last executing test programs: 18m34.443840377s ago: executing program 3 (id=4): syz_usb_connect(0x0, 0x4c, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000202000040d804820000010000000109023a00020100c0320904000001020201000524001001052406000107058103ffff0a09040100020a00000007050202ffff0007058202ff"], 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = eventfd2(0xf, 0x800) r2 = accept$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs, &(0x7f0000000140)=0x6e) rseq(&(0x7f0000000200)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) r3 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) pwritev(r3, &(0x7f00000000c0)=[{&(0x7f0000000140)='\n', 0x1}], 0x1, 0x2, 0x2) close_range(r2, r0, 0x2) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x0, r1}) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000580)="d8000000200081044e81f782db44b90402000000e8fe55a11800150006001c0000000e120900100000000401a80016000a0011400600000003080000004dcf5c0468c1d67f6f94007134cf6ee08088568ab35d6e7016bb234841ef52b49816277ce06bbace806069438e6fb599e0ced72a6ba86cf917cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b10d414f00004d9db22fe7c9f8775730d16a4683f1aea4edbb57a5025ccca9e00360db70100000040fad95667e006d8df969b3ef35ce34d4a13821f4fbb9ad809d561cdce81ed0bffece0b42a9e", 0xd8}], 0x1}, 0x0) 18m31.805655698s ago: executing program 3 (id=13): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x3) ioctl$TCFLSH(0xffffffffffffffff, 0x80047437, 0x10004000000006) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000604000000002e"], 0x0, 0x37}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0x4, 0xa, 0x140, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x2, 0x1}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r1}, 0x4) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000040)=0x42, 0x4) r4 = dup(r3) setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000040)=0x4, 0x4) ioctl$KVM_INTERRUPT(r4, 0x4004ae86, &(0x7f0000000040)=0x2) ioctl$TCSETSF2(r2, 0x402c542d, &(0x7f0000000000)={0x1, 0x8, 0x4, 0x7, 0x21, "3179fa0a946ebd225fd6c6212ca209c4519a71", 0x9d7c, 0x7}) 18m30.656399597s ago: executing program 3 (id=17): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1ec) statx(0xffffffffffffffff, &(0x7f0000002ac0)='./file0\x00', 0x1000, 0x2, &(0x7f0000002b00)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000002c00)={0x0, 0x0, 0x0}, &(0x7f0000002c40)=0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000002280)={0x0, 0x0}, &(0x7f00000022c0)=0xc) mount$bpf(0x0, &(0x7f0000002200)='./file0\x00', &(0x7f0000002240), 0x415, &(0x7f0000002300)={[{@uid={'uid', 0x3d, r3}}]}) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r4, &(0x7f00000031c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_STATX(r4, &(0x7f00000002c0)={0x130, 0x0, r5, {0x4000000000007, 0xc, 0x0, '\x00', {0x6, 0xaf22, 0x6, 0x6, 0x0, r6, 0xa000, '\x00', 0x7, 0x8, 0xd60b, 0x80000000005, {0x4002008, 0xfffffff0}, {0x203d7f, 0x2, 0xc000000}, {0x100000000408, 0x72}, {0xfffffffffffffffd, 0xdb23}, 0xffffffff, 0x5, 0x200, 0x8000}}}, 0x130) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r7, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r7, &(0x7f0000000380)={0x50, 0x0, r8, {0x7, 0x28, 0x7fffffff, 0x4069a064, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xffffffec}}, 0x50) syz_fuse_handle_req(r7, &(0x7f0000004200)="4e7417f7f0afaa93ec1feb61e6ecf74becf5b64c4498ace47170e3439f9db3344aceab3d192ddef8789f7f826a9732df1f1165a989ed666ec2a96eb78b40d1fdd5d53d8c6d56a19efc82066d026cbaa27ee8352b2ab989070bacd96deb903134a387cf0cd7fa82de91ca1193f7ccbd5fb2bf8398e9e5e1bace8f81486378b42f308d9a55d3c14c642591f333cc6a6aae7abffd8de21e569c4cd0219c7b72b44c6b43a5c9b11226ac8cdb1760e405121fbe45ad7349b581cdf811c2cce1585a72ca327313353579454c3bad2460f16ba64d86984d8fd0d61be6902f1d5c92a4b1aa8ffbf256793899af036634d15895e11bbd29c1ce6f9a1114d48f9fcd624db25507c962549a97d4d21619202e112c08e486d7acc55d5ab8e591ed2da9b7e325fca61855a511c7170100f023a048978e5711eea42caa20405f64a5861b2f57e81644750a0eb3498c5ca76105ac6ab2c5c50e4f9b1ff72fcc6f3a01f98119cb4e8dafcf9e35426300018b8cc649c17fcf87999e0d6d1a4c501e9d92934f912b6740d191d9ca4c142b7782f83d3f4862989633eb043b21563a8360c47298fdbc3ce7ba271a5c317c9c66b6a535e2bfa7d7ae54c1ede664560b58e5d4de9cafb2d43cee207612e632cbab64c99b24363d2a57d064be77f0846d003dfcd2d26138a5f9b94205570e1137d5b72919551f25fcd73a5c612e4affc15a868413241eef86b65d0405de5a47384e51810784293333777efe59b8312e59f3bde54ca8a521932103473dce1d2db1f4fff7d338f98fe1243027acc019709d9eef6af6f8fcaa1b7bd6e5048955cfe725a9682bd3f5361057360fe4c163175606d89b380b295a0139dd06404aca8b1beb5a9be7e57964b74344fb1336e126d570e5cf2b64fdf6ca9d33d7b73b4c13c4ef9d1ffd2b82714a78a57b1bc630bbd6d4e63a847e1146376ed4c0585adcc053bd8acdc6df529f3b251de651d3e6398749402391c613f34a5f7e6099e76842e8d66a78cbaa590f6593bf87095bf4a1015a2cad2c13d8656db8f226387fc355a9fff471c93c3c10b265f7472523aeaa5d08f753a48b096b913f7c030d7355f68c9d71e66919373daecc64d14dba60283f49101d6360df9cfe65ea91338e31767b94a1e1463e134b6f19ba51d70da4391341231d5466dcaa39711f227d25f9b320a004243b4f8edec5d8a498b3732466e3bbb548368d20a78c172099647f5938ea6c1ff8c94a37313e871189cb9da58271add887459fc89e615e5c99a125fef828d661096f74fb8b4edb8cd703615b8c732995243b2c826b888eeeb089cf10bc187d36ece6ee30d60c46bd6fe0508aa8308dbf834fe0aaa12deaf4bb1b9337e63b13d6076c5245e27be4fd8cceb433b9608569fdc85dd6c04f37259851566f1f1983536aed757671fca1a3f6615ad5fed80ac36609c6f879f86d8c11a357a04a1113ae2d356433e11ae50169ea71ca614f7171508319cc0b7a9decdae434ed2bd3a313ab41999d09f3cfcaa80924129f77b89173b3a877b845285cbfa9e51fdc0fca6a3c72748cd88173cd8150c825bb0da72518485a3e159422dda9770dba5cb4343dbccc5fc1541e0a157a5295adb32ba7526ca16e6bca5342ce4e58e9cb567670a5acc03e2eaac39185085aba969c97174057026c1e170625c09061583142b21c91c0f8306392c2be9ed372ede666c3f1186ef70f493110e94cfebaaadba5938a29a669c94562e571e607f2fdba0c5721e2026b6a490f80afbbb5c71ac7f8a9fea566284bce2039f5b2405f811145f4ffbdd7e8febcaedfd162fc503e1a29bb63d88a465c66339f1553dde48991289451363ff349587e4099469a5052b4b337baea3cfadc28319e3a24f635d8d5ee8500503fbf1aff0bc1e6f50227cd79bc9e6c2a5ab0f0b92a1e3c6f81e3578f7ce5071e0fc77cdf1d18fe77dbf4a6bfb2587f8e8e317f98ede1f8f32a64d736f9a5c451a01cacfcc0b9099c4808840c2948cd8998abb4badbe30d93a55cfc23df97998efa139ce8681be3b4032e536db63d9c3b7ca6904ae3f0abbd740385be14fe6764c74e19d8efa9e3580252cb25d0d3e2eae1b82f4187b92173189b5f2d4d536c126e453267a6c0410b872cf0f6e2e2b82a527667f598eb0c87bf1723a63a213e22e093abb757af27a53c0f6f3e29c32aeca4c619d5c8f49d41424ddae64ab67ae7286af0fd931e93d06f711b70cc3c6a58a392392bd4623d25144e840c1539a0b8b29ad19d7768c4d2764ca5f8ee72d96a3eb5358bfcad65dc575cfdcb52c662d33321a96ab197aa4d13d984a2a18f94345373fb5dfa031967614dbf070e24c9cf11a8fe8a128aced2d75e5203099db970933abab5ef8f84b1a56c1b2384e2d9413d41226dff043fcd3d8b7bd833aa02d6016e9f756adce96405cb530e7b5d62b483d6e4a5df06cd553581bee273483c243127106df7fabf5daa98007f5178254f8b5024f994c98770cb0267b6a3bdf819d2ac74dd2b38464a6542c28c8ef9220f2dbe947efcbdac9ce81748665957b2ff1b11f73e79154dfb1729f6d6011adb99e4b30f4ae6b1409bfbed29807ad5e02150f1af53e305049ac26c2b28c8ee1f6cc40ddc48ac831ef3ed2e157cb513de06e1fe69f1d66d1a0432f75eebedee30b0523d71e36bcd0f622d95772687b59fec199087dd09c7eb88329d6aad37f3c6d4289dcb799d9349b4b8b401723ec90e06caedd02f294cafc508b03440890aeef82fae39c677d58586d973e5d8c2f00c34f12efa4c8b3b73c1b0941bf8be3ac8119e7d4ebc8e6853c459ab8a0567fbebf1e6036ed187d7f9f7ba0cb8b887389adc41dd23d027009707662ea429c71f01bdfa3f0bffdda25d2dcdc725464e3d4cf32c6f95dcf90eec4978b9af79c92a359fb5bd08776fa77b20a06ed65c64c0bb7a4e34e9e6e85d6e4f4ee34fc7a9e404bd5213f49704082558375b1a76d4e6e84e678358561425108bc7b3630d0a801971e32c037434b80add0a10d5509ef436bf9a8cb5c0a0fe125614a23688ae18dad4766b1339d7080e51af087cc2dd029dc757098d1bfb9c975af94e0d37e9a24c6a6661c99fdcdbb95d023dc016abdf81c1a09b8b4897ed1f2512aea923b362752cad64393673dcb2dce3d63e379f25c340559a98abe43589879a3537bc88526f1c8499db48bfa8d0b51118b3992930cbfc99e48d815c56aad1560c0fc25540a82e17fb931360abb23d748152280ba1603fff1cac0a041c6f9ab949a059f050144e61cbe5ffb8e272f115cbc82bd62cdfb9759a63e77d3cfdb0a25e504aa5a1e4eda15fa2e1e1a7bb18e74e62a13fce33900d760d89608c79f05b9e11be34cdffbafbdc60838f5a6f76cd8a3ff1072d90462f77abff31e054f3f552772ea750f451d091cb2fd6eef92a800a7837a28ab1be8885b6f9eb18a3093fd989f697bd23edb8075c7120ff375ac72576d625080e107843aa7523fbcea78c18b9762a89e562bf098d61b5b2f2521d709a9611e312c7691f47a503823fdf715afcc6ed3e11dcd0dd77a272cfbdbc2405e26eaf4e2698b9501279dc095c8869128af162383795ea6a14b6cd0b1cb3828b4d98cc4439d8dc51c20ae9e5328bb05a59151818d6526df969384678dd202fd4415f94b861b2ccaf8873680ca6cb9d9fd12f26c11dc6bce36cebbf7734b7bc5a16d882407e26cac42fc9e178af21478c782ac0418c2ecf1876ea2cbeb946b881e460fb81c02c2a91b859927ba4e72f7d03091b3dcc460438ee1aa7ac00f561ccafdbef63ca4286ba78b38c443d470dcfd2211ca74703d27d1cba021071da6559505ddd7f0c8b71115d7196318bff0d2a3381573f79f23c7cb8de2d2dd8d9b86268586a614880ef74c92e5fc80906f453f949afecb888337d591fad11d4efe7ed1cdac88a0569e65ef9733f0a2ab70a323ccb10fbb98df982f0ee5596665ec52a2935d0e3f9d83175b2aca4ed312e622bae00fa4171e73c168735e79bc21561ef91f83adc582bec05a44d6dcfff78556690c9b104d5e64ba7f8481c38c1b7e35038fb60f2beb7ab4a64c9426a498ac3cc1c6c192b6e95215dd8907593b523a399b583cc21808b4b7c237a069c59728f58dad4b00fcf21f70f91713b056db9b3f8a9da36fbf641e1681f6c56a45da353b116547cd4506ca1289b595b475c2596707111f05037557adf077d467b01cc787717842add3a0767d195edcb05a7598a4d1b3baee786a969e87beabf8221ce2b2f9010a85eb31911baa39f1c59f289116d8b9cd360ab400eea764537511b13c871e4b497ec78be7043cf1a737764f2dc810862d41f0c32d0a3f713e9243df3777fa053bfb646b8e1bfd6675e96404e9ffcc2bfe30d09db0684bb8ab8267a34705eb57f374cb8280964a8171c2b8b237d38d44018d79c8e375e21d55178c12bc96e429b339887a821bf0132d55e1ecb161165e9b152034ae6e468c175a71e657dfdafce9ca273ed84b4b469f2e4bd8847d0b86e8d12c19bd18083f97ee1d00b588427d09b54c1b3254e53dfe48b5c19fd6a899994fafa1b31d1f17dd20a69a3b20e9b31527c7e076ef1c9333c00c1b94d5dd71305eb096498202a276870ecd7d68e5737787b2e8ae158022397bf77829adb0b807473a139d4896e30e35aa10059e38fa8431b647dbd2ba57855a82b816d19cec134a378e9cfceb4654bfe77721c10025fa24e1149ae89822441c2fdf655e0d70bb50836352cabed3630689c35a2984671ab9c963d5860a3689c8c1562228d397d0a3cb59e8602d7e72247e29656ba04e53cd2659511274d766cb8d78755f2a3127e2c70b91dd46ba520068d80f6c4115f2b223a3f606d194f5c37bd80550ff5e9aaf4ce5ff329012239f25c12efd79a697362f90d42cac99f323f99b45b918088c2590b6cfe8a1795492d1520e51ad7a2c403901c7809616710872d0c3d67926752d308ca84916bcfcf9573501227318822d40d00742992662cd629a0cf7f688d326fbd10f201c459c7f463cb34b12f8854c4df436170e3c97840803771caf57ff87b70de5cc4a8ecf45775a4f8849df99e6eabe0bb64bb7f6af35701bf384bb04728f87a31297341a662912925e5f0806a682148efd04b099022f1aea22e3419d157dca427cea5dbbab7a0ded30641d16a83fa26e1551d4a5e8639bf175e1dd80448043539083a379aa9ab4e07f54662c9c4e45178f43cca3c61552c7db984f56d35fd41c41cf8d176d76b2ddf0a8e2c36621cd7c49b411e4dc516da4bc418b2410ff1306c639f1a17f36a62229d2cb32049022d2cffbdecf467f82c314a0388f5c74d7600e1cad70e2fedab09ec362e09c5c18d7e38fb5eb48c1dba21ca96bf9ae470de81f7231048fde18225f64f04e1f322e25e45e0a8e4240d6035bd4ac4824edf111553edb5d3e1e432460cfc48fc7783dfcf26f7e4edb510c201d097a3e4a7d24400e68c24ef57ca2e90176fc32c76b2d9d2334c0a011de42c04306664f40ba1f6d25d002e6331234b9131d6783536d49acfcd47fb83e5380df7a2c87574e26ccaf595ba6849d6f855cf19bebf271592b2bfbc2d7bf998a0012edf01fc6b00f911fd662b6c33d896f7c5c32a2f91037255a16785945e8c3a8dba19889969ec01a3da9c836365305b6c944fa95484a6a50257b9da0bd3ef7bc055c6b0abe09003200298a5ddf381e8eff042aa2eaa2f07aee41a30260fcbb042baffd6e022d725b4b7805a3550109f0d92bb33092294f2b2a84a965550e1b23d13a57f125eed60206d75db2ad5fa44f37a0d600fc7136b581a76bafd3c01ed229ad8734e1b044107713bf6c779600622ea3358ba78f1a8476d934cb9fb19f799aef8a4a232e986a5da978d14fe64e918dd34b8ba29d44f0366b527786fe469941587b0cef4a515315e78b93b52f88a3191959b66e320c2272fb115255ca0d7b88e1bca06e71f90c3dc32fdd3dd8bc1c5e71f606b648c49e9e1486fbb8f24873826faddfc876ea79a2446423f4cfe6b0e94fceaf21c6412e2f9f8e7e2ea9fef73cbb227ad9d89dcde0b92f075b57f3d82b69c297a70c4e27c143e62e13e48ae65a874381763a870cbcbddeba6fe7bf9904c492c0d433fafea50f89ea8fa66ebead1ab6e751914c45e164865ae49bb44d5db40589f5c601b8c202a62cf91ce26753e7e9656d7158a6b39e44ec92d2aacf60fd0077d14dc92bf406c99aa54971b28ed81f3f39fe8d0293e90a494b6dd9b1c90fefc859655cce4eabb4071380cc41ed628f83b0909e56456536afa595316afa012cfad467884e558565ca6f162bb8c012939800eb664c30ebbd5057c26cf67cffedef77c9af863f7293dfef1c2b7c5f54d84547606831b47e177d3edb370196afc7312325b0877676b41c625850b62b05c715fd4892e0878b36130b8e3f5bf8d8a714fc32f3b9b9b380dea0d55806c62b798947b6ad5dfe240aa95bad5407329d2a4ca1ad6fd1233507149333809b4a9d5e295f944e38a86d45c04d856d280397afff31bbe161b18f153389ec47b999b8ceb38305f801d25c60856517abd16b8e9ac4185dec46e856a0b5d95dd6d67f6e5b12a543a91493f9aa2eabbf3a5aee4218a1687919b7974d5e6f576691aafc10f105a73f676395ac6e5166b7d003f2c3737c04e7461ffda1151a7fc4776b1881460eab2877ff6204e1ed607f785a5c05ae4b171b7fed2575a75d11f73bf7d6074a011e0023fd3fa843e3c63dadb95f9ae07ad29c509e9d06e59e6b7564786a01acb67b8488d66ef21a793bfafb69df84cc2557f97b15db98ed8bdd1909c83da5890596e53f218cd980ceb75ce1b678bc222fd21c453b72852fc3aba410d666e07cf2b38c2702158768fbd489e469db093c7fefa0c27dc826db746a3c8c99e3261279c7cf79d21ae096609b8db473136c5065cfd13db955b87a7479effdf668bf10110e9f6aa8f4b711109d98e6dbab022f2f4690424e241de429c50a6de76595296a42a4bf0b2c1d9842fb0ba3ef6ef1aaf6cbb8e839764bd9677e491f23fbdc28d0ed5d9e09be429da7ed1a93e85828f9175c74446bf62baf9726e23207226b34d839a42e13c63fbef2caeba904f7b5dfa3667ade62a8e3bf5764828f9b2bdf2ea11b70e2a603d3a69b33ace06e8986fc811e03d2de5bd4bc898f67a3cb8c731ccd10ce45abf198e9455e3a0f86b81b94f0cf367b6ea410b97feae2d9411b410179903a4df9a989f25e9ed2b5a7763e11a01874039d88d9a3cb4435301f7f922f29c8729149f90e39d6f2998875728a3b0eaccb793385abbf3735f3948aae9cf5982c6d3f3bdd5061d611cdf7209392fbb1ce6e709dedfbdbb4442e243178f93b8ec384d8fabb69de31bf3232618f05945b162406708a3151222f42c54d982db53e0cb3baba85d6c13e7f1a2a8ab296a0313ed9a476605ef876f5c3f10346a33b9e6af598d865a04a5b46613d10494b1c9d51435bb551249f06595c96a525f8cb76d2ddde641f0745161f3496726e9f4b33886180e05718ee265fab07f8ffcf95a7a985f334e33db22d0907c1ffc12abe33e880ab6b1198f5fb3c9a21e58e021ca300f333ab16e7f47fad98ac28ebfbcbe405f0d8eaf08f286dd4035b1fb922f48d34914a628fa342efb64f9f1f943bc7772333887cd2e69a16f00c51c62afb8fd1f3ebecf61d166a769427aa0d36c0ccc7b461a8a1b10d241d8a32a46e010085bf3de570861546f7b03e2887ff3aa5692b2f8602912186de386e3bcc2597a18f6c2a9ff6215110a1fcbfe3b5e8a9e893750f3a7d1063004b3b2e6d109339c2a7aed0a972993d717f960fecaf9c1565d2823ead43ccf659da1f65b45892b562a55f32005e87d2f9678a01fd3bf596c0ef873fbb0754bfe87eb36f3e68925e97602881166b4f22e4b0cb40f3835011e8d6e22bedf1f96092c4e91f3b0ef46af602e7e80694719ad08bb0e6d59f29ab5da5832ddf55dc9ec64f68f22d33c7f81a9cd754e896dcbea71a5c0ab471d496b5a40281077f96374c2cd2475a0b2b82b0f8d84568df8a05cc2be840ff8319d1bfec5f086f4a9116c68645597d78b55e483a5cf1f25b423ba35bb2e03fea1aac22a0ae233182f96fb9023be57e47f79169df21adb0c00b9f6b6dd0d1f6a14eafc2b03c27a3c38bdd1057d7e0446e64759f80bfe23e765a70d4e66cf9159da4263574761d413760951935b3b4241e188550f4a61707a7ff26c48b8941a825d7a849cdcb834880d8b9241b96dcd73ad4235bfefc4aea659d2b7116eddd99c92b290ed89ef2359cdb9e2b6ba68f3206ca035d8731e7c4b667a9baee1b4a4c5b483f7793543b33cbf59629d6e51d7d7ab52266d478510c4374e3d3ec6ead98af9257434e2548e5d8ede59ccd7a0712bd61a43c5d4d98844c52d3f97925da0959dc5640f4e168e0c3f1130bc7587272e5011bfe62ed423c0a61790b3633ee059654b12a2c405dcaed5bd154113fc63b5f934d90bfd54f6d94029cb298c88b849ddc3358e0f255362da2e229725ddd33bcdc3a3f94a4181499d0924786fc0f8a41a525326735218ae0275794e260af9d83aea4bbe4a25b8dd74ca78cc973ec4c2358cdfe7c242c19a8c986050cf9b51dcdbd8937a5f85b8979e1f95b10cb7a92bfd4ccc6d0fe36b80ad89d76bc454aee3d02edd0ada94874deda4d1db16b933ece2c3fe5dfc5ef3b81acc173da43cf92ef00bad4d6d56489bb9eef0db3e8d24973118601ee04235850f35d52975b9d062afe29c77bdf4ba424fbd2a6681e7d8a72df5a7b1e893b9a8dbce598d28860e8fdb4c25928dce80d626ec1aeccae3e11ac805ec17180cca8189927c874385111cd9e6f4e018138e4a79c02fbb01bf4381ff648f19340ecbf03db5ec984e02296a0209d2c31266b34b0336f0e11b35d504d9e8c268ead0362a5b0a7289ce069784fafed6f9f69377ccd1bdab347c2a089b82fc1555a07e3ee873705b9c8bef22443b4b2ad2019e4fc153834e3e5eef0665c6d803963dd9c2f0546f25133011fe8f725744d86b33cad127bad73e3b55ae88253386246cafa7fd563e382c1659fa147537d348bf6cd973ab8715d0d1bebf57a975a88905a1df56274b30aa480b00d2da67d750e28fe98f57c64743064f56631540cf2666e04e87fc3173e5cf7407454763ce1bd064de2023767c3b41cd4cc312d3c65bd6410a3f2f898a883da2bb8d6cee72339c28d001cfc7d142711c100a424e1bd734a6701d28d38d075b73eb1a9b422a64f3bc52901d7d4c7ff6ef97c62f661820d9a173f35c34f266694363261698cef03d0e91dc42ecbdd5c7ae60fdcf0ca19afed2414d8ae7febe31e0df02d05b0713a996587f123f9ae8254338000770d939f8540129ef761a741c312bd3286ad14dd8be2360fa78e895d328b618e1c67db72a83e2cd46a009fe48342ee87371f1d14a248c1cc8cf0bcf6bda1c2fa1551e958b8006650b0bd8e56b239b9a2f3cf0070ebd397d76bdfd3d62f236fe1ea6d4e7334e0f96182f320b98b4322691f24baabaee2d3b2ccd0c899e0261e90946c1ca7ac41cf9ec3bb321783bfb3ccec02033b11fdcc32e2064c815623aeca5cd0d5376d2aedf37a5f047fc427fc0eddec5d8cbeee8bfda52390eee341a180f43f413f7ac652e5f770a7506057e731355f9a6ef597799df7720bd494b5d2c2b02b0e7fc078f1a6fbe73005bd8cb3ae3c4edb9ae8d1dba0eb9a2007e7462de675f753b2174869534fed8e9ea4eae3a09da34eca0ab9f0560e05736aaf13504bbead2bc1e0ee97e6a6c01b79b6bacb017b8bf744aa250b38af2d4862951d0b0e588c6924f880d008d246b96be8d1e577acb271f33da415ae85a4a36d47288617232d32de0d1ae8eed9cd02d4e6081a956627e3f1bfd1f3651f06d6d61473d58591816b75961ec837a65f923e39816d620dc8e80375337c781020b85e03792a4b2774926d59075040f5ecaadd4163414547d1df0e2606106a67fe9f69652a59400bc042cb81a76e4f14d380882f579627cdd5fc478d5cd89a4dbb24c4252c89146d9b0cfe7fa99a72269ff5d5f04d8c91a9e354d10cd095fe24101e51d6be20d89fe9b21601eab458d9bc0fe73698efd2192c368f87405a413817ecfd88214dea122fb0d8d139efb395246c0790e174c9d8adb10caafeb2b6a2742c966fc687cbdb853be478befda9b89b106660854a00ced9c7028a7071f40280d91daf78d26c854051f73340431d003ce66680045b1cc4480abec0331a807d631a4560478626fd41aa8c3fdcb66d75aefb6a29030b0c94be961dce67db553863464feffc8b72c3e7219003eb942d359e777a87bd2c2e1a27f58e30e0eecc10d9b2c9f0b1552ba2965503ef2f77a35d88b82abc97837874b67bf1ae656a3b2fed7d60be4de83a83da8d98994cfb9c458fd2b883d8e9751670c62eec4bec7c7873215bf99f17e9628f1ac1fbeac4004d288fe279d2bcfeb4ed7671048de8598c7a9ae328e829e4115a5ba155ea2641b1df684d457f527339ac8ea6705ac7e73590f900bd73a434e4d72d8175aca5beade289da131374c40aa72014c6446fd943e8a2f7ac9e7bb008128bde5af3d3c1e1811f7df88329700fd40a5cb12396412283978589d04019c9e019ebad5829b15098ecd0f03b5901b2f48644a13b15558abe018087240153990dd38e9e9e60ad9bf1df3f21d574383535ea5f44298a29c1e90bce931dd45f5b4d06029929dfc88923bea8c20b56bb43868804e5e28486aa345ecc9e821d24f9e02c120066ad008ab22bb6f22bbff6036bddf2dc05c50bbcfdedd621be2410f9b8de2f364c8cd259234072bf3ad45fcb418d40c81c553bfedc91f50cd322c8cf07a8f81862dd0d3d0d02ca4acf0fe7ca0da1d90e3e74740ce6a38d69de93c01e46aafe400accfe872b76f94e4a055e1849a82a520b9ac9cebc34609843fc04bdccbd220f7a9d499553cfd9809c6084ec3ea2132ea5350bd9ce7ea7af466d3bafb0aceb86a0e72b658e8b3866fe9a28c78afcb4da501ecc357d2f4c9787f72486eee8ff03aed4ddf09b247215c134c02d50106dff1082732e750f7eb804320978873d1daf87369a56b84f8bc2fe2a98a755fbd645b3ba4d2ba3691ef05832540cfe12c7e19c5ffa35a59e77cf999eb1d38ffdea79ebcbd573d1020bb37dae73ed250be1de70230aaa346865835ddc3e38ef371f102518adbc1bfd4124146686e610457c603fcfa2c4a6f74e8c904b977f4af9475d72adfceaba7db108330983b247a63b2609daba03df9f27665343ba40e475873a2c774561a8776088663377dd330ba415261bd7e25e9ebe435542a0e2243dc1bfe7d429b43036f8c1aa8081df47e007fd54f6f6eb420bc416f1c9a6d82e572d365e881ccc6e8f48ac1b338effe51c6251801ebcbecf5732601c4bf1dbb703af33738828b69392d10091813ce2b93e6b51d2d263f44de2f7f1d17441dd72d3ee4135d8591dfe4dc96c1317f488b141a92e6f750ad60874694a4959f5488342c3f306f1eab8472615abd0fd27cfa71e9c88ea9957c7431033e127a5d3a9c774500b6899f4e3b5f2fb7367ad2", 0x2000, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={0x90, 0x0, 0x2, {0x0, 0x3, 0xbd16, 0x5, 0x7, 0x7f, {0x1, 0x5, 0x7, 0x6, 0x3, 0xf, 0xa734, 0x200, 0x7, 0xc890c63e415ce913, 0x101, r9, r10, 0xffff0000, 0x10}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(0xffffffffffffffff, &(0x7f0000002f80)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000400)="762887a99848fb4500c4a87ae1d350152c5a85e6f33cb1f6d3aba85e68afc5ff36465f1b11209c863a7bf1737aed20572d84fc82c42d52ca10b27f79d8eb95422ce5a2d30041c79340062169b1debe5d6201aebf1cd272cdc771125699e6ae9b162b5e6d73d06f5ceb223369b0184749e1ff6e311ffa3d895d99ab17a8f981f5738b50b76fb52a5d4b32b71bfd8c059672891456a88021d7d9ab76a4769f48bc80d6de0f690621c35152ae94f60f16eb9ec29085b47a4ef4a5ebea5a0264a11e588e010fbd3d092e31cf73f782c6e22308cae632f79231341bc5c57b15f1128fe915e9bf70ab506b57b8edcf68cf5ea9edc0951594ca6ca4264d3411b7bfc512bd9a9973da8a4835148c031a4138fd8b06409688ba5320432d345745c5188e263f51484447263f0f1082ce5926192633229ad3ea03e99db9bfce8dafa23aea3eadbb412136377724ee8008bd1617bfb2e5eb1a8a336566d53c67bcf3ac4efd11c689d76091fe16e52a5ca17c6871979ced95be6137946274afb8addf451fe1b618e03e562594608b1f8f021cc07c26bf939470c6e5b599609550ba8c091827231ebb96a5012360ef9d151c0be766d46bef384f8d4bbad84e16f1a65c278dc0c968132db1032942632ae461904019afb2cf3f5e6fcba8cf9bca026ecd56646c8835296b6b3b6e3658507f6651a6884bc52420b47ad368ae345dcf8bcdb8c529f2d5efc0796b8229557ce80819aaab929658732ebd6cfdf60d44fe2c8d39ff5fa9cda03114fbfe877d7168f028dc36e999deac0ca2a03ade35bc7fddcfc11bd27c541280b756cec81818038819e32df7681967ba65236a06f9b4fa63509c4fcf35db6c95b3d22fab6799e4e29ec7fc63296c4c6fcb9c42f4e990d2bb0a2c2d71cde34cb0d081d31b9df0a12c28cc65760f3b15620383785f713e9e09da0855be52a536677007ad48da66b6ba6b6ac7768924cc7ab37773f12760af6bb6f19601ea974ea5c35ebb17c470495b57746ed6a2c9d6444cab40b39ffcd6fb0a8ac10f223e1ff7cd24f5051bcd821e6c595bfade124a7f13eb5d461003c623dcf1ef44cc9c03301e81f42c00860c6382dccfb1c7b5667475f3b976cf4167420b7d4ccaeb245983ecfa762b27ddb8f6ae531b236773b3d229a72c33a34237e4061aefc6d2aec86b7d4df1a636eda94e459f20c4bf3ce9281581c273ee654c153fd8a940b403b2da95f06ba01a86b715a58899dbd67672f54f07f373d89bf129a7b65523a27bb590b6f2dc52056c5f2be12352609368b736b4b91f8dda6b7e51ce63b7a423cb7d36993afa9d4df1475c1ff1c708a33dc0c19bd66e82844223aa66ba67d93d13fc2d0cb18e591b84022cd3288932ee7f56b0dd57c02fc77d1e28a1765625ef82072c6ae10cccd22ffef3bb86b080a3b7aee6dd82bd569b6c880e2784817e199aa8ef80374c4ce42520d20b42c55b3404eb907cd9594342f22d688b0f9d9819dbe218789e351da0b4a2f882252cfe992a83c94f94ca11f62a4b864d12bfa45890de1f0d97de858422a8898a8e66b5eaf263423fe5fc2503057977070bc8139aaefd639497ab18f0d76d66c0eb6b3f9827316f4792e778e519b2444ea5e743a876a786f04d8f70e4418c1906de9fef014f875831f1d0110e84492fedfdf5ceb4a6e86f8c828137a6def39735fc5a20be8a86e35a0441f451485597f86fc1fde30fd27394cb81d51b6824c271621d90468983c7ca4ea677e9ed3f0d58019957163b302631b1735e1f69a947f507ec666105e50bb0e3407e0b7138d9fb10440326da1f1fee8acb98bd5226f478effb0ba3e5145c67f42874ad9390d6c4a144b0f283aaaeee37f01eb48b4e85ddfae63f61ef202fc3b852d51977afad8243344f3cb92250ed459ae5df7848b7dfa80d9eb6a310f20b6adeee894b46847a7ad33251ee2281c33311fdac1069fc54d6bc90c8012372574d0d7b59571979e30cb55664f2ab1d6abdbe0f559e10619869c84eb65c48d02e1d8132b21b259233f5a4719ec9ba04a6229707ffb8d38fce0dc2b50b9ecefef04ff6709df2f4336fde3c0e2371651bd3c5a45c7b085dfa1f924a97735504217b873e5a710c92cc78c785c00cfb1a39b9a6a1abe449192130aa612cbfce71e4e0513f4ec99dba78aaadab0f31de3c7e45ab818e7052cd57cac218e740e69bbaf55c0c4fdae0fc8caee0c9381e9f13210ef54d43f9b0bf64fe4dd4323048338706af67b79cd2b4effb341fd6c1691c8b11d0852404186a6a3332c4d806eaa0ffd3ab9b35516887703c612726385f92912a57b7c213a91d52c740d507373c7e9e5a1d7653efda78f50cf16fd56bab199b118d6aae2ffc4f9c9e0f0a4f81e7bbfab234ceb539a1245e74580e21df957b56680ca205555ba5b0219aaa8f64010cf9eaa2489b0c7930da9b97215c64080162959c67e6470b58b41edb1ed53655e1acaebb3e8a762e4dab9f06d5f30d1bdcf56f0af8229bfd2698ab18b7870f93544c2b8ab8af302e78071e267916d2a83dfe676189e52cbd35ef7404cd6a9ab7c19683869fd2d6c5e9c6c78cc0fcf7135a2f85763228b7ffa26eefcc710fc2a167dd6fb56d373138bd186597a4eb6e606e65397a0d8720461aa9f6e79a81dba674cd6e514e90953cf1657b7836eab226098e899e435887785c005f376cca0c4dbcfa8652cb6456a47fe1f40cf0c78ae1eb6dd54b3c2bdf3d5f56eff330d1c58cdbdd5463628425dfaad2dfd35f4709a338a93f4c1aae2d8259030681f6c4c4f08886c146fb2b509ce01f2bf4ccfc7d8683cf2dfba0f4ab767584b15727e95d877b59b0a318c13d61843cc0d43182c8e1734b696cca9428868fe61567558c4f56ec0a12f03dab3ec1905a8e50895551ca98fa6ec392b86803be4615e0db85b5a0a62e4e5dd227d821f0a5ceb013f1dbffd3955b28e31adb34bf095812243451fc35d5b7c3d0a33549cb1b36758d7d0bdcdb2183116151804b5aedc3c7c464bae0454eb778c8d725dbbec456a2f6cc5f1825ba78efdfbee26394bc28946076d14ee1ffea95ed1e3984040be0296f8a6a1f6ecaefd396c51515097e2ec93f2010bd69f21d3d02d9fd932c5a8a0ec9f23be117ecadd988669c904add05a4ab6632a9a20c54db826c16b4f295642da72f245782b2dd78090ed46eeea85f00fb0438fc25ddeda44f8fcf246b8176202c939476238ce61b5248bd8dfd224ccb23b26a83db2580382103354ce4033e23893522caac5417b5f69206e371b1f438dfed575dc4829db65f9e3199dd59dd363d3f8eb7033ccbb5441a3231d50f80ec864946bcab81509ab2594828df5f102e05314f2df1a4dfafe66ca15be27633edfc9c105f2807ab3cc0917ff95278143dde960cf7deadb0405df5955acb32c9240c918321aea84118c2b684cc295b48e990578a2b7d66761dbea51ddcf3f4d85238312cd2fcde7f5c0bc8fdd22e6f16d3b5ad817f23a26c2bc4231f183d23412490a598b0af853efc6a1da28ef5c6563b8f5e8c3c372baa983309e473b452ccd1f8b47ce0510805a9dd5fb3544fe3b44fc886e5246afb2929cf2fcd2e7a5a74a6f1f21f6f5378f0489f7827675fddf5ab122d55a22d1b729ae64f868e50eb8535e84d25ab516d9b12e0472fe7029ca5c1355d74da2df27d3dab0a15a61d8eb0051f9bc70910b3e0e376827bb66d95e3b16f4e2ab90815ed1b2edae0d80ef5c666bb54883b3804951d5b252d31b670c6bd434e67a95997ca3df429943d3f6759efc29337b3262c0a8367361686ff99e3dc15e79057b70ad124339dea43d6826d6c1de254bf01342a46c0f3efe9f7296965cf440e08f380efe1ae8c1358c0f137da386f8dc6ceda1a3403e9ffdddc94c538f0f0bdbe6a27751ebb4d81364a1e5ab6b160ac6d3b22c198b76d8ee87e957b3c5b63d3ebaa41dc9c6ef275bcd37eadf370d9444f1688382b02cdc3fa8905693e992cd3375c015178ae3c0871456581a11145d6f7ae82f6f406fd047824b5192d640da5a85e2fe6a420b5b51e8f629da1c56d5a99b81b96cdcc7a2f802793afdd99b411eb96f6ce332b340f79d9ba610764d9d206df884d0f1f6426c4dc4d19509bdd1f35904fb98cb062089fe2aaa9a6ab9aab2c2bf64d29dc25c272961d9d972e504a3aeff1e24f9d9a67eb95808569265ca33cd808a4837d7cc6caa2e6b1739e6d0f4664e0e411b3614ed15f2b176602e0a3370f9fbcb0722d8566d1d42e157045676c737e1a78299843ca10a6b8d1c974116c67ac3f37d43f19aa929207eb0e3c8c2ad4b13f7f3ed54981dd56e7b46e8835d0ca2a9ee8646cc4a32ce95262a0f15867f282b3fc4f22e5001dca2af9e431dc82bd9afdbc9651cafe379ba010009d810d23591b2afdeb70b9cbf18611e1e1edf7b063d8c303d40a050143b26628ab91c594e14466fc9aa8a9db9c3aa0cfb9236563863e6eab529b6f56cf657434b97cff215123345fa5f376b06182029dc18970a22b619ad3df490b3c886bde041f75d91ea833f834f2cbe0014723bd32f6595beed0d458d11950d5817931f4b75116ac51c623d35d5d54d5c0694c6dc826a8474afafe3f36e193054226e85bb46989fdcedadcb0da066ac5cd2ac3f0a9a8f88d987e0282ae401e4363f383ceb85acbc87638d172d5bf83ef2d00ff24cd62fb8d5ffff800732dbe41aa47bbb6f87d912850ba0b4c7477c5849463c48ad12db826410cb7b7e54e00c294e3031be9a2f047aa32b8b8091787151c92525271ac0bbc30e5f2d2978bd4ee4e472de275b5cd98388dff47b57891de83af36223f6cfaa84dcd0d4733bf9431ae45dad4cda3f07f66b5feedaab4c4e1d4d77177b90ab12b8118452a31631e172bc98fe60f4369e79f89cf825089fdd86eda2a314c5fb92df4b47500736373f374b024bc7144e1ef51bd03008de0922a8fe28096ce8958f5349fd5433884223122d9bae84be75b39960486aea23f8075afebcd93f56095b4f41c04b9d59c7901e36bc2f241f4e3e87e7bcda01c152bb4c3e95daa2a5c96a4d01bbb4fee9b8926d6df739d91dda8606e4310ab62c1ff1e6cc2adbd979cb4a0c80c6a7e7afadd9659c27834cf38992ca55c85e14f291910694db4cd8ffb0e57f4e96a8df822c21aa8247d618efdd6df6d6f6430a7e10db14436fb9c6aab8597c3d77564b47a1bbdc7d611d71497d3ec2a01c95d6a19bfb2fcd83ebf05aa26ad1a6471943e75b2fc7d75e871153a18d5849c424315a11ce908b2db70c8fd3a1a4b784cd3565b8fff1b204052dcde244e0f391b729b1b0d4e90af51f37594a94476902bae532850e8f9f456b5504a897a4658d334e82bfbd392a5dc57a9d457fe64f89f5a8deb4bbdfe1bcad2b26b39b45d281539aba17c7a480628f4e99a4fd1b853d49eb96debad2df5dd14fb4108e76af4ee19ad43714a90224c3bc43a24f35a6c83478df5c74145541d62272099837ba5bd4485e5c0abc11cb322ddc8c632aba7df33216e6c7c04ec1c6d275bc4848fc55c3f4c7b12ef1aa7494bc38a8b35de6670d75d6523b7f800edf419fbd4d551cf23e9db79ffaf218b61e304ccbd15f9e1b8afac6adb549500f32861f5f2d0e0d21d7aabc68acf8ecfc7591d20f648ba776fdacfe9906b3036945125959572a74ac0014be73913ae52427fbed786721b1c814e31304dbc936b831f96661410f9747dd663180925c06a6b0fbf02750a928c8205980743279d228beb9a13bbf787347aefe48bc3b997284d16316c982d68d329889d1e95f12a6cc39938ca8aa08ebb54617f4b987a8fad8bac9e53363d874037269ed07493244a0a97232073bbf8e11a25860e6b762c12e813c2bdd58e9f805e93e1fee6a316830ff416c0b045ad7847fc494d222f66619647cabd00949f4b144bdbd6a1e8cf8e45db286ceaf979ef12d2995c838f7aa6be8490ce9c9ce2bc4d9de4b91058729ac0311c9ef963727fc208d8c57b44a24acd83236f4de6ba4a60159c6de033f40c305557f40064b81fa717bbdc9bd4a12cd3fefcab2c59491cae747b67a501e9c02a561792c3b173e579eb67f1e24a95d22a89c9bc132f746b09bb4c1514879aa8dc804ad8d7faa7d5cf97a7b5f04cd9789254e8d42d066fd407d14b738bdfd9d77a29f456baa7668345c4a4aa6d25a07b60392ee10f0030b96aa78ad034926fe662dbf627cd7c955b75205299a3073900a1b46b7a1fd8b4973ca811d2cb6a92f6e59b7efb7132b6b5b90a345e782faa3f77f88e659168998217016935fa4f2544769288d2a56a898e64c28e4c20310a1bca09164d604565fd369fc8609dc9e49808e6a52a5118419f01d382a464d17525bc9ef9e2d1a40a51b3e47745427f31beb7f4dfe7f4dcac1689ac90af5dfbda3d57f4e0e32adfca28f7047dde9493d58e20edfad0817e286d068aee7b17c68d4aa32e23d5a8bd922c9426564345784a88fa8b7fbc8df30291e5b581d7e5a3566102f9a14121927117af9e81372021836dc9b8e97e47d5512fd653b8848739321c5739007ac8d6c4e7d276f4f1660091239bf79f43f20975ae90cdbf94f5f4fcdbf622dd6c32600817600d2795c14029c4ec3cc72772a70c2e872133d48b6392df0d17071729da06e03d5729ca4fa39c6dd8afc319062024ede3974d02af8afdb1f014e6be102cabc1b5039202e0447b15b2ed2a890958278023bdad34d7cadcccaccaa37bb8f198a033e2d169477b548419d25ea9287f1c524dfd319a75a8e1c80581b2df7c9327c161658331972c8920187f61cbdca3cedcfb9161016e0e399413b0bb976c633b760bea43fed389604e7bbfcd1c381a3c55356debd188e8c2170c1efacca3473e62a68223610ad9af87b75aeea1a5d9b1182e6b7a1c0bc14e566cc66416d791f200a451bb5e8570fa5c736ecbc42c3cbb3ed23a67d73bfcd3bbac65b4b37266747f69dce3d41b909dd95c40fbb567d935d8af07c218e29ab9bc18d411f52de17b1400d295beb4653a0d09016dc1bf8f5e4ba4e20197f0ef1ffca70791d21a37d98f956d6781941e70608ce73bb43ba68720e1079d350919451dc91e684962bdef6428348f799e6ac1c1682ac615ad6fa752aa68414a98f2bacc7da837f012c1013453b7322cea9aec575b8d54574a06218c83f0b2a462a24854292eccc11142a0057cc3f2ffca53a7427ab8da0db0ad033c498e8fa8d048ae1cec75a29ec0436cf039acb22d51b9a67a0cec06eea94f5ec70f3731815de417067c983d18807001a91dab490fb0e1506e436796e59500fff88b92ccd22413bb9d8b97447381be685064297ead508685cd462b2141a774f85934ebb3c97772f2a0d2fd811c47d8f0e476313ee33a65088374025359cb7f115168b8561cf8e6819246097c3698837731c199d368988113baf3474a83db90e56a5c55015d7691f967836a536d1444bee82e089d5e7533de315a9145daf06fec76865c081bdc304aced86f42eff0b34fe5a9d43290ed3460927c40c23e1037aee4cba0b9e1b6e74bdc6b414c6483f5c7d79015f292e9deb8fb4154b8d61939c3c3c229f7cac9a620530c1d3393fe494d361f1af8d62325cdc8ee4b1eca1ddd95b9ed6b4727d63282acfbbecb8382d010c02d9368c9aee7043086de631abc4f4dfd3a7facb81ee975631ffeff0349d0760be3ce91a05b8561365d59b37c8ebe149dbd4ffa0695139e91ec41f8c489e5d69fdc574cbda326f9a9fac19f27f5f9f11f50f14d4aa588bb7449d9182beabd7fb5a32317dc8df243f40111cda87253c14a6b29700f646b3cc01fa8fabcea500f4e4640291ced146a56a77e20bb474a1c6deff1217ff82feff7066b8773bb6b83ec491c1abd80173d53d04631017f4efff3c7ab6b22800c3107990d13dc75eac6445233224d002748d8c4a7f5870b0b16a9de2d4afcac2efb8219a99d1b93099debf852a395348b67887ed333e102a59cf89f606490c9ddf14a70263b318b1f12e8711f9731c1c389dd3950151689a45d94b0df37cb6bf63b2e5f539f745c5d54c9c02d7e760bc52bef1cfa0cafb04c0cbf99727762e80aa14dabfff774bffaae4e4a6f7d4bc03c8daa7df330a114e7ace6d60dd9aaa2ba2d764138d91f97f7a20fca9901fd2cf5f7ffdcdfbead2beab60a4870f53bef4890ce8b45854f67daa32573e9d6c096e93983eb41eaa131e3aa4339f909a08edfb43d53299a6793382f939f2ed45be501b264f959c453f3ccbdeca5a03913a402a9845d4d7cc984f780c08d9b1403a494c7254ee491ef6c5a542399549098defa8ecb4217140accc9f344b17c8bc02f8b5f56145f838e8a7f7f2447006d7fc67f5940f7c0c32395518a45cdd1f152c529706d8b32644c693a04de892b004d190d9ff41f86b5990b517beda9a27221aa24f17c831829b9ad1f2117f3b8f7481c2b18380d508d0af8fe832bda91499a87b5d29099caca155254b49bb99196547d42e889694976b37225a7da793fd78791a7eab354a552956fe5f4dd8e77521fe7a15917fedbe2077ea1f599d9d91051c1517eed273fc2130e7c7860756ef06cd3347b25c5e40673860882869b86b6acc78889aefef251906185577f85ed7979e4a175fb3d1285af107281600fbc7dc605e7f7ab952bf6ef1c4642ece9fdaa796ee054e7cd49a07c3f7ca99a64c3717eac4950364a63d35c55e937e336d3fb84f01e8265c19cd33ffa0e6cc94162beee9604d22a8729c14372944551f138f4715ff6310a7b9e0fda36307f5611ab78017561e5649b150dc0a522fa5a1bf49f1e4fa5a60b262033bdc24b0b196a964e2cd384b4960c413290b094f7238c3e221278780043b7d4fc5635643d25bb51c35817072022d97f600057d0b958b9b00b427dccd54a07f419aef2c3afb40a0dee5de4139176110a8a93548a618e0b503bf95c629f2aed1fb4810ebdcac3d0f3b9b0a861def918f6851b5b33ee599375315967f4ffcbe6d712e8870395221986eaa56fdba052dbfbc0b09ac77dcad005f86d0e96b682f01b7a5dcac06cb5d6c0be4063a8644028b7ead15fe9bfe3946e64005e6186a360e4ca6694847dd6120b2ee185a2827cbf86efc60cb7fa11697a7562f040882f7704f2463bf255d2ec063c9805261b80ee0c8d7c348b5418aba24457fb032d287cb020da899967acd6a6b5cea9affbba6aa9afbe3d42705319d81614ab2dc5ab57d064c7e13bdac5f47d91e83ce8e68b761c2066913942c651bb9fdc65b7fb3fa88e186b52d3be63fa2bd2b5666f48586230adc7ce13dba36d02550a89fc4c9fc69f158392d8b63b2055ebc3ae2ff338f5b83506d6c2598455674737f390ea48438fa9f740020d67996afcc20052a85470396d81ce7be1239a6ba5d247c9f39f2dbe033e528f6057a4e057b9be8d84dec2b32f89da4221e223c62c9275decd29242e2a71d9e26f5b6a4b1a2b89e8108496b1742becec0402c38b851282fb9dc08f443600398e170acee6407b4ae7eb1e5a6df30f8c7dde3fd0977fab79590de9c98e89cdf8de26b8dc1c21f1a04b39778b4f0d75c3c07c9d7fd22ba5ed2c15bd563ee9a9cca90bb1b5d8c6ac197e574cd41913d75c278cccfee9eef0de6df2612a85f6579610905472c9bd143e4b1b9755b64fbe8d4c2ed9579a4a225b0d7a6f7996ed7012da2d4539bb2e288f3d9359e0f82fc5188afb427a4367633baf72aa0cf20e6a6b14e814d518bf5f3e13b2c4c7a39001c7fa5ac718a4ad798ed69cb0488ae760457d30eb3088c98ae6d93f05a9b75258c9b31e6ca8dfdab31c5db871fe77353d46a406f1d5dd76d5f354d8e61fa94985a4c83c03d09ba4822088b3f65ca99afc2f810f1d89ae31f5ee224d79bc50f5d0c7b758e810c6534e12006adc3ad5cbbdcff932b4008ed8e253de9936a0b460e8b7b7c2ba26401c7f5227ef995c56b6a2fa40968fa8aeb3b04770a9d5444504f561c7ba752b2b3ab7eda1adcf50c75f4ecab2f979d23a82f417faeee06eb8012be2ea293bf7b621b8176b7397487590d857f4f9047f0c69f4d157c7e51829542ab2832d471d50cfd95654e9eb2945c01100f24ff0bf0b2ba44c213ae8c62d589fa3aedb39d075f425163a535b53e00fe2d5855d55f3ea5914e8d72fffe0f651b67420209dee85935287337806a4be3be53180ee3fc193a288e30f95ad2a337d0b009f295b581d156a66de9c1b76c9a08a88b22fd56ecd5da4d4c9dc242fc92b687710a5a9882f8179bee2c17a37bf8f475f270efcc9678012db96df2d8f695ea500f1db567b2d214dc12107be64cb253acb26132c05416ba56762ab864ad081a28efe43591b2ec135ace530381a7b453d8378d1885b6ba7849fd8c0083c43d6eccba8f1ca1152e6fb4e25e3b76ff785f90908a3055718a8c20451e3fee655ea5499d39278d7aab25620e7151d2302d320d4be34e31fe4fde957ada1be043c1d1d398dbf4dd9aefc0a113e83656ebc84eeb034034d038d89327031d2a811a29e9c2f035eb5f03d0cb5216346a995ce666491a1665a591cae22901a8c59ffd484536f2dc2688229f7de3855b9a29f389ee920e9b3ff74187c537e19a263bf06ca6884e37947791c46ec7a707925af172a70e6a8fcd53251b96752fde76b328a1858fa7e94b7dca31b9c6f9308dda4c5a7a54a06e2b133f20215a199082767ae51c903072ae4c8aac38c2e1b59072fe5cdb1249e1bcd084c23b058f95eec880f4b0df4db60e24fafbab9850ab5fade0800a6e5fe5df158ea3439d9e85b846bd0e03cb1cbc3c9457398fae9f4eb3f559cf7e4952f633b278a5bf9c6c9bd596327f734e78e335f0f599cea8a057df185638be7cf330791885ba31305ff1ff11d6fe767d8d96ffa042546a19ee3c91a1da17af5912807dec25932de0ce9485fd2e9f918e7bfe884aa29f504777905b59fbfe68546bf1d8273aecd4300733e80d0f7d84297fb238374693d938ed274f543cee99fede2396c32d3312fc4a9705a1b01ce9e910646ea5bc5a4409bcb048b2a6d6f4ad8e9bd554b7f2cfeab0541321122d1a84474623bcf495c68f33db57ef10839da7b32dd99b1264e97550a4089d15b4d44c2c948a4fc89c6e192197496ac1757ab3503d82a4acfc1964f643745643dad0097c154d81f7a38f65be1a6bf50900bab63c5f8c80bb119005d957a3610d73f86e2d9897e69e8c007dff702d7d4a9657badb9178fcbb6de3bc34a0eb9355c505690c1fd19e36e57f238e9b78fe9a269f1707cdfc613ace84af281e2af7008f614c924a1de8974b053c521076b61a50acdd61ca20768a7124db2183709f2bcdd1f12050df73170b9df8283d8ac3c55e689769a482611fe9cadc4607a8597e26b18a24c972aaa3e8953920b52052881666040f8619f070ae7345b27240360aec1df779b513f7e425d645465a8e06bb00bf191f873d6534c9cda8195a17485bb70bdbef57a57b5f812c908cf30efa1fccc33edbf9f7af6b6f118df7985a720c4705229c9bab4cd666c312a5742dc0a0be2f8077a7388ca218fd98f63090e6ea15a0eb38da9c073cf3d471bb69daa1bdd886325fea692cb8c9818013de38be720b65a56", 0x2000, &(0x7f0000005100)={&(0x7f0000002400)={0x50, 0x0, 0x3, {0x7, 0x2d, 0xa, 0xffffffff84080000, 0xd12, 0x9, 0x7fffffff, 0x638, 0x0, 0x0, 0x100, 0x3ff}}, &(0x7f0000002480)={0x18, 0x0, 0xb09d, {0xbe94}}, &(0x7f00000024c0)={0x18, 0xfffffffffffffffe, 0x8000, {0xa}}, &(0x7f0000002500)={0x18, 0x0, 0x3, {0x7b}}, &(0x7f0000002540)={0x18, 0x0, 0x2, {0x5}}, &(0x7f0000002600)={0x28, 0x0, 0x4000000, {{0x1, 0x2}}}, &(0x7f0000002640)={0x60, 0x0, 0x0, {{0x800, 0x9, 0xe, 0xe, 0x1, 0x1, 0x0, 0x80}}}, &(0x7f00000026c0)={0x18, 0x0, 0x6, {0x8}}, &(0x7f0000002700)=ANY=[@ANYBLOB="1800000000000000feffff503a3098e1561a0c2da051ffff"], &(0x7f0000002740)={0x20, 0x0, 0x100000000, {0x0, 0x2}}, &(0x7f0000002780)={0x78, 0x0, 0xfffffffffffffff8, {0x0, 0x3c, 0x0, {0x4, 0xfffffffffffffffc, 0x0, 0x5, 0x0, 0x8000000000000000, 0x401, 0x17, 0x7, 0xa000, 0xffff, 0x0, 0x0, 0x1}}}, &(0x7f0000002800)={0x90, 0xfffffffffffffffe, 0x101, {0x5, 0x0, 0x3ff, 0x8, 0x9, 0x4, {0x6, 0x8, 0x8, 0x5, 0x4, 0x0, 0xa, 0x1, 0x9, 0xc000, 0xa58, r9, 0x0, 0x7, 0x868}}}, &(0x7f00000028c0)={0x30, 0xffffffffffffffda, 0x8, [{0x5, 0xf, 0x8, 0x7, 'lowerdir'}]}, &(0x7f0000002c80)={0x1f8, 0x0, 0x8, [{{0x0, 0x0, 0x1, 0x3, 0x9, 0x1, {0x2, 0x8, 0xffffffffffffffff, 0x18, 0x10000, 0x7f, 0x5, 0x6, 0x1, 0xb000, 0x523b, 0x0, 0x0, 0x1, 0xffffffff}}, {0x3, 0xffffffff, 0x8, 0x2d, 'lowerdir'}}, {{0x2, 0x0, 0x1220, 0x81, 0xfd4, 0x0, {0x6, 0x100000000, 0x58cd3cd1, 0x2, 0x7, 0x0, 0x9, 0x80000000, 0xff, 0x2000, 0x6, 0xee01, 0x0, 0x8, 0x40}}, {0x0, 0x8, 0x8, 0x2, 'lowerdir'}}, {{0x6, 0x1, 0x0, 0x0, 0x6, 0x1000, {0x4, 0x60a6507e, 0x2, 0x0, 0x8000000000000001, 0x68, 0x5, 0x3b, 0xa, 0x5000, 0x9, r0, r1, 0x3, 0x9}}, {0x5, 0x5, 0xa, 0x9, '\'.*-&/#^#@'}}]}, &(0x7f0000002e80)={0xa0, 0xfffffffffffffffe, 0xaef9, {{0x3, 0x3, 0xe, 0x8000000000000001, 0x6, 0xe, {0x6, 0x2, 0x8001, 0x8, 0x316515d1, 0x73, 0x2, 0x7, 0x5, 0xa000, 0x7, r3, r6, 0x3, 0x5}}, {0x0, 0x2}}}, &(0x7f0000002f40)={0x20, 0x0, 0x4, {0x80d, 0x4, 0x5, 0x4}}, &(0x7f0000004fc0)={0x130, 0x0, 0xf118, {0x0, 0x5, 0x0, '\x00', {0x40, 0x200, 0x3, 0x1f0a, r9, r11, 0x2000, '\x00', 0xfffffffffffffffa, 0x5, 0x8, 0x27ab, {0x9, 0x9}, {0x1ff, 0x190a40a4}, {0xfff, 0x9}, {0x5, 0xd1a}, 0x7, 0x459, 0xd55c, 0x4}}}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x180) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f00000002c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r13, 0x0, r14, 0x0, 0xf3a, 0x0) write$P9_RGETLOCK(r14, 0x0, 0xffffff20) write(r14, &(0x7f0000000100)="af", 0xfffffe00) write(r12, 0x0, 0x0) r15 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8018, 0x1f7) r16 = fanotify_init(0x200, 0x0) fanotify_mark(r16, 0x201, 0x4000003e, r15, 0x0) r17 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r17, 0x401c5820, &(0x7f0000000080)={0x8}) 18m29.61251946s ago: executing program 3 (id=20): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0xa, "0fc1cd79"}]}}, 0x0}, 0x0) sendto(0xffffffffffffffff, &(0x7f0000000200)="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", 0x4a3, 0x40000, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") 18m29.016077091s ago: executing program 3 (id=23): mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) socket(0x1e, 0x805, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) r5 = eventfd(0xfffffdfe) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r5) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r5}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, 0x0) 18m28.837204543s ago: executing program 32 (id=23): mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) socket(0x1e, 0x805, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) r5 = eventfd(0xfffffdfe) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r5) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r5}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, 0x0) 8m19.631075922s ago: executing program 5 (id=1085): sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0xffffffffffffff13, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x86}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x7a248000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x2a, 0xfffffffffffffffc) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x47, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004051045f500001010203020902350001020080300904000005ff0000000705810200020007050102000200070582020002000705020200020007058303"], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./dev/ttyUSB0\x00', 0x2, 0x0) ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f00000001c0)=0x2) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000080)={0xf0f021}) r5 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) ioctl$VIDIOC_S_SELECTION(r5, 0xc040565f, &(0x7f0000000080)={0x1, 0x100, 0x0, {0x4, 0x300, 0x0, 0x800002fc}}) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f00000003c0)={0x1, @win={{0xd, 0x4, 0x8, 0x5}, 0x2, 0x1000000, 0x0, 0xc3, 0x0, 0x1}}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r6 = syz_clone(0x25000, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$P9_RLERRORu(r7, &(0x7f0000000300)=ANY=[@ANYRESHEX], 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000001300)=ANY=[@ANYRESHEX=r0, @ANYRES64=r2, @ANYBLOB="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", @ANYRESOCT=r6, @ANYRES32=r7], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 8m8.242361628s ago: executing program 5 (id=1099): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000000380)={'syz', 0x1}, &(0x7f0000000200)='q\xa9', 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@ifindex, r5, 0x26}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x4}, {0x0, [0x0, 0x5f]}}, &(0x7f0000000680)=""/143, 0x1c, 0x8f, 0x1}, 0x28) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x4, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r6, 0x8923, &(0x7f00000000c0)={'bond_slave_0\x00', @random="013301300108"}) r7 = syz_open_dev$tty1(0xc, 0x4, 0x2) r8 = dup(r7) ioctl$TIOCL_SETSEL(r8, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x4f00, 0x100, 0x100, 0x1, 0x4000}}) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r9 = openat$6lowpan_enable(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) write$6lowpan_enable(r9, &(0x7f00000001c0)='0', 0x1) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x0, 0x100007, 0x0, 0x0, 0x20, 0xc, 0x3, 0xfc, 0x0, 0x1, 0x4, 0x8, 0x111, 0xff, 0x0, 0x0, [0x0, 0xfffffffe]}}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) prctl$PR_SET_NAME(0x4, 0x0) 8m2.043134498s ago: executing program 5 (id=1106): openat$kvm(0xffffffffffffff9c, 0x0, 0x109d02, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x2100, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r1, 0xc0045009, &(0x7f0000001080)=0x2) ioctl$SNDCTL_DSP_SUBDIVIDE(r1, 0xc0045009, &(0x7f0000000140)) r2 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=@newqdisc={0x54, 0x14, 0xf0b, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, {0x4}, {0xb, 0x1}, {0x4, 0x2}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x40, 0xfc, 0x200, 0xa, 0x0, 0x0, 0x7e}}, {0x4}}]}, @qdisc_kind_options=@q_htb={{0x8}, {0x4}}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x8090) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000380), r3) sendmsg$IEEE802154_LLSEC_GETPARAMS(r3, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000e80)={0x20, r4, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x17f41f2157d8eae}, 0x20000000) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x20004000) 7m59.758215184s ago: executing program 5 (id=1108): setns(0xc9, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x24, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) mmap$IORING_OFF_SQ_RING(0x0, 0xc, 0x2000002, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x2, 0x0, 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x40286608, 0x0) 7m55.079873276s ago: executing program 5 (id=1113): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000000380)={'syz', 0x1}, &(0x7f0000000200)='q\xa9', 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@ifindex, r5, 0x26}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x4}, {0x0, [0x0, 0x5f]}}, &(0x7f0000000680)=""/143, 0x1c, 0x8f, 0x1}, 0x28) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x4, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r6, 0x8923, &(0x7f00000000c0)={'bond_slave_0\x00', @random="013301300108"}) r7 = syz_open_dev$tty1(0xc, 0x4, 0x2) r8 = dup(r7) ioctl$TIOCL_SETSEL(r8, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x4f00, 0x100, 0x100, 0x1, 0x4000}}) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) openat$6lowpan_enable(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x0, 0x100007, 0x0, 0x0, 0x20, 0xc, 0x3, 0xfc, 0x0, 0x1, 0x4, 0x8, 0x111, 0xff, 0x0, 0x0, [0x0, 0xfffffffe]}}) socket$netlink(0x10, 0x3, 0x2) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) prctl$PR_SET_NAME(0x4, 0x0) 7m48.437293348s ago: executing program 5 (id=1125): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0xfffc}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}, 0x1, 0x0, 0x0, 0x44010}, 0x0) socket$rds(0x15, 0x5, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000840)={0x2, {{0x2, 0x0, @multicast2}}, 0x0, 0x3, [{{0x2, 0x0, @empty}}, {{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e21, @empty}}]}, 0x1fffc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {0x3}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x5}]}]}, 0x54}}, 0x0) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x3f00, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) 7m32.502437978s ago: executing program 33 (id=1125): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0xfffc}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}, 0x1, 0x0, 0x0, 0x44010}, 0x0) socket$rds(0x15, 0x5, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000840)={0x2, {{0x2, 0x0, @multicast2}}, 0x0, 0x3, [{{0x2, 0x0, @empty}}, {{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e21, @empty}}]}, 0x1fffc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {0x3}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x5}]}]}, 0x54}}, 0x0) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x3f00, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) 4.743953694s ago: executing program 1 (id=2354): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 4.075965206s ago: executing program 1 (id=2355): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_rdma(0x10, 0x3, 0x14) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x180) openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r0 = open(&(0x7f00000002c0)='.\x00', 0x101000, 0x12d) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180)) 3.833045421s ago: executing program 0 (id=2360): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x81, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1000c1, 0x0, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0xd0}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}, {0x85, 0x0, 0x0, 0x17}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xe, 0x0, &(0x7f0000000300)="0101000071a78326c799dbe888a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r2 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000380)={0x4}) socket$inet6(0xa, 0x1, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000140)={0x0, 0x6}, &(0x7f0000000340)=0x8) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x15) ioctl(r3, 0x404c4701, &(0x7f0000000100)="0100000000000000010000000000000001000000000000000000000040000000400000000000000001") openat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0, 0xbd) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x18, 0x44, 0x107, 0x0, 0x25dfdbfc, {0x3, 0x7c}, [@nested={0x4, 0x145}]}, 0x18}}, 0xc000) 3.815083423s ago: executing program 1 (id=2361): socket$inet6_tcp(0xa, 0x1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000340)={'tunl0\x00', 0x0}) 2.290268029s ago: executing program 6 (id=2366): syz_extract_tcp_res(&(0x7f0000000000), 0x4, 0xfffffffe) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) r1 = fsopen(0x0, 0x1) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) mlockall(0x2) r2 = syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x39c4, 0x2, 0x4, 0xfffffffe}, &(0x7f0000000580), &(0x7f0000000280), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_IOWQ_AFF(r2, 0x11, &(0x7f0000000500)='n', 0x1) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r2, 0x13, &(0x7f0000000180)=[0x2, 0x6], 0x2) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r6 = dup3(r5, r4, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0) dup3(r3, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r4, 0x10000000000) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000004a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000002580)={0x0, 0x0, 0x0, 0x9f, 0x0, &(0x7f0000001580)="ce6c286c2018840b1f6dc85445c6899e10f1c40536af7d99509e02dc55087fa1062209100f8e7b6082149e2153b76247ccda57e0de0b0ed16a37fc888d898ac6afcf02f8739c24fbffffffbb44f9cecd0df51bec33a47aab5137891e17044802c15d7b4f2ee03d63e10aba5f8c5d7aad2e06e02b132fea96aa104b0b4cb24d1a634dfadcb7d8138136929166bc30ddecf8881c5dd57c63894ac49ffda34c9d"}) read$FUSE(0xffffffffffffffff, &(0x7f0000005180)={0x2020}, 0x2020) 2.266354327s ago: executing program 1 (id=2367): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e20, @loopback}}, 0x0, 0x0, 0x4, 0x0, "e83ae75240c2d6d8ec87bb53679fd0450078548ceb6c4414fab091000000000000000776aea5922406b64cddaeb9d339ba3c01c2c7d0df8e61740b9af2d4e499d58654a4cf0fa0ce1f830c3279cffcfd"}, 0xd8) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0xd007) 2.168009188s ago: executing program 2 (id=2368): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000001000000000000000000000850000001800000018010000207834b000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000a00ef00850000009b00000095"], &(0x7f0000000080)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000300)={@map=r2, r1, 0x2f}, 0x20) sendmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000100)=@qipcrtr={0x2a, 0x4, 0x1}, 0x80, &(0x7f0000000500)=[{&(0x7f00000006c0)="27031c00160014000000002f1eaf", 0xe}], 0x1}, 0x4) 2.018622605s ago: executing program 2 (id=2370): pipe2$watch_queue(&(0x7f0000001180), 0x80) socket$netlink(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_tcp(0x2, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x4) socket(0x10, 0x803, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) openat$vicodec0(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000600fc000000080011000700000008000e00800000000800", @ANYRES64], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x80) 1.925678883s ago: executing program 4 (id=2371): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xb0000) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r1, 0x0, 0x4801) mknod$loop(0x0, 0xfff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc\x00', 0x777) syz_open_dev$usbfs(0x0, 0x10000001d, 0x8041) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000300)='./proc\x00', &(0x7f0000000340)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/sys/vm/nr_hugepages\x00', 0x2, 0x0) write(r2, &(0x7f00000003c0)='1', 0x1) 1.772524524s ago: executing program 2 (id=2372): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_rdma(0x10, 0x3, 0x14) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x180) openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r0 = open(&(0x7f00000002c0)='.\x00', 0x101000, 0x12d) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180)) 1.688396522s ago: executing program 2 (id=2373): mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/functions/phonet.usb0\x00', 0x1fe) symlinkat(&(0x7f00000001c0)='./config/usb_gadget/g1/functions/phonet.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/configs/c.1/phonet.usb0\x00') r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, &(0x7f0000000280), 0x0) write(r0, &(0x7f0000000400), 0x0) close(r0) unlinkat(r0, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1/phonet.usb0\x00', 0x0) rmdir(&(0x7f0000000340)='./config/usb_gadget/g1/functions/phonet.usb0\x00') 1.687561818s ago: executing program 4 (id=2374): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c0000000206050000000000000000000000000005000400000000000900020073797a300000000014000780"], 0x5c}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=ANY=[@ANYBLOB="54000000090601020000000000000000010000040900020073797a30000000000500010007000000080009400000000124000880100007800a0011"], 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) 1.555049556s ago: executing program 0 (id=2375): r0 = syz_open_dev$usbmon(&(0x7f0000000d40), 0x8, 0x80000) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) 1.506634667s ago: executing program 2 (id=2376): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa0000000000000000ff003e851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50afdffffff000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x8}, 0x94) 1.490022779s ago: executing program 4 (id=2377): socket$inet6_tcp(0xa, 0x1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000340)={'tunl0\x00', 0x0}) 1.360391601s ago: executing program 0 (id=2378): mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x158) mkdirat(0xffffffffffffff9c, 0x0, 0x1c5) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x80, 0x190) fcntl$notify(r0, 0x402, 0x13) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x8, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}]}) chdir(&(0x7f0000000000)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x100) read$FUSE(r1, &(0x7f00000003c0)={0x2020}, 0x2020) 1.182942827s ago: executing program 1 (id=2379): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x662, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100), 0xfffffd9d) r3 = socket(0x1e, 0x4, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) connect$tipc(r3, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x1, 0x4}}, 0x10) sendfile(r3, 0xffffffffffffffff, 0x0, 0x8010002b) 1.072098278s ago: executing program 6 (id=2380): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000001000000000000000000000850000001800000018010000207834b000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000a00ef00850000009b00000095"], &(0x7f0000000080)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000300)={@map=r2, r1, 0x2f}, 0x20) sendmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000100)=@qipcrtr={0x2a, 0x4, 0x1}, 0x80, &(0x7f0000000500)=[{&(0x7f00000006c0)="27031c00160014000000002f1eaf", 0xe}], 0x1}, 0x4) 1.062901284s ago: executing program 0 (id=2381): bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0xfffffffe, 0xffffffffffffffff, 0x4}, 0x38) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r0) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) 969.919447ms ago: executing program 6 (id=2382): r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x80240, 0x31840384d1ba4a81) finit_module(r0, 0x0, 0x0) 860.110203ms ago: executing program 6 (id=2383): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x68, r1, 0x1, 0x70bd27, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0xa000000, @media='ib\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0xc812}, 0x4040010) 838.063136ms ago: executing program 4 (id=2384): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_rdma(0x10, 0x3, 0x14) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x180) openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r0 = open(&(0x7f00000002c0)='.\x00', 0x101000, 0x12d) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x40) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180)) 825.062987ms ago: executing program 6 (id=2385): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xb0000) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r1, 0x0, 0x4801) mknod$loop(0x0, 0xfff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc\x00', 0x777) syz_open_dev$usbfs(0x0, 0x10000001d, 0x8041) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000300)='./proc\x00', &(0x7f0000000340)='proc\x00', 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000003c0)='1', 0x1) 319.614628ms ago: executing program 2 (id=2386): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/functions/phonet.usb0\x00', 0x1fe) symlinkat(&(0x7f00000001c0)='./config/usb_gadget/g1/functions/phonet.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/configs/c.1/phonet.usb0\x00') r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r1, &(0x7f0000000280), 0x0) write(r1, &(0x7f0000000400), 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, 0x0, 0x0) close(r1) unlinkat(r1, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1/phonet.usb0\x00', 0x0) rmdir(&(0x7f0000000340)='./config/usb_gadget/g1/functions/phonet.usb0\x00') rmdir(0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x4, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 251.791716ms ago: executing program 0 (id=2387): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c000000020605000000000000000000000000000500"], 0x5c}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=ANY=[@ANYBLOB="54000000090601020000000000000000010000040900020073797a30000000000500010007000000080009400000000124000880100007800a0011"], 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) 250.280174ms ago: executing program 4 (id=2388): r0 = syz_open_dev$usbmon(&(0x7f0000000d40), 0x8, 0x80000) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) 164.62497ms ago: executing program 6 (id=2389): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x4, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) 133.427451ms ago: executing program 0 (id=2390): syz_emit_vhci(&(0x7f0000000500)=ANY=[@ANYBLOB="02c80010000c00010003020800"], 0x15) 116.365352ms ago: executing program 1 (id=2391): syz_extract_tcp_res(&(0x7f0000000000), 0x4, 0xfffffffe) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) r1 = fsopen(0x0, 0x1) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) mlockall(0x2) r2 = syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x39c4, 0x2, 0x4, 0xfffffffe}, &(0x7f0000000580), &(0x7f0000000280), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_IOWQ_AFF(r2, 0x11, &(0x7f0000000500)='n', 0x1) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r2, 0x13, &(0x7f0000000180)=[0x2, 0x6], 0x2) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r6 = dup3(r5, r4, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0) dup3(r3, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r4, 0x10000000000) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000004a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000002580)={0x0, 0x0, 0x0, 0x9f, 0x0, &(0x7f0000001580)="ce6c286c2018840b1f6dc85445c6899e10f1c40536af7d99509e02dc55087fa1062209100f8e7b6082149e2153b76247ccda57e0de0b0ed16a37fc888d898ac6afcf02f8739c24fbffffffbb44f9cecd0df51bec33a47aab5137891e17044802c15d7b4f2ee03d63e10aba5f8c5d7aad2e06e02b132fea96aa104b0b4cb24d1a634dfadcb7d8138136929166bc30ddecf8881c5dd57c63894ac49ffda34c9d"}) read$FUSE(0xffffffffffffffff, &(0x7f0000005180)={0x2020}, 0x2020) 0s ago: executing program 4 (id=2392): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000001000000000000000000000850000001800000018010000207834b000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000a00ef00850000009b00000095"], &(0x7f0000000080)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000300)={@map=r2, r1, 0x2f}, 0x20) sendmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000100)=@qipcrtr={0x2a, 0x4, 0x1}, 0x80, &(0x7f0000000500)=[{&(0x7f00000006c0)="27031c00160014000000002f1eaf", 0xe}], 0x1}, 0x4) kernel console output (not intermixed with test programs): - nonzero urb status, -71 [ 1014.684356][ C1] usb 7-1: ti_interrupt_callback - nonzero urb status, -71 [ 1014.684552][ C1] usb 7-1: ti_interrupt_callback - nonzero urb status, -71 [ 1014.684749][ C1] usb 7-1: ti_interrupt_callback - nonzero urb status, -71 [ 1014.684944][ C1] usb 7-1: ti_interrupt_callback - nonzero urb status, -71 [ 1014.685139][ C1] usb 7-1: ti_interrupt_callback - nonzero urb status, -71 [ 1014.685529][ C1] usb 7-1: ti_interrupt_callback - nonzero urb status, -71 [ 1014.685725][ C1] usb 7-1: ti_interrupt_callback - nonzero urb status, -71 [ 1014.685922][ C1] usb 7-1: ti_interrupt_callback - nonzero urb status, -71 [ 1014.686118][ C1] usb 7-1: ti_interrupt_callback - nonzero urb status, -71 [ 1014.686313][ C1] usb 7-1: ti_interrupt_callback - nonzero urb status, -71 [ 1014.686508][ C1] usb 7-1: ti_interrupt_callback - nonzero urb status, -71 [ 1014.686702][ C1] usb 7-1: ti_interrupt_callback - nonzero urb status, -71 [ 1014.686897][ C1] usb 7-1: ti_interrupt_callback - nonzero urb status, -71 [ 1014.687097][ C1] usb 7-1: ti_interrupt_callback - nonzero urb status, -71 [ 1014.687297][ C1] usb 7-1: ti_interrupt_callback - nonzero urb status, -71 [ 1014.687493][ C1] usb 7-1: ti_interrupt_callback - nonzero urb status, -71 [ 1014.687686][ C1] usb 7-1: ti_interrupt_callback - nonzero urb status, -71 [ 1014.687883][ C1] usb 7-1: ti_interrupt_callback - nonzero urb status, -71 [ 1014.688079][ C1] usb 7-1: ti_interrupt_callback - nonzero urb status, -71 [ 1014.688274][ C1] usb 7-1: ti_interrupt_callback - nonzero urb status, -71 [ 1014.688468][ C1] usb 7-1: ti_interrupt_callback - nonzero urb status, -71 [ 1014.688660][ C1] usb 7-1: ti_interrupt_callback - nonzero urb status, -71 [ 1014.688852][ C1] usb 7-1: ti_interrupt_callback - nonzero urb status, -71 [ 1014.689050][ C1] usb 7-1: ti_interrupt_callback - nonzero urb status, -71 [ 1014.689236][ C1] usb 7-1: ti_interrupt_callback - nonzero urb status, -71 [ 1014.689403][ C1] usb 7-1: ti_interrupt_callback - nonzero urb status, -71 [ 1014.689569][ C1] usb 7-1: ti_interrupt_callback - nonzero urb status, -71 [ 1014.689748][ C1] usb 7-1: ti_interrupt_callback - nonzero urb status, -71 [ 1014.689943][ C1] usb 7-1: ti_interrupt_callback - nonzero urb status, -71 [ 1014.690138][ C1] usb 7-1: ti_interrupt_callback - nonzero urb status, -71 [ 1014.690331][ C1] usb 7-1: ti_interrupt_callback - nonzero urb status, -71 [ 1014.690521][ C1] usb 7-1: ti_interrupt_callback - nonzero urb status, -71 [ 1014.690713][ C1] usb 7-1: ti_interrupt_callback - nonzero urb status, -71 [ 1014.690912][ C1] usb 7-1: ti_interrupt_callback - nonzero urb status, -71 [ 1014.691101][ C1] usb 7-1: ti_interrupt_callback - nonzero urb status, -71 [ 1014.691293][ C1] usb 7-1: ti_interrupt_callback - nonzero urb status, -71 [ 1014.691491][ C1] usb 7-1: ti_interrupt_callback - nonzero urb status, -71 [ 1014.691685][ C1] usb 7-1: ti_interrupt_callback - nonzero urb status, -71 [ 1014.691880][ C1] usb 7-1: ti_interrupt_callback - nonzero urb status, -71 [ 1014.692068][ C1] usb 7-1: ti_interrupt_callback - nonzero urb status, -71 [ 1014.692257][ C1] usb 7-1: ti_interrupt_callback - nonzero urb status, -71 [ 1014.692446][ C1] usb 7-1: ti_interrupt_callback - nonzero urb status, -71 [ 1014.692634][ C1] usb 7-1: ti_interrupt_callback - nonzero urb status, -71 [ 1014.692823][ C1] usb 7-1: ti_interrupt_callback - nonzero urb status, -71 [ 1014.693021][ C1] usb 7-1: ti_interrupt_callback - nonzero urb status, -71 [ 1014.693211][ C1] usb 7-1: ti_interrupt_callback - nonzero urb status, -71 [ 1014.693399][ C1] usb 7-1: ti_interrupt_callback - nonzero urb status, -71 [ 1014.693588][ C1] usb 7-1: ti_interrupt_callback - nonzero urb status, -71 [ 1014.693775][ C1] usb 7-1: ti_interrupt_callback - nonzero urb status, -71 [ 1014.693963][ C1] usb 7-1: ti_interrupt_callback - nonzero urb status, -71 [ 1014.695345][ C1] usb 7-1: ti_interrupt_callback - nonzero urb status, -71 [ 1014.695535][ C1] usb 7-1: ti_interrupt_callback - nonzero urb status, -71 [ 1014.695725][ C1] usb 7-1: ti_interrupt_callback - nonzero urb status, -71 [ 1014.696517][ C1] usb 7-1: ti_interrupt_callback - nonzero urb status, -71 [ 1014.696707][ C1] usb 7-1: ti_interrupt_callback - nonzero urb status, -71 [ 1014.696896][ C1] usb 7-1: ti_interrupt_callback - nonzero urb status, -71 [ 1014.699976][ C1] usb 7-1: ti_interrupt_callback - nonzero urb status, -71 [ 1014.700184][ C1] usb 7-1: ti_interrupt_callback - nonzero urb status, -71 [ 1014.700385][ C1] usb 7-1: ti_interrupt_callback - nonzero urb status, -71 [ 1014.700581][ C1] usb 7-1: ti_interrupt_callback - nonzero urb status, -71 [ 1014.700777][ C1] usb 7-1: ti_interrupt_callback - nonzero urb status, -71 [ 1014.700979][ C1] usb 7-1: ti_interrupt_callback - nonzero urb status, -71 [ 1014.701173][ C1] usb 7-1: ti_interrupt_callback - nonzero urb status, -71 [ 1014.701363][ C1] usb 7-1: ti_interrupt_callback - nonzero urb status, -71 [ 1014.701575][ C1] usb 7-1: ti_interrupt_callback - nonzero urb status, -71 [ 1014.701770][ C1] usb 7-1: ti_interrupt_callback - nonzero urb status, -71 [ 1014.701965][ C1] usb 7-1: ti_interrupt_callback - nonzero urb status, -71 [ 1014.702172][ C1] usb 7-1: ti_interrupt_callback - nonzero urb status, -71 [ 1014.702366][ C1] usb 7-1: ti_interrupt_callback - nonzero urb status, -71 [ 1014.702558][ C1] usb 7-1: ti_interrupt_callback - nonzero urb status, -71 [ 1014.702750][ C1] usb 7-1: ti_interrupt_callback - nonzero urb status, -71 [ 1014.702943][ C1] usb 7-1: ti_interrupt_callback - nonzero urb status, -71 [ 1014.703141][ C1] usb 7-1: ti_interrupt_callback - nonzero urb status, -71 [ 1014.703335][ C1] usb 7-1: ti_interrupt_callback - nonzero urb status, -71 [ 1014.703528][ C1] usb 7-1: ti_interrupt_callback - nonzero urb status, -71 [ 1014.703721][ C1] usb 7-1: ti_interrupt_callback - nonzero urb status, -71 [ 1014.703913][ C1] usb 7-1: ti_interrupt_callback - nonzero urb status, -71 [ 1014.704105][ C1] usb 7-1: ti_interrupt_callback - nonzero urb status, -71 [ 1014.704294][ C1] usb 7-1: ti_interrupt_callback - nonzero urb status, -71 [ 1014.704489][ C1] usb 7-1: ti_interrupt_callback - nonzero urb status, -71 [ 1014.704684][ C1] usb 7-1: ti_interrupt_callback - nonzero urb status, -71 [ 1014.704874][ C1] usb 7-1: ti_interrupt_callback - nonzero urb status, -71 [ 1014.705066][ C1] usb 7-1: ti_interrupt_callback - nonzero urb status, -71 [ 1014.705256][ C1] usb 7-1: ti_interrupt_callback - nonzero urb status, -71 [ 1014.705500][ C1] usb 7-1: ti_interrupt_callback - nonzero urb status, -71 [ 1014.705693][ C1] usb 7-1: ti_interrupt_callback - nonzero urb status, -71 [ 1014.705881][ C1] usb 7-1: ti_interrupt_callback - nonzero urb status, -71 [ 1014.706063][ C1] usb 7-1: ti_interrupt_callback - nonzero urb status, -71 [ 1014.706244][ C1] usb 7-1: ti_interrupt_callback - nonzero urb status, -71 [ 1014.706425][ C1] usb 7-1: ti_interrupt_callback - nonzero urb status, -71 [ 1014.706606][ C1] usb 7-1: ti_interrupt_callback - nonzero urb status, -71 [ 1014.706788][ C1] usb 7-1: ti_interrupt_callback - nonzero urb status, -71 [ 1014.706974][ C1] usb 7-1: ti_interrupt_callback - nonzero urb status, -71 [ 1014.707173][ C1] usb 7-1: ti_interrupt_callback - nonzero urb status, -71 [ 1014.707368][ C1] usb 7-1: ti_interrupt_callback - nonzero urb status, -71 [ 1014.707565][ C1] usb 7-1: ti_interrupt_callback - nonzero urb status, -71 [ 1014.707754][ C1] usb 7-1: ti_interrupt_callback - nonzero urb status, -71 [ 1014.707944][ C1] usb 7-1: ti_interrupt_callback - nonzero urb status, -71 [ 1014.708138][ C1] usb 7-1: ti_interrupt_callback - nonzero urb status, -71 [ 1014.708330][ C1] usb 7-1: ti_interrupt_callback - nonzero urb status, -71 [ 1014.708529][ C1] usb 7-1: ti_interrupt_callback - nonzero urb status, -71 [ 1014.708729][ C1] usb 7-1: ti_interrupt_callback - nonzero urb status, -71 [ 1014.708927][ C1] usb 7-1: ti_interrupt_callback - nonzero urb status, -71 [ 1014.709127][ C1] usb 7-1: ti_interrupt_callback - nonzero urb status, -71 [ 1014.709329][ C1] usb 7-1: ti_interrupt_callback - nonzero urb status, -71 [ 1014.709531][ C1] usb 7-1: ti_interrupt_callback - nonzero urb status, -71 [ 1014.709727][ C1] usb 7-1: ti_interrupt_callback - nonzero urb status, -71 [ 1014.709922][ C1] usb 7-1: ti_interrupt_callback - nonzero urb status, -71 [ 1014.710118][ C1] usb 7-1: ti_interrupt_callback - nonzero urb status, -71 [ 1014.710318][ C1] usb 7-1: ti_interrupt_callback - nonzero urb status, -71 [ 1014.710526][ C1] usb 7-1: ti_interrupt_callback - nonzero urb status, -71 [ 1014.710726][ C1] usb 7-1: ti_interrupt_callback - nonzero urb status, -71 [ 1014.710924][ C1] usb 7-1: ti_interrupt_callback - nonzero urb status, -71 [ 1014.711119][ C1] usb 7-1: ti_interrupt_callback - nonzero urb status, -71 [ 1014.711314][ C1] usb 7-1: ti_interrupt_callback - nonzero urb status, -71 [ 1014.711507][ C1] usb 7-1: ti_interrupt_callback - nonzero urb status, -71 [ 1014.711701][ C1] usb 7-1: ti_interrupt_callback - nonzero urb status, -71 [ 1014.711895][ C1] usb 7-1: ti_interrupt_callback - nonzero urb status, -71 [ 1014.712089][ C1] usb 7-1: ti_interrupt_callback - nonzero urb status, -71 [ 1014.712283][ C1] usb 7-1: ti_interrupt_callback - nonzero urb status, -71 [ 1014.712477][ C1] usb 7-1: ti_interrupt_callback - nonzero urb status, -71 [ 1014.712670][ C1] usb 7-1: ti_interrupt_callback - nonzero urb status, -71 [ 1014.712864][ C1] usb 7-1: ti_interrupt_callback - nonzero urb status, -71 [ 1014.713057][ C1] usb 7-1: ti_interrupt_callback - nonzero urb status, -71 [ 1014.713251][ C1] usb 7-1: ti_interrupt_callback - nonzero urb status, -71 [ 1014.713444][ C1] usb 7-1: ti_interrupt_callback - nonzero urb status, -71 [ 1014.713639][ C1] usb 7-1: ti_interrupt_callback - nonzero urb status, -71 [ 1014.713833][ C1] usb 7-1: ti_interrupt_callback - nonzero urb status, -71 [ 1014.714033][ C1] usb 7-1: ti_interrupt_callback - nonzero urb status, -71 [ 1014.714227][ C1] usb 7-1: ti_interrupt_callback - nonzero urb status, -71 [ 1014.714420][ C1] usb 7-1: ti_interrupt_callback - nonzero urb status, -71 [ 1014.714632][ C1] usb 7-1: ti_interrupt_callback - nonzero urb status, -71 [ 1014.714821][ C1] usb 7-1: ti_interrupt_callback - nonzero urb status, -71 [ 1014.715012][ C1] usb 7-1: ti_interrupt_callback - nonzero urb status, -71 [ 1014.715202][ C1] usb 7-1: ti_interrupt_callback - nonzero urb status, -71 [ 1014.715405][ C1] usb 7-1: ti_interrupt_callback - nonzero urb status, -71 [ 1014.715627][ C1] usb 7-1: ti_interrupt_callback - nonzero urb status, -71 [ 1014.715728][T13837] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set config on port 0, -110 [ 1014.715847][ C1] usb 7-1: ti_interrupt_callback - nonzero urb status, -71 [ 1014.715949][T13837] ti_usb_3410_5052_2 ttyUSB0: ti_write_byte - failed, -32 [ 1014.716002][T13837] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set modem control on port 0, -32 [ 1014.716059][ C1] usb 7-1: ti_interrupt_callback - nonzero urb status, -71 [ 1014.716255][ C1] usb 7-1: ti_interrupt_callback - nonzero urb status, -71 [ 1014.716397][T13837] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot send open command, -32 [ 1015.307911][T13848] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3659427032 (29275416256 ns) > initial count (9353363104 ns). Using initial count to start timer. [ 1016.822350][ T5693] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1016.822394][ T5693] usb 2-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 1016.859841][ T5693] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1016.859875][ T5693] usb 2-1: can't read configurations, error -71 [ 1017.439797][ T9934] usb 7-1: USB disconnect, device number 33 [ 1017.957669][ T31] audit: type=1400 audit(1788176742.982:995): avc: denied { create } for pid=13873 comm="syz.0.1691" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1017.979986][ T31] audit: type=1400 audit(1788176743.002:996): avc: denied { read } for pid=13873 comm="syz.0.1691" name="file0" dev="tmpfs" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1017.980035][ T31] audit: type=1400 audit(1788176743.002:997): avc: denied { open } for pid=13873 comm="syz.0.1691" path="/346/file0" dev="tmpfs" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1018.102911][ T9934] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 1018.170648][ T9934] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 1018.171480][ T9934] ti_usb_3410_5052 7-1:2.0: device disconnected [ 1018.296009][ T31] audit: type=1400 audit(1788176743.312:998): avc: denied { setattr } for pid=13873 comm="syz.0.1691" name="file0" dev="tmpfs" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1018.774779][T13884] netlink: 'syz.1.1693': attribute type 1 has an invalid length. [ 1018.774800][T13884] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1693'. [ 1018.944565][T13887] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1693'. [ 1019.080280][ T9] usb 5-1: new low-speed USB device number 104 using dummy_hcd [ 1019.309810][T13875] block device autoloading is deprecated and will be removed. [ 1019.310809][ T9] usb 5-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 1019.327160][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1019.327192][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1019.327225][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1019.442367][ T31] audit: type=1400 audit(1788176744.462:999): avc: denied { unlink } for pid=5600 comm="syz-executor" name="file0" dev="tmpfs" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1019.468672][ T9] usb 5-1: config 0 descriptor?? [ 1019.826368][T10849] usb 1-1: new high-speed USB device number 125 using dummy_hcd [ 1019.900995][T13902] overlayfs: conflicting options: nfs_export=on,index=off [ 1019.975456][T10849] usb 1-1: Using ep0 maxpacket: 32 [ 1019.977016][T10849] usb 1-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 1019.984192][T10849] usb 1-1: config 0 has an invalid interface number: 196 but max is 0 [ 1019.984218][T10849] usb 1-1: config 0 has no interface number 0 [ 1019.984254][T10849] usb 1-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 1019.984280][T10849] usb 1-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1019.984303][T10849] usb 1-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 1019.984327][T10849] usb 1-1: config 0 interface 196 has no altsetting 0 [ 1019.994754][T10849] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1019.994779][T10849] usb 1-1: Product: syz [ 1019.994795][T10849] usb 1-1: Manufacturer: syz [ 1019.994810][T10849] usb 1-1: SerialNumber: syz [ 1020.024709][T10849] usb 1-1: config 0 descriptor?? [ 1020.025641][T13895] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1021.257051][T13907] IPVS: set_ctl: invalid protocol: 0 10.1.1.0:20002 [ 1021.257210][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 1021.257276][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1021.309244][T13904] net_ratelimit: 28 callbacks suppressed [ 1021.309262][T13904] IPVS: sh: FWM 3 0x00000003 - no destination available [ 1021.718102][ T9] usb 5-1: USB disconnect, device number 104 [ 1022.708604][T13908] gadgetfs: bound to dummy_udc driver [ 1022.955603][ T5693] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 1022.955837][ C1] gadgetfs: connected [ 1022.957027][ T5693] gadgetfs: disconnected [ 1023.100030][T10849] ipheth 1-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 1023.100240][T10849] ipheth 1-1:0.196: probe with driver ipheth failed with error -71 [ 1023.368448][T10849] usb 1-1: USB disconnect, device number 125 [ 1023.559520][T13920] trusted_key: encrypted_key: insufficient parameters specified [ 1023.943168][T13915] netlink: 11 bytes leftover after parsing attributes in process `syz.4.1698'. [ 1024.127451][ T9934] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 1024.391772][ T9934] usb 3-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 1024.440568][ T9934] usb 3-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 98, changing to 10 [ 1024.440602][ T9934] usb 3-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 26159, setting to 1024 [ 1024.483614][ T9934] usb 3-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 98, changing to 10 [ 1024.483648][ T9934] usb 3-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 26159, setting to 1024 [ 1024.582990][ T9934] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1024.583016][ T9934] usb 3-1: Product: syz [ 1024.583032][ T9934] usb 3-1: Manufacturer: syz [ 1024.583048][ T9934] usb 3-1: SerialNumber: syz [ 1025.300680][T13921] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1025.409746][ T9934] ti_usb_3410_5052 3-1:2.0: TI USB 5052 2 port adapter converter detected [ 1026.235007][ T9934] usb 3-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 1026.248986][ T9934] usb 3-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 1026.952001][T13949] netlink: 'syz.4.1706': attribute type 1 has an invalid length. [ 1026.952021][T13949] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1706'. [ 1027.181508][T13955] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1706'. [ 1027.189353][ T31] audit: type=1800 audit(1788176752.212:1000): pid=13953 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.6.1702" name="file0" dev="overlay" ino=630 res=0 errno=0 [ 1027.245739][ T5721] usb 3-1: USB disconnect, device number 112 [ 1027.795574][ T9934] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 1027.966774][ T5721] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 1028.057092][ T9934] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 1028.111821][T13960] ceph: No mds server is up or the cluster is laggy [ 1028.166703][ T5693] usb 2-1: new low-speed USB device number 119 using dummy_hcd [ 1028.243054][ T5721] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 1028.363763][ T5721] ti_usb_3410_5052 3-1:2.0: device disconnected [ 1028.410094][ T5693] usb 2-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 1028.433906][ T5693] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1028.433947][ T5693] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1028.433982][ T5693] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1028.480059][ T191] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 1028.626230][ T191] usb 5-1: Using ep0 maxpacket: 32 [ 1028.626916][ T191] usb 5-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 1028.629744][ T191] usb 5-1: config 0 has an invalid interface number: 196 but max is 0 [ 1028.629769][ T191] usb 5-1: config 0 has no interface number 0 [ 1028.629805][ T191] usb 5-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 1028.629828][ T191] usb 5-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1028.629850][ T191] usb 5-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 1028.629874][ T191] usb 5-1: config 0 interface 196 has no altsetting 0 [ 1028.639291][ T191] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1028.639315][ T191] usb 5-1: Product: syz [ 1028.639330][ T191] usb 5-1: Manufacturer: syz [ 1028.639346][ T191] usb 5-1: SerialNumber: syz [ 1028.660030][ T191] usb 5-1: config 0 descriptor?? [ 1028.666171][T13970] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1028.793677][ T5693] usb 2-1: config 0 descriptor?? [ 1028.996476][T13974] gadgetfs: bound to dummy_udc driver [ 1029.247705][T10849] usb 1-1: new high-speed USB device number 126 using dummy_hcd [ 1029.250885][ C1] gadgetfs: connected [ 1029.251584][T10849] gadgetfs: disconnected [ 1029.396525][ C1] gadgetfs: connected [ 1029.397833][T10849] usb 1-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 1029.403201][T10849] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1029.433995][ C1] gadgetfs: configuration #1 [ 1030.255838][T13969] gadgetfs: suspended from state 3 [ 1030.262927][ T5693] usbhid 2-1:0.0: can't add hid device: -71 [ 1030.263006][ T5693] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1030.273613][T13969] gadgetfs: disconnected [ 1030.313769][T10849] usb 1-1: can't set config #1, error -71 [ 1030.399761][T10849] usb 1-1: USB disconnect, device number 126 [ 1030.435220][ T191] ipheth 5-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 1030.435459][ T191] ipheth 5-1:0.196: probe with driver ipheth failed with error -71 [ 1030.462009][ T5693] usb 2-1: USB disconnect, device number 119 [ 1030.480874][ T191] usb 5-1: USB disconnect, device number 105 [ 1031.094626][T13983] IPVS: sh: FWM 3 0x00000003 - no destination available [ 1036.624098][T14013] trusted_key: encrypted_key: insufficient parameters specified [ 1037.445631][T10849] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 1037.703880][T14021] overlayfs: conflicting options: nfs_export=on,index=off [ 1037.748678][T10849] usb 3-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 1037.779547][T10849] usb 3-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 98, changing to 10 [ 1037.779580][T10849] usb 3-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 26159, setting to 1024 [ 1037.817285][T10849] usb 3-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 98, changing to 10 [ 1037.817319][T10849] usb 3-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 26159, setting to 1024 [ 1037.897115][T10849] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1037.897143][T10849] usb 3-1: Product: syz [ 1037.897159][T10849] usb 3-1: Manufacturer: syz [ 1037.897174][T10849] usb 3-1: SerialNumber: syz [ 1038.892764][T14015] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1038.965509][T10849] ti_usb_3410_5052 3-1:2.0: TI USB 5052 2 port adapter converter detected [ 1039.099568][ T5693] usb 5-1: new low-speed USB device number 106 using dummy_hcd [ 1039.204530][T10849] usb 3-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 1039.220048][T14031] netlink: 'syz.1.1722': attribute type 1 has an invalid length. [ 1039.220068][T14031] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1722'. [ 1039.236564][ T9764] Bluetooth: hci2: unexpected event for opcode 0x0c7b [ 1039.423947][ T5693] usb 5-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 1039.451093][ T5693] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1039.451127][ T5693] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1039.451159][ T5693] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1039.505205][T10849] usb 3-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 1039.540224][T14034] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1722'. [ 1039.852270][ T5693] usb 5-1: config 0 descriptor?? [ 1039.934185][T10849] usb 3-1: USB disconnect, device number 113 [ 1040.011336][T10849] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 1040.054699][T10849] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 1040.072258][T10849] ti_usb_3410_5052 3-1:2.0: device disconnected [ 1041.240031][ T5693] usbhid 5-1:0.0: can't add hid device: -71 [ 1041.240120][ T5693] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1041.251283][ T5693] usb 5-1: USB disconnect, device number 106 [ 1042.526058][T14067] IPVS: sh: FWM 3 0x00000003 - no destination available [ 1045.150189][ T9764] Bluetooth: hci4: unexpected event for opcode 0x0c7b [ 1046.071601][T14084] trusted_key: encrypted_key: insufficient parameters specified [ 1046.421850][ T5693] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 1046.722553][ T5693] usb 2-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 1046.758008][ T5693] usb 2-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 98, changing to 10 [ 1046.758044][ T5693] usb 2-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 26159, setting to 1024 [ 1046.781691][ T5693] usb 2-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 98, changing to 10 [ 1046.781722][ T5693] usb 2-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 26159, setting to 1024 [ 1047.378930][ T5693] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1047.378948][ T5693] usb 2-1: Product: syz [ 1047.378957][ T5693] usb 2-1: Manufacturer: syz [ 1047.378966][ T5693] usb 2-1: SerialNumber: syz [ 1047.663795][T14085] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1048.570496][ T5693] ti_usb_3410_5052 2-1:2.0: TI USB 5052 2 port adapter converter detected [ 1048.607429][ T5693] usb 2-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 1048.621216][ T5693] usb 2-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 1048.822161][T14108] netlink: 'syz.2.1739': attribute type 1 has an invalid length. [ 1048.822183][T14108] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1739'. [ 1048.900620][T14105] overlayfs: conflicting options: nfs_export=on,index=off [ 1049.023793][T14108] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1739'. [ 1050.169714][ T2259] usb 7-1: new full-speed USB device number 34 using dummy_hcd [ 1050.296165][T10849] usb 2-1: USB disconnect, device number 120 [ 1050.348436][ T2259] usb 7-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 1050.383584][ T2259] usb 7-1: config 0 has an invalid interface number: 52 but max is 0 [ 1050.383639][ T2259] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1050.383659][ T2259] usb 7-1: config 0 has no interface number 0 [ 1050.383684][ T2259] usb 7-1: config 0 interface 52 has no altsetting 0 [ 1050.394242][ T2259] usb 7-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 1050.394268][ T2259] usb 7-1: Manufacturer: syz [ 1050.545086][ T2259] usb 7-1: config 0 descriptor?? [ 1050.576857][ T2259] hub 7-1:0.52: bad descriptor, ignoring hub [ 1050.576884][ T2259] hub 7-1:0.52: probe with driver hub failed with error -5 [ 1051.890734][T10849] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 1052.286344][T10849] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 1052.369791][T10849] ti_usb_3410_5052 2-1:2.0: device disconnected [ 1052.438691][ T2259] usb 7-1: Can not set alternate setting to 1, error: -71 [ 1052.438726][ T2259] synaptics_usb 7-1:0.52: probe with driver synaptics_usb failed with error -71 [ 1052.490973][ T2259] usb 7-1: USB disconnect, device number 34 [ 1054.319136][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.326112][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 1056.000909][T14161] trusted_key: encrypted_key: insufficient parameters specified [ 1056.390803][ T5694] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 1056.550303][ T5694] usb 3-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 1056.554024][ T5694] usb 3-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 98, changing to 10 [ 1056.554111][ T5694] usb 3-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 26159, setting to 1024 [ 1056.559353][ T5694] usb 3-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 98, changing to 10 [ 1056.559419][ T5694] usb 3-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 26159, setting to 1024 [ 1056.570282][ T5694] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1056.570367][ T5694] usb 3-1: Product: syz [ 1056.570448][ T5694] usb 3-1: Manufacturer: syz [ 1056.570517][ T5694] usb 3-1: SerialNumber: syz [ 1056.819428][T14164] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1056.946726][ T5694] ti_usb_3410_5052 3-1:2.0: TI USB 5052 2 port adapter converter detected [ 1057.502004][ T5694] usb 3-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 1057.524939][ T5694] usb 3-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 1057.561219][T10849] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 1057.664538][T14172] ceph: No mds server is up or the cluster is laggy [ 1058.320540][ T31] audit: type=1800 audit(1788176783.202:1001): pid=14191 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.1759" name="file0" dev="overlay" ino=2124 res=0 errno=0 [ 1058.878174][ T9] usb 3-1: USB disconnect, device number 114 [ 1058.890213][ T9] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 1058.905234][ T9] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 1058.917477][ T9] ti_usb_3410_5052 3-1:2.0: device disconnected [ 1059.114542][ T9764] Bluetooth: hci5: unexpected event for opcode 0x0c7b [ 1059.915784][ T9934] usb 1-1: new full-speed USB device number 127 using dummy_hcd [ 1060.491624][T14200] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1766'. [ 1060.548237][ T9934] usb 1-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 1060.609721][ T9934] usb 1-1: config 0 has an invalid interface number: 52 but max is 0 [ 1060.609763][ T9934] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1060.609798][ T9934] usb 1-1: config 0 has no interface number 0 [ 1060.609829][ T9934] usb 1-1: config 0 interface 52 has no altsetting 0 [ 1060.646096][ T9934] usb 1-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 1060.646135][ T9934] usb 1-1: Manufacturer: syz [ 1060.698483][ T9934] usb 1-1: config 0 descriptor?? [ 1060.714959][ T9934] hub 1-1:0.52: bad descriptor, ignoring hub [ 1060.715012][ T9934] hub 1-1:0.52: probe with driver hub failed with error -5 [ 1060.925558][T14196] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1060.935242][T14196] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1061.095500][ T9] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 1061.236147][T14212] netlink: zone id is out of range [ 1061.236348][T14212] netlink: zone id is out of range [ 1061.236607][T14212] netlink: zone id is out of range [ 1061.255929][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 1061.257593][ T9] usb 5-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 1061.262036][ T9] usb 5-1: config 0 has an invalid interface number: 196 but max is 0 [ 1061.262061][ T9] usb 5-1: config 0 has no interface number 0 [ 1061.262096][ T9] usb 5-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 1061.262120][ T9] usb 5-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1061.262142][ T9] usb 5-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 1061.262192][ T9] usb 5-1: config 0 interface 196 has no altsetting 0 [ 1061.274563][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1061.274589][ T9] usb 5-1: Product: syz [ 1061.274604][ T9] usb 5-1: Manufacturer: syz [ 1061.274619][ T9] usb 5-1: SerialNumber: syz [ 1061.282327][ T9] usb 5-1: config 0 descriptor?? [ 1061.284598][T14209] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1061.299449][T14212] netlink: zone id is out of range [ 1061.394983][T14212] netlink: zone id is out of range [ 1061.395127][T14212] netlink: zone id is out of range [ 1061.395162][T14212] netlink: zone id is out of range [ 1061.487646][T14212] netlink: zone id is out of range [ 1061.487735][T14212] netlink: zone id is out of range [ 1061.487871][T14212] netlink: zone id is out of range [ 1061.548844][ T9934] usb 1-1: Can not set alternate setting to 1, error: -71 [ 1061.548923][ T9934] synaptics_usb 1-1:0.52: probe with driver synaptics_usb failed with error -71 [ 1061.597819][ T9934] usb 1-1: USB disconnect, device number 127 [ 1061.855770][T14216] gadgetfs: bound to dummy_udc driver [ 1062.185621][ T9934] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 1062.193521][ C0] gadgetfs: connected [ 1062.193664][ T9934] gadgetfs: disconnected [ 1062.366144][ C0] gadgetfs: connected [ 1062.372557][ T9934] usb 1-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 1062.387453][ T9934] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1062.603689][ C0] gadgetfs: configuration #1 [ 1063.681007][T14225] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1063.681286][T14225] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1063.830692][T14208] gadgetfs: suspended from state 3 [ 1063.830785][T14208] gadgetfs: disconnected [ 1063.843236][ T9934] usb 1-1: can't set config #1, error -71 [ 1063.865847][ T9934] usb 1-1: USB disconnect, device number 2 [ 1063.890700][ T9] ipheth 5-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 1063.890844][ T9] ipheth 5-1:0.196: probe with driver ipheth failed with error -71 [ 1063.921854][ T9] usb 5-1: USB disconnect, device number 107 [ 1066.659119][ T31] audit: type=1800 audit(1788176791.542:1002): pid=14237 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.1772" name="file0" dev="overlay" ino=1998 res=0 errno=0 [ 1067.645147][ T31] audit: type=1400 audit(1788176792.662:1003): avc: denied { create } for pid=14246 comm="syz.4.1778" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 1067.679063][ T31] audit: type=1400 audit(1788176792.702:1004): avc: denied { write } for pid=14246 comm="syz.4.1778" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 1067.798782][ T31] audit: type=1400 audit(1788176792.812:1005): avc: denied { write } for pid=14248 comm="syz.6.1779" name="comms" dev="configfs" ino=35699 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1067.852787][ T31] audit: type=1400 audit(1788176792.872:1006): avc: denied { write } for pid=14248 comm="syz.6.1779" name="comms" dev="configfs" ino=35699 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1068.116748][T14253] trusted_key: encrypted_key: insufficient parameters specified [ 1068.405616][ T5694] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 1068.572183][ T5694] usb 3-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 1068.579751][ T5694] usb 3-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 98, changing to 10 [ 1068.580121][ T5694] usb 3-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 26159, setting to 1024 [ 1068.591744][ T5694] usb 3-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 98, changing to 10 [ 1068.591810][ T5694] usb 3-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 26159, setting to 1024 [ 1068.619787][T14263] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 1068.619818][T14263] CPU: 1 UID: 0 PID: 14263 Comm: syz.4.1784 Tainted: G L syzkaller #0 PREEMPT(full) [ 1068.619851][T14263] Tainted: [L]=SOFTLOCKUP [ 1068.619859][T14263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1068.619874][T14263] Call Trace: [ 1068.619881][T14263] [ 1068.619890][T14263] dump_stack_lvl+0x100/0x190 [ 1068.619929][T14263] sysfs_warn_dup.cold+0x1c/0x28 [ 1068.619963][T14263] sysfs_create_dir_ns+0x24b/0x2b0 [ 1068.619991][T14263] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1068.620015][T14263] ? find_held_lock+0x2b/0x80 [ 1068.620043][T14263] ? kobject_add_internal+0x25f/0x930 [ 1068.620080][T14263] ? kobject_add_internal+0x25f/0x930 [ 1068.620113][T14263] ? class_dir_child_ns_type+0xd/0x60 [ 1068.620139][T14263] kobject_add_internal+0x2c8/0x930 [ 1068.620174][T14263] kobject_add+0x16a/0x1e0 [ 1068.620205][T14263] ? __pfx_kobject_add+0x10/0x10 [ 1068.620237][T14263] ? preempt_schedule_thunk+0x16/0x40 [ 1068.620269][T14263] ? kobject_put+0xb9/0x640 [ 1068.620304][T14263] device_add+0x294/0x1970 [ 1068.620328][T14263] ? lockdep_init_map_type+0x5c/0x250 [ 1068.620352][T14263] ? __pfx_device_add+0x10/0x10 [ 1068.620373][T14263] ? lockdep_init_map_type+0x5c/0x250 [ 1068.620397][T14263] ? __init_waitqueue_head+0xca/0x150 [ 1068.620429][T14263] tty_register_device_attr+0x388/0x7f0 [ 1068.620463][T14263] ? lockdep_init_map_type+0x5c/0x250 [ 1068.620487][T14263] ? __pfx_tty_register_device_attr+0x10/0x10 [ 1068.620526][T14263] ? tty_port_init+0x156/0x1c0 [ 1068.620552][T14263] gsm_activate_mux+0x155/0x2a0 [ 1068.620574][T14263] gsmld_ioctl+0xbbc/0x15c0 [ 1068.620607][T14263] ? __pfx_gsmld_ioctl+0x10/0x10 [ 1068.620653][T14263] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1068.620678][T14263] ? __pfx_pty_unix98_ioctl+0x10/0x10 [ 1068.620709][T14263] ? __pfx_gsmld_ioctl+0x10/0x10 [ 1068.620732][T14263] tty_ioctl+0x11b4/0x1640 [ 1068.620754][T14263] ? __pfx_tty_ioctl+0x10/0x10 [ 1068.620772][T14263] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 1068.620808][T14263] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 1068.620845][T14263] ? __fget_files+0x34/0x3d0 [ 1068.620881][T14263] ? selinux_file_ioctl+0x13b/0x290 [ 1068.620911][T14263] ? selinux_file_ioctl+0xb6/0x290 [ 1068.620944][T14263] ? __pfx_tty_ioctl+0x10/0x10 [ 1068.620966][T14263] __x64_sys_ioctl+0x18e/0x210 [ 1068.621000][T14263] do_syscall_64+0x123/0x790 [ 1068.621027][T14263] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1068.621050][T14263] RIP: 0033:0x7f6ab899e159 [ 1068.621077][T14263] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1068.621098][T14263] RSP: 002b:00007f6ab9904028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1068.621120][T14263] RAX: ffffffffffffffda RBX: 00007f6ab8c26180 RCX: 00007f6ab899e159 [ 1068.621134][T14263] RDX: 0000200000000040 RSI: 00000000404c4701 RDI: 0000000000000006 [ 1068.621148][T14263] RBP: 00007f6ab8a35024 R08: 0000000000000000 R09: 0000000000000000 [ 1068.621161][T14263] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1068.621174][T14263] R13: 00007f6ab8c26218 R14: 00007f6ab8c26180 R15: 00007fffe608e4a8 [ 1068.621204][T14263] [ 1068.621330][T14263] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 1068.740662][ T5694] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1068.740695][ T5694] usb 3-1: Product: syz [ 1068.740734][ T5694] usb 3-1: Manufacturer: syz [ 1068.740779][ T5694] usb 3-1: SerialNumber: syz [ 1069.305708][T14254] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1069.400651][ T5694] ti_usb_3410_5052 3-1:2.0: TI USB 5052 2 port adapter converter detected [ 1069.895880][ T5694] usb 3-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 1069.909206][ T5694] usb 3-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 1070.815316][ T31] audit: type=1400 audit(1788176795.832:1007): avc: denied { create } for pid=14272 comm="syz.0.1785" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 1070.850126][ T31] audit: type=1400 audit(1788176795.842:1008): avc: denied { connect } for pid=14272 comm="syz.0.1785" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1071.166229][ T5694] usb 3-1: USB disconnect, device number 115 [ 1071.538495][ T5694] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 1071.560216][ T5694] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 1071.571432][ T5694] ti_usb_3410_5052 3-1:2.0: device disconnected [ 1071.740724][ T31] audit: type=1800 audit(1788176796.762:1009): pid=14280 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.1787" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 1071.764684][ T5721] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 1071.929386][ T5721] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1071.941794][ T5721] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1071.952196][ T5721] usb 7-1: config 0 descriptor?? [ 1071.964299][ T5721] cp210x 7-1:0.0: cp210x converter detected [ 1072.200304][ T5721] cp210x 7-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 1072.207993][ T5721] cp210x 7-1:0.0: querying part number failed [ 1072.224476][ T5721] usb 7-1: cp210x converter now attached to ttyUSB0 [ 1072.412427][ T5721] usb 7-1: USB disconnect, device number 35 [ 1072.424313][ T5721] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1072.435676][ T5721] cp210x 7-1:0.0: device disconnected [ 1072.529332][T14289] netlink: 'syz.4.1791': attribute type 1 has an invalid length. [ 1072.785134][T14298] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 [ 1073.005361][ T5721] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 1073.166432][ T5721] usb 5-1: Using ep0 maxpacket: 32 [ 1073.172582][ T5721] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1073.182996][ T5721] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1073.183055][ T5721] usb 5-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1073.183101][ T5721] usb 5-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1073.183130][ T5721] usb 5-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1073.233485][ T5721] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1073.233532][ T5721] usb 5-1: Product: syz [ 1073.233567][ T5721] usb 5-1: Manufacturer: syz [ 1073.233585][ T5721] usb 5-1: SerialNumber: syz [ 1073.293555][ C1] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1073.301837][T10849] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 1073.361511][ T5721] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/input/input60 [ 1073.512731][T14310] jffs2: notice: (14310) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1073.587841][T10849] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 1073.634765][T10849] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1073.634975][T10849] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 1073.635066][T10849] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1073.778391][T10849] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1073.778419][T10849] usb 7-1: Product: syz [ 1073.778437][T10849] usb 7-1: Manufacturer: syz [ 1073.806095][ T5721] imon 5-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1073.806114][ T5721] (id 0x00) [ 1073.810282][T14305] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1073.853254][T10849] garmin_gps 7-1:1.0: Garmin GPS usb/tty converter detected [ 1073.863371][T10849] usb 7-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 1073.997169][ T5721] rc_core: IR keymap rc-imon-pad not found [ 1073.997197][ T5721] Registered IR keymap rc-empty [ 1073.997309][ T5721] imon 5-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1073.997328][ T5721] imon 5-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1074.016712][ T5721] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/rc/rc0 [ 1074.064238][ T5721] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/rc/rc0/input61 [ 1074.154601][ T31] audit: type=1400 audit(1788176799.172:1010): avc: denied { watch watch_reads } for pid=14315 comm="syz.1.1801" path="/372/file0" dev="tmpfs" ino=2187 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1074.154904][ T5721] imon 5-1:155.0: iMON device (15c2:ffdc, intf0) on usb<5:108> initialized [ 1074.225425][ T5721] usb 7-1: USB disconnect, device number 36 [ 1074.274423][ T5721] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 1074.275020][ T5721] garmin_gps 7-1:1.0: device disconnected [ 1074.280419][T10849] usb 5-1: USB disconnect, device number 108 [ 1076.364004][ T31] audit: type=1400 audit(1788176801.382:1011): avc: denied { bind } for pid=14322 comm="syz.1.1804" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1076.368666][ T31] audit: type=1400 audit(1788176801.382:1012): avc: denied { setopt } for pid=14322 comm="syz.1.1804" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1077.096918][ T31] audit: type=1400 audit(1788176801.742:1013): avc: denied { write } for pid=14327 comm="syz.6.1806" name="ptp0" dev="devtmpfs" ino=1264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1078.638463][T14340] No such timeout policy "syz1" [ 1078.798871][ T31] audit: type=1804 audit(1788176803.822:1014): pid=14342 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.2.1809" name="/newroot/383/bus/bus" dev="overlay" ino=2313 res=1 errno=0 [ 1079.246591][T14352] sg_write: data in/out 366944/136 bytes for SCSI command 0x0-- guessing data in; [ 1079.246591][T14352] program syz.0.1810 not setting count and/or reply_len properly [ 1079.253336][ T31] audit: type=1400 audit(1788176804.262:1015): avc: denied { append } for pid=14344 comm="syz.0.1810" name="sg0" dev="devtmpfs" ino=1100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1079.798703][ T31] audit: type=1400 audit(1788176804.822:1016): avc: denied { write } for pid=14357 comm="syz.4.1814" name="functions" dev="configfs" ino=7768 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1079.893341][ T31] audit: type=1400 audit(1788176804.912:1017): avc: denied { write } for pid=14357 comm="syz.4.1814" name="target" dev="configfs" ino=3089 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1079.947230][ T31] audit: type=1400 audit(1788176804.962:1018): avc: denied { write } for pid=14357 comm="syz.4.1814" name="usb_gadget" dev="configfs" ino=44206 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1081.214197][T14373] netlink: 'syz.4.1817': attribute type 4 has an invalid length. [ 1081.232972][T14375] netlink: 'syz.1.1820': attribute type 7 has an invalid length. [ 1081.233009][T14375] netlink: 'syz.1.1820': attribute type 8 has an invalid length. [ 1081.979287][ T31] audit: type=1400 audit(1788176806.552:1019): avc: denied { connect } for pid=14377 comm="syz.0.1821" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1082.483789][ T31] audit: type=1400 audit(1788176807.502:1020): avc: denied { getopt } for pid=14383 comm="syz.1.1822" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1082.571615][T14397] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1822'. [ 1082.607744][T14397] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1822'. [ 1082.685526][ T9] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 1082.857607][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 1082.873866][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1082.873928][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1082.900975][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1082.901023][ T9] usb 1-1: SerialNumber: syz [ 1083.041753][ T9] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 1083.069798][ T9] usb-storage 1-1:1.0: USB Mass Storage device detected [ 1083.708831][ T9] usb-storage 1-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 1083.725014][ T9] scsi host1: usb-storage 1-1:1.0 [ 1084.275362][T10849] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 1084.426471][T10849] usb 2-1: Using ep0 maxpacket: 32 [ 1084.427435][T10849] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 1084.431824][T10849] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1084.431847][T10849] usb 2-1: config 0 has no interface number 0 [ 1084.433757][T10849] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1084.433781][T10849] usb 2-1: Product: syz [ 1084.433796][T10849] usb 2-1: Manufacturer: syz [ 1084.433812][T10849] usb 2-1: SerialNumber: syz [ 1084.444453][T10849] usb 2-1: config 0 descriptor?? [ 1084.458594][T10849] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1084.458623][T10849] usb 2-1: selecting invalid altsetting 1 [ 1084.458640][T10849] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1084.520841][T10849] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1084.521267][T10849] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1084.521309][T10849] usb 2-1: media controller created [ 1084.613205][T10849] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1084.790978][T10849] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 1084.791094][T10849] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1084.791757][T10849] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1084.822373][T14412] Driver unsupported XDP return value 0 on prog (id 180) dev N/A, expect packet loss! [ 1085.058394][T10849] usb 2-1: USB disconnect, device number 121 [ 1085.152488][ T5694] usb 1-1: USB disconnect, device number 3 [ 1085.236037][ T5721] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 1085.285397][ T9] usb 7-1: new full-speed USB device number 37 using dummy_hcd [ 1085.370219][ T31] audit: type=1400 audit(1788176810.372:1021): avc: denied { ioctl } for pid=14427 comm="syz.4.1835" path="socket:[44320]" dev="sockfs" ino=44320 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1085.386046][ T5721] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1085.386944][ T5721] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1085.386983][ T5721] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1085.398363][ T5721] usb 3-1: config 0 descriptor?? [ 1085.478836][ T9] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1085.491988][ T9] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 1085.492035][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 1085.492108][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1085.501529][ T31] audit: type=1400 audit(1788176810.522:1022): avc: denied { append } for pid=14431 comm="syz.4.1836" name="nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1085.551233][ T9] usb 7-1: config 0 descriptor?? [ 1085.558622][ T9934] hid-generic 0000:0000:0000.0034: unknown main item tag 0x0 [ 1085.573031][ T9934] hid-generic 0000:0000:0000.0034: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1085.629772][ T5721] usbhid 3-1:0.0: can't add hid device: -71 [ 1085.629866][ T5721] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1085.640153][ T5721] usb 3-1: USB disconnect, device number 116 [ 1085.893348][T14438] fido_id[14438]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1086.169110][ T5721] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 1086.330031][ T5721] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 1086.331812][ T5721] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1086.331855][ T5721] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1086.341903][ T5721] usb 3-1: config 0 descriptor?? [ 1086.417804][ T9] ath6kl: Failed to submit usb control message: -71 [ 1086.417864][ T9] ath6kl: unable to send the bmi data to the device: -71 [ 1086.417901][ T9] ath6kl: Unable to send get target info: -71 [ 1086.434569][ T9] ath6kl: Failed to init ath6kl core: -71 [ 1086.451478][ T9] ath6kl_usb 7-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1086.455175][ T9] usb 7-1: USB disconnect, device number 37 [ 1087.316579][ T5721] aiptek 3-1:0.0: Aiptek using 400 ms programming speed [ 1087.326517][ T5721] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input62 [ 1087.865494][ T5721] usb 5-1: new full-speed USB device number 109 using dummy_hcd [ 1088.039517][ T5721] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1088.080768][ T5721] usb 5-1: config 255 has an invalid interface number: 8 but max is 0 [ 1088.090296][ T5721] usb 5-1: config 255 has no interface number 0 [ 1088.098220][ T5721] usb 5-1: config 255 interface 8 altsetting 0 has an endpoint descriptor with address 0x57, changing to 0x7 [ 1088.110779][ T5721] usb 5-1: config 255 interface 8 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 10 [ 1088.110842][ T5721] usb 5-1: config 255 interface 8 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1088.198873][ T5721] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1088.208639][ T5721] usb 5-1: Product: syz [ 1088.208667][ T5721] usb 5-1: SerialNumber: syz [ 1088.591574][ C1] aiptek 3-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 1088.591663][T10849] usb 3-1: USB disconnect, device number 117 [ 1088.652813][ T5721] usbhid 5-1:255.8: couldn't find an input interrupt endpoint [ 1088.677957][ T5721] usb 5-1: USB disconnect, device number 109 [ 1088.989503][ T31] audit: type=1400 audit(1788176814.002:1023): avc: denied { setopt } for pid=14471 comm="syz.0.1850" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1089.620501][ T31] audit: type=1326 audit(1788176814.542:1024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14485 comm="syz.1.1853" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f115539e159 code=0x0 [ 1090.034048][T14492] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1856'. [ 1090.847063][ T31] audit: type=1400 audit(1788176815.872:1025): avc: denied { write } for pid=14507 comm="syz.1.1863" name="functions" dev="configfs" ino=7768 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1090.866341][ T31] audit: type=1400 audit(1788176815.882:1026): avc: denied { append } for pid=14507 comm="syz.1.1863" name="id" dev="configfs" ino=45976 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 1090.990017][ T31] audit: type=1400 audit(1788176816.012:1027): avc: denied { write } for pid=14507 comm="syz.1.1863" name="configs" dev="configfs" ino=7769 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1091.017148][ T31] audit: type=1400 audit(1788176816.042:1028): avc: denied { write } for pid=14507 comm="syz.1.1863" name="c.1" dev="configfs" ino=45979 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1091.045302][ T31] audit: type=1400 audit(1788176816.072:1029): avc: denied { create } for pid=14507 comm="syz.1.1863" name="midi.usb0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=lnk_file permissive=1 [ 1091.081627][ T31] audit: type=1400 audit(1788176816.102:1030): avc: denied { read } for pid=14507 comm="syz.1.1863" name="id" dev="configfs" ino=45976 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 1091.124406][ T31] audit: type=1800 audit(1788176816.142:1031): pid=14512 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.1863" name="id" dev="configfs" ino=45976 res=0 errno=0 [ 1091.153778][ T31] audit: type=1400 audit(1788176816.172:1032): avc: denied { write } for pid=14507 comm="syz.1.1863" name="c.1" dev="configfs" ino=45979 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1091.651529][T14521] kAFS: bad VL server IP address [ 1092.005404][ T5694] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 1092.156041][ T5694] usb 7-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 1092.167680][ T5694] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1092.167739][ T5694] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1092.167774][ T5694] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1092.167801][ T5694] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1092.167843][ T5694] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1092.486477][ T9934] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 1092.651452][ T9934] usb 1-1: New USB device found, idVendor=2040, idProduct=4200, bcdDevice= 1.00 [ 1092.658500][ T9934] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 97, changing to 7 [ 1092.658534][ T9934] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 24929, setting to 1024 [ 1092.658572][ T9934] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1092.702680][ T9934] em28xx 1-1:1.0: New device @ 480 Mbps (2040:4200, interface 0, class 0) [ 1092.702723][ T9934] em28xx 1-1:1.0: Video interface 0 found: isoc [ 1092.925786][ T9934] em28xx 1-1:1.0: unknown em28xx chip ID (0) [ 1093.046920][ T9934] em28xx 1-1:1.0: reading from i2c device at 0xa0 failed (error=-5) [ 1093.046975][ T9934] em28xx 1-1:1.0: board has no eeprom [ 1093.105401][ T9934] em28xx 1-1:1.0: Identified as Hauppauge WinTV USB 2 (card=4) [ 1093.105443][ T9934] em28xx 1-1:1.0: analog set to isoc mode. [ 1093.124996][ T9934] usb 1-1: USB disconnect, device number 4 [ 1093.142580][ T9934] em28xx 1-1:1.0: Disconnecting em28xx [ 1093.153106][ T9] em28xx 1-1:1.0: Registering V4L2 extension [ 1093.315002][ T5694] gud 7-1:1.0: USB-1: Failed to add properties (ret=-5) [ 1093.322195][ T5694] gud 7-1:1.0: Failed to get connectors (error=-5) [ 1093.322226][ T5694] gud 7-1:1.0: probe with driver gud failed with error -5 [ 1093.526072][ T191] usb 7-1: USB disconnect, device number 38 [ 1093.708907][ T9] em28xx 1-1:1.0: Config register raw data: 0xffffffed [ 1093.708954][ T9] em28xx 1-1:1.0: AC97 chip type couldn't be determined [ 1093.708997][ T9] em28xx 1-1:1.0: No AC97 audio processor [ 1093.709246][ T9] em28xx 1-1:1.0: em28xx_v4l2_init: em28xx_write_reg - msp34xx(1) failed! error [-19] [ 1093.709446][ T9] em28xx 1-1:1.0: Registering input extension [ 1093.908020][ T9] rc_core: IR keymap rc-hauppauge not found [ 1093.908049][ T9] Registered IR keymap rc-empty [ 1094.071606][ T9] rc rc0: Hauppauge WinTV USB 2 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/rc/rc0 [ 1094.118096][ T9] input: Hauppauge WinTV USB 2 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/rc/rc0/input63 [ 1094.129810][ T31] kauditd_printk_skb: 27 callbacks suppressed [ 1094.129827][ T31] audit: type=1400 audit(1788176819.162:1060): avc: denied { unmount } for pid=5615 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 1094.375018][ T9] em28xx 1-1:1.0: Input extension successfully initialized [ 1094.380328][ T9934] em28xx 1-1:1.0: Closing input extension [ 1094.865005][T14597] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1895'. [ 1094.865058][T14597] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1895'. [ 1094.889788][T14597] geneve2: entered allmulticast mode [ 1095.136332][ T9934] em28xx: Freeing device [ 1095.828021][ T5694] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 1095.979238][ T5694] usb 7-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 1096.486438][ T5694] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1096.486475][ T5694] usb 7-1: Product: syz [ 1096.486491][ T5694] usb 7-1: Manufacturer: syz [ 1096.486505][ T5694] usb 7-1: SerialNumber: syz [ 1096.520415][ T5694] ums-karma 7-1:1.0: USB Mass Storage device detected [ 1096.529944][ T5694] ums-karma 7-1:1.0: This device (045a,5210,0101 S 06 P f5) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller) [ 1096.529944][ T5694] Please send a copy of this message to and [ 1096.939228][ T5694] scsi host1: usb-storage 7-1:1.0 [ 1097.038218][ T31] audit: type=1400 audit(1788176822.062:1061): avc: denied { bind } for pid=14590 comm="syz.4.1892" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1097.038281][ T31] audit: type=1400 audit(1788176822.062:1062): avc: denied { name_bind } for pid=14590 comm="syz.4.1892" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 1097.038319][ T31] audit: type=1400 audit(1788176822.062:1063): avc: denied { node_bind } for pid=14590 comm="syz.4.1892" saddr=fe80::28 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 1097.158660][ T5694] usb 7-1: USB disconnect, device number 39 [ 1097.244941][ T31] audit: type=1400 audit(1788176822.262:1064): avc: denied { write } for pid=14619 comm="syz.1.1902" name="cluster" dev="configfs" ino=89 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1097.274899][ T31] audit: type=1400 audit(1788176822.292:1065): avc: denied { write } for pid=14619 comm="syz.1.1902" name="node" dev="configfs" ino=46157 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1097.339124][T14622] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1903'. [ 1097.526783][ T31] audit: type=1400 audit(1788176822.552:1066): avc: denied { unmount } for pid=5598 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1097.918443][T14632] ip6gretap1: entered allmulticast mode [ 1097.922525][T14632] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 1097.927203][T14632] batman_adv: batadv0: Adding interface: ip6gretap1 [ 1097.927254][T14632] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1097.928092][T14632] batman_adv: batadv0: Interface activated: ip6gretap1 [ 1097.938630][ T31] audit: type=1400 audit(1788176822.902:1067): avc: denied { read } for pid=14628 comm="syz.1.1905" dev="sockfs" ino=46170 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1098.262777][T14633] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1906'. [ 1098.593202][T14640] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1909'. [ 1099.375383][T10849] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 1099.526264][T10849] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1099.527177][T10849] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1099.527218][T10849] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1099.549818][T10849] usb 3-1: config 0 descriptor?? [ 1099.765401][T10849] usbhid 3-1:0.0: can't add hid device: -71 [ 1099.765515][T10849] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1099.772812][T10849] usb 3-1: USB disconnect, device number 118 [ 1099.945364][ T9] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 1100.095794][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1100.096716][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1100.096756][ T9] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1100.098496][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1100.098518][ T9] usb 2-1: Product: syz [ 1100.098533][ T9] usb 2-1: Manufacturer: syz [ 1100.098549][ T9] usb 2-1: SerialNumber: syz [ 1100.109110][ T9] cdc_mbim 2-1:1.0: skipping garbage [ 1100.234496][ T191] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 1100.261444][T14675] kAFS: No cell specified [ 1100.326090][T14669] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1100.948694][ T191] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 1101.056730][ T191] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1101.056790][ T191] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1101.110091][ T191] usb 3-1: config 0 descriptor?? [ 1101.117944][T14669] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1101.119165][ T9] cdc_mbim 2-1:1.0: setting tx_max = 16384 [ 1101.126083][ T9] cdc_mbim 2-1:1.0: cdc-wdm0: USB WDM device [ 1101.138122][ T9] wwan wwan0: port wwan0mbim0 attached [ 1101.155978][ T9] cdc_mbim 2-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.1-1, CDC MBIM, 12:81:03:d7:eb:0b [ 1101.364381][T10849] usb 2-1: USB disconnect, device number 122 [ 1101.375925][T10849] cdc_mbim 2-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.1-1, CDC MBIM [ 1101.434143][ T9764] Bluetooth: hci5: unexpected event for opcode 0x1405 [ 1101.507869][T10849] wwan wwan0: port wwan0mbim0 disconnected [ 1101.537841][ T31] audit: type=1400 audit(1788176826.562:1068): avc: denied { write } for pid=14686 comm="syz.6.1927" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1101.684668][T14695] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=14695 comm=syz.6.1928 [ 1101.937351][ T191] aiptek 3-1:0.0: Aiptek using 400 ms programming speed [ 1101.939918][ T191] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input64 [ 1102.082846][T14708] netlink: 'syz.4.1933': attribute type 1 has an invalid length. [ 1102.190666][T14708] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1102.248766][T14712] bridge1: entered promiscuous mode [ 1102.269627][T10849] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 1102.282170][T14712] bond2: (slave bridge1): making interface the new active one [ 1102.293005][T14712] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 1102.332908][ T191] usb 3-1: USB disconnect, device number 119 [ 1102.333022][ C0] aiptek 3-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 1102.369560][ T31] audit: type=1400 audit(1788176827.392:1069): avc: denied { write } for pid=14682 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1102.425347][T10849] usb 2-1: Using ep0 maxpacket: 32 [ 1102.431136][T10849] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1102.441345][T10849] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 1102.441385][T10849] usb 2-1: config 0 has no interface number 0 [ 1102.457546][T10849] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1102.457586][T10849] usb 2-1: Product: syz [ 1102.457617][T10849] usb 2-1: Manufacturer: syz [ 1102.457634][T10849] usb 2-1: SerialNumber: syz [ 1102.485192][T10849] usb 2-1: config 0 descriptor?? [ 1102.495455][T10849] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1102.619038][ T31] audit: type=1400 audit(1788176827.642:1070): avc: denied { write } for pid=14717 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1102.737875][T10849] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1102.774531][T10849] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1103.363723][T14730] binder: 14723:14730 ioctl c018620c 200000000240 returned -22 [ 1103.745043][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1103.766697][ T5721] usb 2-1: USB disconnect, device number 123 [ 1103.923759][ T5721] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1103.970701][ T5721] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1103.982759][ T5721] quatech2 2-1:0.51: device disconnected [ 1105.674655][T14752] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1941'. [ 1105.674733][T14752] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1941'. [ 1106.055499][ T31] audit: type=1400 audit(1788176831.042:1071): avc: denied { write } for pid=14726 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1106.123455][ T31] audit: type=1400 audit(1788176831.142:1072): avc: denied { write } for pid=14767 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1106.745601][ T5721] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 1106.766167][ T31] audit: type=1400 audit(1788176831.792:1073): avc: denied { mounton } for pid=14788 comm="syz.0.1955" path="/proc/1415/task" dev="proc" ino=47364 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 1106.895983][ T5721] usb 7-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1106.907710][ T5721] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1106.907751][ T5721] usb 7-1: config 0 has no interface number 0 [ 1106.924096][ T5721] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1106.932306][ T5721] usb 7-1: Product: syz [ 1106.936784][ T5721] usb 7-1: Manufacturer: syz [ 1106.941467][ T5721] usb 7-1: SerialNumber: syz [ 1106.952986][ T5721] usb 7-1: config 0 descriptor?? [ 1106.956103][ T31] audit: type=1400 audit(1788176831.982:1074): avc: denied { associate } for pid=14793 comm="syz.0.1955" name="core" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1107.006307][ T191] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 1107.168238][ T191] usb 3-1: New USB device found, idVendor=0584, idProduct=0008, bcdDevice= 1.02 [ 1107.176245][ T191] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1107.176302][ T191] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1107.200743][ T5721] usb 7-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1107.208508][ T191] ums-alauda 3-1:1.0: USB Mass Storage device detected [ 1107.219065][ T5721] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1107.219252][ T5721] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1107.240531][ T5721] usb 7-1: media controller created [ 1107.315221][ T5721] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1107.408556][ T5721] i2c i2c-2: ec100: i2c rd failed=-71 reg=33 [ 1107.418814][ T191] usb 3-1: USB disconnect, device number 120 [ 1107.542768][ T5721] usb 7-1: USB disconnect, device number 40 [ 1107.986630][ T5721] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 1108.103617][ T31] audit: type=1400 audit(1788176833.122:1075): avc: denied { mount } for pid=14816 comm="syz.2.1966" name="/" dev="autofs" ino=47395 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 1108.149531][ T5721] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1108.151746][ T5721] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1108.151788][ T5721] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1108.170042][ T5721] usb 5-1: config 0 descriptor?? [ 1108.383073][ T5721] usbhid 5-1:0.0: can't add hid device: -71 [ 1108.383178][ T5721] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1108.388973][ T5721] usb 5-1: USB disconnect, device number 110 [ 1108.529568][T14825] o2cb: This node has not been configured. [ 1108.530080][T14825] o2cb: Cluster check failed. Fix errors before retrying. [ 1108.530253][T14825] (syz.0.1968,14825,0):user_dlm_register:674 ERROR: status = -22 [ 1108.530311][T14825] (syz.0.1968,14825,0):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file1" [ 1108.534320][ T31] audit: type=1400 audit(1788176833.542:1076): avc: denied { write } for pid=14819 comm="syz.0.1968" name="/" dev="ocfs2_dlmfs" ino=46468 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1108.534548][ T31] audit: type=1400 audit(1788176833.542:1077): avc: denied { add_name } for pid=14819 comm="syz.0.1968" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1108.534701][ T31] audit: type=1400 audit(1788176833.552:1078): avc: denied { create } for pid=14819 comm="syz.0.1968" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 1108.540999][ T31] audit: type=1400 audit(1788176833.552:1079): avc: denied { associate } for pid=14819 comm="syz.0.1968" name="file1" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1108.813051][ T31] audit: type=1400 audit(1788176833.832:1080): avc: denied { read } for pid=14826 comm="syz.2.1969" name="/" dev="configfs" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1108.813118][ T31] audit: type=1400 audit(1788176833.832:1081): avc: denied { read open } for pid=14826 comm="syz.2.1969" path="/" dev="configfs" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1109.466194][ T5721] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 1109.715841][ T5721] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 1109.717050][ T5721] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1109.717092][ T5721] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1109.719417][ T5721] usb 5-1: config 0 descriptor?? [ 1110.431023][ T31] audit: type=1400 audit(1788176835.162:1082): avc: denied { connect } for pid=14843 comm="syz.2.1976" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1110.716114][ T9] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 1110.879480][ T9] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 1110.889848][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1110.889905][ T9] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 1110.889942][ T9] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1110.925395][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1110.925433][ T9] usb 2-1: Product: syz [ 1110.925463][ T9] usb 2-1: Manufacturer: syz [ 1110.944112][ T5721] aiptek 5-1:0.0: Aiptek using 400 ms programming speed [ 1110.986323][ T5721] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input65 [ 1111.010229][T14849] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1111.015902][ T5721] usb 5-1: USB disconnect, device number 111 [ 1111.016011][ C1] aiptek 5-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 1111.518573][ T9] garmin_gps 2-1:1.0: Garmin GPS usb/tty converter detected [ 1111.539428][ T9] usb 2-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 1111.581864][ T9] usb 2-1: USB disconnect, device number 124 [ 1111.748955][ T9] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 1111.749594][ T9] garmin_gps 2-1:1.0: device disconnected [ 1112.764342][T14885] FAULT_INJECTION: forcing a failure. [ 1112.764342][T14885] name failslab, interval 1, probability 1, space 0, times 0 [ 1112.764392][T14885] CPU: 0 UID: 0 PID: 14885 Comm: syz.1.1989 Tainted: G L syzkaller #0 PREEMPT(full) [ 1112.764422][T14885] Tainted: [L]=SOFTLOCKUP [ 1112.764430][T14885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1112.764443][T14885] Call Trace: [ 1112.764451][T14885] [ 1112.764460][T14885] dump_stack_lvl+0x100/0x190 [ 1112.764495][T14885] should_fail_ex.cold+0x5/0xa [ 1112.764524][T14885] should_failslab+0xc2/0x120 [ 1112.764550][T14885] __kmalloc_noprof+0xfc/0x840 [ 1112.764570][T14885] ? tomoyo_profile+0x47/0x60 [ 1112.764593][T14885] ? tomoyo_supervisor+0x65d/0x1340 [ 1112.764622][T14885] tomoyo_supervisor+0x65d/0x1340 [ 1112.764653][T14885] ? __pfx_tomoyo_supervisor+0x10/0x10 [ 1112.764693][T14885] ? tomoyo_realpath_from_path+0x19c/0x690 [ 1112.764721][T14885] ? tomoyo_check_path_number_acl+0x1e6/0x2f0 [ 1112.764760][T14885] tomoyo_path_number_perm+0x445/0x580 [ 1112.764792][T14885] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1112.764823][T14885] ? __pfx_futex_wait+0x10/0x10 [ 1112.764861][T14885] ? __lock_acquire+0x4c5/0x1ec0 [ 1112.764897][T14885] ? __fget_files+0x34/0x3d0 [ 1112.764921][T14885] ? find_held_lock+0x2b/0x80 [ 1112.764948][T14885] ? hook_file_ioctl_common+0x140/0x440 [ 1112.764979][T14885] ? __fget_files+0x21f/0x3d0 [ 1112.765008][T14885] security_file_ioctl+0xd3/0x230 [ 1112.765040][T14885] __x64_sys_ioctl+0xb7/0x210 [ 1112.765075][T14885] do_syscall_64+0x123/0x790 [ 1112.765109][T14885] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1112.765133][T14885] RIP: 0033:0x7f115539e159 [ 1112.765151][T14885] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1112.765171][T14885] RSP: 002b:00007f1156290028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1112.765193][T14885] RAX: ffffffffffffffda RBX: 00007f1155625fa0 RCX: 00007f115539e159 [ 1112.765207][T14885] RDX: 0000200000000180 RSI: 00000000c0145608 RDI: 0000000000000004 [ 1112.765221][T14885] RBP: 00007f1155435024 R08: 0000000000000000 R09: 0000000000000000 [ 1112.765234][T14885] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1112.765248][T14885] R13: 00007f1155626038 R14: 00007f1155625fa0 R15: 00007fffce641d48 [ 1112.765276][T14885] [ 1113.065983][T14899] mac80211_hwsim hwsim2 syzkaller0: left promiscuous mode [ 1113.073232][T14899] mac80211_hwsim hwsim2 syzkaller0: left allmulticast mode [ 1113.197025][ T5721] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 1113.476920][ T5721] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1113.478051][ T5721] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1113.478089][ T5721] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1113.478111][ T5721] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1113.478154][ T5721] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1113.480156][ T5721] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1113.480183][ T5721] usb 5-1: Product: syz [ 1113.480211][ T5721] usb 5-1: Manufacturer: syz [ 1113.508625][ T5721] cdc_wdm 5-1:1.0: skipping garbage [ 1113.508644][ T5721] cdc_wdm 5-1:1.0: skipping garbage [ 1113.516353][ T5721] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 1113.516372][ T5721] cdc_wdm 5-1:1.0: Unknown control protocol [ 1113.581883][ T31] audit: type=1400 audit(1788176838.572:1083): avc: denied { kexec_image_load } for pid=14911 comm="syz.1.1999" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 1113.732550][ T31] audit: type=1400 audit(1788176838.752:1084): avc: denied { read write } for pid=14892 comm="syz.4.1993" name="cdc-wdm0" dev="devtmpfs" ino=4799 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 1113.732623][ T31] audit: type=1400 audit(1788176838.752:1085): avc: denied { open } for pid=14892 comm="syz.4.1993" path="/dev/cdc-wdm0" dev="devtmpfs" ino=4799 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 1113.794184][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1113.794391][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1113.797005][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1113.797030][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1113.797225][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1113.797246][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1113.797334][ T5721] usb 5-1: USB disconnect, device number 112 [ 1113.797443][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1113.797466][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1113.797485][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1113.947992][ T31] audit: type=1400 audit(1788176838.972:1086): avc: denied { view } for pid=14917 comm="syz.2.2001" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 1114.010447][T13004] IPVS: starting estimator thread 0... [ 1114.010990][T14921] tipc: Started in network mode [ 1114.011015][T14921] tipc: Node identity ac1414aa, cluster identity 4711 [ 1114.013160][T14921] net_ratelimit: 9 callbacks suppressed [ 1114.013175][T14921] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1114.013245][T14921] tipc: Enabled bearer , priority 10 [ 1114.140500][T14922] IPVS: using max 45 ests per chain, 108000 per kthread [ 1114.148440][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1114.272813][T14932] block nbd1: shutting down sockets [ 1114.285348][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1114.329783][ T31] audit: type=1400 audit(1788176839.352:1087): avc: denied { set_context_mgr } for pid=14934 comm="syz.1.2008" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1114.358693][ T31] audit: type=1400 audit(1788176839.382:1088): avc: denied { map } for pid=14934 comm="syz.1.2008" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1114.384069][ T31] audit: type=1400 audit(1788176839.402:1089): avc: denied { call } for pid=14934 comm="syz.1.2008" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1114.425363][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1114.565403][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1114.705361][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1114.845371][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1114.995340][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1115.117139][ T9] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 1115.267594][ T9] usb 3-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 1115.271454][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1115.271527][ T9] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1115.294754][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1115.294824][ T9] usb 3-1: Product: syz [ 1115.294869][ T9] usb 3-1: Manufacturer: syz [ 1115.294915][ T9] usb 3-1: SerialNumber: syz [ 1115.532362][ T5721] tipc: Node number set to 2886997162 [ 1115.565337][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1115.768460][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.768556][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 1115.845488][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1115.927359][ T9] usblp 3-1:1.0: usblp0: USB Bidirectional printer dev 121 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 1116.258736][ T9934] usb 3-1: USB disconnect, device number 121 [ 1116.268249][ T9934] usblp0: removed [ 1116.483153][ T31] audit: type=1400 audit(1788176841.502:1090): avc: denied { getopt } for pid=14964 comm="syz.1.2019" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1116.697264][T14973] netlink: 'syz.1.2022': attribute type 13 has an invalid length. [ 1117.795223][T14990] lo: entered promiscuous mode [ 1117.906974][T14990] tunl0: entered promiscuous mode [ 1117.919530][T14990] gre0: entered promiscuous mode [ 1117.947216][T14990] gretap0: entered promiscuous mode [ 1118.003195][T14991] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2028'. [ 1118.021373][T14990] erspan0: entered promiscuous mode [ 1118.049022][T14990] ip_vti0: entered promiscuous mode [ 1118.086908][T14990] ip6_vti0: entered promiscuous mode [ 1118.117774][T14990] sit0: entered promiscuous mode [ 1118.208714][T14990] ip6tnl0: entered promiscuous mode [ 1118.230028][T14990] ip6gre0: entered promiscuous mode [ 1118.343697][T14990] syz_tun: entered promiscuous mode [ 1118.370456][T14990] ip6gretap0: entered promiscuous mode [ 1118.439961][T14990] bridge0: port 2(bridge_slave_1) entered disabled state [ 1118.441783][T14990] bridge0: port 1(bridge_slave_0) entered disabled state [ 1118.490382][T14990] bridge0: entered promiscuous mode [ 1118.550333][T14990] vcan0: entered promiscuous mode [ 1118.577901][T14990] bond0: entered promiscuous mode [ 1118.583621][T14990] : entered promiscuous mode [ 1118.594578][T14990] bond_slave_1: entered promiscuous mode [ 1118.619659][T14990] team0: entered promiscuous mode [ 1118.619696][T14990] team_slave_0: entered promiscuous mode [ 1118.619806][T14990] team_slave_1: entered promiscuous mode [ 1118.670466][T14990] nlmon0: entered promiscuous mode [ 1118.672218][T14990] batadv0: entered promiscuous mode [ 1118.687896][T14990] veth0: entered promiscuous mode [ 1118.701798][T14990] veth1: entered promiscuous mode [ 1118.729696][T14990] wg0: entered promiscuous mode [ 1118.777076][T14990] wg1: entered promiscuous mode [ 1118.845016][T14990] wg2: entered promiscuous mode [ 1118.894002][T14990] veth0_to_bridge: entered promiscuous mode [ 1118.919647][T14990] veth1_to_bridge: entered promiscuous mode [ 1118.953413][T14990] veth0_to_bond: entered promiscuous mode [ 1118.982743][T14990] veth1_to_bond: entered promiscuous mode [ 1119.016271][T14990] veth0_to_team: entered promiscuous mode [ 1119.056013][T14990] veth1_to_team: entered promiscuous mode [ 1119.073329][T14990] veth0_to_batadv: entered promiscuous mode [ 1119.086256][T14990] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1119.094025][T14990] batadv_slave_0: entered promiscuous mode [ 1119.107722][T14990] veth1_to_batadv: entered promiscuous mode [ 1119.119460][T14990] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1119.127955][T14990] batadv_slave_1: entered promiscuous mode [ 1119.139453][T14990] xfrm0: entered promiscuous mode [ 1119.148851][T14990] veth0_to_hsr: entered promiscuous mode [ 1119.162909][T14990] veth1_to_hsr: entered promiscuous mode [ 1119.178012][T14990] hsr0: entered promiscuous mode [ 1119.188095][T14990] veth1_virt_wifi: entered promiscuous mode [ 1119.203674][T14990] veth0_virt_wifi: entered promiscuous mode [ 1119.205253][ T31] audit: type=1400 audit(1788176844.222:1091): avc: denied { setattr } for pid=15002 comm="syz.2.2034" path="socket:[47677]" dev="sockfs" ino=47677 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1119.239722][T14990] virt_wifi0: entered promiscuous mode [ 1119.260454][T14990] vlan0: entered promiscuous mode [ 1119.271107][T14990] vlan1: entered promiscuous mode [ 1119.284231][T14990] macvlan0: entered promiscuous mode [ 1119.299006][T14990] macvlan1: entered promiscuous mode [ 1119.310293][T14990] ipvlan0: entered promiscuous mode [ 1119.317971][T14990] ipvlan1: entered promiscuous mode [ 1119.345149][T14990] macvtap0: entered promiscuous mode [ 1119.356444][T14990] macsec0: entered promiscuous mode [ 1119.366667][T14990] geneve0: entered promiscuous mode [ 1119.375127][T14990] geneve1: entered promiscuous mode [ 1119.389064][T14990] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 1119.410576][T14990] netdevsim netdevsim6 netdevsim1: entered promiscuous mode [ 1119.420807][T14990] netdevsim netdevsim6 netdevsim2: entered promiscuous mode [ 1119.437391][T14990] netdevsim netdevsim6 netdevsim3: entered promiscuous mode [ 1119.480014][T14990] mac80211_hwsim hwsim14 wlan0: entered promiscuous mode [ 1119.505213][T14990] mac80211_hwsim hwsim15 wlan1: entered promiscuous mode [ 1119.521312][T14990] ip6tnl1: entered promiscuous mode [ 1119.527846][ C1] net_ratelimit: 3 callbacks suppressed [ 1119.527899][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1119.590527][ T554] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1119.667109][ T194] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1119.681260][ T194] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1119.681873][ T554] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1120.565336][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1120.683447][T15014] netlink: 'syz.1.2039': attribute type 1 has an invalid length. [ 1120.911500][T15014] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1121.067885][T15023] Bluetooth: MGMT ver 1.23 [ 1121.605361][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1122.635353][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1123.280477][T15074] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 [ 1123.361588][ T31] audit: type=1400 audit(1788176848.382:1092): avc: denied { write } for pid=15045 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1123.446227][ T5721] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 1123.480434][ T31] audit: type=1400 audit(1788176848.502:1093): avc: denied { write } for pid=15080 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1123.605834][ T5721] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1123.607172][ T5721] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1123.607213][ T5721] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1123.619279][ T5721] usb 2-1: config 0 descriptor?? [ 1123.657699][T15084] FAULT_INJECTION: forcing a failure. [ 1123.657699][T15084] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1123.657756][T15084] CPU: 1 UID: 0 PID: 15084 Comm: syz.0.2056 Tainted: G L syzkaller #0 PREEMPT(full) [ 1123.657787][T15084] Tainted: [L]=SOFTLOCKUP [ 1123.657793][T15084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1123.657806][T15084] Call Trace: [ 1123.657814][T15084] [ 1123.657831][T15084] dump_stack_lvl+0x100/0x190 [ 1123.657867][T15084] should_fail_ex.cold+0x5/0xa [ 1123.657898][T15084] _copy_from_iter+0x1f4/0x1690 [ 1123.657932][T15084] ? __asan_memset+0x23/0x50 [ 1123.657962][T15084] ? __alloc_skb+0x4e9/0x710 [ 1123.657991][T15084] ? __pfx__copy_from_iter+0x10/0x10 [ 1123.658018][T15084] ? __pfx___alloc_skb+0x10/0x10 [ 1123.658049][T15084] ? skb_page_frag_refill+0x309/0x4b0 [ 1123.658080][T15084] ? sk_page_frag_refill+0x6c/0x340 [ 1123.658110][T15084] tcp_sendmsg_locked+0xd1f/0x44f0 [ 1123.658155][T15084] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 1123.658182][T15084] ? lock_acquire+0x1d1/0x380 [ 1123.658204][T15084] ? do_raw_spin_lock+0x128/0x260 [ 1123.658229][T15084] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1123.658260][T15084] ? __local_bh_enable_ip+0xa5/0x120 [ 1123.658285][T15084] tcp_sendmsg+0x2e/0x50 [ 1123.658309][T15084] ? __pfx_tcp_sendmsg+0x10/0x10 [ 1123.658334][T15084] inet_sendmsg+0xb9/0x140 [ 1123.658360][T15084] __sys_sendto+0x453/0x4e0 [ 1123.658386][T15084] ? __pfx_inet_sendmsg+0x10/0x10 [ 1123.658412][T15084] ? __pfx___sys_sendto+0x10/0x10 [ 1123.658449][T15084] ? __sys_connect+0xe4/0x170 [ 1123.658486][T15084] ? xfd_validate_state+0x129/0x190 [ 1123.658515][T15084] __x64_sys_sendto+0xe0/0x1c0 [ 1123.658543][T15084] ? do_syscall_64+0xae/0x790 [ 1123.658565][T15084] ? lockdep_hardirqs_on+0x7d/0x110 [ 1123.658588][T15084] do_syscall_64+0x123/0x790 [ 1123.658613][T15084] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1123.658634][T15084] RIP: 0033:0x7feaf0f9e159 [ 1123.658652][T15084] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1123.658671][T15084] RSP: 002b:00007feaf1e1a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1123.658692][T15084] RAX: ffffffffffffffda RBX: 00007feaf1225fa0 RCX: 00007feaf0f9e159 [ 1123.658706][T15084] RDX: ffffffffffffff94 RSI: 0000200000000000 RDI: 0000000000000004 [ 1123.658720][T15084] RBP: 00007feaf1035024 R08: 0000000000000000 R09: 0000000000000000 [ 1123.658734][T15084] R10: 000000000000000b R11: 0000000000000246 R12: 0000000000000000 [ 1123.658746][T15084] R13: 00007feaf1226038 R14: 00007feaf1225fa0 R15: 00007ffe9c6fdce8 [ 1123.658776][T15084] [ 1123.685335][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1123.838974][ T5721] usbhid 2-1:0.0: can't add hid device: -71 [ 1123.839065][ T5721] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1123.860033][ T5721] usb 2-1: USB disconnect, device number 125 [ 1124.314364][ T31] audit: type=1400 audit(1788176849.332:1094): avc: denied { write } for pid=15082 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1124.365779][ T5721] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 1124.457727][ T31] audit: type=1400 audit(1788176849.482:1095): avc: denied { write } for pid=15103 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1124.526046][ T5721] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 1124.526973][ T5721] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1124.527014][ T5721] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1124.546233][ T5721] usb 2-1: config 0 descriptor?? [ 1124.717175][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1125.765378][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1125.883682][T15047] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1126.145402][T15138] netlink: 'syz.2.2066': attribute type 1 has an invalid length. [ 1126.255410][ T5721] aiptek 2-1:0.0: Aiptek using 400 ms programming speed [ 1126.266067][ T5721] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input66 [ 1126.389998][ T5721] usb 2-1: USB disconnect, device number 126 [ 1126.396092][ C1] aiptek 2-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 1126.795606][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1127.538328][T15156] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2070'. [ 1127.715958][ T5721] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 1127.845339][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1127.887524][ T5721] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1127.902697][ T5721] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1127.914153][ T5721] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1127.932785][ T5721] usb 5-1: config 0 descriptor?? [ 1128.107745][ T31] audit: type=1400 audit(1788176853.132:1096): avc: denied { bind } for pid=15162 comm="syz.1.2075" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1128.212208][ T5721] usbhid 5-1:0.0: can't add hid device: -71 [ 1128.212308][ T5721] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1128.221965][ T5721] usb 5-1: USB disconnect, device number 113 [ 1128.301474][ T31] audit: type=1400 audit(1788176853.322:1097): avc: denied { append } for pid=15168 comm="syz.2.2079" name="ppp" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1128.455359][ T5694] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 1128.604683][T15173] bridge_slave_0: left allmulticast mode [ 1128.611773][T15173] bridge_slave_0: left promiscuous mode [ 1128.612002][T15173] bridge0: port 1(bridge_slave_0) entered disabled state [ 1128.631880][ T5694] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1128.631935][ T5694] usb 7-1: New USB device found, idVendor=0035, idProduct=0000, bcdDevice= 0.00 [ 1128.631979][ T5694] usb 7-1: no configurations [ 1128.631994][ T5694] usb 7-1: can't read configurations, error -22 [ 1128.678633][T15173] bridge_slave_1: left allmulticast mode [ 1128.684533][T15173] bridge_slave_1: left promiscuous mode [ 1128.692453][T15173] bridge0: port 2(bridge_slave_1) entered disabled state [ 1128.727409][T15173] bond0: (slave 30): Releasing backup interface [ 1128.727439][ T5721] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 1128.810746][T15173] bond0: (slave bond_slave_1): Releasing backup interface [ 1128.854858][T15173] team0: Port device team_slave_0 removed [ 1128.863323][T15182] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2084'. [ 1128.875378][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1128.897350][T15173] team0: Port device team_slave_1 removed [ 1128.899547][ T5721] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 1128.902277][ T5721] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1128.902318][ T5721] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1128.904834][T15173] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1128.904854][T15173] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1128.908967][ T5721] usb 5-1: config 0 descriptor?? [ 1128.974321][T15173] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1129.113304][ T5693] syz1: Port: 1 Link DOWN [ 1129.833477][ T5721] aiptek 5-1:0.0: Aiptek using 400 ms programming speed [ 1129.835601][ T5721] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input67 [ 1129.915402][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1129.943801][T15200] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 1130.535429][ T31] audit: type=1400 audit(1788176854.962:1098): avc: denied { ioctl } for pid=15197 comm="syz.1.2089" path="socket:[48070]" dev="sockfs" ino=48070 ioctlcmd=0x8954 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1130.540942][ T5721] usb 5-1: USB disconnect, device number 114 [ 1130.540993][ C1] aiptek 5-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 1130.955337][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1131.316758][T13134] Bluetooth: hci2: unexpected event for opcode 0x1405 [ 1131.570248][T15226] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2100'. [ 1131.995340][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1132.135352][ T5721] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 1132.295985][ T5721] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1132.299963][ T5721] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1132.300007][ T5721] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1132.308152][ T5721] usb 5-1: config 0 descriptor?? [ 1132.523317][ T5721] usbhid 5-1:0.0: can't add hid device: -71 [ 1132.523415][ T5721] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1132.530222][ T5721] usb 5-1: USB disconnect, device number 115 [ 1132.975570][ T2259] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 1133.033644][T15259] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1133.036611][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1133.041299][ T5721] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 1133.172330][ T2259] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 1133.192997][ T2259] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1133.193194][ T2259] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1133.216545][ T5721] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1133.264192][ T5721] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1133.264252][ T5721] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1133.309901][ T2259] usb 5-1: config 0 descriptor?? [ 1134.077123][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1134.085343][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1135.115349][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1135.610077][ T5721] usb 7-1: config 0 descriptor?? [ 1135.985877][ T2259] aiptek 5-1:0.0: Aiptek using 400 ms programming speed [ 1135.987705][ T2259] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input68 [ 1136.063777][ T5694] usb 5-1: USB disconnect, device number 116 [ 1136.063931][ C0] aiptek 5-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 1136.097609][ T5721] usbhid 7-1:0.0: can't add hid device: -71 [ 1136.104805][ T5721] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1136.123519][ T5721] usb 7-1: USB disconnect, device number 43 [ 1136.155354][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1137.195345][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1137.642306][T15289] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2123'. [ 1138.235346][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1138.458529][ T31] audit: type=1400 audit(1788176863.482:1099): avc: denied { read } for pid=15298 comm="syz.6.2127" name="dynamic_events" dev="tracefs" ino=1066 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 1139.275337][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1139.872172][T13134] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 1140.304055][ T31] audit: type=1400 audit(1788176865.322:1100): avc: denied { read } for pid=15325 comm="syz.0.2132" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1140.315865][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1140.700849][T15329] bridge0: port 2(bridge_slave_1) entered disabled state [ 1140.701039][T15329] bridge0: port 1(bridge_slave_0) entered disabled state [ 1141.355533][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1141.493622][T15353] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2137'. [ 1141.549761][ T31] audit: type=1400 audit(1788176866.562:1101): avc: denied { read } for pid=15349 comm="syz.4.2136" path="socket:[49408]" dev="sockfs" ino=49408 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1141.894263][T15329] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1142.395415][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1142.491992][T15329] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1143.435368][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1143.945421][ T7446] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1143.956942][ T7446] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1143.966146][ T7446] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1143.975186][ T7446] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1144.475392][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1144.826878][T15410] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1145.515390][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1145.817441][ T31] audit: type=1400 audit(1788176870.842:1102): avc: denied { ioctl } for pid=15419 comm="syz.6.2155" path="/190/dev/mapper/control" dev="devtmpfs" ino=1266 ioctlcmd=0xfd03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 1146.555356][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1147.219965][T15431] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1147.496269][T15340] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 1147.595336][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1147.671174][T15340] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1147.686702][T15340] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1147.686749][T15340] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1147.689083][T15340] usb 7-1: config 0 descriptor?? [ 1147.911858][T15340] usbhid 7-1:0.0: can't add hid device: -71 [ 1147.917980][T15340] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1147.944021][T15340] usb 7-1: USB disconnect, device number 44 [ 1148.425863][T15340] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 1148.635349][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1148.913803][T15340] usb 7-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 1148.929641][T15340] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1148.941461][T15340] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1149.009352][T15340] usb 7-1: config 0 descriptor?? [ 1149.675348][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1150.715371][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1151.531425][T15340] aiptek 7-1:0.0: Aiptek using 400 ms programming speed [ 1151.542503][T15340] input: Aiptek as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input69 [ 1151.755344][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1151.839360][T15340] usb 7-1: USB disconnect, device number 45 [ 1151.839462][ C0] aiptek 7-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 1152.795350][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1153.835355][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1153.962772][T15517] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2186'. [ 1153.985452][T15380] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 1154.169829][T15380] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1154.196964][T15380] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1154.210046][T15380] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1154.275834][T15380] usb 2-1: config 0 descriptor?? [ 1154.621824][T15380] usbhid 2-1:0.0: can't add hid device: -71 [ 1154.621937][T15380] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1154.626124][T15380] usb 2-1: USB disconnect, device number 127 [ 1154.875346][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1155.188536][T15380] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 1155.367731][T15380] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 1155.374247][T15380] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1155.374508][T15380] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1155.441808][T15380] usb 2-1: config 0 descriptor?? [ 1155.915340][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1156.320480][ T9764] Bluetooth: hci4: command 0x0406 tx timeout [ 1156.955350][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1157.676541][T15380] aiptek 2-1:0.0: Aiptek using 400 ms programming speed [ 1157.678500][T15380] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input70 [ 1157.692674][T15380] usb 2-1: USB disconnect, device number 2 [ 1157.692773][ C1] aiptek 2-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 1157.853534][T15401] Set syz0 is full, maxelem 65536 reached [ 1157.996278][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1158.517185][ T31] audit: type=1400 audit(1788176883.512:1103): avc: denied { create } for pid=15558 comm="syz.2.2203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 1158.517325][ T31] audit: type=1400 audit(1788176883.522:1104): avc: denied { write } for pid=15558 comm="syz.2.2203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 1159.035658][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1159.606869][T15571] ieee802154 phy0 wpan0: encryption failed: -22 [ 1159.615131][ T31] audit: type=1400 audit(1788176884.632:1105): avc: denied { read } for pid=15567 comm="syz.6.2204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1159.909122][ T31] audit: type=1400 audit(1788176884.912:1106): avc: denied { unmount } for pid=5599 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 1160.075348][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1160.180424][T15582] netlink: 'syz.2.2209': attribute type 2 has an invalid length. [ 1160.491862][T15364] hid-generic 036B:214EC8:192CF38B.0035: hidraw0: HID vf80018.02 Device [syz1] on syz0 [ 1160.598995][T15589] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1161.058634][T15591] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1161.115353][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1162.155346][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1162.730555][T15605] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2215'. [ 1163.006190][T15612] gfs2: not a GFS2 filesystem [ 1163.195359][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1164.235376][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1165.217496][ T31] audit: type=1400 audit(1788176890.242:1107): avc: denied { execute } for pid=15635 comm="syz.0.2228" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=50288 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 1165.276737][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1165.323325][T15643] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2230'. [ 1165.871474][ T31] audit: type=1400 audit(1788176890.892:1108): avc: denied { transfer } for pid=15655 comm="syz.1.2236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1165.975308][ T31] audit: type=1400 audit(1788176890.992:1109): avc: denied { bind } for pid=15661 comm="syz.2.2237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1165.975562][ T31] audit: type=1400 audit(1788176891.002:1110): avc: denied { node_bind } for pid=15661 comm="syz.2.2237" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 1166.315368][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1167.207649][ T31] audit: type=1400 audit(1788176892.082:1111): avc: denied { write } for pid=15672 comm="syz.0.2242" name="functions" dev="configfs" ino=7768 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1167.256005][ T31] audit: type=1400 audit(1788176892.282:1112): avc: denied { write } for pid=15672 comm="syz.0.2242" name="c.1" dev="configfs" ino=45979 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1167.355351][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1167.373729][ T31] audit: type=1400 audit(1788176892.392:1113): avc: denied { write } for pid=15672 comm="syz.0.2242" name="functions" dev="configfs" ino=7768 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1168.215711][ T31] audit: type=1400 audit(1788176893.222:1114): avc: denied { read write } for pid=15703 comm="syz.2.2256" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 1168.242205][ T31] audit: type=1400 audit(1788176893.222:1115): avc: denied { open } for pid=15703 comm="syz.2.2256" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 1168.395347][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1169.435398][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1170.475338][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1171.515338][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1171.590070][T15743] smbdirect: ib_dev[syz1] renamed to [syz2] [ 1171.923757][ T31] audit: type=1400 audit(1788176896.942:1116): avc: denied { ioctl } for pid=15751 comm="syz.2.2276" path="/dev/usbmon8" dev="devtmpfs" ino=739 ioctlcmd=0x9208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1171.939396][ T31] audit: type=1400 audit(1788176896.942:1117): avc: denied { mount } for pid=15767 comm="syz.6.2281" name="/" dev="hugetlbfs" ino=50656 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 1172.555332][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1172.855067][ T31] audit: type=1400 audit(1788176897.872:1118): avc: denied { unmount } for pid=11262 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 1173.095174][ T31] audit: type=1400 audit(1788176898.112:1119): avc: denied { append } for pid=15765 comm="syz.4.2280" name="frontend0" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1173.290158][T15793] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 1173.290243][T15793] CPU: 1 UID: 0 PID: 15793 Comm: syz.1.2288 Tainted: G L syzkaller #0 PREEMPT(full) [ 1173.290275][T15793] Tainted: [L]=SOFTLOCKUP [ 1173.290284][T15793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1173.290298][T15793] Call Trace: [ 1173.290307][T15793] [ 1173.290316][T15793] dump_stack_lvl+0x100/0x190 [ 1173.290357][T15793] sysfs_warn_dup.cold+0x1c/0x28 [ 1173.290389][T15793] sysfs_create_dir_ns+0x24b/0x2b0 [ 1173.290416][T15793] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1173.290441][T15793] ? class_dir_child_ns_type+0xd/0x60 [ 1173.290472][T15793] ? class_dir_child_ns_type+0xd/0x60 [ 1173.290498][T15793] kobject_add_internal+0x2c8/0x930 [ 1173.290532][T15793] kobject_add+0x16a/0x1e0 [ 1173.290561][T15793] ? __pfx_kobject_add+0x10/0x10 [ 1173.290591][T15793] ? get_device_parent+0x1b3/0x4c0 [ 1173.290613][T15793] ? kobject_put+0xb9/0x640 [ 1173.290648][T15793] device_add+0x294/0x1970 [ 1173.290672][T15793] ? lockdep_init_map_type+0x5c/0x250 [ 1173.290696][T15793] ? __pfx_device_add+0x10/0x10 [ 1173.290718][T15793] ? lockdep_init_map_type+0x5c/0x250 [ 1173.290741][T15793] ? __init_waitqueue_head+0xca/0x150 [ 1173.290774][T15793] tty_register_device_attr+0x388/0x7f0 [ 1173.290807][T15793] ? lockdep_init_map_type+0x5c/0x250 [ 1173.290837][T15793] ? __pfx_tty_register_device_attr+0x10/0x10 [ 1173.290880][T15793] ? tty_port_init+0x156/0x1c0 [ 1173.290907][T15793] gsm_activate_mux+0x155/0x2a0 [ 1173.290931][T15793] gsmld_ioctl+0xbbc/0x15c0 [ 1173.290965][T15793] ? __pfx_gsmld_ioctl+0x10/0x10 [ 1173.290993][T15793] ? lockdep_hardirqs_on+0x7d/0x110 [ 1173.291016][T15793] ? finish_task_switch.isra.0+0x2c2/0x10d0 [ 1173.291055][T15793] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1173.291080][T15793] ? __pfx_pty_unix98_ioctl+0x10/0x10 [ 1173.291111][T15793] ? __pfx_gsmld_ioctl+0x10/0x10 [ 1173.291134][T15793] tty_ioctl+0x11b4/0x1640 [ 1173.291156][T15793] ? __pfx_tty_ioctl+0x10/0x10 [ 1173.291177][T15793] ? preempt_schedule_irq+0x79/0x90 [ 1173.291201][T15793] ? irqentry_exit+0x24d/0xa10 [ 1173.291223][T15793] ? lockdep_hardirqs_on+0x7d/0x110 [ 1173.291246][T15793] ? irqentry_exit+0x24d/0xa10 [ 1173.291282][T15793] ? security_file_ioctl+0x7b/0x230 [ 1173.291312][T15793] ? __pfx_tty_ioctl+0x10/0x10 [ 1173.291333][T15793] __x64_sys_ioctl+0x18e/0x210 [ 1173.291368][T15793] do_syscall_64+0x123/0x790 [ 1173.291394][T15793] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1173.291416][T15793] RIP: 0033:0x7f115539e159 [ 1173.291434][T15793] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1173.291454][T15793] RSP: 002b:00007f115624e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1173.291475][T15793] RAX: ffffffffffffffda RBX: 00007f1155626180 RCX: 00007f115539e159 [ 1173.291491][T15793] RDX: 0000200000000040 RSI: 00000000404c4701 RDI: 0000000000000006 [ 1173.291506][T15793] RBP: 00007f1155435024 R08: 0000000000000000 R09: 0000000000000000 [ 1173.291520][T15793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1173.291534][T15793] R13: 00007f1155626218 R14: 00007f1155626180 R15: 00007fffce641d48 [ 1173.291564][T15793] [ 1173.291680][T15793] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 1173.598582][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1174.323507][T15801] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1174.635343][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1175.205152][ T31] audit: type=1400 audit(1788176900.202:1120): avc: denied { create } for pid=15805 comm="syz.6.2295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1175.205217][ T31] audit: type=1400 audit(1788176900.222:1121): avc: denied { write } for pid=15805 comm="syz.6.2295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1175.248221][ T31] audit: type=1804 audit(1788176900.232:1122): pid=15810 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.0.2297" name="/newroot/466/bus/bus" dev="overlay" ino=2706 res=1 errno=0 [ 1175.619262][ T31] audit: type=1400 audit(1788176900.642:1123): avc: denied { module_load } for pid=15815 comm="syz.6.2300" path="/222/bus" dev="tmpfs" ino=1310 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 1175.620020][T15816] Invalid ELF header magic: != ELF [ 1175.621036][T15816] netlink: 72 bytes leftover after parsing attributes in process `syz.6.2300'. [ 1175.675340][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1176.715369][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1176.912608][T13134] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 1177.156634][T15872] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.198031][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.204958][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.755367][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1178.455723][ T31] audit: type=1400 audit(1788176903.462:1124): avc: denied { module_load } for pid=15889 comm="syz.6.2332" path="/sys/power/pm_wakeup_irq" dev="sysfs" ino=1417 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 1178.795400][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1178.829004][T15909] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2336'. [ 1178.829048][T15909] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2336'. [ 1178.856845][T15907] ubi0: attaching mtd0 [ 1178.893017][T15907] ubi0: scanning is finished [ 1178.898456][T15907] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1178.991683][T15914] /dev/nullb0: Can't open blockdev [ 1178.997889][T15918] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1179.324152][T15907] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1179.362894][T15926] ieee802154 phy0 wpan0: encryption failed: -22 [ 1179.835342][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1180.875335][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1181.915350][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1182.013377][T15957] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1182.062999][T15364] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 1182.258413][T15364] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1182.294130][T15364] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 1182.305384][T15364] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1182.378748][T15364] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1182.387631][T15364] usb 5-1: Manufacturer: syz [ 1182.574875][T15364] usb 5-1: config 0 descriptor?? [ 1182.805571][T15364] rc_core: IR keymap rc-hauppauge not found [ 1182.807042][T15364] Registered IR keymap rc-empty [ 1182.809504][T15364] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 1182.839119][T15364] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input71 [ 1182.872429][T15364] usb 5-1: USB disconnect, device number 117 [ 1182.955380][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1183.995493][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1185.035348][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1185.721133][T16026] overlayfs: failed to resolve './bus': -2 [ 1186.075341][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1186.773218][ T31] audit: type=1400 audit(1788176911.792:1125): avc: denied { write } for pid=16044 comm="syz.2.2386" name="functions" dev="configfs" ino=7768 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1186.801199][ T31] audit: type=1400 audit(1788176911.822:1126): avc: denied { write } for pid=16044 comm="syz.2.2386" name="c.1" dev="configfs" ino=45979 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1186.830773][ T31] audit: type=1400 audit(1788176911.852:1127): avc: denied { write } for pid=16044 comm="syz.2.2386" name="c.1" dev="configfs" ino=45979 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1186.872361][ T31] audit: type=1400 audit(1788176911.892:1128): avc: denied { write } for pid=16044 comm="syz.2.2386" name="functions" dev="configfs" ino=7768 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1186.908175][ T9764] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 1186.920666][T16045] ================================================================== [ 1186.920697][T16045] BUG: KASAN: slab-use-after-free in configfs_dirent_is_ready+0x6b/0x70 [ 1186.920728][T16045] Read of size 4 at addr ffff88801c185eb8 by task syz.2.2386/16045 [ 1186.920747][T16045] [ 1186.920762][T16045] CPU: 1 UID: 0 PID: 16045 Comm: syz.2.2386 Tainted: G L syzkaller #0 PREEMPT(full) [ 1186.920792][T16045] Tainted: [L]=SOFTLOCKUP [ 1186.920801][T16045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1186.920814][T16045] Call Trace: [ 1186.920822][T16045] [ 1186.920831][T16045] dump_stack_lvl+0x100/0x190 [ 1186.920863][T16045] print_report+0x13d/0x4b0 [ 1186.920893][T16045] ? __virt_addr_valid+0x239/0x430 [ 1186.920916][T16045] ? configfs_dirent_is_ready+0x6b/0x70 [ 1186.920935][T16045] kasan_report+0xdf/0x1c0 [ 1186.920962][T16045] ? configfs_dirent_is_ready+0x6b/0x70 [ 1186.920987][T16045] configfs_dirent_is_ready+0x6b/0x70 [ 1186.921008][T16045] configfs_symlink+0x5c4/0x11f0 [ 1186.921032][T16045] ? __pfx_configfs_symlink+0x10/0x10 [ 1186.921056][T16045] vfs_symlink+0x178/0x4d0 [ 1186.921086][T16045] filename_symlinkat+0x2a6/0x560 [ 1186.921114][T16045] ? __pfx_filename_symlinkat+0x10/0x10 [ 1186.921139][T16045] ? strncpy_from_user+0x19d/0x2d0 [ 1186.921171][T16045] ? do_getname+0x191/0x390 [ 1186.921199][T16045] __x64_sys_symlinkat+0x9c/0xe0 [ 1186.921225][T16045] do_syscall_64+0x123/0x790 [ 1186.921249][T16045] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1186.921270][T16045] RIP: 0033:0x7f34b839e159 [ 1186.921287][T16045] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1186.921307][T16045] RSP: 002b:00007f34b91c8028 EFLAGS: 00000246 ORIG_RAX: 000000000000010a [ 1186.921328][T16045] RAX: ffffffffffffffda RBX: 00007f34b8625fa0 RCX: 00007f34b839e159 [ 1186.921351][T16045] RDX: 0000200000000200 RSI: ffffffffffffff9c RDI: 00002000000001c0 [ 1186.921366][T16045] RBP: 00007f34b8435024 R08: 0000000000000000 R09: 0000000000000000 [ 1186.921380][T16045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1186.921394][T16045] R13: 00007f34b8626038 R14: 00007f34b8625fa0 R15: 00007ffedb24a408 [ 1186.921417][T16045] [ 1186.921426][T16045] [ 1186.921430][T16045] Allocated by task 16045: [ 1186.921439][T16045] kasan_save_stack+0x30/0x50 [ 1186.921460][T16045] kasan_save_track+0x14/0x30 [ 1186.921479][T16045] __kasan_slab_alloc+0x89/0x90 [ 1186.921501][T16045] kmem_cache_alloc_noprof+0x269/0x6a0 [ 1186.921521][T16045] configfs_new_dirent+0x52/0x570 [ 1186.921549][T16045] configfs_make_dirent+0x36/0x1a0 [ 1186.921567][T16045] configfs_create_dir+0xbd/0x5c0 [ 1186.921583][T16045] configfs_attach_group+0x2a/0x440 [ 1186.921600][T16045] configfs_mkdir+0x657/0xd40 [ 1186.921617][T16045] vfs_mkdir+0x364/0x850 [ 1186.921641][T16045] filename_mkdirat+0x48b/0x5e0 [ 1186.921662][T16045] __x64_sys_mkdirat+0x89/0xc0 [ 1186.921684][T16045] do_syscall_64+0x123/0x790 [ 1186.921703][T16045] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1186.921721][T16045] [ 1186.921726][T16045] Freed by task 16055: [ 1186.921736][T16045] kasan_save_stack+0x30/0x50 [ 1186.921754][T16045] kasan_save_track+0x14/0x30 [ 1186.921773][T16045] kasan_save_free_info+0x3b/0x70 [ 1186.921798][T16045] __kasan_slab_free+0x5f/0x80 [ 1186.921818][T16045] kmem_cache_free+0x127/0x6c0 [ 1186.921843][T16045] configfs_d_iput+0x20d/0x290 [ 1186.921869][T16045] dentry_unlink_inode+0x265/0x470 [ 1186.921892][T16045] d_delete+0x213/0x280 [ 1186.921914][T16045] vfs_rmdir+0x4ab/0x8a0 [ 1186.921939][T16045] filename_rmdir+0x31a/0x5c0 [ 1186.921960][T16045] __x64_sys_rmdir+0x46/0x70 [ 1186.921981][T16045] do_syscall_64+0x123/0x790 [ 1186.922000][T16045] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1186.922020][T16045] [ 1186.922025][T16045] The buggy address belongs to the object at ffff88801c185e80 [ 1186.922025][T16045] which belongs to the cache configfs_dir_cache of size 96 [ 1186.922041][T16045] The buggy address is located 56 bytes inside of [ 1186.922041][T16045] freed 96-byte region [ffff88801c185e80, ffff88801c185ee0) [ 1186.922060][T16045] [ 1186.922066][T16045] The buggy address belongs to the physical page: [ 1186.922075][T16045] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88801c185f00 pfn:0x1c185 [ 1186.922094][T16045] flags: 0xfff00000000200(workingset|node=0|zone=1|lastcpupid=0x7ff) [ 1186.922111][T16045] page_type: f5(slab) [ 1186.922130][T16045] raw: 00fff00000000200 ffff88801fea2140 ffff88801fea3048 ffffea0000a17a50 [ 1186.922157][T16045] raw: ffff88801c185f00 000000020020001f 00000000f5000000 0000000000000000 [ 1186.922169][T16045] page dumped because: kasan: bad access detected [ 1186.922182][T16045] page_owner tracks the page as allocated [ 1186.922191][T16045] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 3572389257 [ 1186.922223][T16045] post_alloc_hook+0xfd/0x120 [ 1186.922248][T16045] get_page_from_freelist+0x110d/0x35d0 [ 1186.922274][T16045] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 1186.922317][T16045] new_slab+0xa9/0x6e0 [ 1186.922347][T16045] refill_objects+0xe3/0x410 [ 1186.922374][T16045] __pcs_replace_empty_main+0x35e/0x650 [ 1186.922401][T16045] kmem_cache_alloc_noprof+0x4c4/0x6a0 [ 1186.922421][T16045] configfs_new_dirent+0x52/0x570 [ 1186.922448][T16045] configfs_make_dirent+0x36/0x1a0 [ 1186.922465][T16045] configfs_create_dir+0xbd/0x5c0 [ 1186.922482][T16045] configfs_attach_group+0x2a/0x440 [ 1186.922499][T16045] configfs_register_subsystem+0x2c7/0x5e0 [ 1186.922518][T16045] tb_domain_init+0xf/0x80 [ 1186.922535][T16045] nhi_init+0xf/0x60 [ 1186.922553][T16045] do_one_initcall+0x11c/0x6f0 [ 1186.922573][T16045] kernel_init_freeable+0x6ea/0x7b0 [ 1186.922602][T16045] page_owner free stack trace missing [ 1186.922609][T16045] [ 1186.922614][T16045] Memory state around the buggy address: [ 1186.922624][T16045] ffff88801c185d80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1186.922643][T16045] ffff88801c185e00: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 1186.922657][T16045] >ffff88801c185e80: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 1186.922669][T16045] ^ [ 1186.922680][T16045] ffff88801c185f00: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 1186.922694][T16045] ffff88801c185f80: 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc [ 1186.922705][T16045] ================================================================== [ 1186.922761][T16045] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1187.545798][T16045] CPU: 1 UID: 0 PID: 16045 Comm: syz.2.2386 Tainted: G L syzkaller #0 PREEMPT(full) [ 1187.556715][T16045] Tainted: [L]=SOFTLOCKUP [ 1187.561014][T16045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1187.571046][T16045] Call Trace: [ 1187.574304][T16045] [ 1187.577217][T16045] dump_stack_lvl+0x100/0x190 [ 1187.581913][T16045] vpanic+0x553/0x970 [ 1187.585875][T16045] ? __pfx_vpanic+0x10/0x10 [ 1187.590358][T16045] ? mark_held_locks+0x40/0x70 [ 1187.595102][T16045] ? irqentry_exit+0x24d/0xa10 [ 1187.599853][T16045] ? configfs_dirent_is_ready+0x6b/0x70 [ 1187.605377][T16045] panic+0xd1/0xe0 [ 1187.609076][T16045] ? __pfx_panic+0x10/0x10 [ 1187.613474][T16045] check_panic_on_warn.cold+0x19/0x34 [ 1187.618826][T16045] end_report.part.0+0x3a/0x90 [ 1187.623574][T16045] kasan_report.cold+0xe/0x18 [ 1187.628239][T16045] ? configfs_dirent_is_ready+0x6b/0x70 [ 1187.633769][T16045] configfs_dirent_is_ready+0x6b/0x70 [ 1187.639118][T16045] configfs_symlink+0x5c4/0x11f0 [ 1187.644036][T16045] ? __pfx_configfs_symlink+0x10/0x10 [ 1187.649390][T16045] vfs_symlink+0x178/0x4d0 [ 1187.653794][T16045] filename_symlinkat+0x2a6/0x560 [ 1187.658802][T16045] ? __pfx_filename_symlinkat+0x10/0x10 [ 1187.664330][T16045] ? strncpy_from_user+0x19d/0x2d0 [ 1187.669430][T16045] ? do_getname+0x191/0x390 [ 1187.673919][T16045] __x64_sys_symlinkat+0x9c/0xe0 [ 1187.678841][T16045] do_syscall_64+0x123/0x790 [ 1187.683418][T16045] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1187.689291][T16045] RIP: 0033:0x7f34b839e159 [ 1187.693686][T16045] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1187.713291][T16045] RSP: 002b:00007f34b91c8028 EFLAGS: 00000246 ORIG_RAX: 000000000000010a [ 1187.721690][T16045] RAX: ffffffffffffffda RBX: 00007f34b8625fa0 RCX: 00007f34b839e159 [ 1187.729642][T16045] RDX: 0000200000000200 RSI: ffffffffffffff9c RDI: 00002000000001c0 [ 1187.737600][T16045] RBP: 00007f34b8435024 R08: 0000000000000000 R09: 0000000000000000 [ 1187.745565][T16045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1187.753528][T16045] R13: 00007f34b8626038 R14: 00007f34b8625fa0 R15: 00007ffedb24a408 [ 1187.761493][T16045] [ 1187.764722][T16045] Kernel Offset: disabled [ 1187.769034][T16045] Rebooting in 86400 seconds..