last executing test programs: 14m10.02999012s ago: executing program 4 (id=216): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000002040)='net/tcp\x00') read$FUSE(r1, &(0x7f0000000000)={0x2020}, 0x96) read$FUSE(r1, &(0x7f0000004440)={0x2020}, 0x2020) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, 0x0, 0x210) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0xfffffffd, @empty}, 0x1c) r6 = socket(0x10, 0x2, 0x0) write(r6, &(0x7f0000000480)="1c0000001a009b8a140000003b000000000000000000000000000000fda35065733173ae72a0d270d958f739b6d44c893b03599f77a332b446ea93568ae2ff534952656c6a18b6c0fdcec321127ee28705f2496eb43654255c5cc688f71db82bab173f4e19361ac01c1b0a2d2229993c8308ab7721e4c33c5fc214cd64a17d552a0fa33011d3ccceb56738a8c7e690d5843333", 0x93) recvmmsg(r6, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x12, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 14m5.915598335s ago: executing program 4 (id=222): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2108800, &(0x7f0000000280), 0x3, 0x57e, &(0x7f00000002c0)="$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") r0 = creat(&(0x7f0000000340)='./file0\x00', 0x28) close(r0) r1 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x80, &(0x7f0000000700)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303030303030303134303030302c757365725f69643d90b66335e8b867979ab238a7a192c585c492d22e09d7e842b2ae348e6c087cd210f6124878827a8f62c1d78e78b3c31f2b86801f77b07b7a", @ANYRESDEC=0x0, @ANYBLOB=',grou', @ANYBLOB=',\x00']) ioctl$KVM_PPC_ALLOCATE_HTAB(0xffffffffffffffff, 0xc004aea7, &(0x7f0000000140)=0x4) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000000), 0x2000000, &(0x7f0000000080)=ANY=[@ANYBLOB="7472746e733d6601007266646e6f3d", @ANYBLOB=',wfdno=', @ANYBLOB]) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000040), 0x3, 0x5eb, &(0x7f0000000c00)="$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") openat$incfs(r0, &(0x7f0000000180)='.log\x00', 0x4000, 0xc8) r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r2, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) r3 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) r4 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x11, 0x4, @tid=r4}, 0x0) fgetxattr(r3, 0x0, &(0x7f0000002900)=""/254, 0xfe) timer_settime(0x0, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, 0x0, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, 0x0, 0x8c5) socket$inet6_tcp(0xa, 0x1, 0x0) accept4$packet(r3, 0x0, 0x0, 0xc0000) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x68c01, 0x0) write$binfmt_format(r7, &(0x7f0000006240)='-1\x00', 0x3) fallocate(r6, 0x0, 0x0, 0x8800000) 14m3.564997162s ago: executing program 4 (id=226): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000002040)='net/tcp\x00') read$FUSE(r1, &(0x7f0000000000)={0x2020}, 0x96) read$FUSE(r1, &(0x7f0000004440)={0x2020}, 0x2020) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, 0x0, 0x210) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet6(0xa, 0x3, 0xff) r6 = socket(0x10, 0x2, 0x0) write(r6, &(0x7f0000000480)="1c0000001a009b8a140000003b000000000000000000000000000000fda35065733173ae72a0d270d958f739b6d44c893b03599f77a332b446ea93568ae2ff534952656c6a18b6c0fdcec321127ee28705f2496eb43654255c5cc688f71db82bab173f4e19361ac01c1b0a2d2229993c8308ab7721e4c33c5fc214cd64a17d552a0fa33011d3ccceb56738a8c7e690d5843333", 0x93) recvmmsg(r6, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x12, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 13m58.275151405s ago: executing program 4 (id=231): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r4, 0x6, 0x13, 0x0, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x14, r5, 0x4c466994d56c53cd, 0x70bd27}, 0x14}}, 0x8000) 13m57.236514628s ago: executing program 4 (id=233): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) listxattr(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}, 0x1, 0x0, 0x0, 0x68840}, 0x4) recvmmsg(r2, &(0x7f00000004c0)=[{{0x0, 0x0, &(0x7f00000022c0)=[{&(0x7f0000000f80)=""/51, 0x33}, {&(0x7f0000000fc0)=""/4082, 0xff2}, {&(0x7f0000002000)=""/53, 0x35}, {&(0x7f0000000bc0)=""/52, 0x34}, {&(0x7f0000002200)=""/167, 0xa7}], 0x5}, 0xfff}], 0x1, 0x40012100, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r5 = openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) write$binfmt_register(r5, &(0x7f00000000c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x3, 0x3a, '\\x00\x00\x00', 0x3a, ':dev/bus/usbF30#/00#\x00', 0x3a, './file0'}, 0x42) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x410, 0x0, 0x2b8, 0xb0000010, 0x290, 0x5c8f0200, 0x388, 0x3a8, 0x3a8, 0x388, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @local, [], [], 'vlan1\x00', 'veth0_to_team\x00'}, 0x0, 0x200, 0x248, 0x700, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve1\x00', {0xf1, 0x0, 0x33, 0x0, 0x0, 0x1, 0x7fffffff}}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x206, 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x470) r6 = socket(0x10, 0x3, 0x0) write(r6, &(0x7f0000000000)="fc0000001a000700ab092500090007000aab0700a90100001d60369321000100ff0500000005d0000000000000039815fa2c1ec28656aaa79bb94b46fe000000bcf503000500000014000027000089fee1434f1e596534d07302ade0bbc91a3e3280772c05defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a46d284a710af333ae4f5566f91cf190201800015b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb00d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48a99c03f080548deac270e33429fd3000175e63fb8d38a8700"/252, 0xfc) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) waitid(0x1, r1, 0x0, 0x8, &(0x7f0000000300)) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r0) 13m53.496922331s ago: executing program 4 (id=235): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x2, 0xb9, &(0x7f0000000140)=""/185, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4f22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[], 0x0, 0x2b, 0x0, 0x1}, 0x28) sendmsg$NL80211_CMD_GET_WOWLAN(0xffffffffffffffff, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000440)=ANY=[@ANYRES16, @ANYBLOB="01030000000000000000050000", @ANYRES32], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x20048040) recvmsg(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x40000) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) r5 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r5, 0x0, 0x4) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000480)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="070600000000000000002d0000000c0005000201aaaaaaaaaaaa0a0001007770616e3000000008002f000500000005002e001500000005002b00f7"], 0x44}}, 0x40000) 13m36.873030606s ago: executing program 32 (id=235): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x2, 0xb9, &(0x7f0000000140)=""/185, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4f22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[], 0x0, 0x2b, 0x0, 0x1}, 0x28) sendmsg$NL80211_CMD_GET_WOWLAN(0xffffffffffffffff, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000440)=ANY=[@ANYRES16, @ANYBLOB="01030000000000000000050000", @ANYRES32], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x20048040) recvmsg(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x40000) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) r5 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r5, 0x0, 0x4) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000480)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="070600000000000000002d0000000c0005000201aaaaaaaaaaaa0a0001007770616e3000000008002f000500000005002e001500000005002b00f7"], 0x44}}, 0x40000) 12m24.438280557s ago: executing program 3 (id=379): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000002040)='net/tcp\x00') read$FUSE(r1, &(0x7f0000000000)={0x2020}, 0x96) read$FUSE(r1, &(0x7f0000004440)={0x2020}, 0x2020) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, 0x0, 0x210) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r6 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0xfffffffd, @empty}, 0x1c) r7 = socket(0x10, 0x2, 0x0) write(r7, &(0x7f0000000480)="1c0000001a009b8a140000003b000000000000000000000000000000fda35065733173ae72a0d270d958f739b6d44c893b03599f77a332b446ea93568ae2ff534952656c6a18b6c0fdcec321127ee28705f2496eb43654255c5cc688f71db82bab173f4e19361ac01c1b0a2d2229993c8308ab7721e4c33c5fc214cd64a17d552a0fa33011d3ccceb56738a8c7e690d58433", 0x92) recvmmsg(r7, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x12, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 12m22.587252727s ago: executing program 3 (id=384): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000002040)='net/tcp\x00') read$FUSE(r1, &(0x7f0000000000)={0x2020}, 0x96) read$FUSE(r1, &(0x7f0000004440)={0x2020}, 0x2020) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, 0x0, 0x210) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r6 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0xfffffffd, @empty}, 0x1c) r7 = socket(0x10, 0x2, 0x0) write(r7, &(0x7f0000000480)="1c0000001a009b8a140000003b000000000000000000000000000000fda35065733173ae72a0d270d958f739b6d44c893b03599f77a332b446ea93568ae2ff534952656c6a18b6c0fdcec321127ee28705f2496eb43654255c5cc688f71db82bab173f4e19361ac01c1b0a2d2229993c8308ab7721e4c33c5fc214cd64a17d552a0fa33011d3ccceb56738a8c7e690d584", 0x91) recvmmsg(r7, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x12, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 12m19.614598264s ago: executing program 3 (id=389): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x203, 0x0) ioctl$TCSBRKP(r4, 0x5425, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/partitions\x00', 0x0, 0x0) ioctl$TCSETSF(r4, 0x5404, 0x0) connect$pppl2tp(r3, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) syz_emit_ethernet(0x4c, &(0x7f0000000380)=ANY=[], 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="8c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e000000004000028006000100fe0f000004000480280003800c00010040000000060000000c003900ff04000000000000d8fd010006000000090000000600050088a8000008000a00", @ANYRES32=r5, @ANYBLOB='\b\x00', @ANYRES64=r5], 0x8c}, 0x1, 0xba01, 0x0, 0x4004001}, 0x0) 12m16.99890107s ago: executing program 3 (id=391): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000002040)='net/tcp\x00') read$FUSE(r1, &(0x7f0000000000)={0x2020}, 0x96) read$FUSE(r1, &(0x7f0000004440)={0x2020}, 0x2020) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, 0x0, 0x210) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r6 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r6, 0x0, 0x0) r7 = socket(0x10, 0x2, 0x0) write(r7, &(0x7f0000000480)="1c0000001a009b8a140000003b000000000000000000000000000000fda35065733173ae72a0d270d958f739b6d44c893b03599f77a332b446ea93568ae2ff534952656c6a18b6c0fdcec321127ee28705f2496eb43654255c5cc688f71db82bab173f4e19361ac01c1b0a2d2229993c8308ab7721e4c33c5fc214cd64a17d552a0fa33011d3ccceb56738a8c7e690d5843333", 0x93) recvmmsg(r7, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x12, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 12m15.015558105s ago: executing program 3 (id=395): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000002040)='net/tcp\x00') read$FUSE(r1, &(0x7f0000000000)={0x2020}, 0x96) read$FUSE(r1, &(0x7f0000004440)={0x2020}, 0x2020) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, 0x0, 0x210) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r6 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0xfffffffd, @empty}, 0x1c) r7 = socket(0x10, 0x2, 0x0) write(r7, &(0x7f0000000480)="1c0000001a009b8a140000003b000000000000000000000000000000fda35065733173ae72a0d270d958f739b6d44c893b03599f77a332b446ea93568ae2ff534952656c6a18b6c0fdcec321127ee28705f2496eb43654255c5cc688f71db82bab173f4e19361ac01c1b0a2d2229993c8308ab7721e4c33c5fc214cd64a17d552a0fa33011d3ccceb56738a8c7e690d584", 0x91) recvmmsg(r7, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x12, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 12m11.931838896s ago: executing program 3 (id=399): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x3d, 0x0, &(0x7f00000000c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x310, 0x0, 0x268, 0x33a, 0x0, 0x268, 0x240, 0x460, 0x460, 0x240, 0x460, 0xc, 0x0, {[{{@uncond, 0x0, 0x108, 0x150, 0xd8000000, {0x9402}, [@common=@hl={{0x28}, {0x0, 0x9b}}, @common=@unspec=@statistic={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x8, 'syz1\x00', {0x1}}}}, {{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00', 0x2}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x370) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x72) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) utime(&(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@errors_remount}, {@min_batch_time={'min_batch_time', 0x3d, 0xd}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@data_err_ignore}, {@dioread_lock}]}, 0x3, 0x451, &(0x7f0000000340)="$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") r4 = openat$incfs(0xffffffffffffff9c, 0x0, 0x1a10c1, 0x9c37611dc13d0da6) fchown(r4, 0xffffffffffffffff, 0xee01) 11m56.287187458s ago: executing program 33 (id=399): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x3d, 0x0, &(0x7f00000000c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x310, 0x0, 0x268, 0x33a, 0x0, 0x268, 0x240, 0x460, 0x460, 0x240, 0x460, 0xc, 0x0, {[{{@uncond, 0x0, 0x108, 0x150, 0xd8000000, {0x9402}, [@common=@hl={{0x28}, {0x0, 0x9b}}, @common=@unspec=@statistic={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x8, 'syz1\x00', {0x1}}}}, {{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00', 0x2}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x370) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x72) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) utime(&(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@errors_remount}, {@min_batch_time={'min_batch_time', 0x3d, 0xd}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@data_err_ignore}, {@dioread_lock}]}, 0x3, 0x451, &(0x7f0000000340)="$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") r4 = openat$incfs(0xffffffffffffff9c, 0x0, 0x1a10c1, 0x9c37611dc13d0da6) fchown(r4, 0xffffffffffffffff, 0xee01) 11m12.911634438s ago: executing program 0 (id=554): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) io_uring_setup(0x4a86, &(0x7f0000000300)={0x0, 0x4178, 0x40, 0x3, 0x4a}) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbaf, &(0x7f0000002f00)="$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") r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x1a9b42, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x10000003) mmap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000009, 0x12, r1, 0x954c3000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r5, &(0x7f0000004200)='t', 0x1) sendfile(r5, r4, 0x0, 0x3ffff) write(r3, 0x0, 0x0) sendfile(r3, r2, 0x0, 0x3ffff) sendfile(r3, r2, 0x0, 0x7ffff000) clock_nanosleep(0xfffffff2, 0xca9a3b, &(0x7f0000000140)={0x77359400}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000800)={r6, &(0x7f00000004c0), &(0x7f0000000700)=""/226}, 0x20) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=@newsa={0xf0, 0x10, 0x413, 0x0, 0x25dfdbfa, {{@in=@rand_addr=0x64010100, @in=@remote, 0x0, 0x0, 0x4e24, 0x0, 0x2, 0xa0, 0xa0, 0x6}, {@in=@loopback, 0x4d4, 0x32}, @in=@multicast1, {0x0, 0x2, 0x5, 0xb, 0xffffffffffffffff, 0x10, 0x20000000007}, {0x0, 0x400, 0x4, 0x400}, {0x400000f6, 0x0, 0x7}, 0x70bd26, 0x0, 0xa, 0x4, 0x4}}, 0xf0}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) 11m12.046471326s ago: executing program 0 (id=563): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x141141, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x10, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f008004ce0", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0xfdef) 11m11.817112844s ago: executing program 0 (id=565): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, 0x0, 0x4042014) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet_icmp(0x2, 0x2, 0x1) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000980)="91f8a9849519def28691bbc4173c3d6f357d0272b7e95a136b3ffec75b73e6937b7b22a1319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de25000000000000f2ffffff2e3591ceb1757de97fb25500620d0d30506e7429fa5337b74945da657f794d5b5bf89588e07b14a17f069912dc0c3f201bff8b9a687b85baa11244632642a9be7b42b6b5882b738f05eba73221490e2d5c17cf406be2796eec488a5b5268f507ee8d6f3dd1d64abc785708eb9bd24e352a984b2b", 0xc5}], 0x1}}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000001500)="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", 0x3ed}], 0x1}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 11m10.961760582s ago: executing program 0 (id=572): r0 = getpid() syz_pidfd_open(r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x1004408, &(0x7f0000000240), 0x1, 0x782, &(0x7f0000000b00)="$eJzs3M9rHOUbAPBnJtmkP/L9JoIH9SBCCy2UbpLm0p6MF/FSKBS81pBMQsgkW7Kb2sRCG89CbS4Kgujdo1eh1D/AmxQU/AtEay7iZWU2mzQ/dtOkTbI1/XxgmPd95933eZ+d3Zcd2JkAXlnvNPd9EXEtIvqb9TQiehqlExH31vqtPrkzXmxJ1OvX/0giKdrq/RtjJc396Wi8JN6IiEeliAuf7oxbXVyaGcvzbL5ZH6zN3hysLi5dnJ4dm8qmsrnhkStDl0dGLg+NHFiuZz+8cvLBT++vrPz8fe3+290Xkxht5B3N3A4s0CZr70kpRre1zx1GsA5K6s/u030UEwEAYFfF7/yu5r4U/dHlVxoAAAAcO/XeOgAAAHDsJdHpGQAAAACHa/1/AOv39h7WfbDt/P5eRAy0it/duIc44kSUIuLUarLlzoRk7WXwQu4tR8TD0Rafv6T5+Xt+Q9vqyQuOx8F7WKw/o63Wn3Rj/YkW60/3pmcnvIhi/Su1XH+fxu9qs/5dazXgyZ1NP3z9Zqlt/OWIt7pbxU824idt4n/UcsTlHS33Vz570C5+/duIcy3zT7bEGqwV52H9+RBdm58PMTg5ne/61Xr0z/nHu+V/akf8JGlETXbP/+ZuQTf5ZPWvmXZrSRH//Jm1+F1bjqTb3v/eLUeLvp8355FGxIPmvqivbItxZvaXH3dGTu6tx59o8/63Pv8fbOT/zR7z/+273tt77AoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANaUT0RZKWN8ppWi5HnI6I1+NUmleqtQuTlYW5ieJYxECU0snpPBuKiP61elLUhxvlp/VL2+ojEfHaryfXgk7nWXm8kk90OnkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2nI6IvkjSckSkEdG9a++eI5sXAAAAcMAGdjYlkXRiJgAAAMBhaXH9DwAAABwzz3v97y8CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwD5cu3q12OqrT+6MF/WJW4sLM5VbFyey6kx5dmG8PF6Zv1meqlSm8qw8Xpl91nhpRAxfiYXbg7WsWhusLi7dmK0szNVuTM+OTWU3stKRZAUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMB+9TW2JC1HRNoop2m5HPG/iBiIUjI5nWdDEfH/iHjcX+ot6sOdnjQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHrrq4NDOW59m8wn+xEEnESzCNV6nQ7isTsZ9x7sbLfuI6vTIBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANAJ1cWlmbE8z+arnZ4JAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnVSv1+tJRBTbuf6zfduP9yR/9zf2EfHxV9e/uD1Wq80PF+1/brTXvmy2X9r0wrtHmQUAAAAce+/up/P6dfr6dTwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBeVReXZsbyPJvfe6E3Inbr0xMRW1piudNZAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAz+PfAAAA//8wfrtl") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x44}, 0x1, 0x0, 0x0, 0x44010}, 0x20040800) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r4, &(0x7f0000000200)=""/179, 0xb3) ioctl$BTRFS_IOC_SET_FEATURES(r4, 0x40309439, &(0x7f0000000000)={0x1, 0x1, 0x2}) 11m10.773840668s ago: executing program 0 (id=574): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) io_uring_setup(0x4a86, &(0x7f0000000300)={0x0, 0x4178, 0x40, 0x3, 0x4a}) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbaf, &(0x7f0000002f00)="$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") r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x1a9b42, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x10000003) mmap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000009, 0x12, r1, 0x954c3000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r5, &(0x7f0000004200)='t', 0x1) sendfile(r5, r4, 0x0, 0x3ffff) write(r3, 0x0, 0x0) sendfile(r3, r2, 0x0, 0x3ffff) sendfile(r3, r2, 0x0, 0x7ffff000) clock_nanosleep(0xfffffff2, 0xca9a3b, &(0x7f0000000140)={0x77359400}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000800)={r6, &(0x7f00000004c0), &(0x7f0000000700)=""/226}, 0x20) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=@newsa={0xf0, 0x10, 0x413, 0x0, 0x25dfdbfa, {{@in=@rand_addr=0x64010100, @in=@remote, 0x0, 0x0, 0x4e24, 0x0, 0x2, 0xa0, 0xa0, 0x6}, {@in=@loopback, 0x4d4, 0x32}, @in=@multicast1, {0x0, 0x2, 0x5, 0xb, 0xffffffffffffffff, 0x10, 0x20000000007}, {0x0, 0x400, 0x4, 0x400}, {0x400000f6, 0x0, 0x7}, 0x70bd26, 0x0, 0xa, 0x4, 0x4}}, 0xf0}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) 11m10.634630752s ago: executing program 0 (id=576): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000700)={@id={0x2, 0x0, @a}, 0x40, 0x0, '\x00', @a}) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f00000006c0)=@v2={0x2, @adiantum, 0x0, '\x00', @a}) chdir(&(0x7f00000002c0)='mnt/encrypted_dir\x00') symlink(&(0x7f0000000080)='mnt\x00', &(0x7f00000000c0)='./file0\x00') ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r0, 0xc0406619, &(0x7f0000000140)={@id={0x2, 0x0, @a}}) stat(&(0x7f0000000980)='./file0\x00', 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x0, &(0x7f0000000080)}, 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x400000000000000, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0xe, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0x0, 0x0, {0x6, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@private0, @in=@broadcast}}]}, 0x50}}, 0x0) syz_usb_connect$uac1(0x0, 0x94, 0x0, 0x0) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2000, &(0x7f0000003700)={0x77359400}) 11m10.502059386s ago: executing program 34 (id=576): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000700)={@id={0x2, 0x0, @a}, 0x40, 0x0, '\x00', @a}) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f00000006c0)=@v2={0x2, @adiantum, 0x0, '\x00', @a}) chdir(&(0x7f00000002c0)='mnt/encrypted_dir\x00') symlink(&(0x7f0000000080)='mnt\x00', &(0x7f00000000c0)='./file0\x00') ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r0, 0xc0406619, &(0x7f0000000140)={@id={0x2, 0x0, @a}}) stat(&(0x7f0000000980)='./file0\x00', 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x0, &(0x7f0000000080)}, 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x400000000000000, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0xe, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0x0, 0x0, {0x6, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@private0, @in=@broadcast}}]}, 0x50}}, 0x0) syz_usb_connect$uac1(0x0, 0x94, 0x0, 0x0) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2000, &(0x7f0000003700)={0x77359400}) 3.257670075s ago: executing program 5 (id=4361): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 2.942035346s ago: executing program 7 (id=4372): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0040, &(0x7f0000002a00)={[{@noblock_validity}, {@resgid={'resgid', 0x3d, 0xee00}}, {@acl}, {@noload}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@nodiscard}]}, 0xfe, 0x472, &(0x7f0000000940)="$eJzs3MtvG8UfAPDvOk6a9PFLf6U8WloIFETFI2nSBz1wAYHEAQQSHIo4BSetSt0GNUGiVQSBQxDigCpxRxyR+As4wQUBJySucEeVEMqlhZPRenfTxLVDHk6c4s9H2nZmd92Z786OPTtjN4CuNZT+kUTsjohfI2Iwyy4/YSj76+bCbOWvhdlKErXaa38m9fNuLMxW8n9i8XW7sh21Wp7f0aTc+TcjxqvVyct5fmTm4jsj01euPnX+4vi5yXOTl8ZOnz5x/HDfqbGTbYkzjevGwfenDh148Y1rL1fOXHvrx6/T+u7OjxdxtNNQdnWberTdhXXYniXppNzBirAmabulzdVb7/+D0RMDi8cG44WPOlo5YFPVarVas8/n3FwN+A9LotM1ADqj+KBPn3+LbYuGHtvCH89mD0Bp3DfzLTtSjlJ+Tm/D82079UfEmbm/v0i32KR5CACApb5Nxz9PNhv/leKeJef9L19D2RsR/4+IfRFxV0Tsj4i7I+rn3hsR962x/MYVktvHP6Xr6wpsldLx3zP52tby8V8x+ou9PXluTz3+3uTs+erksfyaHI3eHWl+dNlLlvvu+V8+a9z3aT7NPrRk/JduafnFWDCvx/VywwTdxPjMeFuCT+P/MOJguVn8SRTLOElEHIiIg+ss4/zjXx1qdezf419BG9aZal9GPJa1/1w0xF9IWq5Pjj59auzkSH9UJ4+NFHfF7X76ef7VVuVvKP42SNt/Z9P7P4s/fUZM+iOmr1y9UF+vnV57GfO/fVxJWhzbv877vy95vZ7uy/e9Nz4zc3k0oi95Kc0OLNs/duu1Rb44P43/6JHm/X9f9nhWvxL3R0R6Ex+OiAci4sG87R6KiIcj4sgK8f/w3CNvtzrWuv1XmJVvozT+iRXaP33LS1O32n/tiZ4L33/Tqvzaqtr/RD11NN+zmve/1VZwI9cOAAAA7hSl+nfgk9LwYrpUGh7OvsO/P3aWqlPTM0+cnXr30kT2Xfm90VsqZroGl8yHjuZzw0V+rCF/PJ83/rxnoJ4frkxVJzodPHS5XS36f+r3nk7XDth0fq8F3Uv/h+6l/0P30v+he+n/0KX6mu/+YKvrAXTE2j//+zelHsDWM/6H7qX/Q/fS/6ErtfxtfGlDP/m/UxPl7VGNpomB7VGNIhGlbVGN9iVe+STrEtulPkWivOr/zGKdiR1ND3X6nQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKA9/gkAAP//Uo/mdg==") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000004c0)=ANY=[@ANYBLOB="000000004c900200020000000300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000800000000000000000000000000000000000000000000000000ffffffff00"]) 2.631907907s ago: executing program 7 (id=4376): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)="821827", 0x3}, 0x1, 0x0, 0x0, 0x20008084}, 0x4) 2.237249101s ago: executing program 5 (id=4377): syz_usb_connect$cdc_ncm(0x0, 0x7c, &(0x7f0000000000)=ANY=[@ANYBLOB="12010102020000102505a1a440000102030109026a00020105fa0e0904000001020d00000524060001052400ba000d240f0102000000fb0605000706241a60e122062407046925042413020424130609058103ff0300030609040100"], &(0x7f0000005340)={0x0, 0x0, 0x0, 0x0}) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000002ec97000000000000400"/28], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x129a02, 0x0) sendfile(r3, 0xffffffffffffffff, &(0x7f0000000080)=0xb, 0x8) write$UHID_CREATE2(r2, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r2, 0x1000) r4 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) poll(&(0x7f0000000040)=[{r4, 0x1}], 0x1, 0x101) r5 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) ioctl$USBDEVFS_CONNECTINFO(r5, 0x80045503, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 2.163326214s ago: executing program 7 (id=4378): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x2b, 0x1, 0x1) setsockopt$sock_timeval(r3, 0x1, 0x15, &(0x7f0000000000)={0x0, 0xea60}, 0x10) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0xf}, 0x1c) 1.7068513s ago: executing program 2 (id=4386): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x36, 0x0, 0x0) 1.610592403s ago: executing program 6 (id=4387): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 1.601803923s ago: executing program 2 (id=4388): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x20, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.kill\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000000), 0x0, 0x34, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.259852276s ago: executing program 7 (id=4389): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$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") syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140)) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2826c41, 0x0, 0x0, 0x0, &(0x7f0000000d40)) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8, 0x1) rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x1) 1.190196428s ago: executing program 2 (id=4391): r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82d00af00416375f3", 0x18) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000000)=ANY=[@ANYBLOB="00020401"], 0x18) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x6e23, 0x2, @mcast1, 0x9}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001840), 0x3b, 0x0) 1.119327111s ago: executing program 2 (id=4393): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000180)=0x19ca, 0x4) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0xc9, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 1.058674903s ago: executing program 7 (id=4394): socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) 1.058459853s ago: executing program 2 (id=4395): socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r3, 0x400455c8, 0x400000009) 989.531265ms ago: executing program 1 (id=4396): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x200000, &(0x7f0000000280)={[{@block_validity}, {}, {@nombcache}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@nodioread_nolock}, {@grpjquota}], [{@smackfsdef={'smackfsdef', 0x3d, 'grpjquota='}}, {@obj_role={'obj_role', 0x3d, 'debug_want_extra_isize'}}, {@euid_gt}, {@obj_user={'obj_user', 0x3d, '\x9c+'}}]}, 0x3, 0x57b, &(0x7f0000000800)="$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") syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x204000, &(0x7f0000000040)={[{@grpquota}, {@barrier_val={'barrier', 0x3d, 0x857}}]}, 0x4, 0xbac, &(0x7f00000017c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}}) rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='./file1\x00') 695.668996ms ago: executing program 6 (id=4397): syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000c40)='./file0\x00', 0x808080, &(0x7f0000000c80)={[{@discard}, {@bh}, {@noblock_validity}]}, 0x2c, 0x52c, &(0x7f0000000640)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x149000, 0x100) getdents(r0, 0x0, 0x0) 526.679682ms ago: executing program 1 (id=4398): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab000e271f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab0300817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1ff032aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f757036303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa407e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987595ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b4c8787361f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e0800000092e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9be7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa5200002fe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb0972d39e4b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e501ddddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981179186e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db41474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1bdfc64b9121bbf07099def5c0ce3c861ae4b5cad8bba5a0b605908000000f96a59320309e25df89484522bb1d6eaa92164f9e4042cb689a45a898354c17b08705205a9189772bcbcb6414e44b33a2470d3bc16f761c332c34812382e57c0e0d83f3f565b9da5e7991ad8482579cc1b16c1fcec815a5482ae8b1779c5e339971a6ec1217b6478c2434a9a18dcc6c7c791e444a79d7ce37f9cf2a434b9048ca6a2fa254aa02cd098026798a6d336348af0fc11fa2809a5ebbe17ca4d0f889d518f64ee50f562b5fdb1f76d4a7fe14701f8ed0c6a55d66a6efea3e449e6b4783d66661a92f174f2b88cd544b2a8e1b05ea7cf51578169fff7765f9978883b4b5983b42a35a05dabfc325ec2a2ec2f9b0882fdcf5d6f72272d2ff0d8eea60f5494ba42b4d40f144f0ab680a6f40f9094d3afb58a1efd6109894b8605c6b3b3f020c222f6446195b2274f634fbb737948a1f36ea729467e132385e9da614e4625175f4443b97a675934db90010e4b884200c3546c4d86d712c3939e11be3343f693846f509ad4c445ade5cd6d126d5694462ac5d3b527c3bd51c0a715a28d65fe94b255d02cdc1fab99b5b9c352f1b284115e4046285a824d22b6f0afbed8d6096a72fef72ebd6aae78b02fa1993e8fe2020ae93aae2bcfffa40b98549f1fb9fcefa74329909a207336d07f6f59da423ac5fa47852055d5ce6d2c56bdbbcdbf3458ba478c669f39d5272e65c90908ea2cb86d38f8ebf80a8cb85d8399b42403c94b8662af5cf1411526f177b4d476169a5d5a8c37d0d8893a77d0bd47b8a0bba60b3e26094209c889585f997ff556bcd2cc223f9c0c44de9d0fe1b5a8a815f652e79747d3e1f413fa0575d51f652d22883e143065c5ad74bdc864754ba3dad5a8fc8fc2c807d1a51dfb29884adee415c13f2ce14d307bd6165ec6ba68a766adfcbe444ea72d586bb47dd98a225467aab538a77667d19bae2e51727ba6d190e6d7"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe40, 0x2b0, &(0x7f0000000100)="b9ff0b078059268cb89e14f088a82de0ffff200000000067000aac14140ce000000d49e832f0", 0x0, 0x28e, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 401.916236ms ago: executing program 6 (id=4399): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1022002, 0x0) r1 = dup(r0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r2 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) sendfile(r0, r2, 0x0, 0x8000fffffffe) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) 393.129736ms ago: executing program 5 (id=4400): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200000c0, &(0x7f0000000080)={0x2, 0x4e23, @empty}, 0x10) 322.699969ms ago: executing program 1 (id=4401): clock_gettime(0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000000)={&(0x7f0000000100), 0x0}) r2 = dup3(r0, r1, 0x0) ioctl$MON_IOCX_GETX(r2, 0x4018920a, &(0x7f0000000140)={&(0x7f0000001180), &(0x7f0000000180)=""/4089, 0xff9}) 322.473439ms ago: executing program 5 (id=4402): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x20, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.kill\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000000), 0x0, 0x34, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 322.325659ms ago: executing program 1 (id=4403): ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000340)={'tunl0\x00', &(0x7f00000002c0)={'ip_vti0\x00', 0x0, 0x1, 0x7, 0x9, 0x4, {{0x6, 0x4, 0x1, 0x36, 0x18, 0x65, 0x0, 0x8, 0x2f, 0x0, @loopback, @local, {[@ra={0x94, 0x4}]}}}}}) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000004788031c09103c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 322.232389ms ago: executing program 1 (id=4404): r0 = syz_open_dev$evdev(&(0x7f0000000400), 0x200, 0x1a1800) syz_clone(0x6800c000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f0000000480)=""/10) 304.986679ms ago: executing program 6 (id=4405): creat(&(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x803400, 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x84022, &(0x7f0000000080)=ANY=[@ANYBLOB='size=3']) 284.14809ms ago: executing program 6 (id=4406): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000180)=0x19ca, 0x4) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0xc9, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 218.628662ms ago: executing program 1 (id=4407): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 215.415512ms ago: executing program 6 (id=4408): syz_usb_connect$cdc_ncm(0x2, 0x0, 0x0, 0x0) syz_usb_connect$midi(0x3, 0x0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x3}}, 0x26) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) syz_usb_connect$uac3(0x0, 0x0, 0x0, 0x0) ioctl$PPPIOCATTCHAN(r4, 0x40047438, &(0x7f0000000500)=0x2) dup2(r4, r3) 191.144493ms ago: executing program 7 (id=4409): r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_int(r0, 0x29, 0x4b, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x1) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x18}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1a}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x4, 0x0, 0xa, 0x9}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 119.525536ms ago: executing program 2 (id=4410): bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000980), 0x1, 0x5a3, &(0x7f00000002c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8000c61) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) sendfile(r1, r1, 0x0, 0xe3aa6ea) socketpair$unix(0x1, 0x1, 0x0, 0x0) 58.463798ms ago: executing program 5 (id=4411): r0 = socket$tipc(0x1e, 0x2, 0x0) shutdown(r0, 0x1) 0s ago: executing program 5 (id=4412): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000240)={[{@noblock_validity}, {}, {@sysvgroups}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@grpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x40) fallocate(r0, 0x0, 0xa, 0x8ffff) kernel console output (not intermixed with test programs): [ 891.665926][ T922] usb 7-1: Manufacturer: syz [ 891.670637][ T922] usb 7-1: SerialNumber: syz [ 891.675275][ T39] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 891.701410][ T39] usb 2-1: config 0 descriptor?? [ 891.736317][ T6] usb 3-1: USB disconnect, device number 73 [ 891.746046][ T1473] udevd[1473]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 891.896052][ T922] usb 7-1: Found UVC 0.00 device syz (0bda:0138) [ 891.902475][ T922] usb 7-1: No valid video chain found. [ 891.914443][ T39] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 84 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 891.927948][ T922] usb 7-1: USB disconnect, device number 93 [ 891.938349][ T39] usb 2-1: USB disconnect, device number 84 [ 891.948496][ T39] usblp0: removed [ 892.505641][ T39] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 892.525654][ T307] usb 3-1: new full-speed USB device number 74 using dummy_hcd [ 892.705583][ T39] usb 2-1: Using ep0 maxpacket: 32 [ 892.711878][ T39] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 892.724109][ T39] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 892.727577][ T307] usb 3-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 892.732889][ T39] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 892.756780][ T307] usb 3-1: config 7 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 10 [ 892.757960][ T39] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 892.777876][ T39] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 892.778245][ T307] usb 3-1: config 7 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 892.788142][ T39] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 892.807332][ T39] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 892.814200][ T307] usb 3-1: config 7 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 892.817881][ T39] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 892.843537][ T39] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 892.845391][ T307] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 892.853379][ T39] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 892.876040][ T307] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 892.880819][ T39] usb 2-1: config 0 descriptor?? [ 892.907702][ T39] hub 2-1:0.0: bad descriptor, ignoring hub [ 892.920167][ T39] hub: probe of 2-1:0.0 failed with error -5 [ 893.109340][ T39] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 85 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 893.134126][ T307] usb 3-1: USB disconnect, device number 74 [ 893.465613][ T6] usb 6-1: new high-speed USB device number 83 using dummy_hcd [ 893.650529][ T6] usb 6-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 893.659993][ T6] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 893.671566][ T6] usb 6-1: config 0 descriptor?? [ 893.805648][T11059] usb 2-1: reset high-speed USB device number 85 using dummy_hcd [ 893.813872][T11059] usb 2-1: device reset changed ep0 maxpacket size! [ 893.821223][ T39] usb 2-1: USB disconnect, device number 85 [ 893.828722][ T39] usblp0: removed [ 893.979139][ T39] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 894.177267][ T39] usb 2-1: unable to get BOS descriptor or descriptor too short [ 894.186144][ T39] usb 2-1: no configurations [ 894.190963][ T39] usb 2-1: can't read configurations, error -22 [ 894.370629][T11145] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3094'. [ 894.410815][T11147] loop9: detected capacity change from 0 to 7 [ 894.418235][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 894.427525][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 894.435786][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 894.444985][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 894.453015][T11147] loop9: unable to read partition table [ 894.459093][T11147] loop_reread_partitions: partition scan of loop9 (úù) failed (rc=-5) [ 894.462936][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 894.476487][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 894.486211][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 894.495417][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 894.525668][T11148] loop9: detected capacity change from 7 to 0 [ 894.802659][T11161] kvm: pic: non byte write [ 894.809205][T11161] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4294967295 (34359738360 ns) > initial count (56 ns). Using initial count to start timer. [ 894.995628][ T922] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 895.175583][ T922] usb 3-1: Using ep0 maxpacket: 32 [ 895.181995][ T922] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 895.190313][ T922] usb 3-1: config 0 has no interface number 0 [ 895.196625][ T922] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 895.208353][ T922] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 895.217743][ T922] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 895.225979][ T922] usb 3-1: Product: syz [ 895.230265][ T922] usb 3-1: Manufacturer: syz [ 895.234946][ T922] usb 3-1: SerialNumber: syz [ 895.243837][ T922] usb 3-1: config 0 descriptor?? [ 895.249211][T11154] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 895.460501][T11154] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 895.728623][T11179] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 895.789540][ T28] audit: type=1400 audit(1779155854.255:314): avc: denied { listen } for pid=11185 comm="syz.6.3111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 896.049710][T11207] capability: warning: `syz.6.3120' uses 32-bit capabilities (legacy support in use) [ 896.196389][ T6] usb 8-1: new high-speed USB device number 67 using dummy_hcd [ 896.209173][ T39] usb 6-1: USB disconnect, device number 83 [ 896.345173][ T28] audit: type=1400 audit(1779155854.805:315): avc: denied { create } for pid=11237 comm="syz.6.3135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 896.395605][ T6] usb 8-1: Using ep0 maxpacket: 8 [ 896.465597][ T6] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 896.492159][T11239] bridge0: port 1(bridge_slave_0) entered blocking state [ 896.499661][ T6] usb 8-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xBE, skipping [ 896.510559][T11239] bridge0: port 1(bridge_slave_0) entered disabled state [ 896.520307][ T6] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 896.536099][T11239] device bridge_slave_0 entered promiscuous mode [ 896.543570][T11239] bridge0: port 2(bridge_slave_1) entered blocking state [ 896.588847][T11239] bridge0: port 2(bridge_slave_1) entered disabled state [ 896.606257][T11239] device bridge_slave_1 entered promiscuous mode [ 896.692700][ T6] usb 8-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 896.711648][ T6] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 896.734907][ T6] usb 8-1: Product: syz [ 896.739191][ T6] usb 8-1: Manufacturer: syz [ 896.743855][ T6] usb 8-1: SerialNumber: syz [ 896.769405][ T6] usb 8-1: config 0 descriptor?? [ 896.783558][ T6] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 896.798501][T11239] bridge0: port 2(bridge_slave_1) entered blocking state [ 896.805591][T11239] bridge0: port 2(bridge_slave_1) entered forwarding state [ 896.812895][T11239] bridge0: port 1(bridge_slave_0) entered blocking state [ 896.819974][T11239] bridge0: port 1(bridge_slave_0) entered forwarding state [ 896.890759][T11239] device veth0_vlan entered promiscuous mode [ 896.907468][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 896.916410][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 896.928420][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 896.936612][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 896.944668][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 896.953358][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 896.961565][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 896.969240][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 896.976899][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 896.986077][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 896.994563][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 897.009162][T11239] device veth1_macvtap entered promiscuous mode [ 897.033628][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 897.073179][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 897.127120][ T28] audit: type=1400 audit(1779155855.595:316): avc: denied { mount } for pid=11239 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 897.445216][T11264] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 897.669548][ T2364] device bridge_slave_1 left promiscuous mode [ 897.694995][ T2364] bridge0: port 2(bridge_slave_1) entered disabled state [ 897.711758][ T28] audit: type=1400 audit(1779155856.175:317): avc: denied { write } for pid=11276 comm="syz.6.3147" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 897.735444][ T2364] device bridge_slave_0 left promiscuous mode [ 897.743534][ T2364] bridge0: port 1(bridge_slave_0) entered disabled state [ 897.760541][ T2364] device veth1_macvtap left promiscuous mode [ 897.766861][ T2364] device veth0_vlan left promiscuous mode [ 898.135765][ T307] usb 6-1: new high-speed USB device number 84 using dummy_hcd [ 898.335682][ T307] usb 6-1: Using ep0 maxpacket: 32 [ 898.342298][ T307] usb 6-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 898.353539][ T307] usb 6-1: config 155 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping [ 898.358300][ T922] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 898.376513][ T922] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 898.382850][ T307] usb 6-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 898.409384][ T307] usb 6-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 898.415225][ T922] asix: probe of 3-1:0.188 failed with error -71 [ 898.425232][ T307] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 898.442244][ T307] usb 6-1: Product: syz [ 898.442509][ T922] usb 3-1: USB disconnect, device number 75 [ 898.452681][ T307] usb 6-1: Manufacturer: syz [ 898.457457][ T307] usb 6-1: SerialNumber: syz [ 898.941219][ T307] usb 8-1: USB disconnect, device number 67 [ 899.142587][ T28] audit: type=1400 audit(1779155857.605:318): avc: denied { map } for pid=11305 comm="syz.7.3158" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=179 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 899.145752][ T922] usb 7-1: new high-speed USB device number 94 using dummy_hcd [ 899.185485][ T28] audit: type=1400 audit(1779155857.635:319): avc: denied { execute } for pid=11305 comm="syz.7.3158" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=179 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 899.248871][ T28] audit: type=1400 audit(1779155857.695:320): avc: denied { map } for pid=11297 comm="syz.2.3155" path="socket:[95017]" dev="sockfs" ino=95017 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 899.367549][ T922] usb 7-1: config 1 interface 0 altsetting 129 bulk endpoint 0x82 has invalid maxpacket 32 [ 899.405313][ T922] usb 7-1: config 1 interface 0 altsetting 129 bulk endpoint 0x3 has invalid maxpacket 16 [ 899.466095][ T922] usb 7-1: config 1 interface 0 altsetting 129 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 899.526563][ T922] usb 7-1: config 1 interface 0 has no altsetting 0 [ 899.535029][ T922] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 899.544350][ T922] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 899.552594][ T922] usb 7-1: Product: syz [ 899.556962][ T922] usb 7-1: Manufacturer: syz [ 899.561626][ T922] usb 7-1: SerialNumber: syz [ 899.567838][T11285] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 899.575128][T11285] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 900.522731][T11351] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 900.531354][T11351] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 901.438289][T11369] netlink: 5520 bytes leftover after parsing attributes in process `syz.2.3181'. [ 901.488730][ T28] audit: type=1400 audit(1779155859.935:321): avc: denied { create } for pid=11370 comm="syz.2.3182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 901.567160][ T307] usb 6-1: USB disconnect, device number 84 [ 901.765756][ T28] audit: type=1400 audit(1779155860.155:322): avc: denied { mount } for pid=11380 comm="syz.2.3186" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 901.968609][ T922] cdc_ether: probe of 7-1:1.0 failed with error -71 [ 902.003677][ T922] usb 7-1: USB disconnect, device number 94 [ 902.088192][T11398] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3189'. [ 902.900641][ T28] audit: type=1400 audit(1779155861.365:323): avc: denied { shutdown } for pid=11418 comm="syz.6.3198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 903.205765][ T39] usb 6-1: new low-speed USB device number 85 using dummy_hcd [ 903.396867][ T39] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 903.407949][ T39] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 64, setting to 8 [ 903.428046][ T39] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 903.440975][ T39] usb 6-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00 [ 903.450135][ T39] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 903.488260][ T39] usb 6-1: config 0 descriptor?? [ 903.494386][T11433] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 903.916264][ T39] uclogic 0003:5543:0004.001B: ignoring exceeding usage max [ 903.927182][ T39] uclogic 0003:5543:0004.001B: unknown main item tag 0x0 [ 903.934401][ T39] uclogic 0003:5543:0004.001B: unknown main item tag 0x0 [ 903.941702][ T39] uclogic 0003:5543:0004.001B: unknown main item tag 0x0 [ 903.957310][ T39] uclogic 0003:5543:0004.001B: unknown main item tag 0x0 [ 903.971974][ T39] uclogic 0003:5543:0004.001B: unknown main item tag 0x0 [ 903.982666][ T39] uclogic 0003:5543:0004.001B: unknown main item tag 0x0 [ 904.003763][T11478] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3219'. [ 904.021128][ T39] uclogic 0003:5543:0004.001B: unknown main item tag 0x0 [ 904.031488][ T39] uclogic 0003:5543:0004.001B: unknown main item tag 0x0 [ 904.042404][ T39] uclogic 0003:5543:0004.001B: No inputs registered, leaving [ 904.052091][ T39] uclogic 0003:5543:0004.001B: hidraw0: USB HID v0.08 Device [HID 5543:0004] on usb-dummy_hcd.5-1/input0 [ 904.150506][T11487] input: syz0 as /devices/virtual/input/input11 [ 904.164509][ T307] usb 6-1: USB disconnect, device number 85 [ 904.685630][ T307] usb 7-1: new high-speed USB device number 95 using dummy_hcd [ 904.763367][ T28] audit: type=1400 audit(1779155863.225:324): avc: denied { bind } for pid=11499 comm="syz.1.3233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 904.875651][ T307] usb 7-1: Using ep0 maxpacket: 32 [ 904.882527][ T307] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 905.663049][T11542] tipc: Started in network mode [ 905.668146][T11542] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 905.677395][T11542] tipc: Enabling of bearer rejected, failed to enable media [ 905.803455][ T307] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 905.846777][ T307] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 905.856406][ T307] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 905.866735][ T307] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 905.876449][ T307] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 905.886227][ T307] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 905.896247][ T307] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 905.913929][ T307] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 905.935232][ T307] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 905.946285][ T307] usb 7-1: config 0 descriptor?? [ 906.158885][ T307] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 95 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 906.182086][ T307] usb 7-1: USB disconnect, device number 95 [ 906.189949][ T307] usblp0: removed [ 906.282918][T11571] bridge0: port 1(bridge_slave_0) entered blocking state [ 906.292048][T11571] bridge0: port 1(bridge_slave_0) entered disabled state [ 906.301275][T11571] device bridge_slave_0 entered promiscuous mode [ 906.311334][T11571] bridge0: port 2(bridge_slave_1) entered blocking state [ 906.318477][T11571] bridge0: port 2(bridge_slave_1) entered disabled state [ 906.326290][T11571] device bridge_slave_1 entered promiscuous mode [ 906.394944][T11571] bridge0: port 2(bridge_slave_1) entered blocking state [ 906.402046][T11571] bridge0: port 2(bridge_slave_1) entered forwarding state [ 906.409383][T11571] bridge0: port 1(bridge_slave_0) entered blocking state [ 906.416453][T11571] bridge0: port 1(bridge_slave_0) entered forwarding state [ 906.439452][ T2364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 906.447411][ T2364] bridge0: port 1(bridge_slave_0) entered disabled state [ 906.454635][ T2364] bridge0: port 2(bridge_slave_1) entered disabled state [ 906.461828][ T39] usb 8-1: new high-speed USB device number 68 using dummy_hcd [ 906.473504][ T2364] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 906.481854][ T2364] bridge0: port 1(bridge_slave_0) entered blocking state [ 906.488915][ T2364] bridge0: port 1(bridge_slave_0) entered forwarding state [ 906.497754][ T2364] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 906.506051][ T2364] bridge0: port 2(bridge_slave_1) entered blocking state [ 906.513138][ T2364] bridge0: port 2(bridge_slave_1) entered forwarding state [ 906.526880][ T2364] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 906.537856][ T2364] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 906.552821][ T2364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 906.565066][ T2364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 906.573337][ T2364] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 906.581212][ T2364] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 906.591495][T11571] device veth0_vlan entered promiscuous mode [ 906.602355][ T2364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 906.611769][T11571] device veth1_macvtap entered promiscuous mode [ 906.622050][ T2364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 906.632135][ T2364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 906.655656][ T39] usb 8-1: Using ep0 maxpacket: 16 [ 906.667623][T11585] IPv6: NLM_F_CREATE should be specified when creating new route [ 906.668331][ T39] usb 8-1: config 0 has an invalid interface number: 34 but max is 0 [ 906.683710][ T39] usb 8-1: config 0 has no interface number 0 [ 906.690371][ T39] usb 8-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 906.701807][ T39] usb 8-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 906.713865][ T39] usb 8-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 906.722990][ T39] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 906.731118][ T39] usb 8-1: Product: syz [ 906.735356][ T39] usb 8-1: Manufacturer: syz [ 906.740775][ T309] device bridge_slave_1 left promiscuous mode [ 906.747258][ T309] bridge0: port 2(bridge_slave_1) entered disabled state [ 906.754682][ T39] usb 8-1: SerialNumber: syz [ 906.755739][ T307] usb 7-1: new high-speed USB device number 96 using dummy_hcd [ 906.761154][ T309] device bridge_slave_0 left promiscuous mode [ 906.776655][ T39] usb 8-1: config 0 descriptor?? [ 906.781901][T11573] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 906.782294][ T309] bridge0: port 1(bridge_slave_0) entered disabled state [ 906.791096][T11573] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 906.806211][ T309] device veth1_macvtap left promiscuous mode [ 906.812364][ T309] device veth0_vlan left promiscuous mode [ 906.945581][ T307] usb 7-1: Using ep0 maxpacket: 32 [ 906.952375][ T307] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 906.965395][ T307] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 906.974463][ T307] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 906.983596][ T307] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 906.993538][ T307] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 907.003331][ T307] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 907.015071][T11573] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 907.022303][ T307] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 907.032240][T11573] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 907.045783][ T307] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 907.059340][ T307] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 907.068491][ T307] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 907.082956][ T307] usb 7-1: config 0 descriptor?? [ 907.092660][ T307] hub 7-1:0.0: bad descriptor, ignoring hub [ 907.099160][ T307] hub: probe of 7-1:0.0 failed with error -5 [ 907.291775][ T307] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 96 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 908.079556][ T39] asix 8-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 908.089849][ T39] asix: probe of 8-1:0.34 failed with error -71 [ 908.105627][T11491] usb 7-1: reset high-speed USB device number 96 using dummy_hcd [ 908.114109][T11491] usb 7-1: device reset changed ep0 maxpacket size! [ 908.136834][T11262] usb 7-1: USB disconnect, device number 96 [ 908.151034][T11262] usblp0: removed [ 908.155145][ T39] usb 8-1: USB disconnect, device number 68 [ 908.305628][T11262] usb 7-1: new high-speed USB device number 97 using dummy_hcd [ 908.489486][T11262] usb 7-1: unable to get BOS descriptor or descriptor too short [ 908.497242][T11262] usb 7-1: no configurations [ 908.501871][T11262] usb 7-1: can't read configurations, error -22 [ 908.594920][T11625] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=11625 comm=syz.7.3278 [ 908.607617][T11625] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=11625 comm=syz.7.3278 [ 908.667020][T11629] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3280'. [ 908.727697][T11637] I/O error, dev loop14, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 908.737378][T11637] EXT4-fs (loop14): unable to read superblock [ 909.416832][T11660] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3294'. [ 909.634452][T11678] hub 8-0:1.0: USB hub found [ 909.639702][T11678] hub 8-0:1.0: 1 port detected [ 910.667682][T11686] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 911.585596][ T6] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 911.641887][T11737] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 911.829225][ T6] usb 2-1: config 1 interface 0 has no altsetting 0 [ 911.838343][ T6] usb 2-1: string descriptor 0 read error: -22 [ 911.844961][ T6] usb 2-1: New USB device found, idVendor=1532, idProduct=010d, bcdDevice= 0.40 [ 911.854336][ T6] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 911.895811][ T19] usb 8-1: new high-speed USB device number 69 using dummy_hcd [ 911.949876][T11768] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 912.070737][T11772] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3337'. [ 912.079919][ T19] usb 8-1: Using ep0 maxpacket: 8 [ 912.136056][ T28] audit: type=1400 audit(1779155870.565:325): avc: denied { sqpoll } for pid=11773 comm="syz.2.3338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 912.156895][ T19] usb 8-1: config 0 has an invalid interface number: 186 but max is 0 [ 912.165233][ T19] usb 8-1: config 0 has no interface number 0 [ 912.171936][ T19] usb 8-1: config 0 interface 186 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 912.183032][ T19] usb 8-1: config 0 interface 186 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 912.193601][ T19] usb 8-1: config 0 interface 186 altsetting 0 has an invalid endpoint with address 0x9A, skipping [ 912.204709][ T19] usb 8-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 912.219801][ T19] usb 8-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 912.229169][ T19] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 912.237328][ T19] usb 8-1: Product: syz [ 912.241859][ T19] usb 8-1: Manufacturer: syz [ 912.246534][ T19] usb 8-1: SerialNumber: syz [ 912.252204][ T19] usb 8-1: config 0 descriptor?? [ 912.271014][ T6] hid (null): unknown global tag 0xc [ 912.401303][ T6] hid-generic 0003:1532:010D.001C: unknown global tag 0xc [ 912.408571][ T6] hid-generic 0003:1532:010D.001C: item 0 4 1 12 parsing failed [ 912.416664][ T6] hid-generic: probe of 0003:1532:010D.001C failed with error -22 [ 912.477405][ T39] usb 2-1: USB disconnect, device number 88 [ 913.938418][T11804] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 914.161570][T11824] binder: 11821:11824 ioctl c0306201 200000000040 returned -11 [ 914.278870][T11847] capability: warning: `syz.2.3368' uses deprecated v2 capabilities in a way that may be insecure [ 914.631158][ T6] usb 8-1: USB disconnect, device number 69 [ 914.691809][T11885] fuse: Bad value for 'fd' [ 915.635783][T11262] usb 6-1: new high-speed USB device number 86 using dummy_hcd [ 915.916018][T11262] usb 6-1: Using ep0 maxpacket: 16 [ 915.930475][T11262] usb 6-1: unable to get BOS descriptor or descriptor too short [ 915.994353][T11262] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 916.058501][ T28] audit: type=1400 audit(1779155874.515:326): avc: denied { create } for pid=11918 comm="syz.7.3396" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 916.071908][T11262] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 916.129295][T11262] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 916.173401][T11262] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 916.237355][T11928] fuse: Bad value for 'fd' [ 916.257293][T11262] usb 6-1: Product: syz [ 916.278326][T11262] usb 6-1: Manufacturer: syz [ 916.322477][T11262] usb 6-1: SerialNumber: syz [ 916.577054][T11946] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3405'. [ 916.594601][ T39] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 916.603266][ T39] hid-generic 0000:0000:0000.001D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 916.689658][ T28] audit: type=1400 audit(1779155875.155:327): avc: denied { write } for pid=11953 comm="syz.2.3408" path="socket:[98179]" dev="sockfs" ino=98179 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 916.804696][T11962] fuse: Bad value for 'fd' [ 916.898595][T11262] cdc_ncm 6-1:1.0: CDC Union missing and no IAD found [ 916.906563][T11262] cdc_ncm 6-1:1.0: bind() failure [ 916.915681][ T6] usb 7-1: new high-speed USB device number 99 using dummy_hcd [ 916.951151][T11262] usb 6-1: USB disconnect, device number 86 [ 917.115591][ T6] usb 7-1: Using ep0 maxpacket: 16 [ 917.122150][ T6] usb 7-1: unable to get BOS descriptor or descriptor too short [ 917.146162][ T6] usb 7-1: config 7 has an invalid interface number: 192 but max is 0 [ 917.172212][ T6] usb 7-1: config 7 has no interface number 0 [ 919.074796][ T6] usb 7-1: config 7 interface 192 has no altsetting 0 [ 919.107099][ T6] usb 7-1: New USB device found, idVendor=0421, idProduct=0128, bcdDevice=a6.39 [ 919.180455][ T6] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 919.188863][ T6] usb 7-1: Product: syz [ 919.193060][ T6] usb 7-1: Manufacturer: syz [ 919.205567][ T6] usb 7-1: SerialNumber: syz [ 919.773714][ T6] usb 7-1: bad CDC descriptors [ 919.781713][ T6] usb 7-1: USB disconnect, device number 99 [ 919.812891][T11262] hid-generic FFFC:0008:0005.001E: item fetching failed at offset 0/1 [ 919.821932][T11262] hid-generic: probe of FFFC:0008:0005.001E failed with error -22 [ 919.879958][ T28] audit: type=1400 audit(1779155878.345:328): avc: denied { ioctl } for pid=12022 comm="syz.1.3430" path="socket:[98923]" dev="sockfs" ino=98923 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 920.062585][T12027] netlink: 452 bytes leftover after parsing attributes in process `syz.2.3429'. [ 920.235645][T11262] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 920.274702][ T28] audit: type=1400 audit(1779155878.735:329): avc: denied { bind } for pid=12040 comm="syz.6.3437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 920.498925][T11262] usb 2-1: Using ep0 maxpacket: 16 [ 920.608203][T11262] usb 2-1: unable to get BOS descriptor or descriptor too short [ 920.641548][T11262] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 920.652416][T11262] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 920.736782][T11262] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 920.772773][T11262] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 920.810193][T11262] usb 2-1: Product: syz [ 920.828797][T11262] usb 2-1: Manufacturer: syz [ 920.854900][T11262] usb 2-1: SerialNumber: syz [ 921.305523][ T39] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 921.425749][ T39] hid-generic 0000:0000:0000.001F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 921.746827][T12066] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3443'. [ 922.191441][ T28] audit: type=1400 audit(1779155880.645:330): avc: denied { watch watch_reads } for pid=12079 comm="syz.2.3450" path="/proc/333/net/pfkey" dev="proc" ino=4026533121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 922.236049][T11262] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 922.360508][T11262] cdc_ncm 2-1:1.0: bind() failure [ 922.397636][T11262] usb 2-1: USB disconnect, device number 89 [ 923.775615][T11262] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 923.967675][T11262] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 924.051088][T11262] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 924.163235][T11262] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 924.176605][T11262] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 924.184724][T11262] usb 3-1: Manufacturer: syz [ 924.190501][T11262] usb 3-1: config 0 descriptor?? [ 924.611545][T11262] pyra 0003:1E7D:2CF6.0020: unknown main item tag 0x0 [ 924.629772][T11262] pyra 0003:1E7D:2CF6.0020: unknown main item tag 0x0 [ 924.649967][T11262] pyra 0003:1E7D:2CF6.0020: unknown main item tag 0x0 [ 924.662715][T12155] fuse: Bad value for 'fd' [ 924.678436][T11262] pyra 0003:1E7D:2CF6.0020: unknown main item tag 0x0 [ 924.695432][T11262] pyra 0003:1E7D:2CF6.0020: unknown main item tag 0x0 [ 924.704520][T11262] pyra 0003:1E7D:2CF6.0020: unknown main item tag 0x0 [ 924.711708][T11262] pyra 0003:1E7D:2CF6.0020: unknown main item tag 0x0 [ 924.720130][T11262] pyra 0003:1E7D:2CF6.0020: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 924.805596][ T325] usb 6-1: new high-speed USB device number 87 using dummy_hcd [ 924.873184][T11262] pyra 0003:1E7D:2CF6.0020: couldn't init struct pyra_device [ 924.881787][T11262] pyra 0003:1E7D:2CF6.0020: couldn't install mouse [ 924.889066][T11262] pyra: probe of 0003:1E7D:2CF6.0020 failed with error -71 [ 924.899953][T11262] usb 3-1: USB disconnect, device number 76 [ 924.938978][T12174] fido_id[12174]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 925.025570][ T325] usb 6-1: Using ep0 maxpacket: 16 [ 925.033856][ T325] usb 6-1: unable to get BOS descriptor or descriptor too short [ 925.056797][ T325] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 925.067352][ T325] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 925.082243][ T325] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 925.092173][ T325] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 925.103073][ T325] usb 6-1: Product: syz [ 925.114447][ T325] usb 6-1: Manufacturer: syz [ 925.120362][ T325] usb 6-1: SerialNumber: syz [ 925.365301][T11262] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 925.398821][T11262] hid-generic 0000:0000:0000.0021: hidraw0: HID v0.00 Device [syz1] on syz0 [ 925.417245][ T28] audit: type=1400 audit(1779155883.885:331): avc: denied { accept } for pid=12191 comm="syz.1.3491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 925.874532][ T325] cdc_ncm 6-1:1.0: CDC Union missing and no IAD found [ 925.885578][ T325] cdc_ncm 6-1:1.0: bind() failure [ 925.901087][ T325] usb 6-1: USB disconnect, device number 87 [ 926.151818][T12218] bridge0: port 1(bridge_slave_0) entered blocking state [ 926.166581][T12218] bridge0: port 1(bridge_slave_0) entered disabled state [ 926.182246][T12218] device bridge_slave_0 entered promiscuous mode [ 926.203044][T12218] bridge0: port 2(bridge_slave_1) entered blocking state [ 926.217828][T12218] bridge0: port 2(bridge_slave_1) entered disabled state [ 926.238463][T12218] device bridge_slave_1 entered promiscuous mode [ 926.248189][ T28] audit: type=1400 audit(1779155884.715:332): avc: denied { read write } for pid=12226 comm="syz.1.3502" name="ptp0" dev="devtmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 926.301223][ T28] audit: type=1400 audit(1779155884.745:333): avc: denied { open } for pid=12226 comm="syz.1.3502" path="/dev/ptp0" dev="devtmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 926.421347][ T2364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 926.444497][ T2364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 926.468005][ T2364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 926.485211][ T2364] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 926.491563][T12245] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3510'. [ 926.498048][ T2364] bridge0: port 1(bridge_slave_0) entered blocking state [ 926.509335][ T2364] bridge0: port 1(bridge_slave_0) entered forwarding state [ 926.527285][ T2364] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 926.537405][ T2364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 926.551802][ T2364] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 926.560556][ T2364] bridge0: port 2(bridge_slave_1) entered blocking state [ 926.567677][ T2364] bridge0: port 2(bridge_slave_1) entered forwarding state [ 926.576060][ T2364] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 926.585938][ T2364] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 926.603151][ T2364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 926.616956][T12218] device veth0_vlan entered promiscuous mode [ 926.623426][ T2364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 926.632693][ T2364] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 926.640449][ T2364] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 926.657476][T12218] device veth1_macvtap entered promiscuous mode [ 926.665187][ T2364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 926.678333][ T2364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 926.698156][ T2364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 926.925594][ T325] usb 6-1: new high-speed USB device number 88 using dummy_hcd [ 926.985577][ T310] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 927.407846][ T325] usb 6-1: Using ep0 maxpacket: 16 [ 927.565699][ T308] usb 7-1: new low-speed USB device number 100 using dummy_hcd [ 927.704680][ T310] usb 3-1: Using ep0 maxpacket: 16 [ 927.711355][ T310] usb 3-1: config 0 has an invalid interface number: 34 but max is 0 [ 927.727339][ T325] usb 6-1: unable to get BOS descriptor or descriptor too short [ 927.745348][ T310] usb 3-1: config 0 has no interface number 0 [ 927.766161][ T325] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 927.787637][ T310] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 927.808284][ T325] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 927.835755][ T310] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 927.850937][ T325] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 927.882151][ T310] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 927.895601][ T325] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 927.918692][ T310] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 927.935597][ T325] usb 6-1: Product: syz [ 927.948548][ T325] usb 6-1: Manufacturer: syz [ 928.267918][ T310] usb 3-1: Product: syz [ 928.272276][ T325] usb 6-1: SerialNumber: syz [ 928.277032][ T310] usb 3-1: Manufacturer: syz [ 928.283066][ T310] usb 3-1: SerialNumber: syz [ 928.307596][ T308] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 928.324294][ T310] usb 3-1: config 0 descriptor?? [ 928.329271][ T308] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 64, setting to 8 [ 928.329359][ T308] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 928.329396][ T308] usb 7-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00 [ 928.365125][ T308] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 928.385458][ T308] usb 7-1: config 0 descriptor?? [ 928.391187][T12281] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 928.398716][T12263] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 928.406893][T12263] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 928.520490][T11262] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 928.548879][T11262] hid-generic 0000:0000:0000.0022: hidraw0: HID v0.00 Device [syz1] on syz0 [ 928.633974][T12263] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 928.668468][T12263] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 928.903603][ T308] hid (null): usage index exceeded [ 928.913806][ T308] uclogic 0003:5543:0004.0023: ignoring exceeding usage max [ 928.922911][ T308] uclogic 0003:5543:0004.0023: usage index exceeded [ 928.929714][ T308] uclogic 0003:5543:0004.0023: item 0 4 2 0 parsing failed [ 928.937616][ T308] uclogic 0003:5543:0004.0023: parse failed [ 928.943559][ T308] uclogic: probe of 0003:5543:0004.0023 failed with error -22 [ 928.957952][ T325] cdc_ncm 6-1:1.0: CDC Union missing and no IAD found [ 928.967948][ T325] cdc_ncm 6-1:1.0: bind() failure [ 928.977507][ T325] usb 6-1: USB disconnect, device number 88 [ 929.052122][ T8654] usb 7-1: USB disconnect, device number 100 [ 929.195710][T12185] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 929.375637][ T28] audit: type=1400 audit(1779155887.745:334): avc: denied { mounton } for pid=12310 comm="syz.7.3534" path="/syzcgroup/unified/syz7" dev="cgroup2" ino=185 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 929.565619][T12185] usb 2-1: Using ep0 maxpacket: 32 [ 929.699883][T12321] hub 8-0:1.0: USB hub found [ 929.705393][T12321] hub 8-0:1.0: 1 port detected [ 930.675694][T12185] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 930.683844][T12185] usb 2-1: config 0 has no interface number 0 [ 930.706792][T12185] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 930.715914][T12185] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 930.723929][T12185] usb 2-1: Product: syz [ 930.728270][T12185] usb 2-1: Manufacturer: syz [ 930.732892][T12185] usb 2-1: SerialNumber: syz [ 930.746082][T12185] usb 2-1: config 0 descriptor?? [ 930.766213][T12185] smsc95xx v2.0.0 [ 930.845679][ T922] usb 7-1: new high-speed USB device number 101 using dummy_hcd [ 931.006460][T12348] kvm [12347]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x495a [ 931.018716][T12348] kvm [12347]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0x100b [ 931.028228][T12348] kvm [12347]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x5956 [ 931.036551][ T922] usb 7-1: Using ep0 maxpacket: 16 [ 931.042695][T12348] kvm [12347]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x9c5 [ 931.052102][ T922] usb 7-1: unable to get BOS descriptor or descriptor too short [ 931.062078][ T922] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 931.065732][T12348] kvm [12347]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x61ea [ 931.072387][ T922] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 931.086119][T12348] kvm [12347]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x4939 [ 931.094042][ T922] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 931.101447][T12348] kvm [12347]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 931.109119][ T922] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 931.120156][T12348] kvm [12347]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x4a56 [ 931.125855][ T922] usb 7-1: Product: syz [ 931.138181][ T922] usb 7-1: Manufacturer: syz [ 931.142810][ T922] usb 7-1: SerialNumber: syz [ 931.143295][T12348] kvm [12347]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x10c8 [ 931.155843][T12185] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 931.166654][ T8654] usb 8-1: new full-speed USB device number 70 using dummy_hcd [ 931.174322][T12185] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 931.176944][T12348] kvm [12347]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x2262 [ 931.191888][T12348] kvm [12347]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 931.208319][T12348] kvm [12347]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0x19c2 [ 931.356551][ T308] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 931.356897][ T8654] usb 8-1: config 0 has an invalid interface number: 8 but max is 0 [ 931.375192][ T308] hid-generic 0000:0000:0000.0024: hidraw0: HID v0.00 Device [syz1] on syz0 [ 931.385160][ T8654] usb 8-1: config 0 has no interface number 0 [ 931.391753][ T8654] usb 8-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 931.416717][ T8654] usb 8-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 931.426650][ T310] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 931.445626][ T310] asix: probe of 3-1:0.34 failed with error -71 [ 931.453182][ T8654] usb 8-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 931.486249][ T310] usb 3-1: USB disconnect, device number 77 [ 931.493329][ T8654] usb 8-1: Product: syz [ 931.499730][ T8654] usb 8-1: SerialNumber: syz [ 931.539925][ T8654] usb 8-1: config 0 descriptor?? [ 931.549560][ T8654] usbhid 8-1:0.8: couldn't find an input interrupt endpoint [ 931.635661][ T922] cdc_ncm 7-1:1.0: CDC Union missing and no IAD found [ 931.642526][ T922] cdc_ncm 7-1:1.0: bind() failure [ 931.666922][ T922] usb 7-1: USB disconnect, device number 101 [ 931.748648][ T8654] usb 8-1: USB disconnect, device number 70 [ 932.661552][ T922] usb 8-1: new high-speed USB device number 71 using dummy_hcd [ 932.848075][ T922] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 932.865152][ T922] usb 8-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c [ 932.876261][ T922] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 932.920332][ T922] usb 8-1: config 0 descriptor?? [ 932.947400][ T922] usb 8-1: bad CDC descriptors [ 933.241382][ T922] usb 8-1: USB disconnect, device number 71 [ 933.578527][T12185] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000006c: -71 [ 933.634050][T12185] smsc95xx: probe of 2-1:0.67 failed with error -71 [ 933.686280][T12185] usb 2-1: USB disconnect, device number 90 [ 933.869807][T12391] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3562'. [ 935.725721][ T922] usb 7-1: new high-speed USB device number 102 using dummy_hcd [ 935.905684][ T922] usb 7-1: Using ep0 maxpacket: 16 [ 935.912840][ T922] usb 7-1: unable to get BOS descriptor or descriptor too short [ 935.927851][ T922] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 935.949349][ T922] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 935.980072][ T922] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 936.010438][ T922] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 936.019537][ T922] usb 7-1: Product: syz [ 936.023871][ T922] usb 7-1: Manufacturer: syz [ 936.029385][ T922] usb 7-1: SerialNumber: syz [ 936.389399][ T39] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 936.938693][ T39] hid-generic 0000:0000:0000.0025: hidraw0: HID v0.00 Device [syz1] on syz0 [ 937.435456][ T922] cdc_ncm 7-1:1.0: CDC Union missing and no IAD found [ 937.456467][ T922] cdc_ncm 7-1:1.0: bind() failure [ 937.508014][ T922] usb 7-1: USB disconnect, device number 102 [ 939.094521][ T309] tipc: Left network mode [ 939.221165][T12498] netlink: 'syz.2.3597': attribute type 13 has an invalid length. [ 939.298447][T12488] bridge0: port 1(bridge_slave_0) entered blocking state [ 939.305653][T12488] bridge0: port 1(bridge_slave_0) entered disabled state [ 939.313394][T12488] device bridge_slave_0 entered promiscuous mode [ 939.323355][T12488] bridge0: port 2(bridge_slave_1) entered blocking state [ 939.330502][T12488] bridge0: port 2(bridge_slave_1) entered disabled state [ 939.338175][T12488] device bridge_slave_1 entered promiscuous mode [ 939.391786][T12488] bridge0: port 2(bridge_slave_1) entered blocking state [ 939.398900][T12488] bridge0: port 2(bridge_slave_1) entered forwarding state [ 939.406265][T12488] bridge0: port 1(bridge_slave_0) entered blocking state [ 939.413306][T12488] bridge0: port 1(bridge_slave_0) entered forwarding state [ 939.438187][ T2364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 939.446003][ T2364] bridge0: port 1(bridge_slave_0) entered disabled state [ 939.453340][ T2364] bridge0: port 2(bridge_slave_1) entered disabled state [ 939.463363][ T2364] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 939.471664][ T2364] bridge0: port 1(bridge_slave_0) entered blocking state [ 939.478744][ T2364] bridge0: port 1(bridge_slave_0) entered forwarding state [ 939.489477][ T2364] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 939.497961][ T2364] bridge0: port 2(bridge_slave_1) entered blocking state [ 939.505040][ T2364] bridge0: port 2(bridge_slave_1) entered forwarding state [ 939.519319][ T2364] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 939.531427][ T2364] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 939.547662][ T2364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 939.560061][ T2364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 939.568387][ T2364] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 939.576923][ T2364] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 939.586768][T12488] device veth0_vlan entered promiscuous mode [ 939.598750][ T2364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 939.609309][T12488] device veth1_macvtap entered promiscuous mode [ 939.621060][ T2364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 939.631411][ T2364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 939.708941][ T28] audit: type=1400 audit(1779155898.175:335): avc: denied { call } for pid=12507 comm="syz.5.3604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 939.728928][ T309] device bridge_slave_1 left promiscuous mode [ 939.737700][ T309] bridge0: port 2(bridge_slave_1) entered disabled state [ 939.755715][ T309] device bridge_slave_0 left promiscuous mode [ 939.757051][ T28] audit: type=1400 audit(1779155898.175:336): avc: denied { transfer } for pid=12507 comm="syz.5.3604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 939.773909][ T309] bridge0: port 1(bridge_slave_0) entered disabled state [ 939.832442][T12510] kvm: vcpu 0: requested 13312 ns lapic timer period limited to 200000 ns [ 939.846737][T12510] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3659427032 (29275416256 ns) > initial count (200000 ns). Using initial count to start timer. [ 940.274692][ T8654] usb 6-1: new high-speed USB device number 89 using dummy_hcd [ 940.976333][ T8654] usb 6-1: Using ep0 maxpacket: 16 [ 940.985115][ T8654] usb 6-1: unable to get BOS descriptor or descriptor too short [ 940.994005][ T8654] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 941.004465][ T8654] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 941.017364][ T8654] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 941.026820][ T8654] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 941.034837][ T8654] usb 6-1: Product: syz [ 941.039412][ T8654] usb 6-1: Manufacturer: syz [ 941.044037][ T8654] usb 6-1: SerialNumber: syz [ 941.305686][ T308] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 941.331031][ T310] usb 8-1: new high-speed USB device number 72 using dummy_hcd [ 941.337470][ T308] hid-generic 0000:0000:0000.0026: hidraw0: HID v0.00 Device [syz1] on syz0 [ 941.718469][ T8654] cdc_ncm 6-1:1.0: CDC Union missing and no IAD found [ 941.719237][ T28] audit: type=1400 audit(1779155900.185:337): avc: denied { mount } for pid=12541 comm="syz.2.3615" name="/" dev="configfs" ino=14287 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 941.725822][ T8654] cdc_ncm 6-1:1.0: bind() failure [ 941.751317][ T28] audit: type=1400 audit(1779155900.225:338): avc: denied { mounton } for pid=12541 comm="syz.2.3615" path="/162/file0" dev="configfs" ino=14287 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 941.771434][ T8654] usb 6-1: USB disconnect, device number 89 [ 941.868909][ T28] audit: type=1400 audit(1779155900.335:339): avc: denied { unmount } for pid=11239 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 941.925657][ T310] usb 8-1: Using ep0 maxpacket: 32 [ 941.943766][ T310] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 941.958359][ T310] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 941.969277][ T310] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 941.980167][ T310] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 941.993099][ T310] usb 8-1: config 0 descriptor?? [ 941.999754][ T310] hub 8-1:0.0: USB hub found [ 942.075599][ T28] audit: type=1400 audit(1779155900.535:340): avc: denied { unmount } for pid=10374 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 942.200610][ T310] hub 8-1:0.0: 1 port detected [ 942.397264][ T8654] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 942.635676][ T8654] usb 3-1: Using ep0 maxpacket: 32 [ 942.652201][ T8654] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 942.666029][ T8654] usb 3-1: config 0 has no interface number 0 [ 942.674020][ T8654] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 942.697376][ T8654] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 942.715569][ T8654] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 942.733814][ T8654] usb 3-1: Product: syz [ 942.738365][ T8654] usb 3-1: Manufacturer: syz [ 942.742992][ T8654] usb 3-1: SerialNumber: syz [ 942.756442][ T8654] usb 3-1: config 0 descriptor?? [ 942.765984][T12570] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 942.900350][ T310] hub 8-1:0.0: activate --> -90 [ 942.965591][ T922] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 942.981146][T12570] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 943.100903][ T310] hub 8-1:0.0: hub_ext_port_status failed (err = -71) [ 943.101963][ T308] usb 8-1: USB disconnect, device number 72 [ 943.165595][ T922] usb 2-1: Using ep0 maxpacket: 16 [ 943.172362][ T922] usb 2-1: unable to get BOS descriptor or descriptor too short [ 943.188289][ T922] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 943.208633][ T922] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 943.233597][ T922] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 943.251070][ T922] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 943.268746][ T922] usb 2-1: Product: syz [ 943.277130][ T922] usb 2-1: Manufacturer: syz [ 943.286986][ T922] usb 2-1: SerialNumber: syz [ 943.503148][ T308] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 943.515481][ T308] hid-generic 0000:0000:0000.0027: hidraw0: HID v0.00 Device [syz1] on syz0 [ 943.778552][ T922] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 943.796509][ T922] cdc_ncm 2-1:1.0: bind() failure [ 943.822654][ T922] usb 2-1: USB disconnect, device number 91 [ 944.405704][ T19] usb 7-1: new high-speed USB device number 103 using dummy_hcd [ 944.584501][ T28] audit: type=1400 audit(1779155903.045:341): avc: denied { read } for pid=12643 comm="syz.5.3654" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 944.604895][ T19] usb 7-1: Using ep0 maxpacket: 16 [ 944.611333][ T19] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 944.621524][ T19] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 944.632164][ T19] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 944.641912][ T19] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 944.650023][ T19] usb 7-1: Product: syz [ 944.654234][ T19] usb 7-1: Manufacturer: syz [ 944.658910][ T19] usb 7-1: SerialNumber: syz [ 944.868518][ T19] usb 7-1: 0:2 : does not exist [ 944.876175][ T19] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 944.897950][ T19] usb 7-1: USB disconnect, device number 103 [ 945.106085][ T1472] udevd[1472]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 945.449633][ T28] audit: type=1400 audit(1779155903.915:342): avc: denied { append } for pid=12663 comm="syz.6.3661" name="uinput" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 945.477422][T12664] input: syz0 as /devices/virtual/input/input12 [ 945.493629][T12664] input: syz1 as /devices/virtual/input/input13 [ 945.728220][T12679] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3668'. [ 945.737435][T12679] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3668'. [ 945.756523][ T8654] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 945.776653][ T8654] asix: probe of 3-1:0.188 failed with error -71 [ 945.787516][ T8654] usb 3-1: USB disconnect, device number 78 [ 945.833564][T12684] binder: BINDER_SET_CONTEXT_MGR already set [ 945.839983][T12684] binder: 12682:12684 ioctl 4018620d 200000004a80 returned -16 [ 947.488429][ T19] usb 6-1: new high-speed USB device number 90 using dummy_hcd [ 947.497574][T12747] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3693'. [ 947.705606][ T19] usb 6-1: Using ep0 maxpacket: 32 [ 947.717541][ T19] usb 6-1: config 0 has an invalid interface number: 188 but max is 0 [ 947.731175][T12749] binder: BINDER_SET_CONTEXT_MGR already set [ 947.750979][ T19] usb 6-1: config 0 has no interface number 0 [ 947.757554][T12749] binder: 12748:12749 ioctl 4018620d 200000004a80 returned -16 [ 947.778480][ T19] usb 6-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 947.813522][ T19] usb 6-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 947.841674][ T19] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 947.867529][ T19] usb 6-1: Product: syz [ 947.926899][ T19] usb 6-1: Manufacturer: syz [ 947.939566][ T19] usb 6-1: SerialNumber: syz [ 947.957374][ T19] usb 6-1: config 0 descriptor?? [ 947.972727][T12718] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 948.184977][T12718] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 948.237821][T12761] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3699'. [ 948.385643][ T39] usb 8-1: new high-speed USB device number 73 using dummy_hcd [ 948.475664][ T310] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 948.575636][ T39] usb 8-1: Using ep0 maxpacket: 16 [ 948.583403][ T39] usb 8-1: unable to get BOS descriptor or descriptor too short [ 948.620426][ T39] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 948.635683][ T39] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 948.653536][ T39] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 948.666665][ T310] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 948.683066][ T39] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 948.691369][ T310] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 948.693416][ T39] usb 8-1: Product: syz [ 948.718398][ T310] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 948.731818][ T310] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 948.735101][ T39] usb 8-1: Manufacturer: syz [ 948.750206][ T310] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 948.760336][ T39] usb 8-1: SerialNumber: syz [ 948.794758][ T310] usb 3-1: config 0 descriptor?? [ 949.039536][T11262] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 949.069677][T11262] hid-generic 0000:0000:0000.0028: hidraw0: HID v0.00 Device [syz1] on syz0 [ 949.309359][ T39] cdc_ncm 8-1:1.0: CDC Union missing and no IAD found [ 949.325611][ T39] cdc_ncm 8-1:1.0: bind() failure [ 949.349728][ T39] usb 8-1: USB disconnect, device number 73 [ 949.660171][ T310] plantronics 0003:047F:FFFF.0029: No inputs registered, leaving [ 949.676684][ T310] plantronics 0003:047F:FFFF.0029: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 949.911074][T12790] input: syz0 as /devices/virtual/input/input14 [ 949.931449][T12790] input: syz1 as /devices/virtual/input/input15 [ 950.028988][T12795] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3710'. [ 950.145635][ T922] usb 7-1: new high-speed USB device number 104 using dummy_hcd [ 950.328258][ T922] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 950.337776][ T922] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 950.346353][ T922] usb 7-1: Product: syz [ 950.350597][ T922] usb 7-1: Manufacturer: syz [ 950.355248][ T922] usb 7-1: SerialNumber: syz [ 950.728370][T12819] binder_alloc: 12818: binder_alloc_buf, no vma [ 951.312934][ T922] usb 3-1: USB disconnect, device number 79 [ 952.238109][ T19] asix 6-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71 [ 952.248735][ T19] asix: probe of 6-1:0.188 failed with error -71 [ 952.256074][ T19] usb 6-1: USB disconnect, device number 90 [ 952.359928][T12879] binder: BINDER_SET_CONTEXT_MGR already set [ 952.367260][T12879] binder: 12877:12879 ioctl 4018620d 200000004a80 returned -16 [ 952.414879][ T28] audit: type=1326 audit(1779155910.875:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12883 comm="syz.7.3746" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc77cb9ce59 code=0x7ffc0000 [ 952.445199][ T28] audit: type=1326 audit(1779155910.915:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12883 comm="syz.7.3746" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc77cb9ce59 code=0x7ffc0000 [ 952.471364][ T28] audit: type=1326 audit(1779155910.915:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12883 comm="syz.7.3746" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc77cb9ce59 code=0x7ffc0000 [ 952.496344][ T28] audit: type=1326 audit(1779155910.915:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12883 comm="syz.7.3746" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc77cb5d68e code=0x7ffc0000 [ 952.521486][ T28] audit: type=1326 audit(1779155910.915:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12883 comm="syz.7.3746" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc77cb9caeb code=0x7ffc0000 [ 952.555586][ T28] audit: type=1326 audit(1779155910.915:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12883 comm="syz.7.3746" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc77cb9caeb code=0x7ffc0000 [ 952.604587][ T28] audit: type=1326 audit(1779155910.915:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12883 comm="syz.7.3746" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc77cb9caeb code=0x7ffc0000 [ 952.641289][ T28] audit: type=1326 audit(1779155910.915:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12883 comm="syz.7.3746" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc77cb9caeb code=0x7ffc0000 [ 952.695821][ T19] usb 6-1: new high-speed USB device number 91 using dummy_hcd [ 952.875568][ T19] usb 6-1: Using ep0 maxpacket: 32 [ 952.882014][ T19] usb 6-1: config 0 has an invalid interface number: 188 but max is 0 [ 952.897482][ T19] usb 6-1: config 0 has no interface number 0 [ 952.911563][ T19] usb 6-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 952.986166][ T310] usb 7-1: USB disconnect, device number 104 [ 953.005620][ T19] usb 6-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 953.014700][ T19] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 953.023285][ T19] usb 6-1: Product: syz [ 953.027649][ T19] usb 6-1: Manufacturer: syz [ 953.032269][ T19] usb 6-1: SerialNumber: syz [ 953.038374][ T19] usb 6-1: config 0 descriptor?? [ 953.043654][T12865] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 953.075602][ T922] usb 8-1: new high-speed USB device number 74 using dummy_hcd [ 953.125617][ T28] audit: type=1326 audit(1779155911.555:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12883 comm="syz.7.3746" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc77cb9caeb code=0x7ffc0000 [ 953.216316][ T28] audit: type=1326 audit(1779155911.555:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12883 comm="syz.7.3746" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc77cb9caeb code=0x7ffc0000 [ 953.305732][ T922] usb 8-1: Using ep0 maxpacket: 32 [ 953.312772][ T922] usb 8-1: unable to get BOS descriptor or descriptor too short [ 953.322148][ T922] usb 8-1: config 0 has no interfaces? [ 953.344659][ T922] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 953.356535][ T922] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 953.364803][ T922] usb 8-1: Product: syz [ 953.369558][ T922] usb 8-1: Manufacturer: syz [ 953.376519][ T922] usb 8-1: SerialNumber: syz [ 953.452088][T12865] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 953.453832][T12913] fuse: Unknown parameter 'grou00000000000000000000' [ 953.466438][ T922] usb 8-1: config 0 descriptor?? [ 953.681373][T11262] usb 8-1: USB disconnect, device number 74 [ 954.785674][T12936] input: syz0 as /devices/virtual/input/input16 [ 954.967693][T12941] input: syz1 as /devices/virtual/input/input17 [ 955.027673][T12944] fuse: Unknown parameter 'grou00000000000000000000' [ 955.841141][T12965] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3773'. [ 956.211818][T12974] fuse: Unknown parameter 'group_i00000000000000000000' [ 956.533081][T12994] input: syz0 as /devices/virtual/input/input18 [ 957.700635][ T39] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 957.897923][ T19] asix 6-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 957.908327][ T19] asix: probe of 6-1:0.188 failed with error -71 [ 957.916069][ T19] usb 6-1: USB disconnect, device number 91 [ 957.975623][ T39] usb 2-1: Using ep0 maxpacket: 16 [ 957.981526][T13015] input: syz0 as /devices/virtual/input/input19 [ 957.994216][ T39] usb 2-1: unable to get BOS descriptor or descriptor too short [ 958.005330][T13015] input: syz1 as /devices/virtual/input/input20 [ 958.010323][ T39] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 958.022052][T13017] fuse: Unknown parameter 'group_i00000000000000000000' [ 958.038244][ T1473] udevd[1473]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 958.069739][ T39] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 958.100507][ T39] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 958.110463][ T39] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 958.125926][ T39] usb 2-1: Product: syz [ 958.135402][ T39] usb 2-1: Manufacturer: syz [ 958.141309][ T39] usb 2-1: SerialNumber: syz [ 958.170175][T13025] netlink: 'syz.2.3798': attribute type 16 has an invalid length. [ 958.178850][T13025] netlink: 'syz.2.3798': attribute type 17 has an invalid length. [ 958.563995][ T922] hid-generic 0000:0000:0000.002A: unknown main item tag 0x0 [ 958.683359][ T922] hid-generic 0000:0000:0000.002A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 959.003551][ T39] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 959.013817][ T39] cdc_ncm 2-1:1.0: bind() failure [ 959.029623][ T39] usb 2-1: USB disconnect, device number 92 [ 959.058589][T13054] input: syz0 as /devices/virtual/input/input21 [ 959.068410][T13054] input: syz1 as /devices/virtual/input/input22 [ 959.145596][ T8654] usb 8-1: new full-speed USB device number 75 using dummy_hcd [ 959.326957][ T8654] usb 8-1: not running at top speed; connect to a high speed hub [ 959.335472][ T8654] usb 8-1: config 5 has an invalid interface number: 16 but max is 0 [ 959.343732][ T8654] usb 8-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 959.353900][ T8654] usb 8-1: config 5 has no interface number 0 [ 959.360068][ T8654] usb 8-1: config 5 interface 16 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 16 [ 959.373267][ T8654] usb 8-1: config 5 interface 16 has no altsetting 0 [ 959.381570][ T8654] usb 8-1: New USB device found, idVendor=0421, idProduct=03cd, bcdDevice=bc.96 [ 959.390710][ T8654] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 959.399078][ T8654] usb 8-1: Product: syz [ 959.403299][ T8654] usb 8-1: Manufacturer: syz [ 959.407997][ T8654] usb 8-1: SerialNumber: syz [ 959.415164][ T8654] usb 8-1: bad CDC descriptors [ 959.435703][ T922] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 959.615597][ T922] usb 3-1: Using ep0 maxpacket: 32 [ 959.622043][ T922] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 959.628831][ T8654] usb 8-1: USB disconnect, device number 75 [ 959.630492][ T922] usb 3-1: config 0 has no interface number 0 [ 959.674134][ T922] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 959.684085][ T922] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 959.692343][ T922] usb 3-1: Product: syz [ 959.742604][ T922] usb 3-1: Manufacturer: syz [ 959.747289][ T922] usb 3-1: SerialNumber: syz [ 959.752644][ T922] usb 3-1: config 0 descriptor?? [ 959.825242][ T922] smsc95xx v2.0.0 [ 960.168791][ T922] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 960.186003][ T922] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 960.505612][ T39] usb 8-1: new high-speed USB device number 76 using dummy_hcd [ 960.614006][ T922] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 960.628198][ T922] smsc95xx: probe of 3-1:0.67 failed with error -71 [ 960.636086][ T922] usb 3-1: USB disconnect, device number 80 [ 960.785581][ T39] usb 8-1: Using ep0 maxpacket: 16 [ 960.791891][ T39] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 960.802302][ T39] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 960.812675][ T39] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 960.821806][ T39] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 960.829892][ T39] usb 8-1: Product: syz [ 960.834084][ T39] usb 8-1: Manufacturer: syz [ 960.838730][ T39] usb 8-1: SerialNumber: syz [ 960.865600][ T8654] usb 7-1: new high-speed USB device number 105 using dummy_hcd [ 960.965903][ T19] usb 6-1: new high-speed USB device number 92 using dummy_hcd [ 961.054459][ T39] usb 8-1: 0:2 : does not exist [ 961.065631][ T8654] usb 7-1: Using ep0 maxpacket: 16 [ 961.072745][ T8654] usb 7-1: unable to get BOS descriptor or descriptor too short [ 961.080103][ T39] usb 8-1: 5:0: failed to get current value for ch 0 (-22) [ 961.086586][ T8654] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 961.098434][ T8654] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 961.108406][ T39] usb 8-1: USB disconnect, device number 76 [ 961.141918][ T8654] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 961.155747][ T19] usb 6-1: Using ep0 maxpacket: 16 [ 961.162748][ T19] usb 6-1: config index 0 descriptor too short (expected 52, got 36) [ 961.182149][ T8654] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 961.200926][ T19] usb 6-1: config 0 has an invalid interface number: 251 but max is 0 [ 961.212396][ T8654] usb 7-1: Product: syz [ 961.235676][ T8654] usb 7-1: Manufacturer: syz [ 961.240453][ T8654] usb 7-1: SerialNumber: syz [ 961.245740][ T19] usb 6-1: config 0 has no interface number 0 [ 961.251929][ T19] usb 6-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 961.265049][ T19] usb 6-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 961.297143][ T19] usb 6-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 961.306458][ T19] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 961.314654][ T19] usb 6-1: Product: syz [ 961.320211][ T19] usb 6-1: Manufacturer: syz [ 961.324967][ T19] usb 6-1: SerialNumber: syz [ 961.355655][ T19] usb 6-1: config 0 descriptor?? [ 961.356886][ T1542] udevd[1542]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 961.377448][T13094] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 961.384863][T13094] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 961.499463][ T310] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0 [ 961.520471][ T310] hid-generic 0000:0000:0000.002B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 961.535557][ T308] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 961.594664][T13094] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 961.612092][T13094] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 961.738125][T13112] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3828'. [ 961.785619][ T308] usb 3-1: Using ep0 maxpacket: 8 [ 961.791937][ T308] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 962.125609][ T308] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 962.137082][ T308] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 962.149303][ T308] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 962.164144][ T308] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 962.167653][ T19] asix 6-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 962.177968][ T308] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 962.190190][ T8654] cdc_ncm 7-1:1.0: CDC Union missing and no IAD found [ 962.197649][ T308] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 962.205292][ T8654] cdc_ncm 7-1:1.0: bind() failure [ 962.225052][ T19] asix 6-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -71 [ 962.235630][ T8654] usb 7-1: USB disconnect, device number 105 [ 962.242775][ T19] asix: probe of 6-1:0.251 failed with error -5 [ 962.255026][ T19] usb 6-1: USB disconnect, device number 92 [ 962.470110][T13118] tmpfs: Unsupported parameter 'mpol' [ 962.726025][T13142] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3841'. [ 963.620569][T13173] binder: 13172:13173 ioctl c0306201 200000000380 returned -14 [ 963.630056][T13171] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3854'. [ 964.292730][ T308] usb 3-1: USB disconnect, device number 81 [ 964.720025][T13209] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3867'. [ 964.765829][ T8654] usb 8-1: new high-speed USB device number 77 using dummy_hcd [ 964.932951][T13230] device vlan2 entered promiscuous mode [ 964.938606][T13230] device gretap0 entered promiscuous mode [ 964.955575][ T8654] usb 8-1: Using ep0 maxpacket: 16 [ 964.962399][ T8654] usb 8-1: unable to get BOS descriptor or descriptor too short [ 964.971812][ T8654] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 964.982377][ T8654] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 964.995378][ T8654] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 965.005076][ T8654] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 965.013281][ T8654] usb 8-1: Product: syz [ 965.017692][ T8654] usb 8-1: Manufacturer: syz [ 965.022343][ T8654] usb 8-1: SerialNumber: syz [ 965.247145][ T19] hid-generic 0000:0000:0000.002C: unknown main item tag 0x0 [ 965.301873][ T19] hid-generic 0000:0000:0000.002C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 965.436448][T13246] input: syz0 as /devices/virtual/input/input23 [ 965.652316][T13257] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13257 comm=syz.5.3886 [ 965.801856][T13257] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3886'. [ 966.115345][ T8654] cdc_ncm 8-1:1.0: CDC Union missing and no IAD found [ 966.126837][ T8654] cdc_ncm 8-1:1.0: bind() failure [ 966.171950][ T8654] usb 8-1: USB disconnect, device number 77 [ 966.709589][T13282] binder_alloc: 13281: binder_alloc_buf, no vma [ 967.447121][T13291] input: syz0 as /devices/virtual/input/input25 [ 967.905622][ T472] usb 8-1: new high-speed USB device number 78 using dummy_hcd [ 968.248084][ T472] usb 8-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 968.263439][ T472] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 968.877671][ T472] usb 8-1: Product: syz [ 968.881893][ T472] usb 8-1: Manufacturer: syz [ 968.887048][ T472] usb 8-1: SerialNumber: syz [ 969.572338][T13331] binder: 13330:13331 ioctl c0306201 200000000300 returned -14 [ 970.591563][T13353] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3916'. [ 970.694152][ T922] usb 8-1: USB disconnect, device number 78 [ 971.869922][T13358] kvm_pr_unimpl_wrmsr: 3 callbacks suppressed [ 971.869942][T13358] kvm [13357]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x0 [ 971.884267][T13358] kvm [13357]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 971.900558][T13358] kvm [13357]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x0 [ 971.908702][T13358] kvm [13357]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 971.918925][T13358] kvm [13357]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x20 [ 971.927131][T13358] kvm [13357]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 972.085651][ T19] usb 7-1: new high-speed USB device number 106 using dummy_hcd [ 972.242617][ T308] usb 2-1: new full-speed USB device number 93 using dummy_hcd [ 972.517706][ T308] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 972.799560][ T308] usb 2-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 972.851588][ T308] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 972.894492][ T308] usb 2-1: Product: syz [ 972.916560][ T308] usb 2-1: Manufacturer: syz [ 972.939644][ T308] usb 2-1: SerialNumber: syz [ 973.020343][ T308] usb 2-1: config 0 descriptor?? [ 973.055312][ T19] usb 7-1: Using ep0 maxpacket: 16 [ 973.062415][ T19] usb 7-1: unable to get BOS descriptor or descriptor too short [ 973.075704][ T19] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 973.095566][ T19] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 973.126460][ T19] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 973.135946][ T19] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 973.143967][ T19] usb 7-1: Product: syz [ 973.148442][ T19] usb 7-1: Manufacturer: syz [ 973.153064][ T19] usb 7-1: SerialNumber: syz [ 973.415825][ T308] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 973.431529][ T308] hid-generic 0000:0000:0000.002D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 974.323071][T13422] input: syz0 as /devices/virtual/input/input27 [ 974.453308][ T19] cdc_ncm 7-1:1.0: CDC Union missing and no IAD found [ 974.463901][ T19] cdc_ncm 7-1:1.0: bind() failure [ 974.471293][ T19] usb 7-1: USB disconnect, device number 106 [ 974.864873][ T308] usb 2-1: USB disconnect, device number 93 [ 975.048313][T13446] fuse: Bad value for 'fd' [ 975.378578][T13459] device ip6gre1 entered promiscuous mode [ 975.428735][T13463] input: syz0 as /devices/virtual/input/input28 [ 975.547972][T13467] fuse: Bad value for 'group_id' [ 975.755578][ T308] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 976.195362][ T922] usb 6-1: new high-speed USB device number 93 using dummy_hcd [ 976.261243][ T308] usb 3-1: Using ep0 maxpacket: 16 [ 976.289795][ T308] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 976.378214][ T308] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 976.405618][ T922] usb 6-1: Using ep0 maxpacket: 16 [ 976.413426][ T922] usb 6-1: unable to get BOS descriptor or descriptor too short [ 976.444190][ T308] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 976.464408][ T922] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 976.486134][ T308] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 976.494750][ T922] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 976.505986][ T308] usb 3-1: Product: syz [ 976.561661][ T308] usb 3-1: Manufacturer: syz [ 976.566659][ T308] usb 3-1: SerialNumber: syz [ 976.575686][ T922] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 976.584995][ T922] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 976.593390][ T922] usb 6-1: Product: syz [ 976.597709][ T922] usb 6-1: Manufacturer: syz [ 976.603632][ T922] usb 6-1: SerialNumber: syz [ 976.805753][ T363] tipc: Left network mode [ 976.813444][ T308] usb 3-1: 0:2 : does not exist [ 976.884666][ T39] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 976.913375][ T308] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 976.997649][ T39] hid-generic 0000:0000:0000.002E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 977.020069][T13500] fuse: Bad value for 'group_id' [ 977.029056][ T308] usb 3-1: USB disconnect, device number 82 [ 977.226584][ T922] cdc_ncm 6-1:1.0: CDC Union missing and no IAD found [ 977.234352][ T922] cdc_ncm 6-1:1.0: bind() failure [ 977.249728][ T922] usb 6-1: USB disconnect, device number 93 [ 977.266055][ T1542] udevd[1542]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 977.290450][T13509] input: syz0 as /devices/virtual/input/input29 [ 977.606655][ T363] device bridge_slave_1 left promiscuous mode [ 977.926914][ T363] bridge0: port 2(bridge_slave_1) entered disabled state [ 977.958558][ T363] device bridge_slave_0 left promiscuous mode [ 977.965078][ T363] bridge0: port 1(bridge_slave_0) entered disabled state [ 978.723942][T13529] hub 8-0:1.0: USB hub found [ 978.728802][T13529] hub 8-0:1.0: 1 port detected [ 980.232475][T13542] fuse: Bad value for 'group_id' [ 980.590417][T13554] loop8: detected capacity change from 0 to 7 [ 981.735785][ T922] usb 6-1: new high-speed USB device number 94 using dummy_hcd [ 981.867239][T13572] binder: BINDER_SET_CONTEXT_MGR already set [ 981.883437][T13572] binder: 13571:13572 ioctl 4018620d 200000004a80 returned -16 [ 982.015629][ T922] usb 6-1: Using ep0 maxpacket: 16 [ 982.031557][ T922] usb 6-1: unable to get BOS descriptor or descriptor too short [ 982.057417][ T922] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 982.098030][ T922] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 982.146553][ T922] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 982.199268][ T922] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 982.216164][T13579] input: syz0 as /devices/virtual/input/input30 [ 982.236111][ T922] usb 6-1: Product: syz [ 982.250131][ T922] usb 6-1: Manufacturer: syz [ 982.282045][ T922] usb 6-1: SerialNumber: syz [ 982.457076][ T28] kauditd_printk_skb: 35 callbacks suppressed [ 982.457094][ T28] audit: type=1400 audit(1779155940.925:388): avc: denied { read } for pid=13588 comm="syz.7.3994" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 982.519192][ T24] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 982.547819][ T24] hid-generic 0000:0000:0000.002F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 982.689575][ T28] audit: type=1400 audit(1779155941.155:389): avc: denied { listen } for pid=13598 comm="syz.6.3998" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 982.723296][T13599] serio: Serial port ttynull [ 983.143514][ T922] cdc_ncm 6-1:1.0: CDC Union missing and no IAD found [ 983.163210][ T922] cdc_ncm 6-1:1.0: bind() failure [ 983.200176][ T922] usb 6-1: USB disconnect, device number 94 [ 983.272398][T13614] input: syz0 as /devices/virtual/input/input32 [ 983.565581][ T308] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 983.793852][ T308] usb 3-1: Using ep0 maxpacket: 32 [ 983.800204][ T308] usb 3-1: config 0 has an invalid interface number: 74 but max is 0 [ 983.812429][ T308] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 983.823441][ T308] usb 3-1: config 0 has no interface number 0 [ 983.829777][ T308] usb 3-1: config 0 interface 74 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 983.839828][ T308] usb 3-1: config 0 interface 74 has no altsetting 0 [ 983.857398][ T308] usb 3-1: New USB device found, idVendor=1ae7, idProduct=9003, bcdDevice=44.08 [ 983.872457][ T308] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 983.881476][ T308] usb 3-1: Product: syz [ 983.885870][ T308] usb 3-1: Manufacturer: syz [ 983.890533][ T308] usb 3-1: SerialNumber: syz [ 983.900043][ T308] usb 3-1: config 0 descriptor?? [ 984.395655][ T308] usb 7-1: new high-speed USB device number 107 using dummy_hcd [ 984.595643][ T308] usb 7-1: Using ep0 maxpacket: 16 [ 984.622706][ T308] usb 7-1: unable to get BOS descriptor or descriptor too short [ 984.642357][ T308] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 984.683037][ T308] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 984.724158][ T24] usb 3-1: USB disconnect, device number 83 [ 984.731986][ T308] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 984.745090][ T308] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 984.753372][ T308] usb 7-1: Product: syz [ 984.759131][ T308] usb 7-1: Manufacturer: syz [ 984.763849][ T308] usb 7-1: SerialNumber: syz [ 984.997354][ T39] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 985.069190][ T39] hid-generic 0000:0000:0000.0030: hidraw0: HID v0.00 Device [syz1] on syz0 [ 985.400781][ T308] cdc_ncm 7-1:1.0: CDC Union missing and no IAD found [ 985.418344][ T308] cdc_ncm 7-1:1.0: bind() failure [ 985.444207][ T308] usb 7-1: USB disconnect, device number 107 [ 986.178427][T13705] tmpfs: Unknown parameter 'quota' [ 986.196753][T13707] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4041'. [ 986.337162][T13711] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4042'. [ 986.895634][ T325] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 987.091717][ T325] usb 3-1: Using ep0 maxpacket: 32 [ 987.100922][ T325] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 987.109960][ T325] usb 3-1: config 0 has no interface number 0 [ 987.131282][ T325] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 987.154245][ T325] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 987.164300][ T325] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 987.195572][ T325] usb 3-1: Product: syz [ 987.199904][ T325] usb 3-1: Manufacturer: syz [ 987.205175][ T325] usb 3-1: SerialNumber: syz [ 987.244011][ T325] usb 3-1: config 0 descriptor?? [ 987.253388][T13713] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 987.496371][T13713] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 988.253061][T13751] binder: BINDER_SET_CONTEXT_MGR already set [ 988.259571][T13751] binder: 13750:13751 ioctl 4018620d 200000004a80 returned -16 [ 988.505585][T12185] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 988.515570][ T24] usb 7-1: new high-speed USB device number 108 using dummy_hcd [ 988.685562][T12185] usb 2-1: Using ep0 maxpacket: 16 [ 988.692067][T12185] usb 2-1: unable to get BOS descriptor or descriptor too short [ 988.700631][T12185] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 988.705649][ T24] usb 7-1: Using ep0 maxpacket: 8 [ 988.716275][T12185] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 988.717734][ T24] usb 7-1: config 0 has an invalid interface number: 186 but max is 0 [ 988.730330][T12185] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 988.735401][ T24] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 988.744971][T12185] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 988.755165][ T24] usb 7-1: config 0 has no interface number 0 [ 988.762992][T12185] usb 2-1: Product: syz [ 988.769188][ T24] usb 7-1: config 0 interface 186 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 988.773246][T12185] usb 2-1: Manufacturer: syz [ 988.783920][ T24] usb 7-1: config 0 interface 186 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 988.788477][T12185] usb 2-1: SerialNumber: syz [ 988.798406][ T24] usb 7-1: config 0 interface 186 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 988.813932][ T24] usb 7-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 988.823062][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 988.831341][ T24] usb 7-1: Product: syz [ 988.835592][ T24] usb 7-1: Manufacturer: syz [ 988.840261][ T24] usb 7-1: SerialNumber: syz [ 988.849486][ T24] usb 7-1: config 0 descriptor?? [ 988.922270][T13754] fuse: Unknown parameter 'user00000000000000000000' [ 989.011539][ T310] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 989.029840][ T310] hid-generic 0000:0000:0000.0031: hidraw0: HID v0.00 Device [syz1] on syz0 [ 989.060308][ T24] usb 7-1: USB disconnect, device number 108 [ 989.195961][T13773] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4065'. [ 989.212530][T12185] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 989.220422][T12185] cdc_ncm 2-1:1.0: bind() failure [ 989.237586][T12185] usb 2-1: USB disconnect, device number 94 [ 989.505997][ T472] usb 6-1: new high-speed USB device number 95 using dummy_hcd [ 989.614035][T13783] binder: BINDER_SET_CONTEXT_MGR already set [ 989.620176][T13783] binder: 13782:13783 ioctl 4018620d 200000004a80 returned -16 [ 989.685586][ T472] usb 6-1: Using ep0 maxpacket: 8 [ 989.693202][ T472] usb 6-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 989.702317][ T472] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 989.710383][ T472] usb 6-1: Product: syz [ 989.714570][ T472] usb 6-1: Manufacturer: syz [ 989.719252][ T472] usb 6-1: SerialNumber: syz [ 989.724527][ T472] usb 6-1: config 0 descriptor?? [ 990.457541][ T325] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 990.468315][ T325] asix: probe of 3-1:0.188 failed with error -71 [ 990.476090][ T325] usb 3-1: USB disconnect, device number 84 [ 990.575095][T13800] binder: BINDER_SET_CONTEXT_MGR already set [ 990.581227][T13800] binder: 13799:13800 ioctl 4018620d 200000004a80 returned -16 [ 991.814479][T13835] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 992.225557][ T325] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 992.253625][ T472] usb 6-1: USB disconnect, device number 95 [ 992.425555][ T325] usb 3-1: Using ep0 maxpacket: 32 [ 992.432660][ T325] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 992.446822][ T325] usb 3-1: config 0 has no interface number 0 [ 992.456109][ T325] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 992.485948][ T325] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 992.505334][ T325] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 992.513661][ T325] usb 3-1: Product: syz [ 992.518031][ T325] usb 3-1: Manufacturer: syz [ 992.522686][ T325] usb 3-1: SerialNumber: syz [ 992.532555][ T325] usb 3-1: config 0 descriptor?? [ 992.538171][T13843] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 992.752526][T13843] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 993.993400][ T28] audit: type=1400 audit(1779155952.455:390): avc: denied { search } for pid=13872 comm="syz.5.4106" name="/" dev="configfs" ino=14287 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 994.021207][ T28] audit: type=1400 audit(1779155952.455:391): avc: denied { setattr } for pid=13872 comm="syz.5.4106" name="/" dev="configfs" ino=14287 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 994.685595][T12185] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 994.865547][T12185] usb 2-1: Using ep0 maxpacket: 16 [ 994.872411][T12185] usb 2-1: unable to get BOS descriptor or descriptor too short [ 994.881198][T12185] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 994.891594][T12185] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 994.911203][T12185] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 994.920396][T12185] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 994.928549][T12185] usb 2-1: Product: syz [ 994.932799][T12185] usb 2-1: Manufacturer: syz [ 994.937480][T12185] usb 2-1: SerialNumber: syz [ 995.178940][ T39] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 995.212156][ T39] hid-generic 0000:0000:0000.0032: hidraw0: HID v0.00 Device [syz1] on syz0 [ 995.726005][T12185] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 995.732834][T12185] cdc_ncm 2-1:1.0: bind() failure [ 995.747287][T12185] usb 2-1: USB disconnect, device number 95 [ 996.175564][ T310] usb 6-1: new full-speed USB device number 96 using dummy_hcd [ 996.366608][ T310] usb 6-1: config 248 has an invalid interface number: 192 but max is 1 [ 996.375188][ T310] usb 6-1: config 248 has 1 interface, different from the descriptor's value: 2 [ 996.384314][ T310] usb 6-1: config 248 has no interface number 0 [ 996.390655][ T310] usb 6-1: config 248 interface 192 has no altsetting 0 [ 996.399119][ T310] usb 6-1: New USB device found, idVendor=19d2, idProduct=1170, bcdDevice=66.cd [ 996.408233][ T310] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 996.416287][ T310] usb 6-1: Product: syz [ 996.420500][ T310] usb 6-1: Manufacturer: syz [ 996.425144][ T310] usb 6-1: SerialNumber: syz [ 996.431936][ T310] cdc_ether 6-1:248.192: skipping garbage [ 996.437775][ T310] usb 6-1: bad CDC descriptors [ 996.556608][ T325] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 996.567046][ T325] asix: probe of 3-1:0.188 failed with error -71 [ 996.574920][ T325] usb 3-1: USB disconnect, device number 85 [ 996.639999][ T24] usb 6-1: USB disconnect, device number 96 [ 996.948061][T13954] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4137'. [ 996.985569][ T39] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 997.175701][ T39] usb 2-1: Using ep0 maxpacket: 16 [ 997.183365][ T39] usb 2-1: unable to get BOS descriptor or descriptor too short [ 997.195221][ T39] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 997.205920][ T39] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 997.219360][ T39] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 997.228527][ T39] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 997.236710][ T39] usb 2-1: Product: syz [ 997.240970][ T39] usb 2-1: Manufacturer: syz [ 997.245662][ T39] usb 2-1: SerialNumber: syz [ 997.321115][T13969] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4143'. [ 997.365649][ T325] usb 7-1: new high-speed USB device number 109 using dummy_hcd [ 997.468041][ T8654] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 997.511259][ T8654] hid-generic 0000:0000:0000.0033: hidraw0: HID v0.00 Device [syz1] on syz0 [ 997.626701][ T325] usb 7-1: Using ep0 maxpacket: 32 [ 997.636210][ T28] audit: type=1400 audit(1779155956.105:392): avc: denied { getopt } for pid=13970 comm="syz.2.4145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 997.656546][ T325] usb 7-1: config 4 has an invalid interface number: 114 but max is 0 [ 997.669955][ T325] usb 7-1: config 4 has no interface number 0 [ 998.377899][ T325] usb 7-1: config 4 interface 114 has no altsetting 0 [ 998.419363][ T325] usb 7-1: New USB device found, idVendor=17ef, idProduct=720c, bcdDevice=d2.e5 [ 998.429627][ T325] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 998.457511][ T325] usb 7-1: Product: syz [ 998.472133][ T325] usb 7-1: Manufacturer: syz [ 998.489404][ T325] usb 7-1: SerialNumber: syz [ 998.809686][ T39] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 998.817260][ T39] cdc_ncm 2-1:1.0: bind() failure [ 998.841791][ T39] usb 2-1: USB disconnect, device number 96 [ 999.219262][ T325] r8152-cfgselector 7-1: Unknown version 0x0000 [ 999.226341][ T325] r8152-cfgselector 7-1: Unknown version 0x0000 [ 999.234422][ T325] r8152-cfgselector 7-1: USB disconnect, device number 109 [ 999.686674][T14003] syz.1.4157[14003] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 999.686773][T14003] syz.1.4157[14003] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 999.847703][T14015] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4159'. [ 1000.939367][T14048] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4172'. [ 1001.265653][ T325] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 1001.401424][T14071] fuse: Unknown parameter 'group_id00000000000000000000' [ 1001.457146][ T325] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1001.837074][ T325] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1001.846338][ T325] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1001.854644][ T325] usb 3-1: SerialNumber: syz [ 1002.765441][ T325] cdc_ether: probe of 3-1:1.0 failed with error -71 [ 1002.782061][T14108] fuse: Unknown parameter 'group_id00000000000000000000' [ 1002.787109][ T325] usb 3-1: USB disconnect, device number 86 [ 1004.021337][ T28] audit: type=1400 audit(1779155962.485:393): avc: denied { getopt } for pid=14139 comm="syz.5.4207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1004.065169][T14138] loop1: detected capacity change from 0 to 512 [ 1004.099377][T14138] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.4206: inode has both inline data and extents flags [ 1004.165974][T14138] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.4206: couldn't read orphan inode 15 (err -117) [ 1004.188318][T14138] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1004.204787][ T28] audit: type=1400 audit(1779155962.665:394): avc: denied { read } for pid=14137 comm="syz.1.4206" path="/249/file0/cpu.stat" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 1004.310530][T11239] EXT4-fs (loop1): unmounting filesystem. [ 1004.325570][ T28] audit: type=1400 audit(1779155962.665:395): avc: denied { ioctl } for pid=14137 comm="syz.1.4206" path="/249/file0/cpu.stat" dev="loop1" ino=18 ioctlcmd=0x583b scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 1004.395983][T14154] fuse: Bad value for 'user_id' [ 1004.560246][T14164] netlink: 200 bytes leftover after parsing attributes in process `syz.6.4216'. [ 1005.286754][T14187] loop1: detected capacity change from 0 to 512 [ 1005.305065][T14187] EXT4-fs error (device loop1): ext4_orphan_get:1425: comm syz.1.4222: bad orphan inode 13 [ 1005.317482][T14187] ext4_test_bit(bit=12, block=4) = 1 [ 1005.324894][T14187] is_bad_inode(inode)=0 [ 1005.345622][T14187] NEXT_ORPHAN(inode)=0 [ 1005.349778][T14187] max_ino=32 [ 1005.354327][T14187] i_nlink=1 [ 1005.364589][T14187] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1005.403491][T14187] EXT4-fs warning (device loop1): dx_probe:845: inode #2: comm syz.1.4222: Hash code is SIPHASH, but hash not in dirent [ 1005.418924][T14187] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.4222: Corrupt directory, running e2fsck is recommended [ 1005.441076][T14187] EXT4-fs warning (device loop1): dx_probe:845: inode #2: comm syz.1.4222: Hash code is SIPHASH, but hash not in dirent [ 1005.457276][T14187] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.4222: Corrupt directory, running e2fsck is recommended [ 1005.555725][T11239] EXT4-fs (loop1): unmounting filesystem. [ 1005.827776][T14203] binder: BINDER_SET_CONTEXT_MGR already set [ 1005.833901][T14203] binder: 14201:14203 ioctl 4018620d 200000004a80 returned -16 [ 1005.845438][T14204] loop5: detected capacity change from 0 to 512 [ 1005.892716][T14204] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1006.024285][T14204] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2 [ 1006.040798][T14204] EXT4-fs error (device loop5): ext4_iget_extra_inode:4754: inode #15: comm syz.5.4230: corrupted in-inode xattr [ 1006.080768][T14204] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.4230: couldn't read orphan inode 15 (err -117) [ 1006.117379][T14204] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1006.175604][T14204] EXT4-fs error (device loop5): ext4_iget_extra_inode:4754: inode #15: comm syz.5.4230: corrupted in-inode xattr [ 1006.213372][T14204] EXT4-fs error (device loop5): ext4_iget_extra_inode:4754: inode #15: comm syz.5.4230: corrupted in-inode xattr [ 1006.269708][T11571] EXT4-fs (loop5): unmounting filesystem. [ 1006.862326][ T28] audit: type=1400 audit(1779155965.325:396): avc: denied { watch watch_reads } for pid=14232 comm="syz.2.4240" path="/syzcgroup/cpu/syz2/cgroup.procs" dev="cgroup" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 1007.368748][T14251] fuse: Bad value for 'user_id' [ 1007.789900][T14262] device syzkaller0 entered promiscuous mode [ 1008.023965][T14264] loop1: detected capacity change from 0 to 512 [ 1008.072049][T14264] tipc: Started in network mode [ 1008.086404][T14264] tipc: Node identity 8acf49611c, cluster identity 4711 [ 1008.111259][T14264] tipc: Enabled bearer , priority 0 [ 1008.150552][T14265] device syzkaller0 entered promiscuous mode [ 1008.162857][T14265] tipc: Resetting bearer [ 1008.173801][T14267] device syzkaller0 entered promiscuous mode [ 1008.184967][T14263] tipc: Resetting bearer [ 1008.209068][T14263] tipc: Disabling bearer [ 1008.213772][T14269] loop5: detected capacity change from 0 to 512 [ 1008.227301][T14269] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1008.287787][T14267] tipc: Started in network mode [ 1008.292932][T14267] tipc: Node identity 8e72a90a0534, cluster identity 4711 [ 1008.300972][T14267] tipc: Enabled bearer , priority 0 [ 1008.312496][T14266] tipc: Resetting bearer [ 1008.314360][T14269] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 1008.330260][T14266] tipc: Disabling bearer [ 1008.341491][T14269] EXT4-fs (loop5): 1 truncate cleaned up [ 1008.347528][T14269] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1008.364537][T14269] EXT4-fs warning (device loop5): ext4_resize_begin:74: won't resize using backup superblock at 1 [ 1008.385970][T14276] loop1: detected capacity change from 0 to 128 [ 1008.497292][T14276] FAT-fs (loop1): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 1008.508700][T11571] EXT4-fs (loop5): unmounting filesystem. [ 1008.743135][T14287] fuse: Unknown parameter '0x0000000000000003' [ 1009.116206][T14298] loop6: detected capacity change from 0 to 512 [ 1009.134881][T14298] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1009.147590][T14298] EXT4-fs error (device loop6): xattr_find_entry:297: inode #15: comm syz.6.4262: corrupted xattr entries [ 1009.160373][T14298] EXT4-fs (loop6): 1 truncate cleaned up [ 1009.166251][T14298] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1009.199356][T12218] EXT4-fs (loop6): unmounting filesystem. [ 1009.631153][ T28] audit: type=1400 audit(1779155968.095:397): avc: denied { bind } for pid=14313 comm="syz.5.4270" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1009.695144][ T28] audit: type=1400 audit(1779155968.125:398): avc: denied { name_bind } for pid=14313 comm="syz.5.4270" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 1009.725540][T12185] usb 7-1: new high-speed USB device number 110 using dummy_hcd [ 1009.760009][ T28] audit: type=1400 audit(1779155968.125:399): avc: denied { node_bind } for pid=14313 comm="syz.5.4270" saddr=172.20.20.170 src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 1009.788143][T14319] fuse: Unknown parameter 'fd0x0000000000000003' [ 1009.885964][T12185] usb 7-1: device descriptor read/64, error -71 [ 1009.892301][ T28] audit: type=1400 audit(1779155968.355:400): avc: denied { read write } for pid=14331 comm="syz.7.4278" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 1010.191110][T14337] usb usb1: check_ctrlrecip: process 14337 (syz.7.4279) requesting ep 01 but needs 81 [ 1010.223898][ T28] audit: type=1400 audit(1779155968.355:401): avc: denied { open } for pid=14331 comm="syz.7.4278" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 1010.238272][T14337] usb usb1: usbfs: process 14337 (syz.7.4279) did not claim interface 0 before use [ 1010.249637][ T28] audit: type=1400 audit(1779155968.625:402): avc: denied { append } for pid=14336 comm="syz.7.4279" name="001" dev="devtmpfs" ino=164 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1010.409924][T14348] loop5: detected capacity change from 0 to 128 [ 1010.417047][T14348] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1010.430000][T14348] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1010.495568][T12185] usb 7-1: device descriptor read/64, error -71 [ 1010.562018][ T28] audit: type=1400 audit(1779155969.025:403): avc: denied { create } for pid=14351 comm="syz.5.4285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1010.588664][ T28] audit: type=1400 audit(1779155969.055:404): avc: denied { setopt } for pid=14353 comm="syz.5.4286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1010.681903][ T28] audit: type=1400 audit(1779155969.135:405): avc: denied { nlmsg_write } for pid=14359 comm="syz.1.4289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 1010.765582][T12185] usb 7-1: new high-speed USB device number 111 using dummy_hcd [ 1010.925584][T12185] usb 7-1: device descriptor read/64, error -71 [ 1011.195579][T12185] usb 7-1: device descriptor read/64, error -71 [ 1011.316111][T12185] usb usb7-port1: attempt power cycle [ 1011.481113][T14373] loop7: detected capacity change from 0 to 512 [ 1011.566264][T14373] EXT4-fs error (device loop7): ext4_orphan_get:1425: comm syz.7.4293: bad orphan inode 11862016 [ 1011.584750][T14373] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1011.602365][T14373] ext4 filesystem being mounted at /146/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1011.642246][T12488] EXT4-fs (loop7): unmounting filesystem. [ 1011.765907][T12185] usb 7-1: new high-speed USB device number 112 using dummy_hcd [ 1012.128944][ T39] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 1012.300646][T12185] usb 7-1: device descriptor read/8, error -71 [ 1012.345608][ T39] usb 3-1: Using ep0 maxpacket: 16 [ 1012.352461][ T39] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1012.362688][ T39] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1012.362706][T14404] netlink: 200 bytes leftover after parsing attributes in process `syz.6.4305'. [ 1012.388353][ T39] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1012.411308][ T39] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1012.429759][ T39] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1012.444137][ T39] usb 3-1: Product: syz [ 1012.455579][ T39] usb 3-1: Manufacturer: syz [ 1012.456670][T12185] usb 7-1: device descriptor read/8, error -71 [ 1012.494359][T14408] loop6: detected capacity change from 0 to 1024 [ 1012.514483][ T39] usb 3-1: SerialNumber: syz [ 1012.527506][T14408] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1012.536237][T14408] ext4 filesystem being mounted at /129/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1012.572605][T14408] EXT4-fs error (device loop6): ext4_map_blocks:745: inode #15: block 3: comm syz.6.4307: lblock 3 mapped to illegal pblock 3 (length 3) [ 1012.587893][T14408] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 1012.601655][T14408] EXT4-fs (loop6): This should not happen!! Data will be lost [ 1012.601655][T14408] [ 1012.614817][T14414] EXT4-fs error (device loop6): ext4_map_blocks:745: inode #15: block 7: comm syz.6.4307: lblock 7 mapped to illegal pblock 7 (length 9) [ 1012.629630][T14414] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 7 with max blocks 9 with error 117 [ 1012.658443][T14414] EXT4-fs (loop6): This should not happen!! Data will be lost [ 1012.658443][T14414] [ 1012.700062][T12218] EXT4-fs (loop6): unmounting filesystem. [ 1012.706637][T14416] loop7: detected capacity change from 0 to 4096 [ 1012.728495][T14366] hid-generic 0000:0000:0000.0034: unknown main item tag 0x0 [ 1012.758697][T14366] hid-generic 0000:0000:0000.0034: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1012.770704][T14416] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1012.890937][ T28] audit: type=1400 audit(1779155971.355:406): avc: denied { watch watch_reads } for pid=14415 comm="syz.7.4309" path="/148/file0" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1012.949871][T12488] EXT4-fs (loop7): unmounting filesystem. [ 1013.025117][T14430] loop6: detected capacity change from 0 to 512 [ 1013.055577][T14430] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1013.110773][T14434] tipc: Started in network mode [ 1013.115827][T14434] tipc: Node identity 2, cluster identity 4711 [ 1013.122398][T14434] tipc: Node number set to 2 [ 1013.127663][T14434] tipc: Cannot configure node identity twice [ 1013.128877][T14430] EXT4-fs error (device loop6): ext4_orphan_get:1425: comm syz.6.4314: bad orphan inode 131083 [ 1013.157406][T14430] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1013.167270][ T39] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found [ 1013.174076][ T39] cdc_ncm 3-1:1.0: bind() failure [ 1013.226191][ T39] usb 3-1: USB disconnect, device number 87 [ 1013.250078][T12218] EXT4-fs (loop6): unmounting filesystem. [ 1013.750576][T14454] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4320'. [ 1013.994070][T14472] loop6: detected capacity change from 0 to 512 [ 1014.011265][T14472] ext4: Unknown parameter 'measure' [ 1014.320490][T14480] loop1: detected capacity change from 0 to 1024 [ 1014.327867][T14480] ext4: Unknown parameter 'fowner' [ 1014.615617][ T39] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 1014.845573][ T39] usb 2-1: Using ep0 maxpacket: 16 [ 1014.852553][ T39] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1014.880492][ T39] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1014.900780][ T39] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1014.941209][ T39] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1014.960826][ T39] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1014.986109][ T39] usb 2-1: Product: syz [ 1014.990321][ T39] usb 2-1: Manufacturer: syz [ 1015.005116][ T39] usb 2-1: SerialNumber: syz [ 1015.219403][T14515] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4347'. [ 1015.226979][ T24] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 1015.246826][ T24] hid-generic 0000:0000:0000.0035: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1016.073572][ T39] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 1016.086122][ T39] cdc_ncm 2-1:1.0: bind() failure [ 1016.120614][ T39] usb 2-1: USB disconnect, device number 97 [ 1016.323727][T14548] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4360'. [ 1016.641160][T14551] binder: 14550:14551 ioctl 4018620d 0 returned -22 [ 1016.771282][ T28] audit: type=1400 audit(1779155975.235:407): avc: denied { ioctl } for pid=14557 comm="syz.6.4364" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0xb705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1016.847370][ T28] audit: type=1400 audit(1779155975.315:408): avc: denied { setopt } for pid=14563 comm="syz.6.4367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1016.894685][T14566] loop7: detected capacity change from 0 to 1024 [ 1016.928384][T14566] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 1016.988638][T12488] EXT4-fs (loop7): unmounting filesystem. [ 1016.994754][T14577] fuse: Invalid rootmode [ 1017.078855][T14580] loop7: detected capacity change from 0 to 512 [ 1017.137583][T14580] EXT4-fs error (device loop7): ext4_orphan_get:1399: inode #15: comm syz.7.4372: inode has both inline data and extents flags [ 1017.156197][T14580] EXT4-fs error (device loop7): ext4_orphan_get:1404: comm syz.7.4372: couldn't read orphan inode 15 (err -117) [ 1017.168751][T14580] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 1017.242429][T14580] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 7934 vs 220 free clusters [ 1017.328600][T12488] EXT4-fs (loop7): unmounting filesystem. [ 1017.515565][ T28] audit: type=1400 audit(1779155975.965:409): avc: denied { write } for pid=14593 comm="syz.7.4376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1018.005619][ T6] usb 6-1: new high-speed USB device number 97 using dummy_hcd [ 1018.235526][ T6] usb 6-1: Using ep0 maxpacket: 16 [ 1018.243186][ T6] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1018.263843][ T6] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1018.274879][ T6] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1018.314964][ T6] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1018.347223][ T6] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1018.372029][ T6] usb 6-1: Product: syz [ 1018.380360][T14622] binder: 14621:14622 ioctl 4018620d 0 returned -22 [ 1018.384519][ T6] usb 6-1: Manufacturer: syz [ 1018.393582][ T6] usb 6-1: SerialNumber: syz [ 1018.636887][ T307] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 1018.653367][ T307] hid-generic 0000:0000:0000.0036: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1018.720075][T14630] loop7: detected capacity change from 0 to 128 [ 1018.783267][T14630] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 1018.808687][T14630] ext4 filesystem being mounted at /163/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1018.862527][T12488] EXT4-fs (loop7): unmounting filesystem. [ 1018.925177][ T6] cdc_ncm 6-1:1.0: CDC Union missing and no IAD found [ 1018.934872][ T6] cdc_ncm 6-1:1.0: bind() failure [ 1018.949786][ T6] usb 6-1: USB disconnect, device number 97 [ 1018.998773][T14649] loop1: detected capacity change from 0 to 1024 [ 1019.016206][T14649] EXT4-fs: Ignoring removed orlov option [ 1019.031293][T14649] ext4: Unknown parameter 'smackfsdef' [ 1019.096728][T14649] loop1: detected capacity change from 0 to 4096 [ 1019.109397][T14649] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1019.119378][T14649] EXT4-fs (loop1): shut down requested (1) [ 1019.125930][ T28] audit: type=1400 audit(1779155977.595:410): avc: denied { read } for pid=85 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 1019.128853][T14649] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 1019.156722][ T28] audit: type=1400 audit(1779155977.595:411): avc: denied { search } for pid=85 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1019.163146][T14649] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 1019.179854][ T28] audit: type=1400 audit(1779155977.595:412): avc: denied { write } for pid=85 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1019.210917][T14649] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=13 [ 1019.214047][ T28] audit: type=1400 audit(1779155977.595:413): avc: denied { add_name } for pid=85 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1019.233248][T14649] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=15 [ 1019.243766][ T28] audit: type=1400 audit(1779155977.595:414): avc: denied { create } for pid=85 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1019.267099][T14649] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 1019.278329][ T28] audit: type=1400 audit(1779155977.595:415): avc: denied { append open } for pid=85 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1019.278364][ T28] audit: type=1400 audit(1779155977.595:416): avc: denied { getattr } for pid=85 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1019.298077][T14652] loop6: detected capacity change from 0 to 512 [ 1019.302965][T14649] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 1019.325168][T14652] EXT4-fs: Ignoring removed bh option [ 1019.340011][T14649] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=13 [ 1019.354221][T14649] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=15 [ 1019.363804][T14652] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 1019.377594][T14652] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 1019.386550][T14652] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 1019.396326][T14652] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 1019.397171][T11239] EXT4-fs (loop1): unmounting filesystem. [ 1019.405817][T14652] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1019.441465][T14652] fscrypt (loop6, inode 12): Error -61 getting encryption context [ 1019.552761][T12218] EXT4-fs (loop6): unmounting filesystem. [ 1019.721385][T14676] binder: BINDER_SET_CONTEXT_MGR already set [ 1019.739482][T14676] binder: 14675:14676 ioctl 4018620d 200000004a80 returned -16 [ 1020.000187][T14689] loop5: detected capacity change from 0 to 1024 [ 1020.011478][T14689] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1020.027695][T14689] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1020.063733][T14689] BUG: unable to handle page fault for address: ffffffffffffffec [ 1020.071511][T14689] #PF: supervisor read access in kernel mode [ 1020.077516][T14689] #PF: error_code(0x0000) - not-present page [ 1020.083535][T14689] PGD 7012067 P4D 7012067 PUD 7014067 PMD 0 [ 1020.089590][T14689] Oops: 0000 [#1] PREEMPT SMP KASAN [ 1020.094917][T14689] CPU: 1 PID: 14689 Comm: syz.5.4412 Not tainted syzkaller #0 [ 1020.102406][T14689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1020.112493][T14689] RIP: 0010:ext4_ext_map_blocks+0x2e59/0x6200 [ 1020.118694][T14689] Code: 40 01 00 00 4d 85 f6 0f 84 bc 00 00 00 48 89 5c 24 20 49 8d 7e 08 48 89 f8 48 c1 e8 03 42 0f b6 04 20 84 c0 0f 85 38 16 00 00 <41> 0f b7 46 08 c1 e0 04 48 8d 04 40 48 89 44 24 08 49 8d 46 28 48 [ 1020.138342][T14689] RSP: 0018:ffffc9000af8f820 EFLAGS: 00010246 [ 1020.144469][T14689] RAX: 0000000000000000 RBX: 00000000000000d1 RCX: 0000000000080000 [ 1020.152483][T14689] RDX: ffffc90009f81000 RSI: 0000000000002073 RDI: ffffffffffffffec [ 1020.160486][T14689] RBP: ffffc9000af8fad0 R08: ffff88813810d303 R09: 1ffff11027021a60 [ 1020.168496][T14689] R10: dffffc0000000000 R11: ffffed1027021a61 R12: dffffc0000000000 [ 1020.176514][T14689] R13: 1ffff920015f1f30 R14: ffffffffffffffe4 R15: 0000000000000010 [ 1020.184521][T14689] FS: 00007fe1818b06c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 1020.193484][T14689] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1020.200098][T14689] CR2: ffffffffffffffec CR3: 000000013bf13000 CR4: 00000000003526a0 [ 1020.208105][T14689] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000002 [ 1020.216106][T14689] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1020.224135][T14689] Call Trace: [ 1020.227442][T14689] [ 1020.230409][T14689] ? release_firmware_map_entry+0x190/0x190 [ 1020.236500][T14689] ? __kasan_check_read+0x11/0x20 [ 1020.241613][T14689] ? preempt_schedule+0xbc/0xd0 [ 1020.246502][T14689] ? __cfi_ext4_ext_map_blocks+0x10/0x10 [ 1020.252175][T14689] ? ext4_es_lookup_extent+0x54c/0x900 [ 1020.257686][T14689] ext4_map_blocks+0x9d8/0x1b70 [ 1020.262655][T14689] ? __cfi_ext4_map_blocks+0x10/0x10 [ 1020.267979][T14689] ? __kasan_check_read+0x11/0x20 [ 1020.273041][T14689] ? __ext4_journal_start_sb+0x2ed/0x4a0 [ 1020.278711][T14689] ext4_alloc_file_blocks+0x372/0xb60 [ 1020.284130][T14689] ? trace_ext4_fallocate_enter+0x130/0x130 [ 1020.290078][T14689] ext4_fallocate+0x8b2/0x1d20 [ 1020.294879][T14689] ? fsnotify_perm+0x67/0x5b0 [ 1020.299684][T14689] vfs_fallocate+0x4c5/0x5a0 [ 1020.304364][T14689] __x64_sys_fallocate+0xc0/0x110 [ 1020.309428][T14689] x64_sys_call+0x7fa/0x9a0 [ 1020.313973][T14689] do_syscall_64+0x4c/0xa0 [ 1020.318479][T14689] ? clear_bhb_loop+0x30/0x80 [ 1020.323239][T14689] ? clear_bhb_loop+0x30/0x80 [ 1020.327961][T14689] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1020.333890][T14689] RIP: 0033:0x7fe18099ce59 [ 1020.338356][T14689] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1020.358012][T14689] RSP: 002b:00007fe1818b0028 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 1020.366463][T14689] RAX: ffffffffffffffda RBX: 00007fe180c15fa0 RCX: 00007fe18099ce59 [ 1020.374466][T14689] RDX: 000000000000000a RSI: 0000000000000000 RDI: 0000000000000004 [ 1020.382475][T14689] RBP: 00007fe180a32d6f R08: 0000000000000000 R09: 0000000000000000 [ 1020.390482][T14689] R10: 000000000008ffff R11: 0000000000000246 R12: 0000000000000000 [ 1020.398488][T14689] R13: 00007fe180c16038 R14: 00007fe180c15fa0 R15: 00007ffee11d3188 [ 1020.406498][T14689] [ 1020.409552][T14689] Modules linked in: [ 1020.413487][T14689] CR2: ffffffffffffffec [ 1020.417669][T14689] ---[ end trace 0000000000000000 ]--- [ 1020.423141][T14689] RIP: 0010:ext4_ext_map_blocks+0x2e59/0x6200 [ 1020.429264][T14689] Code: 40 01 00 00 4d 85 f6 0f 84 bc 00 00 00 48 89 5c 24 20 49 8d 7e 08 48 89 f8 48 c1 e8 03 42 0f b6 04 20 84 c0 0f 85 38 16 00 00 <41> 0f b7 46 08 c1 e0 04 48 8d 04 40 48 89 44 24 08 49 8d 46 28 48 [ 1020.448900][T14689] RSP: 0018:ffffc9000af8f820 EFLAGS: 00010246 [ 1020.455000][T14689] RAX: 0000000000000000 RBX: 00000000000000d1 RCX: 0000000000080000 [ 1020.463004][T14689] RDX: ffffc90009f81000 RSI: 0000000000002073 RDI: ffffffffffffffec [ 1020.471009][T14689] RBP: ffffc9000af8fad0 R08: ffff88813810d303 R09: 1ffff11027021a60 [ 1020.479014][T14689] R10: dffffc0000000000 R11: ffffed1027021a61 R12: dffffc0000000000 [ 1020.487022][T14689] R13: 1ffff920015f1f30 R14: ffffffffffffffe4 R15: 0000000000000010 [ 1020.495034][T14689] FS: 00007fe1818b06c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 1020.503997][T14689] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1020.510611][T14689] CR2: ffffffffffffffec CR3: 000000013bf13000 CR4: 00000000003526a0 [ 1020.518633][T14689] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000002 [ 1020.526635][T14689] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1020.534709][T14689] Kernel panic - not syncing: Fatal exception [ 1020.541404][T14689] Kernel Offset: disabled [ 1020.545732][T14689] Rebooting in 86400 seconds..