), 0xffffffffffffffff) mmap(&(0x7f0000dde000/0x3000)=nil, 0x3000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000040)={0x0, 0x2}, &(0x7f0000000080)=0x8) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x200, 0x70bd29, 0x10000, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}}, 0x40000) ioctl$OCFS2_IOC_MOVE_EXT(r0, 0x40406f06, &(0x7f0000000000)={0x1, 0xb, 0x7ff, 0x5, 0x2}) 230.971753ms ago: executing program 2 (id=544): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000000)=@newtaction={0x18, 0x30, 0x12f, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) sendmsg$nl_route_sched(r1, 0x0, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) (async) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003580)={0x18, 0x24, 0x107, 0x70bd2e, 0x25dfdbfb, {0x2, 0x7c}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x33, &(0x7f0000000640)={0x0, 0x0}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x33, &(0x7f0000000640)={0x0, 0x0}, 0x10) ioctl$KVM_CAP_EXIT_HYPERCALL(r4, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r4, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x2c, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r4, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x2c, 0x0, 0x0) ioctl$KVM_SET_MP_STATE(r6, 0x4004ae99, &(0x7f0000000100)=0x3) ioctl$KVM_SET_LAPIC(r6, 0x4400ae8f, &(0x7f00000001c0)={"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"}) ioctl$KVM_SET_GUEST_DEBUG_x86(r6, 0x4048ae9b, &(0x7f00000005c0)={0x3, 0x0, {[0x5, 0x6, 0x3, 0x0, 0x6, 0x6, 0xb4, 0x2]}}) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448dd, &(0x7f0000001500)) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a40), r7) (async) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a40), r7) sendmsg$NLBL_MGMT_C_REMOVEDEF(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000680)=ANY=[@ANYBLOB="1b344abe43fb70ad0f8aaf01e0eddbaf28f0954d7b25ac303e48ea1a75fe971922f86e3804f15fa776061e04015bea02000000d46ef85d83e82dcd220b3c81e5e7cc54c258c3f715811331f4c3851f0dc0389c1502930986fa58eeefa59ea2266a5c619e2f500c3b649348329bf2f1fe6e000000000000", @ANYRES16=r8, @ANYBLOB="010027bd7000fedbdf2505000000"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) (async) sendmsg$NLBL_MGMT_C_REMOVEDEF(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000680)=ANY=[@ANYBLOB="1b344abe43fb70ad0f8aaf01e0eddbaf28f0954d7b25ac303e48ea1a75fe971922f86e3804f15fa776061e04015bea02000000d46ef85d83e82dcd220b3c81e5e7cc54c258c3f715811331f4c3851f0dc0389c1502930986fa58eeefa59ea2266a5c619e2f500c3b649348329bf2f1fe6e000000000000", @ANYRES16=r8, @ANYBLOB="010027bd7000fedbdf2505000000"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r2, 0x80489439, &(0x7f00000008c0)) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) (async) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) sendmmsg$inet(r2, &(0x7f0000004840)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000100)='f', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000002700)=[{&(0x7f00000025c0)='y', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000002a80)=[{&(0x7f0000002800)="c954", 0x2}], 0x1}}], 0x3, 0x40480c0) inotify_init1(0x80800) (async) r9 = inotify_init1(0x80800) inotify_add_watch(r9, &(0x7f0000000640)='.\x00', 0x80000001) 151.268498ms ago: executing program 1 (id=545): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r1, 0x118, 0x1, 0xffffffffffffffff, 0xfe93) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'veth0_to_bridge\x00', 0x0}) setsockopt$inet6_udp_int(r2, 0x11, 0x66, &(0x7f0000000040)=0x1, 0x4) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0x5}, {0xfff1, 0xffff}, {0xfff2, 0x7}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@gettfilter={0x2c, 0x2e, 0x1, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x1, 0xfff2}, {0xfff3, 0x10}, {0x7671693a61b9ff27, 0x10}}, [{0x8, 0xb, 0xffffffff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x24004010) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) accept4$unix(r5, &(0x7f0000000140), &(0x7f0000000200)=0x6e, 0x180800) sched_setscheduler(0x0, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x33e000, 0x1000}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r7, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r7, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(r7, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r7, &(0x7f0000000100)={0x2c, 0x0, r6}, 0x10) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@getchain={0x24, 0x11, 0x1, 0x0, 0x1fffff9, {0x0, 0x0, 0x0, r9, {0x7}, {0xc}, {0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x20048054) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r12, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000680)={0xe0, r11, 0x321, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x3}, @NL80211_ATTR_VENDOR_DATA={0xba, 0xc5, "1f9ad38c6835d1effe1cbd49f8cf3fc804907be80bb22126fa54c116c725ee29fe5b66702d89ee695c8bd048f16ee1a0458c62594a0d23f6c58bed2a917063e90d4c6aee114d34a36bb8fa6fac57887be5fc68930cf795f3f9bf437de790b674f7820a5f8e5999d9eb654c8dde8eeb9ac2084ac5e30a5829116b1aa1f97f325892e8dff13622d964d5dda72e660faf235436578e1b40de097f3d3bd5f025d7cf0f66b953c111e028f667601f27065ef9c5684c8b057c"}]}, 0xe0}, 0x1, 0x0, 0x0, 0x40000}, 0x10) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYRESDEC, @ANYRES16, @ANYRESOCT=r3], 0x24}}, 0x40000) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r12) socket$nl_generic(0x10, 0x3, 0x10) 150.892363ms ago: executing program 4 (id=546): socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0xf, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x8490}, 0x80) (async) close(r0) (async) recvmsg$can_raw(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000900)=""/110, 0x6e}], 0x1}, 0x40000040) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000000)) (async) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80880) write$P9_RREADLINK(r3, &(0x7f0000000140)={0x1a, 0x17, 0x2, {0x11, './proc/mtrr/file0'}}, 0x1a) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$nl_route(r4, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=@ipv6_getaddr={0x28, 0x16, 0x400, 0x70bd27, 0x25dfdbfb, {0xa, 0x1, 0x30, 0xfe, r5}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x2}, @IFA_RT_PRIORITY={0x8, 0x9, 0x6}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x8008000) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) ioctl(r6, 0x400c4d01, 0x0) 150.122607ms ago: executing program 0 (id=547): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000180)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/target/core\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/target/core/rd_mcp_0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) write(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/functions/tcm.0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/configs\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./config/target/usb_gadget\x00', 0x1ff) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x1, 0x12, r0, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$TIOCPKT(r3, 0x5420, &(0x7f0000000700)=0xe) sendfile(r2, r3, 0x0, 0x10ffff) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000740)={0x800001, 0xffffffff, 0x4e8, 0x3, 0x1, "f4951600"}) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/target/usb_gadget/naa.6001405123456789\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./config/target/usb_gadget/naa.6001405123456789/tpgt_1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='./config/target/usb_gadget/naa.6001405123456789/tpgt_1/lun/lun_0\x00', 0x1ff) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110e0000006a00000f0007000000", @ANYRES32=r6, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40810}, 0x24000000) openat(0xffffffffffffff9c, &(0x7f0000000900)='./config/target/usb_gadget/naa.6001405123456789/tpgt_1/nexus\x00', 0x2, 0x0) 56.927533ms ago: executing program 4 (id=548): r0 = accept4$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80000) fsync(r0) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000040)=0x5) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) epoll_pwait2(r1, &(0x7f00000000c0)=[{}, {}, {}, {}], 0x4, &(0x7f0000000100), &(0x7f0000000140)={[0x2]}, 0x8) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180), 0x4c8100, 0x0) ioctl$HIDIOCGRDESCSIZE(r2, 0x80044801, &(0x7f00000001c0)) r3 = accept4$x25(r1, &(0x7f0000000200)={0x9, @remote}, &(0x7f0000000240)=0x12, 0x0) ioctl$SIOCX25SENDCALLACCPT(r3, 0x89e9) ioctl$vim2m_VIDIOC_QUERYCAP(r2, 0x80685600, &(0x7f0000000280)) r4 = inotify_init() close_range(r1, r4, 0x0) ioctl$KVM_SET_SREGS(r1, 0x4138ae84, &(0x7f0000000300)={{0xeeee0000, 0xeeef0000, 0x9, 0xfb, 0x3, 0x1, 0x2, 0x3, 0xb3, 0x5, 0x8, 0xd5}, {0x10000, 0xfec00000, 0x0, 0x81, 0x9, 0x5, 0x61, 0x0, 0x0, 0x7f, 0xff, 0x6}, {0x70000, 0x8000000, 0xd, 0x6, 0x2, 0x1, 0x0, 0x7, 0x9, 0x5, 0xd, 0x1}, {0x0, 0x9000, 0xf, 0x4, 0xe4, 0x32, 0x2b, 0x5, 0x7, 0x8, 0x1, 0x7}, {0x1, 0x22245fff, 0xb, 0x8, 0xf4, 0x81, 0x1, 0xe, 0x4b, 0x8, 0x81, 0x5d}, {0x25000, 0xeeee0000, 0x9, 0xb, 0xfe, 0x9, 0x0, 0x27, 0x0, 0x3, 0x1, 0xff}, {0xffff1000, 0xffffffff, 0x0, 0x6, 0x0, 0x3, 0x9, 0x2, 0x4, 0xd, 0x72, 0xc}, {0x21000, 0x4000, 0x4, 0x8, 0x2, 0x4, 0x90, 0x7, 0x8, 0x5, 0x7, 0x2}, {0x2000, 0x2}, {0x80a0000, 0x2}, 0x40000, 0x0, 0x54000, 0x230280, 0x7, 0x1, 0x6000, [0x7, 0x80000001, 0x7ff, 0x9]}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000440)) ioctl$KVM_GET_SREGS2(r2, 0x8140aecc, &(0x7f0000000640)) ioctl$TUNGETVNETHDRSZ(r1, 0x800454d7, &(0x7f0000000780)) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000007c0), 0xec0e8dc38e87cf17, 0x0) ioctl$TUNSETIFINDEX(r5, 0x400454da, &(0x7f0000000800)) flistxattr(r2, &(0x7f0000000840)=""/242, 0xf2) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000940)={{0x1, 0x1, 0x18, r5, {0x100}}, './file0\x00'}) sendmsg$nl_generic(r6, &(0x7f0000002c00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002bc0)={&(0x7f00000009c0)={0x21d4, 0x36, 0x800, 0x70bd29, 0x25dfdbfb, {0x16}, [@nested={0x2090, 0x72, 0x0, 0x1, [@generic="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", @nested={0x4, 0xa}, @generic="223b417f12547e57604bcb2fe02af218ebf7e4a4c380889a34b6bd3f8965e02e4fadb984c8ba0cb9b3bfa0124da7509b9fb75b62b526ba7568654a268c2eb20049719081abd7373d78a3ba896ab0ffbae205e20ab87aeea62a78", @generic="6b26948673ab85151aba568f738ebf7509c2d92fff076673b9cdcbbc5f70452624e50191f9fda595e7e5", @generic="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", @nested={0x4, 0x15f}]}, @generic="8d70f5b50fddd642c0c7b668940feed62fdd612ea70e713c0bbec3de0f4babd9f1b96177775a9d7ef2bdd4cb115321b7a4ff11d91865af9e6614f91ad1b6b004ca4cc47550af6069c60bbd89a19eb8907af95dc90e2ee9dd84d93337bbd92692d00dad418e159916fb34b0a3372298bd267bd36eb63eecc8e953d4fd7112ed8342a9cf60", @generic="be50d290f08cf4e5d691778ac3334c9fc926a127426b6368e0febf7ecba559f42068634c8767f8e7e2a20835494fc18ee4a9e5b0b1a210f89fba89ac2b9a4c35753d26d4db62ecf1164caedeec39ce2b5d9c044f2afdc6c49b22c7505b4949c19b59c63d59f806133ae17e68522db4c0c99bfcf0162a1d48d13986caf8eb9d947689ebfb9200fdb34adbe859fc9a76314b57922f4cc3c707156f5ce06ad1d7c5fb8d01125cd0a2145f778c18"]}, 0x21d4}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002c80), 0xffffffffffffffff) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000002cc0)={'\x00', 0xc7, 0xd, 0x1ff, 0x8000, 0x8, 0xffffffffffffffff}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r7, &(0x7f0000002dc0)={&(0x7f0000002c40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000002d80)={&(0x7f0000002d40)={0x1c, r8, 0x0, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_PID={0x8, 0x1c, r9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x20004805) mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000004) r10 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000002e00), 0x402, 0x0) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000002e80), r10) sendmsg$DEVLINK_CMD_SB_POOL_GET(r6, &(0x7f0000002f80)={&(0x7f0000002e40)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002f40)={&(0x7f0000002ec0)={0x70, r11, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x10}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}, {0x6}}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000}, 0x4000001) open_tree(0xffffffffffffff9c, &(0x7f0000002fc0)='./file0\x00', 0x0) 56.645882ms ago: executing program 2 (id=549): r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000001c0)=[@in6={0xa, 0x4e24, 0xf1, @empty, 0x19f49a9}], 0x1c) r1 = dup(r0) (async) r2 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_GET_PROPERTY(r2, 0x80106f53, &(0x7f00000005c0)={0x16, &(0x7f0000000440)=[{0x3b, '\x00', @st={0x4, [{0x3, @uvalue=0x2}, {0x1, @svalue=0x2c83}, {0x3, @uvalue=0x1}, {0x0, @svalue=0x4}]}, 0x2}, {0x28, '\x00', @data=0x6, 0x40083183}]}) (async) sendmsg$inet_sctp(r1, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000040)="db", 0x1}], 0x1, &(0x7f0000000100)=[@dstaddrv4={0x18, 0x84, 0x7, @private=0xa010100}], 0x18}, 0x8050) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000140), &(0x7f0000000180)=0x4) 56.455805ms ago: executing program 4 (id=550): r0 = socket$vsock_stream(0x28, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x543180, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x400017e) inotify_init1(0x0) r1 = inotify_init1(0x0) inotify_add_watch(r1, 0x0, 0x5000180) r2 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) connect$unix(0xffffffffffffffff, &(0x7f0000019080)=@file={0x0, './file1\x00'}, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r2) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="79611f00000000f6b90d7e00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x4000054) r4 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000000)=ANY=[], 0x57) connect$inet6(r4, &(0x7f0000000040)={0xa, 0xffff, 0xe9, @dev={0xfe, 0x80, '\x00', 0xa}, 0x5}, 0x1c) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xc000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x1, 0x4, 0x201, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x3}, @NFULA_CFG_FLAGS={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4001}, 0x84) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x1c, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x15}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x8c}}, 0x0) 0s ago: executing program 2 (id=551): setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000040)=@ccm_128={{0x304}, "d916aa009aa7dbde", "e6cb742dce3ac9181adadde0fa835126", "862e76d7", "86179cb9af900f8b"}, 0x28) r0 = syz_usb_connect(0x2, 0x58, &(0x7f0000000000)=ANY=[@ANYBLOB="120110038e3ac6209406010013780102030109024600020e061003090439d8011adaa8080905081020000709800904e40503b956da020905080000040112fc09051b00200007039a0705d15b89f26d090509"], &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000bc0)={0x24, 0x0, &(0x7f0000000b00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1c01}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000011c0)={0x24, 0x0, &(0x7f0000001040)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001600)={0x24, 0x0, &(0x7f0000001540)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000002040)={0x2c, &(0x7f00000001c0)={0x40, 0x8, 0x8, "fde61e0ee4a63b9e"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000002280)={0x84, &(0x7f0000001e00)={0x20, 0x14, 0x4, "348b35e5"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000540)='a', 0x1) kernel console output (not intermixed with test programs): p:0kB kernel_stack:128kB pagetables:212kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 68.423885][ T6363] Node 0 DMA free:15132kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:204kB local_pcp:0kB free_cma:0kB [ 68.427224][ T56] usb 6-1: config 14 has an invalid interface number: 57 but max is 1 [ 68.432163][ T6363] lowmem_reserve[]: [ 68.436676][ T56] usb 6-1: config 14 has an invalid interface number: 228 but max is 1 [ 68.442219][ T6363] 0 [ 68.442487][ T56] usb 6-1: config 14 has an invalid descriptor of length 45, skipping remainder of the config [ 68.446080][ T6363] 1225 [ 68.449156][ T56] usb 6-1: config 14 has no interface number 0 [ 68.452198][ T6363] 1225 [ 68.455290][ T56] usb 6-1: config 14 has no interface number 1 [ 68.457949][ T6363] 1225 [ 68.459298][ T56] usb 6-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 68.460584][ T6363] 1225 [ 68.467337][ T56] usb 6-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0x1B, changing to 0xB [ 68.488123][ T6363] [ 68.496299][ T56] usb 6-1: config 14 interface 228 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 68.496325][ T56] usb 6-1: config 14 interface 57 has no altsetting 0 [ 68.496340][ T56] usb 6-1: config 14 interface 228 has no altsetting 0 [ 68.499311][ T56] usb 6-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 68.500171][ T6363] Node 0 [ 68.513258][ T56] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.525017][ T6363] DMA32 free:141596kB boost:0kB min:27396kB low:34244kB high:41092kB reserved_highatomic:0KB free_highatomic:0KB active_anon:35864kB inactive_anon:0kB active_file:0kB inactive_file:248620kB unevictable:3536kB writepending:7792kB zspages:0kB present:2080628kB managed:1255200kB mlocked:0kB bounce:0kB free_pcp:66324kB local_pcp:17400kB free_cma:0kB [ 68.527470][ T56] usb 6-1: Product: syz [ 68.528894][ T6363] lowmem_reserve[]: [ 68.531970][ T56] usb 6-1: Manufacturer: syz [ 68.533042][ T6363] 0 [ 68.537390][ T56] usb 6-1: SerialNumber: syz [ 68.552170][ T6363] 0 0 0 0 [ 68.601119][ T6363] Node 1 Normal free:1641628kB boost:0kB min:39840kB low:49800kB high:59760kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:256kB unevictable:3536kB writepending:0kB zspages:0kB present:2097152kB managed:1781884kB mlocked:0kB bounce:0kB free_pcp:7264kB local_pcp:3112kB free_cma:0kB [ 68.611999][ T6363] lowmem_reserve[]: 0 0 0 0 0 [ 68.614084][ T6363] Node 0 DMA: 1*4kB (U) 2*8kB (U) 2*16kB (U) 2*32kB (U) 1*64kB (U) 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (UM) = 15156kB [ 68.619734][ T6363] Node 0 DMA32: 2*4kB (ME) 84*8kB (UME) 275*16kB (UME) 489*32kB (UE) 85*64kB (UE) 60*128kB (UME) 45*256kB (UME) 25*512kB (UME) 15*1024kB (UM) 9*2048kB (UME) 12*4096kB (UM) = 141112kB [ 68.626051][ T6363] Node 1 Normal: 2*4kB (U) 1*8kB (U) 1*16kB (U) 2*32kB (UM) 1*64kB (U) 2*128kB (U) 1*256kB (M) 3*512kB (UM) 1*1024kB (U) 2*2048kB (UM) 399*4096kB (M) = 1641632kB [ 68.631409][ T6363] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 68.634366][ T6363] Node 0 hugepages_total=4 hugepages_free=0 hugepages_surp=2 hugepages_size=2048kB [ 68.637307][ T6363] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 68.640233][ T6363] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 68.643037][ T6363] 64537 total pagecache pages [ 68.643477][ T6356] Dev loop4: unable to read RDB block 7 [ 68.644592][ T6363] 0 pages in swap cache [ 68.644600][ T6363] Free swap = 124996kB [ 68.647876][ T6356] loop4: unable to read partition table [ 68.648374][ T6363] Total swap = 124996kB [ 68.648387][ T6363] 1048443 pages RAM [ 68.648393][ T6363] 0 pages HighMem/MovableOnly [ 68.650280][ T6356] loop4: partition table beyond EOD, [ 68.651914][ T6363] 285332 pages reserved [ 68.651921][ T6363] 0 pages cma reserved [ 68.662685][ T6356] truncated [ 68.667444][ T6356] loop_reread_partitions: partition scan of loop4 (úùƒå¡™‰üg¾CêjÌ–ã¢P=×!MX‹ºÐ œëÜ%õ«`Éæ˜Èµ4FLQkÝŠ5) failed (rc=-5) [ 68.895218][ T5786] bridge_slave_1: left allmulticast mode [ 68.904738][ T5786] bridge_slave_1: left promiscuous mode [ 68.908540][ T5786] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.948279][ T5786] bridge_slave_0: left allmulticast mode [ 68.958596][ T5786] bridge_slave_0: left promiscuous mode [ 68.960819][ T5786] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.979160][ T42] kauditd_printk_skb: 93 callbacks suppressed [ 68.979176][ T42] audit: type=1400 audit(1786071519.153:17677): avc: denied { write } for pid=6375 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 69.027276][ T56] legousbtower 6-1:14.57: interrupt endpoints not found [ 69.114761][ T42] audit: type=1400 audit(1786071519.293:17678): avc: denied { write } for pid=6387 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 69.182825][ T42] audit: type=1400 audit(1786071519.353:17679): avc: denied { unmount } for pid=5738 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 69.238433][ T56] legousbtower 6-1:14.228: interrupt endpoints not found [ 69.286283][ T42] audit: type=1400 audit(1786071519.463:17680): avc: denied { setopt } for pid=6394 comm="syz.0.138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 69.296035][ T42] audit: type=1400 audit(1786071519.463:17681): avc: denied { write } for pid=6394 comm="syz.0.138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 69.318348][ T5786] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 69.329813][ T5786] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 69.354121][ T5786] bond0 (unregistering): Released all slaves [ 69.370886][ T5447] 8021q: adding VLAN 0 to HW filter on device eth1 [ 69.430704][ T6345] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.433763][ T6345] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.436061][ T6345] bridge_slave_0: entered allmulticast mode [ 69.439756][ T6345] bridge_slave_0: entered promiscuous mode [ 69.446345][ T6345] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.449103][ T6345] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.452017][ T6345] bridge_slave_1: entered allmulticast mode [ 69.456237][ T6345] bridge_slave_1: entered promiscuous mode [ 69.462976][ T42] audit: type=1400 audit(1786071519.633:17682): avc: denied { getopt } for pid=6402 comm="syz.0.140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 69.492881][ T6345] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.499932][ T6345] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.522026][ T6345] team0: Port device team_slave_0 added [ 69.525702][ T6345] team0: Port device team_slave_1 added [ 69.577469][ T6345] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.581850][ T6345] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.594854][ T6345] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.596089][ T42] audit: type=1400 audit(1786071519.773:17683): avc: denied { write } for pid=6409 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 69.651812][ T6396] netlink: 32 bytes leftover after parsing attributes in process `syz.2.137'. [ 69.658424][ T42] audit: type=1400 audit(1786071519.833:17684): avc: denied { read } for pid=6418 comm="syz.0.143" name="mice" dev="devtmpfs" ino=940 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 69.667878][ T42] audit: type=1400 audit(1786071519.833:17685): avc: denied { open } for pid=6418 comm="syz.0.143" path="/dev/input/mice" dev="devtmpfs" ino=940 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 69.676665][ T42] audit: type=1400 audit(1786071519.833:17686): avc: denied { write } for pid=6417 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 69.704735][ T6345] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.706874][ T6345] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.715597][ T6345] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.723943][ T5447] 8021q: adding VLAN 0 to HW filter on device eth2 [ 69.751572][ T6345] hsr_slave_0: entered promiscuous mode [ 69.754672][ T6345] hsr_slave_1: entered promiscuous mode [ 69.757553][ T6345] debugfs: 'hsr0' already exists in 'hsr' [ 69.759497][ T6345] Cannot create hsr debugfs directory [ 69.955790][ T5786] hsr_slave_0: left promiscuous mode [ 69.959281][ T5786] hsr_slave_1: left promiscuous mode [ 69.961546][ T5786] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 69.965965][ T5786] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 69.971409][ T5786] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 69.976499][ T5786] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 69.989737][ T5786] veth1_macvtap: left promiscuous mode [ 69.991820][ T6433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead [ 69.991842][ T6433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead [ 69.995996][ T5786] veth0_macvtap: left promiscuous mode [ 69.999579][ T6433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0xa5e1 instead [ 70.000322][ T5786] veth1_vlan: left promiscuous mode [ 70.004729][ T6433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0x7231 instead [ 70.006583][ T5786] veth0_vlan: left promiscuous mode [ 70.009482][ T6433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead [ 70.015246][ T6433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead [ 70.018847][ T6433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead [ 70.022506][ T6433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead [ 70.026376][ T6433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead [ 70.030093][ T6433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead [ 70.033886][ T6433] jffs2: Further such events for this erase block will not be printed [ 70.037648][ T6433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead [ 70.041396][ T6433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead [ 70.045760][ T6433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0xa5e1 instead [ 70.049473][ T6433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0x7231 instead [ 70.053823][ T6433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead [ 70.057530][ T6433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead [ 70.061303][ T6433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead [ 70.065135][ T6433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead [ 70.069720][ T6433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead [ 70.072899][ T6433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead [ 70.076582][ T6433] jffs2: Further such events for this erase block will not be printed [ 70.079754][ T6433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002000: 0x4255 instead [ 70.083553][ T6433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002004: 0x0001 instead [ 70.087388][ T6433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002018: 0xa5e1 instead [ 70.091131][ T6433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000203c: 0x7231 instead [ 70.095049][ T6433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003000: 0x4255 instead [ 70.098826][ T6433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003004: 0x0001 instead [ 70.102475][ T6433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003018: 0xa5e1 instead [ 70.106356][ T6433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000303c: 0x7231 instead [ 70.110369][ T6433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004000: 0x4255 instead [ 70.113731][ T5740] Bluetooth: hci3: command tx timeout [ 70.114101][ T6433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004004: 0x0001 instead [ 70.119535][ T6433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004018: 0xa5e1 instead [ 70.123450][ T6433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000403c: 0x7231 instead [ 70.127473][ T6433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005000: 0x4255 instead [ 70.130538][ T6433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005004: 0x0001 instead [ 70.134262][ T6433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005018: 0xa5e1 instead [ 70.138044][ T6433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000503c: 0x7231 instead [ 70.142318][ T6433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006000: 0x4255 instead [ 70.146299][ T6433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006004: 0x0001 instead [ 70.150156][ T6433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006018: 0xa5e1 instead [ 70.156347][ T6433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000603c: 0x7231 instead [ 70.160256][ T6433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007000: 0x4255 instead [ 70.164068][ T6433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007004: 0x0001 instead [ 70.167863][ T6433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007018: 0xa5e1 instead [ 70.171580][ T6433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000703c: 0x7231 instead [ 70.175505][ T6433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008000: 0x4255 instead [ 70.179220][ T6433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008004: 0x0001 instead [ 70.182447][ T6433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008018: 0xa5e1 instead [ 70.185697][ T6433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000803c: 0x7231 instead [ 70.188991][ T6433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009000: 0x4255 instead [ 70.192142][ T6433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009004: 0x0001 instead [ 70.198113][ T6433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009018: 0xa5e1 instead [ 70.201623][ T6433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000903c: 0x7231 instead [ 70.206661][ T6433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a000: 0x4255 instead [ 70.210269][ T6433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a004: 0x0001 instead [ 70.216696][ T6433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a018: 0xa5e1 instead [ 70.219942][ T6433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a03c: 0x7231 instead [ 70.223836][ T6433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b000: 0x4255 instead [ 70.227434][ T6433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b004: 0x0001 instead [ 70.230797][ T6433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b018: 0xa5e1 instead [ 70.239905][ T6433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b03c: 0x7231 instead [ 70.243374][ T6433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c000: 0x4255 instead [ 70.247400][ T6433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c004: 0x0001 instead [ 70.250806][ T6433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c018: 0xa5e1 instead [ 70.254536][ T6433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c03c: 0x7231 instead [ 70.254674][ T5786] team0 (unregistering): Port device team_slave_1 removed [ 70.258611][ T6433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d000: 0x4255 instead [ 70.265561][ T6433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d004: 0x0001 instead [ 70.268913][ T6433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d018: 0xa5e1 instead [ 70.272163][ T6433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d03c: 0x7231 instead [ 70.272566][ T5786] team0 (unregistering): Port device team_slave_0 removed [ 70.276250][ T6433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e000: 0x4255 instead [ 70.281780][ T6433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e004: 0x0001 instead [ 70.286021][ T6433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e018: 0xa5e1 instead [ 70.289774][ T6433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e03c: 0x7231 instead [ 70.293814][ T6433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f000: 0x4255 instead [ 70.297693][ T6433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f004: 0x0001 instead [ 70.301161][ T6433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f018: 0xa5e1 instead [ 70.305505][ T6433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f03c: 0x7231 instead [ 70.309354][ T6433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010000: 0x4255 instead [ 70.313115][ T6433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010004: 0x0001 instead [ 70.317253][ T6433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010018: 0xa5e1 instead [ 70.321084][ T6433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001003c: 0x7231 instead [ 70.325285][ T6433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011000: 0x4255 instead [ 70.329043][ T6433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011004: 0x0001 instead [ 70.332923][ T6433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011018: 0xa5e1 instead [ 70.336719][ T6433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001103c: 0x7231 instead [ 70.340543][ T6433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012000: 0x4255 instead [ 70.344785][ T6433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012004: 0x0001 instead [ 70.348608][ T6433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012018: 0xa5e1 instead [ 70.352358][ T6433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001203c: 0x7231 instead [ 70.361106][ T6433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013000: 0x4255 instead [ 70.364970][ T6433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013004: 0x0001 instead [ 70.368838][ T6433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013018: 0xa5e1 instead [ 70.372586][ T5447] 8021q: adding VLAN 0 to HW filter on device eth3 [ 70.375202][ T6433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001303c: 0x7231 instead [ 70.379121][ T6433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014000: 0x4255 instead [ 70.382761][ T6433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014004: 0x0001 instead [ 70.386906][ T6433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014018: 0xa5e1 instead [ 70.390323][ T6433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001403c: 0x7231 instead [ 70.394973][ T6433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015000: 0x4255 instead [ 70.398442][ T6433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015004: 0x0001 instead [ 70.401851][ T6433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015018: 0xa5e1 instead [ 70.406527][ T6433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001503c: 0x7231 instead [ 70.410075][ T6433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016000: 0x4255 instead [ 70.414253][ T6433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016004: 0x0001 instead [ 70.417510][ T6433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016018: 0xa5e1 instead [ 70.421332][ T6433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001603c: 0x7231 instead [ 70.425003][ T6433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017000: 0x4255 instead [ 70.428561][ T6433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017004: 0x0001 instead [ 70.432258][ T6433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017018: 0xa5e1 instead [ 70.436031][ T6433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001703c: 0x7231 instead [ 70.439941][ T6433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018000: 0x4255 instead [ 70.443707][ T6433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018004: 0x0001 instead [ 70.447541][ T6433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018018: 0xa5e1 instead [ 70.450840][ T6433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001803c: 0x7231 instead [ 70.454559][ T6433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019000: 0x4255 instead [ 70.458339][ T6433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019004: 0x0001 instead [ 70.462723][ T6433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019018: 0xa5e1 instead [ 70.467879][ T6433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001903c: 0x7231 instead [ 70.471760][ T6433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a000: 0x4255 instead [ 70.473581][ T29] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 70.476012][ T6433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a004: 0x0001 instead [ 70.478481][ T6345] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 70.482225][ T6433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a018: 0xa5e1 instead [ 70.482239][ T6433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a03c: 0x7231 instead [ 70.499885][ T6433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b000: 0x4255 instead [ 70.503854][ T6433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b004: 0x0001 instead [ 70.507141][ T6433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b018: 0xa5e1 instead [ 70.510654][ T6433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b03c: 0x7231 instead [ 70.514606][ T6433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c000: 0x4255 instead [ 70.517941][ T6433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c004: 0x0001 instead [ 70.521520][ T6433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c018: 0xa5e1 instead [ 70.524993][ T6345] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 70.526013][ T6433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c03c: 0x7231 instead [ 70.531841][ T6433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d000: 0x4255 instead [ 70.535647][ T6345] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 70.536651][ T6433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d004: 0x0001 instead [ 70.541982][ T6433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d018: 0xa5e1 instead [ 70.544487][ T6345] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 70.546574][ T6433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d03c: 0x7231 instead [ 70.550173][ T6345] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 70.552193][ T6433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e000: 0x4255 instead [ 70.559047][ T6433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e004: 0x0001 instead [ 70.564917][ T6433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e018: 0xa5e1 instead [ 70.569205][ T6345] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 70.573541][ T6433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e03c: 0x7231 instead [ 70.575500][ T6345] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 70.577202][ T6433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f000: 0x4255 instead [ 70.583266][ T6433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f004: 0x0001 instead [ 70.586841][ T6433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f018: 0xa5e1 instead [ 70.587800][ T6345] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 70.590213][ T6433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f03c: 0x7231 instead [ 70.590249][ T6433] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 70.600449][ T6433] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 70.643372][ T29] usb 7-1: Using ep0 maxpacket: 16 [ 70.648360][ T29] usb 7-1: descriptor type invalid, skip [ 70.657281][ T29] usb 7-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 70.664523][ T29] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.671255][ T29] usb 7-1: Product: syz [ 70.681282][ T29] usb 7-1: Manufacturer: 䀊 [ 70.684526][ T29] usb 7-1: SerialNumber: syz [ 70.688991][ T5447] 8021q: adding VLAN 0 to HW filter on device eth4 [ 70.752619][ T6345] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.774903][ T6345] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.789671][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.791948][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.811835][ T74] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.814575][ T74] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.065325][ T6475] fuse: Unknown parameter 'áÝD:ç²<ËàÏŒ™rñM柖ÆÑ3³­DˆÒ#¡HÅ€ÕshªF-©\ö“£ÃÁÇADÐŽDEHpðëð' [ 71.077997][ T29] usb 7-1: 1:1 : bogus bTerminalLink 1 [ 71.084363][ T29] usb 7-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 71.092828][ T29] usb 7-1: unit 8 not found! [ 71.156610][ T6345] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.171158][ T56] usb 6-1: USB disconnect, device number 2 [ 71.213254][ T29] usb 7-1: USB disconnect, device number 2 [ 71.304330][ T5736] udevd[5736]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 71.389206][ T6345] veth0_vlan: entered promiscuous mode [ 71.402255][ T6345] veth1_vlan: entered promiscuous mode [ 71.429749][ T6345] veth0_macvtap: entered promiscuous mode [ 71.436599][ T6345] veth1_macvtap: entered promiscuous mode [ 71.449561][ T6345] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.458692][ T6345] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.494820][ T5815] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.498457][ T5815] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.529593][ T74] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.534382][ T74] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.560556][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.568030][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.585410][ T5815] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.593893][ T5815] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.655017][ T1443] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.661156][ T1443] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.668295][ T6503] netlink: 68 bytes leftover after parsing attributes in process `syz.0.156'. [ 71.806345][ T6510] ======================================================= [ 71.806345][ T6510] WARNING: The mand mount option has been deprecated and [ 71.806345][ T6510] and is ignored by this kernel. Remove the mand [ 71.806345][ T6510] option from the mount to silence this warning. [ 71.806345][ T6510] ======================================================= [ 71.808190][ T6513] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 71.831527][ T6519] mmap: syz.0.160 (6519) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 71.849452][ T6519] veth1_macvtap: Device is already in use. [ 72.137597][ T6536] cgroup: release_agent respecified [ 72.145872][ T6538] netlink: 356 bytes leftover after parsing attributes in process `syz.2.168'. [ 72.178573][ T6536] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3303861288 (422894244864 ns) > initial count (241705619456 ns). Using initial count to start timer. [ 72.187490][ T6536] kvm: apic: phys broadcast and lowest prio [ 72.194666][ T5740] Bluetooth: hci3: command tx timeout [ 72.196110][ T5822] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 72.197695][ T6536] 8021q: VLANs not supported on vxcan0 [ 72.248512][ T6545] loop4: detected capacity change from 0 to 7 [ 72.360591][ T5822] usb 5-1: unable to get BOS descriptor or descriptor too short [ 72.365253][ T5822] usb 5-1: not running at top speed; connect to a high speed hub [ 72.369464][ T5822] usb 5-1: config 14 has an invalid interface number: 57 but max is 1 [ 72.372829][ T5822] usb 5-1: config 14 has an invalid interface number: 228 but max is 1 [ 72.377132][ T5822] usb 5-1: config 14 has an invalid descriptor of length 45, skipping remainder of the config [ 72.381309][ T5822] usb 5-1: config 14 has no interface number 0 [ 72.384136][ T5822] usb 5-1: config 14 has no interface number 1 [ 72.386870][ T5822] usb 5-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 72.391371][ T5822] usb 5-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0x1B, changing to 0xB [ 72.396315][ T5822] usb 5-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 72.401372][ T5822] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 62089, setting to 64 [ 72.406078][ T5822] usb 5-1: config 14 interface 57 has no altsetting 0 [ 72.413226][ T5822] usb 5-1: config 14 interface 228 has no altsetting 0 [ 72.426256][ T5822] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 72.438987][ T5822] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.444252][ T5822] usb 5-1: Product: syz [ 72.446090][ T5822] usb 5-1: Manufacturer: syz [ 72.448035][ T5822] usb 5-1: SerialNumber: syz [ 72.448328][ T6541] netlink: 45 bytes leftover after parsing attributes in process `syz.2.169'. [ 72.672631][ T6545] Dev loop4: unable to read RDB block 7 [ 72.674848][ T6545] loop4: unable to read partition table [ 72.676890][ T6545] loop4: partition table beyond EOD, truncated [ 72.679846][ T6545] loop_reread_partitions: partition scan of loop4 (úùƒå¡™‰üg¾CêjÌ–ã¢P=×!MX‹ºÐ œëÜ%õ«`Éæ˜Èµ4FLQkÝŠ5) failed (rc=-5) [ 72.711685][ T6550] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 72.725427][ T6550] xt_nfacct: accounting object `s' does not exist [ 72.838462][ T6561] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 72.841431][ T6561] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 72.844596][ T6561] UDF-fs: warning (device nbd4): udf_load_vrs: No anchor found [ 72.847554][ T6561] UDF-fs: Scanning with blocksize 512 failed [ 72.850884][ T6561] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 72.856679][ T6561] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 72.860474][ T6561] UDF-fs: warning (device nbd4): udf_load_vrs: No anchor found [ 72.861787][ T5822] legousbtower 5-1:14.57: interrupt endpoints not found [ 72.864763][ T6561] UDF-fs: Scanning with blocksize 1024 failed [ 72.868572][ T6561] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 72.871439][ T6561] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 72.874378][ T6561] UDF-fs: warning (device nbd4): udf_load_vrs: No anchor found [ 72.877449][ T6561] UDF-fs: Scanning with blocksize 2048 failed [ 72.880986][ T6561] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 72.887368][ T6561] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 72.891312][ T6561] UDF-fs: warning (device nbd4): udf_load_vrs: No anchor found [ 72.894592][ T6561] UDF-fs: Scanning with blocksize 4096 failed [ 72.897358][ T6561] UDF-fs: warning (device nbd4): udf_fill_super: No partition found (1) [ 73.064693][ T5822] legousbtower 5-1:14.228: interrupt endpoints not found [ 73.333492][ T6593] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 73.337042][ T6593] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 73.340081][ T6593] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 73.342461][ T6593] UDF-fs: Scanning with blocksize 512 failed [ 73.345401][ T6593] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 73.348399][ T6593] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 73.351448][ T6593] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 73.354016][ T6593] UDF-fs: Scanning with blocksize 1024 failed [ 73.357255][ T6593] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 73.360391][ T6593] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 73.364187][ T6593] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 73.366854][ T6593] UDF-fs: Scanning with blocksize 2048 failed [ 73.369051][ T6593] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 73.372072][ T6593] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 73.375285][ T6593] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 73.377645][ T6593] UDF-fs: Scanning with blocksize 4096 failed [ 73.379563][ T6593] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1) [ 73.432409][ T6598] 9pnet_virtio: no channels available for device syz [ 73.632099][ T6602] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6602 comm=syz.2.187 [ 73.651513][ T6602] netlink: 16 bytes leftover after parsing attributes in process `syz.2.187'. [ 74.048133][ T42] kauditd_printk_skb: 42 callbacks suppressed [ 74.048151][ T42] audit: type=1400 audit(1786071524.223:17729): avc: denied { read append } for pid=6608 comm="syz.4.189" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 74.059815][ T42] audit: type=1400 audit(1786071524.223:17730): avc: denied { ioctl open } for pid=6608 comm="syz.4.189" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 74.171725][ T42] audit: type=1400 audit(1786071524.343:17731): avc: denied { read write } for pid=6616 comm="syz.1.192" name="fb1" dev="devtmpfs" ino=640 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 74.180625][ T42] audit: type=1400 audit(1786071524.343:17732): avc: denied { open } for pid=6616 comm="syz.1.192" path="/dev/fb1" dev="devtmpfs" ino=640 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 74.273371][ T5740] Bluetooth: hci3: command tx timeout [ 74.349049][ T6625] Cannot find map_set index 135 as target [ 74.472714][ T42] audit: type=1400 audit(1786071524.643:17733): avc: denied { create } for pid=6626 comm="syz.1.197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 74.478844][ T5822] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 74.520723][ T42] audit: type=1400 audit(1786071524.693:17734): avc: denied { remount } for pid=6633 comm="syz.1.198" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 74.529324][ T56] IPVS: starting estimator thread 0... [ 74.562378][ T42] audit: type=1400 audit(1786071524.733:17735): avc: denied { unmount } for pid=5733 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 74.629210][ T5822] usb 9-1: New USB device found, idVendor=0403, idProduct=c631, bcdDevice= 1.00 [ 74.633249][ T6637] IPVS: using max 29 ests per chain, 69600 per kthread [ 74.637251][ T5822] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.656623][ T5822] i2c-tiny-usb 9-1:1.0: version 1.00 found at bus 009 address 002 [ 74.732437][ T6650] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 74.928916][ T6664] netlink: 12 bytes leftover after parsing attributes in process `syz.2.207'. [ 74.990024][ T42] audit: type=1400 audit(1786071525.163:17736): avc: denied { create } for pid=6665 comm="syz.2.208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 75.001225][ T5885] usb 5-1: USB disconnect, device number 2 [ 75.017180][ T42] audit: type=1400 audit(1786071525.173:17737): avc: denied { read } for pid=6665 comm="syz.2.208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 75.051404][ T42] audit: type=1400 audit(1786071525.223:17738): avc: denied { setopt } for pid=6665 comm="syz.2.208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 75.065122][ T5822] (null): failure reading functionality [ 75.067768][ T6673] netlink: 'syz.1.211': attribute type 6 has an invalid length. [ 75.069329][ T6670] FAULT_INJECTION: forcing a failure. [ 75.069329][ T6670] name failslab, interval 1, probability 0, space 0, times 1 [ 75.076205][ T6670] CPU: 1 UID: 0 PID: 6670 Comm: syz.0.210 Tainted: G L syzkaller #0 PREEMPT(full) [ 75.076230][ T6670] Tainted: [L]=SOFTLOCKUP [ 75.076237][ T6670] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 75.076259][ T6670] Call Trace: [ 75.076268][ T6670] [ 75.076276][ T6670] dump_stack_lvl+0x100/0x190 [ 75.076393][ T6670] should_fail_ex.cold+0x5/0xa [ 75.076435][ T6670] should_failslab+0xc2/0x120 [ 75.076490][ T6670] kmem_cache_alloc_noprof+0x91/0x6a0 [ 75.076522][ T6670] ? __send_signal_locked+0x155/0x12d0 [ 75.076569][ T6670] __send_signal_locked+0x155/0x12d0 [ 75.076589][ T6670] ? send_signal_locked+0x479/0x850 [ 75.076624][ T6670] ? lock_task_sighand+0x146/0x340 [ 75.076648][ T6670] group_send_sig_info+0x2a4/0x300 [ 75.076674][ T6670] ? __pfx_group_send_sig_info+0x10/0x10 [ 75.076696][ T6670] ? lock_acquire+0x1b9/0x370 [ 75.076732][ T6670] __kill_pgrp_info+0x8f/0x110 [ 75.076758][ T6670] do_pidfd_send_signal+0x4fd/0x5b0 [ 75.076786][ T6670] ? __pfx_do_pidfd_send_signal+0x10/0x10 [ 75.076823][ T6670] __x64_sys_pidfd_send_signal+0x2bd/0x420 [ 75.076856][ T6670] do_syscall_64+0x115/0x870 [ 75.076923][ T6670] ? clear_bhb_loop+0x70/0xc0 [ 75.076945][ T6670] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.076963][ T6670] RIP: 0033:0x7f588fd9e0d9 [ 75.076979][ T6670] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 75.076995][ T6670] RSP: 002b:00007f5890c90028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a8 [ 75.077013][ T6670] RAX: ffffffffffffffda RBX: 00007f5890025fa0 RCX: 00007f588fd9e0d9 [ 75.077025][ T6670] RDX: 0000000000000000 RSI: 0000000000000021 RDI: 0000000000000003 [ 75.077035][ T6670] RBP: 00007f5890c90090 R08: 0000000000000000 R09: 0000000000000000 [ 75.077045][ T6670] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001 [ 75.077055][ T6670] R13: 00007f5890026038 R14: 00007f5890025fa0 R15: 00007ffcec00dfa8 [ 75.077077][ T6670] [ 75.269570][ T5822] i2c i2c-2: failure reading functionality [ 75.278992][ T5822] i2c i2c-2: connected i2c-tiny-usb device [ 75.435750][ T6687] netlink: 48 bytes leftover after parsing attributes in process `syz.1.214'. [ 75.490976][ T6698] qnx4: no qnx4 filesystem (no root dir). [ 75.913275][ T1486] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 75.913721][ T6706] i2c i2c-0: new_device: Instantiated device maxtcpc at 0x40 [ 75.921414][ T61] maxtcpc 0-0040: error -ENXIO: Failed to read TCPC_POWER_STATUS [ 75.932862][ T6706] i2c i2c-1: new_device: Instantiated device maxtcpc at 0x40 [ 75.937010][ T61] maxtcpc 1-0040: error -EIO: Failed to read TCPC_POWER_STATUS [ 75.943584][ T61] maxtcpc 1-0040: probe with driver maxtcpc failed with error -5 [ 75.949413][ T6706] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.955005][ T6706] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.967256][ T6706] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.970982][ T6706] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.043332][ T1486] usb 6-1: device descriptor read/64, error -71 [ 76.283318][ T1486] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 76.363759][ T5740] Bluetooth: hci3: command tx timeout [ 76.394882][ T5885] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 76.423309][ T1486] usb 6-1: device descriptor read/64, error -71 [ 76.534458][ T1486] usb usb6-port1: attempt power cycle [ 76.551742][ T5885] usb 5-1: unable to get BOS descriptor or descriptor too short [ 76.556154][ T5885] usb 5-1: not running at top speed; connect to a high speed hub [ 76.560623][ T5885] usb 5-1: config 14 has an invalid interface number: 57 but max is 1 [ 76.564693][ T5885] usb 5-1: config 14 has an invalid interface number: 228 but max is 1 [ 76.568238][ T5885] usb 5-1: config 14 has an invalid descriptor of length 45, skipping remainder of the config [ 76.572535][ T5885] usb 5-1: config 14 has no interface number 0 [ 76.575697][ T5885] usb 5-1: config 14 has no interface number 1 [ 76.578322][ T5885] usb 5-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 76.580793][ T6715] program syz.2.221 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 76.582735][ T5885] usb 5-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0x1B, changing to 0xB [ 76.591195][ T5885] usb 5-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 76.596535][ T5885] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 62089, setting to 64 [ 76.601309][ T5885] usb 5-1: config 14 interface 57 has no altsetting 0 [ 76.604388][ T5885] usb 5-1: config 14 interface 228 has no altsetting 0 [ 76.610545][ T5885] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 76.614800][ T5885] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.618251][ T5885] usb 5-1: Product: syz [ 76.620056][ T5885] usb 5-1: Manufacturer: syz [ 76.622151][ T5885] usb 5-1: SerialNumber: syz [ 76.764618][ T6721] Mass Storage Function, version: 2009/09/11 [ 76.767198][ T6721] LUN: removable file: (no medium) [ 76.873333][ T1486] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 76.904088][ T1486] usb 6-1: device descriptor read/8, error -71 [ 77.043636][ T5885] legousbtower 5-1:14.57: interrupt endpoints not found [ 77.153278][ T1486] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 77.164885][ T6730] SELinux: context truncated [ 77.167216][ T6730] SELinux: invalid ocon [ 77.187348][ T1486] usb 6-1: device descriptor read/8, error -71 [ 77.242176][ T5885] legousbtower 5-1:14.228: interrupt endpoints not found [ 77.283528][ T6730] SELinux: failed to load policy [ 77.294476][ T1486] usb usb6-port1: unable to enumerate USB device [ 77.392118][ T6736] openvswitch: netlink: IP tunnel dst address not specified [ 77.397478][ T6736] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 77.508019][ T6738] netlink: 8 bytes leftover after parsing attributes in process `syz.2.229'. [ 77.512824][ T6738] netlink: 8 bytes leftover after parsing attributes in process `syz.2.229'. [ 77.859243][ T5822] usb 9-1: USB disconnect, device number 2 [ 78.181797][ T6749] capability: warning: `syz.4.232' uses 32-bit capabilities (legacy support in use) [ 78.437599][ T6767] netlink: 68 bytes leftover after parsing attributes in process `syz.4.237'. [ 78.712511][ T6778] 9pnet_fd: p9_fd_create_tcp (6778): problem connecting socket to 127.0.0.1 [ 78.827726][ T6777] kvm: pic: non byte write [ 79.173518][ T5822] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 79.187731][ T29] usb 5-1: USB disconnect, device number 3 [ 79.210345][ T6794] kvm: kvm [6793]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 79.215178][ T6794] kvm: kvm [6793]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 79.256190][ T42] kauditd_printk_skb: 27 callbacks suppressed [ 79.256211][ T42] audit: type=1400 audit(1786071529.433:17766): avc: denied { bind } for pid=6793 comm="syz.1.246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 79.280864][ T6801] /dev/sg0: Can't lookup blockdev [ 79.282201][ T6802] /dev/sg0: Can't lookup blockdev [ 79.344800][ T5822] usb 9-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 79.348518][ T6804] block nbd0: not configured, cannot reconfigure [ 79.350188][ T5822] usb 9-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 79.358775][ T5822] usb 9-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 79.361678][ T5822] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.364426][ T5822] usb 9-1: Product: syz [ 79.365888][ T5822] usb 9-1: Manufacturer: syz [ 79.367438][ T5822] usb 9-1: SerialNumber: syz [ 79.380821][ T5822] ti_usb_3410_5052 9-1:2.0: TI USB 5052 2 port adapter converter detected [ 79.393799][ T5822] usb 9-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 79.403867][ T5822] usb 9-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 79.784146][ T42] audit: type=1400 audit(1786071529.963:17767): avc: denied { kexec_image_load } for pid=6810 comm="syz.0.252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 79.865793][ T6816] netlink: 12 bytes leftover after parsing attributes in process `syz.1.253'. [ 79.869717][ T6816] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6816 comm=syz.1.253 [ 79.959208][ T42] audit: type=1400 audit(1786071530.133:17768): avc: denied { getopt } for pid=6823 comm="syz.0.255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 80.126329][ T6835] netlink: 16 bytes leftover after parsing attributes in process `syz.1.259'. [ 80.318729][ T6851] warn_alloc: 7 callbacks suppressed [ 80.318749][ T6851] syz.0.263: vmalloc error: size 18446744073699066186, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 80.327454][ T6851] CPU: 2 UID: 0 PID: 6851 Comm: syz.0.263 Tainted: G L syzkaller #0 PREEMPT(full) [ 80.327500][ T6851] Tainted: [L]=SOFTLOCKUP [ 80.327508][ T6851] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 80.327531][ T6851] Call Trace: [ 80.327548][ T6851] [ 80.327555][ T6851] dump_stack_lvl+0x100/0x190 [ 80.327715][ T6851] warn_alloc.cold+0x94/0xa8 [ 80.327750][ T6851] ? __pfx_warn_alloc+0x10/0x10 [ 80.327804][ T6851] ? do_syscall_64+0x115/0x870 [ 80.327897][ T6851] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.327924][ T6851] ? __lock_acquire+0x49f/0x1a40 [ 80.327983][ T6851] ? find_held_lock+0x2b/0x80 [ 80.328003][ T6851] ? avc_has_extended_perms+0x33a/0x1080 [ 80.328076][ T6851] ? avc_has_extended_perms+0x33a/0x1080 [ 80.328101][ T6851] ? __UNIQUE_ID_modinfo_723+0x638bbfed/0xffffffffffec9ea3 [ 80.328180][ T6851] ? __UNIQUE_ID_modinfo_723+0x638bbfed/0xffffffffffec9ea3 [ 80.328208][ T6851] __vmalloc_node_range_noprof+0x136c/0x1630 [ 80.328241][ T6851] ? __UNIQUE_ID_modinfo_723+0x638bbfed/0xffffffffffec9ea3 [ 80.328266][ T6851] ? trace_contention_end+0x126/0x160 [ 80.328288][ T6851] ? dvb_demux_do_ioctl+0x9e0/0x1200 [ 80.328369][ T6851] ? dvb_demux_do_ioctl+0x929/0x1200 [ 80.328394][ T6851] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 80.328424][ T6851] ? __pfx___mutex_lock+0x10/0x10 [ 80.328450][ T6851] ? irqentry_exit+0x24d/0xa00 [ 80.328473][ T6851] ? __UNIQUE_ID_modinfo_723+0x638bbfed/0xffffffffffec9ea3 [ 80.328496][ T6851] ? dvb_demux_do_ioctl+0x9e0/0x1200 [ 80.328515][ T6851] __vmalloc_node_noprof+0xad/0xf0 [ 80.328544][ T6851] ? dvb_demux_do_ioctl+0x9e0/0x1200 [ 80.328564][ T6851] ? __UNIQUE_ID_modinfo_723+0x638bbfed/0xffffffffffec9ea3 [ 80.328597][ T6851] dvb_demux_do_ioctl+0x9e0/0x1200 [ 80.328633][ T6851] ? do_vfs_ioctl+0x226/0x13e0 [ 80.328680][ T6851] ? __UNIQUE_ID_modinfo_723+0x638bbfed/0xffffffffffec9ea3 [ 80.328708][ T6851] dvb_usercopy+0x167/0x340 [ 80.328739][ T6851] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 80.328760][ T6851] ? __UNIQUE_ID_modinfo_723+0x638bbfed/0xffffffffffec9ea3 [ 80.328791][ T6851] ? __pfx_dvb_usercopy+0x10/0x10 [ 80.328829][ T6851] ? __UNIQUE_ID_modinfo_723+0x638bbfed/0xffffffffffec9ea3 [ 80.328858][ T6851] ? __UNIQUE_ID_modinfo_723+0x638bbfed/0xffffffffffec9ea3 [ 80.328886][ T6851] ? selinux_file_ioctl+0x13b/0x290 [ 80.328906][ T6851] ? __UNIQUE_ID_modinfo_723+0x638bbfed/0xffffffffffec9ea3 [ 80.328936][ T6851] ? selinux_file_ioctl+0xb6/0x290 [ 80.328961][ T6851] ? __UNIQUE_ID_modinfo_723+0x638bbfed/0xffffffffffec9ea3 [ 80.328992][ T6851] ? __UNIQUE_ID_modinfo_723+0x638bbfed/0xffffffffffec9ea3 [ 80.329022][ T6851] dvb_demux_ioctl+0x29/0x40 [ 80.329049][ T6851] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 80.329080][ T6851] __x64_sys_ioctl+0x18e/0x210 [ 80.329111][ T6851] do_syscall_64+0x115/0x870 [ 80.329133][ T6851] ? clear_bhb_loop+0x70/0xc0 [ 80.329153][ T6851] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.329174][ T6851] RIP: 0033:0x7f588fd9e0d9 [ 80.329192][ T6851] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 80.329210][ T6851] RSP: 002b:00007f5890c90028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 80.329238][ T6851] RAX: ffffffffffffffda RBX: 00007f5890025fa0 RCX: 00007f588fd9e0d9 [ 80.329250][ T6851] RDX: ffffffffff60014a RSI: 0000000000006f2d RDI: 0000000000000005 [ 80.329260][ T6851] RBP: 00007f588fe35024 R08: 0000000000000000 R09: 0000000000000000 [ 80.329271][ T6851] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 80.329282][ T6851] R13: 00007f5890026038 R14: 00007f5890025fa0 R15: 00007ffcec00dfa8 [ 80.329304][ T6851] ? __UNIQUE_ID_modinfo_723+0x638bbfed/0xffffffffffec9ea3 [ 80.329343][ T6851] [ 80.329428][ T6851] Mem-Info: [ 80.481442][ T6851] active_anon:20551 inactive_anon:0 isolated_anon:0 [ 80.481442][ T6851] active_file:0 inactive_file:62227 isolated_file:0 [ 80.481442][ T6851] unevictable:1768 dirty:291 writeback:0 [ 80.481442][ T6851] slab_reclaimable:12042 slab_unreclaimable:68619 [ 80.481442][ T6851] mapped:24986 shmem:12573 pagetables:1324 [ 80.481442][ T6851] sec_pagetables:303 bounce:0 [ 80.481442][ T6851] kernel_misc_reclaimable:0 [ 80.481442][ T6851] free:434403 free_pcp:17114 free_cma:0 [ 80.500425][ T6851] Node 0 active_anon:82204kB inactive_anon:0kB active_file:0kB inactive_file:248652kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:99892kB dirty:1104kB writeback:0kB shmem:46756kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:2048kB kernel_stack:13664kB pagetables:5084kB sec_pagetables:1212kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 80.513339][ T6851] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:256kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:52kB dirty:60kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:128kB pagetables:212kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 80.526164][ T6851] Node 0 DMA free:15224kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:136kB local_pcp:32kB free_cma:0kB [ 80.538015][ T6851] lowmem_reserve[]: 0 1225 1225 1225 1225 [ 80.540478][ T6851] Node 0 DMA32 free:79740kB boost:0kB min:27396kB low:34244kB high:41092kB reserved_highatomic:0KB free_highatomic:0KB active_anon:82204kB inactive_anon:0kB active_file:0kB inactive_file:248652kB unevictable:3536kB writepending:1104kB zspages:0kB present:2080628kB managed:1255200kB mlocked:0kB bounce:0kB free_pcp:62168kB local_pcp:13220kB free_cma:0kB [ 80.553487][ T6851] lowmem_reserve[]: 0 0 0 0 0 [ 80.555528][ T6851] Node 1 Normal free:1642648kB boost:0kB min:39840kB low:49800kB high:59760kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:256kB unevictable:3536kB writepending:60kB zspages:0kB present:2097152kB managed:1781884kB mlocked:0kB bounce:0kB free_pcp:6200kB local_pcp:2356kB free_cma:0kB [ 80.568015][ T6851] lowmem_reserve[]: 0 0 0 0 0 [ 80.570216][ T6851] Node 0 DMA: 2*4kB (U) 2*8kB (U) 2*16kB (U) 2*32kB (U) 2*64kB (U) 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (UM) = 15224kB [ 80.573271][ T29] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 80.576441][ T6851] Node 0 DMA32: 87*4kB (UME) 222*8kB (UME) 306*16kB (UME) 542*32kB (UME) 152*64kB (UME) 73*128kB (UME) 36*256kB (UME) 3*512kB (UME) 1*1024kB (U) 6*2048kB (UE) 3*4096kB (UM) = 79788kB [ 80.586781][ T6851] Node 1 Normal: 0*4kB 5*8kB (UM) 5*16kB (UM) 5*32kB (UM) 4*64kB (UM) 1*128kB (U) 2*256kB (UM) 2*512kB (M) 0*1024kB 3*2048kB (UM) 399*4096kB (M) = 1642648kB [ 80.594996][ T6851] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 80.599188][ T6851] Node 0 hugepages_total=4 hugepages_free=0 hugepages_surp=2 hugepages_size=2048kB [ 80.604054][ T6851] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 80.607812][ T6851] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 80.611559][ T6851] 74796 total pagecache pages [ 80.613606][ T6851] 0 pages in swap cache [ 80.615370][ T6851] Free swap = 124996kB [ 80.617166][ T6851] Total swap = 124996kB [ 80.618911][ T6851] 1048443 pages RAM [ 80.620558][ T6851] 0 pages HighMem/MovableOnly [ 80.622529][ T6851] 285332 pages reserved [ 80.624361][ T6851] 0 pages cma reserved [ 80.682505][ T6856] netlink: 'syz.0.265': attribute type 63 has an invalid length. [ 80.685098][ T6856] netlink: 5 bytes leftover after parsing attributes in process `syz.0.265'. [ 80.703098][ T6859] No source specified [ 80.710796][ T6859] netlink: 4 bytes leftover after parsing attributes in process `syz.2.266'. [ 80.736135][ T29] usb 6-1: Using ep0 maxpacket: 8 [ 80.739991][ T29] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 80.744817][ T29] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 80.749301][ T29] usb 6-1: config 0 interface 0 has no altsetting 0 [ 80.751926][ T29] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 80.756514][ T29] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.775808][ T29] usb 6-1: config 0 descriptor?? [ 81.046973][ T42] audit: type=1400 audit(1786071531.223:17769): avc: denied { map } for pid=6865 comm="syz.0.268" path="/dev/sg0" dev="devtmpfs" ino=722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 81.131336][ T42] audit: type=1400 audit(1786071531.303:17770): avc: denied { create } for pid=6868 comm="syz.2.269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 81.141734][ T42] audit: type=1400 audit(1786071531.313:17771): avc: denied { bind } for pid=6868 comm="syz.2.269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 81.202289][ T29] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 81.204577][ T29] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 81.206650][ T29] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 81.208730][ T29] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 81.210841][ T29] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 81.213973][ T29] mcp2221 0003:04D8:00DD.0003: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 81.236224][ T42] audit: type=1400 audit(1786071531.403:17772): avc: denied { setattr } for pid=6874 comm="syz.0.271" name="L2TP/IPv6" dev="sockfs" ino=21525 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 81.247835][ T42] audit: type=1400 audit(1786071531.413:17773): avc: denied { listen } for pid=6868 comm="syz.2.269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 81.388214][ T6850] netlink: 8 bytes leftover after parsing attributes in process `syz.1.262'. [ 81.390955][ T6850] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 81.393599][ T6850] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 81.397150][ T6850] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 81.399416][ T6850] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 81.515159][ T24] usb 6-1: USB disconnect, device number 7 [ 81.553563][ T6788] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot clear output buffers, -110 [ 81.603281][ T1486] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 81.753882][ T1486] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 81.757507][ T1486] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 81.760475][ T1486] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 81.764290][ T1486] usb 5-1: config 0 interface 0 has no altsetting 0 [ 81.767748][ T1486] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 81.770410][ T1486] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 81.774178][ T1486] usb 5-1: config 0 interface 0 has no altsetting 0 [ 81.777101][ T1486] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 81.780054][ T1486] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 81.784557][ T1486] usb 5-1: config 0 interface 0 has no altsetting 0 [ 81.788489][ T1486] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 81.792146][ T1486] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 81.797109][ T1486] usb 5-1: config 0 interface 0 has no altsetting 0 [ 81.800575][ T1486] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 81.803429][ T1486] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 81.807424][ T1486] usb 5-1: config 0 interface 0 has no altsetting 0 [ 81.811268][ T1486] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 81.814951][ T1486] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 81.819104][ T1486] usb 5-1: config 0 interface 0 has no altsetting 0 [ 81.822894][ T1486] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 81.826452][ T1486] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 81.831266][ T1486] usb 5-1: config 0 interface 0 has no altsetting 0 [ 81.835236][ T1486] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 81.838767][ T1486] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 81.842505][ T1486] usb 5-1: config 0 interface 0 has no altsetting 0 [ 81.846509][ T1486] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 81.849358][ T1486] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 81.851870][ T1486] usb 5-1: Product: syz [ 81.853300][ T1486] usb 5-1: Manufacturer: syz [ 81.855212][ T1486] usb 5-1: SerialNumber: syz [ 81.860815][ T1486] usb 5-1: config 0 descriptor?? [ 81.878185][ T1486] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 81.936883][ T42] audit: type=1400 audit(1786071532.113:17774): avc: denied { write } for pid=6888 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 81.995505][ T42] audit: type=1400 audit(1786071532.173:17775): avc: denied { write } for pid=6891 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 82.056841][ T6894] MINIX-fs: unable to read superblock [ 82.075164][ T34] usb 5-1: USB disconnect, device number 4 [ 82.086314][ T34] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 82.423465][ T5885] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 82.464839][ T6915] (syz.2.279,6915,2):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 82.538753][ T6925] sg_write: data in/out 808464396/14 bytes for SCSI command 0x0-- guessing data in; [ 82.538753][ T6925] program syz.2.280 not setting count and/or reply_len properly [ 82.572930][ T24] usb 9-1: USB disconnect, device number 3 [ 82.573283][ T5885] usb 6-1: Using ep0 maxpacket: 16 [ 82.600544][ T24] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 82.616407][ T6934] erspan0: entered promiscuous mode [ 82.621692][ T5885] usb 6-1: unable to get BOS descriptor or descriptor too short [ 82.624320][ T24] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 82.632074][ T24] ti_usb_3410_5052 9-1:2.0: device disconnected [ 82.634421][ T5885] usb 6-1: no configurations [ 82.642080][ T5885] usb 6-1: can't read configurations, error -22 [ 82.674914][ T6939] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.851510][ T6958] gretap1: entered allmulticast mode [ 82.874886][ T6959] gretap1: entered allmulticast mode [ 83.040646][ T6971] SELinux: policydb magic number 0x24 does not match expected magic number 0xf97cff8c [ 83.043979][ T6971] SELinux: failed to load policy [ 83.063255][ T5885] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 83.219669][ T5885] usb 6-1: unable to get BOS descriptor or descriptor too short [ 83.223897][ T5885] usb 6-1: not running at top speed; connect to a high speed hub [ 83.230181][ T5885] usb 6-1: config 14 has an invalid interface number: 57 but max is 1 [ 83.233721][ T5885] usb 6-1: config 14 has an invalid interface number: 228 but max is 1 [ 83.236988][ T5885] usb 6-1: config 14 has no interface number 0 [ 83.239682][ T5885] usb 6-1: config 14 has no interface number 1 [ 83.242226][ T5885] usb 6-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 83.246581][ T5885] usb 6-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0x1B, changing to 0xB [ 83.251243][ T5885] usb 6-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 83.255823][ T5885] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 62089, setting to 64 [ 83.259960][ T5885] usb 6-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0x3A, changing to 0xA [ 83.265730][ T5885] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0xA has an invalid bInterval 218, changing to 4 [ 83.270101][ T5885] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0xA has invalid maxpacket 6680, setting to 1023 [ 83.275506][ T5885] usb 6-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 83.280665][ T5885] usb 6-1: config 14 interface 57 has no altsetting 0 [ 83.283490][ T5885] usb 6-1: config 14 interface 228 has no altsetting 0 [ 83.288301][ T5885] usb 6-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 83.291451][ T5885] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.294309][ T5885] usb 6-1: Product: syz [ 83.295998][ T5885] usb 6-1: Manufacturer: syz [ 83.297945][ T5885] usb 6-1: SerialNumber: syz [ 83.713648][ T5885] legousbtower 6-1:14.57: interrupt endpoints not found [ 83.756917][ T6977] erspan0: entered promiscuous mode [ 83.834249][ T6980] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 83.838156][ T6981] netlink: 40 bytes leftover after parsing attributes in process `syz.0.296'. [ 83.916185][ T5885] legousbtower 6-1:14.228: interrupt endpoints not found [ 83.942339][ T6985] netlink: 'syz.4.299': attribute type 3 has an invalid length. [ 83.944983][ T6985] netlink: 'syz.4.299': attribute type 1 has an invalid length. [ 83.947407][ T6985] netlink: 216 bytes leftover after parsing attributes in process `syz.4.299'. [ 84.108830][ T6994] netlink: 16 bytes leftover after parsing attributes in process `syz.4.302'. [ 84.182170][ T6997] overlayfs: failed to resolve './file2': -2 [ 84.188906][ T6999] tipc: Started in network mode [ 84.191721][ T6999] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 84.199512][ T6999] tipc: Enabled bearer , priority 0 [ 84.206063][ T7001] syzkaller0: entered promiscuous mode [ 84.208444][ T7001] syzkaller0: entered allmulticast mode [ 84.373989][ T7010] netlink: 'syz.4.306': attribute type 9 has an invalid length. [ 84.380808][ T7010] overlayfs: failed to resolve 'dont_hash': -2 [ 84.440512][ T42] kauditd_printk_skb: 23 callbacks suppressed [ 84.440524][ T42] audit: type=1400 audit(1786071534.613:17799): avc: denied { remount } for pid=7019 comm="syz.2.309" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 84.482326][ T170] Bluetooth: hci4: Frame reassembly failed (-84) [ 84.485260][ T170] Bluetooth: hci4: Frame reassembly failed (-84) [ 84.588839][ T7026] netlink: 36 bytes leftover after parsing attributes in process `syz.2.309'. [ 84.821716][ T42] audit: type=1400 audit(1786071534.993:17800): avc: denied { map } for pid=7038 comm="syz.4.312" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 84.829276][ T42] audit: type=1400 audit(1786071534.993:17801): avc: denied { execute } for pid=7038 comm="syz.4.312" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 84.866995][ T7040] ip_tables: iptables: counters copy to user failed while replacing table [ 85.051206][ T42] audit: type=1400 audit(1786071535.223:17802): avc: denied { ioctl } for pid=7043 comm="syz.4.314" path="socket:[21028]" dev="sockfs" ino=21028 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 85.103356][ T42] audit: type=1400 audit(1786071535.273:17803): avc: denied { write } for pid=7043 comm="syz.4.314" name="ptp1" dev="devtmpfs" ino=1289 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 85.156280][ T7047] SELinux: syz.4.314 (7047) wrote to user. This is no longer supported. [ 85.160859][ T42] audit: type=1400 audit(1786071535.333:17804): avc: denied { setopt } for pid=7043 comm="syz.4.314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 85.324630][ T56] tipc: Node number set to 43690 [ 85.365086][ T42] audit: type=1400 audit(1786071535.543:17805): avc: denied { view } for pid=7055 comm="syz.4.316" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 85.377319][ T7056] CIFS: Attempting to mount //::1/share [ 85.394748][ T7059] netlink: 4 bytes leftover after parsing attributes in process `syz.2.318'. [ 85.735260][ T42] audit: type=1400 audit(1786071535.903:17806): avc: denied { getattr } for pid=7069 comm="syz.2.320" name="/" dev="9p" ino=78395289 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 85.843009][ T24] usb 6-1: USB disconnect, device number 9 [ 86.039704][ T7093] netlink: 92 bytes leftover after parsing attributes in process `syz.1.328'. [ 86.146830][ T7103] netlink: 'syz.1.333': attribute type 3 has an invalid length. [ 86.149784][ T7103] netlink: 8 bytes leftover after parsing attributes in process `syz.1.333'. [ 86.199343][ T7056] CIFS: VFS: cifs_mount failed w/return code = -112 [ 86.278278][ T7108] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 86.306590][ T42] audit: type=1400 audit(1786071536.483:17807): avc: denied { setopt } for pid=7110 comm="syz.2.332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 86.318181][ T7111] netlink: 4 bytes leftover after parsing attributes in process `syz.2.332'. [ 86.399642][ T7121] netlink: 14 bytes leftover after parsing attributes in process `syz.1.338'. [ 86.399642][ T7118] netlink: 14 bytes leftover after parsing attributes in process `syz.1.338'. [ 86.408440][ T7121] bond0: entered promiscuous mode [ 86.410562][ T7121] bond_slave_0: entered promiscuous mode [ 86.416246][ T7121] bond_slave_1: entered promiscuous mode [ 86.427158][ T7122] ip_tables: iptables: counters copy to user failed while replacing table [ 86.515456][ T5096] Bluetooth: hci4: command 0x1003 tx timeout [ 86.520402][ T5740] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 86.582875][ T7140] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 86.782734][ T7156] netlink: 12 bytes leftover after parsing attributes in process `syz.0.349'. [ 87.095518][ T7158] kvm: pic: level sensitive irq not supported [ 87.097434][ T7158] kvm: pic: level sensitive irq not supported [ 87.106890][ T7158] kvm: pic: single mode not supported [ 87.112016][ T7158] kvm: pic: level sensitive irq not supported [ 87.117803][ T7158] kvm: pic: single mode not supported [ 87.120415][ T7158] kvm: pic: level sensitive irq not supported [ 87.125748][ T7158] kvm: pic: level sensitive irq not supported [ 87.129457][ T7158] kvm: pic: level sensitive irq not supported [ 87.138317][ T7158] kvm: pic: single mode not supported [ 87.141078][ T7158] kvm: pic: level sensitive irq not supported [ 87.151380][ T7158] kvm: pic: single mode not supported [ 87.158349][ T7158] kvm: pic: single mode not supported [ 87.160736][ T7158] kvm: pic: level sensitive irq not supported [ 87.281794][ T42] audit: type=1400 audit(1786071537.453:17808): avc: denied { append } for pid=7163 comm="syz.1.352" name="demux0" dev="devtmpfs" ino=953 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 87.355116][ T7173] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4000675772 (8001351544 ns) > initial count (4731795314 ns). Using initial count to start timer. [ 87.463815][ T7181] hfs: can't find a HFS filesystem on dev sr0 [ 87.608439][ T7190] Format for deleting device is "id" (uint). [ 87.615363][ T7190] netlink: 45 bytes leftover after parsing attributes in process `syz.0.357'. [ 87.631694][ T7190] ufs: You didn't specify the type of your ufs filesystem [ 87.631694][ T7190] [ 87.631694][ T7190] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 87.631694][ T7190] [ 87.631694][ T7190] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 87.655942][ T7190] ufs: failed to set blocksize [ 88.019026][ T7209] netlink: 12 bytes leftover after parsing attributes in process `syz.4.363'. [ 88.388058][ T7229] XFS (nbd2): SB validate failed with error -5. [ 88.568213][ T7242] netlink: 4 bytes leftover after parsing attributes in process `syz.2.370'. [ 88.632347][ T7244] atm:do_vcc_ioctl: ATM_SETSC is obsolete; used by syz.0.371:7244 [ 88.753769][ T2322] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 88.838842][ T7264] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=164 sclass=netlink_route_socket pid=7264 comm=syz.0.374 [ 88.924465][ T2322] usb 9-1: Using ep0 maxpacket: 16 [ 88.928645][ T2322] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 88.935643][ T7270] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Error Msg ret = -22) [ 88.936028][ T2322] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 88.945694][ T2322] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.951462][ T2322] usb 9-1: Product: syz [ 88.953563][ T2322] usb 9-1: Manufacturer: syz [ 88.956450][ T2322] usb 9-1: SerialNumber: syz [ 88.964015][ T2322] usb 9-1: config 0 descriptor?? [ 88.971046][ T2322] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 88.979349][ T2322] em28xx 9-1:0.0: DVB interface 0 found: bulk [ 89.081355][ T7273] sctp: [Deprecated]: syz.0.378 (pid 7273) Use of struct sctp_assoc_value in delayed_ack socket option. [ 89.081355][ T7273] Use struct sctp_sack_info instead [ 89.132715][ T7275] faux_driver vgem: [drm] Unknown color mode 135165; guessing buffer size. [ 89.533198][ T42] kauditd_printk_skb: 16 callbacks suppressed [ 89.533275][ T42] audit: type=1400 audit(1786071539.703:17825): avc: denied { ioctl } for pid=7284 comm="syz.2.384" path="socket:[23724]" dev="sockfs" ino=23724 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 89.577064][ T2322] em28xx 9-1:0.0: unknown em28xx chip ID (0) [ 89.780270][ T7294] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 89.861199][ T7300] netlink: 'syz.1.388': attribute type 1 has an invalid length. [ 89.882286][ T7300] 8021q: adding VLAN 0 to HW filter on device bond2 [ 90.250685][ T7303] binder: 7239:7303 ioctl c0306201 200000000640 returned -22 [ 90.254001][ T2322] em28xx 9-1:0.0: failed to get i2c transfer status from bridge register (error=-5) [ 90.259993][ T2322] em28xx 9-1:0.0: board has no eeprom [ 90.717829][ T7307] openvswitch: netlink: Duplicate key (type 6). [ 90.756166][ T42] audit: type=1400 audit(1786071540.933:17826): avc: denied { listen } for pid=7308 comm="syz.2.392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 90.763969][ T42] audit: type=1400 audit(1786071540.933:17827): avc: denied { accept } for pid=7308 comm="syz.2.392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 90.795768][ T42] audit: type=1400 audit(1786071540.973:17828): avc: denied { ioctl } for pid=7311 comm="syz.2.393" path="socket:[23788]" dev="sockfs" ino=23788 ioctlcmd=0x9435 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 90.917341][ T5822] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 91.077387][ T5822] usb 6-1: unable to get BOS descriptor or descriptor too short [ 91.082257][ T5822] usb 6-1: not running at top speed; connect to a high speed hub [ 91.089663][ T5822] usb 6-1: config 14 has an invalid interface number: 57 but max is 1 [ 91.092991][ T5822] usb 6-1: config 14 has an invalid interface number: 228 but max is 1 [ 91.096574][ T5822] usb 6-1: config 14 has no interface number 0 [ 91.098515][ T5822] usb 6-1: config 14 has no interface number 1 [ 91.100868][ T5822] usb 6-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 91.104586][ T5822] usb 6-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0x1B, changing to 0xB [ 91.108367][ T5822] usb 6-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 91.111904][ T5822] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 62089, setting to 64 [ 91.115771][ T5822] usb 6-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0x3A, changing to 0xA [ 91.119498][ T5822] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0xA has an invalid bInterval 218, changing to 4 [ 91.122846][ T5822] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0xA has invalid maxpacket 6680, setting to 1023 [ 91.127334][ T5822] usb 6-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 91.131416][ T5822] usb 6-1: config 14 interface 57 has no altsetting 0 [ 91.133802][ T5822] usb 6-1: config 14 interface 228 has no altsetting 0 [ 91.137927][ T5822] usb 6-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 91.140861][ T5822] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.143441][ T5822] usb 6-1: Product: syz [ 91.144987][ T5822] usb 6-1: Manufacturer: syz [ 91.146494][ T5822] usb 6-1: SerialNumber: syz [ 91.269034][ T42] audit: type=1400 audit(1786071541.443:17829): avc: denied { read } for pid=7327 comm="syz.2.399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 91.327155][ T7303] em28xx 9-1:0.0: reading from i2c device at 0x0 failed (error=-5) [ 91.393245][ T2322] em28xx 9-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 91.396018][ T2322] em28xx 9-1:0.0: dvb set to bulk mode. [ 91.402760][ T24] em28xx 9-1:0.0: Binding DVB extension [ 91.438116][ T24] em28xx 9-1:0.0: Registering input extension [ 91.559127][ T5822] legousbtower 6-1:14.57: interrupt endpoints not found [ 91.759824][ T5822] legousbtower 6-1:14.228: interrupt endpoints not found [ 92.348633][ T24] usb 9-1: USB disconnect, device number 4 [ 92.356571][ T24] em28xx 9-1:0.0: Disconnecting em28xx [ 92.363586][ T24] em28xx 9-1:0.0: Closing input extension [ 92.415462][ T24] em28xx 9-1:0.0: Freeing device [ 92.450525][ T42] audit: type=1400 audit(1786071542.623:17830): avc: denied { watch } for pid=7342 comm="syz.4.402" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=1037 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 92.451234][ T7343] process 'syz.4.402' launched '/dev/fd/3' with NULL argv: empty string added [ 92.469493][ T42] audit: type=1400 audit(1786071542.643:17831): avc: denied { execute_no_trans } for pid=7342 comm="syz.4.402" path=2F6D656D66643A5B0BDB58AE5B35A990FF631F1AA9FDFAADD16D64E7E27F9BD55210F3B6FF54BFD1C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=1036 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 92.833291][ T5822] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 92.878040][ T7354] tmpfs: Bad value for 'mpol' [ 92.920022][ T7356] netlink: 'syz.4.407': attribute type 2 has an invalid length. [ 92.954116][ T7360] netlink: 'syz.2.408': attribute type 2 has an invalid length. [ 92.958304][ T7361] futex_wake_op: syz.2.408 tries to shift op by -1; fix this program [ 92.982514][ T7363] No such timeout policy "syz1" [ 92.997056][ T5822] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 93.001768][ T5822] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 93.006474][ T5822] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 93.009797][ T5822] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.017908][ T7350] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 93.027916][ T5822] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 93.108818][ T7367] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60437 sclass=netlink_route_socket pid=7367 comm=syz.4.410 [ 93.139241][ T42] audit: type=1400 audit(1786071543.313:17832): avc: denied { mmap_zero } for pid=7366 comm="syz.4.410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 93.154583][ T42] audit: type=1400 audit(1786071543.333:17833): avc: denied { create } for pid=7366 comm="syz.4.410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 93.288094][ T42] audit: type=1400 audit(1786071543.463:17834): avc: denied { read write } for pid=7349 comm="syz.0.404" name="uhid" dev="devtmpfs" ino=1295 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 93.327230][ T5822] hid-generic 0000:B012:0000.0004: unknown main item tag 0x0 [ 93.331050][ T5822] hid-generic 0000:B012:0000.0004: unknown main item tag 0x0 [ 93.335316][ T5822] hid-generic 0000:B012:0000.0004: unknown main item tag 0x1 [ 93.338601][ T5822] hid-generic 0000:B012:0000.0004: unknown main item tag 0x4 [ 93.341372][ T5822] hid-generic 0000:B012:0000.0004: unknown main item tag 0x0 [ 93.344689][ T5822] hid-generic 0000:B012:0000.0004: collection stack underflow [ 93.347549][ T5822] hid-generic 0000:B012:0000.0004: item 0 0 0 12 parsing failed [ 93.348527][ T7374] overlayfs: failed to clone upperpath [ 93.352652][ T5822] hid-generic 0000:B012:0000.0004: probe with driver hid-generic failed with error -22 [ 93.361504][ T34] usb 5-1: USB disconnect, device number 5 [ 93.486831][ T7382] xt_hashlimit: size too large, truncated to 1048576 [ 93.688323][ T34] usb 6-1: USB disconnect, device number 10 [ 93.789878][ T7393] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 93.971095][ T7398] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 93.996269][ T7398] __nla_validate_parse: 7 callbacks suppressed [ 93.996288][ T7398] netlink: 36 bytes leftover after parsing attributes in process `syz.1.418'. [ 94.121159][ T7414] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 94.124054][ T7414] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 94.136990][ T7414] vhci_hcd vhci_hcd.0: Device attached [ 94.142743][ T7415] usbip_core: unknown command [ 94.153362][ T7415] vhci_hcd: unknown pdu 3276800 [ 94.155135][ T7415] usbip_core: unknown command [ 94.186025][ T5786] vhci_hcd vhci_hcd.2: stop threads [ 94.188602][ T5786] vhci_hcd vhci_hcd.2: release socket [ 94.190844][ T5786] vhci_hcd vhci_hcd.2: disconnect device [ 94.735751][ T42] kauditd_printk_skb: 4 callbacks suppressed [ 94.735769][ T42] audit: type=1400 audit(1786071544.913:17839): avc: denied { map } for pid=7437 comm="syz.2.428" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 94.750605][ T42] audit: type=1400 audit(1786071544.913:17840): avc: denied { getopt } for pid=7434 comm="syz.4.426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 94.759870][ T42] audit: type=1400 audit(1786071544.913:17841): avc: denied { module_request } for pid=7434 comm="syz.4.426" kmod="netdev-" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 94.767910][ T7438] netlink: 32 bytes leftover after parsing attributes in process `syz.2.428'. [ 94.805356][ T42] audit: type=1400 audit(1786071544.983:17842): avc: denied { set_context_mgr } for pid=7439 comm="syz.1.427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 94.885584][ T42] audit: type=1400 audit(1786071545.063:17843): avc: denied { nlmsg_read } for pid=7450 comm="syz.4.431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 94.986494][ T7457] netlink: 8 bytes leftover after parsing attributes in process `syz.4.432'. [ 95.075637][ T7464] fuse: Bad value for 'fd' [ 95.123991][ T7468] sch_fq: defrate 0 ignored. [ 95.126498][ T42] audit: type=1400 audit(1786071545.293:17844): avc: denied { bpf } for pid=7466 comm="syz.4.435" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 95.133836][ T42] audit: type=1400 audit(1786071545.303:17845): avc: denied { perfmon } for pid=7466 comm="syz.4.435" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 95.159796][ T42] audit: type=1400 audit(1786071545.333:17846): avc: denied { append } for pid=7460 comm="syz.0.433" name="card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 95.288157][ T7474] overlayfs: failed to clone upperpath [ 95.380203][ T7481] netlink: 40 bytes leftover after parsing attributes in process `syz.0.439'. [ 95.468830][ T42] audit: type=1400 audit(1786071545.643:17847): avc: denied { name_bind } for pid=7486 comm="syz.4.441" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 95.470606][ T7487] libceph: resolve '0' (ret=-3): failed [ 95.565367][ T7495] overlayfs: failed to resolve './cgroup': -2 [ 95.672436][ T7495] netdevsim netdevsim4 ÿÿÿÿÿÿ: renamed from netdevsim0 (while UP) [ 95.796301][ T7507] netlink: 8 bytes leftover after parsing attributes in process `syz.1.448'. [ 95.801586][ T7507] netlink: 24 bytes leftover after parsing attributes in process `syz.1.448'. [ 95.938242][ T42] audit: type=1400 audit(1786071546.113:17848): avc: denied { wake_alarm } for pid=7514 comm="syz.1.452" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 96.232045][ T7447] kexec: Could not allocate control_code_buffer [ 96.254004][ T5885] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 96.260049][ T7529] netlink: 28 bytes leftover after parsing attributes in process `syz.4.455'. [ 96.264532][ T7529] netlink: 28 bytes leftover after parsing attributes in process `syz.4.455'. [ 96.280071][ T7533] overlayfs: invalid origin (0000) [ 96.412432][ T7544] netlink: 40 bytes leftover after parsing attributes in process `syz.4.460'. [ 96.424174][ T5885] usb 5-1: Using ep0 maxpacket: 16 [ 96.429003][ T5885] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.433382][ T5885] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 96.439105][ T5885] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 96.445342][ T5885] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 96.451869][ T5885] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.459803][ T5885] usb 5-1: config 0 descriptor?? [ 96.879060][ T5885] shield 0003:0955:7214.0005: unknown main item tag 0x0 [ 96.881561][ T5885] shield 0003:0955:7214.0005: unknown main item tag 0x0 [ 96.884216][ T7568] nvme_rdma: malformed address passed: 1:4420 [ 96.884860][ T5885] shield 0003:0955:7214.0005: unknown main item tag 0x0 [ 96.889551][ T5885] shield 0003:0955:7214.0005: unknown main item tag 0x0 [ 96.891773][ T5885] shield 0003:0955:7214.0005: unknown main item tag 0x0 [ 96.902746][ T5885] input: HID 0955:7214 Haptics as /devices/virtual/input/input9 [ 97.029467][ T5885] shield 0003:0955:7214.0005: Registered Thunderstrike controller [ 97.035263][ T7573] netlink: 32 bytes leftover after parsing attributes in process `syz.1.468'. [ 97.045137][ T7573] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 97.045214][ T5885] shield 0003:0955:7214.0005: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.0-1/input0 [ 97.048744][ T7573] IPv6: NLM_F_CREATE should be set when creating new route [ 97.109151][ T7573] (syz.1.468,7573,2):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 97.113849][ T7573] (syz.1.468,7573,2):ocfs2_fill_super:1177 ERROR: status = -22 [ 97.115401][ T29] shield 0003:0955:7214.0005: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 97.128318][ T5885] usb 5-1: USB disconnect, device number 6 [ 97.131124][ T29] shield 0003:0955:7214.0005: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 97.146093][ T29] shield 0003:0955:7214.0005: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 97.160687][ T29] shield 0003:0955:7214.0005: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 97.247779][ T7576] vers=2.0 not permitted when mounting with smb3 [ 97.247779][ T7576] [ 97.251928][ T7576] CIFS: VFS: vers=2.0 not permitted when mounting with smb3 [ 98.043344][ T40] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 98.205393][ T40] usb 6-1: unable to get BOS descriptor or descriptor too short [ 98.209285][ T40] usb 6-1: not running at top speed; connect to a high speed hub [ 98.216891][ T40] usb 6-1: config 14 has an invalid interface number: 57 but max is 1 [ 98.220489][ T40] usb 6-1: config 14 has an invalid interface number: 228 but max is 1 [ 98.224720][ T40] usb 6-1: config 14 has no interface number 0 [ 98.227331][ T40] usb 6-1: config 14 has no interface number 1 [ 98.229941][ T40] usb 6-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 98.235408][ T40] usb 6-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0x1B, changing to 0xB [ 98.240180][ T40] usb 6-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 98.248498][ T40] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 62089, setting to 64 [ 98.255167][ T40] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 218, changing to 4 [ 98.263282][ T40] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x9 has invalid maxpacket 6680, setting to 1023 [ 98.269888][ T40] usb 6-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 98.276612][ T40] usb 6-1: config 14 interface 57 has no altsetting 0 [ 98.278820][ T40] usb 6-1: config 14 interface 228 has no altsetting 0 [ 98.282787][ T40] usb 6-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 98.286196][ T40] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.289254][ T40] usb 6-1: Product: syz [ 98.291028][ T40] usb 6-1: Manufacturer: syz [ 98.292937][ T40] usb 6-1: SerialNumber: syz [ 98.632492][ T7655] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead [ 98.635930][ T7655] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead [ 98.639199][ T7655] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0xa5e1 instead [ 98.642380][ T7655] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0x7231 instead [ 98.645854][ T7655] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead [ 98.649147][ T7655] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead [ 98.652330][ T7655] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead [ 98.655629][ T7655] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead [ 98.658846][ T7655] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead [ 98.662031][ T7655] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead [ 98.665454][ T7655] jffs2: Further such events for this erase block will not be printed [ 98.668199][ T7655] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead [ 98.671394][ T7655] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead [ 98.674744][ T7655] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0xa5e1 instead [ 98.678792][ T7655] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0x7231 instead [ 98.683462][ T7655] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead [ 98.687642][ T7655] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead [ 98.691841][ T7655] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead [ 98.697264][ T7655] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead [ 98.700720][ T7655] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead [ 98.704034][ T7655] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead [ 98.707833][ T7655] jffs2: Further such events for this erase block will not be printed [ 98.708584][ T40] legousbtower 6-1:14.57: interrupt endpoints not found [ 98.710898][ T7655] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002000: 0x4255 instead [ 98.716065][ T7655] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002004: 0x0001 instead [ 98.719741][ T7655] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002018: 0xa5e1 instead [ 98.723967][ T7655] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000203c: 0x7231 instead [ 98.727573][ T7655] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003000: 0x4255 instead [ 98.731167][ T7655] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003004: 0x0001 instead [ 98.734507][ T7655] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003018: 0xa5e1 instead [ 98.737802][ T7655] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000303c: 0x7231 instead [ 98.741005][ T7655] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004000: 0x4255 instead [ 98.744332][ T7655] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004004: 0x0001 instead [ 98.747454][ T7655] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004018: 0xa5e1 instead [ 98.750509][ T7655] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000403c: 0x7231 instead [ 98.763411][ T7655] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005000: 0x4255 instead [ 98.767673][ T7655] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005004: 0x0001 instead [ 98.771820][ T7655] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005018: 0xa5e1 instead [ 98.775468][ T7655] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000503c: 0x7231 instead [ 98.779554][ T7655] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006000: 0x4255 instead [ 98.782921][ T7655] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006004: 0x0001 instead [ 98.786425][ T7655] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006018: 0xa5e1 instead [ 98.789935][ T7655] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000603c: 0x7231 instead [ 98.793598][ T7655] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007000: 0x4255 instead [ 98.796773][ T7655] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007004: 0x0001 instead [ 98.799910][ T7655] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007018: 0xa5e1 instead [ 98.804672][ T7655] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000703c: 0x7231 instead [ 98.808744][ T7655] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008000: 0x4255 instead [ 98.812793][ T7655] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008004: 0x0001 instead [ 98.817868][ T7655] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008018: 0xa5e1 instead [ 98.821936][ T7655] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000803c: 0x7231 instead [ 98.826558][ T7655] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009000: 0x4255 instead [ 98.831740][ T7655] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009004: 0x0001 instead [ 98.837458][ T7655] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009018: 0xa5e1 instead [ 98.841616][ T7655] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000903c: 0x7231 instead [ 98.846493][ T7655] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a000: 0x4255 instead [ 98.850661][ T7655] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a004: 0x0001 instead [ 98.855219][ T7655] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a018: 0xa5e1 instead [ 98.859420][ T7655] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a03c: 0x7231 instead [ 98.863735][ T7655] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b000: 0x4255 instead [ 98.867662][ T7655] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b004: 0x0001 instead [ 98.870791][ T7655] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b018: 0xa5e1 instead [ 98.874102][ T7655] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b03c: 0x7231 instead [ 98.877905][ T7655] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c000: 0x4255 instead [ 98.881380][ T7655] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c004: 0x0001 instead [ 98.885007][ T7655] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c018: 0xa5e1 instead [ 98.888159][ T7655] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c03c: 0x7231 instead [ 98.891321][ T7655] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d000: 0x4255 instead [ 98.894658][ T7655] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d004: 0x0001 instead [ 98.898155][ T7655] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d018: 0xa5e1 instead [ 98.901919][ T7655] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d03c: 0x7231 instead [ 98.905234][ T7655] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e000: 0x4255 instead [ 98.908450][ T7655] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e004: 0x0001 instead [ 98.910508][ T40] legousbtower 6-1:14.228: interrupt endpoints not found [ 98.911622][ T7655] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e018: 0xa5e1 instead [ 98.918077][ T7655] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e03c: 0x7231 instead [ 98.923321][ T7655] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f000: 0x4255 instead [ 98.931346][ T7655] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f004: 0x0001 instead [ 98.935327][ T7655] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f018: 0xa5e1 instead [ 98.943219][ T7655] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f03c: 0x7231 instead [ 98.947165][ T7655] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010000: 0x4255 instead [ 98.950480][ T7655] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010004: 0x0001 instead [ 98.954577][ T7655] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010018: 0xa5e1 instead [ 98.957691][ T7655] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001003c: 0x7231 instead [ 98.960828][ T7655] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011000: 0x4255 instead [ 98.964191][ T7655] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011004: 0x0001 instead [ 98.967305][ T7655] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011018: 0xa5e1 instead [ 98.970362][ T7655] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001103c: 0x7231 instead [ 98.974082][ T7655] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012000: 0x4255 instead [ 98.977250][ T7663] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 98.977425][ T7655] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012004: 0x0001 instead [ 98.988545][ T7655] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012018: 0xa5e1 instead [ 98.992833][ T7655] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001203c: 0x7231 instead [ 98.997408][ T7655] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013000: 0x4255 instead [ 99.001585][ T7655] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013004: 0x0001 instead [ 99.005874][ T7655] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013018: 0xa5e1 instead [ 99.010552][ T7655] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001303c: 0x7231 instead [ 99.015189][ T7655] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014000: 0x4255 instead [ 99.019609][ T7655] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014004: 0x0001 instead [ 99.024824][ T7655] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014018: 0xa5e1 instead [ 99.029901][ T7655] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001403c: 0x7231 instead [ 99.035190][ T7655] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015000: 0x4255 instead [ 99.049973][ T7655] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015004: 0x0001 instead [ 99.060946][ T7655] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015018: 0xa5e1 instead [ 99.069504][ T7655] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001503c: 0x7231 instead [ 99.077066][ T7655] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016000: 0x4255 instead [ 99.080813][ T7655] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016004: 0x0001 instead [ 99.084820][ T7655] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016018: 0xa5e1 instead [ 99.089037][ T7655] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001603c: 0x7231 instead [ 99.093231][ T7655] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017000: 0x4255 instead [ 99.097331][ T7655] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017004: 0x0001 instead [ 99.106879][ T7655] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017018: 0xa5e1 instead [ 99.110783][ T7655] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001703c: 0x7231 instead [ 99.118220][ T7655] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018000: 0x4255 instead [ 99.123268][ T7655] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018004: 0x0001 instead [ 99.127378][ T7655] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018018: 0xa5e1 instead [ 99.132150][ T7673] bond1: (slave ip6gretap1): making interface the new active one [ 99.132716][ T7655] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001803c: 0x7231 instead [ 99.135484][ T7673] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 99.143870][ T7655] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019000: 0x4255 instead [ 99.147545][ T7655] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019004: 0x0001 instead [ 99.149003][ T7673] bond1: option mode: unable to set because the bond device has slaves [ 99.150624][ T7655] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019018: 0xa5e1 instead [ 99.159131][ T7655] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001903c: 0x7231 instead [ 99.163606][ T7655] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a000: 0x4255 instead [ 99.167664][ T7655] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a004: 0x0001 instead [ 99.171676][ T7655] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a018: 0xa5e1 instead [ 99.177559][ T7655] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a03c: 0x7231 instead [ 99.181994][ T7655] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b000: 0x4255 instead [ 99.186636][ T7655] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b004: 0x0001 instead [ 99.189790][ T7655] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b018: 0xa5e1 instead [ 99.192911][ T7655] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b03c: 0x7231 instead [ 99.196430][ T7655] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c000: 0x4255 instead [ 99.199576][ T7655] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c004: 0x0001 instead [ 99.202995][ T7655] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c018: 0xa5e1 instead [ 99.206629][ T7655] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c03c: 0x7231 instead [ 99.207121][ T7683] __nla_validate_parse: 6 callbacks suppressed [ 99.207132][ T7683] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.502'. [ 99.209727][ T7655] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d000: 0x4255 instead [ 99.209740][ T7655] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d004: 0x0001 instead [ 99.221530][ T7655] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d018: 0xa5e1 instead [ 99.225141][ T7655] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d03c: 0x7231 instead [ 99.228587][ T7655] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e000: 0x4255 instead [ 99.231829][ T7655] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e004: 0x0001 instead [ 99.235486][ T7655] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e018: 0xa5e1 instead [ 99.238914][ T7655] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e03c: 0x7231 instead [ 99.241960][ T7655] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f000: 0x4255 instead [ 99.245117][ T7655] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f004: 0x0001 instead [ 99.248150][ T7655] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f018: 0xa5e1 instead [ 99.251161][ T7655] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f03c: 0x7231 instead [ 99.254542][ T7655] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 99.257472][ T7655] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 99.261850][ T7690] futex_wake_op: syz.2.504 tries to shift op by -1; fix this program [ 99.345643][ T7699] fuse: Bad value for 'fd' [ 99.346924][ T7698] netlink: 4 bytes leftover after parsing attributes in process `syz.2.507'. [ 99.458978][ T7710] netlink: 76 bytes leftover after parsing attributes in process `syz.4.511'. [ 99.545915][ T7723] A2!±à: renamed from lo (while UP) [ 99.882629][ T7769] xt_NFQUEUE: number of total queues is 0 [ 99.921278][ T7771] warn_alloc: 9 callbacks suppressed [ 99.921304][ T7771] syz.2.519: vmalloc error: size 18446744073699066186, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 99.929628][ T7771] CPU: 1 UID: 0 PID: 7771 Comm: syz.2.519 Tainted: G L syzkaller #0 PREEMPT(full) [ 99.929662][ T7771] Tainted: [L]=SOFTLOCKUP [ 99.929670][ T7771] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 99.929685][ T7771] Call Trace: [ 99.929693][ T7771] [ 99.929703][ T7771] dump_stack_lvl+0x100/0x190 [ 99.929792][ T7771] warn_alloc.cold+0x94/0xa8 [ 99.929836][ T7771] ? __pfx_warn_alloc+0x10/0x10 [ 99.929882][ T7771] ? do_syscall_64+0x115/0x870 [ 99.929958][ T7771] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.929985][ T7771] ? __lock_acquire+0x49f/0x1a40 [ 99.930038][ T7771] ? find_held_lock+0x2b/0x80 [ 99.930060][ T7771] ? avc_has_extended_perms+0x33a/0x1080 [ 99.930131][ T7771] ? avc_has_extended_perms+0x33a/0x1080 [ 99.930156][ T7771] ? __UNIQUE_ID_modinfo_723+0x638bbfed/0xffffffffffec9ea3 [ 99.930231][ T7771] ? __UNIQUE_ID_modinfo_723+0x638bbfed/0xffffffffffec9ea3 [ 99.930266][ T7771] __vmalloc_node_range_noprof+0x136c/0x1630 [ 99.930314][ T7771] ? __UNIQUE_ID_modinfo_723+0x638bbfed/0xffffffffffec9ea3 [ 99.930349][ T7771] ? trace_contention_end+0x126/0x160 [ 99.930380][ T7771] ? dvb_demux_do_ioctl+0x9e0/0x1200 [ 99.930447][ T7771] ? dvb_demux_do_ioctl+0x929/0x1200 [ 99.930472][ T7771] ? find_held_lock+0x2b/0x80 [ 99.930494][ T7771] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 99.930525][ T7771] ? __pfx___mutex_lock+0x10/0x10 [ 99.930559][ T7771] ? tomoyo_path_number_perm+0x188/0x580 [ 99.930637][ T7771] ? __UNIQUE_ID_modinfo_723+0x638bbfed/0xffffffffffec9ea3 [ 99.930674][ T7771] ? dvb_demux_do_ioctl+0x9e0/0x1200 [ 99.930696][ T7771] __vmalloc_node_noprof+0xad/0xf0 [ 99.930726][ T7771] ? dvb_demux_do_ioctl+0x9e0/0x1200 [ 99.930748][ T7771] ? __UNIQUE_ID_modinfo_723+0x638bbfed/0xffffffffffec9ea3 [ 99.930785][ T7771] dvb_demux_do_ioctl+0x9e0/0x1200 [ 99.930808][ T7771] ? do_vfs_ioctl+0x226/0x13e0 [ 99.930850][ T7771] ? __UNIQUE_ID_modinfo_723+0x638bbfed/0xffffffffffec9ea3 [ 99.930880][ T7771] dvb_usercopy+0x167/0x340 [ 99.930912][ T7771] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 99.930932][ T7771] ? __UNIQUE_ID_modinfo_723+0x638bbfed/0xffffffffffec9ea3 [ 99.930964][ T7771] ? __pfx_dvb_usercopy+0x10/0x10 [ 99.931001][ T7771] ? __UNIQUE_ID_modinfo_723+0x638bbfed/0xffffffffffec9ea3 [ 99.931032][ T7771] ? __UNIQUE_ID_modinfo_723+0x638bbfed/0xffffffffffec9ea3 [ 99.931063][ T7771] ? selinux_file_ioctl+0x13b/0x290 [ 99.931082][ T7771] ? __UNIQUE_ID_modinfo_723+0x638bbfed/0xffffffffffec9ea3 [ 99.931112][ T7771] ? selinux_file_ioctl+0xb6/0x290 [ 99.931132][ T7771] ? __UNIQUE_ID_modinfo_723+0x638bbfed/0xffffffffffec9ea3 [ 99.931162][ T7771] ? __UNIQUE_ID_modinfo_723+0x638bbfed/0xffffffffffec9ea3 [ 99.931193][ T7771] dvb_demux_ioctl+0x29/0x40 [ 99.931219][ T7771] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 99.931248][ T7771] __x64_sys_ioctl+0x18e/0x210 [ 99.931279][ T7771] do_syscall_64+0x115/0x870 [ 99.931311][ T7771] ? clear_bhb_loop+0x70/0xc0 [ 99.931339][ T7771] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.931361][ T7771] RIP: 0033:0x7ff87cf9e0d9 [ 99.931379][ T7771] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 99.931398][ T7771] RSP: 002b:00007ff87de04028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 99.931418][ T7771] RAX: ffffffffffffffda RBX: 00007ff87d225fa0 RCX: 00007ff87cf9e0d9 [ 99.931433][ T7771] RDX: ffffffffff60014a RSI: 0000000000006f2d RDI: 0000000000000005 [ 99.931447][ T7771] RBP: 00007ff87d035024 R08: 0000000000000000 R09: 0000000000000000 [ 99.931461][ T7771] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 99.931475][ T7771] R13: 00007ff87d226038 R14: 00007ff87d225fa0 R15: 00007ffe1f7c0a28 [ 99.931498][ T7771] ? __UNIQUE_ID_modinfo_723+0x638bbfed/0xffffffffffec9ea3 [ 99.931539][ T7771] [ 99.931685][ T7771] Mem-Info: [ 99.944102][ T7769] netlink: 280 bytes leftover after parsing attributes in process `syz.4.518'. [ 100.104649][ T7771] active_anon:30102 inactive_anon:0 isolated_anon:0 [ 100.104649][ T7771] active_file:0 inactive_file:62235 isolated_file:0 [ 100.104649][ T7771] unevictable:1768 dirty:161 writeback:0 [ 100.104649][ T7771] slab_reclaimable:12198 slab_unreclaimable:68453 [ 100.104649][ T7771] mapped:25179 shmem:21864 pagetables:1481 [ 100.104649][ T7771] sec_pagetables:300 bounce:0 [ 100.104649][ T7771] kernel_misc_reclaimable:0 [ 100.104649][ T7771] free:422761 free_pcp:17823 free_cma:0 [ 100.119811][ T7771] Node 0 active_anon:120328kB inactive_anon:0kB active_file:0kB inactive_file:248688kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:100556kB dirty:632kB writeback:0kB shmem:83924kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:2048kB kernel_stack:13952kB pagetables:5500kB sec_pagetables:1200kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 100.131492][ T7771] Node 1 active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:256kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:52kB dirty:12kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:128kB pagetables:212kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 100.141282][ T7771] Node 0 DMA free:9184kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 100.151413][ T7771] lowmem_reserve[]: 0 1225 1225 1225 1225 [ 100.153895][ T7771] Node 0 DMA32 free:80380kB boost:0kB min:27396kB low:34244kB high:41092kB reserved_highatomic:0KB free_highatomic:0KB active_anon:120328kB inactive_anon:0kB active_file:0kB inactive_file:248688kB unevictable:3536kB writepending:632kB zspages:0kB present:2080628kB managed:1255200kB mlocked:0kB bounce:0kB free_pcp:25860kB local_pcp:8560kB free_cma:0kB [ 100.166429][ T7771] lowmem_reserve[]: 0 0 0 0 0 [ 100.168308][ T7771] Node 1 Normal free:1601972kB boost:0kB min:39840kB low:49800kB high:59760kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:256kB unevictable:3536kB writepending:12kB zspages:0kB present:2097152kB managed:1781884kB mlocked:0kB bounce:0kB free_pcp:45416kB local_pcp:4624kB free_cma:0kB [ 100.180046][ T7771] lowmem_reserve[]: 0 0 0 0 0 [ 100.182006][ T7771] Node 0 DMA: 0*4kB 0*8kB 0*16kB 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 2*1024kB (U) 2*2048kB (UM) 1*4096kB (U) = 11232kB [ 100.188410][ T7771] Node 0 DMA32: 871*4kB (UME) 339*8kB (UME) 317*16kB (UME) 593*32kB (UME) 226*64kB (UME) 65*128kB (UM) 25*256kB (UM) 23*512kB (UM) 11*1024kB (M) 1*2048kB (U) 0*4096kB = 84516kB [ 100.209490][ T7771] Node 1 Normal: 81*4kB (UM) 53*8kB (UM) 26*16kB (UME) 44*32kB (UM) 28*64kB (UM) 26*128kB (UM) 20*256kB (UME) 18*512kB (UME) 17*1024kB (UME) 15*2048kB (UE) 374*4096kB (UM) = 1602060kB [ 100.221754][ T7771] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 100.225654][ T7771] Node 0 hugepages_total=4 hugepages_free=0 hugepages_surp=2 hugepages_size=2048kB [ 100.229001][ T7771] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 100.232477][ T7771] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 100.235992][ T7771] 84098 total pagecache pages [ 100.239162][ T7771] 0 pages in swap cache [ 100.241065][ T7771] Free swap = 124996kB [ 100.242441][ T7771] Total swap = 124996kB [ 100.244981][ T7771] 1048443 pages RAM [ 100.246265][ T7771] 0 pages HighMem/MovableOnly [ 100.247694][ T7771] 285332 pages reserved [ 100.248940][ T7771] 0 pages cma reserved [ 100.308260][ T7797] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 100.321412][ T7797] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 100.331582][ T7797] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 100.339611][ T7797] UDF-fs: Scanning with blocksize 512 failed [ 100.344621][ T7797] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 100.348258][ T7797] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 100.351487][ T7797] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 100.355146][ T7797] UDF-fs: Scanning with blocksize 1024 failed [ 100.357769][ T7797] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 100.360832][ T7797] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 100.364573][ T7797] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 100.367711][ T7797] UDF-fs: Scanning with blocksize 2048 failed [ 100.371809][ T7797] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 100.375712][ T7797] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 100.378920][ T7797] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 100.381224][ T7797] UDF-fs: Scanning with blocksize 4096 failed [ 100.383043][ T7797] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1) [ 100.390550][ T7798] ubi: mtd0 is already attached to ubi16 [ 100.438329][ T7805] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 100.441451][ T7805] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 100.445060][ T7805] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found [ 100.448194][ T7805] UDF-fs: Scanning with blocksize 512 failed [ 100.451457][ T7805] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 100.455537][ T7805] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 100.459305][ T7805] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found [ 100.462234][ T7805] UDF-fs: Scanning with blocksize 1024 failed [ 100.466128][ T7805] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 100.470092][ T7805] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 100.473984][ T7805] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found [ 100.477484][ T7805] UDF-fs: Scanning with blocksize 2048 failed [ 100.481917][ T7805] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 100.485838][ T7805] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 100.489705][ T7805] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found [ 100.492766][ T7805] UDF-fs: Scanning with blocksize 4096 failed [ 100.495475][ T7805] UDF-fs: warning (device nbd0): udf_fill_super: No partition found (1) [ 100.510888][ T7805] ubi: mtd0 is already attached to ubi16 [ 100.549688][ T7809] netlink: 4 bytes leftover after parsing attributes in process `syz.4.528'. [ 100.583075][ T7813] xt_NFQUEUE: number of total queues is 0 [ 100.726769][ T42] kauditd_printk_skb: 21 callbacks suppressed [ 100.726786][ T42] audit: type=1400 audit(1786071550.893:17870): avc: denied { read } for pid=7825 comm="syz.0.535" dev="nsfs" ino=4026533015 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 100.734182][ T7828] netlink: 12 bytes leftover after parsing attributes in process `syz.0.535'. [ 100.738247][ T42] audit: type=1400 audit(1786071550.913:17871): avc: denied { open } for pid=7825 comm="syz.0.535" path="net:[4026533015]" dev="nsfs" ino=4026533015 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 100.740606][ T7828] netlink: 12 bytes leftover after parsing attributes in process `syz.0.535'. [ 100.819626][ T7839] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 100.826411][ T7839] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 100.830292][ T7839] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found [ 100.835338][ T7839] UDF-fs: Scanning with blocksize 512 failed [ 100.837802][ T34] usb 6-1: USB disconnect, device number 11 [ 100.849417][ T7839] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 100.863866][ T7839] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 100.867598][ T7839] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found [ 100.870674][ T7839] UDF-fs: Scanning with blocksize 1024 failed [ 100.876225][ T7839] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 100.881929][ T7839] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 100.886104][ T7839] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found [ 100.889176][ T7839] UDF-fs: Scanning with blocksize 2048 failed [ 100.892057][ T7839] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 100.902807][ T7839] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 100.907118][ T7839] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found [ 100.910679][ T7839] UDF-fs: Scanning with blocksize 4096 failed [ 100.915304][ T7839] UDF-fs: warning (device nbd0): udf_fill_super: No partition found (1) [ 100.921641][ T7844] ubi: mtd0 is already attached to ubi16 [ 100.962078][ T42] audit: type=1400 audit(1786071551.133:17872): avc: denied { watch_reads } for pid=7845 comm="syz.2.544" path="/133" dev="tmpfs" ino=724 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 101.025702][ T42] audit: type=1400 audit(1786071551.203:17873): avc: denied { write } for pid=7858 comm="syz.0.547" name="core" dev="configfs" ino=5807 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 101.047204][ T42] audit: type=1400 audit(1786071551.223:17874): avc: denied { write } for pid=7858 comm="syz.0.547" name="functions" dev="configfs" ino=14782 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 101.058107][ T42] audit: type=1400 audit(1786071551.233:17875): avc: denied { write } for pid=7858 comm="syz.0.547" name="target" dev="configfs" ino=5806 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 101.064946][ T7853] netlink: 4 bytes leftover after parsing attributes in process `syz.1.545'. [ 101.116088][ T42] audit: type=1400 audit(1786071551.283:17876): avc: denied { write } for pid=7858 comm="syz.0.547" name="usb_gadget" dev="configfs" ino=25816 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 101.120563][ T7870] [ 101.126255][ T7870] ====================================================== [ 101.127130][ T42] audit: type=1400 audit(1786071551.293:17877): avc: denied { write } for pid=7858 comm="syz.0.547" name="naa.6001405123456789" dev="configfs" ino=25152 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 101.128872][ T7870] WARNING: possible circular locking dependency detected [ 101.128887][ T7870] syzkaller #0 Tainted: G L [ 101.128897][ T7870] ------------------------------------------------------ [ 101.128903][ T7870] syz.0.547/7870 is trying to acquire lock: [ 101.128913][ T7870] ffff888020088f80 (&sb->s_type->i_mutex_key#26){++++}-{4:4}, at: configfs_depend_item_unlocked+0xf3/0x6a0 [ 101.151177][ T7870] [ 101.151177][ T7870] but task is already holding lock: [ 101.153703][ T7870] ffff88805425d918 (&opts->dep_lock){+.+.}-{4:4}, at: usbg_make_tpg+0x1a4/0x620 [ 101.156672][ T7870] [ 101.156672][ T7870] which lock already depends on the new lock. [ 101.156672][ T7870] [ 101.160211][ T7870] [ 101.160211][ T7870] the existing dependency chain (in reverse order) is: [ 101.163144][ T7870] [ 101.163144][ T7870] -> #2 (&opts->dep_lock){+.+.}-{4:4}: [ 101.166035][ T7870] lock_acquire+0x1b9/0x370 [ 101.167817][ T7870] __mutex_lock+0x1a4/0x1bd0 [ 101.169380][ T7870] tcm_set_name+0x29/0xb0 [ 101.171078][ T7870] function_make+0x21c/0x3f0 [ 101.173017][ T7870] configfs_mkdir+0x51e/0xb70 [ 101.174836][ T7870] vfs_mkdir+0x361/0x850 [ 101.176305][ T7870] filename_mkdirat+0x48b/0x5e0 [ 101.178212][ T7870] __x64_sys_mkdirat+0x89/0xc0 [ 101.180221][ T7870] do_syscall_64+0x115/0x870 [ 101.181882][ T7870] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.183945][ T7870] [ 101.183945][ T7870] -> #1 (gadget_subsys.su_mutex){+.+.}-{4:4}: [ 101.187035][ T7870] lock_acquire+0x1b9/0x370 [ 101.188773][ T7870] __mutex_lock+0x1a4/0x1bd0 [ 101.190319][ T7870] configfs_rmdir+0x79a/0x950 [ 101.192197][ T7870] vfs_rmdir+0x328/0x8a0 [ 101.194068][ T7870] filename_rmdir+0x31a/0x5c0 [ 101.195786][ T7870] __x64_sys_rmdir+0x46/0x70 [ 101.197383][ T7870] do_syscall_64+0x115/0x870 [ 101.199280][ T7870] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.201599][ T7870] [ 101.201599][ T7870] -> #0 (&sb->s_type->i_mutex_key#26){++++}-{4:4}: [ 101.204254][ T7870] check_prev_add+0xeb/0xe60 [ 101.206195][ T7870] __lock_acquire+0x136c/0x1a40 [ 101.208094][ T7870] lock_acquire+0x1b9/0x370 [ 101.209617][ T7870] down_write+0x8b/0x1f0 [ 101.211433][ T7870] configfs_depend_item_unlocked+0xf3/0x6a0 [ 101.212995][ T42] audit: type=1400 audit(1786071551.383:17878): avc: denied { firmware_load } for pid=7866 comm="syz.4.550" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 101.213980][ T7870] usbg_make_tpg+0x261/0x620 [ 101.213998][ T7870] target_fabric_make_tpg+0xab/0x8c0 [ 101.214040][ T7870] configfs_mkdir+0x51e/0xb70 [ 101.214054][ T7870] vfs_mkdir+0x361/0x850 [ 101.214068][ T7870] filename_mkdirat+0x48b/0x5e0 [ 101.231866][ T7870] __x64_sys_mkdirat+0x89/0xc0 [ 101.233764][ T7870] do_syscall_64+0x115/0x870 [ 101.235317][ T7870] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.237666][ T7870] [ 101.237666][ T7870] other info that might help us debug this: [ 101.237666][ T7870] [ 101.241053][ T7870] Chain exists of: [ 101.241053][ T7870] &sb->s_type->i_mutex_key#26 --> gadget_subsys.su_mutex --> &opts->dep_lock [ 101.241053][ T7870] [ 101.246181][ T7870] Possible unsafe locking scenario: [ 101.246181][ T7870] [ 101.248933][ T7870] CPU0 CPU1 [ 101.250954][ T7870] ---- ---- [ 101.252953][ T7870] lock(&opts->dep_lock); [ 101.254652][ T7870] lock(gadget_subsys.su_mutex); [ 101.257450][ T7870] lock(&opts->dep_lock); [ 101.259765][ T7870] lock(&sb->s_type->i_mutex_key#26); [ 101.261412][ T7870] [ 101.261412][ T7870] *** DEADLOCK *** [ 101.261412][ T7870] [ 101.264441][ T7870] 5 locks held by syz.0.547/7870: [ 101.266167][ T7870] #0: ffff8880248b6450 (sb_writers#15){.+.+}-{0:0}, at: filename_create+0x10d/0x400 [ 101.269342][ T7870] #1: ffff88805ecf8ac0 (&sb->s_type->i_mutex_key#7/1){+.+.}-{4:4}, at: filename_create+0x1c0/0x400 [ 101.273215][ T7870] #2: ffffffff8fd884e8 (&subsys->su_mutex){+.+.}-{4:4}, at: configfs_mkdir+0x4b5/0xb70 [ 101.276095][ T7870] #3: ffffffff90253800 (tpg_instances_lock){+.+.}-{4:4}, at: usbg_make_tpg+0x10b/0x620 [ 101.278921][ T7870] #4: ffff88805425d918 (&opts->dep_lock){+.+.}-{4:4}, at: usbg_make_tpg+0x1a4/0x620 [ 101.281695][ T7870] [ 101.281695][ T7870] stack backtrace: [ 101.283495][ T7870] CPU: 3 UID: 0 PID: 7870 Comm: syz.0.547 Tainted: G L syzkaller #0 PREEMPT(full) [ 101.283511][ T7870] Tainted: [L]=SOFTLOCKUP [ 101.283514][ T7870] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 101.283522][ T7870] Call Trace: [ 101.283527][ T7870] [ 101.283533][ T7870] dump_stack_lvl+0x100/0x190 [ 101.283549][ T7870] print_circular_bug.cold+0x178/0x1c7 [ 101.283568][ T7870] check_noncircular+0x146/0x160 [ 101.283582][ T7870] check_prev_add+0xeb/0xe60 [ 101.283595][ T7870] __lock_acquire+0x136c/0x1a40 [ 101.283608][ T7870] ? rcu_is_watching+0x12/0xc0 [ 101.283640][ T7870] lock_acquire+0x1b9/0x370 [ 101.283654][ T7870] ? configfs_depend_item_unlocked+0xf3/0x6a0 [ 101.283670][ T7870] ? __pfx___might_resched+0x10/0x10 [ 101.283692][ T7870] down_write+0x8b/0x1f0 [ 101.283709][ T7870] ? configfs_depend_item_unlocked+0xf3/0x6a0 [ 101.283723][ T7870] ? __pfx_down_write+0x10/0x10 [ 101.283739][ T7870] configfs_depend_item_unlocked+0xf3/0x6a0 [ 101.283754][ T7870] ? __lock_acquire+0x49f/0x1a40 [ 101.283768][ T7870] usbg_make_tpg+0x261/0x620 [ 101.283782][ T7870] ? __pfx_usbg_make_tpg+0x10/0x10 [ 101.283795][ T7870] ? find_held_lock+0x2b/0x80 [ 101.283805][ T7870] ? __pfx_usbg_make_tpg+0x10/0x10 [ 101.283822][ T7870] target_fabric_make_tpg+0xab/0x8c0 [ 101.283840][ T7870] configfs_mkdir+0x51e/0xb70 [ 101.283855][ T7870] ? __pfx_target_fabric_make_tpg+0x10/0x10 [ 101.283872][ T7870] ? __pfx_configfs_mkdir+0x10/0x10 [ 101.283887][ T7870] ? inode_permission+0x374/0x620 [ 101.283904][ T7870] vfs_mkdir+0x361/0x850 [ 101.283919][ T7870] filename_mkdirat+0x48b/0x5e0 [ 101.283933][ T7870] ? __pfx_filename_mkdirat+0x10/0x10 [ 101.283945][ T7870] ? strncpy_from_user+0x19d/0x2d0 [ 101.283988][ T7870] ? do_getname+0x191/0x390 [ 101.284008][ T7870] __x64_sys_mkdirat+0x89/0xc0 [ 101.284022][ T7870] do_syscall_64+0x115/0x870 [ 101.284035][ T7870] ? clear_bhb_loop+0x70/0xc0 [ 101.284048][ T7870] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.284060][ T7870] RIP: 0033:0x7f588fd9e0d9 [ 101.284069][ T7870] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 101.284080][ T7870] RSP: 002b:00007f5890c6f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 101.284091][ T7870] RAX: ffffffffffffffda RBX: 00007f5890026090 RCX: 00007f588fd9e0d9 [ 101.284098][ T7870] RDX: 00000000000001ff RSI: 0000200000000740 RDI: ffffffffffffff9c [ 101.284104][ T7870] RBP: 00007f588fe35024 R08: 0000000000000000 R09: 0000000000000000 [ 101.284111][ T7870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 101.284117][ T7870] R13: 00007f5890026128 R14: 00007f5890026090 R15: 00007ffcec00dfa8 [ 101.284126][ T7870] [ 101.343199][ T5885] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 101.368203][ T42] audit: type=1400 audit(1786071551.533:17879): avc: denied { write } for pid=7858 comm="syz.0.547" name="lun" dev="configfs" ino=25156 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 101.377644][ T7867] syz.4.550 (7867) used greatest stack depth: 18080 bytes left [ 101.525853][ T5885] usb 7-1: unable to get BOS descriptor or descriptor too short [ 101.528912][ T5885] usb 7-1: not running at top speed; connect to a high speed hub [ 101.532471][ T5885] usb 7-1: config 14 has an invalid interface number: 57 but max is 1 [ 101.535525][ T5885] usb 7-1: config 14 has an invalid interface number: 228 but max is 1 [ 101.538260][ T5885] usb 7-1: config 14 has no interface number 0 [ 101.540709][ T5885] usb 7-1: config 14 has no interface number 1 [ 101.542974][ T5885] usb 7-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 101.546803][ T5885] usb 7-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0x1B, changing to 0xB [ 101.550908][ T5885] usb 7-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 101.555890][ T5885] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 62089, setting to 64 [ 101.560365][ T5885] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 218, changing to 4 [ 101.565427][ T5885] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x9 has invalid maxpacket 6680, setting to 1023 [ 101.570067][ T5885] usb 7-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 101.574427][ T5885] usb 7-1: config 14 interface 57 has no altsetting 0 [ 101.576916][ T5885] usb 7-1: config 14 interface 228 has no altsetting 0 [ 101.580559][ T5885] usb 7-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 101.583608][ T5885] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.586788][ T5885] usb 7-1: Product: syz [ 101.588112][ T5885] usb 7-1: Manufacturer: syz [ 101.589547][ T5885] usb 7-1: SerialNumber: syz [ 102.001578][ T5885] legousbtower 7-1:14.57: interrupt endpoints not found [ 102.202397][ T5885] legousbtower 7-1:14.228: interrupt endpoints not found [ 104.127156][ T5885] usb 7-1: USB disconnect, device number 3