last executing test programs: 2m32.460076705s ago: executing program 4 (id=815): r0 = socket$kcm(0xa, 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0xfd}}, 0x80, 0x0, 0x0, &(0x7f0000000000)}, 0x0) 2m32.368332009s ago: executing program 4 (id=816): syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_le_credits={{0x16, 0xb1, 0x4}, {0x0, 0x6}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) r0 = syz_usb_connect$uac1(0x5, 0x8c, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x19f7, 0x11, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7a, 0x3, 0x1, 0x9, 0x0, 0x8, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7170, 0x24}, [@input_terminal={0xc, 0x24, 0x2, 0x4, 0x101, 0x1, 0x4, 0x1, 0x6, 0xc}, @mixer_unit={0x5, 0x24, 0x4, 0x2, 0xfa}, @output_terminal={0x9, 0x24, 0x3, 0x6, 0x401, 0x3, 0x6, 0xf0}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x9, 0x2, 0x9, {0x7, 0x25, 0x1, 0xc, 0x0, 0xfffe}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0xbb, 0x80, 0x9b, {0x7, 0x25, 0x1, 0xc, 0x6d, 0xffff}}}}}}}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000340)={0x0, 0xa}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x2}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x81}, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x84, 0x1, 'Y'}, &(0x7f0000000500)={0x20, 0x85, 0x3, "c30edf"}}) syz_emit_vhci(0x0, 0x0) syz_usb_connect(0x2, 0x205, &(0x7f0000000600)={{0x12, 0x1, 0x201, 0xe3, 0x21, 0xbe, 0x40, 0x2001, 0x330d, 0x441d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1f3, 0x2, 0x40, 0x4, 0xff66e441b6a868f7, 0x3, "", [{{0x9, 0x4, 0x93, 0x3, 0x2, 0x5d, 0xac, 0xaf, 0x8, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x82e, 0x2, 0x1}, [@dmm={0x7, 0x24, 0x14, 0x3, 0x3}, @obex={0x5, 0x24, 0x15, 0xbe}, @acm={0x4}, @mbim_extended={0x8, 0x24, 0x1c, 0x10, 0x73, 0x9}]}], [{{0x9, 0x5, 0xe, 0x1c, 0x200, 0x0, 0x91, 0x1a}}, {{0x9, 0x5, 0x8, 0x0, 0x20, 0x8, 0x2, 0x7}}]}}, {{0x9, 0x4, 0xf8, 0x1, 0x8, 0xff, 0xff, 0xff, 0xef, [@cdc_ncm={{0x9, 0x24, 0x6, 0x0, 0x1, "7afd134d"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x7, 0x6, 0x3}, {0x6, 0x24, 0x1a, 0xbfda}}, @cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x2659}, {0xd, 0x24, 0xf, 0x1, 0xffffffff, 0x1, 0x7, 0x6}, {0x6, 0x24, 0x1a, 0x0, 0xe}, [@mdlm={0x15, 0x24, 0x12, 0xfff8}, @mdlm={0x15, 0x24, 0x12, 0x3}]}], [{{0x9, 0x5, 0x80, 0x10, 0x40, 0x2, 0x1, 0x2}}, {{0x9, 0x5, 0x80, 0x3, 0x3ff, 0x2, 0x81, 0x9}}, {{0x9, 0x5, 0xd, 0x0, 0x40, 0x0, 0x0, 0x3}}, {{0x9, 0x5, 0x9, 0x0, 0x3af, 0x3, 0x26, 0x25, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x0, 0x8}]}}, {{0x9, 0x5, 0x8, 0x0, 0x8, 0xf7, 0x0, 0x2, [@generic={0xce, 0x3, "01c0593bf211aa31bc2752f083e718ef137fdb91c7795531ef115a6fca2de9a9ed5cf4920a35df20be420450c6a9399ce5e04b4ac59e101062d38861a5926313778c469be440f4354880257deabb5b7db5c1197c13d0a8f33328c8726a43c512b5cc36d1ee24bd6438ae97f9d093e0f8e4f96b6cdba637998ed55b2344cd54f5526734295c3d5b8ca1d68fba276df6bfb0ff4c6ad183b1749cb46db14c5355f327d5d7ab58ae074b76292764663a1da60d2eae4af6fa2b4b4164c785150336af509553e23153990bf9efb854"}]}}, {{0x9, 0x5, 0x9, 0x2, 0x10, 0x2e, 0x4}}, {{0x9, 0x5, 0xd, 0x2, 0x3ff, 0xe, 0x9, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0xdd, 0x9}]}}, {{0x9, 0x5, 0x1, 0x10, 0x10, 0xf9, 0x5, 0x2, [@generic={0xb, 0x30, "8245095f6c201af427"}]}}]}}]}}]}}, &(0x7f0000001180)={0xa, &(0x7f0000000f40)={0xa, 0x6, 0x201, 0x6, 0x9e, 0xca, 0x10, 0x2}, 0x2f, &(0x7f0000000f80)={0x5, 0xf, 0x2f, 0x3, [@generic={0x7, 0x10, 0xb, "df50b8ca"}, @ssp_cap={0x18, 0x10, 0xa, 0x0, 0x3, 0x7fffff9, 0xff0f, 0x81, [0xc00f, 0xff0030, 0xffcf]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x8, 0x7, 0x8, 0x6, 0x7c}]}, 0x3, [{0x4, &(0x7f0000001000)=@lang_id={0x4, 0x3, 0x140a}}, {0x2, &(0x7f0000001040)=@string={0x2}}, {0x9, &(0x7f0000001140)=@string={0x9, 0x3, "ad23f16db01b0c"}}]}) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) fcntl$lock(r1, 0x24, 0x0) syz_emit_vhci(&(0x7f0000001240)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_phy_link_complete={{0x42, 0x3}, {0x7, 0xc8, 0x2}}}, 0x6) r2 = openat$vicodec1(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_QUERYCTRL(r2, 0xc0445624, &(0x7f0000001700)={0xfffffffc, 0x2, "1a30e40abe3acb875ef3a7ab4b7a6f0d409b56bd457ee703a1388116677ec173", 0x6, 0xf0000000, 0x3, 0x400}) syz_emit_vhci(&(0x7f0000001780)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0xea, 0x0, 0xc2c}}}, 0x7) syz_usb_connect$hid(0x2, 0x36, &(0x7f00000017c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x54c, 0xce6, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x81, 0xb0, 0x1, "", [{{0x9, 0x4, 0x0, 0x40, 0x2, 0x3, 0x1, 0x2, 0xd, {0x9, 0x21, 0x6, 0x6, 0x1, {0x22, 0x9cf}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x6, 0x7, 0x2}}}}}]}}]}}, &(0x7f0000001b00)={0xa, &(0x7f0000001800)={0xa, 0x6, 0x200, 0xcb, 0x9, 0x4, 0x10, 0x1}, 0x47, &(0x7f0000001840)={0x5, 0xf, 0x47, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0xa, 0xa, 0xb, 0x9}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x2, 0x2, 0x400}, @ssp_cap={0x20, 0x10, 0xa, 0x6, 0x5, 0x6, 0xf, 0x5, [0x577a8372775366a7, 0x0, 0x0, 0x0, 0x0]}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "4154da3e532e637ffdf6a3e8cca89684"}]}, 0x5, [{0xdb, &(0x7f00000018c0)=@string={0xdb, 0x3, "3f5af22afe85049526e0f11efc2a3a1329f0acf77e19426d943d867b8db9f9d535c51e8ae467abdf4990d7029b5b17f2c2b11d810757749f68c939f3967a4e1c985d95a79a91a0188f39000be8ac87d62a4eb5ee7e18e4be057062fa4df790d608030c898608d040c9ced4e22d32bea1fc7edce7700797ff52d173416b44291db971d468c38f917670b383fffac90b89f7267719027ced10a60a3e3ae31522b4935b5004da56ff46dc66522c5d42d79ffc817073200a86660a40956b72c8e5300e4a4de52f7181b221599f2973b65cae5f001f3e6f42169474"}}, {0x4a, &(0x7f00000019c0)=@string={0x4a, 0x3, "f3b3ae15e484c402989c889763090676872550f149633b05cff3c6d11705e147ab1163c343182687f38ae3610c1d74a2132f5faf6833c655434a140ee493577e41a292eb64caf77e"}}, {0x4, &(0x7f0000001a40)=@lang_id={0x4, 0x3, 0xd17c1afc79ca96b0}}, {0x14, &(0x7f0000001a80)=@string={0x14, 0x3, "80a77fc73dd7b21cc040afb94be0d9f07c33"}}, {0x4, &(0x7f0000001ac0)=@lang_id={0x4, 0x3, 0x820}}]}) syz_emit_vhci(&(0x7f0000001b80)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x0, 0x7b}, @l2cap_cid_signaling={{0x77}, [@l2cap_conf_req={{0x4, 0x0, 0x13}, {0x9cb1, 0x8, [@l2cap_conf_flushto={0x2, 0x2, 0xf8f}, @l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x4}, @l2cap_conf_mtu={0x1, 0x2, 0x4}]}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x4, 0x2}, {0x3}}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x79f, 0x2}}, @l2cap_info_req={{0xa, 0x2, 0x2}}, @l2cap_conf_rsp={{0x5, 0xa, 0x3b}, {0x9, 0x3ff, 0x100, [@l2cap_conf_efs={0x6, 0x10, {0x7, 0x2, 0xf5, 0x4e, 0xc, 0x40}}, @l2cap_conf_mtu={0x1, 0x2, 0x7fff}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_efs={0x6, 0x10, {0x3, 0x1, 0xe, 0x7, 0x7, 0x9}}, @l2cap_conf_ews={0x7, 0x2, 0x8}]}}, @l2cap_move_chan_req={{0xe, 0x7, 0x3}, {0x6, 0x8}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0x7ff}}]}}, 0x80) r3 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_misc(r3, &(0x7f0000001c00)="019589f79e0e3d6f7a29413235d1bf506dfad010ad84b8aaaf539c008d4e8810e44c4b7594483fefbd563d554b8d494824440b2d0d054c4226c33526e41d81c25971bff46f9dd5eccb514f8524acf592099dac44f319404c344e0881fcb13d66b04b374dbcd796022ce9c043635021ffff481110fd7b532fa5bcd28326ccade2ff4679329d219f59427f1dcd0d7016d415930436464d563795eb8065d4ac259c98afc1aa2b6f490ba6620101ce5241d91cb0156a16d702c67e83c5fe512841c5d7f50a47", 0xc4) openat$ppp(0xffffffffffffff9c, &(0x7f0000001d00), 0x280040, 0x0) r4 = syz_open_dev$sg(&(0x7f0000002100), 0x0, 0x4400) ioctl$XFS_IOC_FSGEOMETRY_V1(r4, 0x80705864, &(0x7f0000002140)) r5 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000002280)={r1, 0x58, &(0x7f0000002200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$nl_route(r5, &(0x7f0000002340)={&(0x7f00000021c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002300)={&(0x7f00000022c0)=@ipv6_getaddrlabel={0x24, 0x4a, 0x800, 0x70bd27, 0x25dfdbfe, {0xa, 0x0, 0x18, 0x0, r6, 0x8000}, [@IFAL_LABEL={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x10080}, 0x40000) socket$inet_sctp(0x2, 0x5, 0x84) set_mempolicy_home_node(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3, 0x0) syz_open_procfs$pagemap(0x0, &(0x7f0000002540)) 2m29.375183564s ago: executing program 4 (id=825): madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x881, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0x40000021, 0x0, 0x1ae}]}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETOFFLOAD(r3, 0x400454d0, 0x15) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) 2m28.868312503s ago: executing program 4 (id=829): clock_adjtime(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0xffffffffffffffff, 0x1, &(0x7f0000000300)=0x100a) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) syz_usb_connect$uac2(0x5, 0x83, &(0x7f0000000380)=ANY=[@ANYBLOB="120100020000000882052500400001020301090271000301f81005080b02000105200809c04e143900000000092401fdff0811004708240a0000097f000904010000010220000904010101010220000905010940000204d80825018030cc00000904", @ANYRESDEC=r0, @ANYRES8=r0], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac2(0xffffffffffffffff, &(0x7f0000000100)={0x14, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="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"]}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = gettid() r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000840), 0x8000) read(r2, &(0x7f0000000200)=""/209, 0xd1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000180)={0x335, @time={0x1, 0x7}, 0x1b, {0x0, 0x4}, 0x2, 0x2, 0x6}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r2, 0xc0bc5310, &(0x7f0000000000)) prlimit64(0x0, 0x1, &(0x7f0000000140)={0x0, 0x4}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) chdir(&(0x7f0000000140)='./file0\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) write$P9_RREADDIR(r3, &(0x7f00000002c0)={0xb, 0x29, 0x2, {0x8}}, 0xb) tkill(r1, 0x7) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$pokeuser(0x6, r4, 0x388, 0x41d9fda7) write(0xffffffffffffffff, 0x0, 0x0) mlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 2m27.201478981s ago: executing program 4 (id=833): symlink(&(0x7f0000000280)='.\x02\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x210282, 0x0) write$binfmt_aout(r1, 0x0, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6d71b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r4, &(0x7f0000000080), &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r4, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000006c0)={r4, &(0x7f0000000580)="92b41c338722daa1bf1f9d5ae58669201a2b1f665e54852b0771c8d9a62b145e14fee5c9380892aca6b03c80d3b670365e1f1112013b4a149288c7aaf5e1de211c30095479579558a9f61003fd3e1e462d4a6995df057260747ef9c54b8057b39e8f5504beabf15adff12c", 0x0}, 0x20) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r5, 0x5411, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000b40)={'batadv_slave_0\x00'}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000c00)={'syztnl2\x00', &(0x7f0000000b80)={'erspan0\x00', 0x0, 0xf847, 0x41, 0x3, 0xfd, {{0xc, 0x4, 0x1, 0x3, 0x30, 0x66, 0x0, 0xa3, 0x29, 0x0, @remote, @broadcast, {[@timestamp_addr={0x44, 0x1c, 0xf0, 0x1, 0x8, [{@rand_addr=0x64010102, 0x7}, {@loopback, 0x1}, {@multicast2, 0x5}]}]}}}}}) r6 = socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x5, 0x0) ptrace$peeksig(0x4209, r0, &(0x7f0000000000)={0x2, 0x1, 0x6}, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}]) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000880)=@newtfilter={0xac, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x5}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x78, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}, @TCA_U32_POLICE={0x50, 0x6, [@TCA_POLICE_TBF={0x3c, 0x1, {0xf, 0x10000000, 0x6ed, 0xfffffff8, 0x1000, {0x4, 0x2, 0x1, 0x6ca, 0x8}, {0xc, 0x2, 0x5, 0xfffc, 0x4, 0x8}, 0x78, 0xfffffffe, 0x6}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1ff}]}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0xe}}]}, 0xac}}, 0x24040084) 2m26.796912729s ago: executing program 4 (id=835): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) r2 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x7d0, 0x40000) ioctl$FE_GET_PROPERTY(r2, 0x80106f53, &(0x7f0000000100)={0x38, &(0x7f0000000480)=[{0x3c, '\x00', @st={0x4, [{0x3, @svalue=0x7}, {0x3, @svalue=0xa}, {0x2, @uvalue=0x8}, {0x31cd7bb0f87ff3d7, @svalue=0x10000}]}, 0x9}, {0x46, '\x00', @buffer={"54d0bab23e02dc24381387bbf7e39b88cf979e5b7dfa36e12bf4ce3f5a963d12", 0x20}, 0x7}]}) r3 = syz_io_uring_setup(0xf04, &(0x7f0000000400)={0x0, 0x595f, 0x80, 0x0, 0x10000051}, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000280)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x12, 0x1}) r7 = eventfd2(0x5, 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000040)=r7, 0x1) io_uring_enter(r3, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0xffaf) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r1) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="540000407032a30385996d5525d59e2ccc108ae23caaf211fe20d4451cb0ed0257435d32aa7a6991462c778b6af998b4b8e85d621e5861869c", @ANYRES16=r8, @ANYBLOB="00022cbd7000fedbdf2508000000080006000500000014000380060007004e20000008000300020000001400028006000b000a0000000800050003000000080005000500000008000600ff010000"], 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x800) 2m26.421662031s ago: executing program 32 (id=835): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) r2 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x7d0, 0x40000) ioctl$FE_GET_PROPERTY(r2, 0x80106f53, &(0x7f0000000100)={0x38, &(0x7f0000000480)=[{0x3c, '\x00', @st={0x4, [{0x3, @svalue=0x7}, {0x3, @svalue=0xa}, {0x2, @uvalue=0x8}, {0x31cd7bb0f87ff3d7, @svalue=0x10000}]}, 0x9}, {0x46, '\x00', @buffer={"54d0bab23e02dc24381387bbf7e39b88cf979e5b7dfa36e12bf4ce3f5a963d12", 0x20}, 0x7}]}) r3 = syz_io_uring_setup(0xf04, &(0x7f0000000400)={0x0, 0x595f, 0x80, 0x0, 0x10000051}, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000280)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x12, 0x1}) r7 = eventfd2(0x5, 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000040)=r7, 0x1) io_uring_enter(r3, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0xffaf) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r1) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="540000407032a30385996d5525d59e2ccc108ae23caaf211fe20d4451cb0ed0257435d32aa7a6991462c778b6af998b4b8e85d621e5861869c", @ANYRES16=r8, @ANYBLOB="00022cbd7000fedbdf2508000000080006000500000014000380060007004e20000008000300020000001400028006000b000a0000000800050003000000080005000500000008000600ff010000"], 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x800) 8.206164653s ago: executing program 1 (id=1278): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x40880) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002300), 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000001800010000000000feff"], 0x38}, 0x1, 0x0, 0x0, 0x8840}, 0x1) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0xfffffffd) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x0, r3}) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x400) ioctl$DRM_IOCTL_WAIT_VBLANK(r4, 0xc018643a, 0x0) close(r4) keyctl$set_timeout(0xf, 0x0, 0xfffffffffffffffe) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x20000, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r5, 0x84, 0x21, &(0x7f0000000140), &(0x7f0000000180)=0x4) 7.418143437s ago: executing program 1 (id=1281): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x200}) landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x2, 0x3}, 0x18, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) syz_open_dev$amidi(&(0x7f0000000140), 0x2, 0x20000) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_io_uring_complete(0x0, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002280)='/proc/cpuinfo\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000200)={0x2020}, 0x2020) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000040)={0x2710, 0x2, 0xdddd0000, 0x1000, &(0x7f0000c15000/0x1000)=nil}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x8000) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') lseek(r5, 0x2000, 0x0) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000040)={{0x3, 0x3, 0x7fffffff, 0x2, 0x34e8}}) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r4, 0x80605414, &(0x7f00000022c0)) ptrace(0x10, r6) 6.810475907s ago: executing program 2 (id=1287): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, 0x0, 0x0) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1, 0xf5}}], 0x48}, 0x0) 6.771770807s ago: executing program 3 (id=1288): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'veth1_virt_wifi\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000001040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000340)={0x34, r3, 0x1, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xb2}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x22}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40800}, 0x0) r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)=@o_path={&(0x7f0000000140)='./file0\x00', 0x0, 0x10, r1}, 0x18) fremovexattr(r6, &(0x7f00000001c0)=@random={'security.', '\\{\x00'}) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@remote, r2}, 0x14) r7 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100), 0x20580, 0x0) ioctl$FBIO_WAITFORVSYNC(r7, 0x40044620, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x58, 0x10, 0x401, 0xfffffffc, 0x0, {}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x28, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x7}, @IFLA_BR_PRIORITY={0x6, 0x6, 0x737}, @IFLA_BR_STP_STATE={0x8}, @IFLA_BR_MCAST_STATS_ENABLED={0x5, 0x2a, 0x1}]}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@newtfilter={0x24, 0x11, 0xd27, 0x2000, 0x0, {0x0, 0x0, 0x74, r2, {0x0, 0xffff}, {0xafabc05531515610, 0xfff3}, {0xb, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x1c005}, 0x24048004) setsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000000040)={@remote, r2}, 0x14) 6.504837904s ago: executing program 1 (id=1289): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@ipv6_newroute={0x3c, 0x18, 0x1, 0x70bd2c, 0x0, {0xa, 0x10, 0x0, 0x0, 0xfc, 0x2, 0xff}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x8}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_ID={0xc, 0x1, 0x2000000000009}}]}, 0x3c}}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) removexattr(&(0x7f0000000200)='./cgroup\x00', &(0x7f0000000240)=@known='user.incfs.metadata\x00') ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000340)) r5 = dup(r4) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000004c0)={0x1, 0x0, 0x0, &(0x7f0000000380)=""/48, 0x0, 0x41000}) syz_genetlink_get_family_id$team(&(0x7f0000000100), r5) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x1, r5}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xe, &(0x7f0000000040)=@framed={{0x18, 0x7}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x479}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @exit={0x95, 0x0, 0x7b00}]}, &(0x7f00000000c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000}, 0x94) 6.396716249s ago: executing program 3 (id=1290): r0 = socket$kcm(0xa, 0x2, 0x0) fcntl$setown(r0, 0x8, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="a80000001000ffff26bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="20ba0100380a04008000128009000100766c616e0000000070000280060001000400000004000380580004800c0001000a004000060000000c00010081000000080000000c00010000000000ffffffff0c00010004000000050000000c000100fbffffffff7f00000c00010003000000050000000c00010006000000000000000600050088a8000008000500", @ANYRES32=r2], 0xa8}}, 0x8000002) r3 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870f500090582020002"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(0xffffffffffffffff, 0x0, 0x8000) sendmmsg$inet(0xffffffffffffffff, &(0x7f000001b7c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, 0x0, 0x30}}], 0x1, 0x4008804) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3d41b1b"]) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) 6.39394653s ago: executing program 2 (id=1291): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000002180), 0x101000, 0x0) lseek(r1, 0xffffffffffffffff, 0x0) msgget$private(0x0, 0xa) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x38, 0x10, 0x421, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0x10000}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IGNORE_DF={0x5, 0x13, 0x1}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000207d1e512d00000000000109022400010000000009040000010300020009210000000122050009058103"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f00000004c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000bac"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000ac0)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="2001c1"], 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r4 = syz_usb_connect$sierra_net(0x2, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x4, 0x2, 0x400, 0x3, 0x60, 0xbd}, {0x9, 0x5, 0xe, 0x2, 0x40, 0x4, 0x1, 0x1}, {0x9, 0x5, 0xb, 0x3, 0x400, 0x3, 0x62, 0x9}}}}}}]}}, 0x0) syz_usb_control_io$sierra_net(r4, &(0x7f00000003c0)={0x14, &(0x7f00000002c0)={0x0, 0x24, 0x80, {0x80, 0x10, "dbf6748c5900979c05956facfc67ce3cc63fcd2d82eb884f0e1d7454b4d010cc55faf560e532b167ff6152a8fda871b361e873c52de9886aa60cc39556f761ca9a6a0a1b459d8fdb005da69aca0ed5bf0f8e392cbc149950c292fd0b1389d968b9e4a30a3c878ae3bb768c909ec9861399a6db392454b81bd97784bc9928"}}, &(0x7f0000000380)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3801}}}, &(0x7f0000000f80)={0x1c, &(0x7f0000000500)={0x40, 0x14, 0xc5, "552fdb1470ecbab4d705296813be3129ff43c5d4571d11d25a181fdac5874642704182fcc28dadcd1cdd0783e08fe2f15c22d5b3f6ece7c3f611109a78fdb1099747adcab588531b5ead7f82feddb7fd109c3d4db86bb0c7816903e58707c80d7d4cb6116702e9bd9f54e9ffbb77cda74ea841c1211f9b4655559906820ba3c1a03c6d5d1d23cdef448f8ed1d56199d4eb0d0204ccf75de3526660b74f7a4ec61952f89adcb87e80b7b39271a7775b924f394836bf1e1ccf0b6de8bcef7d46bc3bbaade32f"}, &(0x7f0000000b00)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000000f40)={0x21, 0x0, 0x4, "94f4a426"}}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) 6.306764944s ago: executing program 1 (id=1292): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x6) sched_setscheduler(0x0, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x10) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r3, 0x0, 0x0, 0x20004041, 0x0, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x5, 0x0, 0x0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x1) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) kcmp(r0, r0, 0x1, r3, r2) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r4, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)='%ps \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r5}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0feffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000801000085000003a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r6, 0x2f08, 0xe, 0x0, &(0x7f0000000380)="a162cef0563a20f5177241ee8f52", 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}, 0x50) lsm_get_self_attr(0x67, &(0x7f0000000600)={0x0, 0x0, 0xc2, 0xa2, ""/162}, &(0x7f0000000440)=0xc2, 0x0) 5.628585869s ago: executing program 5 (id=1295): io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x25, 0x0, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$key(0xf, 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x4, 0x0, 0x7}) r3 = syz_open_procfs(0x0, &(0x7f0000000bc0)='auxv\x00') preadv(r3, &(0x7f0000000100)=[{&(0x7f0000004540)=""/4095, 0xfff}], 0x1, 0xa, 0xb) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4084}, 0x4) sendmsg$WG_CMD_GET_DEVICE(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x28, r6, 0x301, 0x70bd2c, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0xc0}, 0x20040000) r7 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r8 = syz_kvm_setup_syzos_vm$x86(r7, &(0x7f0000bff000/0x400000)=nil) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2d}, 0x90) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000004c0)={'syzkaller1\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r9, r11, 0x25, 0x2, @void}, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_GET(r3, &(0x7f0000000500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000640)={0xac, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x4}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x10}, 0x4000040) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r7, 0x4068aea3, &(0x7f00000000c0)={0xa4, 0x0, 0x1}) syz_kvm_add_vcpu$x86(r8, &(0x7f0000000ec0)={0x0, 0x0}) 5.390030953s ago: executing program 1 (id=1296): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x18, 0x6, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf3ffffff, 0x0, 0x0, 0x0, 0x80ffffff}, [@jmp={0x5, 0x0, 0x849aee721dcc84be, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0xa2cc39c635ab99fe, 0x0, 0x0, 0xfffffffffffffffc, 0xbf}, @call={0x85, 0x0, 0x0, 0xae}]}, &(0x7f00000000c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x13) r1 = socket(0x10, 0x803, 0x0) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000400)="5500000020007fafb70000200000000080000000030b43026c26236925000400fe7f0000bd2dca8a9848a3c728f1c46b7b31afdc1338d5e801e0b009000000000100005ae583de0dd7d8319f98af84fda542e718f9", 0x55}], 0x1}, 0x4000) r2 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000040)=0x805, 0x4) sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000880)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000840)={&(0x7f0000000740)={0xf4, 0x0, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xf}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfffff800}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x41de}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}]}, @TIPC_NLA_BEARER={0x8c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x7fff, @loopback, 0x8}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x3ff, @loopback, 0x7}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}]}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffff8}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x810}, 0x40000) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0}}, 0x20008886) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) r5 = eventfd2(0x0, 0x0) readv(r5, &(0x7f0000000500)=[{&(0x7f0000000380)=""/95, 0x5f}], 0x1) write$eventfd(r5, &(0x7f0000000280)=0x9, 0x8) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x140f, 0x1, 0x70bd2a, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xb, 0x45, 'uverbs\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) setsockopt$inet_tcp_int(r3, 0x6, 0xa, &(0x7f0000000000), 0x4) syz_open_dev$MSR(&(0x7f0000000040), 0x5, 0x0) r6 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870f500090582020002"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x64}, 0x1, 0x0, 0x0, 0x4000001}, 0x40) syz_usb_ep_write$ath9k_ep1(r6, 0x82, 0xa8, &(0x7f0000000400)=ANY=[]) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x4f) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}, 0x1, 0x0, 0x0, 0x8810}, 0x0) r10 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000640)='freezer.self_freezing\x00', 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r10, &(0x7f00000003c0)={&(0x7f0000000600), 0xc, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB="400000000d14000827bd7000fedbdf2508000100010000000a0003000200000008000300000000000800039e42d4cc6ef9daa66fa2370000000000e7000300020000000800010002000000aadc58dc15fe32695d32ce5b0c9b4dc00c4ea5a56da767436e08ea16695ccf0bc6ce08bcc603f074ea39a0d4e2789901a9d007ff343f50adbda3a3ddeff300"], 0x40}, 0x1, 0x0, 0x0, 0xc000}, 0x5802) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010001fff000000008100000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000200012800b00010067656e657665000010000280060005004e24000004000e0008000a00", @ANYRES32=r7], 0x48}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) r11 = syz_genetlink_get_family_id$ipvs(&(0x7f00000004c0), r1) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, r11, 0x300, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1ff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x2000484c}, 0x40000) 4.656251135s ago: executing program 5 (id=1297): connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x40007f, @dev={0xfe, 0x80, '\x00', 0x43}, 0xc7}, 0x1c) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r0, 0x8b2c, 0x0) ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x560e, &(0x7f0000000000)) 4.586969413s ago: executing program 5 (id=1298): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x161140, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f00000015c0)={0x1, 0x0, [{0x1, 0x9, 0x7, 0x1, 0x8}]}) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f00000000c0)=0x3) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000880)={"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"}) ioctl$KVM_RUN(r3, 0xae80, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x21}, &(0x7f0000000300)) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x200002, 0x0) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000018110000", @ANYRES32=r7], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r8}, 0xc) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000005c0)={r6, r5, 0x15, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0}}, 0x30) getsockopt(0xffffffffffffffff, 0xff, 0x1, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xb, &(0x7f0000000100)=0x800000, 0x48) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4010}, 0x0) 4.142251211s ago: executing program 2 (id=1299): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x20d6, 0xcb17, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xe8, 0xb, "", [{{0x9, 0x4, 0x0, 0x5, 0x11, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x7, 0x0, 0x1, {0x22, 0x1e3}}, {{{0x9, 0x5, 0x81, 0x3, 0x38d707d343173689, 0x1, 0xa, 0x70}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000200)={r1, 0xa9, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x12, 0x9, 0x15, "60173897558f7a31d572206a6d612ce67693a8dc91919500385057a6d06ea474dea74c376480c2be1f0a8476bb1935052bdaa12b35b48115c9e36161c2ae0a3b", "e8465d9694dae7bd75f7ff850e24cbeb9f9759ca8e77aa42d698345cccb131ee30c56c5577fd22686baa5f93e256be42ba66d812a141a76d1475b5ffe12a6ced", "4a3f9dff0ce4227a8be14b01a49d0a7f3d2b8d642a5f5df12cce8f5f4143bd83", [0x7, 0x2]}}) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x62c40, 0x0) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) (async) syz_open_dev$midi(&(0x7f0000000080), 0x3, 0x8ac02) close_range(r2, r3, 0x0) (async) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002100), 0x2, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY(r5, 0x5000940f, &(0x7f0000000340)={{r1}, "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"}) (async) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.133381304s ago: executing program 3 (id=1300): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000140), 0x1400, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x5, 0x17, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000074f6967d00000000000000180100002020702500000000002020207baaf8ff0000000abda100000000000027010000f8ffffffb702000008000000b7030000000000002500000006000000be91000000000000b502ecffffff00008500000005000000b70000000000000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.618509337s ago: executing program 3 (id=1302): socket(0x1d, 0x2, 0x6) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1, 0x10, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x106a655, 0x0, 0x0, 0x0, 0x7ff}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@call={0x85, 0x0, 0x0, 0x11}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xd, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd, 0xd, 0x2, [@datasec={0x2, 0x0, 0x0, 0xf, 0x1, [], "a7"}]}}, 0x0, 0x2a, 0x0, 0x1}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000007"], 0x50) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) write$binfmt_misc(r3, &(0x7f0000000000), 0xd) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)={0x20, 0x1e, 0x221, 0x0, 0x0, {0x7}, [@nested={0xc, 0x19, 0x0, 0x1, [@nested={0x8, 0xf3, 0x0, 0x1, [@nested={0x4, 0x28}]}]}]}, 0x20}}, 0x0) r5 = fanotify_init(0x2, 0x80000) fanotify_mark(r5, 0x10, 0x44001000, 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0xffff, 0x4, 0x7, 0xffff222a}]}) r6 = socket$can_bcm(0x1d, 0x2, 0x2) socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) sendmsg$key(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020800000100000000000001000000000100140003"], 0x18}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) open(&(0x7f00009e1000)='./file0\x00', 0x48141, 0x0) io_setup(0x3, &(0x7f0000000600)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) r9 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(r8, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r9, &(0x7f00000000c0)="01", 0x24}]) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x1, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x8}, {0x7, 0xf}, {0x0, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x44060}, 0x98) 3.596268987s ago: executing program 5 (id=1303): r0 = gettid() syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) io_setup(0x8, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmctl$SHM_INFO(r2, 0xe, &(0x7f0000000300)=""/72) socket$packet(0x11, 0x2, 0x300) write(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0xc0980, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r7, 0x4048aec9, &(0x7f0000000480)={0x6, 0x0, @ioapic={0xeeef0000, 0xcb, 0x4, 0x400, 0x0, [{0xfa, 0xad, 0x6, '\x00', 0x3}, {0x2, 0xd7, 0x80, '\x00', 0x9e}, {0x1, 0x1, 0x3}, {0x8, 0x3, 0x3, '\x00', 0x2}, {0xfd, 0xa, 0x8, '\x00', 0x1}, {0x59, 0x7, 0xf, '\x00', 0x6}, {0xc, 0x8, 0x0, '\x00', 0x1}, {0x3, 0xa5, 0x8, '\x00', 0xd}, {0x4, 0xf, 0x5, '\x00', 0x3}, {0x3, 0x1, 0x3}, {0x7, 0x71, 0x4, '\x00', 0x8}, {0x9, 0x3, 0xb, '\x00', 0x16}, {0x4, 0x9, 0x7f}, {0x8, 0xd, 0xa, '\x00', 0x1}, {0x4b, 0x8, 0x1, '\x00', 0xf8}, {0x0, 0x13, 0x0, '\x00', 0x1}, {0x3, 0xb8, 0xff, '\x00', 0x7e}, {0x3, 0x8, 0x73, '\x00', 0xff}, {0x4, 0xe8, 0x3, '\x00', 0x80}, {0x3, 0x8a, 0xd3, '\x00', 0x4}, {0xfc, 0x6d, 0xf9, '\x00', 0x8}, {0xff, 0x2, 0x1, '\x00', 0x26}, {0xc, 0xce, 0x0, '\x00', 0x2}, {0x5, 0x8, 0x8}]}}) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r1) process_vm_readv(r0, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000600)=""/166, 0xa6}, {&(0x7f00000006c0)=""/209}], 0x2, &(0x7f0000000040)=[{0xffffffffffffffff, 0xa}, {&(0x7f0000000140)=""/88, 0xbc}], 0x2, 0x0) r8 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r8, 0x10c, 0x0, &(0x7f0000000040)=0xfffffa78, 0x4) 3.058453337s ago: executing program 2 (id=1304): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) pipe(&(0x7f0000000140)) mremap(&(0x7f000045b000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000044c0), 0x1, 0x0) write$binfmt_register(r0, &(0x7f0000000080)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x1, 0x3a, 'cgroup.typ\\\x00', 0x3a, '\x00c6Iw\x9a\x8b\x0e\x953\x02S\xb3\xb6(\xb0/V\xca\xc6\x16\x9f\xf8\x1f\x97\x9d[\x7f\xe7\xccxh\xa1\xf2\x02\xa3\xe9*e[\xe5\xc9\x9dKx0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsopen(0x0, 0x0) gettid() (async) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x2c, 0x800000000004, @tid=r3}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'xfrm0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'xfrm0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x0, 0x0, 0x2000}}}}, @TCA_STAB={0x80, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}]}, 0x6c}}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x0, 0x0, 0x2000}}}}, @TCA_STAB={0x80, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}]}, 0x6c}}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, &(0x7f00000001c0)=ANY=[@ANYRES16=r4, @ANYRES64=r2], 0x3a) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) (async) r7 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000440)={'#! ', './file1/../file0', [{0x20, 'cgroup.stat\x00'}, {0x20, '\x00#a\xe2\xa0&E\te\xec\xd4\xd4<\xdf\xb0\xa9k0\x8f~BsZ\x91\x7ft\xdb\xac\x9d\x87\fC\xcf\x9d\x94n\x1fP\x7f2\xb28\x00\x1a\xd2'}]}, 0x4f) (async) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000440)={'#! ', './file1/../file0', [{0x20, 'cgroup.stat\x00'}, {0x20, '\x00#a\xe2\xa0&E\te\xec\xd4\xd4<\xdf\xb0\xa9k0\x8f~BsZ\x91\x7ft\xdb\xac\x9d\x87\fC\xcf\x9d\x94n\x1fP\x7f2\xb28\x00\x1a\xd2'}]}, 0x4f) write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="0080"], 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) (async) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="0080"], 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300", [0x10, 0x4]}}) mmap(&(0x7f0000cda000/0x4000)=nil, 0x4000, 0x9, 0x12, r0, 0x173b000) (async) mmap(&(0x7f0000cda000/0x4000)=nil, 0x4000, 0x9, 0x12, r0, 0x173b000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x4000, 0x0) 2.757513393s ago: executing program 1 (id=1307): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000013c0)={{0x12, 0x1, 0x250, 0x3b, 0x58, 0xf1, 0x20, 0x1df7, 0x2500, 0x8bf2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x8, 0x3, 0x10, 0x80, "", [{{0x9, 0x4, 0x71, 0x8, 0x0, 0xb2, 0xee, 0x1, 0x7}}]}}]}}, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0}) read$msr(r0, &(0x7f0000025300)=""/102392, 0x18ff8) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r2) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)={0x1c, r3, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000054) 2.678535178s ago: executing program 0 (id=1308): mmap$IORING_OFF_SQ_RING(0x0, 0x1000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000c00), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240), 0x0}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x1}) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x9, 0x810, r0, 0x99901000) 2.67665355s ago: executing program 3 (id=1309): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x0, 0xfffffff9}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000180)=[{0x1d, 0x5, 0xa, 0x5}]}) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f00007e0000/0x1000)=nil, 0x1000}}) 2.611297959s ago: executing program 0 (id=1310): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = dup2(r0, r0) getsockopt$inet_mreqn(r1, 0x0, 0x23, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000f4688d8e5f000000000018110000", @ANYRESDEC=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = fsopen(&(0x7f0000000200)='pipefs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0xf) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000040)=ANY=[@ANYRES32], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x2}, 0x97) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008c98e746077850dab77bca32534ddded82e2235965107f7197b3ae7309dfaef2dc359518db2026cca663a58c4bdaea61b2ee44547bb8a0000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x87, @private=0xa010101, 0x4e24, 0x1, 'none\x00', 0x5, 0x32bd, 0x9}, {@loopback, 0x4e25, 0x2, 0xfffffffe, 0x8, 0x12d5c}}, 0x44) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000020000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0x69, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r6, 0x4010ae67, &(0x7f0000000180)={0x0, 0x10d000}) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f"], 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) r8 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r8, &(0x7f0000000040), 0x10) sendmsg$netlink(r8, &(0x7f0000005d80)={&(0x7f0000000440)=@kern={0x1d, 0x0, 0x0, 0x20000}, 0x2, &(0x7f0000000140)=[{&(0x7f0000000600)=ANY=[], 0x38}, {0x0, 0x10f0}], 0x2, 0x0, 0x0, 0x20000c4}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c00)={r3, 0xe0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f00000001c0)=[0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0], 0x0, 0x84, &(0x7f00000002c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000300), &(0x7f0000000400), 0x8, 0x68, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r4, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r10, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.559856384s ago: executing program 5 (id=1311): syz_usbip_server_init(0x1) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mount(&(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000002c0)='pvfs2\x00', 0x101c802, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0xff70) mmap(&(0x7f00007d5000/0x4000)=nil, 0x4000, 0x4, 0x110, r0, 0x200000) (async) mmap(&(0x7f00007d5000/0x4000)=nil, 0x4000, 0x4, 0x110, r0, 0x200000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) (async) ptrace(0x10, r1) ptrace$poke(0x5, r1, &(0x7f0000000200), 0x0) 2.318106609s ago: executing program 5 (id=1312): r0 = socket$kcm(0xa, 0x2, 0x0) fcntl$setown(r0, 0x8, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="a80000001000ffff26bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="20ba0100380a04008000128009000100766c616e0000000070000280060001000400000004000380580004800c0001000a004000060000000c00010081000000080000000c00010000000000ffffffff0c00010004000000050000000c000100fbffffffff7f00000c00010003000000050000000c00010006000000000000000600050088a8000008000500", @ANYRES32=r2], 0xa8}}, 0x8000002) r3 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870f500090582020002"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(0xffffffffffffffff, 0x0, 0x8000) sendmmsg$inet(0xffffffffffffffff, &(0x7f000001b7c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, 0x0, 0x30}}], 0x1, 0x4008804) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3d41b1b"]) 2.317355334s ago: executing program 0 (id=1313): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000140), 0x1400, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x5, 0x17, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000074f6967d00000000000000180100002020702500000000002020207baaf8ff0000000dbda100000000000027010000f8ffffffb702000008000000b7030000000000002500000006000000be91000000000000b502ecffffff00008500000005000000b70000000000000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.2375455s ago: executing program 3 (id=1314): r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f00000001c0)={'nat\x00', 0x0, 0x0, 0x90, [0x4, 0x80, 0xffffffffffffffc0, 0xfff, 0xfffffffffffffff7, 0xd], 0x0, 0x0, 0x0}, &(0x7f0000000240)=0x108) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0xf}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0xffffffffffffff0f, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) socket$inet_tcp(0x2, 0x1, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd604dd708001c06fffe8000000000000000000000000000bbfe8000000000000000000000000000aa00004001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="704affffffff495e0100ffffc1dc00"], 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x8) r9 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r9, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r8, 0x89f6, &(0x7f0000000580)={'sit0\x00', &(0x7f0000000500)={@empty, 0x0, 0x0, 0x40, 0x0, [{@broadcast}, {@loopback}, {@initdev}, {@remote}]}}) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xa, &(0x7f0000000080)=0x4, 0x4) unlinkat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x200) r11 = openat$cgroup_ro(r10, 0x0, 0x275a, 0x0) write$cgroup_int(r11, &(0x7f0000000200)=0x1, 0x12) syz_ublk_setup_queues(r8, r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x3, 0x255, 0x0, r8}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7fffff, 0x2, 0x1000000, 0x10000003}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x8000, 0x2, 0x146, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x683b, 0x1820, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x20002, 0x1, 0xffffffef}}], 0x1, &(0x7f0000000340)={0x2e, 0x45, 0x0, r8, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r5, '\x00', {0x1, 0x5, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0e0000"], 0x48) syz_usb_connect(0x0, 0x24, &(0x7f00000006c0)=ANY=[@ANYBLOB="12010000bd160f4086801001adbf000000010902120001000000000904"], 0x0) socket$qrtr(0x2a, 0x2, 0x0) r12 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r12) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0) 2.18412721s ago: executing program 0 (id=1315): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 1.570204586s ago: executing program 0 (id=1316): r0 = syz_usb_connect$rtl8150(0x2, 0xfffffffffffffc50, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000340)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="4805019073bd9aa5a2f70a0000006f"]}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) 0s ago: executing program 2 (id=1317): r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040), 0x109102, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r1, 0x6, 0x10, 0x0, &(0x7f0000000940)) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) fremovexattr(r2, &(0x7f0000000000)=@known='system.posix_acl_access\x00') r3 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0x1, 0xfffffffffffffffe) keyctl$read(0xb, r3, 0x0, 0x0) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000000)='5', 0x1}, {&(0x7f0000000580)="d9e83bdbb3883b267debb390dcf9064ecb517aa60fe2df5b93edd169486df829a90b55a0a2dd0755a058077255496bb96d065e976854b20382b071b30db3d6894820b4b0c4c29b7c01e76a11dd37a309e33c2c94df4e156eed53f5ba2dbe150f91a70ba8d09b74cdc1bbd8c9d8ccb568bea9671dca7a2d94fb6164c9b23a9ec70fdff1db11c243ac56330c74c5e76b397b15d49b2f7af084d26032717d82c83821fddca620680dbcc4030e3434f1fd867dc1e350ae88cf8062de5f", 0xbb}, {&(0x7f0000000080)="c60459f1ce740973412d259ae386f61b73cb1b", 0x13}, {&(0x7f00000000c0)="c57dd1da38cce7829e8aae47b6c3d1334dba3c1a69ad10fa5cfb6ce7b27c191572f72f5bd12e8c41d635ad7ebbf75677ca66eb1b2eb6fd8c3cbf341eb7f56133824f", 0x42}], 0x4) kernel console output (not intermixed with test programs): [ 353.020736][ T804] usb 6-1: device descriptor read/8, error -71 [ 353.169442][ T30] audit: type=1400 audit(1782181487.071:832): avc: denied { create } for pid=9943 comm="syz.3.941" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 353.189630][ T5704] usb 3-1: Using ep0 maxpacket: 32 [ 353.196562][ T5704] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 353.206264][ T5704] usb 3-1: config 0 has no interface number 0 [ 353.215208][ T5704] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 353.217730][ T804] usb usb6-port1: unable to enumerate USB device [ 353.225847][ T5704] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.243194][ T5704] usb 3-1: Product: syz [ 353.247405][ T5704] usb 3-1: Manufacturer: syz [ 353.374462][ T5704] usb 3-1: SerialNumber: syz [ 353.382906][ T5704] usb 3-1: config 0 descriptor?? [ 353.392018][ T5703] usb 4-1: USB disconnect, device number 43 [ 353.400167][ T5704] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 353.600520][ T5704] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 353.621091][ T5704] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 353.633448][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 353.641964][ T30] audit: type=1400 audit(1782181487.551:833): avc: denied { read write } for pid=9970 comm="syz.0.946" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 353.706485][ T5704] usb 3-1: USB disconnect, device number 53 [ 353.714201][ T30] audit: type=1400 audit(1782181487.551:834): avc: denied { open } for pid=9970 comm="syz.0.946" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 353.746293][ T5704] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 353.764959][ T5704] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 353.796443][ T5704] quatech2 3-1:0.51: device disconnected [ 353.952059][ T30] audit: type=1400 audit(1782181487.851:835): avc: denied { read append } for pid=9989 comm="syz.5.950" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 354.026808][ T5704] usb 2-1: USB disconnect, device number 44 [ 354.084445][ T30] audit: type=1400 audit(1782181487.851:836): avc: denied { open } for pid=9989 comm="syz.5.950" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 354.118320][ T9997] FAULT_INJECTION: forcing a failure. [ 354.118320][ T9997] name failslab, interval 1, probability 0, space 0, times 0 [ 354.157456][ T9997] CPU: 1 UID: 0 PID: 9997 Comm: syz.3.952 Not tainted syzkaller #0 PREEMPT(full) [ 354.157484][ T9997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 354.157496][ T9997] Call Trace: [ 354.157502][ T9997] [ 354.157509][ T9997] dump_stack_lvl+0x100/0x190 [ 354.157536][ T9997] should_fail_ex.cold+0x5/0xa [ 354.157558][ T9997] ? kmem_cache_alloc_node_noprof+0x5b/0x6f0 [ 354.157590][ T9997] should_failslab+0xc2/0x120 [ 354.157611][ T9997] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 354.157648][ T9997] ? __alloc_skb+0x140/0x710 [ 354.157669][ T9997] ? __alloc_skb+0x5b7/0x710 [ 354.157692][ T9997] __alloc_skb+0x140/0x710 [ 354.157711][ T9997] ? __alloc_skb+0x5b7/0x710 [ 354.157731][ T9997] ? __pfx___alloc_skb+0x10/0x10 [ 354.157752][ T9997] ? netlink_autobind.isra.0+0x160/0x370 [ 354.157785][ T9997] netlink_alloc_large_skb+0x69/0x150 [ 354.157815][ T9997] netlink_sendmsg+0x680/0xda0 [ 354.157836][ T9997] ? __pfx_netlink_sendmsg+0x10/0x10 [ 354.157859][ T9997] ____sys_sendmsg+0xa4d/0xbe0 [ 354.157887][ T9997] ? __pfx_netlink_sendmsg+0x10/0x10 [ 354.157906][ T9997] ? __pfx_____sys_sendmsg+0x10/0x10 [ 354.157937][ T9997] ? kstrtouint_from_user+0x13c/0x1d0 [ 354.157961][ T9997] ___sys_sendmsg+0x190/0x1e0 [ 354.157990][ T9997] ? __pfx____sys_sendmsg+0x10/0x10 [ 354.158019][ T9997] ? get_pid_task+0x106/0x250 [ 354.158050][ T9997] ? rcu_is_watching+0x12/0xc0 [ 354.158087][ T9997] __sys_sendmsg+0x160/0x210 [ 354.158110][ T9997] ? __pfx___sys_sendmsg+0x10/0x10 [ 354.158138][ T9997] ? rcu_is_watching+0x12/0xc0 [ 354.158164][ T9997] do_syscall_64+0x115/0x870 [ 354.158182][ T9997] ? clear_bhb_loop+0x40/0x90 [ 354.158204][ T9997] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.158223][ T9997] RIP: 0033:0x7f5df859ce59 [ 354.158239][ T9997] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 354.158259][ T9997] RSP: 002b:00007f5df94b9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 354.158278][ T9997] RAX: ffffffffffffffda RBX: 00007f5df8815fa0 RCX: 00007f5df859ce59 [ 354.158293][ T9997] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 0000000000000005 [ 354.158305][ T9997] RBP: 00007f5df94b9090 R08: 0000000000000000 R09: 0000000000000000 [ 354.158318][ T9997] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 354.158330][ T9997] R13: 00007f5df8816038 R14: 00007f5df8815fa0 R15: 00007ffe88b59438 [ 354.158351][ T9997] [ 354.704718][ T30] audit: type=1400 audit(1782181487.851:837): avc: denied { ioctl } for pid=9989 comm="syz.5.950" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 354.765012][T10004] omfs: Invalid superblock (0) [ 354.781577][T10004] overlay: Bad value for 'upperdir' [ 354.799448][ T804] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 354.972169][ T804] usb 1-1: unable to get BOS descriptor or descriptor too short [ 355.245580][T10008] netlink: 32 bytes leftover after parsing attributes in process `syz.2.956'. [ 355.592455][ T804] usb 1-1: config 129 has an invalid interface number: 135 but max is 0 [ 355.601744][ T804] usb 1-1: config 129 has an invalid interface number: 5 but max is 0 [ 355.611186][ T804] usb 1-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 355.621275][ T804] usb 1-1: config 129 has no interface number 0 [ 355.630551][ T804] usb 1-1: config 129 has no interface number 1 [ 355.642841][ T804] usb 1-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 355.656996][ T804] usb 1-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 355.669629][ T804] usb 1-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 355.683040][ T804] usb 1-1: config 129 interface 135 has no altsetting 0 [ 355.690115][ T804] usb 1-1: config 129 interface 5 has no altsetting 0 [ 355.699676][ T804] usb 1-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 355.710104][ T804] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.718110][ T804] usb 1-1: Product: syz [ 355.723908][ T804] usb 1-1: Manufacturer: syz [ 355.729424][ T804] usb 1-1: SerialNumber: syz [ 355.750867][T10011] syzkaller0: entered promiscuous mode [ 355.780493][T10011] syzkaller0: entered allmulticast mode [ 355.833118][T10011] netlink: 4 bytes leftover after parsing attributes in process `syz.2.957'. [ 355.965899][ T804] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 355.989785][ T804] usb 1-1: MIDIStreaming interface descriptor not found [ 356.064769][ T804] usb 1-1: USB disconnect, device number 44 [ 356.180829][T10028] netlink: 28 bytes leftover after parsing attributes in process `syz.3.962'. [ 356.234324][T10028] netlink: 8 bytes leftover after parsing attributes in process `syz.3.962'. [ 356.559448][ T804] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 356.739494][ T804] usb 4-1: Using ep0 maxpacket: 32 [ 356.752919][ T804] usb 4-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 356.770663][ T804] usb 4-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 356.785059][ T804] usb 4-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 356.816240][T10048] lo speed is unknown, defaulting to 1000 [ 356.817067][ T804] usb 4-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 356.911049][ T804] usb 4-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 356.924437][ T804] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.935766][ T804] usb 4-1: Product: syz [ 356.956666][ T804] usb 4-1: Manufacturer: syz [ 356.984212][ T804] usb 4-1: SerialNumber: syz [ 357.005118][ C1] imon 4-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 357.017374][ T804] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/input/input28 [ 357.066156][T10054] netlink: 32 bytes leftover after parsing attributes in process `syz.1.969'. [ 357.630551][ T804] imon 4-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 357.654065][ T804] (id 0x00) [ 357.659585][ T29] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 357.729525][ T804] rc_core: IR keymap rc-imon-pad not found [ 357.735396][ T804] Registered IR keymap rc-empty [ 357.745988][ T804] imon 4-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 357.819714][ T29] usb 2-1: Using ep0 maxpacket: 8 [ 358.049666][ T804] imon 4-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 358.074312][ T29] usb 2-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 358.083652][T10071] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 358.108864][ T804] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0 [ 358.150392][ T804] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0/input29 [ 358.162982][ T29] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.172477][ T29] usb 2-1: Product: syz [ 358.181501][ T804] imon 4-1:155.0: iMON device (15c2:ffdc, intf0) on usb<4:44> initialized [ 358.190973][ T29] usb 2-1: Manufacturer: syz [ 358.195607][ T29] usb 2-1: SerialNumber: syz [ 358.209718][ T29] usb 2-1: config 0 descriptor?? [ 358.226762][ T29] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state. [ 358.246513][ T29] dvb-usb: bulk message failed: -22 (2/0) [ 358.264718][ T29] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 358.305615][ T29] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201)) [ 358.353297][ T29] usb 2-1: media controller created [ 358.380186][ T5731] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 358.419863][ T29] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 358.441938][T10037] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 358.461114][ T29] dvb-usb: bulk message failed: -22 (1/0) [ 358.508011][ T29] DVB: Unable to find symbol mt352_attach() [ 358.522918][ T29] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)' [ 358.546430][ T30] audit: type=1400 audit(1782181748.445:838): avc: denied { create } for pid=10082 comm="syz.5.978" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 358.569522][ T5731] usb 1-1: Using ep0 maxpacket: 8 [ 358.587399][ T30] audit: type=1400 audit(1782181748.445:839): avc: denied { write } for pid=10082 comm="syz.5.978" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 358.588932][ T5731] usb 1-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=4d.89 [ 358.629605][ T5731] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.650379][ T29] rc_core: IR keymap rc-dvico-portable not found [ 358.658361][ T29] Registered IR keymap rc-empty [ 358.681576][ T29] rc rc1: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc1 [ 358.700198][ T5731] usb 1-1: config 0 descriptor?? [ 358.711030][ T5731] gm12u320 1-1:0.0: [drm:gm12u320_misc_request.constprop.0] *ERROR* Misc. req. error -22 [ 358.726082][T10037] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3659427032 (29275416256 ns) > initial count (200000 ns). Using initial count to start timer. [ 358.751698][ T29] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc1/input30 [ 358.787031][ T5731] gm12u320 1-1:0.0: probe with driver gm12u320 failed with error -5 [ 358.803014][ T30] audit: type=1400 audit(1782181748.705:840): avc: denied { accept } for pid=10091 comm="syz.5.980" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 358.812972][ T5731] usb-storage 1-1:0.0: USB Mass Storage device detected [ 358.852878][ T29] dvb-usb: schedule remote query interval to 100 msecs. [ 358.871721][ T29] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected. [ 358.979902][ T5743] dvb-usb: bulk message failed: -22 (1/0) [ 359.038229][ T5731] usb-storage 1-1:0.0: device ignored [ 359.099587][ T5743] dvb-usb: bulk message failed: -22 (1/0) [ 359.143274][ T29] usb 2-1: USB disconnect, device number 45 [ 359.162794][ T30] audit: type=1400 audit(1782181748.735:841): avc: denied { ioctl } for pid=10091 comm="syz.5.980" path="socket:[29760]" dev="sockfs" ino=29760 ioctlcmd=0x9429 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 359.255994][ T5731] usb 1-1: USB disconnect, device number 45 [ 359.280126][ T29] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected. [ 359.328408][ T30] audit: type=1326 audit(1782181749.225:842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10101 comm="syz.5.981" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f501939ce59 code=0x0 [ 359.644293][T10107] netlink: 84 bytes leftover after parsing attributes in process `syz.5.981'. [ 359.978230][T10113] XFS (nullb0): Invalid superblock magic number [ 360.079493][ T29] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 360.166616][T10119] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 360.175295][T10119] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 360.184590][T10119] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 360.193204][T10119] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 360.309477][ T29] usb 1-1: Using ep0 maxpacket: 32 [ 360.322645][ T29] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 360.357618][ T29] usb 1-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 360.382857][ T29] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.397310][T10037] imon:send_packet: task interrupted [ 360.403182][T10037] imon:send_packet: packet tx failed (-512) [ 360.409566][ T29] usb 1-1: Product: syz [ 360.416302][T10128] overlay: Bad value for 'upperdir' [ 360.428356][ T29] usb 1-1: Manufacturer: syz [ 360.438403][T10037] imon:vfd_write: send packet #0 failed [ 360.454675][ T29] usb 1-1: SerialNumber: syz [ 360.490652][ T29] usb 1-1: config 0 descriptor?? [ 360.532785][ T29] cdc_ether 1-1:0.0: missing cdc header descriptor [ 360.560652][ T29] usb 1-1: unsupported MDLM descriptors [ 360.572947][ T5703] usb 4-1: USB disconnect, device number 44 [ 360.999972][ T10] usb 1-1: USB disconnect, device number 46 [ 361.133403][T10136] XFS (nullb0): Invalid superblock magic number [ 361.429858][ T29] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 361.503460][T10151] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 361.922670][ T29] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 362.295281][ T29] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.370852][ T29] usb 2-1: config 0 descriptor?? [ 362.442753][ T30] audit: type=1326 audit(1782181752.345:843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10161 comm="syz.2.994" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f522a59ce59 code=0x7ffc0000 [ 362.495916][ T30] audit: type=1326 audit(1782181752.345:844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10161 comm="syz.2.994" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f522a59ce59 code=0x7ffc0000 [ 362.879477][ T30] audit: type=1326 audit(1782181752.345:845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10161 comm="syz.2.994" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f522a59ce59 code=0x7ffc0000 [ 362.908400][ T30] audit: type=1326 audit(1782181752.345:846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10161 comm="syz.2.994" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f522a59ce59 code=0x7ffc0000 [ 362.936573][ T30] audit: type=1326 audit(1782181752.345:847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10161 comm="syz.2.994" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f522a59ce59 code=0x7ffc0000 [ 363.044833][T10175] netlink: 4 bytes leftover after parsing attributes in process `syz.0.997'. [ 363.061646][ T29] usb 2-1: Cannot set autoneg [ 363.068297][ T29] MOSCHIP usb-ethernet driver 2-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -32 [ 363.089415][ T5703] usb 4-1: new full-speed USB device number 45 using dummy_hcd [ 363.135119][ T29] usb 2-1: USB disconnect, device number 46 [ 363.260788][ T5703] usb 4-1: unable to get BOS descriptor or descriptor too short [ 363.278806][ T5703] usb 4-1: not running at top speed; connect to a high speed hub [ 363.296703][ T5703] usb 4-1: config 84 has an invalid interface number: 160 but max is 0 [ 363.312849][ T5703] usb 4-1: config 84 has no interface number 0 [ 363.331470][ T5703] usb 4-1: config 84 interface 160 has no altsetting 0 [ 363.364302][ T5703] usb 4-1: string descriptor 0 read error: -22 [ 363.371084][ T5703] usb 4-1: New USB device found, idVendor=2077, idProduct=7001, bcdDevice=9e.77 [ 363.389731][ T5703] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.411910][ T5703] option 4-1:84.160: GSM modem (1-port) converter detected [ 363.459476][ T10] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 363.674467][T10167] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 363.693544][T10167] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 363.702025][T10186] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.998'. [ 363.740009][ T5703] usb 4-1: USB disconnect, device number 45 [ 363.754757][ T5703] option 4-1:84.160: device disconnected [ 363.775751][T10186] openvswitch: netlink: Message has 512 unknown bytes. [ 363.809278][ T30] kauditd_printk_skb: 234 callbacks suppressed [ 363.809293][ T30] audit: type=1400 audit(1782181753.715:1082): avc: denied { open } for pid=10194 comm="syz.5.1002" path="/dev/ptyqf" dev="devtmpfs" ino=134 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 363.851083][ T30] audit: type=1400 audit(1782181753.745:1083): avc: denied { ioctl } for pid=10194 comm="syz.5.1002" path="/dev/ptyqf" dev="devtmpfs" ino=134 ioctlcmd=0x5431 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 363.883721][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 363.892788][ T10] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 363.906198][ T10] usb 1-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 363.917732][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.967612][T10186] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 363.978412][ T10] usb 1-1: Product: syz [ 364.029504][ T5704] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 364.284510][ T10] usb 1-1: Manufacturer: syz [ 364.291088][ T30] audit: type=1400 audit(1782181754.195:1084): avc: denied { map } for pid=10179 comm="syz.1.998" path="/dev/uhid" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 364.360260][ T10] usb 1-1: SerialNumber: syz [ 364.491215][ T5704] usb 3-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x7F, changing to 0xF [ 364.603210][ T5704] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 364.692467][ T10] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 364.721893][ T10] usb 1-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 364.744478][ T5704] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 364.801120][ T5704] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.842077][ T10] usb 1-1: USB disconnect, device number 47 [ 364.854521][ T5704] usb 3-1: Product: syz [ 364.885346][ T5704] usb 3-1: Manufacturer: syz [ 364.920717][ T5704] usb 3-1: SerialNumber: syz [ 365.883846][T10214] XFS (nullb0): Invalid superblock magic number [ 366.106770][T10224] overlay: Bad value for 'upperdir' [ 366.153616][T10225] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 366.161886][T10225] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 366.171079][T10225] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 366.179623][T10225] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 366.333955][T10193] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1001'. [ 366.344092][T10193] openvswitch: netlink: Missing key (keys=40, expected=100) [ 366.435531][ T5704] cdc_ncm 3-1:1.0: bind() failure [ 366.449352][ T5704] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 366.456553][ T5704] cdc_ncm 3-1:1.1: bind() failure [ 366.475382][ T5704] usb 3-1: USB disconnect, device number 54 [ 368.078133][T10250] xt_l2tp: v2 tid > 0xffff: 134217728 [ 368.610502][T10264] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1018'. [ 368.661828][ T30] audit: type=1400 audit(1782181758.565:1085): avc: denied { mount } for pid=10261 comm="syz.0.1018" name="/" dev="ramfs" ino=29422 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 368.939536][ T10] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 368.984712][ T30] audit: type=1400 audit(1782181758.665:1086): avc: denied { map_create } for pid=10260 comm="syz.1.1019" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 369.095544][ T30] audit: type=1400 audit(1782181758.665:1087): avc: denied { map_read map_write } for pid=10260 comm="syz.1.1019" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 369.119503][ T30] audit: type=1400 audit(1782181758.665:1088): avc: denied { prog_load } for pid=10260 comm="syz.1.1019" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 369.191325][ T10] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 369.205628][ T10] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 369.223977][T10281] l2tp_ppp: sess 2/0: no socket in recv [ 369.231193][ T10] usb 3-1: New USB device found, idVendor=2a39, idProduct=3fd4, bcdDevice= 0.40 [ 369.243864][ T30] audit: type=1400 audit(1782181759.145:1089): avc: denied { read append } for pid=10274 comm="syz.0.1023" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 369.268079][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.283505][ T10] usb 3-1: Product: syz [ 369.289519][ T10] usb 3-1: Manufacturer: syz [ 369.294241][ T10] usb 3-1: SerialNumber: syz [ 369.299421][ T30] audit: type=1400 audit(1782181759.145:1090): avc: denied { open } for pid=10274 comm="syz.0.1023" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 369.325103][ T30] audit: type=1400 audit(1782181759.145:1091): avc: denied { ioctl } for pid=10274 comm="syz.0.1023" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x643a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 369.363539][T10281] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1024'. [ 369.551068][T10281] erspan1: entered allmulticast mode [ 369.641968][T10288] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 370.126884][T10291] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1021'. [ 370.141148][T10291] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1021'. [ 370.221848][ T10] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 370.231616][ T10] usb 3-1: unit 6 not found! [ 370.324343][ T10] usb 3-1: USB disconnect, device number 55 [ 370.443889][ T9706] udevd[9706]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 370.779252][ T5704] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 371.008874][T10325] netlink: 'syz.0.1033': attribute type 1 has an invalid length. [ 371.070673][ T5704] usb 4-1: Using ep0 maxpacket: 8 [ 371.081840][ T5704] usb 4-1: config 0 interface 0 altsetting 15 endpoint 0x81 has an invalid bInterval 148, changing to 11 [ 371.082533][T10325] 8021q: adding VLAN 0 to HW filter on device bond2 [ 371.094347][ T5704] usb 4-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid maxpacket 1056, setting to 1024 [ 371.113335][ T5704] usb 4-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 371.128161][ T5704] usb 4-1: config 0 interface 0 has no altsetting 0 [ 371.137090][ T5704] usb 4-1: New USB device found, idVendor=172f, idProduct=0034, bcdDevice= 0.00 [ 371.147389][ T5704] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.157136][ T5704] usb 4-1: config 0 descriptor?? [ 371.168127][T10306] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 371.212205][T10314] vlan2: entered allmulticast mode [ 371.226387][T10314] bond2: entered allmulticast mode [ 371.248459][T10336] bond2: (slave geneve3): making interface the new active one [ 371.290050][ T29] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 371.317890][T10338] /dev/nullb0: Can't open blockdev [ 371.332563][T10336] geneve3: entered allmulticast mode [ 371.479689][ T29] usb 3-1: Using ep0 maxpacket: 32 [ 371.498686][ T29] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 187, changing to 7 [ 371.573229][T10336] bond2: (slave geneve3): Enslaving as an active interface with an up link [ 371.590963][ T5704] hid_parser_main: 30 callbacks suppressed [ 371.590980][ T5704] waltop 0003:172F:0034.000A: unknown main item tag 0x0 [ 371.599965][ T29] usb 3-1: New USB device found, idVendor=19f7, idProduct=0011, bcdDevice= 0.40 [ 371.678159][ T29] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.690869][T10335] lo speed is unknown, defaulting to 1000 [ 371.733114][ T29] usb 3-1: Product: syz [ 371.754460][ T29] usb 3-1: Manufacturer: syz [ 371.776548][ T29] usb 3-1: SerialNumber: syz [ 371.888680][T10339] netlink: 'syz.3.1029': attribute type 16 has an invalid length. [ 372.095383][T10339] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1029'. [ 372.122974][T10329] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 372.235258][T10329] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 372.548225][ T29] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 372.594583][ T30] audit: type=1400 audit(1782181762.465:1092): avc: denied { append } for pid=10313 comm="syz.0.1033" name="ppp" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 372.594608][ T29] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 372.619303][ T5704] waltop 0003:172F:0034.000A: unknown main item tag 0x0 [ 372.633232][ T5704] waltop 0003:172F:0034.000A: unknown main item tag 0x0 [ 372.641269][ T5704] waltop 0003:172F:0034.000A: unknown main item tag 0x0 [ 372.650430][ T5704] waltop 0003:172F:0034.000A: unknown main item tag 0x0 [ 372.660996][ T5704] waltop 0003:172F:0034.000A: unknown main item tag 0x0 [ 372.668155][ T5704] waltop 0003:172F:0034.000A: unknown main item tag 0x0 [ 372.676053][ T5704] waltop 0003:172F:0034.000A: unknown main item tag 0x0 [ 372.684106][ T5704] waltop 0003:172F:0034.000A: unknown main item tag 0x0 [ 372.692078][ T5704] waltop 0003:172F:0034.000A: unknown main item tag 0x0 [ 372.695945][T10336] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1033'. [ 372.701761][ T5704] waltop 0003:172F:0034.000A: hidraw0: USB HID v0.0d Device [HID 172f:0034] on usb-dummy_hcd.3-1/input0 [ 372.720387][T10342] XFS (nullb0): Invalid superblock magic number [ 372.723189][ T5704] usb 4-1: USB disconnect, device number 46 [ 372.730609][ T29] usb 3-1: USB disconnect, device number 56 [ 372.773057][T10348] fido_id[10348]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 372.865428][ T9706] udevd[9706]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 372.883526][T10342] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 372.892273][T10342] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 372.901195][T10342] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 372.909657][T10342] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 373.059158][T10354] XFS (nullb0): Invalid superblock magic number [ 373.159624][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 373.234086][T10364] vlan3: entered allmulticast mode [ 373.239851][ T30] audit: type=1400 audit(1782181763.135:1093): avc: denied { bind } for pid=10365 comm="syz.5.1042" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 373.263843][T10364] bond0: entered allmulticast mode [ 373.279602][T10364] bond_slave_0: entered allmulticast mode [ 373.294623][T10364] bond_slave_1: entered allmulticast mode [ 373.550429][ T5851] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 373.819610][ T5851] usb 4-1: Using ep0 maxpacket: 32 [ 373.836651][ T5851] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 373.856389][ T5851] usb 4-1: config 0 has no interface number 0 [ 373.878443][ T5851] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 373.947021][ T5851] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.045864][T10381] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 374.170563][ T5851] usb 4-1: Product: syz [ 374.174759][ T5851] usb 4-1: Manufacturer: syz [ 374.179949][ T5851] usb 4-1: SerialNumber: syz [ 374.185543][ T5851] usb 4-1: config 0 descriptor?? [ 374.195549][ T5851] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 374.372181][ T30] audit: type=1400 audit(1782181764.275:1094): avc: denied { prog_run } for pid=10378 comm="syz.0.1044" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 374.406286][ T5851] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 374.450425][ T5851] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 374.872411][T10392] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1046'. [ 375.114311][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 375.187145][ T5851] usb 4-1: USB disconnect, device number 47 [ 375.206132][ T5851] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 375.226423][ T5851] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 375.247046][ T5851] quatech2 4-1:0.51: device disconnected [ 375.519447][ T5703] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 375.598091][T10407] overlay: Bad value for 'upperdir' [ 376.049501][ T5703] usb 6-1: Using ep0 maxpacket: 32 [ 376.057627][ T5703] usb 6-1: config 0 has an invalid interface number: 35 but max is 0 [ 376.068001][ T5703] usb 6-1: config 0 has no interface number 0 [ 376.075682][ T5703] usb 6-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 376.089466][ T5703] usb 6-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 376.103035][ T5703] usb 6-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 376.113426][ T5703] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.122334][ T5703] usb 6-1: Product: syz [ 376.127690][ T5703] usb 6-1: Manufacturer: syz [ 376.133281][ T5703] usb 6-1: SerialNumber: syz [ 376.142459][ T5703] usb 6-1: config 0 descriptor?? [ 376.620398][T10415] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 376.646025][T10415] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 376.666355][T10417] overlay: Bad value for 'upperdir' [ 376.674279][ T5703] radio-si470x 6-1:0.35: this is not a si470x device. [ 376.719634][ T5703] radio-raremono 6-1:0.35: this is not Thanko's Raremono. [ 376.769850][T10415] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1049'. [ 377.126167][ T30] audit: type=1800 audit(1782181767.025:1095): pid=10419 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.1055" name="/" dev="fuse" ino=1 res=0 errno=0 [ 377.190606][ T29] usb 6-1: USB disconnect, device number 9 [ 377.206152][ T30] audit: type=1400 audit(1782181767.025:1096): avc: denied { mmap_zero } for pid=10418 comm="syz.0.1055" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 377.229913][T10434] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 377.266995][ T30] audit: type=1326 audit(1782181767.075:1097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10433 comm="syz.2.1061" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f522a59ce59 code=0x0 [ 377.334789][T10442] lo speed is unknown, defaulting to 1000 [ 377.336580][T10440] No control pipe specified [ 377.709826][T10444] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1063'. [ 377.736062][T10444] (syz.2.1063,10444,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 377.745279][T10444] (syz.2.1063,10444,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 378.273913][T10440] fuse: Bad value for 'user_id' [ 378.281748][T10455] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1067'. [ 378.301879][T10440] fuse: Bad value for 'user_id' [ 378.423403][T10459] XFS (nullb0): Invalid superblock magic number [ 378.473489][T10471] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1070'. [ 378.487711][T10471] FAULT_INJECTION: forcing a failure. [ 378.487711][T10471] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 378.501653][T10471] CPU: 0 UID: 0 PID: 10471 Comm: syz.3.1070 Not tainted syzkaller #0 PREEMPT(full) [ 378.501679][T10471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 378.501696][T10471] Call Trace: [ 378.501703][T10471] [ 378.501710][T10471] dump_stack_lvl+0x100/0x190 [ 378.501736][T10471] should_fail_ex.cold+0x5/0xa [ 378.501762][T10471] _copy_to_user+0x32/0xd0 [ 378.501788][T10471] simple_read_from_buffer+0xcb/0x170 [ 378.501815][T10471] proc_fail_nth_read+0x1af/0x230 [ 378.501837][T10471] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 378.501858][T10471] ? security_file_permission+0x76/0x210 [ 378.501878][T10471] ? rw_verify_area+0xce/0x6d0 [ 378.501898][T10471] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 378.501921][T10471] vfs_read+0x1e4/0xb40 [ 378.501946][T10471] ? __pfx_vfs_read+0x10/0x10 [ 378.501978][T10471] ? rcu_is_watching+0x12/0xc0 [ 378.502006][T10471] ? __fget_files+0x21f/0x3d0 [ 378.502037][T10471] ksys_read+0x12a/0x250 [ 378.502061][T10471] ? __pfx_ksys_read+0x10/0x10 [ 378.502086][T10471] ? rcu_is_watching+0x12/0xc0 [ 378.502112][T10471] do_syscall_64+0x115/0x870 [ 378.502131][T10471] ? clear_bhb_loop+0x40/0x90 [ 378.502154][T10471] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.502174][T10471] RIP: 0033:0x7f5df855d68e [ 378.502190][T10471] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 378.502210][T10471] RSP: 002b:00007f5df94b8fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 378.502235][T10471] RAX: ffffffffffffffda RBX: 00007f5df94b96c0 RCX: 00007f5df855d68e [ 378.502249][T10471] RDX: 000000000000000f RSI: 00007f5df94b90a0 RDI: 0000000000000006 [ 378.502261][T10471] RBP: 00007f5df94b9090 R08: 0000000000000000 R09: 0000000000000000 [ 378.502273][T10471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 378.502285][T10471] R13: 00007f5df8816038 R14: 00007f5df8815fa0 R15: 00007ffe88b59438 [ 378.502306][T10471] [ 378.761817][T10476] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 378.770227][T10476] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 378.778411][T10476] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 378.786727][T10476] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 378.795620][ T29] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 378.959805][ T29] usb 2-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 378.971503][ T29] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=bc.a6 [ 378.981267][ T29] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.990144][ T29] usb 2-1: Product: syz [ 378.994353][ T29] usb 2-1: Manufacturer: syz [ 378.999519][ T29] usb 2-1: SerialNumber: syz [ 379.007933][ T29] i2c-tiny-usb 2-1:7.0: version bc.a6 found at bus 002 address 047 [ 379.049625][ T5851] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 379.131793][T10481] XFS (nullb0): Invalid superblock magic number [ 379.300757][T10491] hub 8-0:1.0: USB hub found [ 379.305547][T10491] hub 8-0:1.0: 1 port detected [ 379.321938][T10491] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10491 comm=syz.2.1075 [ 379.690438][ T5851] usb 4-1: Using ep0 maxpacket: 16 [ 379.723626][ T5851] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 379.743944][T10473] lo speed is unknown, defaulting to 1000 [ 379.754722][ T5851] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 379.767075][T10494] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1071'. [ 379.790435][ T5851] usb 4-1: config 0 interface 0 has no altsetting 0 [ 379.835545][ T5851] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 379.847616][ T5851] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.884332][ T5851] usb 4-1: config 0 descriptor?? [ 380.006327][ T5731] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 380.028107][ T29] (null): error -EIO: failure setting delay to 10us [ 380.046886][ T29] i2c-tiny-usb 2-1:7.0: probe with driver i2c-tiny-usb failed with error -5 [ 380.062982][ T29] usb 2-1: USB disconnect, device number 47 [ 380.072388][T10499] fuse: Unknown parameter '' [ 380.081622][T10499] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1078'. [ 380.153694][ T30] audit: type=1400 audit(1782181770.055:1098): avc: denied { execute } for pid=10496 comm="syz.2.1077" path=2F6D656D66643A14A3BB07202864656C6574656429 dev="hugetlbfs" ino=30367 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 380.189684][ T5731] usb 6-1: Using ep0 maxpacket: 32 [ 380.241544][ T5731] usb 6-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 380.254886][ T5731] usb 6-1: config 6 has 2 interfaces, different from the descriptor's value: 3 [ 380.273288][ T5731] usb 6-1: config 6 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 380.329940][ T5731] usb 6-1: New USB device found, idVendor=0763, idProduct=2012, bcdDevice= 0.40 [ 380.378865][ T5851] hid (null): invalid report_size 28520 [ 380.387470][ T5731] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.397581][T10506] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1080'. [ 380.417610][ T5731] usb 6-1: Product: syz [ 380.449152][ T5731] usb 6-1: Manufacturer: syz [ 380.460195][T10507] IPVS: length: 4107 != 8 [ 380.484161][ T5731] usb 6-1: SerialNumber: syz [ 380.501733][T10509] IPVS: length: 4107 != 8 [ 380.737022][ T5731] usb 6-1: Fast Track Pro config OK [ 380.817718][ T5851] usb 4-1: USB disconnect, device number 48 [ 380.845257][T10493] netlink: 'syz.5.1076': attribute type 1 has an invalid length. [ 380.856202][ T5731] usb 6-1: 1:1 : no or invalid class specific endpoint descriptor [ 380.873287][ T5731] usb 6-1: 1:1 : format type 0 is detected, processed as PCM [ 380.881177][T10521] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 380.901022][ T5731] usb 6-1: 1:1 : sample bitwidth 177 in over sample bytes 4 [ 380.917146][ T5731] usb 6-1: 0:2 : does not exist [ 380.923399][ T5731] usb 6-1: unit 5 not found! [ 380.927998][ T5731] usb 6-1: unit 6 not found! [ 380.948300][ T5731] usb 6-1: USB disconnect, device number 10 [ 381.010424][ T5732] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 381.119488][ T5704] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 381.171457][ T5732] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 381.183013][ T5732] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 381.196474][ T5732] usb 2-1: New USB device found, idVendor=2a39, idProduct=3fd4, bcdDevice= 0.40 [ 381.206240][ T5732] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.214869][ T5732] usb 2-1: Product: syz [ 381.219962][ T5732] usb 2-1: Manufacturer: syz [ 381.224571][ T5732] usb 2-1: SerialNumber: syz [ 381.272341][ T5704] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 381.282138][ T5704] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.290762][ T5704] usb 1-1: Product: syz [ 381.294939][ T5704] usb 1-1: Manufacturer: syz [ 381.300217][ T5704] usb 1-1: SerialNumber: syz [ 381.491389][ T5851] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 381.491624][T10512] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1081'. [ 381.554240][T10512] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1081'. [ 381.710526][ T5732] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 381.756140][ T5732] usb 2-1: unit 6 not found! [ 382.004678][ T5851] usb 3-1: device descriptor read/64, error -71 [ 382.135868][T10542] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 382.144165][T10542] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 382.152870][T10542] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 382.161092][T10542] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 382.205054][ T5732] usb 2-1: USB disconnect, device number 48 [ 382.241321][T10536] XFS (nullb0): Invalid superblock magic number [ 382.304003][ T9706] udevd[9706]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 382.329771][ T5704] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 382.469578][ T5851] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 382.487245][T10556] XFS (nullb0): Invalid superblock magic number [ 382.576981][ T5704] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 382.597210][ T5704] usb 1-1: USB disconnect, device number 48 [ 382.606541][ T5704] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP) [ 382.620042][ T5851] usb 3-1: device descriptor read/64, error -71 [ 382.750938][ T5851] usb usb3-port1: attempt power cycle [ 382.898668][ T5732] usb 2-1: new full-speed USB device number 49 using dummy_hcd [ 383.119611][ T5851] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 383.131021][ T30] audit: type=1326 audit(1782181773.015:1099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10567 comm="syz.5.1095" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f501939ce59 code=0x7ffc0000 [ 383.170810][ T5851] usb 3-1: device descriptor read/8, error -71 [ 383.227319][ T30] audit: type=1326 audit(1782181773.015:1100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10567 comm="syz.5.1095" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f501939ce59 code=0x7ffc0000 [ 383.381702][ T30] audit: type=1326 audit(1782181773.015:1101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10567 comm="syz.5.1095" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f501939ce59 code=0x7ffc0000 [ 383.429090][ T5851] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 383.577470][ T5732] usb 2-1: unable to get BOS descriptor or descriptor too short [ 383.635507][ T5732] usb 2-1: not running at top speed; connect to a high speed hub [ 383.737931][ T5732] usb 2-1: New USB device found, idVendor=09e8, idProduct=0062, bcdDevice= 0.40 [ 383.787074][ T5732] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.821324][ T5732] usb 2-1: Product: syz [ 383.827511][ T5732] usb 2-1: Manufacturer: syz [ 383.838282][ T5732] usb 2-1: SerialNumber: syz [ 383.948827][ T5703] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 383.956161][ T5851] usb 3-1: device descriptor read/8, error -71 [ 384.110360][ T5703] usb 4-1: Using ep0 maxpacket: 32 [ 384.123103][ T5703] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 187, changing to 7 [ 384.162373][ T30] audit: type=1326 audit(1782181773.015:1102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10567 comm="syz.5.1095" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f501939ce59 code=0x7ffc0000 [ 384.168276][T10564] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 384.190001][ T30] audit: type=1326 audit(1782181773.025:1103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10567 comm="syz.5.1095" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f501939ce59 code=0x7ffc0000 [ 384.225804][ T30] audit: type=1326 audit(1782181773.075:1104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10567 comm="syz.5.1095" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f501939ce59 code=0x7ffc0000 [ 384.263040][ T30] audit: type=1326 audit(1782181773.075:1105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10567 comm="syz.5.1095" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f501939e6c7 code=0x7ffc0000 [ 384.287389][ T5703] usb 4-1: New USB device found, idVendor=19f7, idProduct=0011, bcdDevice= 0.40 [ 384.293460][ T5851] usb usb3-port1: unable to enumerate USB device [ 384.306711][ T30] audit: type=1326 audit(1782181773.075:1106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10567 comm="syz.5.1095" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f501939ce59 code=0x7ffc0000 [ 384.337213][T10583] blktrace: Concurrent blktraces are not allowed on sg0 [ 384.345560][ T30] audit: type=1326 audit(1782181773.075:1107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10567 comm="syz.5.1095" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f501939ce59 code=0x7ffc0000 [ 384.367853][ T5703] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.374868][T10564] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 384.408455][ T5703] usb 4-1: Product: syz [ 384.413832][ T5703] usb 4-1: Manufacturer: syz [ 384.421026][T10586] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1100'. [ 384.427435][ T5703] usb 4-1: SerialNumber: syz [ 384.472571][T10586] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1100'. [ 384.527374][T10588] Bluetooth: hci5: sending frame failed (-49) [ 384.534854][ T4925] Bluetooth: hci5: Opcode 0x1003 failed: -49 [ 384.659602][ T10] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 384.673389][T10596] XFS (nullb0): Invalid superblock magic number [ 384.681877][T10577] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 384.780996][T10577] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 384.804392][ T5703] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 384.812035][ T5703] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 384.832327][T10603] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 384.840941][T10603] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 384.849975][T10603] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 384.857884][T10603] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 384.864946][ T5703] usb 4-1: USB disconnect, device number 49 [ 384.875676][ T10] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 384.900494][ T10] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 384.935893][ T10] usb 6-1: New USB device found, idVendor=2a39, idProduct=3fd4, bcdDevice= 0.40 [ 384.947845][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.957420][ T10] usb 6-1: Product: syz [ 384.964413][ T10] usb 6-1: Manufacturer: syz [ 384.969652][ T10] usb 6-1: SerialNumber: syz [ 385.057777][T10613] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1107'. [ 385.070928][T10613] smc: net device veth0_to_hsr applied user defined pnetid SYZ2 [ 385.187979][T10587] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1099'. [ 385.200177][T10587] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1099'. [ 385.214347][ T10] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 385.222439][ T10] usb 6-1: unit 6 not found! [ 385.258350][ T10] usb 6-1: USB disconnect, device number 11 [ 385.369473][ T5703] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 385.589462][ T5703] usb 1-1: Using ep0 maxpacket: 32 [ 385.601140][ T5703] usb 1-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 385.616537][ T5703] usb 1-1: config 0 interface 0 has no altsetting 0 [ 385.624020][ T5703] usb 1-1: New USB device found, idVendor=04d9, idProduct=a0c2, bcdDevice= 0.00 [ 385.663521][ T5703] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.801907][ T5703] usb 1-1: config 0 descriptor?? [ 385.819754][ T5732] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 385.935487][ T5703] usbhid 1-1:0.0: fixing wrong optional hid class descriptors count [ 386.007824][ T5732] usb 2-1: USB disconnect, device number 49 [ 386.060941][ T5703] usbhid 1-1:0.0: can't add hid device: -71 [ 386.076263][ T5703] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 386.107107][ T5703] usb 1-1: USB disconnect, device number 49 [ 386.622328][ T5703] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 386.703595][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 386.703611][ T30] audit: type=1400 audit(1782181776.605:1129): avc: denied { write } for pid=10664 comm="syz.0.1120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 386.809545][ T5703] usb 6-1: Using ep0 maxpacket: 8 [ 386.818003][ T5703] usb 6-1: unable to get BOS descriptor or descriptor too short [ 386.835067][ T5703] usb 6-1: config 8 has an invalid interface number: 24 but max is 0 [ 386.844810][ T5703] usb 6-1: config 8 has no interface number 0 [ 386.861341][ T5703] usb 6-1: config 8 interface 24 altsetting 2 endpoint 0xE has invalid maxpacket 1535, setting to 1024 [ 386.890518][ T5703] usb 6-1: config 8 interface 24 altsetting 2 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 386.923352][ T5703] usb 6-1: config 8 interface 24 has no altsetting 0 [ 386.954334][ T5703] usb 6-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=75.af [ 386.982840][ T5703] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.998391][ T5703] usb 6-1: Product: syz [ 387.074282][ T5703] usb 6-1: Manufacturer: syz [ 387.085194][ T5703] usb 6-1: SerialNumber: syz [ 387.121568][T10659] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 387.263125][ T30] audit: type=1400 audit(1782181777.165:1130): avc: denied { ioctl } for pid=10697 comm="syz.3.1130" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0xe500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 387.326747][ T30] audit: type=1326 audit(1782181777.175:1131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10692 comm="syz.1.1128" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76e199ce59 code=0x7ffc0000 [ 387.553626][T10701] audit: audit_backlog=65 > audit_backlog_limit=64 [ 387.581305][ T30] audit: type=1326 audit(1782181777.175:1132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10692 comm="syz.1.1128" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76e199ce59 code=0x7ffc0000 [ 387.670074][ T5703] comedi comedi5: driver 'vmk80xx' has successfully auto-configured 'K8055 (VM110)'. [ 387.683946][T10701] audit: audit_lost=101 audit_rate_limit=0 audit_backlog_limit=64 [ 387.727137][T10691] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 387.733667][T10691] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 387.765621][ T5703] usb 6-1: USB disconnect, device number 12 [ 387.785816][ T30] audit: type=1326 audit(1782181777.175:1133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10692 comm="syz.1.1128" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76e199ce59 code=0x7ffc0000 [ 387.842133][T10701] audit: backlog limit exceeded [ 387.994024][T10691] vhci_hcd vhci_hcd.0: Device attached [ 388.001053][ T8599] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 388.045442][ T8599] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 388.193646][ T30] audit: type=1326 audit(1782181777.175:1134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10692 comm="syz.1.1128" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f76e199ce59 code=0x7ffc0000 [ 388.279558][ T5732] usb 38-1: SetAddress Request (2) to port 0 [ 388.322646][ T5732] usb 38-1: new SuperSpeed USB device number 2 using vhci_hcd [ 388.636268][ T30] audit: type=1400 audit(1782181777.225:1135): avc: denied { getopt } for pid=10697 comm="syz.3.1130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 388.939587][T10719] bridge0: entered promiscuous mode [ 388.978299][T10719] bridge0: entered allmulticast mode [ 389.054062][T10704] vhci_hcd: connection reset by peer [ 389.064094][ T57] vhci_hcd vhci_hcd.2: stop threads [ 389.077043][T10719] syzkaller1: entered promiscuous mode [ 389.083323][ T57] vhci_hcd vhci_hcd.2: release socket [ 389.101269][T10719] syzkaller1: entered allmulticast mode [ 389.104091][ T57] vhci_hcd vhci_hcd.2: disconnect device [ 389.188184][T10730] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1136'. [ 389.201003][T10730] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1136'. [ 389.224003][T10730] loop4: detected capacity change from 0 to 2640 [ 389.246702][ T9706] Buffer I/O error on dev loop4, logical block 0, async page read [ 389.275385][T10731] lo speed is unknown, defaulting to 1000 [ 389.293912][T10730] Buffer I/O error on dev loop4, logical block 0, lost async page write [ 389.329936][T10730] Buffer I/O error on dev loop4, logical block 1, lost async page write [ 389.342715][T10730] Buffer I/O error on dev loop4, logical block 2, lost async page write [ 389.353853][T10730] Buffer I/O error on dev loop4, logical block 3, lost async page write [ 389.363570][T10730] Buffer I/O error on dev loop4, logical block 4, lost async page write [ 389.384155][T10730] Buffer I/O error on dev loop4, logical block 5, lost async page write [ 389.404467][T10730] Buffer I/O error on dev loop4, logical block 6, lost async page write [ 389.426700][T10730] Buffer I/O error on dev loop4, logical block 7, lost async page write [ 389.451338][T10730] Buffer I/O error on dev loop4, logical block 8, lost async page write [ 389.727037][T10753] lo speed is unknown, defaulting to 1000 [ 389.775420][T10756] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1143'. [ 389.961158][ T5694] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 390.149414][ T5694] usb 1-1: Using ep0 maxpacket: 32 [ 390.167248][ T5694] usb 1-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 390.207525][ T5694] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.233133][ T5694] usb 1-1: Product: syz [ 390.239578][ T5694] usb 1-1: Manufacturer: syz [ 390.247473][ T5694] usb 1-1: SerialNumber: syz [ 390.262040][ T5694] usb 1-1: config 0 descriptor?? [ 390.469626][ T10] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 390.629492][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 390.636260][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 390.647741][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 390.660204][ T10] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 390.670718][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 390.679922][ T5703] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 390.688408][ T10] usb 2-1: SerialNumber: syz [ 390.700743][ T10] usb 2-1: 0:2 : does not exist [ 390.839515][ T5703] usb 4-1: Using ep0 maxpacket: 32 [ 390.846555][ T5703] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 390.856324][ T5703] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 390.866140][ T5703] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 390.876827][ T5703] usb 4-1: config 1 has no interface number 0 [ 390.884024][ T5703] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 390.896572][ T5703] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 390.912309][ T5703] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 390.922656][ T5703] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.944424][ T5703] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 391.117308][ T10] usb 2-1: 5:0: cannot get min/max values for control 5 (id 5) [ 391.144334][ T5703] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached [ 391.165383][ T10] usb 2-1: 5:0: cannot get min/max values for control 5 (id 5) [ 391.200612][ T10] usb 2-1: 5:0: cannot get min/max values for control 5 (id 5) [ 391.227438][ T10] usb 2-1: USB disconnect, device number 50 [ 391.247742][ T9738] udevd[9738]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 391.427978][ T5694] peak_usb 1-1:0.0 can0: unable to request usb[type=2 value=5] err=-71 [ 391.550012][ T5694] peak_usb 1-1:0.0: probe with driver peak_usb failed with error -71 [ 391.652392][ T5694] usb 1-1: USB disconnect, device number 50 [ 391.709972][T10799] omfs: Invalid superblock (0) [ 391.757783][T10799] overlay: Bad value for 'upperdir' [ 391.992824][ T30] kauditd_printk_skb: 67 callbacks suppressed [ 391.994359][ T30] audit: type=1400 audit(1782181781.895:1203): avc: denied { unmount } for pid=5611 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 392.105375][ T30] audit: type=1400 audit(1782181782.005:1204): avc: denied { write } for pid=10810 comm="syz.2.1160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 392.148588][ T5694] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 392.189685][ T10] snd_usb_pod 4-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 392.309560][ T5694] usb 2-1: Using ep0 maxpacket: 16 [ 392.316565][ T5694] usb 2-1: unable to get BOS descriptor or descriptor too short [ 392.330404][ T5694] usb 2-1: config 251 has an invalid interface number: 189 but max is 0 [ 392.346145][ T5694] usb 2-1: config 251 has no interface number 0 [ 392.357650][ T5694] usb 2-1: config 251 interface 189 altsetting 4 endpoint 0xC has invalid maxpacket 1056, setting to 64 [ 392.372681][ T5694] usb 2-1: config 251 interface 189 altsetting 4 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 392.392733][ T5694] usb 2-1: config 251 interface 189 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 392.416290][ T5694] usb 2-1: config 251 interface 189 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 392.430269][ T5694] usb 2-1: config 251 interface 189 altsetting 4 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 392.443088][ T5694] usb 2-1: config 251 interface 189 altsetting 4 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 392.455447][ T5694] usb 2-1: config 251 interface 189 has no altsetting 0 [ 392.465108][ T5694] usb 2-1: New USB device found, idVendor=2b73, idProduct=000a, bcdDevice=d8.19 [ 392.475803][ T5694] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.485635][ T5694] usb 2-1: Product: syz [ 392.490919][ T5694] usb 2-1: Manufacturer: syz [ 392.496703][ T5694] usb 2-1: SerialNumber: syz [ 392.517840][T10806] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 392.617011][T10819] XFS (nullb0): Invalid superblock magic number [ 392.744431][T10806] nbd: must specify at least one socket [ 392.793487][ T5694] usb 2-1: USB disconnect, device number 51 [ 392.817077][T10790] udevd[10790]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:251.189/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 393.202172][ T4925] Bluetooth: Wrong link type (-57) [ 393.209409][ T10] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 393.370569][ T10] usb 3-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x7F, changing to 0xF [ 393.382612][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 393.395781][ T10] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 393.405733][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.415194][ T10] usb 3-1: Product: syz [ 393.420053][ T10] usb 3-1: Manufacturer: syz [ 393.424651][ T10] usb 3-1: SerialNumber: syz [ 393.446925][ T5731] usb 4-1: USB disconnect, device number 50 [ 393.463792][ T5731] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 393.493345][ T5694] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 393.551078][ T5732] usb 38-1: device descriptor read/8, error -110 [ 393.559643][ T5703] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 393.793732][ T5694] usb 6-1: Using ep0 maxpacket: 32 [ 393.805074][ T5694] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 187, changing to 7 [ 393.834638][ T5694] usb 6-1: New USB device found, idVendor=19f7, idProduct=0011, bcdDevice= 0.40 [ 393.844421][ T5694] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.880191][ T5694] usb 6-1: Product: syz [ 393.890450][ T5694] usb 6-1: Manufacturer: syz [ 393.897077][ T5694] usb 6-1: SerialNumber: syz [ 393.963860][ T5703] usb 2-1: config 1 has an invalid interface number: 7 but max is 0 [ 393.975162][ T5703] usb 2-1: config 1 has no interface number 0 [ 393.985282][ T5703] usb 2-1: config 1 interface 7 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 394.010284][ T5703] usb 2-1: config 1 interface 7 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 394.030255][ T5732] usb usb38-port1: attempt power cycle [ 394.059437][ T5703] usb 2-1: config 1 interface 7 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 0 [ 394.081249][ T5703] usb 2-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 394.132395][T10831] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 394.202784][T10831] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 394.564637][T10829] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1165'. [ 394.603051][T10829] openvswitch: netlink: Missing key (keys=40, expected=100) [ 395.044306][ T5703] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.046298][ T5694] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 395.062749][ T5703] usb 2-1: Product: syz [ 395.067052][ T10] cdc_ncm 3-1:1.0: bind() failure [ 395.074611][ T5703] usb 2-1: Manufacturer: syz [ 395.081260][ T10] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 395.088067][ T5703] usb 2-1: SerialNumber: syz [ 395.093823][ T5694] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 395.224575][T10866] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1175'. [ 395.380048][ T10] cdc_ncm 3-1:1.1: bind() failure [ 395.386364][T10833] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 395.391379][ T10] usb 3-1: USB disconnect, device number 61 [ 395.437430][ T5703] usb 2-1: Expected 3 endpoints, found: 2 [ 395.447328][ T5694] usb 6-1: USB disconnect, device number 13 [ 395.486209][ T30] audit: type=1400 audit(1782181785.385:1205): avc: denied { write } for pid=10872 comm="syz.3.1178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 395.508418][T10873] fuse: Unknown parameter '[^³š·±Ø' [ 395.517668][T10876] tc action pedit 'at' offset 18618 out of bounds [ 395.528259][T10875] tc action pedit 'at' offset 18618 out of bounds [ 395.538203][ T30] audit: type=1326 audit(1782181785.445:1206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10874 comm="syz.2.1176" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f522a59ce59 code=0x0 [ 395.650515][ T5732] usb usb38-port1: unable to enumerate USB device [ 395.746219][ T5851] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 395.919476][ T5851] usb 1-1: Using ep0 maxpacket: 32 [ 395.939992][ T5851] usb 1-1: config 246 has an invalid interface number: 166 but max is 0 [ 395.977366][ T5851] usb 1-1: config 246 has an invalid descriptor of length 0, skipping remainder of the config [ 395.989944][ T5851] usb 1-1: config 246 has no interface number 0 [ 395.997489][ T5851] usb 1-1: config 246 interface 166 altsetting 118 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 396.024427][ T5851] usb 1-1: config 246 interface 166 has no altsetting 0 [ 396.024857][ T30] audit: type=1400 audit(1782181785.925:1207): avc: denied { lock } for pid=10832 comm="syz.1.1167" path="socket:[32773]" dev="sockfs" ino=32773 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 396.114813][ T5851] usb 1-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 9.63 [ 396.145703][ T5851] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.203933][ T5851] usb 1-1: Product: syz [ 396.212709][ T5851] usb 1-1: Manufacturer: syz [ 396.213325][ T5732] usb 2-1: USB disconnect, device number 52 [ 396.224648][ T5851] usb 1-1: SerialNumber: syz [ 396.448371][T10878] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 396.465956][T10878] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 396.478474][ T30] audit: type=1400 audit(1782181786.375:1208): avc: denied { bind } for pid=10895 comm="syz.5.1185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 396.501468][T10878] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 396.511791][T10878] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 396.639436][ T5694] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 396.809479][ T5694] usb 3-1: Using ep0 maxpacket: 32 [ 396.820731][ T5694] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 187, changing to 7 [ 396.835613][ T5694] usb 3-1: New USB device found, idVendor=19f7, idProduct=0011, bcdDevice= 0.40 [ 396.852301][ T5694] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.860991][ T5694] usb 3-1: Product: syz [ 396.865177][ T5694] usb 3-1: Manufacturer: syz [ 396.899455][ T5694] usb 3-1: SerialNumber: syz [ 396.934834][ T5851] usb 1-1: Cannot retrieve CPort count: -32 [ 396.942678][ T5851] usb 1-1: Cannot retrieve CPort count: -32 [ 396.949319][ T5851] es2_ap_driver 1-1:246.166: probe with driver es2_ap_driver failed with error -32 [ 397.030114][ T5743] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 397.066330][ T30] audit: type=1400 audit(1782181786.965:1209): avc: denied { nlmsg_write } for pid=10908 comm="syz.5.1190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 397.127382][T10894] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 397.158324][T10894] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 397.205332][ T5743] usb 2-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x7F, changing to 0xF [ 397.298868][ T5743] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 397.408519][ T5743] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 397.459616][ T5743] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.474733][ T5694] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 397.482906][ T5694] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 397.483372][ T5743] usb 2-1: Product: syz [ 397.509002][ T5743] usb 2-1: Manufacturer: syz [ 397.510291][ T5694] usb 3-1: USB disconnect, device number 62 [ 397.519892][ T5743] usb 2-1: SerialNumber: syz [ 397.552933][T10790] udevd[10790]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 398.349738][ T4925] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 398.358308][ T4925] Bluetooth: hci1: Injecting HCI hardware error event [ 398.368457][ T4925] Bluetooth: hci1: hardware error 0x00 [ 398.762574][ T804] usb 1-1: USB disconnect, device number 51 [ 398.788089][ T30] audit: type=1400 audit(1782181788.685:1210): avc: denied { create } for pid=10923 comm="syz.0.1193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 398.984535][T10900] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1186'. [ 398.995504][T10900] openvswitch: netlink: Missing key (keys=40, expected=100) [ 399.011681][ T5743] cdc_ncm 2-1:1.0: bind() failure [ 399.020374][ T30] audit: type=1326 audit(1782181788.875:1211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10920 comm="syz.2.1192" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f522a59ce59 code=0x0 [ 399.024167][ T5743] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 399.060300][ T5731] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 399.070848][ T5743] cdc_ncm 2-1:1.1: bind() failure [ 399.087431][ T5743] usb 2-1: USB disconnect, device number 53 [ 399.107742][T10929] XFS (nullb0): Invalid superblock magic number [ 399.270281][ T5731] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 399.281748][ T5731] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 399.292322][ T5731] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 399.302023][ T5731] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.312586][ T5731] usb 6-1: config 0 descriptor?? [ 399.444125][ T30] audit: type=1400 audit(1782181789.345:1212): avc: denied { unmount } for pid=5611 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 399.543518][ T5731] usb 6-1: string descriptor 0 read error: -71 [ 399.551692][ T5731] uclogic 0003:256C:006D.000C: failed retrieving string descriptor #200: -71 [ 399.562256][ T5731] uclogic 0003:256C:006D.000C: failed retrieving pen parameters: -71 [ 399.571188][ T5731] uclogic 0003:256C:006D.000C: failed probing pen v2 parameters: -71 [ 399.590244][ T5731] uclogic 0003:256C:006D.000C: failed probing parameters: -71 [ 399.605586][ T5731] uclogic 0003:256C:006D.000C: probe with driver uclogic failed with error -71 [ 399.637194][ T5731] usb 6-1: USB disconnect, device number 14 [ 399.779163][T10953] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 399.788995][T10953] overlayfs: missing 'lowerdir' [ 400.107128][T10959] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1199'. [ 400.137710][T10961] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1201'. [ 400.429731][ T4925] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 401.789627][ T5694] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 401.819557][ T10] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 402.020209][ T10] usb 6-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x7F, changing to 0xF [ 402.032693][ T10] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 402.062161][T10999] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 402.070360][T10999] overlayfs: failed to set xattr on upper [ 402.076097][T10999] overlayfs: ...falling back to redirect_dir=nofollow. [ 402.083848][T10999] overlayfs: ...falling back to index=off. [ 402.090708][T10999] overlayfs: ...falling back to uuid=null. [ 402.101377][ T30] audit: type=1400 audit(1782181791.965:1213): avc: denied { mounton } for pid=10997 comm="syz.1.1213" path="/file0" dev="ramfs" ino=32529 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 402.125959][T11002] overlayfs: option "workdir=./file1/file0" is useless in a non-upper mount, ignore [ 402.135783][T11002] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 402.144081][T11002] overlayfs: missing 'lowerdir' [ 402.145281][ T10] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 402.163451][ T5694] usb 3-1: device descriptor read/64, error -71 [ 402.170493][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.183037][ T10] usb 6-1: Product: syz [ 402.187200][ T10] usb 6-1: Manufacturer: syz [ 402.193232][ T10] usb 6-1: SerialNumber: syz [ 402.723362][ T30] audit: type=1400 audit(1782181792.625:1214): avc: denied { getopt } for pid=11006 comm="syz.3.1215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 402.750775][ T5694] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 402.864291][T11012] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1217'. [ 402.941129][ T5694] usb 3-1: Using ep0 maxpacket: 32 [ 402.955857][ T5694] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 402.975765][ T5694] usb 3-1: New USB device found, idVendor=046d, idProduct=c51b, bcdDevice= 0.00 [ 402.986035][ T5694] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.996968][ T5694] usb 3-1: config 0 descriptor?? [ 403.064524][ T5731] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 403.220446][ T5731] usb 4-1: Using ep0 maxpacket: 16 [ 403.236910][ T5731] usb 4-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=ff.76 [ 403.249688][ T5731] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.258249][ T5731] usb 4-1: Product: syz [ 403.264613][ T5731] usb 4-1: Manufacturer: syz [ 403.271205][ T5731] usb 4-1: SerialNumber: syz [ 403.315142][T10980] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1207'. [ 403.329705][ T5731] usb 4-1: config 0 descriptor?? [ 403.359224][T10980] openvswitch: netlink: Missing key (keys=40, expected=100) [ 403.628417][T11007] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 403.737039][T11007] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 404.081315][ T10] cdc_ncm 6-1:1.0: bind() failure [ 404.091625][ T10] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 404.101439][ T10] cdc_ncm 6-1:1.1: bind() failure [ 404.101945][ T5694] hid_parser_main: 30 callbacks suppressed [ 404.101962][ T5694] logitech-djreceiver 0003:046D:C51B.000D: unknown main item tag 0x0 [ 404.125292][ T10] usb 6-1: USB disconnect, device number 15 [ 404.201766][ T5732] usb 2-1: new full-speed USB device number 54 using dummy_hcd [ 404.210819][ T5731] usb_8dev 4-1:0.0 can0: sending command message failed [ 404.220213][ T5694] logitech-djreceiver 0003:046D:C51B.000D: unknown main item tag 0x0 [ 404.233913][ T5694] logitech-djreceiver 0003:046D:C51B.000D: unknown main item tag 0x0 [ 404.250945][ T5731] usb_8dev 4-1:0.0 can0: can't get firmware version [ 404.257814][ T5694] logitech-djreceiver 0003:046D:C51B.000D: unknown main item tag 0x0 [ 404.273466][ T5694] logitech-djreceiver 0003:046D:C51B.000D: unknown main item tag 0x0 [ 404.284497][T11024] CUSE: info not properly terminated [ 404.290898][ T5694] logitech-djreceiver 0003:046D:C51B.000D: unknown main item tag 0x0 [ 404.301642][ T5694] logitech-djreceiver 0003:046D:C51B.000D: unknown main item tag 0x0 [ 404.311613][ T5694] logitech-djreceiver 0003:046D:C51B.000D: unknown main item tag 0x0 [ 404.320834][ T5694] logitech-djreceiver 0003:046D:C51B.000D: unknown main item tag 0x0 [ 404.330510][ T5694] logitech-djreceiver 0003:046D:C51B.000D: unknown main item tag 0x0 [ 404.339713][ T5731] usb_8dev 4-1:0.0: probe with driver usb_8dev failed with error -22 [ 404.343233][ T5694] usb 3-1: USB disconnect, device number 64 [ 404.364303][ T5731] usb 4-1: USB disconnect, device number 51 [ 404.390770][ T5732] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 404.401132][ T5732] usb 2-1: config 0 has no interface number 0 [ 404.419941][ T5732] usb 2-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x7B, changing to 0xB [ 404.434744][ T5732] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 10 [ 404.446254][ T5732] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 404.458018][ T5732] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 404.469234][ T5732] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 404.479533][ T5732] usb 2-1: Product: syz [ 404.483719][ T5732] usb 2-1: SerialNumber: syz [ 404.491751][ T5732] usb 2-1: config 0 descriptor?? [ 404.502631][ T5732] usbhid 2-1:0.8: couldn't find an input interrupt endpoint [ 404.701866][ T5732] usb 2-1: USB disconnect, device number 54 [ 405.092465][T11035] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1224'. [ 405.663836][T11047] fuse: Bad value for 'user_id' [ 405.683605][T11047] fuse: Bad value for 'user_id' [ 406.318951][T11078] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 406.325492][T11078] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 406.333335][T11078] vhci_hcd vhci_hcd.0: Device attached [ 406.465256][ T5694] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 406.581886][T11073] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1236'. [ 406.935502][T11080] vhci_hcd: connection closed [ 406.936058][ T5731] usb 38-1: SetAddress Request (6) to port 0 [ 406.956885][ T5694] usb 2-1: Using ep0 maxpacket: 32 [ 406.962303][ T12] vhci_hcd vhci_hcd.2: stop threads [ 406.962324][ T12] vhci_hcd vhci_hcd.2: release socket [ 406.962357][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 406.971112][ T5731] usb 38-1: new SuperSpeed USB device number 6 using vhci_hcd [ 407.610074][ T5694] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 407.618451][ T5694] usb 2-1: config 0 has no interface number 0 [ 407.625665][ T5731] usb 38-1: enqueue for inactive port 0 [ 407.634533][ T5694] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 407.722269][ T5694] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.739396][ T5694] usb 2-1: Product: syz [ 407.747958][ T5694] usb 2-1: Manufacturer: syz [ 407.771187][ T5694] usb 2-1: SerialNumber: syz [ 407.781755][ T5694] usb 2-1: config 0 descriptor?? [ 407.793635][ T5694] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 407.837179][ T5694] usb 2-1: selecting invalid altsetting 1 [ 407.843984][ T5694] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 407.854335][ T5694] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 407.866518][ T5694] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 407.876074][ T5694] usb 2-1: media controller created [ 407.890120][ T5694] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 407.987549][ T30] audit: type=1400 audit(1782181797.885:1215): avc: denied { write } for pid=11100 comm="syz.3.1242" name="mouse0" dev="devtmpfs" ino=975 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 408.022331][ T30] audit: type=1400 audit(1782181797.885:1216): avc: denied { ioctl } for pid=11100 comm="syz.3.1242" path="/dev/input/mouse0" dev="devtmpfs" ino=975 ioctlcmd=0x937b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 408.149437][ T10] usb 6-1: new low-speed USB device number 16 using dummy_hcd [ 408.188933][ T5703] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 408.214973][ T5694] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 408.252060][ T5694] usb 2-1: USB disconnect, device number 55 [ 408.259979][ T5731] usb usb38-port1: attempt power cycle [ 408.300588][ T10] usb 6-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 408.312784][ T10] usb 6-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 408.325156][ T10] usb 6-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 408.340088][ T10] usb 6-1: string descriptor 0 read error: -22 [ 408.347311][ T10] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 408.357701][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.368381][ T5703] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 408.380592][ T5703] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 408.397519][ T10] adutux 6-1:168.0: interrupt endpoints not found [ 408.406516][ T5703] usb 3-1: New USB device found, idVendor=2a39, idProduct=3fd4, bcdDevice= 0.40 [ 408.416688][ T5703] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.427611][ T5703] usb 3-1: Product: syz [ 408.443513][ T5703] usb 3-1: Manufacturer: syz [ 408.448423][ T5703] usb 3-1: SerialNumber: syz [ 408.718138][T11117] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 408.726684][T11117] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 408.793998][T11117] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 408.806331][T11119] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1241'. [ 408.830067][ T5731] usb usb38-port1: unable to enumerate USB device [ 408.893581][ T10] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 408.904661][ T5731] usb 6-1: USB disconnect, device number 16 [ 408.930037][T11119] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1241'. [ 408.999838][ T5703] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 409.010611][ T5703] usb 3-1: unit 6 not found! [ 409.050154][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 409.055533][ T5703] usb 3-1: USB disconnect, device number 65 [ 409.067571][ T10] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 409.082826][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 409.093806][ T10] usb 1-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 409.110289][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.123679][ T10] usb 1-1: Product: syz [ 409.134939][ T10] usb 1-1: Manufacturer: syz [ 409.142867][ T10] usb 1-1: SerialNumber: syz [ 409.161186][ T10] usb 1-1: config 0 descriptor?? [ 409.349891][T11130] ALSA: mixer_oss: invalid OSS volume 'SPEA9¦KŸsË â¢+ñI2KER' [ 409.486844][ T10] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input31 [ 410.095727][T11146] adfs: Unknown parameter 'discard#' [ 410.140204][T11137] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 410.209472][ T10] rc_core: IR keymap rc-imon-pad not found [ 410.219746][ T10] Registered IR keymap rc-empty [ 410.229511][ T10] imon 1-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 410.256273][ T10] imon 1-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 410.294262][T11151] XFS (nullb0): Invalid superblock magic number [ 410.310174][ T10] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 410.322509][ T10] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input32 [ 410.335788][ T10] imon 1-1:0.0: iMON device (15c2:0041, intf0) on usb<1:52> initialized [ 410.480416][T11157] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 410.488199][T11157] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 410.497431][T11157] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 410.506187][T11157] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 410.563535][ C0] imon 1-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 410.563756][ T5731] usb 1-1: USB disconnect, device number 52 [ 410.743508][T11166] use of bytesused == 0 is deprecated and will be removed in the future, [ 410.787387][T11166] use the actual size instead. [ 411.432295][T11177] tmpfs: Bad value for 'mpol' [ 412.181120][ T30] audit: type=1400 audit(1782181802.085:1217): avc: denied { ioctl } for pid=11169 comm="syz.1.1256" path="/dev/uhid" dev="devtmpfs" ino=1272 ioctlcmd=0x6f02 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 412.208249][T11185] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 412.539510][ T5731] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 413.032734][T11192] 9p: Bad value for 'rfdno' [ 413.073654][T11185] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1261'. [ 413.155169][ T30] audit: type=1400 audit(1782181802.915:1218): avc: denied { ioctl } for pid=11191 comm="syz.3.1263" path="/241/file0/file0" dev="fuse" ino=3 ioctlcmd=0x70c9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 413.234945][T11195] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1264'. [ 413.381592][ T5731] usb 1-1: Using ep0 maxpacket: 8 [ 413.394853][ T5731] usb 1-1: config 1 interface 0 has no altsetting 0 [ 413.419834][ T5731] usb 1-1: string descriptor 0 read error: -22 [ 413.439209][ T5731] usb 1-1: New USB device found, idVendor=0c70, idProduct=f00a, bcdDevice= 0.40 [ 413.747895][ T5731] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.779418][ T10] usb 3-1: new full-speed USB device number 66 using dummy_hcd [ 413.870751][T11210] XFS (nullb0): Invalid superblock magic number [ 413.982726][ T10] usb 3-1: config 0 has an invalid descriptor of length 115, skipping remainder of the config [ 413.994782][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 29797, setting to 64 [ 414.006727][ T10] usb 3-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 414.016961][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.028003][T11216] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 414.036017][T11216] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 414.044360][T11216] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 414.052112][T11216] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 414.069636][ T10] usb 3-1: config 0 descriptor?? [ 414.083664][T11197] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 414.307803][ T30] audit: type=1400 audit(1782181804.205:1219): avc: denied { bind } for pid=11218 comm="syz.3.1269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 414.337505][ T5731] hid_parser_main: 30 callbacks suppressed [ 414.337528][ T5731] aquacomputer_d5next 0003:0C70:F00A.000E: unknown main item tag 0x0 [ 414.353748][ T5731] aquacomputer_d5next 0003:0C70:F00A.000E: unknown main item tag 0x0 [ 414.362360][ T5731] aquacomputer_d5next 0003:0C70:F00A.000E: unknown main item tag 0x0 [ 414.376307][ T5731] aquacomputer_d5next 0003:0C70:F00A.000E: unknown main item tag 0x0 [ 414.385663][ T5731] aquacomputer_d5next 0003:0C70:F00A.000E: unknown main item tag 0x0 [ 414.396454][ T5731] aquacomputer_d5next 0003:0C70:F00A.000E: unknown main item tag 0x0 [ 414.406301][ T5731] aquacomputer_d5next 0003:0C70:F00A.000E: unknown main item tag 0x0 [ 414.416342][ T5731] aquacomputer_d5next 0003:0C70:F00A.000E: unknown main item tag 0x0 [ 414.425722][ T5731] aquacomputer_d5next 0003:0C70:F00A.000E: unknown main item tag 0x0 [ 414.435228][ T5731] aquacomputer_d5next 0003:0C70:F00A.000E: unknown main item tag 0x0 [ 414.748953][ T10] hid-picolcd 0003:04D8:F002.000F: No report with id 0xf4 found [ 414.758309][ T10] hid-picolcd 0003:04D8:F002.000F: No report with id 0xf3 found [ 414.795013][ T10] usb 3-1: USB disconnect, device number 66 [ 415.261057][ T5731] aquacomputer_d5next 0003:0C70:F00A.000E: hidraw0: USB HID v0.40 Device [HID 0c70:f00a] on usb-dummy_hcd.0-1/input0 [ 415.356315][ T5731] usb 1-1: USB disconnect, device number 53 [ 415.467865][ T30] audit: type=1400 audit(1782181805.365:1220): avc: denied { read write } for pid=11234 comm="syz.1.1274" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 415.519807][ T30] audit: type=1400 audit(1782181805.365:1221): avc: denied { open } for pid=11234 comm="syz.1.1274" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 415.636805][ T30] audit: type=1400 audit(1782181805.535:1222): avc: denied { audit_write } for pid=11234 comm="syz.1.1274" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 415.658849][ T5694] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 415.809229][ T5694] usb 4-1: Using ep0 maxpacket: 32 [ 415.826346][ T5694] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 187, changing to 7 [ 415.844750][ T5694] usb 4-1: New USB device found, idVendor=19f7, idProduct=0011, bcdDevice= 0.40 [ 415.885814][ T5694] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.021880][ T5694] usb 4-1: Product: syz [ 416.082741][ T5694] usb 4-1: Manufacturer: syz [ 416.097946][ T5694] usb 4-1: SerialNumber: syz [ 416.222040][T11245] kAFS: unable to lookup cell 'ÿ' [ 416.492630][T11233] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 416.502488][T11246] netlink: 'syz.2.1275': attribute type 10 has an invalid length. [ 416.555404][T11233] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 416.680237][ T5694] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 416.690231][ T5694] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 416.701448][T11246] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 417.070880][ T5694] usb 4-1: USB disconnect, device number 52 [ 417.095930][T11246] team0: Port device netdevsim1 added [ 417.116851][T10790] udevd[10790]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 417.749423][ T5694] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 417.778158][T11273] ubi: mtd0 is already attached to ubi16 [ 417.832164][T11282] syzkaller1: entered promiscuous mode [ 417.845000][T11282] syzkaller1: entered allmulticast mode [ 417.855723][ T30] audit: type=1400 audit(1782181807.755:1223): avc: denied { append } for pid=11283 comm="syz.3.1288" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 417.863745][T11284] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 417.882005][ T30] audit: type=1400 audit(1782181807.755:1224): avc: denied { ioctl } for pid=11283 comm="syz.3.1288" path="/dev/cachefiles" dev="devtmpfs" ino=4 ioctlcmd=0x4620 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 417.909051][T11286] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1288'. [ 417.939183][ T5694] usb 1-1: Using ep0 maxpacket: 16 [ 417.946503][ T5694] usb 1-1: unable to get BOS descriptor or descriptor too short [ 417.955265][ T5694] usb 1-1: config 253 has an invalid interface number: 186 but max is 1 [ 417.969690][ T5694] usb 1-1: config 253 has an invalid interface number: 180 but max is 1 [ 417.978320][ T5694] usb 1-1: config 253 has no interface number 0 [ 417.985608][ T5694] usb 1-1: config 253 has no interface number 1 [ 417.993017][ T5694] usb 1-1: config 253 interface 186 altsetting 9 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 418.005492][ T5694] usb 1-1: config 253 interface 186 altsetting 9 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 418.017784][ T5694] usb 1-1: config 253 interface 186 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 418.030322][ T5694] usb 1-1: config 253 interface 186 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 418.044377][ T5694] usb 1-1: config 253 interface 186 altsetting 9 has a duplicate endpoint with address 0xF, skipping [ 418.063555][ T5694] usb 1-1: config 253 interface 186 altsetting 9 endpoint 0xB has invalid wMaxPacketSize 0 [ 418.075057][ T5694] usb 1-1: config 253 interface 180 altsetting 117 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 418.101597][ T5694] usb 1-1: config 253 interface 180 altsetting 117 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 418.120674][ T5694] usb 1-1: config 253 interface 180 altsetting 117 has an endpoint descriptor with address 0x35, changing to 0x5 [ 418.134242][ T5694] usb 1-1: config 253 interface 180 altsetting 117 endpoint 0x5 has an invalid bInterval 175, changing to 11 [ 418.160543][T11290] IPv6: NLM_F_CREATE should be specified when creating new route [ 418.185116][ T5694] usb 1-1: config 253 interface 180 altsetting 117 endpoint 0x5 has invalid maxpacket 42964, setting to 1024 [ 418.214767][ T5694] usb 1-1: config 253 interface 180 altsetting 117 endpoint 0x9 has invalid maxpacket 1316, setting to 64 [ 418.227904][ T5694] usb 1-1: config 253 interface 180 altsetting 117 has a duplicate endpoint with address 0xD, skipping [ 418.240513][ T5694] usb 1-1: config 253 interface 180 altsetting 117 has a duplicate endpoint with address 0x9, skipping [ 418.275490][ T5694] usb 1-1: config 253 interface 180 altsetting 117 has an invalid descriptor for endpoint zero, skipping [ 418.291765][ T5694] usb 1-1: config 253 interface 180 altsetting 117 has a duplicate endpoint with address 0xF, skipping [ 418.303971][ T5694] usb 1-1: config 253 interface 180 altsetting 117 has a duplicate endpoint with address 0xA, skipping [ 418.316744][ T5694] usb 1-1: config 253 interface 180 altsetting 117 has an invalid descriptor for endpoint zero, skipping [ 418.329208][ T5694] usb 1-1: config 253 interface 180 altsetting 117 has a duplicate endpoint with address 0x5, skipping [ 418.341531][ T5694] usb 1-1: config 253 interface 180 altsetting 117 endpoint 0x3 has invalid maxpacket 33279, setting to 64 [ 418.355109][ T5694] usb 1-1: config 253 interface 180 altsetting 117 has a duplicate endpoint with address 0x8, skipping [ 418.374501][ T5694] usb 1-1: config 253 interface 180 altsetting 117 has a duplicate endpoint with address 0x1, skipping [ 418.386258][ T5694] usb 1-1: config 253 interface 180 altsetting 117 has an invalid descriptor for endpoint zero, skipping [ 418.398130][ T5694] usb 1-1: config 253 interface 180 altsetting 117 bulk endpoint 0xC has invalid maxpacket 32 [ 418.409787][ T5694] usb 1-1: config 253 interface 180 altsetting 117 has an endpoint descriptor with address 0x74, changing to 0x4 [ 418.422316][ T5694] usb 1-1: config 253 interface 180 altsetting 117 has 17 endpoint descriptors, different from the interface descriptor's value: 16 [ 418.447665][ T5694] usb 1-1: config 253 interface 186 has no altsetting 0 [ 418.455628][ T5694] usb 1-1: config 253 interface 180 has no altsetting 0 [ 418.470222][ T5694] usb 1-1: Dual-Role OTG device on HNP port [ 418.482520][ T5694] usb 1-1: New USB device found, idVendor=13d3, idProduct=3207, bcdDevice=ae.56 [ 418.501608][ T10] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 418.512711][ T5694] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.522889][ T5694] usb 1-1: Product: syz [ 418.527198][ T5694] usb 1-1: Manufacturer: syz [ 418.533770][ T5694] usb 1-1: SerialNumber: syz [ 418.626772][T11275] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 418.659537][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 418.695802][ T10] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 418.701459][ T5851] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 418.712460][ T10] usb 4-1: config 0 has no interface number 0 [ 418.742198][ T10] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 418.763481][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.783748][ T10] usb 4-1: Product: syz [ 418.787939][ T10] usb 4-1: Manufacturer: syz [ 418.793199][ T10] usb 4-1: SerialNumber: syz [ 418.799940][ T10] usb 4-1: config 0 descriptor?? [ 418.806264][ T10] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 418.869481][ T5851] usb 3-1: Using ep0 maxpacket: 32 [ 418.880770][ T5851] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 418.892659][ T5851] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 418.905784][ T5851] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 418.917039][ T5851] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.929008][ T5851] usb 3-1: config 0 descriptor?? [ 419.015023][ T10] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 419.027330][ T10] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 419.525838][ T5851] hid_parser_main: 4007 callbacks suppressed [ 419.525861][ T5851] koneplus 0003:1E7D:2D51.0010: unknown main item tag 0x0 [ 419.552551][ T5851] koneplus 0003:1E7D:2D51.0010: unknown main item tag 0x0 [ 419.561919][ T5851] koneplus 0003:1E7D:2D51.0010: unknown main item tag 0x0 [ 419.571078][ T5851] koneplus 0003:1E7D:2D51.0010: unknown main item tag 0x0 [ 419.580025][ T5851] koneplus 0003:1E7D:2D51.0010: unknown main item tag 0x0 [ 419.589477][ T5851] koneplus 0003:1E7D:2D51.0010: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.2-1/input0 [ 419.633421][T11320] netlink: 'syz.1.1296': attribute type 4 has an invalid length. [ 419.642039][T11320] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1296'. [ 419.656052][T11320] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11320 comm=syz.1.1296 [ 419.825125][T11294] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 419.843282][T11294] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 419.851971][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 419.861038][ T10] usb 4-1: USB disconnect, device number 53 [ 419.871382][ T10] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 419.886067][ T5851] usb 3-1: USB disconnect, device number 67 [ 419.942869][ T10] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 419.956205][ T10] quatech2 4-1:0.51: device disconnected [ 419.989561][ T5703] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 420.105177][T11329] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 420.150112][ T5703] usb 2-1: Using ep0 maxpacket: 32 [ 420.157577][ T5703] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 420.167976][ T5703] usb 2-1: config 0 has no interface number 0 [ 420.185224][ T5703] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 420.196119][ T5703] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.213208][ T5703] usb 2-1: Product: syz [ 420.221058][ T5703] usb 2-1: Manufacturer: syz [ 420.225863][ T5703] usb 2-1: SerialNumber: syz [ 420.240820][ T5703] usb 2-1: config 0 descriptor?? [ 420.252682][ T5703] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 420.469885][ T5703] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 420.501463][ T5703] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 420.533798][ T5694] dvb-usb: found a 'TwinhanDTV StarBox DVB-S USB2.0 (VP7021)' in cold state, will try to load a firmware [ 420.839289][ T5851] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 420.843209][ T5694] usb 1-1: Direct firmware load for dvb-usb-vp702x-02.fw failed with error -2 [ 420.884246][ T5694] usb 1-1: Falling back to sysfs fallback for: dvb-usb-vp702x-02.fw [ 420.897173][T11339] xt_connbytes: Forcing CT accounting to be enabled [ 420.900098][ T30] audit: type=1400 audit(1782181810.785:1225): avc: denied { firmware_load } for pid=5694 comm="kworker/0:3" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 420.960007][T11339] Cannot find set identified by id 0 to match [ 421.032133][ T5851] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 421.049790][ T5851] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 421.063951][ T30] audit: type=1326 audit(1782181810.955:1226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11341 comm="syz.3.1302" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5df859ce59 code=0x0 [ 421.096579][ T5851] usb 3-1: config 0 interface 0 has no altsetting 0 [ 421.104632][ T5851] usb 3-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 421.109703][T11345] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1302'. [ 421.114953][ T5851] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.139806][ T5851] usb 3-1: config 0 descriptor?? [ 421.146222][T11334] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 421.161340][T11320] netlink: 'syz.1.1296': attribute type 1 has an invalid length. [ 421.213825][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 421.213910][ T5731] usb 2-1: USB disconnect, device number 56 [ 421.245462][ T5731] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 421.262186][ T5731] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 421.274208][ T5731] quatech2 2-1:0.51: device disconnected [ 421.368637][ T30] audit: type=1400 audit(1782181811.255:1227): avc: denied { setopt } for pid=11343 comm="syz.5.1303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 421.433563][T11349] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 421.448412][T11349] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 421.492681][ T5851] usbhid 3-1:0.0: can't add hid device: -71 [ 421.498696][ T5851] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 421.509567][ T5851] usb 3-1: USB disconnect, device number 68 [ 421.869643][ T5851] usb 3-1: new full-speed USB device number 69 using dummy_hcd [ 422.009559][ T5851] usb 3-1: device descriptor read/64, error -71 [ 422.072275][T11372] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 422.078805][T11372] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 422.116337][T11372] vhci_hcd vhci_hcd.0: Device attached [ 422.129469][ T804] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 422.200463][T11375] orangefs_mount: mount request failed with -4 [ 422.260668][ T5851] usb 3-1: new full-speed USB device number 70 using dummy_hcd [ 422.311453][ T804] usb 2-1: Using ep0 maxpacket: 32 [ 422.320850][ T804] usb 2-1: unable to get BOS descriptor or descriptor too short [ 422.340952][ T804] usb 2-1: config 8 has an invalid interface number: 113 but max is 0 [ 422.356398][ T804] usb 2-1: config 8 has no interface number 0 [ 422.369723][ T5703] usb 43-1: new low-speed USB device number 2 using vhci_hcd [ 422.372974][ T804] usb 2-1: config 8 interface 113 has no altsetting 0 [ 422.399633][ T5851] usb 3-1: device descriptor read/64, error -71 [ 422.601852][ T10] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 422.840439][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 422.855240][ T10] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 422.889611][ T5732] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 422.905723][ T10] usb 6-1: config 0 has no interface number 0 [ 422.958194][ T10] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 423.005763][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.052035][ T5732] usb 4-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 423.073245][ T10] usb 6-1: Product: syz [ 423.090464][ T5732] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.116326][ T10] usb 6-1: Manufacturer: syz [ 423.150710][ T10] usb 6-1: SerialNumber: syz [ 423.206212][ T5732] usb 4-1: config 0 descriptor?? [ 423.266177][ T10] usb 6-1: config 0 descriptor?? [ 423.387823][ T5732] gspca_main: spca508-2.14.0 probing 8086:0110 [ 423.404328][ T10] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 423.605508][ T10] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 423.677341][ T10] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 423.759596][ T5851] usb usb3-port1: attempt power cycle [ 423.844171][T11390] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 423.855215][T11390] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 423.984014][ T5732] gspca_spca508: reg_read err -110 [ 423.995373][ T5732] gspca_spca508: reg_read err -32 [ 424.004599][ T5732] gspca_spca508: reg_read err -32 [ 424.011652][ T5732] gspca_spca508: reg_read err -32 [ 424.017010][ T5732] gspca_spca508: reg_read err -32 [ 424.017062][ T804] usb 2-1: New USB device found, idVendor=1df7, idProduct=2500, bcdDevice=8b.f2 [ 424.023477][ T5732] gspca_spca508: reg write: error -32 [ 424.031525][ T804] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.031550][ T804] usb 2-1: Product: syz [ 424.031567][ T804] usb 2-1: Manufacturer: syz [ 424.031584][ T804] usb 2-1: SerialNumber: syz [ 424.062070][ T5732] spca508 4-1:0.0: probe with driver spca508 failed with error -32 [ 424.144111][ C0] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 424.153199][ T5732] usb 6-1: USB disconnect, device number 17 [ 424.164219][ T5732] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 424.186292][ T5732] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 424.200746][ T5732] quatech2 6-1:0.51: device disconnected [ 424.222601][T11388] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 424.231577][T11388] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 424.245191][ T5731] usb 4-1: USB disconnect, device number 54 [ 424.368702][ T5851] usb 3-1: new full-speed USB device number 71 using dummy_hcd [ 424.389968][ T5851] usb 3-1: device descriptor read/8, error -71 [ 424.640805][ T30] audit: type=1404 audit(1782181814.545:1228): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 424.687431][ T30] audit: type=1400 audit(1782181814.585:1229): avc: denied { read write } for pid=9348 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 424.717926][ T804] msi2500 2-1:8.113: Registered as swradio24 [ 424.730627][ T30] audit: type=1400 audit(1782181814.615:1230): avc: denied { recv } for pid=9348 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.0.72 dest=50992 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 424.738006][ T804] msi2500 2-1:8.113: SDR API is still slightly experimental and functionality changes may follow [ 424.758437][ T30] audit: type=1400 audit(1782181814.615:1231): avc: denied { recv } for pid=9348 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.0.72 dest=50992 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 424.809554][ T804] usb 2-1: USB disconnect, device number 57 [ 424.834107][ T30] audit: type=1400 audit(1782181814.665:1232): avc: denied { create } for pid=11404 comm="syz.5.1318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=0 [ 424.866333][ T30] audit: type=1400 audit(1782181814.705:1234): avc: denied { read write } for pid=11404 comm="syz.5.1318" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=0 [ 424.893935][ T30] audit: type=1400 audit(1782181814.705:1233): avc: denied { read write } for pid=5612 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 425.313900][T11416] ip6gre1: left promiscuous mode [ 425.319727][T11416] vlan2: left promiscuous mode [ 425.324500][T11416] dummy0: left promiscuous mode [ 426.166702][ T30] kauditd_printk_skb: 58 callbacks suppressed [ 426.166717][ T30] audit: type=1400 audit(1782181816.065:1293): avc: denied { read write } for pid=5611 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 426.200222][ T30] audit: type=1400 audit(1782181816.105:1294): avc: denied { egress } for pid=10836 comm="kworker/0:6" saddr=fe80::1b daddr=ff02::16 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=0 [ 426.225638][ T30] audit: type=1400 audit(1782181816.105:1295): avc: denied { egress } for pid=10836 comm="kworker/0:6" saddr=fe80::1c daddr=ff02::16 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=0 [ 426.270098][ T30] audit: type=1400 audit(1782181816.175:1296): avc: denied { recv } for pid=15 comm="ksoftirqd/0" saddr=10.128.0.169 src=30006 daddr=10.128.0.72 dest=50992 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 426.349667][ T30] audit: type=1400 audit(1782181816.255:1297): avc: denied { egress } for pid=15 comm="ksoftirqd/0" saddr=fe80::1c daddr=ff02::1:ff00:1 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=0 [ 426.648016][ T30] audit: type=1400 audit(1782181816.545:1298): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.169 src=30006 daddr=10.128.0.72 dest=50992 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 427.389790][ T30] audit: type=1400 audit(1782181817.295:1299): avc: denied { egress } for pid=15 comm="ksoftirqd/0" saddr=fe80::1c daddr=ff02::1:ff00:1 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=0 [ 428.029696][ T30] audit: type=1400 audit(1782181817.935:1300): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.169 src=30006 daddr=10.128.0.72 dest=50992 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 428.311878][ T30] audit: type=1400 audit(1782181818.215:1301): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.169 src=30006 daddr=10.128.0.72 dest=50992 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 431.470550][ T30] audit: type=1400 audit(1782181821.375:1302): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.169 src=30006 daddr=10.128.0.72 dest=50992 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 431.735718][ T30] audit: type=1400 audit(1782181821.635:1303): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.169 src=30006 daddr=10.128.0.72 dest=50992 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 434.589202][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 438.391740][ T30] audit: type=1400 audit(1782181828.295:1304): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.169 src=30006 daddr=10.128.0.72 dest=50992 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 438.440392][ T30] audit: type=1400 audit(1782181828.345:1305): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.169 src=30006 daddr=10.128.0.72 dest=50992 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 451.702964][ T30] audit: type=1400 audit(1782181841.605:1306): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.169 src=30006 daddr=10.128.0.72 dest=50992 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 452.510558][ T30] audit: type=1400 audit(1782181842.415:1307): avc: denied { recv } for pid=12 comm="kworker/u8:0" saddr=10.128.0.169 src=30006 daddr=10.128.0.72 dest=50992 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 478.585298][ T30] audit: type=1400 audit(1782181868.485:1308): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.169 src=30006 daddr=10.128.0.72 dest=50992 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 480.030688][ T30] audit: type=1400 audit(1782181869.935:1309): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.169 src=30006 daddr=10.128.0.72 dest=50992 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 485.789707][ T5694] dvb-usb: did not find the firmware file 'dvb-usb-vp702x-02.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 485.810442][ T5694] dvb_usb_vp702x 1-1:253.186: probe with driver dvb_usb_vp702x failed with error -110 [ 485.823469][ T5694] dvb-usb: found a 'TwinhanDTV StarBox DVB-S USB2.0 (VP7021)' in cold state, will try to load a firmware [ 485.835799][ T5694] usb 1-1: Direct firmware load for dvb-usb-vp702x-02.fw failed with error -2 [ 485.845634][ T5694] dvb-usb: did not find the firmware file 'dvb-usb-vp702x-02.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 485.849382][ T30] audit: type=1400 audit(1782181875.755:1310): avc: denied { firmware_load } for pid=5694 comm="kworker/0:3" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=0 [ 485.861687][ T5694] dvb_usb_vp702x 1-1:253.180: probe with driver dvb_usb_vp702x failed with error -2 [ 485.892651][ T5694] usb 1-1: unknown interface protocol 0x98, assuming v1 [ 485.900277][ T5694] usb 1-1: 180:1 : does not exist [ 485.905311][ T5694] usb 1-1: 180:2 : does not exist [ 485.929562][ T5694] usb 1-1: USB disconnect, device number 54 [ 496.029638][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 511.390234][ T30] audit: type=1400 audit(1782181901.295:1311): avc: denied { egress } for pid=23 comm="ksoftirqd/1" saddr=fe80::1b daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=0 [ 511.414969][ T30] audit: type=1400 audit(1782181901.295:1312): avc: denied { egress } for pid=23 comm="ksoftirqd/1" saddr=fe80::1b daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=0 [ 516.510784][ T30] audit: type=1400 audit(1782181906.415:1313): avc: denied { egress } for pid=15 comm="ksoftirqd/0" saddr=fe80::1b daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=0 [ 516.534654][ T30] audit: type=1400 audit(1782181906.415:1314): avc: denied { egress } for pid=15 comm="ksoftirqd/0" saddr=fe80::1b daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=0 [ 521.630818][ T30] audit: type=1400 audit(1782181911.535:1315): avc: denied { egress } for pid=23 comm="ksoftirqd/1" saddr=fe80::1c daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=0 [ 526.748698][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 531.825684][ T30] audit: type=1400 audit(1782181921.725:1316): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.169 src=30006 daddr=10.128.0.72 dest=50992 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 536.992140][ T30] audit: type=1400 audit(1782181926.895:1317): avc: denied { recv } for pid=15 comm="ksoftirqd/0" saddr=10.128.0.169 src=30006 daddr=10.128.0.72 dest=50992 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 542.110802][ T30] audit: type=1400 audit(1782181932.015:1318): avc: denied { egress } for pid=15 comm="ksoftirqd/0" saddr=fe80::1b daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=0 [ 557.471098][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 567.710722][ T30] audit: type=1400 audit(1782181957.615:1319): avc: denied { egress } for pid=23 comm="ksoftirqd/1" saddr=fe80::1c daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=0 [ 567.734831][ T30] audit: type=1400 audit(1782181957.615:1320): avc: denied { egress } for pid=23 comm="ksoftirqd/1" saddr=fe80::1c daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=0 [ 572.829892][ T30] audit: type=1400 audit(1782181962.735:1321): avc: denied { egress } for pid=23 comm="ksoftirqd/1" saddr=fe80::1c daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=0 [ 577.952129][ T30] audit: type=1400 audit(1782181967.855:1322): avc: denied { egress } for pid=771 comm="hwrng" saddr=fe80::1c daddr=ff02::1:ff00:1 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=0 [ 577.976422][ T30] audit: type=1400 audit(1782181967.855:1323): avc: denied { egress } for pid=804 comm="kworker/1:2" saddr=fe80::1c daddr=ff02::1:ff00:1 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=0 [ 578.990815][ T30] audit: type=1400 audit(1782181968.895:1324): avc: denied { egress } for pid=12 comm="kworker/u8:0" saddr=fe80::1c daddr=ff02::1:ff00:1 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=0 [ 580.029967][ T30] audit: type=1400 audit(1782181969.935:1325): avc: denied { egress } for pid=23 comm="ksoftirqd/1" saddr=fe80::1c daddr=ff02::1:ff00:1 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=0 [ 583.070484][ T30] audit: type=1400 audit(1782181972.975:1326): avc: denied { egress } for pid=15 comm="ksoftirqd/0" saddr=fe80::20 daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=0 [ 583.094957][ T30] audit: type=1400 audit(1782181972.975:1327): avc: denied { egress } for pid=15 comm="ksoftirqd/0" saddr=fe80::20 daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=0 [ 593.310635][ T30] audit: type=1400 audit(1782181983.215:1328): avc: denied { egress } for pid=15 comm="ksoftirqd/0" saddr=fe80::1b daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=0 [ 603.550823][ T30] audit: type=1400 audit(1782181993.455:1329): avc: denied { egress } for pid=23 comm="ksoftirqd/1" saddr=fe80::1c daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=0 [ 603.575302][ T30] audit: type=1400 audit(1782181993.455:1330): avc: denied { egress } for pid=23 comm="ksoftirqd/1" saddr=fe80::1c daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=0 [ 618.910608][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 618.917024][ T30] audit: type=1400 audit(1782182008.815:1331): avc: denied { egress } for pid=15 comm="ksoftirqd/0" saddr=fe80::1f daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=0 [ 618.941384][ T30] audit: type=1400 audit(1782182008.815:1332): avc: denied { egress } for pid=15 comm="ksoftirqd/0" saddr=fe80::1f daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=0 [ 638.109963][ T31] INFO: task kworker/0:4:5703 blocked for more than 143 seconds. [ 638.117711][ T31] Tainted: G L syzkaller #0 [ 638.124872][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 638.134088][ T31] task:kworker/0:4 state:D stack:21544 pid:5703 tgid:5703 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 638.146737][ T31] Workqueue: usb_hub_wq hub_event [ 638.152600][ T31] Call Trace: [ 638.155875][ T31] [ 638.159661][ T31] __schedule+0x125c/0x6730 [ 638.164168][ T31] ? vhci_urb_dequeue+0x348/0x780 [ 638.169901][ T31] ? rcu_is_watching+0x12/0xc0 [ 638.174656][ T31] ? __pfx___schedule+0x10/0x10 [ 638.180074][ T31] ? rcu_is_watching+0x12/0xc0 [ 638.184823][ T31] ? schedule+0x2bf/0x390 [ 638.190103][ T31] ? lock_release+0x24d/0x310 [ 638.194783][ T31] schedule+0xdd/0x390 [ 638.199355][ T31] usb_kill_urb+0x253/0x320 [ 638.203859][ T31] ? __pfx_usb_kill_urb+0x10/0x10 [ 638.208918][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 638.214989][ T31] usb_start_wait_urb+0x2c3/0x580 [ 638.220039][ T31] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 638.225583][ T31] ? __asan_memset+0x23/0x50 [ 638.230689][ T31] usb_control_msg+0x328/0x4b0 [ 638.235440][ T31] ? __pfx_usb_control_msg+0x10/0x10 [ 638.241290][ T31] get_bMaxPacketSize0.constprop.0+0xd0/0x1f0 [ 638.247343][ T31] hub_port_init+0x642/0x37f0 [ 638.252722][ T31] hub_event+0x2f27/0x4af0 [ 638.257129][ T31] ? __pfx_hub_event+0x10/0x10 [ 638.262759][ T31] ? debug_object_deactivate+0x2e4/0x3b0 [ 638.268399][ T31] ? devm_ioremap_wc+0x20/0xf0 [ 638.273804][ T31] ? rcu_is_watching+0x12/0xc0 [ 638.279138][ T31] ? lock_acquire+0x301/0x370 [ 638.283799][ T31] ? rcu_is_watching+0x12/0xc0 [ 638.289452][ T31] ? rcu_is_watching+0x12/0xc0 [ 638.294219][ T31] process_one_work+0xa23/0x1940 [ 638.300051][ T31] ? __pfx_process_one_work+0x10/0x10 [ 638.305423][ T31] ? __pfx_hub_event+0x10/0x10 [ 638.310741][ T31] worker_thread+0x5ef/0xe50 [ 638.315328][ T31] ? kthread+0x13a/0x450 [ 638.320282][ T31] ? __pfx_worker_thread+0x10/0x10 [ 638.325371][ T31] kthread+0x370/0x450 [ 638.330007][ T31] ? __pfx_kthread+0x10/0x10 [ 638.334583][ T31] ret_from_fork+0x72b/0xd50 [ 638.339861][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 638.344956][ T31] ? __switch_to+0x800/0x10f0 [ 638.350205][ T31] ? __pfx_kthread+0x10/0x10 [ 638.354780][ T31] ret_from_fork_asm+0x1a/0x30 [ 638.360304][ T31] [ 638.363349][ T31] INFO: lockdep is turned off. [ 638.368096][ T31] NMI backtrace for cpu 0 [ 638.368113][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 638.368129][ T31] Tainted: [L]=SOFTLOCKUP [ 638.368133][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 638.368145][ T31] Call Trace: [ 638.368150][ T31] [ 638.368154][ T31] dump_stack_lvl+0x100/0x190 [ 638.368170][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 638.368184][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 638.368199][ T31] nmi_trigger_cpumask_backtrace+0x21c/0x2a0 [ 638.368214][ T31] sys_info+0x141/0x190 [ 638.368226][ T31] watchdog+0xcb1/0x1030 [ 638.368240][ T31] ? trace_irq_enable.constprop.0+0x122/0x160 [ 638.368254][ T31] ? __pfx_watchdog+0x10/0x10 [ 638.368265][ T31] ? __kthread_parkme+0x18c/0x230 [ 638.368279][ T31] ? kthread+0x13a/0x450 [ 638.368294][ T31] ? __pfx_watchdog+0x10/0x10 [ 638.368304][ T31] kthread+0x370/0x450 [ 638.368318][ T31] ? __pfx_kthread+0x10/0x10 [ 638.368334][ T31] ret_from_fork+0x72b/0xd50 [ 638.368348][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 638.368361][ T31] ? __switch_to+0x800/0x10f0 [ 638.368377][ T31] ? __pfx_kthread+0x10/0x10 [ 638.368392][ T31] ret_from_fork_asm+0x1a/0x30 [ 638.368410][ T31] [ 638.368414][ T31] Sending NMI from CPU 0 to CPUs 1: [ 638.506082][ C1] NMI backtrace for cpu 1 [ 638.506100][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 638.506125][ C1] Tainted: [L]=SOFTLOCKUP [ 638.506131][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 638.506143][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 638.506174][ C1] Code: 86 88 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 23 c8 14 00 fb f4 fc 48 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 638.506191][ C1] RSP: 0018:ffffc90000197e00 EFLAGS: 00000246 [ 638.506206][ C1] RAX: 000000000176b52c RBX: ffff88801e2ca540 RCX: ffffffff8b96d2d5 [ 638.506218][ C1] RDX: 0000000000000001 RSI: ffffffff8c1e6100 RDI: ffffffff81de2aa7 [ 638.506229][ C1] RBP: ffffed1003c594a8 R08: 0000000000000000 R09: ffffed10170a678d [ 638.506240][ C1] R10: ffff8880b8533c6b R11: ffffffff81d4ff9c R12: 0000000000000000 [ 638.506252][ C1] R13: 0000000000000000 R14: 1ffff92000032fc4 R15: dffffc0000000000 [ 638.506263][ C1] FS: 0000000000000000(0000) GS:ffff888124416000(0000) knlGS:0000000000000000 [ 638.506280][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 638.506291][ C1] CR2: 0000559b3c296168 CR3: 000000000e592000 CR4: 00000000003526f0 [ 638.506302][ C1] Call Trace: [ 638.506307][ C1] [ 638.506313][ C1] default_idle+0x9/0x10 [ 638.506331][ C1] default_idle_call+0x6c/0xb0 [ 638.506348][ C1] do_idle+0x3a7/0x5b0 [ 638.506372][ C1] ? __pfx_do_idle+0x10/0x10 [ 638.506392][ C1] ? finish_task_switch.isra.0+0x14c/0x1010 [ 638.506418][ C1] cpu_startup_entry+0x4f/0x60 [ 638.506449][ C1] start_secondary+0x21d/0x2d0 [ 638.506470][ C1] ? __pfx_start_secondary+0x10/0x10 [ 638.506492][ C1] common_startup_64+0x13e/0x158 [ 638.506522][ C1] [ 638.694029][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 638.700856][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 638.711503][ T31] Tainted: [L]=SOFTLOCKUP [ 638.715819][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 638.725849][ T31] Call Trace: [ 638.729106][ T31] [ 638.732021][ T31] dump_stack_lvl+0x100/0x190 [ 638.736675][ T31] vpanic+0x552/0x970 [ 638.740628][ T31] ? __pfx_vpanic+0x10/0x10 [ 638.745118][ T31] ? nmi_trigger_cpumask_backtrace+0x1c7/0x2a0 [ 638.751251][ T31] panic+0xd1/0xe0 [ 638.754957][ T31] ? __pfx_panic+0x10/0x10 [ 638.759355][ T31] ? nmi_trigger_cpumask_backtrace+0x1fa/0x2a0 [ 638.765500][ T31] ? nmi_trigger_cpumask_backtrace+0x260/0x2a0 [ 638.771638][ T31] ? nmi_trigger_cpumask_backtrace+0x26a/0x2a0 [ 638.777775][ T31] ? watchdog.cold+0x1ec/0x234 [ 638.782519][ T31] ? watchdog+0xcc1/0x1030 [ 638.786918][ T31] watchdog.cold+0x1fd/0x234 [ 638.791490][ T31] ? trace_irq_enable.constprop.0+0x122/0x160 [ 638.797542][ T31] ? __pfx_watchdog+0x10/0x10 [ 638.802199][ T31] ? __kthread_parkme+0x18c/0x230 [ 638.807209][ T31] ? kthread+0x13a/0x450 [ 638.811437][ T31] ? __pfx_watchdog+0x10/0x10 [ 638.816100][ T31] kthread+0x370/0x450 [ 638.820156][ T31] ? __pfx_kthread+0x10/0x10 [ 638.824732][ T31] ret_from_fork+0x72b/0xd50 [ 638.829307][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 638.834407][ T31] ? __switch_to+0x800/0x10f0 [ 638.839075][ T31] ? __pfx_kthread+0x10/0x10 [ 638.843660][ T31] ret_from_fork_asm+0x1a/0x30 [ 638.848415][ T31] [ 638.851642][ T31] Kernel Offset: disabled [ 638.855942][ T31] Rebooting in 86400 seconds..