last executing test programs: 13.565451429s ago: executing program 1 (id=2278): socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, 0x0) r0 = inotify_init() setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x8000102) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r2, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [], {0x14}}, 0x28}}, 0x0) inotify_add_watch(r0, &(0x7f0000000340)='.\x00', 0xa50003d1) getpid() fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r3) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan0\x00'}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r4, 0x0, 0x4008010) bind$alg(0xffffffffffffffff, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r5, 0x2000031, 0xfe7f, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="ebcbdc0b000080f72776", @ANYRESHEX, @ANYBLOB=',rootmode=00000000000', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) 12.19573507s ago: executing program 1 (id=2282): sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0xa, 0x4e23, 0x1, @local, 0x38a}, 0x1c, 0x0, 0x0, 0x0, 0x30}, 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32, @ANYBLOB="000000002000000000f2fffffd000000c15e1aac", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/14], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0xfffffffffffffcb5, &(0x7f0000000080)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mount$bind(0x0, &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x195408, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r1, &(0x7f0000000340)=ANY=[], 0xff2e) ioctl$TCXONC(r1, 0x540a, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000000c0)={'bond_slave_1\x00', &(0x7f0000000100)=@ethtool_rxnfc={0x30, 0x12, 0xd, {0x4, @esp_ip6_spec={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote, 0x0, 0x1}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 0x4, 0xb, [0x10001, 0x5]}, @usr_ip6_spec={@mcast1, @rand_addr=' \x01\x00', 0x9, 0xb8, 0x40}, {0x0, @random="e5090c6769c8", 0x1, 0x1, [0x3, 0x6]}, 0x8000000000000001, 0x7}}}) mount$9p_fd(0x0, &(0x7f0000000c80)='./cgroup\x00', &(0x7f0000004500), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB='k\x00']) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff"], 0x15) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r5 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x1, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000000), 0x400000075f, 0xa382) r7 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000000c0)={'bond_slave_1\x00', &(0x7f0000000100)=@ethtool_rxnfc={0x30, 0x12, 0xd, {0x4, @esp_ip6_spec={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote, 0x0, 0x1}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 0x4, 0xb, [0x10001, 0x5]}, @usr_ip6_spec={@mcast1, @rand_addr=' \x01\x00', 0x9, 0xb8, 0x40}, {0x0, @random="e5090c6769c8", 0x1, 0x1, [0x3, 0x6]}, 0x8000000000000001, 0x7}}}) mount$9p_fd(0x0, &(0x7f0000000c80)='./cgroup\x00', &(0x7f0000004500), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno', @ANYRESHEX=r2, @ANYBLOB='k\x00']) write$P9_RVERSION(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff"], 0x15) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r6 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x1, 0x0) r7 = syz_open_dev$loop(&(0x7f0000000000), 0x400000075f, 0xa382) r8 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 10.238276544s ago: executing program 0 (id=2287): r0 = socket(0x400000000010, 0x3, 0x0) r1 = fsopen(&(0x7f0000000080)='openpromfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000900)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x2008000}, 0x800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x100000000401, 0xe) r3 = socket(0x10, 0x80002, 0xfffffffc) sendmsg$nl_route_sched(r3, 0x0, 0x4004) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x7, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r5 = socket(0x3, 0x80000, 0x2) getsockopt(r5, 0x200000000114, 0x271a, 0xffffffffffffffff, &(0x7f0000000000)=0x7ffff000) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$packet(0x11, 0x2, 0x300) 8.947440685s ago: executing program 0 (id=2292): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x100000001, 0xfffffe0000000001, 0xfa11, 0x65aa}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x2) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000100), &(0x7f0000000140)=0x4) mount(&(0x7f0000000180)=@nullb, &(0x7f0000000240)='./cgroup\x00', &(0x7f0000000040)='udf\x00', 0x8000c0, &(0x7f00000001c0)='discard') r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e23, 0xfffffffc, @private1={0xfc, 0x1, '\x00', 0xfe}}, 0x1c) listen(r1, 0x407) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x4}, 0x8) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000540)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYBLOB="000100"], 0x8) symlink(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000000)='./file0\x00') r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) setns(r6, 0x24020000) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00') syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x20080) close_range(r8, 0xffffffffffffffff, 0x0) write(r7, &(0x7f00000001c0)="240000005800410f9c00f4f90085b3025cb1fddf08000100050100000800028001000000", 0x24) 8.869114806s ago: executing program 4 (id=2293): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$9p_virtio(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0xc, 0x0) io_setup(0x9fd, &(0x7f0000000100)=0x0) io_submit(r3, 0x7, &(0x7f0000001a80)=[&(0x7f00000017c0)={0x0, 0x0, 0x0, 0x2, 0x7, r2, &(0x7f00000007c0)="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", 0x1000, 0x9831, 0x0, 0x1}, &(0x7f0000001840)={0x0, 0x0, 0x0, 0x8, 0x3, r2, &(0x7f0000001800)="95c75a7a43f6bb2500a61909366361c4f1a829f707a0b72d454ae8581c5b0f81176396", 0x23, 0x655, 0x0, 0x1}, &(0x7f00000018c0)={0x0, 0x0, 0x0, 0x5, 0x3a68, 0xffffffffffffffff, &(0x7f0000001880), 0xffffffffffffff2e, 0x43, 0x0, 0x3}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x543, 0xffffffffffffffff, &(0x7f0000000300)="e81fd9175c582fa021e26fa4c01dcb4c4aaa603ad79bf45d701f1f2abafdde7fd27fa5aa309ea97bb91e43dd31ff7436e8a92f1334d5130fcbffba929c497b06dc97f56fe94b3f99d517e7d154df61f8aba274bddf5178ddb6490c2d7f6834702f8b39fdee341109acc91e12e64559301347dcc8f91a27f04228f8a7e687d50c75f5b82c46e29ce720c733db24aa4a72fedab8d05a73a4a0a054dfb1de57873799d2287ad390c27b018f9f757d138435d67e3b", 0xb3, 0xffffffffffffffff, 0x0, 0x2}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x8, 0x2, 0xffffffffffffffff, &(0x7f0000000580)="bcc7680c5404761360277c3ad53e0bedf6c8530fdd72f34d3a57ca06f1ca58bbedf8575302a4ef09b3b2c63996949b1c40a6cafa92a37a544b98c0f5fd31c0308cba74e2855117d833d181c8b017f9db33a2688ef8f2d562e896d30047e2305b7806ee300090a13f8c0aacf694d7475188bb73357fb23ebf4704e4a8c5a369321b7538cc31ea5c7b8a9b520cfe16fd4f39eb7c5362ea085c6883b85b204cc63f9701e82b4cf4e00b3ad7b953a67508020b33b3634809d14f", 0xb8, 0xe, 0x0, 0x1}, &(0x7f0000001880)={0x0, 0x0, 0x0, 0x5, 0x4, 0xffffffffffffffff, &(0x7f0000000680)="dc8e45a2d6cc6b0bb0b66b47952b814e3bf29dacf60f54ecb2f48877d764385f8f21ccd091fae7e425902075735abb5bad369f86019ba765d2ad4dfdf29ac757bd035a95a8007270a2ceadd4a31d0b38ddfcc6cfb050e490f480fa279104b03a4b1e3c9c2b6bbf852a5bbd257eaa38af8649c0cf40f3cbcfab33a08029dc55a423735b8a934e8e08ff7b042678e557ec5ba559590a6ed2b1a9479bf9b4a49a97401c07d09e6c628a34819c53a7cde7e6df91298640b35048155e5441a408cb4a195eb1b026e562e33620ca7db5b050446447084789bef6ff6f135e6bf586832e4c06", 0xe2, 0x10, 0x0, 0x6, r2}, &(0x7f0000001a40)={0x0, 0x0, 0x0, 0x5, 0x9, 0xffffffffffffffff, &(0x7f0000001940)="b80521e2cd8e904f5b5261979976650ddded880635e8fb0f037275ec5c8d2d06848c7d2aea426af5e5f7cfc1d2a0ba5ff46304e32d7af30e5a8b743db0710faff15cee4bea26239ce176c37aa0e1232e99589466325d89dde549b67dd2addd9e8ffd73967a89606bc873474b236ff81e78bef34b894cc0c83007bf9b5b6ba90334d92adbd31fe9ab847b3e61439c8c6ca3049ea49eb444bb8ff9a241d8cd77871e1d34323648278f66e70fb5d9877d89d9a5b594ceab064d683b40b682e23aa0dfd2a4", 0xc3, 0x7, 0x0, 0x1}]) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc044560f, &(0x7f0000000080)=@mmap={0x0, 0x2, 0x4, 0x0, 0x7, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "10110401"}}) mount$overlay(0x0, 0x0, &(0x7f0000000180), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0xcf88, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000005e00)=@newqdisc={0x60, 0x24, 0xd0f, 0x0, 0x2, {0x60, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0xa4}}, @TCA_TBF_BURST={0x8, 0x6, 0x12}]}}]}, 0x60}}, 0x8840) sendto$inet6(r4, &(0x7f0000000000)='\t', 0xf4c, 0x0, 0x0, 0x0) 8.596625311s ago: executing program 3 (id=2294): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1a, 0x0, &(0x7f0000000240)) r3 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000000c0)='cdg', 0x3) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000480)='htcp', 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x10000}, 0x28) ioctl$KVM_RUN(r2, 0xae80, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) socket(0x2, 0x3, 0xff) io_uring_setup(0x800280c, &(0x7f0000000380)={0x0, 0xc8a2, 0x100, 0x2, 0xb5}) openat$kvm(0xffffffffffffff9c, 0x0, 0x8000, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000540)={0x10003, 0x0, 0x0, 0x1000, &(0x7f000000b000/0x1000)=nil}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs(0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x1, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) 7.963221632s ago: executing program 1 (id=2296): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="02030003100000002cbd7000fbdbdf250200090040000000ff8000000000000005000600000000000a000000000000000000000000000000000000313e87218d64fdb700000000000200010000000000000007020000000005000500000000000a"], 0x80}, 0x1, 0x7}, 0x4008000) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000008c0)={0x8, 0x0, [{0x9000, 0x6c, &(0x7f0000000180)=""/108}, {0x100000, 0x3f, &(0x7f0000000200)=""/63}, {0x60000, 0x18, &(0x7f0000000300)=""/24}, {0x25000, 0xb2, &(0x7f0000000380)=""/178}, {0x40000, 0x50, &(0x7f00000005c0)=""/80}, {0x200000, 0xad, &(0x7f0000000640)=""/173}, {0x4, 0x94, &(0x7f0000000700)=""/148}, {0x54000, 0xd3, &(0x7f00000007c0)=""/211}]}) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r4 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc0000001900010000000000fedbdf25fe8000000000000000000000000000bbac1414aa000000000000000000000000fffc0000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000800000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000010000000000000000ff0900000000000000000000008040000000000000000008000000000000000000000000000000004400050000000000000000000000ffff0a010100000000003c"], 0xfc}}, 0x0) syz_emit_ethernet(0x5a, &(0x7f0000000040)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00fcff", 0x24, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0xc2, 0x0, 0x0, 0x0, {[@window={0x3, 0x3}, @fastopen={0x22, 0xa, "1c912d9183eb47af"}, @window={0x3, 0x3, 0x9}]}}}}}}}}, 0x0) 6.539698851s ago: executing program 4 (id=2298): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, 0x0) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r1}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000007c0)={0x28, 0x2, r1, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x9}) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(r0, 0x3ba0, 0x0) 6.303428525s ago: executing program 1 (id=2299): r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x20000, 0x7e, 0xffffdfff, 0x0, 0x0, 0x1}) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x5bc}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) r2 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100024286bd10b00d815522f90102030109021200019ddb"], 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000c40)={0x24, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0003fef7945aa748c51a0bd934e89eacadbaea1366a48138b3d67a82d3077fd4ed8688fc86ad93f013df48f541b5ca4eaca6b69ee0e7098babde1f346a1a00e0171bf1163202e89f43"], 0x0, 0x0}, 0x0) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r3, 0x11, 0x68, &(0x7f0000000040)=0x2, 0x4) setsockopt$inet_udp_encap(r3, 0x11, 0x64, &(0x7f0000000080)=0x2, 0x4) setsockopt$inet_udp_encap(r3, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) close(0x3) r4 = socket(0x2b, 0x1, 0x1) close(0xffffffffffffffff) r5 = socket(0x1d, 0x2, 0x6) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000040), 0x3000084, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x1ff}}, './bus\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, &(0x7f00000000c0)=0x1) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x8000000, 0x2, 0x0, 0x1}, 0x20) fallocate(r0, 0x0, 0x1, 0x2000402) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f00000000c0)={0x17c04, 0xffffffffffffffff, 0x809, 0x100000000004, 0x4, 0x3}) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_PROTOCOL(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="34000000010605"], 0x34}, 0x1, 0x0, 0x0, 0x8004}, 0x10) write(r6, &(0x7f0000000040)="0500007f010000", 0x7) 6.302696659s ago: executing program 4 (id=2300): sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0xa, 0x4e23, 0x1, @local, 0x38a}, 0x1c, 0x0, 0x0, 0x0, 0x30}, 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32, @ANYBLOB="000000002000000000f2fffffd000000c15e1aac", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/14], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0xfffffffffffffcb5, &(0x7f0000000080)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mount$bind(0x0, &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x195408, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r1, &(0x7f0000000340)=ANY=[], 0xff2e) ioctl$TCXONC(r1, 0x540a, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000000c0)={'bond_slave_1\x00', &(0x7f0000000100)=@ethtool_rxnfc={0x30, 0x12, 0xd, {0x4, @esp_ip6_spec={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote, 0x0, 0x1}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 0x4, 0xb, [0x10001, 0x5]}, @usr_ip6_spec={@mcast1, @rand_addr=' \x01\x00', 0x9, 0xb8, 0x40}, {0x0, @random="e5090c6769c8", 0x1, 0x1, [0x3, 0x6]}, 0x8000000000000001, 0x7}}}) mount$9p_fd(0x0, &(0x7f0000000c80)='./cgroup\x00', &(0x7f0000004500), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB]) write$P9_RVERSION(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff"], 0x15) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r6 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x1, 0x0) r7 = syz_open_dev$loop(&(0x7f0000000000), 0x400000075f, 0xa382) r8 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0}) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f00000003c0)=ANY=[@ANYRES16=r4, @ANYBLOB="210f00000000fedbdf252000000008000300", @ANYRES32=r5, @ANYBLOB="8cf03547c2e7b3cbb0878f410aec5b647447d12c55e6d77fc298fe09dcee939556ac8ec08cc8a122137cc43a227a2bfaf4ee278a811bdba41dbf651e4a8960e104c09dd7a5dedd059322a26d8e1ceeae7a1381d2482f779b518b2302e17331f7a3ded0d14ecc5fc505d38eec6a50d4"], 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001280)=ANY=[@ANYBLOB="000000000000069dfe5efb8226e305cf3137e58277d947c294e3a4b545e6571d35f44cde1c17ed740c6fb26c0b540a5cac55b8508d4b845c55292ca5035947ede1153bbd3ca5d7fd7b46286f3ba0a8c41502ec6c74dfcbaeac8a07dd18bbddea007893a8b128d076a6f4d1154ea5d4e4c963c1b4c91566a25e31b63da0828fc7d1c26982a52b0317739faa64cab0334e714e546dbbaaca", @ANYRES16=r7, @ANYBLOB="010000000000000000000800000008000300", @ANYRES16=r5, @ANYRES64], 0x1c}, 0x1, 0x0, 0x0, 0x4040850}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r3) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fe, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x2, 0x800, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000f80)=ANY=[@ANYBLOB="280000001000010029bd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="280906000300000008001b00007f300067d54f9b35e48472b654b8c99101c949a52c946d74135f92e779a257b91b96bf61ed9d8939a0fc91274c3426a3691e3d4fa2a8fe7b94634e1433d66c7daf6fd7d8920bedfc89724d565f6635a611d658108d0b2079460078311e9bb3a6cca3c4ce574ab322c9b3fcbd8a868bde4b81326a69bdbc8f187c42b7f8b451f19520821cee"], 0x28}, 0x1, 0x0, 0x0, 0x40081}, 0x4000000) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x916d, 0x300, 0x0, 0x54}, 0x9c) 4.942724062s ago: executing program 3 (id=2303): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), r1) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x34, r2, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x2404c084) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f00000002c0)={0x7ffff7ff, 0x0, 'client1\x00', 0x80000003, "7fafdc4fbe020061", "1220965092974ad46350ac471f54ea9eb859c3ea4cc764751ff27d2ff9a6188b", 0x0, 0x8}) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={'\x00', 0x8, 0xffff, 0xc, 0x9, 0x1000, 0x0}) tkill(r3, 0x3e) 4.501070059s ago: executing program 3 (id=2304): ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000000480)={{0xffffffffffffffff, &(0x7f0000000040)='\xae},!\'\x00', 0x14000, &(0x7f0000000080)={@align=0x100000000, {0x2d5a, 0x40c, 0x0, 0x120000000}}, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x82}, 0x2, &(0x7f0000000440)=[{0x2, 0x9, &(0x7f00000001c0)='\\/.},\x00', &(0x7f0000000200)="1ec7d60dcab94c97956d7a09cd3d608775e38d4039c4417a66a245d0cfed49b4257f2310766e8cc0e313b80ccdfb86ab94a5a00e639d0e7dc7609afcfa84a97901c3e81abf0c66744d5d0b4a3af64fd84f5fd3e7b0fb62d5c3f38820dd683d85a4ec9cf105bcdd1ca68aab5da816afdb2b78f9124eb3d93e5093e08745abcfcec1daa9e2c0b234fe306b0485bc803756ae424f1b7796f8519f2984fa9ae54b09def4fac7f1f55c4b07dc5a12db42110509db8fcf47c3c43133feb02bdb3bceeef3d0a1d2a172bc3e4740d45cf721985d079a", 0xd2}, {0x2, 0x5, &(0x7f0000000300)='\x90\x9f)\x00', &(0x7f0000000340)="e1c14a8886fd9ce438d02ba0fb4b7289cd6d2304a164e0d23ea8fca7c41b8bc7630420353bd77b3b796e69afa6bf2d1fa3adc9efd9bf5e5b363f34e661b966408e461b4ce33778029e3ff6081e5ce520cd32c213f58102fcf20afa556a4e8cfd2489f40ff090546eefd20e1f3bcf70f0ade87ee9477f9b999f1866d02ec64aa5645983250abaafefec8242e40f02ac1b6a8e36d05b09c5df6a5ba96ec4be7df26a30797189c71fc04a548bd35ef4b4e80c51675c97374e4d3aa164dd2e14d7149fb5b8efc3393bdf441bc99db016eee632991f818f14a220960986872b893b5a19a09fbb50f5caa59a7bce70c7dd", 0xee, 0x10}]}) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000500)={0x8, 0x4, 0x7, 0x1000, 0x1, 0x0, 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x5fb9a818fb7378e9, 0x80000, 0x25dfdbfe, {0xa, 0x0, 0x4}, [@NHA_ENCAP_TYPE={0x6}, @NHA_FDB={0x4}]}, 0x24}}, 0x0) 4.382445229s ago: executing program 3 (id=2305): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000640)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd25, 0x8001, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {}, {0xffff, 0x8}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r6, {0x7, 0x7}, {}, {0xffff, 0x8}}}, 0x24}, 0x1, 0x100000000000000, 0x0, 0x1}, 0x810) 4.183641832s ago: executing program 2 (id=2306): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, 0x0, 0x0) bind$nfc_llcp(r0, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000019340), 0x1) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x86}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d00)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x800) recvmmsg(r3, &(0x7f0000003dc0)=[{{0x0, 0x0, 0x0}, 0x200}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0xa}, {{0x0, 0x0, 0x0}, 0xf749}], 0x4, 0x40012100, 0x0) 4.180547474s ago: executing program 4 (id=2307): ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000680)=0x0) r1 = syz_clone3(&(0x7f0000000940)={0x8080200, &(0x7f00000006c0), &(0x7f0000000700), &(0x7f0000000740), {0x3}, &(0x7f0000000780)=""/82, 0x52, &(0x7f0000000800)=""/193, &(0x7f0000000900)=[0x0, 0x0], 0x2}, 0x58) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000009c0)=0x0) r3 = getpid() syz_clone3(&(0x7f0000000a40)={0x81a4100, &(0x7f0000000340), &(0x7f0000000380), &(0x7f00000003c0), {0xd}, &(0x7f00000004c0)=""/191, 0xbf, &(0x7f00000005c0)=""/166, &(0x7f0000000a00)=[r0, r1, r2, r3, 0xffffffffffffffff], 0x5}, 0x58) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r4, &(0x7f0000009b40)="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", 0x2000, &(0x7f0000007a80)={&(0x7f0000006400)={0x50, 0xfffffffffffffffe, 0x5, {0x7, 0x29, 0x1, 0x24ff871999e0dde7, 0xdcf, 0x4005, 0xb, 0x800, 0x0, 0x0, 0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) llistxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)=""/253, 0xfd) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000002e00090027bd7000000000000400000004001900080017"], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x5, 0x7e, &(0x7f0000000140)=ANY=[@ANYBLOB="12010102137f1620d11220e1cf960102030109026c0002690800020904010200ff066ff7052406000105240005000d240f0104000000050004000806241a01042009040346000e0100090a240106001d000201020b24040606427a00bbedd908240406e9cb1596052406000005240002000d240f0105000000bfc5800006c8f377d25f5ce99944ea75368f6f66655fa9e607e73c00706f14352ce7c22597a36dc9cbf0ca7d4df69d51a01b08f0ffb36fb5af88f29745d49f"], &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4c840) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e22, 0x1}, 0x1c) splice(r6, 0x0, 0xffffffffffffffff, 0x0, 0xaf4, 0x0) shutdown(r6, 0x0) socket$igmp(0x2, 0x3, 0x2) syz_open_dev$video(&(0x7f0000000000), 0x2, 0x2e200) 3.688817036s ago: executing program 3 (id=2308): socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, 0x0) r0 = inotify_init() setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x8000102) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r2, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [], {0x14}}, 0x28}}, 0x0) inotify_add_watch(r0, &(0x7f0000000340)='.\x00', 0xa50003d1) getpid() fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r3) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan0\x00'}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r4, 0x0, 0x4008010) bind$alg(0xffffffffffffffff, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b7020000000d0000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000006f6400000000000045040400010000001704000001000a00b7040000ff0100006a0a00fe0000000085000000bd000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6fbaa187b81d1106000000000fd60000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd80450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e3179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9d5788029901e5a79d8b9990ace8f74087f25ad50c46088000000008000"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r5, 0x2000031, 0xfe7f, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="ebcbdc0b000080f72776", @ANYRESHEX, @ANYBLOB=',rootmode=00000000000', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) 3.326005711s ago: executing program 2 (id=2309): r0 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x8180) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1200000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000f4ff00000000000000000000130000000000001a000000000001"], 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000380)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB='&'], 0x10) close_range(r1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="b7000000000000004e000000000000005fa00000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xe}, 0x23) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3) ioctl$KVM_CAP_DISABLE_QUIRKS2(r4, 0x4068aea3, &(0x7f0000000140)={0xd5, 0x0, 0x30}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r5) ioctl$NBD_DO_IT(r0, 0xab03) 3.237298412s ago: executing program 2 (id=2310): mkdir(&(0x7f0000000080)='./file1\x00', 0x8) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000140)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, &(0x7f0000000340)={0x81, 0x1, 0xa000200000a958, 0x2000000008, 0x7e07, 0x4, 0x48cd, 0x80000003, 0xd6f}) r1 = open(&(0x7f0000000040)='./bus\x00', 0x4e142, 0x30) pwritev2(r1, &(0x7f0000000680)=[{&(0x7f0000000200)="05", 0x6a000}], 0x1, 0x6000000, 0x0, 0x0) (fail_nth: 16) 3.12932451s ago: executing program 1 (id=2311): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x100000001, 0xfffffe0000000001, 0xfa11, 0x65aa}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x2) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000100), &(0x7f0000000140)=0x4) mount(&(0x7f0000000180)=@nullb, &(0x7f0000000240)='./cgroup\x00', &(0x7f0000000040)='udf\x00', 0x8000c0, &(0x7f00000001c0)='discard') r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e23, 0xfffffffc, @private1={0xfc, 0x1, '\x00', 0xfe}}, 0x1c) listen(r1, 0x407) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x4}, 0x8) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000540)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYBLOB="000100"], 0x8) symlink(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000000)='./file0\x00') r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) setns(r6, 0x24020000) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00') syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x20080) close_range(r8, 0xffffffffffffffff, 0x0) write(r7, &(0x7f00000001c0)="240000005800410f9c00f4f90085b3025cb1fddf08000100050100000800028001000000", 0x24) 2.788078332s ago: executing program 2 (id=2312): sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0xa, 0x4e23, 0x1, @local, 0x38a}, 0x1c, 0x0, 0x0, 0x0, 0x30}, 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32, @ANYBLOB="000000002000000000f2fffffd000000c15e1aac", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/14], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0xfffffffffffffcb5, &(0x7f0000000080)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mount$bind(0x0, &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x195408, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r1, &(0x7f0000000340)=ANY=[], 0xff2e) ioctl$TCXONC(r1, 0x540a, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000000c0)={'bond_slave_1\x00', &(0x7f0000000100)=@ethtool_rxnfc={0x30, 0x12, 0xd, {0x4, @esp_ip6_spec={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote, 0x0, 0x1}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 0x4, 0xb, [0x10001, 0x5]}, @usr_ip6_spec={@mcast1, @rand_addr=' \x01\x00', 0x9, 0xb8, 0x40}, {0x0, @random="e5090c6769c8", 0x1, 0x1, [0x3, 0x6]}, 0x8000000000000001, 0x7}}}) mount$9p_fd(0x0, &(0x7f0000000c80)='./cgroup\x00', &(0x7f0000004500), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB]) write$P9_RVERSION(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff"], 0x15) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r6 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x1, 0x0) r7 = syz_open_dev$loop(&(0x7f0000000000), 0x400000075f, 0xa382) r8 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x1, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56441, 0x70b91d, 0x80000, {0x0, 0x0, 0x0, r9, {0x0, 0xfff3}, {0x2, 0xd}, {0x9, 0xb}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_TUPDATE={0x8, 0x3, 0x3}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c061}, 0x2204c080) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 954.790023ms ago: executing program 2 (id=2314): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsopen(0x0, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4a, 0x0, &(0x7f0000000040)) waitid(0x2, r0, &(0x7f0000000180), 0x2, &(0x7f00000003c0)) socket$kcm(0x10, 0x2, 0x0) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r3, &(0x7f0000000040), 0x10) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000000100)=[{&(0x7f0000000340)="580000001400192340834b80043f679a1070f7e433ff3d425f9c00f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c70", 0x58}], 0x1) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) r6 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r6, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) writev(r5, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a31000000002800048008000240000000000800014000000005"], 0xf4}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c0000001200010003950000000000000a0900004001000000000000000000000000ffff"], 0x4c}}, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_MSCBIT(r8, 0x40045568, 0x19) 390.896904ms ago: executing program 0 (id=2315): syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000340), 0x22, 0x1, 0x0, 0x0, r1}) 309.679057ms ago: executing program 4 (id=2316): socket$nl_netfilter(0x10, 0x3, 0xc) openat$ptp0(0xffffffffffffff9c, &(0x7f00000002c0), 0x80042, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000a0000004200000040"], 0x50) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socket(0x2c, 0x3, 0x1000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x27, &(0x7f0000000040), 0x4) r2 = socket$netlink(0x10, 0x3, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, "fbddf0", 0x8, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @local, {[], @echo_reply={0x81, 0x0, 0x0, 0x2, 0x4}}}}}}, 0x0) writev(r2, &(0x7f0000000300), 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)=0x0) sched_setattr(r4, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x100000001, 0xfffffe0000000001, 0xfa11, 0x65aa}, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000140)='./file2\x00', 0x0, 0x0, 0x0) r5 = syz_io_uring_setup(0x4ad8, &(0x7f0000000300)={0x0, 0x9824, 0x20, 0xffffffff, 0x145}, &(0x7f0000000100), 0x0, &(0x7f0000000000)) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r6, &(0x7f0000001240)=""/102400, 0xffffff8c, 0x200000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xb635773f06ebbeee, 0x8031, r2, 0x4000) mbind(&(0x7f0000d6d000/0x3000)=nil, 0x3000, 0x4000, 0x0, 0x563, 0x0) syz_io_uring_setup(0x122b, &(0x7f0000000200)={0x0, 0x4f5a, 0x4000, 0x3, 0xffffffe5, 0x0, r5}, &(0x7f00000000c0), &(0x7f0000000400), &(0x7f0000000000)) socket$inet_smc(0x2b, 0x1, 0x0) 80.818375ms ago: executing program 0 (id=2317): socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r3 = syz_io_uring_setup(0x45, &(0x7f0000000440)={0x0, 0x3fa4, 0x40, 0x2, 0x1a}, &(0x7f0000000100), &(0x7f0000000400), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x22, &(0x7f0000000380)={&(0x7f0000006000)={[{0x0, 0x0, 0x103}]}, 0x1}, 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{0x0}], 0x1) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) sendmsg$kcm(r2, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0xfffe, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x80, 0x0}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYRES64=r0], 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x4048050) socket$inet_icmp(0x2, 0x2, 0x1) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000015c0)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08786eb807e0000000000000000000009fe70ba83a7a66e67a0bae5cfaccbbb81e28d7b568da", @ANYRESHEX, @ANYRESOCT], 0x18}, 0x1, 0x0, 0x0, 0x1000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4848}, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000100)={0x0, 0x642, 0x0, 0x0}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x5735d4cf2845bcf1, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x800002) 0s ago: executing program 2 (id=2318): getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) kexec_load(0x4, 0xa, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) bind$x25(0xffffffffffffffff, 0x0, 0x0) bind$x25(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x30, 0x40, 0x1, 0x7fffc, 0x25dfdbfe, {0x9}, [@nested={0x4, 0x47}, @nested={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @pid}]}]}, @typed={0x8, 0x2, 0x0, 0x0, @fd}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000801}, 0x4008094) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000300)=""/102400, 0x19000) kexec_load(0x58fb, 0x0, 0x0, 0x160000) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x50) io_uring_setup(0x2237, &(0x7f0000000880)={0x0, 0xfffffffc, 0x3018}) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000040)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$USBDEVFS_REAPURBNDELAY(r4, 0x4004550d, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) kernel console output (not intermixed with test programs): cted capacity change from 0 to 16384 [ 670.653202][ T24] usb 2-1: config 0 descriptor?? [ 670.941526][ T42] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 671.079042][T12977] sctp: [Deprecated]: syz.3.1901 (pid 12977) Use of struct sctp_assoc_value in delayed_ack socket option. [ 671.079042][T12977] Use struct sctp_sack_info instead [ 671.097692][T12976] 9p: Bad value for 'wfdno' [ 671.611637][ T24] input: HID 05ac:8241 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:05AC:8241.0009/input/input25 [ 671.646374][ T42] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 671.785945][ T42] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 671.858499][T12975] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1896'. [ 671.875816][ T24] appleir 0003:05AC:8241.0009: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.1-1/input0 [ 671.890178][ T42] usb 5-1: config 1 has no interface number 0 [ 671.920171][ T42] usb 5-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 672.163029][ T42] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 672.181320][ T42] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 672.196055][ T42] usb 5-1: Product: syz [ 672.205887][ T42] usb 5-1: Manufacturer: syz [ 673.351518][ T5734] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 673.362553][ T42] usb 5-1: SerialNumber: syz [ 674.278120][ T42] usb 5-1: selecting invalid altsetting 1 [ 674.311800][ T5720] usb 2-1: reset high-speed USB device number 75 using dummy_hcd [ 674.831374][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 674.831420][ T29] audit: type=1400 audit(1777741501.214:2794): avc: denied { create } for pid=12995 comm="syz.3.1903" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 676.119076][ T42] cdc_ncm 5-1:1.1: bind() failure [ 676.151356][ T42] usb 5-1: USB disconnect, device number 87 [ 676.193521][T13000] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1904'. [ 676.301083][ T29] audit: type=1400 audit(1777741502.694:2795): avc: denied { write } for pid=13001 comm="syz.4.1906" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 676.358365][ T24] usb 2-1: USB disconnect, device number 75 [ 676.702141][ T29] audit: type=1400 audit(1777741503.074:2796): avc: denied { write } for pid=13001 comm="syz.4.1906" path="socket:[40843]" dev="sockfs" ino=40843 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 676.924975][ T29] audit: type=1400 audit(1777741503.324:2797): avc: denied { write } for pid=13012 comm="syz.2.1909" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 676.954601][T13013] tipc: Enabling of bearer rejected, already enabled [ 677.006685][ T29] audit: type=1400 audit(1777741503.324:2798): avc: denied { ioctl } for pid=13012 comm="syz.2.1909" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 677.194457][T13016] sctp: [Deprecated]: syz.2.1910 (pid 13016) Use of struct sctp_assoc_value in delayed_ack socket option. [ 677.194457][T13016] Use struct sctp_sack_info instead [ 677.786965][T13021] 9p: Bad value for 'wfdno' [ 678.094209][T13023] loop1: detected capacity change from 0 to 16384 [ 678.714855][ T29] audit: type=1400 audit(1777741505.114:2799): avc: denied { create } for pid=13025 comm="syz.2.1913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 679.191068][T13039] sctp: [Deprecated]: syz.0.1915 (pid 13039) Use of struct sctp_assoc_value in delayed_ack socket option. [ 679.191068][T13039] Use struct sctp_sack_info instead [ 679.817866][ T29] audit: type=1400 audit(1777741506.104:2800): avc: denied { write } for pid=13036 comm="syz.1.1914" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 680.107786][ T29] audit: type=1400 audit(1777741506.504:2801): avc: denied { sys_module } for pid=13036 comm="syz.1.1914" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 680.256048][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 680.262508][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 680.269976][ T5720] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 680.413403][ T29] audit: type=1400 audit(1777741506.664:2802): avc: denied { mount } for pid=13049 comm="syz.0.1917" name="/" dev="ramfs" ino=41472 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 680.451261][ T29] audit: type=1400 audit(1777741506.844:2803): avc: denied { connect } for pid=13049 comm="syz.0.1917" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 680.711993][ T5720] usb 3-1: Using ep0 maxpacket: 16 [ 680.734136][ T5720] usb 3-1: config index 0 descriptor too short (expected 51443, got 18) [ 680.773603][ T5720] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 680.793186][ T5720] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 680.803050][ T5720] usb 3-1: Product: syz [ 680.807381][ T5720] usb 3-1: Manufacturer: syz [ 680.814606][ T5720] usb 3-1: SerialNumber: syz [ 681.159378][ T5720] r8152-cfgselector 3-1: Unknown version 0x0000 [ 681.169030][ T5720] r8152-cfgselector 3-1: config 0 descriptor?? [ 681.403798][ T29] audit: type=1400 audit(1777741507.804:2804): avc: denied { create } for pid=13063 comm="syz.3.1921" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 681.443737][T13064] netlink: 'syz.3.1921': attribute type 1 has an invalid length. [ 681.453033][T13066] tipc: Enabled bearer , priority 10 [ 681.475850][ T29] audit: type=1400 audit(1777741507.824:2805): avc: denied { connect } for pid=13063 comm="syz.3.1921" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 681.540470][ T29] audit: type=1400 audit(1777741507.854:2806): avc: denied { bind } for pid=13063 comm="syz.3.1921" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 681.587061][ T29] audit: type=1400 audit(1777741507.854:2807): avc: denied { node_bind } for pid=13063 comm="syz.3.1921" saddr=224.0.0.1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 681.617494][ T5720] r8152-cfgselector 3-1: Unknown version 0x0000 [ 681.622850][ T29] audit: type=1400 audit(1777741507.854:2808): avc: denied { connect } for pid=13063 comm="syz.3.1921" laddr=224.0.0.1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 681.666038][ T5720] r8152-cfgselector 3-1: No union descriptors [ 681.697036][ T29] audit: type=1400 audit(1777741508.094:2809): avc: denied { bind } for pid=13067 comm="syz.4.1923" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 681.697825][ T5720] r8152-cfgselector 3-1: USB disconnect, device number 68 [ 681.954373][T13073] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 682.043444][T13073] audit: audit_backlog=65 > audit_backlog_limit=64 [ 682.490352][T13076] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1919'. [ 682.521402][ T5610] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 682.991742][T13082] netlink: 'syz.2.1927': attribute type 10 has an invalid length. [ 683.235519][ T5734] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 683.452186][ T5734] usb 2-1: Using ep0 maxpacket: 32 [ 683.462556][ T5734] usb 2-1: unable to get BOS descriptor or descriptor too short [ 683.480226][ T5734] usb 2-1: config 6 has an invalid interface number: 113 but max is 0 [ 683.491877][ T42] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 683.491883][ T5734] usb 2-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 683.491904][ T5734] usb 2-1: config 6 has no interface number 0 [ 683.531389][ T5734] usb 2-1: config 6 interface 113 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 683.544648][ T5734] usb 2-1: config 6 interface 113 has no altsetting 0 [ 683.553837][ T5734] usb 2-1: New USB device found, idVendor=0403, idProduct=da73, bcdDevice= 0.09 [ 683.563237][ T5734] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 683.571546][ T5734] usb 2-1: SerialNumber: syz [ 683.580760][ T5734] ftdi_sio 2-1:6.113: FTDI USB Serial Device converter detected [ 683.590451][ T5734] usb 2-1: Detected SIO [ 683.596415][ T5734] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 683.621433][ T24] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 683.629106][ T5720] usb 4-1: new full-speed USB device number 79 using dummy_hcd [ 683.651292][ T42] usb 3-1: Using ep0 maxpacket: 16 [ 683.658789][ T42] usb 3-1: unable to get BOS descriptor or descriptor too short [ 683.672573][ T42] usb 3-1: config 8 has an invalid interface number: 46 but max is 0 [ 683.691305][ T42] usb 3-1: config 8 has no interface number 0 [ 683.697443][ T42] usb 3-1: config 8 interface 46 has no altsetting 0 [ 683.713245][ T42] usb 3-1: New USB device found, idVendor=2040, idProduct=1700, bcdDevice=a7.db [ 683.731270][ T42] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 683.741305][ T42] usb 3-1: Product: syz [ 683.749695][ T42] usb 3-1: Manufacturer: syz [ 683.754396][ T42] usb 3-1: SerialNumber: syz [ 683.781388][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 683.787956][ T24] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 683.803294][ T24] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 683.813233][ T24] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 683.823598][ T24] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 683.823752][ T5720] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 683.841939][ T24] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 683.855345][ T24] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 683.864540][ T5720] usb 4-1: config 0 has no interface number 0 [ 683.870661][ T5720] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 683.881679][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 683.890454][ T5720] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 683.901351][ T5720] usb 4-1: New USB device found, idVendor=04d9, idProduct=a081, bcdDevice= 0.00 [ 683.910644][ T5720] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 683.928946][ T5720] usb 4-1: config 0 descriptor?? [ 683.976021][T13082] bond1: (slave macvlan1): Error -98 calling set_mac_address [ 684.037264][ T42] smsusb:smsusb_probe: board id=5, interface number 46 [ 684.048006][ T42] usb 3-1: USB disconnect, device number 69 [ 684.122060][ T24] usb 5-1: usb_control_msg returned -32 [ 684.127967][ T24] usbtmc 5-1:16.0: can't read capabilities [ 684.348018][ T5720] holtek_mouse 0003:04D9:A081.000A: hidraw0: USB HID v0.00 Device [HID 04d9:a081] on usb-dummy_hcd.3-1/input1 [ 684.546010][ T5720] usb 4-1: USB disconnect, device number 79 [ 684.681643][ T42] usb 5-1: USB disconnect, device number 88 [ 685.098455][T13098] tipc: Enabling of bearer rejected, already enabled [ 685.117699][ T5734] usb 2-1: USB disconnect, device number 76 [ 685.148221][ T5734] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 685.254434][T13100] sctp: [Deprecated]: syz.0.1934 (pid 13100) Use of struct sctp_assoc_value in delayed_ack socket option. [ 685.254434][T13100] Use struct sctp_sack_info instead [ 685.292817][ T5734] ftdi_sio 2-1:6.113: device disconnected [ 686.707452][T13117] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1940'. [ 686.907916][T13117] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 687.069660][ T5734] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 687.084142][T13127] netlink: 'syz.0.1940': attribute type 10 has an invalid length. [ 687.265434][ T29] kauditd_printk_skb: 308 callbacks suppressed [ 687.265451][ T29] audit: type=1400 audit(1777741513.664:2882): avc: denied { write } for pid=13116 comm="syz.0.1940" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 687.297083][ T9] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 687.309907][T13127] syz_tun: entered promiscuous mode [ 687.315814][ T29] audit: type=1400 audit(1777741513.664:2883): avc: denied { open } for pid=13116 comm="syz.0.1940" path="/dev/ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 687.339629][ T5734] usb 4-1: Using ep0 maxpacket: 16 [ 687.346056][ T29] audit: type=1400 audit(1777741513.664:2884): avc: denied { ioctl } for pid=13116 comm="syz.0.1940" path="/dev/ptp0" dev="devtmpfs" ino=1265 ioctlcmd=0x3d06 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 687.361338][ T5720] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 687.373063][ T5734] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 687.379426][T13131] tipc: Enabling of bearer rejected, already enabled [ 687.401417][ T5734] usb 4-1: config 0 interface 0 has no altsetting 0 [ 687.412602][ T5734] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 687.430885][ T5734] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 687.444662][ T5734] usb 4-1: config 0 descriptor?? [ 687.544789][ T9] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 687.561136][ T9] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 687.574794][T13117] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 687.585226][ T9] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 687.611413][ T5720] usb 2-1: Using ep0 maxpacket: 8 [ 688.031426][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 688.031830][ T29] audit: type=1400 audit(1777741514.064:2885): avc: denied { bind } for pid=13132 comm="syz.4.1945" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 688.041003][ T5734] hid_parser_main: 4007 callbacks suppressed [ 688.041019][ T5734] nzxt-smart2 0003:1E71:2009.000B: unknown main item tag 0x0 [ 688.071270][ T5734] nzxt-smart2 0003:1E71:2009.000B: unknown main item tag 0x0 [ 688.078940][ T5734] nzxt-smart2 0003:1E71:2009.000B: unknown main item tag 0x0 [ 688.086409][ T5720] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 688.086455][ T5720] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 688.086476][ T5720] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 688.114292][ T9] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 688.123651][ T9] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 688.141809][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 688.153375][ T9] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 688.154024][ T5720] usb 2-1: config 0 descriptor?? [ 688.169445][ T9] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 688.181606][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 688.185769][ T5720] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 688.188320][ T5734] nzxt-smart2 0003:1E71:2009.000B: unknown main item tag 0x0 [ 688.206078][ T9] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 688.215300][ T9] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 688.233373][ T5734] nzxt-smart2 0003:1E71:2009.000B: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0 [ 688.248868][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 688.258370][ T9] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 688.268787][ T9] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 688.280269][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 688.293086][ T9] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 688.304257][ T9] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 688.315733][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 688.507403][T13117] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 688.517508][ T9] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 688.555173][ T9] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 688.612833][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 688.624782][T13122] tipc: Enabled bearer , priority 0 [ 688.636396][ T9] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 688.662158][ T9] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 688.671468][T13126] syzkaller0: entered promiscuous mode [ 688.679475][T13126] syzkaller0: entered allmulticast mode [ 688.698122][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 688.727415][ T9] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 688.745263][ T9] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 688.752341][T13128] tipc: Resetting bearer [ 688.765363][ T9] usb 3-1: Product: syz [ 688.772944][ T9] usb 3-1: Manufacturer: syz [ 688.799623][ T9] usb 3-1: SerialNumber: syz [ 688.881778][ T9] usb 3-1: config 0 descriptor?? [ 688.973070][T13117] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 689.099704][ T9] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 689.103587][ T24] usb 2-1: USB disconnect, device number 77 [ 689.119601][T13118] tipc: Resetting bearer [ 689.222841][T13143] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1947'. [ 689.263208][ T5610] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 689.392132][ T42] usb 4-1: USB disconnect, device number 80 [ 689.674075][T10289] usb 3-1: USB disconnect, device number 70 [ 689.694867][T10289] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 689.713164][T13118] tipc: Disabling bearer [ 689.800839][ T5720] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 689.823876][ T82] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 689.834217][ T82] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 689.845516][ T82] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 689.961581][ T5720] usb 5-1: Using ep0 maxpacket: 32 [ 689.987172][ T5720] usb 5-1: unable to get BOS descriptor or descriptor too short [ 690.008443][ T5720] usb 5-1: config 6 has an invalid interface number: 113 but max is 0 [ 690.019162][ T5720] usb 5-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 690.030978][ T5720] usb 5-1: config 6 has no interface number 0 [ 690.037652][ T5720] usb 5-1: config 6 interface 113 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 690.052175][ T5720] usb 5-1: config 6 interface 113 has no altsetting 0 [ 690.061404][ T5720] usb 5-1: New USB device found, idVendor=0403, idProduct=da73, bcdDevice= 0.09 [ 690.071766][ T5720] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 690.079900][ T5720] usb 5-1: SerialNumber: syz [ 690.084934][ T35] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 690.167653][ T5720] ftdi_sio 5-1:6.113: FTDI USB Serial Device converter detected [ 690.250756][ T5720] usb 5-1: Detected SIO [ 690.258165][ T5720] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 690.393251][ T29] audit: type=1400 audit(1777741516.794:2886): avc: denied { read write } for pid=13150 comm="syz.2.1949" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 690.459781][ T29] audit: type=1400 audit(1777741516.794:2887): avc: denied { open } for pid=13150 comm="syz.2.1949" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 690.518265][ T29] audit: type=1400 audit(1777741516.824:2888): avc: denied { map } for pid=13151 comm="syz.0.1951" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 690.615068][ T29] audit: type=1400 audit(1777741516.834:2889): avc: denied { ioctl } for pid=13151 comm="syz.0.1951" path="socket:[42144]" dev="sockfs" ino=42144 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 690.642777][ T5720] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 690.663907][T13160] binder: BINDER_SET_CONTEXT_MGR already set [ 690.672727][T13160] binder: 13159:13160 ioctl 4018620d 200000004a80 returned -16 [ 690.680412][ T29] audit: type=1400 audit(1777741516.894:2890): avc: denied { call } for pid=13151 comm="syz.0.1951" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 690.737241][ T29] audit: type=1400 audit(1777741516.894:2891): avc: denied { transfer } for pid=13151 comm="syz.0.1951" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 690.811822][ T5720] usb 4-1: unable to get BOS descriptor or descriptor too short [ 690.833230][ T5720] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 690.932300][ T5720] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 691.087308][ T5720] usb 4-1: New USB device found, idVendor=17cc, idProduct=1011, bcdDevice= 0.40 [ 691.118514][ T5720] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 691.147684][ T5720] usb 4-1: Product: syz [ 691.166864][ T5720] usb 4-1: Manufacturer: syz [ 691.169605][T13164] loop1: detected capacity change from 0 to 16384 [ 691.249413][ T5720] usb 4-1: SerialNumber: syz [ 691.265855][T13170] tipc: Enabling of bearer rejected, already enabled [ 692.090348][T10289] usb 5-1: USB disconnect, device number 89 [ 692.205163][ T5720] usb 4-1: unable to issue vendor read request (ret = -71) [ 692.321811][ T5720] usb 4-1: unable to issue vendor read request (ret = -71) [ 692.335220][ T5720] usb 4-1: unable to issue vendor read request (ret = -71) [ 692.343959][T13177] sctp: [Deprecated]: syz.4.1958 (pid 13177) Use of struct sctp_assoc_value in delayed_ack socket option. [ 692.343959][T13177] Use struct sctp_sack_info instead [ 692.363550][T10289] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 692.388933][ T5720] usb 4-1: unable to issue vendor read request (ret = -71) [ 692.401992][T10289] ftdi_sio 5-1:6.113: device disconnected [ 692.765549][T13184] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1957'. [ 693.165831][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 693.165848][ T29] audit: type=1400 audit(1777741519.074:2898): avc: denied { name_bind } for pid=13179 comm="syz.0.1957" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 693.204669][ T5720] usb 4-1: USB disconnect, device number 81 [ 693.253723][ T24] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 693.331578][T10750] udevd[10750]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 693.494632][ T24] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 693.567268][ T24] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 693.761331][ T24] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 693.776012][ T24] usb 3-1: config 0 interface 0 has no altsetting 0 [ 693.783902][ T24] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 693.794634][ T24] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 693.809396][ T24] usb 3-1: config 0 interface 0 has no altsetting 0 [ 694.205744][ T24] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 694.217245][ T24] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 694.239033][ T24] usb 3-1: config 0 interface 0 has no altsetting 0 [ 694.270514][ T24] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 694.298518][ T24] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 694.343833][ T24] usb 3-1: config 0 interface 0 has no altsetting 0 [ 694.365105][ T24] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 694.376365][ T24] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 694.389117][ T24] usb 3-1: config 0 interface 0 has no altsetting 0 [ 694.685511][ T24] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 694.701475][ T24] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 694.783103][ T24] usb 3-1: config 0 interface 0 has no altsetting 0 [ 694.826814][ T24] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 694.921501][ T24] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 695.065018][ T29] audit: type=1800 audit(1777741521.374:2899): pid=13207 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.1966" name="file0" dev="overlay" ino=2165 res=0 errno=0 [ 695.087224][ T24] usb 3-1: config 0 interface 0 has no altsetting 0 [ 695.107515][ T24] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 695.123209][T13211] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1967'. [ 695.132111][T13211] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1967'. [ 695.142797][ T24] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 695.154143][ T24] usb 3-1: config 0 interface 0 has no altsetting 0 [ 695.175666][ T24] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 695.187690][ T24] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 695.200323][ T24] usb 3-1: Product: syz [ 695.219589][ T24] usb 3-1: Manufacturer: syz [ 695.295614][ T24] usb 3-1: SerialNumber: syz [ 695.369374][ T24] usb 3-1: config 0 descriptor?? [ 695.473306][ T24] usb 3-1: can't set config #0, error -71 [ 696.175277][ T24] usb 3-1: USB disconnect, device number 71 [ 696.181424][T13222] loop1: detected capacity change from 0 to 16384 [ 696.358760][ T29] audit: type=1400 audit(1777741522.754:2900): avc: denied { read append } for pid=13224 comm="syz.1.1972" name="event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 696.574817][ T29] audit: type=1400 audit(1777741522.754:2901): avc: denied { open } for pid=13224 comm="syz.1.1972" path="/dev/input/event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 696.963134][T13233] 9p: Bad value for 'wfdno' [ 697.023566][ T29] audit: type=1400 audit(1777741522.784:2902): avc: denied { ioctl } for pid=13224 comm="syz.1.1972" path="/dev/input/event0" dev="devtmpfs" ino=918 ioctlcmd=0x4591 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 697.054363][T13237] netlink: 'syz.2.1974': attribute type 1 has an invalid length. [ 697.211759][T13230] loop1: detected capacity change from 0 to 16384 [ 697.581400][ T24] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 697.701301][ T9] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 697.761387][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 697.866466][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 697.895788][ T24] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 697.991412][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 698.297005][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 698.323099][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 698.345151][ T24] usb 5-1: config 0 descriptor?? [ 698.353495][ T9] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 698.356920][ T24] iowarrior 5-1:0.0: no interrupt-in endpoint found [ 698.364323][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 698.430518][ T9] usb 3-1: config 0 descriptor?? [ 698.478831][ T9] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 698.954674][T13256] syzkaller0: entered promiscuous mode [ 698.960294][T13256] syzkaller0: entered allmulticast mode [ 699.113446][ T9] usb 3-1: USB disconnect, device number 72 [ 699.176123][ T24] usb 5-1: USB disconnect, device number 90 [ 699.671664][ T24] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 699.989407][ T24] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 700.014914][ T24] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 700.134940][T13270] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1982'. [ 700.143929][T13270] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1982'. [ 700.544528][ T24] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 700.569330][ T24] usb 2-1: config 0 interface 0 has no altsetting 0 [ 700.577503][ T24] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 701.189282][ T24] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 701.202938][ T24] usb 2-1: config 0 interface 0 has no altsetting 0 [ 701.210610][ T24] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 701.219985][ T24] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 701.236753][ T24] usb 2-1: config 0 interface 0 has no altsetting 0 [ 701.587647][ T24] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 701.639751][T13280] netlink: 'syz.0.1985': attribute type 10 has an invalid length. [ 701.655885][ T24] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 701.687876][T13282] netlink: 'syz.2.1986': attribute type 1 has an invalid length. [ 701.689971][ T24] usb 2-1: config 0 interface 0 has no altsetting 0 [ 701.719969][ T24] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 701.739462][ T24] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 701.798302][ T24] usb 2-1: config 0 interface 0 has no altsetting 0 [ 701.943167][T13286] 9p: Bad value for 'wfdno' [ 702.031987][ T24] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 702.054032][T13289] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1988'. [ 702.083222][ T24] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 702.114397][T13291] loop1: detected capacity change from 0 to 16384 [ 702.171301][ T24] usb 2-1: config 0 interface 0 has no altsetting 0 [ 702.200490][ T24] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 702.223621][ T24] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 702.315116][ T24] usb 2-1: config 0 interface 0 has no altsetting 0 [ 702.317725][ T5610] Bluetooth: hci1: unexpected event for opcode 0x1004 [ 702.775437][ T24] usb 2-1: unable to read config index 7 descriptor/start: -71 [ 702.814230][ T24] usb 2-1: can't read configurations, error -71 [ 703.191387][T13304] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 703.255135][ T29] audit: type=1400 audit(1777741529.654:2903): avc: denied { ioctl } for pid=13307 comm="syz.0.1994" path="socket:[42367]" dev="sockfs" ino=42367 ioctlcmd=0x891b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 704.801540][ T9] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 705.064619][T13314] sctp: [Deprecated]: syz.3.1998 (pid 13314) Use of struct sctp_assoc_value in delayed_ack socket option. [ 705.064619][T13314] Use struct sctp_sack_info instead [ 705.443244][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 705.464176][T13318] loop1: detected capacity change from 0 to 16384 [ 705.520250][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 705.541644][ T9] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 705.554690][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 705.610236][ T9] usb 3-1: config 0 descriptor?? [ 705.634877][ T9] iowarrior 3-1:0.0: no interrupt-in endpoint found [ 705.747405][T13325] sctp: [Deprecated]: syz.4.1999 (pid 13325) Use of struct sctp_assoc_value in delayed_ack socket option. [ 705.747405][T13325] Use struct sctp_sack_info instead [ 706.336136][ T5610] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 706.361514][ T5610] Bluetooth: hci1: Injecting HCI hardware error event [ 706.403517][ T5610] Bluetooth: hci1: hardware error 0x00 [ 706.594699][ T9] usb 3-1: USB disconnect, device number 73 [ 706.627194][T13334] netlink: 'syz.4.2001': attribute type 1 has an invalid length. [ 706.909038][T13343] 9p: Bad value for 'wfdno' [ 707.611281][ T5734] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 707.786650][ T5734] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 707.806694][ T5734] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 707.829115][T13356] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2007'. [ 707.885507][ T5734] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 707.909158][ T5734] usb 3-1: config 0 interface 0 has no altsetting 0 [ 707.930099][ T5734] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 707.952081][ T5734] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 707.984847][ T5734] usb 3-1: config 0 interface 0 has no altsetting 0 [ 707.999881][T13360] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2007'. [ 708.029800][ T5734] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 708.046498][T13364] FAULT_INJECTION: forcing a failure. [ 708.046498][T13364] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 708.054386][ T5734] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 708.078441][ T5734] usb 3-1: config 0 interface 0 has no altsetting 0 [ 708.096916][T13364] CPU: 0 UID: 0 PID: 13364 Comm: syz.0.2008 Tainted: G L syzkaller #0 PREEMPT(full) [ 708.096947][T13364] Tainted: [L]=SOFTLOCKUP [ 708.096953][T13364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 708.096964][T13364] Call Trace: [ 708.096970][T13364] [ 708.096978][T13364] dump_stack_lvl+0x100/0x190 [ 708.097006][T13364] should_fail_ex.cold+0x5/0xa [ 708.097032][T13364] _copy_to_user+0x32/0xd0 [ 708.097060][T13364] simple_read_from_buffer+0xcb/0x170 [ 708.097086][T13364] proc_fail_nth_read+0x1af/0x230 [ 708.097108][T13364] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 708.097129][T13364] ? rw_verify_area+0xce/0x6d0 [ 708.097145][T13364] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 708.097165][T13364] vfs_read+0x1e4/0xb30 [ 708.097187][T13364] ? __pfx_vfs_read+0x10/0x10 [ 708.097205][T13364] ? __fget_files+0x215/0x3d0 [ 708.097233][T13364] ? __fget_files+0x21f/0x3d0 [ 708.097263][T13364] ksys_read+0x12a/0x250 [ 708.097282][T13364] ? __pfx_ksys_read+0x10/0x10 [ 708.097303][T13364] ? rcu_is_watching+0x12/0xc0 [ 708.097335][T13364] do_syscall_64+0x10b/0xf80 [ 708.097356][T13364] ? clear_bhb_loop+0x40/0x90 [ 708.097379][T13364] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 708.097398][T13364] RIP: 0033:0x7fa99915d60e [ 708.097413][T13364] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 708.097430][T13364] RSP: 002b:00007fa99a03cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 708.097446][T13364] RAX: ffffffffffffffda RBX: 00007fa99a03d6c0 RCX: 00007fa99915d60e [ 708.097469][T13364] RDX: 000000000000000f RSI: 00007fa99a03d0a0 RDI: 0000000000000003 [ 708.097480][T13364] RBP: 00007fa99a03d090 R08: 0000000000000000 R09: 0000000000000000 [ 708.097490][T13364] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 708.097501][T13364] R13: 00007fa999416038 R14: 00007fa999415fa0 R15: 00007ffda6bbd428 [ 708.097525][T13364] [ 708.424804][ T5734] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 708.433889][ T5734] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 708.446308][ T5734] usb 3-1: config 0 interface 0 has no altsetting 0 [ 708.453985][ T5734] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 708.484232][ T5734] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 708.496854][ T5734] usb 3-1: config 0 interface 0 has no altsetting 0 [ 708.504867][ T5734] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 708.514151][ T5734] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 708.525174][ T5734] usb 3-1: config 0 interface 0 has no altsetting 0 [ 708.560253][ T5734] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 708.578204][ T5734] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 708.589558][ T5734] usb 3-1: config 0 interface 0 has no altsetting 0 [ 708.597403][ T5734] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 708.606824][ T5734] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 708.618048][ T5734] usb 3-1: config 0 interface 0 has no altsetting 0 [ 708.632435][ T5734] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 708.641951][ T5734] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 708.650349][ T5734] usb 3-1: Product: syz [ 708.655993][ T5610] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 708.678422][T13368] sctp: [Deprecated]: syz.0.2010 (pid 13368) Use of struct sctp_assoc_value in delayed_ack socket option. [ 708.678422][T13368] Use struct sctp_sack_info instead [ 708.700269][ T5734] usb 3-1: Manufacturer: syz [ 708.710200][ T5734] usb 3-1: SerialNumber: syz [ 708.733949][ T5734] usb 3-1: config 0 descriptor?? [ 708.924446][ T5734] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 708.959082][T13374] SELinux: security_context_str_to_sid (5ýÆÉ] ÖS9q#“ë) failed with errno=-22 [ 709.094779][ T24] usb 2-1: new full-speed USB device number 80 using dummy_hcd [ 709.131927][ T5734] usb 3-1: USB disconnect, device number 74 [ 709.147826][ T5734] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 709.211066][T13379] netlink: 'syz.3.2014': attribute type 2 has an invalid length. [ 709.219991][T13379] netlink: 'syz.3.2014': attribute type 1 has an invalid length. [ 709.263465][ T24] usb 2-1: config 0 has an invalid interface number: 133 but max is 0 [ 709.277346][ T24] usb 2-1: config 0 has no interface number 0 [ 709.299378][ T24] usb 2-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 709.309163][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 709.319740][ T24] usb 2-1: Product: syz [ 709.328547][ T24] usb 2-1: Manufacturer: syz [ 709.334920][ T24] usb 2-1: SerialNumber: syz [ 709.622322][ T24] usb 2-1: config 0 descriptor?? [ 710.050655][T13396] 9p: Bad value for 'wfdno' [ 710.217636][T13396] loop1: detected capacity change from 0 to 16384 [ 710.311789][ T24] keyspan 2-1:0.133: Keyspan 1 port adapter converter detected [ 710.360048][ T24] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 81 [ 710.626093][ T24] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 1 [ 710.662012][ T24] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 2 [ 711.067147][ T24] usb 2-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 711.170963][ T24] usb 2-1: USB disconnect, device number 80 [ 711.219962][ T24] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 711.292325][ T24] keyspan 2-1:0.133: device disconnected [ 712.153613][ T29] audit: type=1326 audit(1777741538.544:2904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13417 comm="syz.0.2026" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa99919cdd9 code=0x7ffc0000 [ 712.498123][T13427] netlink: 'syz.3.2027': attribute type 2 has an invalid length. [ 712.506146][ T5713] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 712.520266][T13427] netlink: 'syz.3.2027': attribute type 1 has an invalid length. [ 712.531123][ T29] audit: type=1326 audit(1777741538.544:2905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13417 comm="syz.0.2026" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa99919cdd9 code=0x7ffc0000 [ 712.628941][ T29] audit: type=1326 audit(1777741538.584:2906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13417 comm="syz.0.2026" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa99919cdd9 code=0x7ffc0000 [ 712.690467][ T29] audit: type=1400 audit(1777741538.584:2907): avc: denied { create } for pid=13417 comm="syz.0.2026" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 712.710820][ T29] audit: type=1326 audit(1777741538.584:2908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13417 comm="syz.0.2026" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa99919cdd9 code=0x7ffc0000 [ 712.737941][ T24] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 712.737942][ T5713] usb 3-1: Using ep0 maxpacket: 16 [ 712.747110][ T29] audit: type=1326 audit(1777741538.584:2909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13417 comm="syz.0.2026" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa99919cdd9 code=0x7ffc0000 [ 712.779783][ T5713] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 712.789340][ T5713] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 712.802880][T13429] sctp: [Deprecated]: syz.3.2028 (pid 13429) Use of struct sctp_assoc_value in delayed_ack socket option. [ 712.802880][T13429] Use struct sctp_sack_info instead [ 712.826238][ T5713] usb 3-1: Product: syz [ 712.833345][ T5713] usb 3-1: Manufacturer: syz [ 712.848184][ T5713] usb 3-1: SerialNumber: syz [ 712.874693][ T5713] usb 3-1: config 0 descriptor?? [ 712.900634][ T29] audit: type=1326 audit(1777741538.584:2910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13417 comm="syz.0.2026" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fa99919cdd9 code=0x7ffc0000 [ 712.927688][ T29] audit: type=1400 audit(1777741538.584:2911): avc: denied { connect } for pid=13417 comm="syz.0.2026" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 712.931113][ T5713] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 712.947766][ T29] audit: type=1326 audit(1777741538.584:2912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13417 comm="syz.0.2026" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa99919cdd9 code=0x7ffc0000 [ 712.989678][ T5713] usb 3-1: Detected FT-X [ 713.148136][ T29] audit: type=1326 audit(1777741538.584:2913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13417 comm="syz.0.2026" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa99919cdd9 code=0x7ffc0000 [ 713.177144][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 713.184598][ T24] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 713.197189][ T24] usb 2-1: config 0 interface 0 has no altsetting 0 [ 713.205423][ T24] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 713.217879][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 713.265075][ T24] usb 2-1: config 0 descriptor?? [ 713.295517][T13414] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=13414 comm=syz.2.2022 [ 713.353437][T13414] xt_hashlimit: size too large, truncated to 1048576 [ 713.700066][ T24] nzxt-smart2 0003:1E71:2009.000C: unknown main item tag 0x0 [ 713.712053][ T5713] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 713.719862][ T5713] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 713.739358][ T24] nzxt-smart2 0003:1E71:2009.000C: unknown main item tag 0x0 [ 713.742132][ T5713] ftdi_sio 3-1:0.0: GPIO initialisation failed: -71 [ 713.769055][ T24] nzxt-smart2 0003:1E71:2009.000C: unknown main item tag 0x0 [ 713.795862][ T24] nzxt-smart2 0003:1E71:2009.000C: unknown main item tag 0x0 [ 713.812812][ T5713] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 713.830502][ T24] nzxt-smart2 0003:1E71:2009.000C: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0 [ 713.850234][ T5713] usb 3-1: USB disconnect, device number 75 [ 713.882318][ T5713] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 713.947647][ T5713] ftdi_sio 3-1:0.0: device disconnected [ 714.041354][ T42] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 714.214722][ T42] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 714.246459][ T42] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 714.283823][ T42] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 714.329276][ T42] usb 4-1: config 0 interface 0 has no altsetting 0 [ 714.363197][ T42] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 714.391584][ T42] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 714.416374][ T42] usb 4-1: config 0 interface 0 has no altsetting 0 [ 714.443960][ T42] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 714.459378][ T42] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 714.487264][ T42] usb 4-1: config 0 interface 0 has no altsetting 0 [ 714.521173][ T42] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 714.537521][ T42] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 714.584052][ T42] usb 4-1: config 0 interface 0 has no altsetting 0 [ 714.603699][ T42] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 714.616926][ T42] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 714.640712][ T42] usb 4-1: config 0 interface 0 has no altsetting 0 [ 714.648839][ T42] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 714.670464][ T42] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 714.784267][ T42] usb 4-1: config 0 interface 0 has no altsetting 0 [ 714.797724][ T42] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 714.815251][ T42] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 714.878229][ T5713] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 714.913613][ T42] usb 4-1: config 0 interface 0 has no altsetting 0 [ 714.952099][ T42] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 714.971863][ T42] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 714.997412][ T42] usb 4-1: config 0 interface 0 has no altsetting 0 [ 715.215983][T13447] 9p: Bad value for 'wfdno' [ 715.297380][ T42] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 715.304093][ T5713] usb 5-1: Using ep0 maxpacket: 8 [ 715.326951][ T5713] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 715.327540][ T42] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 715.351763][ T5713] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 715.400373][ T42] usb 4-1: Product: syz [ 715.401396][ T5713] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 715.423899][ T42] usb 4-1: Manufacturer: syz [ 715.438767][ T42] usb 4-1: SerialNumber: syz [ 715.457956][ T24] usb 2-1: USB disconnect, device number 81 [ 715.471872][ T42] usb 4-1: config 0 descriptor?? [ 715.485320][T13446] loop1: detected capacity change from 0 to 16384 [ 715.559050][ T42] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 715.628516][ T5713] usb 5-1: config 0 descriptor?? [ 715.662702][ T5713] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 715.977179][T13443] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 716.151742][ T5713] usb 4-1: USB disconnect, device number 82 [ 716.296153][ T5713] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 716.386690][T13440] syzkaller0: entered promiscuous mode [ 716.392413][T13440] syzkaller0: entered allmulticast mode [ 716.800892][ T5713] usb 5-1: USB disconnect, device number 91 [ 716.910871][T13462] netlink: 'syz.3.2038': attribute type 2 has an invalid length. [ 716.944239][T13462] netlink: 'syz.3.2038': attribute type 1 has an invalid length. [ 717.110512][T13470] udf: Unknown parameter 'discard' [ 717.241541][ T42] usb 3-1: new full-speed USB device number 76 using dummy_hcd [ 717.551310][ T24] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 717.643326][ T42] usb 3-1: config 0 has an invalid interface number: 133 but max is 0 [ 717.654062][ T42] usb 3-1: config 0 has no interface number 0 [ 717.663374][ T42] usb 3-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 717.686037][ T42] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 717.694265][ T5720] page_pool_release_retry() stalled pool shutdown: id 25, 48 inflight 605 sec [ 717.722268][ T42] usb 3-1: Product: syz [ 717.734927][ T24] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 717.749732][ T42] usb 3-1: Manufacturer: syz [ 717.764469][ T42] usb 3-1: SerialNumber: syz [ 717.774777][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 717.819087][ T42] usb 3-1: config 0 descriptor?? [ 717.853780][ T24] usb 4-1: config 0 descriptor?? [ 717.879500][ T24] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 718.099573][T13481] sctp: [Deprecated]: syz.4.2043 (pid 13481) Use of struct sctp_assoc_value in delayed_ack socket option. [ 718.099573][T13481] Use struct sctp_sack_info instead [ 718.129894][ T42] keyspan 3-1:0.133: Keyspan 1 port adapter converter detected [ 718.155416][ T42] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 81 [ 718.168491][ T42] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 1 [ 718.650725][ T24] cpia1 4-1:0.0: unexpected state after lo power cmd: 00 [ 718.658180][ T42] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 2 [ 718.668900][ T42] usb 3-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 719.328284][T13472] bond3 (unregistering): Released all slaves [ 719.509542][ T5720] usb 3-1: USB disconnect, device number 76 [ 719.533562][ T5720] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 719.658228][T13492] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2045'. [ 720.043239][ T24] gspca_cpia1: usb_control_msg 02, error -110 [ 720.051347][ T24] gspca_cpia1: usb_control_msg 05, error -32 [ 720.060653][ T5720] keyspan 3-1:0.133: device disconnected [ 720.068239][ T24] gspca_cpia1: usb_control_msg 05, error -32 [ 720.104114][ T24] gspca_cpia1: usb_control_msg 05, error -32 [ 720.127618][ T24] gspca_cpia1: usb_control_msg 05, error -32 [ 720.149756][ T24] cpia1 4-1:0.0: unexpected systemstate: 00 [ 720.166957][ T29] kauditd_printk_skb: 27 callbacks suppressed [ 720.166974][ T29] audit: type=1400 audit(1777741546.564:2941): avc: denied { bind } for pid=13494 comm="syz.0.2046" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 720.208374][ T10] usb 4-1: USB disconnect, device number 83 [ 720.291300][ T9] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 720.673624][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 720.695503][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 720.739909][ T9] usb 5-1: config 6 has an invalid interface number: 113 but max is 0 [ 720.768246][ T9] usb 5-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 720.784856][ T9] usb 5-1: config 6 has no interface number 0 [ 720.794679][ T9] usb 5-1: config 6 interface 113 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 720.809805][ T9] usb 5-1: config 6 interface 113 has no altsetting 0 [ 720.835062][ T9] usb 5-1: New USB device found, idVendor=0403, idProduct=da73, bcdDevice= 0.09 [ 720.856988][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 720.910310][ T10] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 720.923504][ T9] usb 5-1: SerialNumber: syz [ 720.975558][ T9] ftdi_sio 5-1:6.113: FTDI USB Serial Device converter detected [ 720.998388][ T9] usb 5-1: Detected SIO [ 721.027942][ T9] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 721.071790][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 721.073926][ T10] usb 4-1: config 3 has an invalid interface number: 114 but max is 0 [ 721.073951][ T10] usb 4-1: config 3 has no interface number 0 [ 721.073974][ T10] usb 4-1: config 3 interface 114 has no altsetting 0 [ 721.079857][ T10] usb 4-1: New USB device found, idVendor=0c45, idProduct=800a, bcdDevice= d.d3 [ 721.079895][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 721.079918][ T10] usb 4-1: Product: syz [ 721.079933][ T10] usb 4-1: Manufacturer: syz [ 721.079950][ T10] usb 4-1: SerialNumber: syz [ 722.441940][ T9] usb 5-1: USB disconnect, device number 92 [ 722.651683][ T9] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 722.652166][ T9] ftdi_sio 5-1:6.113: device disconnected [ 722.674395][ T10] gspca_main: sn9c2028-2.14.0 probing 0c45:800a [ 722.677865][ T10] gspca_sn9c2028: read1 error -71 [ 722.678177][ T10] gspca_sn9c2028: read1 error -71 [ 722.678456][ T10] gspca_sn9c2028: read1 error -71 [ 722.678516][ T10] sn9c2028 4-1:3.114: probe with driver sn9c2028 failed with error -71 [ 722.705339][ T10] usb 4-1: USB disconnect, device number 84 [ 722.756280][T13520] 9p: Bad value for 'wfdno' [ 722.987077][T13521] loop1: detected capacity change from 0 to 16384 [ 723.674025][ T29] audit: type=1400 audit(1777741550.070:2942): avc: denied { create } for pid=13518 comm="syz.1.2056" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 723.720805][ T29] audit: type=1400 audit(1777741550.070:2943): avc: denied { create } for pid=13518 comm="syz.1.2056" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 723.761289][ T29] audit: type=1400 audit(1777741550.130:2944): avc: denied { setopt } for pid=13518 comm="syz.1.2056" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 723.799146][ T29] audit: type=1400 audit(1777741550.190:2945): avc: denied { setopt } for pid=13538 comm="syz.3.2062" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 723.839693][ T29] audit: type=1400 audit(1777741550.190:2946): avc: denied { connect } for pid=13538 comm="syz.3.2062" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 723.861593][ T42] usb 5-1: new full-speed USB device number 93 using dummy_hcd [ 723.890672][ T29] audit: type=1400 audit(1777741550.220:2947): avc: denied { write } for pid=13518 comm="syz.1.2056" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 723.965266][ T29] audit: type=1400 audit(1777741550.220:2948): avc: denied { read } for pid=13518 comm="syz.1.2056" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 724.033046][ T42] usb 5-1: config 0 has an invalid interface number: 133 but max is 0 [ 724.041449][ T42] usb 5-1: config 0 has no interface number 0 [ 724.052083][ T42] usb 5-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 724.063861][ T42] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 724.080243][ T42] usb 5-1: Product: syz [ 724.089784][ T42] usb 5-1: Manufacturer: syz [ 724.103922][ T42] usb 5-1: SerialNumber: syz [ 724.125066][ T42] usb 5-1: config 0 descriptor?? [ 724.348620][ T42] keyspan 5-1:0.133: Keyspan 1 port adapter converter detected [ 724.366588][ T42] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 81 [ 724.377857][ T42] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 1 [ 724.387641][ T42] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 2 [ 724.399431][ T42] usb 5-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 724.999795][T13551] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2065'. [ 725.082022][ T9] usb 5-1: USB disconnect, device number 93 [ 725.137094][T13554] tipc: Enabled bearer , priority 0 [ 725.149970][T13554] syzkaller0: entered promiscuous mode [ 725.155792][T13554] syzkaller0: entered allmulticast mode [ 725.197004][T13554] tipc: Resetting bearer [ 725.347998][ T9] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 725.358059][ T9] keyspan 5-1:0.133: device disconnected [ 725.373281][T13550] tipc: Resetting bearer [ 725.432728][T13550] tipc: Disabling bearer [ 725.750114][T13559] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 725.838380][T13559] audit: audit_backlog=65 > audit_backlog_limit=64 [ 725.845046][T13559] audit: audit_lost=1829 audit_rate_limit=0 audit_backlog_limit=64 [ 725.853073][T13559] audit: backlog limit exceeded [ 725.859445][T13559] audit: audit_backlog=65 > audit_backlog_limit=64 [ 725.866033][T13559] audit: audit_lost=1830 audit_rate_limit=0 audit_backlog_limit=64 [ 725.874080][T13559] audit: backlog limit exceeded [ 725.878980][T13559] audit: audit_backlog=65 > audit_backlog_limit=64 [ 725.885668][T13559] audit: audit_lost=1831 audit_rate_limit=0 audit_backlog_limit=64 [ 725.914233][T13559] audit: backlog limit exceeded [ 725.919431][T13559] audit: audit_backlog=65 > audit_backlog_limit=64 [ 726.251570][T13562] sctp: [Deprecated]: syz.4.2068 (pid 13562) Use of struct sctp_assoc_value in delayed_ack socket option. [ 726.251570][T13562] Use struct sctp_sack_info instead [ 727.055832][ T1098] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 20001 - 0 [ 727.091426][ T48] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 20001 - 0 [ 727.115027][ T48] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 20001 - 0 [ 727.195879][ T48] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 20001 - 0 [ 727.217616][T13579] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2073'. [ 727.238596][T13573] FAULT_INJECTION: forcing a failure. [ 727.238596][T13573] name failslab, interval 1, probability 0, space 0, times 0 [ 727.283208][T13573] CPU: 0 UID: 0 PID: 13573 Comm: syz.1.2070 Tainted: G L syzkaller #0 PREEMPT(full) [ 727.283239][T13573] Tainted: [L]=SOFTLOCKUP [ 727.283246][T13573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 727.283257][T13573] Call Trace: [ 727.283264][T13573] [ 727.283272][T13573] dump_stack_lvl+0x100/0x190 [ 727.283301][T13573] should_fail_ex.cold+0x5/0xa [ 727.283329][T13573] should_failslab+0xc2/0x120 [ 727.283349][T13573] __kmalloc_cache_noprof+0x7a/0x6f0 [ 727.283373][T13573] ? vkms_plane_duplicate_state+0x45/0x130 [ 727.283407][T13573] vkms_plane_duplicate_state+0x45/0x130 [ 727.283435][T13573] drm_atomic_get_plane_state+0x279/0x760 [ 727.283461][T13573] drm_client_modeset_commit_atomic+0x237/0x7e0 [ 727.283487][T13573] ? rcu_is_watching+0x12/0xc0 [ 727.283523][T13573] ? __mutex_lock+0x26d/0x1b10 [ 727.283548][T13573] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 727.283573][T13573] ? drm_master_internal_acquire+0x21/0x80 [ 727.283624][T13573] drm_client_modeset_commit_locked+0x14d/0x580 [ 727.283653][T13573] drm_client_modeset_commit+0x4f/0x80 [ 727.283680][T13573] __drm_fb_helper_restore_fbdev_mode_unlocked.part.0+0x137/0x160 [ 727.283708][T13573] drm_fb_helper_restore_fbdev_mode_unlocked+0x93/0xc0 [ 727.283735][T13573] drm_fbdev_client_restore+0x1b/0x30 [ 727.283754][T13573] ? __pfx_drm_fbdev_client_restore+0x10/0x10 [ 727.283773][T13573] drm_client_dev_restore+0x205/0x2a0 [ 727.283810][T13573] drm_release+0x2c6/0x360 [ 727.283834][T13573] ? __pfx_drm_release+0x10/0x10 [ 727.283857][T13573] __fput+0x3ff/0xb50 [ 727.283887][T13573] fput_close_sync+0x118/0x250 [ 727.283915][T13573] ? __pfx_fput_close_sync+0x10/0x10 [ 727.283950][T13573] __x64_sys_close+0x8b/0x120 [ 727.283978][T13573] do_syscall_64+0x10b/0xf80 [ 727.283999][T13573] ? clear_bhb_loop+0x40/0x90 [ 727.284021][T13573] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 727.284040][T13573] RIP: 0033:0x7fd47939cdd9 [ 727.284056][T13573] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 727.284074][T13573] RSP: 002b:00007fd47a2e5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 727.284093][T13573] RAX: ffffffffffffffda RBX: 00007fd479615fa0 RCX: 00007fd47939cdd9 [ 727.284105][T13573] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 727.284115][T13573] RBP: 00007fd47a2e5090 R08: 0000000000000000 R09: 0000000000000000 [ 727.284125][T13573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 727.284135][T13573] R13: 00007fd479616038 R14: 00007fd479615fa0 R15: 00007fff5e1f57b8 [ 727.284161][T13573] [ 727.765380][ T42] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 727.822151][ T10] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 727.983387][ T42] usb 4-1: Using ep0 maxpacket: 32 [ 728.041302][ T42] usb 4-1: unable to get BOS descriptor or descriptor too short [ 728.060314][ T42] usb 4-1: config 105 has an invalid interface number: 3 but max is 1 [ 728.070699][ T42] usb 4-1: config 105 has no interface number 0 [ 728.078826][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 728.089426][ T42] usb 4-1: config 105 interface 1 has no altsetting 0 [ 728.100072][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 728.109986][ T42] usb 4-1: config 105 interface 3 has no altsetting 0 [ 728.128084][ T10] usb 5-1: config 105 has an invalid interface number: 3 but max is 1 [ 728.144332][ T42] usb 4-1: New USB device found, idVendor=12d1, idProduct=e120, bcdDevice=96.cf [ 728.158501][ T42] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 728.161572][ T10] usb 5-1: config 105 has no interface number 0 [ 728.173279][ T42] usb 4-1: Product: syz [ 728.177704][ T42] usb 4-1: Manufacturer: syz [ 728.182793][ T42] usb 4-1: SerialNumber: syz [ 728.190740][ T10] usb 5-1: config 105 interface 1 has no altsetting 0 [ 728.199128][ T10] usb 5-1: config 105 interface 3 has no altsetting 0 [ 728.222825][T13591] x_tables: duplicate underflow at hook 3 [ 728.224674][ T10] usb 5-1: New USB device found, idVendor=12d1, idProduct=e120, bcdDevice=96.cf [ 728.334324][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 728.343274][ T10] usb 5-1: Product: syz [ 728.347960][ T10] usb 5-1: Manufacturer: syz [ 728.352635][ T10] usb 5-1: SerialNumber: syz [ 728.852118][ T42] option 4-1:105.1: GSM modem (1-port) converter detected [ 728.874119][ T42] uvcvideo 4-1:105.3: probe with driver uvcvideo failed with error -22 [ 728.886867][ T42] usb 4-1: USB disconnect, device number 85 [ 728.909465][ T42] option 4-1:105.1: device disconnected [ 728.910912][ T10] option 5-1:105.1: GSM modem (1-port) converter detected [ 728.955769][ T10] uvcvideo 5-1:105.3: probe with driver uvcvideo failed with error -22 [ 728.979714][ T10] usb 5-1: USB disconnect, device number 94 [ 728.985355][T13596] tipc: Enabling of bearer rejected, already enabled [ 728.990186][ T10] option 5-1:105.1: device disconnected [ 729.210220][T13600] 9p: Bad value for 'rfdno' [ 729.227355][T13600] loop1: detected capacity change from 0 to 16384 [ 729.712825][ T802] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 729.889046][ T802] usb 2-1: New USB device found, idVendor=05ac, idProduct=b301, bcdDevice=e4.00 [ 729.905945][ T802] usb 2-1: New USB device strings: Mfr=9, Product=2, SerialNumber=3 [ 729.931166][ T802] usb 2-1: Product: syz [ 729.940422][ T802] usb 2-1: Manufacturer: syz [ 729.949908][ T802] usb 2-1: SerialNumber: syz [ 730.130565][T13615] sctp: [Deprecated]: syz.2.2084 (pid 13615) Use of struct sctp_assoc_value in delayed_ack socket option. [ 730.130565][T13615] Use struct sctp_sack_info instead [ 730.161114][ T802] usb 2-1: config 0 descriptor?? [ 730.466222][ T10] usb 2-1: USB disconnect, device number 82 [ 731.808040][T13637] tipc: Enabling of bearer rejected, already enabled [ 732.037458][T13647] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2093'. [ 733.029906][T13657] sctp: [Deprecated]: syz.2.2097 (pid 13657) Use of int in max_burst socket option. [ 733.029906][T13657] Use struct sctp_assoc_value instead [ 733.077569][T13656] sctp: [Deprecated]: syz.2.2097 (pid 13656) Use of int in max_burst socket option. [ 733.077569][T13656] Use struct sctp_assoc_value instead [ 733.102317][T13661] kvm: pic: non byte write [ 733.119759][T13661] kvm: pic: non byte write [ 733.129881][T13661] kvm: pic: non byte write [ 733.139463][T13661] kvm: pic: non byte write [ 733.148231][T13661] kvm: pic: non byte write [ 733.157690][T13661] kvm: pic: non byte write [ 733.167145][T13661] kvm: pic: non byte write [ 733.186827][T13661] kvm: pic: non byte write [ 733.198812][T13661] kvm: pic: non byte write [ 733.209222][T13661] kvm: pic: non byte write [ 733.222342][T13661] kvm: pic: single mode not supported [ 733.222878][T13661] kvm: pic: single mode not supported [ 733.231171][T13661] kvm: pic: level sensitive irq not supported [ 733.238898][T13661] kvm: pic: single mode not supported [ 733.246197][T13663] sctp: [Deprecated]: syz.4.2100 (pid 13663) Use of struct sctp_assoc_value in delayed_ack socket option. [ 733.246197][T13663] Use struct sctp_sack_info instead [ 733.291702][T13671] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=9390 sclass=netlink_route_socket pid=13671 comm=syz.0.2098 [ 733.306787][ T29] kauditd_printk_skb: 260 callbacks suppressed [ 733.306803][ T29] audit: type=1400 audit(1777741559.710:3018): avc: denied { getopt } for pid=13658 comm="syz.0.2098" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 733.338342][T13671] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2098'. [ 734.056455][T13677] syz.2.2102 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 734.116813][T13677] libceph: resolve '.‹R¯HÖe'ì»Ë /Ïâµüë1ýC¸ £~—1W–쯑ë¨eþxEA®ÁþeSb{~Rð' (ret=-3): failed [ 734.131091][ T29] audit: type=1400 audit(1777741560.510:3019): avc: denied { read } for pid=13680 comm="syz.0.2103" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 734.131138][ T29] audit: type=1400 audit(1777741560.510:3020): avc: denied { open } for pid=13680 comm="syz.0.2103" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 734.131172][ T29] audit: type=1400 audit(1777741560.510:3021): avc: denied { ioctl } for pid=13680 comm="syz.0.2103" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 734.191529][ T5720] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 734.199726][T13684] tipc: Enabling of bearer rejected, already enabled [ 734.321565][ T5720] usb 4-1: device descriptor read/64, error -71 [ 734.561326][ T5720] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 734.691454][ T5720] usb 4-1: device descriptor read/64, error -71 [ 734.807304][ T5720] usb usb4-port1: attempt power cycle [ 735.213783][ T29] audit: type=1400 audit(1777741561.610:3022): avc: denied { mount } for pid=13690 comm="syz.0.2109" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 735.255914][ T29] audit: type=1400 audit(1777741561.640:3023): avc: denied { mounton } for pid=13690 comm="syz.0.2109" path="/434/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 735.295253][T13693] netlink: 'syz.2.2108': attribute type 29 has an invalid length. [ 735.303652][ T29] audit: type=1400 audit(1777741561.680:3024): avc: denied { unmount } for pid=5613 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 735.334704][T13693] netlink: 'syz.2.2108': attribute type 29 has an invalid length. [ 735.342736][ T5720] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 735.369587][T13693] netlink: 500 bytes leftover after parsing attributes in process `syz.2.2108'. [ 735.379885][ T5720] usb 4-1: device descriptor read/8, error -71 [ 735.476993][T13697] sctp: [Deprecated]: syz.1.2107 (pid 13697) Use of struct sctp_assoc_value in delayed_ack socket option. [ 735.476993][T13697] Use struct sctp_sack_info instead [ 735.621402][ T5720] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 735.962431][ T5720] usb 4-1: device descriptor read/8, error -71 [ 735.972600][T13703] team0: Port device vlan3 added [ 736.006166][T13703] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 736.084583][ T5720] usb usb4-port1: unable to enumerate USB device [ 736.224038][T13715] tipc: Enabling of bearer rejected, already enabled [ 737.210118][T13735] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 737.672411][T13745] 9p: Bad value for 'rfdno' [ 737.880827][T13744] 9p: Bad value for 'rfdno' [ 738.069027][T13737] loop1: detected capacity change from 0 to 16384 [ 738.354780][ T29] audit: type=1400 audit(1777741564.750:3025): avc: denied { connect } for pid=13750 comm="syz.1.2125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 738.813206][T13761] tipc: Enabling of bearer rejected, already enabled [ 740.102579][T13769] FAULT_INJECTION: forcing a failure. [ 740.102579][T13769] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 740.115681][T13769] CPU: 0 UID: 0 PID: 13769 Comm: syz.3.2131 Tainted: G L syzkaller #0 PREEMPT(full) [ 740.115701][T13769] Tainted: [L]=SOFTLOCKUP [ 740.115705][T13769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 740.115711][T13769] Call Trace: [ 740.115715][T13769] [ 740.115720][T13769] dump_stack_lvl+0x100/0x190 [ 740.115743][T13769] should_fail_ex.cold+0x5/0xa [ 740.115758][T13769] _copy_to_user+0x32/0xd0 [ 740.115776][T13769] simple_read_from_buffer+0xcb/0x170 [ 740.115791][T13769] proc_fail_nth_read+0x1af/0x230 [ 740.115804][T13769] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 740.115817][T13769] ? rw_verify_area+0xce/0x6d0 [ 740.115827][T13769] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 740.115838][T13769] vfs_read+0x1e4/0xb30 [ 740.115851][T13769] ? __pfx_vfs_read+0x10/0x10 [ 740.115862][T13769] ? __fget_files+0x215/0x3d0 [ 740.115879][T13769] ? __fget_files+0x21f/0x3d0 [ 740.115896][T13769] ksys_read+0x12a/0x250 [ 740.115907][T13769] ? __pfx_ksys_read+0x10/0x10 [ 740.115920][T13769] ? rcu_is_watching+0x12/0xc0 [ 740.115938][T13769] do_syscall_64+0x10b/0xf80 [ 740.115952][T13769] ? clear_bhb_loop+0x40/0x90 [ 740.115965][T13769] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 740.115977][T13769] RIP: 0033:0x7f48fbf5d60e [ 740.115986][T13769] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 740.115997][T13769] RSP: 002b:00007f48fa1f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 740.116008][T13769] RAX: ffffffffffffffda RBX: 00007f48fa1f66c0 RCX: 00007f48fbf5d60e [ 740.116014][T13769] RDX: 000000000000000f RSI: 00007f48fa1f60a0 RDI: 000000000000000d [ 740.116020][T13769] RBP: 00007f48fa1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 740.116026][T13769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 740.116033][T13769] R13: 00007f48fc216038 R14: 00007f48fc215fa0 R15: 00007ffff828e828 [ 740.116046][T13769] [ 740.531510][ T5713] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 740.732916][ T5713] usb 5-1: device descriptor read/64, error -71 [ 741.238909][ T5713] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 741.371350][ T5713] usb 5-1: device descriptor read/64, error -71 [ 741.377655][ T10] usb 4-1: new full-speed USB device number 90 using dummy_hcd [ 741.587825][ T5713] usb usb5-port1: attempt power cycle [ 741.682867][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 741.689296][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 741.773268][ T10] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 741.781354][ T10] usb 4-1: config 0 has no interface number 0 [ 741.787602][ T10] usb 4-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 741.812497][ T10] usb 4-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 741.968448][ T10] usb 4-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 742.072144][ T5713] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 742.126296][ T10] usb 4-1: config 0 interface 1 has no altsetting 0 [ 742.151362][ T10] usb 4-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 742.161344][ T5713] usb 5-1: device descriptor read/8, error -71 [ 742.177929][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 742.199268][ T10] usb 4-1: config 0 descriptor?? [ 742.473010][ T5713] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 742.672445][ T5713] usb 5-1: device descriptor read/8, error -71 [ 742.783149][ T5713] usb usb5-port1: unable to enumerate USB device [ 743.093573][T13779] input: syz0 as /devices/virtual/input/input26 [ 743.772543][ T10] input: HID 145f:0212 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.1/0003:145F:0212.000D/input/input27 [ 743.887171][ T10] input: HID 145f:0212 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.1/0003:145F:0212.000D/input/input28 [ 744.147710][T13811] sctp: [Deprecated]: syz.1.2145 (pid 13811) Use of struct sctp_assoc_value in delayed_ack socket option. [ 744.147710][T13811] Use struct sctp_sack_info instead [ 744.839723][ T10] uclogic 0003:145F:0212.000D: input,hidraw0: USB HID v4.06 Keypad [HID 145f:0212] on usb-dummy_hcd.3-1/input1 [ 744.890618][ T29] audit: type=1400 audit(1777741571.280:3026): avc: denied { read } for pid=13818 comm="syz.4.2147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 745.379985][ T10] usb 4-1: USB disconnect, device number 90 [ 745.877872][ T29] audit: type=1400 audit(1777741572.250:3027): avc: denied { open } for pid=13820 comm="syz.0.2148" path="/dev/ptyq5" dev="devtmpfs" ino=124 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 746.157697][ T29] audit: type=1400 audit(1777741572.320:3028): avc: denied { ioctl } for pid=13820 comm="syz.0.2148" path="/dev/ptyq5" dev="devtmpfs" ino=124 ioctlcmd=0x5423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 746.252610][ T29] audit: type=1400 audit(1777741572.550:3029): avc: denied { read } for pid=13836 comm="syz.2.2150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 746.584188][ T29] audit: type=1400 audit(1777741572.750:3030): avc: denied { setopt } for pid=13836 comm="syz.2.2150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 746.593725][T13843] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2152'. [ 746.644009][T13835] fido_id[13835]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 746.680526][ T29] audit: type=1400 audit(1777741572.760:3031): avc: denied { bind } for pid=13836 comm="syz.2.2150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 746.684385][T13843] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2152'. [ 746.716092][ T29] audit: type=1400 audit(1777741572.770:3032): avc: denied { read append } for pid=13836 comm="syz.2.2150" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 746.775622][T13842] vxcan1 speed is unknown, defaulting to 1000 [ 746.794635][ T29] audit: type=1400 audit(1777741572.770:3033): avc: denied { open } for pid=13836 comm="syz.2.2150" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 747.034447][T13853] sctp: [Deprecated]: syz.4.2155 (pid 13853) Use of struct sctp_assoc_value in delayed_ack socket option. [ 747.034447][T13853] Use struct sctp_sack_info instead [ 747.071406][T13839] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 747.083529][T13839] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 748.721490][ T5610] Bluetooth: hci0: command 0x0406 tx timeout [ 748.745854][ T10] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 749.048084][ T10] usb 2-1: device descriptor read/64, error -71 [ 749.121400][ T5610] Bluetooth: hci4: command 0x0406 tx timeout [ 750.711503][ T10] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 751.121277][T13881] netlink: 'syz.1.2162': attribute type 3 has an invalid length. [ 751.149523][T13881] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2162'. [ 752.251594][ T24] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 752.446224][ T29] audit: type=1400 audit(1777741578.830:3034): avc: denied { shutdown } for pid=13900 comm="syz.1.2167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 752.519017][T13906] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2166'. [ 752.528403][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 752.547555][ T24] usb 5-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb [ 752.559651][T13906] netlink: 'syz.3.2166': attribute type 30 has an invalid length. [ 752.569450][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 752.584523][ T24] usb 5-1: Product: syz [ 752.597507][ T24] usb 5-1: Manufacturer: syz [ 752.611819][ T24] usb 5-1: SerialNumber: syz [ 752.886413][T13906] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2166'. [ 752.896640][ T13] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 752.906024][ T13] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 752.914484][T13906] netlink: 'syz.3.2166': attribute type 30 has an invalid length. [ 752.928730][ T13] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 752.939445][ T13] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 752.956538][T13899] loop1: detected capacity change from 0 to 16384 [ 753.355245][ T29] audit: type=1400 audit(1777741579.740:3035): avc: denied { getopt } for pid=13913 comm="syz.0.2169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 755.231296][ T10] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 755.301078][ T29] audit: type=1400 audit(1777741581.690:3036): avc: denied { shutdown } for pid=13927 comm="syz.1.2174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 755.367635][ T29] audit: type=1400 audit(1777741581.690:3037): avc: denied { write } for pid=13927 comm="syz.1.2174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 755.406876][ T10] usb 4-1: device descriptor read/64, error -71 [ 755.586618][ T24] mxuport 5-1:254.0: mxuport_send_ctrl_data_urb - usb_control_msg failed (-71) [ 755.588547][T13931] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 755.605407][ T24] mxuport 5-1:254.0: mxuport_send_ctrl_data_urb - usb_control_msg failed (-71) [ 755.614691][ T24] mxuport 5-1:254.0: probe with driver mxuport failed with error -71 [ 755.645194][ T24] usb 5-1: USB disconnect, device number 99 [ 755.661308][ T10] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 755.962679][ T29] audit: type=1326 audit(1777741582.250:3038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13932 comm="syz.4.2176" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bdff9cdd9 code=0x7ffc0000 [ 756.203923][ T10] usb 4-1: device descriptor read/64, error -71 [ 756.209598][ T29] audit: type=1326 audit(1777741582.250:3039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13932 comm="syz.4.2176" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bdff9cdd9 code=0x7ffc0000 [ 756.304401][ T29] audit: type=1326 audit(1777741582.250:3040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13932 comm="syz.4.2176" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3bdff9cdd9 code=0x7ffc0000 [ 756.312812][ T10] usb usb4-port1: attempt power cycle [ 756.367864][ T29] audit: type=1326 audit(1777741582.250:3041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13932 comm="syz.4.2176" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bdff9cdd9 code=0x7ffc0000 [ 756.752917][ T29] audit: type=1326 audit(1777741582.250:3042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13932 comm="syz.4.2176" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bdff9cdd9 code=0x7ffc0000 [ 756.834437][ T29] audit: type=1326 audit(1777741582.250:3043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13932 comm="syz.4.2176" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f3bdff9cdd9 code=0x7ffc0000 [ 757.391281][ T10] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 757.412023][ T10] usb 4-1: device descriptor read/8, error -71 [ 757.662324][T13955] sch_tbf: burst 18 is lower than device lo mtu (65550) ! [ 757.872228][T13958] sctp: [Deprecated]: syz.3.2183 (pid 13958) Use of struct sctp_assoc_value in delayed_ack socket option. [ 757.872228][T13958] Use struct sctp_sack_info instead [ 758.529115][T13963] sch_tbf: burst 18 is lower than device lo mtu (65550) ! [ 759.411721][T13968] netlink: 'syz.3.2186': attribute type 10 has an invalid length. [ 759.680957][ T10] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 759.855256][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 759.855274][ T29] audit: type=1400 audit(1777741586.250:3049): avc: denied { ioctl } for pid=13971 comm="syz.4.2187" path="socket:[45622]" dev="sockfs" ino=45622 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 759.901291][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 759.910388][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 759.919045][ T10] usb 4-1: config 8 has an invalid interface number: 46 but max is 0 [ 759.933185][ T10] usb 4-1: config 8 has no interface number 0 [ 759.940180][ T10] usb 4-1: config 8 interface 46 has no altsetting 0 [ 759.954675][ T10] usb 4-1: New USB device found, idVendor=2040, idProduct=1700, bcdDevice=a7.db [ 759.966945][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 759.985010][ T10] usb 4-1: Product: syz [ 759.990163][ T10] usb 4-1: Manufacturer: syz [ 759.995742][ T10] usb 4-1: SerialNumber: syz [ 760.216100][T13986] netlink: 'syz.4.2192': attribute type 10 has an invalid length. [ 760.225041][T13986] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2192'. [ 760.239346][T13968] bond1: option mode: unable to set because the bond device has slaves [ 760.291613][ T10] smsusb:smsusb_probe: board id=5, interface number 46 [ 760.306961][ T10] usb 4-1: USB disconnect, device number 95 [ 760.371450][ T24] usb 2-1: new full-speed USB device number 85 using dummy_hcd [ 760.524622][ T24] usb 2-1: config 0 has an invalid interface number: 133 but max is 0 [ 760.533084][ T24] usb 2-1: config 0 has no interface number 0 [ 760.543338][ T24] usb 2-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 760.552587][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 760.560666][ T24] usb 2-1: Product: syz [ 760.565293][ T24] usb 2-1: Manufacturer: syz [ 760.569944][ T24] usb 2-1: SerialNumber: syz [ 760.584473][ T24] usb 2-1: config 0 descriptor?? [ 760.798845][ T24] keyspan 2-1:0.133: Keyspan 1 port adapter converter detected [ 760.807785][ T24] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 81 [ 760.816446][ T24] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 1 [ 760.824771][ T24] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 2 [ 760.841399][ T24] usb 2-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 760.871311][ T10] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 761.001979][ T10] usb 3-1: device descriptor read/64, error -71 [ 761.024780][ T29] audit: type=1400 audit(1777741587.420:3050): avc: denied { setopt } for pid=13991 comm="syz.4.2195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 761.101283][ T24] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 761.131110][T13992] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2195'. [ 761.141635][ T29] audit: type=1400 audit(1777741587.540:3051): avc: denied { bind } for pid=13991 comm="syz.4.2195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 761.251326][ T10] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 761.252416][ T42] usb 2-1: USB disconnect, device number 85 [ 761.266710][ T24] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 761.276077][ T24] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 761.285563][ T24] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 761.298530][ T24] usb 4-1: config 0 interface 0 has no altsetting 0 [ 761.305938][ T42] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 761.316010][ T42] keyspan 2-1:0.133: device disconnected [ 761.325688][ T24] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 761.335341][ T24] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 761.346927][ T24] usb 4-1: config 0 interface 0 has no altsetting 0 [ 761.354764][ T24] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 761.363738][ T24] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 761.374855][ T24] usb 4-1: config 0 interface 0 has no altsetting 0 [ 761.382305][ T24] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 761.391458][ T24] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 761.393857][ T10] usb 3-1: device descriptor read/64, error -71 [ 761.402400][ T24] usb 4-1: config 0 interface 0 has no altsetting 0 [ 761.403315][ T24] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 761.424541][ T24] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 761.435549][ T24] usb 4-1: config 0 interface 0 has no altsetting 0 [ 761.443744][ T24] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 761.452808][ T24] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 761.463979][ T24] usb 4-1: config 0 interface 0 has no altsetting 0 [ 761.471347][ T24] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 761.480499][ T24] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 761.491433][ T24] usb 4-1: config 0 interface 0 has no altsetting 0 [ 761.498750][ T24] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 761.508557][ T24] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 761.519477][ T24] usb 4-1: config 0 interface 0 has no altsetting 0 [ 761.521541][ T10] usb usb3-port1: attempt power cycle [ 761.527827][ T24] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 761.540806][ T24] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 761.549189][ T24] usb 4-1: Product: syz [ 761.553395][ T24] usb 4-1: Manufacturer: syz [ 761.557985][ T24] usb 4-1: SerialNumber: syz [ 761.564322][ T24] usb 4-1: config 0 descriptor?? [ 761.572325][ T24] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 761.982986][ T10] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 762.013221][ T10] usb 3-1: device descriptor read/8, error -71 [ 763.392701][T14001] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2197'. [ 763.401617][T14001] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2197'. [ 763.597190][ T10] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 763.841762][ C1] usb 4-1: yurex_control_callback - control failed: -2 [ 763.902129][T14009] 9p: Bad value for 'wfdno' [ 764.042367][T14011] loop1: detected capacity change from 0 to 16384 [ 764.298206][ T9] usb 4-1: USB disconnect, device number 96 [ 764.313328][ T10] usb 3-1: device descriptor read/8, error -71 [ 764.332210][ T9] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 764.425184][T14017] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2201'. [ 764.491540][ T10] usb usb3-port1: unable to enumerate USB device [ 764.640799][ T29] audit: type=1400 audit(1777741591.030:3052): avc: denied { create } for pid=14026 comm="syz.1.2203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 764.793098][ T29] audit: type=1400 audit(1777741591.080:3053): avc: denied { connect } for pid=14026 comm="syz.1.2203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 764.854614][ T29] audit: type=1400 audit(1777741591.080:3054): avc: denied { write } for pid=14026 comm="syz.1.2203" path="socket:[44582]" dev="sockfs" ino=44582 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 764.944243][T14037] netlink: 'syz.4.2205': attribute type 10 has an invalid length. [ 765.051464][ T24] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 765.122114][T14041] create_pit_timer: 39 callbacks suppressed [ 765.122133][T14041] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 765.141958][ T10] usb 3-1: new full-speed USB device number 81 using dummy_hcd [ 765.143719][T14041] kvm: pic: non byte read [ 765.154923][T14041] kvm: pic: level sensitive irq not supported [ 765.157221][T14041] kvm: pic: non byte read [ 765.168875][T14041] kvm: pic: level sensitive irq not supported [ 765.168978][T14041] kvm: pic: non byte read [ 765.180146][T14041] kvm: pic: level sensitive irq not supported [ 765.180206][T14041] kvm: pic: non byte read [ 765.196855][ T29] audit: type=1400 audit(1777741591.590:3055): avc: denied { read write } for pid=14040 comm="syz.0.2206" name="uhid" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 765.227119][ T29] audit: type=1400 audit(1777741591.590:3056): avc: denied { open } for pid=14040 comm="syz.0.2206" path="/dev/uhid" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 765.227240][ T24] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 765.255169][ T5713] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 765.270916][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 765.283808][ T5720] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 765.292527][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 765.308237][ T24] usb 2-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 765.309230][ T5713] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 765.319086][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 765.337031][ T10] usb 3-1: config 0 has an invalid interface number: 133 but max is 0 [ 765.348364][ T24] usb 2-1: Product: syz [ 765.352769][ T24] usb 2-1: Manufacturer: syz [ 765.357558][ T24] usb 2-1: SerialNumber: syz [ 765.361315][ T10] usb 3-1: config 0 has no interface number 0 [ 765.370594][ T24] usb 2-1: config 0 descriptor?? [ 765.375867][ T10] usb 3-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 765.375895][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 765.375914][ T10] usb 3-1: Product: syz [ 765.375927][ T10] usb 3-1: Manufacturer: syz [ 765.375940][ T10] usb 3-1: SerialNumber: syz [ 765.377938][ T10] usb 3-1: config 0 descriptor?? [ 765.406355][T14027] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 765.444781][ T5720] usb 5-1: Using ep0 maxpacket: 16 [ 765.452273][ T5720] usb 5-1: unable to get BOS descriptor or descriptor too short [ 765.468980][ T5720] usb 5-1: config 8 has an invalid interface number: 46 but max is 0 [ 765.486573][ T5720] usb 5-1: config 8 has no interface number 0 [ 765.500798][ T5720] usb 5-1: config 8 interface 46 has no altsetting 0 [ 765.513713][ T5720] usb 5-1: New USB device found, idVendor=2040, idProduct=1700, bcdDevice=a7.db [ 765.523376][ T5720] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 765.532685][ T5720] usb 5-1: Product: syz [ 765.537193][ T5720] usb 5-1: Manufacturer: syz [ 765.542451][ T5720] usb 5-1: SerialNumber: syz [ 765.652119][ T10] keyspan 3-1:0.133: Keyspan 1 port adapter converter detected [ 765.661649][ T10] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 81 [ 765.672713][ T10] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 1 [ 765.677887][T14027] netlink: set zone limit has 4 unknown bytes [ 765.680553][ T10] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 2 [ 765.704826][ T24] powermate: unknown product id 0240 [ 765.710273][ T24] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 765.714266][ T10] usb 3-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 765.740779][ T24] input: Griffin SoundKnob as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input29 [ 765.762287][T14037] bond2: option mode: unable to set because the bond device is up [ 765.802047][ C1] powermate: config urb returned -71 [ 765.807805][ C1] powermate: config urb returned -71 [ 765.813385][ C1] powermate: config urb returned -71 [ 765.819020][ C1] powermate: config urb returned -71 [ 765.924167][ T5720] smsusb:smsusb_probe: board id=5, interface number 46 [ 766.219009][ T5720] usb 5-1: USB disconnect, device number 100 [ 766.264248][ C1] powermate 2-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 766.273186][ T24] usb 2-1: USB disconnect, device number 86 [ 767.602357][ T10] usb 3-1: USB disconnect, device number 81 [ 767.643972][ T10] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 767.664940][ T10] keyspan 3-1:0.133: device disconnected [ 767.779926][T14062] loop1: detected capacity change from 0 to 16384 [ 767.981284][ T5713] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 768.193165][ T5713] usb 4-1: Using ep0 maxpacket: 32 [ 768.214708][ T5713] usb 4-1: unable to get BOS descriptor or descriptor too short [ 768.231306][ T5713] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 27, changing to 7 [ 768.246220][ T5713] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1624, setting to 1024 [ 768.269466][ T5713] usb 4-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 0.40 [ 768.280241][ T5713] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 768.296107][ T5713] usb 4-1: Product: syz [ 768.300451][ T5713] usb 4-1: Manufacturer: syz [ 768.307885][ T5713] usb 4-1: SerialNumber: syz [ 768.610085][T14055] kvm: pic: non byte read [ 768.618042][T14055] kvm: pic: non byte read [ 768.631684][T14055] kvm: pic: non byte read [ 768.636249][T14055] kvm: pic: non byte read [ 768.674050][T14055] kvm: pic: non byte read [ 768.707391][T14055] kvm: pic: non byte read [ 768.765177][ T5713] usb 4-1: failed waiting for Axe-Fx III to boot: -71 [ 768.786304][ T5713] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 768.859276][ T5713] usb 4-1: USB disconnect, device number 97 [ 769.235225][T14077] 9p: Bad value for 'wfdno' [ 769.390849][T14076] loop1: detected capacity change from 0 to 16384 [ 769.795658][T14086] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 770.155825][ T29] audit: type=1400 audit(1777741596.550:3057): avc: denied { bind } for pid=14094 comm="syz.2.2222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 771.220296][T14113] bridge_slave_0: left allmulticast mode [ 771.237013][T14113] bridge_slave_0: left promiscuous mode [ 771.250554][T14113] bridge0: port 1(bridge_slave_0) entered disabled state [ 772.230450][T14125] 9pnet_fd: Insufficient options for proto=fd [ 772.291586][T14126] loop1: detected capacity change from 0 to 16384 [ 772.737720][T14135] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 773.381051][T14146] 9p: Bad value for 'wfdno' [ 773.984339][ T802] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 774.152469][ T802] usb 3-1: Using ep0 maxpacket: 8 [ 774.174584][ T802] usb 3-1: no configurations [ 774.194360][ T802] usb 3-1: can't read configurations, error -22 [ 774.352005][ T802] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 774.461473][ T24] usb 5-1: new full-speed USB device number 101 using dummy_hcd [ 774.531670][ T802] usb 3-1: Using ep0 maxpacket: 8 [ 774.544737][ T802] usb 3-1: no configurations [ 774.556745][ T802] usb 3-1: can't read configurations, error -22 [ 774.576957][ T802] usb usb3-port1: attempt power cycle [ 774.632634][ T24] usb 5-1: config 0 has an invalid interface number: 133 but max is 0 [ 774.641562][ T24] usb 5-1: config 0 has no interface number 0 [ 774.650267][ T24] usb 5-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 774.826963][ T5713] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 775.102273][ T5713] usb 2-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 775.129318][ T5713] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 775.156961][ T5713] usb 2-1: config 0 descriptor?? [ 775.160849][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 775.173657][ T24] usb 5-1: Product: syz [ 775.177932][ T24] usb 5-1: Manufacturer: syz [ 775.181627][ T5713] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 775.182650][ T24] usb 5-1: SerialNumber: syz [ 775.202647][ T24] usb 5-1: config 0 descriptor?? [ 775.412030][T14171] overlayfs: overlapping lowerdir path [ 775.421004][ T5713] gp8psk: usb in 128 operation failed. [ 775.422093][ T802] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 775.636838][ T5713] gp8psk: usb in 146 operation failed. [ 775.642975][ T5713] gp8psk: failed to get FW version [ 775.675698][ T24] keyspan 5-1:0.133: Keyspan 1 port adapter converter detected [ 775.752101][ T5713] gp8psk: usb in 149 operation failed. [ 775.794470][ T5713] gp8psk: failed to get FPGA version [ 775.982968][ T24] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 81 [ 775.991010][ T24] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 1 [ 775.998955][ T24] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 2 [ 776.008331][ T802] usb 3-1: Using ep0 maxpacket: 8 [ 776.017537][ T24] usb 5-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 776.020516][T14173] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 776.037279][ T802] usb 3-1: no configurations [ 776.042046][ T802] usb 3-1: can't read configurations, error -22 [ 776.172173][ T802] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 776.196920][ T5720] usb 5-1: USB disconnect, device number 101 [ 776.204709][ T802] usb 3-1: Using ep0 maxpacket: 8 [ 776.212556][ T5720] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 776.223297][ T5720] keyspan 5-1:0.133: device disconnected [ 776.229120][ T802] usb 3-1: no configurations [ 776.237067][ T802] usb 3-1: can't read configurations, error -22 [ 776.244814][ T802] usb usb3-port1: unable to enumerate USB device [ 776.246767][ T5713] gp8psk: usb out operation failed. [ 776.256904][ T5713] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 776.292761][ T5713] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 776.316709][ T5713] usb 2-1: media controller created [ 776.412165][ T24] usb 4-1: new full-speed USB device number 98 using dummy_hcd [ 776.599709][ T5713] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 776.662834][ T24] usb 4-1: config 0 has an invalid interface number: 133 but max is 0 [ 776.667359][ T5713] gp8psk_fe: Frontend attached [ 776.694354][ T24] usb 4-1: config 0 has no interface number 0 [ 776.694374][ T5713] usb 2-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 776.716343][ T24] usb 4-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 776.730708][ T5713] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 776.745876][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 776.772846][ T24] usb 4-1: Product: syz [ 776.789930][T14178] loop1: detected capacity change from 0 to 16384 [ 776.801521][ T24] usb 4-1: Manufacturer: syz [ 776.838203][ T24] usb 4-1: SerialNumber: syz [ 776.854002][T14182] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2246'. [ 776.880262][ T24] usb 4-1: config 0 descriptor?? [ 777.247540][ T24] keyspan 4-1:0.133: Keyspan 1 port adapter converter detected [ 777.267135][ T5713] gp8psk: usb in 138 operation failed. [ 777.278212][ T5713] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 777.280972][ T24] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 81 [ 777.322455][ T10] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 777.330210][ T24] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 1 [ 777.342254][ T5713] gp8psk: found Genpix USB device pID = 203 (hex) [ 777.349923][ T24] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 2 [ 777.366304][ T24] usb 4-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 777.403959][ T5713] usb 2-1: USB disconnect, device number 87 [ 777.444454][T14192] netlink: 'syz.0.2249': attribute type 10 has an invalid length. [ 777.487040][T14192] syz_tun: left promiscuous mode [ 777.882079][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 777.890448][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 777.911234][ T10] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 777.941449][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 777.978324][ T10] usb 3-1: config 0 descriptor?? [ 778.004389][ T10] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 778.058104][ T5713] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 778.186207][T14199] netlink: 'syz.1.2252': attribute type 10 has an invalid length. [ 778.253280][ T10] usb 4-1: USB disconnect, device number 98 [ 778.287383][ T10] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 778.322304][ T5720] page_pool_release_retry() stalled pool shutdown: id 25, 48 inflight 666 sec [ 778.325614][ T10] keyspan 4-1:0.133: device disconnected [ 778.576617][T14200] tipc: Enabled bearer , priority 0 [ 778.603833][T14200] syzkaller0: entered promiscuous mode [ 778.609510][T14200] syzkaller0: entered allmulticast mode [ 778.683978][T14200] tipc: Resetting bearer [ 778.731290][ T5713] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 778.835517][T14207] udf: Unknown parameter 'discard' [ 778.881274][ T5713] usb 2-1: Using ep0 maxpacket: 16 [ 778.888014][ T5713] usb 2-1: unable to get BOS descriptor or descriptor too short [ 778.900090][ T5713] usb 2-1: config 8 has an invalid interface number: 46 but max is 0 [ 778.910349][ T5713] usb 2-1: config 8 has no interface number 0 [ 778.917049][ T5713] usb 2-1: config 8 interface 46 has no altsetting 0 [ 778.935679][ T5713] usb 2-1: New USB device found, idVendor=2040, idProduct=1700, bcdDevice=a7.db [ 778.945018][ T5713] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 778.953379][ T5713] usb 2-1: Product: syz [ 778.957738][ T5713] usb 2-1: Manufacturer: syz [ 778.963334][ T5713] usb 2-1: SerialNumber: syz [ 779.168995][T14209] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 779.212406][T14199] bond3: option mode: unable to set because the bond device has slaves [ 779.228249][ T802] usb 3-1: USB disconnect, device number 86 [ 779.253207][ T5713] smsusb:smsusb_probe: board id=5, interface number 46 [ 779.269283][T14180] tipc: Resetting bearer [ 779.279239][ T5713] usb 2-1: USB disconnect, device number 88 [ 779.424883][T14180] tipc: Disabling bearer [ 779.887441][T14212] vxcan1 speed is unknown, defaulting to 1000 [ 780.302992][T14221] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2258'. [ 780.342573][ T5720] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 780.583692][ T29] audit: type=1400 audit(1777741606.910:3058): avc: denied { remount } for pid=14219 comm="syz.4.2259" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 780.669844][ T10] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 780.921592][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 780.941036][ T10] usb 3-1: config 0 has an invalid interface number: 122 but max is 0 [ 780.995880][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 781.108807][ T10] usb 3-1: config 0 has no interface number 0 [ 781.160275][ T10] usb 3-1: config 0 interface 122 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 781.268680][ T10] usb 3-1: config 0 interface 122 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 8 [ 781.404555][ T10] usb 3-1: config 0 interface 122 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 8 [ 781.570998][ T10] usb 3-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 5.b7 [ 781.648198][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 781.709648][ T10] usb 3-1: Product: syz [ 781.737858][ T10] usb 3-1: Manufacturer: syz [ 781.885254][ T10] usb 3-1: SerialNumber: syz [ 782.111378][ T5720] usb 2-1: Using ep0 maxpacket: 8 [ 782.117093][ T10] usb 3-1: config 0 descriptor?? [ 782.123984][ T5720] usb 2-1: no configurations [ 782.128749][ T5720] usb 2-1: can't read configurations, error -22 [ 782.237708][T14221] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 782.301698][ T5720] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 782.487630][T14226] loop1: detected capacity change from 0 to 16384 [ 782.503221][ T5720] usb 2-1: Using ep0 maxpacket: 8 [ 782.525469][ T5720] usb 2-1: no configurations [ 782.541167][ T5720] usb 2-1: can't read configurations, error -22 [ 782.560571][ T10] usb 3-1: NFC: intf ffff888078e8b000 id ffffffff8f7dcae0 [ 782.564439][ T5720] usb usb2-port1: attempt power cycle [ 782.617034][ T10] usb 3-1: USB disconnect, device number 87 [ 782.829319][ T29] audit: type=1400 audit(1777741609.220:3059): avc: denied { append } for pid=14239 comm="syz.0.2264" name="cec0" dev="devtmpfs" ino=950 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 782.935512][ T5720] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 782.979470][ T29] audit: type=1326 audit(1777741609.370:3060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14232 comm="syz.4.2261" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3bdff9cdd9 code=0x0 [ 782.982472][ T5720] usb 2-1: Using ep0 maxpacket: 8 [ 783.078720][ T5720] usb 2-1: no configurations [ 783.098560][ T5720] usb 2-1: can't read configurations, error -22 [ 783.581136][T14251] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 783.738917][T14253] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2267'. [ 783.811161][T14256] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2268'. [ 785.441136][T14277] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 785.835890][ T29] audit: type=1400 audit(1777741611.810:3061): avc: denied { write } for pid=14273 comm="syz.3.2271" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 786.727627][T14298] sch_tbf: burst 18 is lower than device lo mtu (65550) ! [ 787.009100][ T5812] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 787.011801][ T29] audit: type=1400 audit(1777741613.370:3062): avc: denied { mount } for pid=14299 comm="syz.3.2281" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 787.017630][T14305] 9p: Bad value for 'rfdno' [ 787.260181][T14302] loop1: detected capacity change from 0 to 16384 [ 787.365030][ T5812] usb 5-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 787.400596][ T5812] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 787.450685][ T5812] usb 5-1: config 0 has no interfaces? [ 787.468581][ T5812] usb 5-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 787.604796][ T5812] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 787.808878][ T5812] usb 5-1: config 0 descriptor?? [ 788.040248][T14310] 9pnet_fd: Insufficient options for proto=fd [ 788.079776][ T5812] usb 5-1: USB disconnect, device number 102 [ 789.199972][ T29] audit: type=1400 audit(1777741615.590:3063): avc: denied { create } for pid=14327 comm="syz.0.2287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 789.465521][ T29] audit: type=1400 audit(1777741615.860:3064): avc: denied { read write } for pid=14333 comm="syz.4.2289" name="usbmon8" dev="devtmpfs" ino=740 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 789.570409][ T29] audit: type=1400 audit(1777741615.860:3065): avc: denied { open } for pid=14333 comm="syz.4.2289" path="/dev/usbmon8" dev="devtmpfs" ino=740 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 790.460581][ T29] audit: type=1400 audit(1777741616.850:3066): avc: denied { write } for pid=14350 comm="syz.3.2294" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 791.024641][ T29] audit: type=1400 audit(1777741617.420:3067): avc: denied { create } for pid=14357 comm="syz.2.2295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 791.081626][ T802] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 791.225590][T14363] sch_tbf: burst 18 is lower than device lo mtu (65550) ! [ 792.403006][ T802] usb 4-1: config 0 has an invalid interface number: 199 but max is 0 [ 792.439566][ T802] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 792.489847][ T802] usb 4-1: config 0 has no interface number 0 [ 792.510792][ T802] usb 4-1: too many endpoints for config 0 interface 199 altsetting 193: 58, using maximum allowed: 30 [ 792.523973][T14370] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 792.550247][ T802] usb 4-1: config 0 interface 199 altsetting 193 has 0 endpoint descriptors, different from the interface descriptor's value: 58 [ 792.598753][ T802] usb 4-1: config 0 interface 199 has no altsetting 0 [ 792.637313][ T802] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 792.676589][ T802] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 792.718324][ T802] usb 4-1: config 0 descriptor?? [ 793.231356][ T5713] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 793.283704][ T802] usb 4-1: string descriptor 0 read error: -71 [ 793.336735][ T802] usb 4-1: USB disconnect, device number 99 [ 793.456736][T14374] loop1: detected capacity change from 0 to 16384 [ 793.511745][ T5713] usb 2-1: Using ep0 maxpacket: 16 [ 793.530601][ T5713] usb 2-1: config 157 has an invalid descriptor of length 0, skipping remainder of the config [ 793.561000][ T5713] usb 2-1: config 157 has 0 interfaces, different from the descriptor's value: 1 [ 793.597105][ T5713] usb 2-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 793.616993][ T5713] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 793.644646][ T5713] usb 2-1: Product: syz [ 793.673329][ T5713] usb 2-1: Manufacturer: syz [ 793.696707][ T5713] usb 2-1: SerialNumber: syz [ 794.163055][T13332] Bluetooth: hci4: command 0x0406 tx timeout [ 794.176819][ T29] audit: type=1400 audit(1777741620.570:3068): avc: denied { write } for pid=14373 comm="syz.1.2299" path="socket:[47292]" dev="sockfs" ino=47292 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 794.179351][T14376] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2299'. [ 794.292736][ T29] audit: type=1400 audit(1777741620.630:3069): avc: denied { read } for pid=5272 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 794.404459][ T29] audit: type=1400 audit(1777741620.670:3070): avc: denied { search } for pid=5272 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 794.483452][ T29] audit: type=1400 audit(1777741620.670:3071): avc: denied { search } for pid=5272 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 794.541300][ T29] audit: type=1400 audit(1777741620.670:3072): avc: denied { search } for pid=5272 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 794.665173][ T29] audit: type=1400 audit(1777741620.670:3073): avc: denied { read } for pid=5272 comm="dhcpcd" name="n33" dev="tmpfs" ino=12810 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 794.782517][ T29] audit: type=1400 audit(1777741620.680:3074): avc: denied { open } for pid=5272 comm="dhcpcd" path="/run/udev/data/n33" dev="tmpfs" ino=12810 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 795.210294][ T29] audit: type=1400 audit(1777741620.680:3075): avc: denied { getattr } for pid=5272 comm="dhcpcd" path="/run/udev/data/n33" dev="tmpfs" ino=12810 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 795.599414][ T29] audit: type=1400 audit(1777741621.210:3076): avc: denied { bind } for pid=14396 comm="syz.2.2306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 795.737192][ T5713] usb 2-1: USB disconnect, device number 93 [ 795.777915][T14410] FAULT_INJECTION: forcing a failure. [ 795.777915][T14410] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 795.831357][T14410] CPU: 0 UID: 0 PID: 14410 Comm: syz.2.2310 Tainted: G L syzkaller #0 PREEMPT(full) [ 795.831377][T14410] Tainted: [L]=SOFTLOCKUP [ 795.831385][T14410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 795.831391][T14410] Call Trace: [ 795.831396][T14410] [ 795.831400][T14410] dump_stack_lvl+0x100/0x190 [ 795.831418][T14410] should_fail_ex.cold+0x5/0xa [ 795.831434][T14410] copy_folio_from_iter_atomic+0x5c8/0x2000 [ 795.831455][T14410] ? fault_in_readable+0x118/0x190 [ 795.831469][T14410] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 795.831485][T14410] ? shmem_write_begin+0x1ba/0x420 [ 795.831502][T14410] ? __pfx_fault_in_readable+0x10/0x10 [ 795.831513][T14410] ? __pfx_shmem_write_begin+0x10/0x10 [ 795.831534][T14410] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 795.831550][T14410] generic_perform_write+0x4cb/0xa40 [ 795.831570][T14410] ? __pfx_generic_perform_write+0x10/0x10 [ 795.831587][T14410] ? file_update_time_flags+0x373/0x500 [ 795.831607][T14410] shmem_file_write_iter+0x10e/0x140 [ 795.831620][T14410] do_iter_readv_writev+0x6ee/0x920 [ 795.831633][T14410] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 795.831650][T14410] vfs_writev+0x360/0xe10 [ 795.831665][T14410] ? __pfx_vfs_writev+0x10/0x10 [ 795.831675][T14410] ? find_held_lock+0x2b/0x80 [ 795.831697][T14410] ? __fget_files+0x21f/0x3d0 [ 795.831714][T14410] ? do_pwritev+0x1ac/0x270 [ 795.831724][T14410] do_pwritev+0x1ac/0x270 [ 795.831736][T14410] ? __pfx_do_pwritev+0x10/0x10 [ 795.831747][T14410] ? ksys_write+0x1ac/0x250 [ 795.831761][T14410] ? __pfx_ksys_write+0x10/0x10 [ 795.831775][T14410] __x64_sys_pwritev2+0xef/0x160 [ 795.831790][T14410] do_syscall_64+0x10b/0xf80 [ 795.831804][T14410] ? clear_bhb_loop+0x40/0x90 [ 795.831817][T14410] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 795.831829][T14410] RIP: 0033:0x7f03f2b9cdd9 [ 795.831839][T14410] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 795.831849][T14410] RSP: 002b:00007f03f39bd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 795.831860][T14410] RAX: ffffffffffffffda RBX: 00007f03f2e15fa0 RCX: 00007f03f2b9cdd9 [ 795.831867][T14410] RDX: 0000000000000001 RSI: 0000200000000680 RDI: 0000000000000004 [ 795.831874][T14410] RBP: 00007f03f39bd090 R08: 0000000000000000 R09: 0000000000000000 [ 795.831880][T14410] R10: 0000000006000000 R11: 0000000000000246 R12: 0000000000000002 [ 795.831887][T14410] R13: 00007f03f2e16038 R14: 00007f03f2e15fa0 R15: 00007fffb36b7038 [ 795.831901][T14410] [ 796.189937][ T10] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 796.491467][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 796.502359][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 796.535784][ T10] usb 5-1: config 105 has an invalid interface number: 3 but max is 1 [ 796.578255][ T10] usb 5-1: config 105 has no interface number 0 [ 796.612136][T14419] udf: Unknown parameter 'discard' [ 796.626506][T14421] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2313'. [ 796.640586][ T10] usb 5-1: config 105 interface 1 has no altsetting 0 [ 796.681412][ T10] usb 5-1: config 105 interface 3 has no altsetting 0 [ 796.708795][T14414] loop1: detected capacity change from 0 to 16384 [ 796.814103][ T10] usb 5-1: New USB device found, idVendor=12d1, idProduct=e120, bcdDevice=96.cf [ 796.837465][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 796.866680][ T10] usb 5-1: Product: syz [ 796.881546][ T10] usb 5-1: Manufacturer: syz [ 796.902192][ T802] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 796.910149][ T10] usb 5-1: SerialNumber: syz [ 797.081757][ T802] usb 4-1: Using ep0 maxpacket: 8 [ 797.121369][ T802] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 797.650117][ T802] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 797.720090][ T10] option 5-1:105.1: GSM modem (1-port) converter detected [ 797.754614][ T802] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 797.782950][ T10] uvcvideo 5-1:105.3: probe with driver uvcvideo failed with error -22 [ 797.819967][ T10] usb 5-1: USB disconnect, device number 103 [ 797.836240][ T802] usb 4-1: config 0 descriptor?? [ 797.864484][ T10] option 5-1:105.1: device disconnected [ 797.909411][ T802] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 798.257261][ T29] audit: type=1400 audit(1777741624.620:3077): avc: denied { connect } for pid=14424 comm="syz.2.2314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 798.721794][T14429] tipc: Enabled bearer , priority 0 [ 798.778491][T14429] syzkaller0: entered promiscuous mode [ 798.787132][T14429] syzkaller0: entered allmulticast mode [ 798.948717][T14437] xt_hashlimit: size too large, truncated to 1048576 [ 798.961949][T14436] siw: device registration error -23 [ 798.986573][T14429] tipc: Resetting bearer [ 799.399506][T14436] smc: removing ib device syz2 [ 799.430921][T14436] smbdirect: ib_dev[syz2] removed [ 799.884786][T14436] ------------[ cut here ]------------ [ 799.890263][T14436] !xa_empty(&pool->xa) [ 799.890271][T14436] WARNING: drivers/infiniband/sw/rxe/rxe_pool.c:116 at rxe_pool_cleanup+0x46/0x60, CPU#1: syz.0.2317/14436 [ 799.905890][T14436] Modules linked in: [ 799.910268][T14436] CPU: 1 UID: 0 PID: 14436 Comm: syz.0.2317 Tainted: G L syzkaller #0 PREEMPT(full) [ 799.921474][T14436] Tainted: [L]=SOFTLOCKUP [ 799.925773][T14436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 799.935912][T14436] RIP: 0010:rxe_pool_cleanup+0x46/0x60 [ 799.941880][T14436] Code: ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 29 48 83 bb 80 00 00 00 00 75 0b e8 26 b8 4f f9 5b c3 cc cc cc cc e8 1b b8 4f f9 90 <0f> 0b 90 e8 12 b8 4f f9 5b e9 0c 69 d4 02 e8 27 70 bd f9 eb d0 0f [ 799.961601][T14436] RSP: 0018:ffffc900037ef160 EFLAGS: 00010246 [ 799.967641][T14436] RAX: 0000000000080000 RBX: ffff888072f09398 RCX: ffffc90004031000 [ 799.975702][T14436] RDX: 0000000000080000 RSI: ffffffff88b8d205 RDI: ffff888072f09418 [ 799.983768][T14436] RBP: ffffffff88b72f60 R08: 0000000000000005 R09: 0000000000000001 [ 799.991996][T14436] R10: 0000000000000002 R11: 0000000000000000 R12: ffff888072f08698 [ 800.000046][T14436] R13: ffff888072f07fe0 R14: ffff888072f07fe0 R15: ffff888072f090f8 [ 800.008156][T14436] FS: 00007fa99a03d6c0(0000) GS:ffff888124476000(0000) knlGS:0000000000000000 [ 800.017220][T14436] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 800.023910][T14436] CR2: 00007f3bdddb2d58 CR3: 000000002cfce000 CR4: 00000000003526f0 [ 800.031996][T14436] Call Trace: [ 800.035261][T14436] [ 800.038168][T14436] rxe_dealloc+0x25/0xc0 [ 800.042529][T14436] ib_dealloc_device+0x49/0x230 [ 800.047364][T14436] __ib_unregister_device+0x396/0x480 [ 800.052823][T14436] ? __pfx_rxe_ns_pernet_set_sk6+0x10/0x10 [ 800.058605][T14436] ib_unregister_device_and_put+0x5a/0x80 [ 800.064415][T14436] nldev_dellink+0x2a7/0x3c0 [ 800.068985][T14436] ? __pfx_nldev_dellink+0x10/0x10 [ 800.074309][T14436] ? rcu_is_watching+0x12/0xc0 [ 800.079052][T14436] ? cap_capable+0x10b/0x440 [ 800.083738][T14436] ? bpf_lsm_capable+0x9/0x10 [ 800.088389][T14436] ? security_capable+0x80/0x260 [ 800.093428][T14436] ? ns_capable+0xd2/0xf0 [ 800.097738][T14436] ? __pfx_nldev_dellink+0x10/0x10 [ 800.102961][T14436] rdma_nl_rcv_msg+0x392/0x6f0 [ 800.107705][T14436] ? __pfx_rdma_nl_rcv_msg+0x10/0x10 [ 800.113093][T14436] ? __lock_acquire+0x4a5/0x2630 [ 800.118010][T14436] rdma_nl_rcv_skb.constprop.0.isra.0+0x2cb/0x410 [ 800.124512][T14436] ? __pfx_rdma_nl_rcv_skb.constprop.0.isra.0+0x10/0x10 [ 800.131553][T14436] ? netlink_deliver_tap+0x1ae/0xcc0 [ 800.136815][T14436] netlink_unicast+0x585/0x850 [ 800.141672][T14436] ? __pfx_netlink_unicast+0x10/0x10 [ 800.146945][T14436] netlink_sendmsg+0x8b0/0xda0 [ 800.151808][T14436] ? __pfx_netlink_sendmsg+0x10/0x10 [ 800.157072][T14436] ? __might_fault+0x90/0x140 [ 800.161861][T14436] ____sys_sendmsg+0x9e1/0xb70 [ 800.166602][T14436] ? __pfx_netlink_sendmsg+0x10/0x10 [ 800.171976][T14436] ? __pfx_____sys_sendmsg+0x10/0x10 [ 800.177247][T14436] ? __pfx_futex_wake_mark+0x10/0x10 [ 800.182618][T14436] ___sys_sendmsg+0x190/0x1e0 [ 800.187275][T14436] ? __pfx____sys_sendmsg+0x10/0x10 [ 800.192577][T14436] __sys_sendmsg+0x170/0x220 [ 800.197148][T14436] ? __pfx___sys_sendmsg+0x10/0x10 [ 800.202346][T14436] ? __x64_sys_futex+0x34f/0x4d0 [ 800.207274][T14436] ? rcu_is_watching+0x12/0xc0 [ 800.212132][T14436] do_syscall_64+0x10b/0xf80 [ 800.216706][T14436] ? clear_bhb_loop+0x40/0x90 [ 800.221478][T14436] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 800.227344][T14436] RIP: 0033:0x7fa99919cdd9 [ 800.231853][T14436] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 800.251604][T14436] RSP: 002b:00007fa99a03d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 800.259991][T14436] RAX: ffffffffffffffda RBX: 00007fa999415fa0 RCX: 00007fa99919cdd9 [ 800.268050][T14436] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 000000000000000e [ 800.276110][T14436] RBP: 00007fa999232d69 R08: 0000000000000000 R09: 0000000000000000 [ 800.284178][T14436] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 800.292245][T14436] R13: 00007fa999416038 R14: 00007fa999415fa0 R15: 00007ffda6bbd428 [ 800.300200][T14436] [ 800.303315][T14436] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 800.310571][T14436] CPU: 1 UID: 0 PID: 14436 Comm: syz.0.2317 Tainted: G L syzkaller #0 PREEMPT(full) [ 800.321484][T14436] Tainted: [L]=SOFTLOCKUP [ 800.325777][T14436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 800.335801][T14436] Call Trace: [ 800.339055][T14436] [ 800.341959][T14436] dump_stack_lvl+0x100/0x190 [ 800.346614][T14436] vpanic+0x552/0x970 [ 800.350576][T14436] ? __pfx_vpanic+0x10/0x10 [ 800.355052][T14436] panic+0xd1/0xe0 [ 800.358743][T14436] ? __pfx_panic+0x10/0x10 [ 800.363136][T14436] check_panic_on_warn.cold+0x19/0x34 [ 800.368486][T14436] ? rxe_pool_cleanup+0x46/0x60 [ 800.373308][T14436] __warn.cold+0x191/0x328 [ 800.377697][T14436] __report_bug+0x296/0x3d0 [ 800.382173][T14436] ? rxe_pool_cleanup+0x46/0x60 [ 800.386998][T14436] ? __pfx___report_bug+0x10/0x10 [ 800.391993][T14436] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 800.397787][T14436] ? flush_workqueue_prep_pwqs+0x2e9/0x510 [ 800.403575][T14436] ? __flush_workqueue+0x426/0x1200 [ 800.408754][T14436] ? __mutex_unlock_slowpath+0x15d/0x8a0 [ 800.414360][T14436] ? rxe_pool_cleanup+0x46/0x60 [ 800.419183][T14436] report_bug+0xb2/0x220 [ 800.423402][T14436] ? rxe_pool_cleanup+0x46/0x60 [ 800.428225][T14436] handle_bug+0x16a/0x2a0 [ 800.432532][T14436] exc_invalid_op+0x17/0x50 [ 800.437013][T14436] asm_exc_invalid_op+0x1a/0x20 [ 800.441844][T14436] RIP: 0010:rxe_pool_cleanup+0x46/0x60 [ 800.447291][T14436] Code: ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 29 48 83 bb 80 00 00 00 00 75 0b e8 26 b8 4f f9 5b c3 cc cc cc cc e8 1b b8 4f f9 90 <0f> 0b 90 e8 12 b8 4f f9 5b e9 0c 69 d4 02 e8 27 70 bd f9 eb d0 0f [ 800.466891][T14436] RSP: 0018:ffffc900037ef160 EFLAGS: 00010246 [ 800.473028][T14436] RAX: 0000000000080000 RBX: ffff888072f09398 RCX: ffffc90004031000 [ 800.480977][T14436] RDX: 0000000000080000 RSI: ffffffff88b8d205 RDI: ffff888072f09418 [ 800.488920][T14436] RBP: ffffffff88b72f60 R08: 0000000000000005 R09: 0000000000000001 [ 800.496863][T14436] R10: 0000000000000002 R11: 0000000000000000 R12: ffff888072f08698 [ 800.504814][T14436] R13: ffff888072f07fe0 R14: ffff888072f07fe0 R15: ffff888072f090f8 [ 800.512760][T14436] ? __pfx_rxe_dealloc+0x10/0x10 [ 800.517681][T14436] ? rxe_pool_cleanup+0x45/0x60 [ 800.522504][T14436] rxe_dealloc+0x25/0xc0 [ 800.526724][T14436] ib_dealloc_device+0x49/0x230 [ 800.531554][T14436] __ib_unregister_device+0x396/0x480 [ 800.536895][T14436] ? __pfx_rxe_ns_pernet_set_sk6+0x10/0x10 [ 800.542676][T14436] ib_unregister_device_and_put+0x5a/0x80 [ 800.548371][T14436] nldev_dellink+0x2a7/0x3c0 [ 800.552937][T14436] ? __pfx_nldev_dellink+0x10/0x10 [ 800.558066][T14436] ? rcu_is_watching+0x12/0xc0 [ 800.562807][T14436] ? cap_capable+0x10b/0x440 [ 800.567373][T14436] ? bpf_lsm_capable+0x9/0x10 [ 800.572019][T14436] ? security_capable+0x80/0x260 [ 800.576930][T14436] ? ns_capable+0xd2/0xf0 [ 800.581235][T14436] ? __pfx_nldev_dellink+0x10/0x10 [ 800.586322][T14436] rdma_nl_rcv_msg+0x392/0x6f0 [ 800.591060][T14436] ? __pfx_rdma_nl_rcv_msg+0x10/0x10 [ 800.596323][T14436] ? __lock_acquire+0x4a5/0x2630 [ 800.601240][T14436] rdma_nl_rcv_skb.constprop.0.isra.0+0x2cb/0x410 [ 800.607633][T14436] ? __pfx_rdma_nl_rcv_skb.constprop.0.isra.0+0x10/0x10 [ 800.614548][T14436] ? netlink_deliver_tap+0x1ae/0xcc0 [ 800.619809][T14436] netlink_unicast+0x585/0x850 [ 800.624552][T14436] ? __pfx_netlink_unicast+0x10/0x10 [ 800.629813][T14436] netlink_sendmsg+0x8b0/0xda0 [ 800.634563][T14436] ? __pfx_netlink_sendmsg+0x10/0x10 [ 800.639838][T14436] ? __might_fault+0x90/0x140 [ 800.644522][T14436] ____sys_sendmsg+0x9e1/0xb70 [ 800.649266][T14436] ? __pfx_netlink_sendmsg+0x10/0x10 [ 800.654529][T14436] ? __pfx_____sys_sendmsg+0x10/0x10 [ 800.659789][T14436] ? __pfx_futex_wake_mark+0x10/0x10 [ 800.665050][T14436] ___sys_sendmsg+0x190/0x1e0 [ 800.669703][T14436] ? __pfx____sys_sendmsg+0x10/0x10 [ 800.674889][T14436] __sys_sendmsg+0x170/0x220 [ 800.679458][T14436] ? __pfx___sys_sendmsg+0x10/0x10 [ 800.684546][T14436] ? __x64_sys_futex+0x34f/0x4d0 [ 800.689465][T14436] ? rcu_is_watching+0x12/0xc0 [ 800.694216][T14436] do_syscall_64+0x10b/0xf80 [ 800.698782][T14436] ? clear_bhb_loop+0x40/0x90 [ 800.703435][T14436] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 800.709301][T14436] RIP: 0033:0x7fa99919cdd9 [ 800.713697][T14436] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 800.733286][T14436] RSP: 002b:00007fa99a03d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 800.741673][T14436] RAX: ffffffffffffffda RBX: 00007fa999415fa0 RCX: 00007fa99919cdd9 [ 800.749616][T14436] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 000000000000000e [ 800.757558][T14436] RBP: 00007fa999232d69 R08: 0000000000000000 R09: 0000000000000000 [ 800.765500][T14436] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 800.773442][T14436] R13: 00007fa999416038 R14: 00007fa999415fa0 R15: 00007ffda6bbd428 [ 800.781395][T14436] [ 800.784735][T14436] Kernel Offset: disabled [ 800.789035][T14436] Rebooting in 86400 seconds..