last executing test programs: 15.711277946s ago: executing program 3 (id=1170): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0x275a, 0x0) write$P9_RRENAMEAT(r0, &(0x7f0000000240)={0xffffffffffffff50, 0x4b, 0x2}, 0xfda3) writev(r0, &(0x7f0000000000)=[{0x0}], 0x1) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, 0x0) pread64(r2, &(0x7f0000000740)=""/188, 0xbc, 0x9) msgget$private(0x0, 0x790) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000) r5 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r6 = getpid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x0, 0x0, 0x4, 'syz0\x00'}, 0x5, 0x31, 0x1, r6, 0x0, 0x8, 'syz1\x00', 0x0}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r7}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20) 14.930051338s ago: executing program 3 (id=1175): r0 = epoll_create1(0x0) r1 = gettid() kcmp$KCMP_EPOLL_TFD(r1, r1, 0x7, r0, &(0x7f00000001c0)={r0, 0xffffffffffffffff, 0xffff}) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x6e) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0xe0000000, 0x564b043a, 0xa, 0xffff, 0x5, 0x2, 0x0, 0x0, 0x80, 0x80000001}}, 0x50) syz_fuse_handle_req(r3, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x20c01, 0xa) syz_fuse_handle_req(r3, &(0x7f0000008340)="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", 0x2000, &(0x7f0000000340)={&(0x7f0000000400)={0x50, 0xffffffffffffffda, 0xf992, {0x7, 0x2b, 0x4, 0x298000a0, 0x23, 0x201, 0x7ff, 0x9, 0x0, 0x0, 0x40, 0x8001}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) close_range(r2, 0xffffffffffffffff, 0x2) 13.478993988s ago: executing program 2 (id=1177): openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x101100, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d80000001c0081044e81f782db44b904021d08020e0000008100e0a1180002000000000000000e1208000f0100810401a8", 0x31}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000140)=@ethtool_link_settings={0x4d, 0x400, 0xf, 0x80, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4, [0x0, 0x3, 0x4, 0x7, 0x0, 0x0, 0x1]}}) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x3c, r4, 0x1, 0x20000000, 0x25dfdbff, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xfa}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x3}]}, 0x3c}}, 0x42880) r5 = socket(0xa, 0x1, 0x0) ioctl(r5, 0x8916, &(0x7f0000000000)) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f000001b700)=""/102392, 0x18ff8) r7 = syz_open_dev$sg(0x0, 0x0, 0x5) writev(r7, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r9 = syz_io_uring_setup(0x499, &(0x7f0000000380)={0x0, 0xd146, 0x0, 0x0, 0x287}, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r8, 0x0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x30}}) io_uring_enter(r9, 0x3516, 0x8fdb, 0x28, 0x0, 0x0) 13.315989652s ago: executing program 4 (id=1179): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001400)=[{&(0x7f0000003480)=""/4112, 0x1010}], 0x1, 0x3, 0x5) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0xa) 13.297504318s ago: executing program 3 (id=1180): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r2, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000140)={0x30, 0x5, 0x0, {0x0, 0x1, 0x3, 0x67a7}}, 0x30) umount2(&(0x7f0000000380)='./file0\x00', 0x1) r3 = syz_open_procfs(0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="120100004b41460860163209ea8001"], 0x0) r4 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff}, [@call={0x85, 0x0, 0x0, 0x37}]}, &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000140)={0x3, 0x2000bb22, 0x2, {0x1, @raw_data="3d924b827139e8a4ec01eb92492ff84715d1a004d08b012a7cafe27a5f313d31bbdae5b411ca5be6bfe92437ed0d21b5180e375be56b3b9306d7dbb26bf9f22de7ac7681cca450055250217bdf1113b4258293ba4efed32147bda8454dd115bd5ba066ba06f2854cc96db9a98055cbde9fd084a1223ada91ed2e832907a01ab5ee65f997b617f73d1aa5a6dfc47acdc5eb834f8e448469d235e4380cbcc331c96177b67caa0656f9664277cadb8597e7d911ad1da457ef9744b0993c57a700"}}) r5 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$fb(r5, &(0x7f0000000100)="732f64bd01d8958da2", 0x9) r6 = open$dir(&(0x7f0000000080)='./file0\x00', 0x40000, 0x19b) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r6, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r7, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1}}, 0x40) read(r4, 0x0, 0x0) r8 = socket$inet6(0xa, 0x802, 0x88) setsockopt$inet6_udp_int(r8, 0x11, 0x100000000a, &(0x7f0000000040)=0x800000001, 0x4) sendto$inet6(r8, 0x0, 0x0, 0xcc844, &(0x7f0000000180)={0xa, 0x4e23, 0xa19, @mcast1}, 0x1c) 12.815336918s ago: executing program 4 (id=1181): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$nl_route(0x10, 0x3, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f00000000c0)={0x1, 'pim6reg0\x00', {}, 0x9}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000009c0)=@newtfilter={0x31c, 0x2c, 0xd2b, 0x70bd2b, 0x35dfdbfe, {0x0, 0x0, 0x0, r4, {0xf}, {0x0, 0xfff3}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x2f0, 0x2, [@TCA_U32_SEL={0x1d4, 0x5, {0x9, 0x7f, 0x3, 0x200, 0x9, 0xffff, 0x3, 0x8, [{0x6, 0x400000, 0x0, 0x2}, {0x1a8f, 0x9, 0xfffff801, 0x7}, {0x7, 0x6, 0x5, 0x400}, {0x73, 0x1400, 0x57e76c05, 0x7fff}, {0x7, 0x1, 0x0, 0x81}, {0x7, 0x1, 0x1, 0x4}, {0x7fffffff, 0x0, 0x9, 0x7}, {0x2, 0x8, 0x1}, {0x401, 0xffffffff, 0x7, 0x7}, {0x6, 0x8, 0x1, 0x9}, {0x7, 0x4, 0x2, 0x8}, {0x4, 0x5b61, 0x582e6f55, 0xe37}, {0x1, 0x6, 0x6, 0x400}, {0x7, 0x1, 0x401, 0x9}, {0x4, 0x6, 0x5, 0x8001}, {0xfffffffb, 0xd, 0x7f, 0x7f}, {0xc0000000, 0x82, 0x80000000, 0x8}, {0x80000001, 0xa, 0x6, 0xe0}, {0x0, 0x9, 0x4, 0xb76}, {0x0, 0x8, 0x4, 0x36c2}, {0x6, 0xc63, 0xb, 0xff}, {0x7, 0x200, 0x8, 0x400}, {0x0, 0x9, 0x8008, 0xa}, {0xd, 0x6, 0x2, 0x8}, {0x8, 0xffffffff, 0x6aebc92b, 0x200}, {0x7, 0xdefb, 0x6, 0x401}, {0x400, 0xaef2, 0xffff, 0x1}, {0x2, 0x8, 0x800, 0x5}]}}, @TCA_U32_POLICE={0x4}, @TCA_U32_SEL={0x114, 0x5, {0x10, 0x9, 0x6, 0x10da, 0xa760, 0x0, 0x10, 0x100, [{0x6, 0x3ff, 0x3, 0x4}, {0x2, 0xffffffff, 0x69c, 0x4000000}, {0x1, 0x2, 0x9, 0x8}, {0x9, 0x7ffe, 0x8009, 0x6}, {0x3, 0xde5, 0x1, 0xbd}, {0x3, 0x80, 0x1, 0x6}, {0x7, 0x7fff, 0x800000, 0x40}, {0x5, 0xfffffff9, 0xfffffffa, 0x51}, {0x49f, 0x7, 0x81, 0xb}, {0x4, 0x9, 0x2}, {0x1000, 0x2, 0x264, 0x9}, {0x3ff, 0x80000001, 0x3, 0xa6d}, {0x2, 0x4f, 0x5a2, 0xa2fa}, {0x7, 0x2, 0x6, 0x3}, {0x7fff, 0x5, 0x403, 0xc42b}, {0xc, 0x8000, 0xfffffffb}]}}]}}]}, 0x31c}}, 0x4040052) syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r5 = socket$inet_udplite(0x2, 0x2, 0x88) bind$inet(r5, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) request_key(&(0x7f00000011c0)='big_key\x00', &(0x7f0000001200)={'syz', 0x1}, &(0x7f0000001240)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet(0x2, 0x4, 0x7) add_key(&(0x7f0000000080)='big_key\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000980)="475a251bdb1e4c438649cdf2", 0xc, 0xfffffffffffffffb) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x6c240, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), r7) sendmsg$MPTCP_PM_CMD_GET_ADDR(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000e9cc670cd28e541a753c657d6ab8718ee336caaebec5e9dcbf6189a74feef1d2ec8828f643e10e57c70a7a62f2f926e9491dd04398bbe2b488a52a810d1ffdcdcf0df11de70a74a7d074dba109aa246ed53a9be9b0fe316cac2bd9511b1f29", @ANYRES16=r8, @ANYBLOB="ffff2abd7000f8dbdf2503001400"], 0x14}, 0x1, 0x0, 0x0, 0x4005c}, 0x400c084) r9 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r9, 0x4c0a, &(0x7f0000000440)={r6, 0x2000, {0x0, 0x0, 0x0, 0x40008, 0x0, 0x13, 0x0, 0xe, 0x1c, "339f020bbe78b39843d601010000000000080d0ec0c1b4e9b1c4369d03741250ceaac50104000041dd17c18e8438ef2a565ef1e833236500", "a1163939c787a16c1ca43f8539f3d3289737f0374c72a964a0193b3e8772fd29f35239d200", "e7431ae0778a8e17e2000000000000ffff0000000000000000000000000500", [0x1f00000000000000, 0x2]}}) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000005c0)={0x53, 0x0, 0x7, 0xb, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000040)="aa8d8f624adb5a", 0x0, 0x3, 0x20, 0xc, 0x0}) 10.27592277s ago: executing program 2 (id=1184): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) getpgrp(0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) syz_emit_ethernet(0x4e, &(0x7f00000003c0)={@link_local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "0300", 0x18, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x88, 0x0, 0x0, 0x4a, '\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}}}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x12, &(0x7f00000024c0)={@broadcast, @empty, @val={@void, {0x8100, 0x0, 0x1, 0x4}}, {@generic={0x88f7}}}, 0x0) r1 = getpid() prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) io_uring_setup(0x1b7b, 0x0) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x10, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xbf21, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x10000000}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffff5}], {{}, {}, {0x85, 0x0, 0x0, 0x84}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0x102}}}, &(0x7f0000000200)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41000}, 0x94) 9.532208025s ago: executing program 4 (id=1186): openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8916, &(0x7f0000000000)) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f000001b700)=""/102392, 0x18ff8) r2 = syz_open_dev$sg(0x0, 0x0, 0x5) writev(r2, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r4 = syz_io_uring_setup(0x499, &(0x7f0000000380)={0x0, 0xd146, 0x0, 0x0, 0x287}, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x30}}) io_uring_enter(r4, 0x3516, 0x8fdb, 0x28, 0x0, 0xa4) 7.798703928s ago: executing program 3 (id=1189): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="401504"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000300)=ANY=[@ANYBLOB="00160400000094c165ee"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f0000000140)={0x0, 0xf, 0x4, "c7a13997"}, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000680)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="200304000000a13b1f21e5beadc6eb1a0640e61bd764e14afd65ef36ce684687abf6d7500f1ed93d8b4a0c"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000740)={0x34, &(0x7f0000000240)={0x40, 0x15, 0x4, "6ce4d1f4"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000280)={0x0, 0x10, 0x4, "78a5014c"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000180)={0x1c, &(0x7f0000000840)={0x40, 0xe, 0x4, "6c1f5ef8"}, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000000)=0x3) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000140)={0x2, &(0x7f00000016c0)=[{0x48, 0xc0, 0x38, 0x9}, {0x6, 0xfc}]}) write$ppp(r1, &(0x7f00000005c0)='6\x00', 0x2) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, &(0x7f0000000080)={0x20, 0x18, 0x5, "9161ca8861"}, 0x0, 0x0, 0x0, 0x0}) 7.732242441s ago: executing program 2 (id=1190): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000000) socket(0x28, 0x801, 0x0) socket$qrtr(0x2a, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) lseek(0xffffffffffffffff, 0x101, 0x1) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000001c0)={0xffffffffffffffff}, 0x13f, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f0000000280)={0x13, 0x10, 0xfa00, {&(0x7f0000000380), r2, 0x1}}, 0x18) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) 7.572534274s ago: executing program 0 (id=1191): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001400)=[{&(0x7f0000003480)=""/4112, 0x1010}], 0x1, 0x3, 0x5) ioctl$KVM_SET_NR_MMU_PAGES(0xffffffffffffffff, 0xae44, 0xa) 7.255323756s ago: executing program 0 (id=1192): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) (async) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) (async, rerun: 64) mkdir(0x0, 0x2) (async, rerun: 64) mknod$loop(0x0, 0xfff, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, 0x0, 0x40408c0) (async) r2 = socket$inet_smc(0x2b, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) (async) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) (async, rerun: 64) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (rerun: 64) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) (async) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r4, 0x0, 0x24, &(0x7f0000000440)={@broadcast, @loopback, @empty}, 0xc) r5 = socket$qrtr(0x2a, 0x2, 0x0) getpeername$qrtr(r5, &(0x7f0000000200), 0x0) (async, rerun: 64) syz_open_dev$sndctrl(0x0, 0x0, 0x0) (async, rerun: 64) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x487, &(0x7f0000000040), &(0x7f0000000080)=0x30) (async) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) (async) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) write$cgroup_int(r6, &(0x7f0000000080)=0x2, 0x12) (async) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) vmsplice(r7, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) fcntl$setpipe(r7, 0x407, 0x2000000) close(0x3) (async) socket$kcm(0x10, 0x2, 0x0) 7.081234375s ago: executing program 0 (id=1193): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100000000002003043060000000000001090224000100"], 0x0) syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000780)=ANY=[@ANYBLOB="12ffff0c000000ff7f04060000000102030109021b000101dd6d21e9774368d4313db652d48000000000040207"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) renameat(r4, &(0x7f00000000c0)='./file0\x00', r4, &(0x7f00000001c0)='\x00') close(r4) r5 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r5, &(0x7f0000000140)={0x28, 0x0, 0x2710, @host}, 0x10) listen(r5, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r7 = accept4(r5, 0x0, 0x0, 0x0) sendto(r7, &(0x7f0000000200)='9', 0x1, 0x0, 0x0, 0x0) recvmmsg(r6, &(0x7f00000007c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/214, 0xd6}}, {{0x0, 0x0, &(0x7f0000004600)}, 0x8}, {{0x0, 0x0, &(0x7f0000005c40)=[{0x0}], 0x1}, 0x1000}, {{&(0x7f0000000240)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000500)=""/210, 0xd2}, {&(0x7f00000006c0)=""/70, 0x46}, {&(0x7f0000000600)=""/103, 0x67}, {&(0x7f0000000480)=""/20, 0x14}], 0x4, &(0x7f00000008c0)=""/159, 0x9f}}], 0x4, 0x0, &(0x7f0000005ec0)={0x0, 0x3938700}) ioctl$SIOCSIFHWADDR(r4, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008dffff"}) syz_usb_connect(0x0, 0x3b, &(0x7f0000000080)=ANY=[], 0x0) 6.313333813s ago: executing program 4 (id=1195): sched_setaffinity(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r0 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) gettid() timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(0x0, 0x4, 0x0, 0x0, &(0x7f0000000180)=0x2, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000440)={{0x0, 0x5, 0x0, 0x25}, 'syz0\x00', 0x53}) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x12) ioctl$UI_DEV_CREATE(r1, 0x5501) setresuid(0xee01, 0xee01, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x800, 0x1) get_robust_list(r2, 0x0, 0x0) close(0xffffffffffffffff) r3 = socket$inet6(0xa, 0x80002, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x14c4, &(0x7f0000000080)=ANY=[@ANYBLOB="7472616e733d10505a7726f47082fb", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',posixacl,cache=fscache,access=user,\x00']) 6.310341964s ago: executing program 2 (id=1196): syz_emit_ethernet(0x87, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x0, 0x40000102, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg$inet(r2, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r4 = fsopen(&(0x7f0000000080)='erofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000000)='dax\x00', &(0x7f0000000040)='\x00\x80', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r5 = fspick(0xffffffffffffffff, &(0x7f0000000080)='./bus\x00', 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c004bb5264873bf977de3c2f0811d50adc85d6a376c5fc59882fff2e8eaa277509502b8759c4b9dda8aa8437a0738f093e583cb8be8efed528ce8b03f998f46c2c298741a19ac", @ANYRES16=r7, @ANYBLOB="000426bd7000fbdbdf25070000597300cc000400cc00080005070000010008000500020000000400cc000400cce1c175fffde9b66e18"], 0x3c}, 0x1, 0x0, 0x0, 0x50}, 0x4000080) r8 = fsmount(r5, 0x0, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r9, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r9, 0x6, 0x2, &(0x7f00000000c0)=0xca, 0x4) connect$inet(r9, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$inet(r9, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) recvmsg(r9, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) ioctl$sock_inet_tcp_SIOCINQ(r9, 0x541b, 0x0) fchdir(r8) open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x43) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)) socket$nl_netfilter(0x10, 0x3, 0xc) 5.379720518s ago: executing program 1 (id=1197): open_tree(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup\x00', 0x89901) open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x80901) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x40c00, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0xff7fffff, 0x0, 0x15, "ff00"}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000200)=0x2) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f00000000c0)=0x3) 4.391861079s ago: executing program 1 (id=1198): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) sched_setaffinity(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r1 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x0, 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(0x0, 0x4, 0x0, 0x0, &(0x7f0000000180)=0x2, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000000440)={{0x0, 0x5, 0x0, 0x25}, 'syz0\x00', 0x53}) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x12) ioctl$UI_DEV_CREATE(r3, 0x5501) setresuid(0xee01, 0xee01, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x800, 0x1) get_robust_list(r4, 0x0, 0x0) r5 = socket$inet6(0xa, 0x80002, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x14c4, &(0x7f0000000080)=ANY=[@ANYBLOB="7472616e733d10505a7726f47082fb", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB=',posixacl,cache=fscache,access=user,\x00']) 4.025186173s ago: executing program 3 (id=1199): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0xfffffffd, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x22, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x9}, 0x80}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) socket$netlink(0x10, 0x3, 0x15) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) pipe(0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) shutdown(r3, 0x1) r4 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) preadv(r4, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/98, 0x16}], 0x1, 0x0, 0x0) r5 = socket$pppoe(0x18, 0x1, 0x0) pwritev(r4, &(0x7f00000003c0)=[{0x0}, {0x0}], 0x2, 0xfffffffe, 0x4) connect$pppoe(r5, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 3.797623711s ago: executing program 2 (id=1200): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0xfffffffc, {0x2a00, 0x80010000, 0x0, 0x800, 0x2, 0x0, 0x0, 0xd, 0x4, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "0f09e8dbe1085989482f4ad54afac11d875397bdb2f45f819e011799286106000000000000000000000000000000000000000000000000000010ecff00", "f4bd000000801900000000feff0700", [0xffffffffffffffff, 0x22000000000001]}}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xcac2d78a}}, 0x0, 0x0, 0x43, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da55a02ddbe2665dca1029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r2, &(0x7f0000000540)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "dde04425ace3550c", "e73784f0a6731f234db1cc7f3f382ad786bda99509873931d287310300", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) ioctl$int_in(r2, 0x5421, &(0x7f0000000140)=0x1) writev(r2, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) r3 = syz_open_dev$audion(0x0, 0x3, 0x0) write(r0, &(0x7f0000000580)="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", 0xfe7) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000240)={'bond_slave_0\x00', 0x200}) syz_init_net_socket$llc(0x1a, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000001740)=0xc) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0xecfa5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f0000002cc0)=[{{&(0x7f0000000400)=@l2tp={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000001900), 0x0, &(0x7f0000001980)=""/4093, 0xffd}, 0x5}, {{&(0x7f0000002980)=@alg, 0x80, &(0x7f0000002c00), 0x0, &(0x7f0000002c40)=""/49, 0x31}, 0x1000}], 0x2, 0x2, 0x0) openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0) unshare(0x6e060400) socket$pppl2tp(0x18, 0x1, 0x1) 3.37388158s ago: executing program 0 (id=1201): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWCHAIN={0x50, 0x3, 0xa, 0x76a9bba1a690db0f, 0x0, 0x0, {0xa, 0x0, 0x2005}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3cb140bb}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_COUNTERS={0x10, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x5}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="78000000070a010200000000000000000a0000080900010073797a31000000005800048054000180090001006d6e74610000000044000280080001400000000c080003400000000008000340000000170800014000000003080002400000002308000140000000120800024000000018080002"], 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x44000) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x34, 0x40, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@nested={0x4, 0x8}, @nested={0x4, 0x10}]}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f00009d1000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f00002a0000/0x4000)=nil) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) creat(0x0, 0x69) mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000240)='./cgroup\x00', &(0x7f0000000040)='befs\x00', 0x800841, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0xadc) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000000100)=[{&(0x7f0000000900)="580000001400192360834b80043f679a10ff3d420000000001000000f61bcdf1194ad353e9cc853a804824cabece4b381effffffff0057e792945f80000000050028925aaa000000c600000004002e499391db0926f27805", 0x58}], 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r5) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) 3.273256956s ago: executing program 1 (id=1202): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001400)=[{&(0x7f0000003480)=""/4112, 0x1010}], 0x1, 0x3, 0x5) ioctl$KVM_SET_NR_MMU_PAGES(0xffffffffffffffff, 0xae44, 0xa) 2.984426347s ago: executing program 1 (id=1203): socket$l2tp(0x2, 0x2, 0x73) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x183100, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b00)={{{@in6=@remote, @in=@initdev={0xac, 0x1e, 0x5, 0x0}, 0x0, 0x5, 0x0, 0x0, 0x2, 0x0, 0x10, 0x1}, {0x7fe000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff}, {0x0, 0x0, 0x3}, 0x0, 0x0, 0x1, 0x1}, {{@in=@rand_addr=0xffffffff, 0x4d5, 0x32}, 0x2, @in6=@remote, 0x0, 0x2, 0x0, 0xb7, 0xb, 0x81}}, 0xe8) connect$inet(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xe539, 0x800, 0x400001, 0x40000333}, &(0x7f00000000c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x7, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r2, 0x847ba, 0x500, 0xe, 0x0, 0x0) 2.55464573s ago: executing program 2 (id=1204): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0xb, "1a3952b5"}]}}, 0x0}, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x3f, 0x0) 2.180306121s ago: executing program 0 (id=1205): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x2, 0x0, 0x0) prctl$PR_MCE_KILL(0x59616d61, 0x1, 0x4000) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) socket$nl_generic(0x10, 0x3, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x23457, 0x0, 0x0, 0x1}) io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x0, 0x0, 0x0) setrlimit(0x6, &(0x7f0000000180)={0x6, 0x1fffe}) 1.193044173s ago: executing program 4 (id=1206): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') pread64(r0, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) 1.191445634s ago: executing program 1 (id=1207): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0xa4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xb5}, 0x48) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) ptrace$poke(0x4, r0, &(0x7f0000000080), 0x9) 1.107915638s ago: executing program 0 (id=1208): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x402, 0x0) write$vga_arbiter(r1, &(0x7f0000000140), 0xf) syz_usb_connect$hid(0x0, 0xf2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) listen(r2, 0x47) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x2, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f00000001c0), &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xc2, &(0x7f0000000380)=[{}], 0x8, 0x10, &(0x7f00000001c0), &(0x7f0000000440), 0x8, 0x93, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0x10, &(0x7f0000000000)=ANY=[@ANYRES8=r0, @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000006900000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x66, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0x2d, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r8 = socket(0x8794cfd2aaad5046, 0x5, 0x3ff) r9 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x0, 0x20, 0x7f}, 0x10) write(r3, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00", 0x12) getsockopt$packet_buf(r9, 0x107, 0x16, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r8) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r10, 0xf504, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x21, 0x2, 0x2) connect$unix(0xffffffffffffffff, 0x0, 0x0) 430.013451ms ago: executing program 4 (id=1209): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000207d1e512d00000000000109022400010000000009040000010300020009210000000122050009058103"], 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000900)=@ipv4_delroute={0x24, 0x18, 0x901, 0x0, 0x25dfdbff, {0x2, 0x18, 0x0, 0x0, 0xff, 0x0, 0x0, 0x8, 0x1000000}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}}, 0x404) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x5, "6271be4d"}]}}, 0x0}, 0x0) 220.938719ms ago: executing program 1 (id=1210): syz_usb_connect(0x2, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000044e22008d31324320dcb010c03010902120001040020000904"], 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r0) r1 = signalfd(r0, &(0x7f0000000040)={[0x5]}, 0x8) syz_usb_connect$cdc_ecm(0x5, 0x85, &(0x7f0000000180)={{0x12, 0x1, 0x402, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x73, 0x1, 0x1, 0xfb, 0xa0, 0x7f, [{{0x9, 0x4, 0x0, 0x1, 0x3, 0x2, 0x6, 0x0, 0x3, {{0x6, 0x24, 0x6, 0x0, 0x0, "04"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x75, 0x10, 0x1}, [@dmm={0x7, 0x24, 0x14, 0x5, 0x7}, @mdlm={0x15, 0x24, 0x12, 0x2}, @ncm={0x6, 0x24, 0x1a, 0xd, 0x3e}, @obex={0x5, 0x24, 0x15, 0x3}, @dmm={0x7, 0x24, 0x14, 0xfdc1, 0xfff}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x0, 0x4, 0x50, 0xce}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xff, 0x5, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x1, 0xbb, 0xb}}}}}]}}]}}, &(0x7f0000000680)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x110, 0x8, 0x9, 0xf, 0x8, 0x1}, 0x16, &(0x7f0000000240)={0x5, 0xf, 0x16, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x5, 0xc, 0xa, 0x7ff}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x1, 0x5, 0x4}]}, 0x6, [{0x82, &(0x7f0000000280)=@string={0x82, 0x3, "e9a26fe183cd8154f3e72fb190f7b385fa8fe006dbdbad517a170ee9be912ffb6062088f38fef6ac6544c029e8fd2b1fde67e34a1d92cd912a8fd2f74d75d72bd191832f35d697efe0aa043f0bf53833d8e59ad9337d6226516a2c009522a560ba1389ffc6a2e9ba67fc91c70ecbe85dd5bf0bbb4fcf0553969dd7854cc57aef"}}, {0x102, &(0x7f0000000340)=@string={0x102, 0x3, "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"}}, {0xd9, &(0x7f0000000480)=@string={0xd9, 0x3, "7f0f4fe3d03bf68031ebe36a54eeff7611b37bd7049e907345c6ce03561b0406fcbdec28cdc3c100569de2d05f5ee5293e656c2d59014803870d83a6f527899ef0aa994ba6b8e2eb9a6d5d679daddf9f9be2675ba1c922d0a9ef500e66d2122575ba70544179c0e34b5526e63a8db2b885e520a963602c32104c4e6ac119981cb4fde960e422461954663a94e671b7ec2c948ac0dd9745ab9a0cfd9c88d81647382a06bbb7ae5e3e4cf9a81e44ee3566ef655a9d1e9ff93ebdd6985c520790c5033321ed1b7cdd04b162fe42b35c02dcbc03d6abf35d6f"}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x140a}}, {0x6b, &(0x7f00000005c0)=@string={0x6b, 0x3, "dcd99f85f1cbd67a81726af77d32fa70afec317c865946d66c9b5a2189eeabe410adb1b9b8805531a6afd54b804395cc84270fa1cd7aaf66c17a59359903b51ca9b40add832a4c78443029a885310792df918987d64aff1c3fcc8bc65b77f14d30548b2fc153bed6dd"}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0xc1a}}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x8, 0x2, 0xcaa, 0x2004, r1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x2, 0xf}, 0x50) 0s ago: executing program 3 (id=1211): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100000000002003043060000000000001090224000100"], 0x0) syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000780)=ANY=[@ANYBLOB="12ffff0c000000ff7f04060000000102030109021b000101dd6d21e9774368d4313db652d48000000000040207"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) renameat(r4, &(0x7f00000000c0)='./file0\x00', r4, &(0x7f00000001c0)='\x00') close(r4) r5 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r5, &(0x7f0000000140)={0x28, 0x0, 0x2710, @host}, 0x10) listen(r5, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r7 = accept4(r5, 0x0, 0x0, 0x0) sendto(r7, &(0x7f0000000200)='9', 0x1, 0x0, 0x0, 0x0) recvmmsg(r6, &(0x7f00000007c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/214, 0xd6}}, {{0x0, 0x0, &(0x7f0000004600)}, 0x8}, {{0x0, 0x0, &(0x7f0000005c40)=[{0x0}], 0x1}, 0x1000}, {{&(0x7f0000000240)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000500)=""/210, 0xd2}, {&(0x7f00000006c0)=""/70, 0x46}, {&(0x7f0000000600)=""/103, 0x67}, {&(0x7f0000000480)=""/20, 0x14}], 0x4, &(0x7f00000008c0)=""/159, 0x9f}}], 0x4, 0x0, &(0x7f0000005ec0)={0x0, 0x3938700}) ioctl$SIOCSIFHWADDR(r4, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008dffff"}) syz_usb_connect(0x0, 0x3b, &(0x7f0000000080)=ANY=[], 0x0) kernel console output (not intermixed with test programs): setting 0 endpoint 0x81 has invalid maxpacket 59381, setting to 1024 [ 533.800937][ T9857] snd_dummy snd_dummy.0: control 0:0:4:syz0:0 is already present [ 533.841400][ T7284] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 533.933751][ T7284] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 534.047337][ T7284] usb 2-1: config 0 descriptor?? [ 534.071396][ T9864] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 534.086669][ T7386] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 534.312299][ T9864] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 534.321257][ T9864] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 534.338826][ T7386] usb 3-1: Using ep0 maxpacket: 8 [ 534.513440][ T7386] usb 3-1: config index 0 descriptor too short (expected 30, got 18) [ 534.599626][ T9870] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 534.609303][ T9870] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 535.066353][ T7386] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 535.075520][ T7386] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 535.083789][ T7386] usb 3-1: Product: syz [ 535.104828][ T7386] usb 3-1: Manufacturer: syz [ 535.123197][ T7386] usb 3-1: SerialNumber: syz [ 535.352236][ T7386] usb 3-1: config 0 descriptor?? [ 535.427616][ T7386] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 535.435722][ T7386] usb 3-1: setting power ON [ 535.649659][ T7386] dvb-usb: bulk message failed: -22 (2/0) [ 535.680858][ T7386] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 535.745129][ T7386] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 535.774521][ T7386] usb 3-1: media controller created [ 535.797231][ T7386] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 535.946463][ T7386] usb 3-1: selecting invalid altsetting 6 [ 535.968132][ T7386] usb 3-1: digital interface selection failed (-22) [ 536.006464][ T7386] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 536.028739][ T7386] usb 3-1: setting power OFF [ 536.042590][ T7386] dvb-usb: bulk message failed: -22 (2/0) [ 536.145300][ T7386] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 536.214853][ T7386] (NULL device *): no alternate interface [ 536.268388][ T7386] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 536.362436][ T7284] usbhid 2-1:0.0: can't add hid device: -71 [ 536.403619][ T7284] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 536.442889][ T7284] usb 2-1: USB disconnect, device number 25 [ 536.828532][ T5987] usb 3-1: USB disconnect, device number 29 [ 537.032772][ T5874] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 537.206386][ T5874] usb 4-1: Using ep0 maxpacket: 8 [ 537.236644][ T5874] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 537.246230][ T7284] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 537.287160][ T5874] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 537.516211][ T7284] usb 2-1: Using ep0 maxpacket: 8 [ 537.593031][ T7284] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 537.603608][ T7284] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 537.646023][ T7284] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 537.655542][ T5958] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 537.655552][ T7284] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 537.672274][ T9895] input: syz0 as /devices/virtual/input/input51 [ 537.766637][ T5874] pvrusb2: Hardware description: Terratec Grabster AV400 [ 537.773696][ T5874] pvrusb2: ********** [ 537.855037][ T5874] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 537.879725][ T5874] pvrusb2: Important functionality might not be entirely working. [ 537.919641][ T5874] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 537.940234][ T5874] pvrusb2: ********** [ 537.955301][ T2339] pvrusb2: Invalid write control endpoint [ 537.966274][ T5958] usb 5-1: Using ep0 maxpacket: 8 [ 538.167173][ T5958] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 538.250528][ T5958] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 538.276865][ T9874] pvrusb2: Invalid write control endpoint [ 538.285192][ T5867] usb 4-1: USB disconnect, device number 23 [ 538.319609][ T30] audit: type=1400 audit(1769185424.180:1428): avc: denied { read } for pid=9873 comm="syz.3.935" dev="nsfs" ino=4026533094 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 538.376257][ T5958] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 538.393886][ T2339] pvrusb2: Invalid write control endpoint [ 538.421208][ T5958] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 538.436046][ T2339] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 538.445550][ T30] audit: type=1400 audit(1769185424.180:1429): avc: denied { open } for pid=9873 comm="syz.3.935" path="net:[4026533094]" dev="nsfs" ino=4026533094 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 538.476217][ T2339] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 538.496692][ T2339] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 538.533084][ T30] audit: type=1400 audit(1769185424.180:1430): avc: denied { create } for pid=9873 comm="syz.3.935" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 538.556424][ T2339] pvrusb2: Device being rendered inoperable [ 538.563653][ T2339] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 538.603057][ T2339] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_i) [ 538.617310][ T30] audit: type=1400 audit(1769185424.180:1431): avc: denied { getopt } for pid=9873 comm="syz.3.935" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 538.664683][ T2339] pvrusb2: Attached sub-driver cx25840 [ 538.675122][ T9901] netlink: 44 bytes leftover after parsing attributes in process `syz.2.941'. [ 538.678151][ T2339] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 538.696527][ T2339] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 539.334219][ T9911] input: syz0 as /devices/virtual/input/input52 [ 539.345016][ T5958] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 539.506200][ T5958] usb 4-1: Using ep0 maxpacket: 32 [ 539.513076][ T5958] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 539.543806][ T5958] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59381, setting to 1024 [ 539.589161][ T5958] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 539.614614][ T5958] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 539.646430][ T5958] usb 4-1: config 0 descriptor?? [ 539.662762][ T9907] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 539.974027][ T9907] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 540.016387][ T9907] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 540.288622][ T30] audit: type=1400 audit(1769185426.190:1432): avc: denied { ioctl } for pid=9906 comm="syz.3.943" path="socket:[19397]" dev="sockfs" ino=19397 ioctlcmd=0x8b14 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 540.368620][ T9928] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 540.378834][ T9928] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 540.696367][ T6275] usb 2-1: USB disconnect, device number 26 [ 541.186370][ T6275] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 541.204498][ T30] audit: type=1400 audit(1769185427.100:1433): avc: denied { ioctl } for pid=9910 comm="syz.0.945" path="/dev/video0" dev="devtmpfs" ino=932 ioctlcmd=0x5608 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 541.513141][ T9933] netlink: 'syz.2.947': attribute type 10 has an invalid length. [ 541.630745][ T5987] usb 5-1: USB disconnect, device number 32 [ 541.737854][ T9933] netlink: 2 bytes leftover after parsing attributes in process `syz.2.947'. [ 541.912559][ T9933] bridge0: port 1(team0) entered blocking state [ 541.967486][ T9933] bridge0: port 1(team0) entered disabled state [ 542.023212][ T9933] team0: entered allmulticast mode [ 542.559562][ T5958] usbhid 4-1:0.0: can't add hid device: -71 [ 542.566198][ T5958] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 543.068069][ T6275] usb 2-1: Using ep0 maxpacket: 32 [ 543.092782][ T6275] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 543.127139][ T6275] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59381, setting to 1024 [ 543.127711][ T9941] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 543.148742][ T6275] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 543.172369][ T9936] team0: left allmulticast mode [ 543.177633][ T9936] bridge0: port 1(team0) entered disabled state [ 543.194325][ T6275] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 543.313289][ T6275] usb 2-1: config 0 descriptor?? [ 543.353712][ T9930] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 543.672473][ T9930] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 543.781831][ T9930] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 543.783658][ T5958] usb 4-1: USB disconnect, device number 24 [ 543.918556][ T9936] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 544.168743][ T9952] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 544.179036][ T9952] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 544.636223][ T5958] usb 3-1: new full-speed USB device number 30 using dummy_hcd [ 544.790229][ T5958] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 544.802442][ T5958] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 544.810667][ T5958] usb 3-1: Product: syz [ 544.815163][ T5958] usb 3-1: Manufacturer: syz [ 544.825552][ T5958] usb 3-1: SerialNumber: syz [ 544.856790][ T5958] usb 3-1: config 0 descriptor?? [ 545.084983][ T5958] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 546.271320][ T5958] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 546.348195][ T6275] usbhid 2-1:0.0: can't add hid device: -71 [ 546.379920][ T6275] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 546.404622][ T30] audit: type=1400 audit(1769185432.300:1434): avc: denied { read } for pid=9945 comm="syz.2.951" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 546.455341][ T6275] usb 2-1: USB disconnect, device number 27 [ 546.906405][ T6275] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 546.952687][ T30] audit: type=1400 audit(1769185432.330:1435): avc: denied { open } for pid=9945 comm="syz.2.951" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 547.099543][ T6275] usb 2-1: Using ep0 maxpacket: 8 [ 547.108103][ T6275] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 547.124975][ T6275] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 547.782192][ T6275] pvrusb2: Hardware description: Terratec Grabster AV400 [ 547.974538][ T6275] pvrusb2: ********** [ 548.022824][ T6275] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 548.159871][ T6275] pvrusb2: Important functionality might not be entirely working. [ 548.233137][ T6275] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 548.244375][ T5987] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 548.407506][ T6275] pvrusb2: ********** [ 548.436541][ T2339] pvrusb2: Invalid write control endpoint [ 548.615631][ T8014] usb 2-1: USB disconnect, device number 28 [ 548.652719][ T5958] usb 3-1: USB disconnect, device number 30 [ 548.751180][ T2339] pvrusb2: Invalid write control endpoint [ 548.812700][ T2339] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 548.883289][ T2339] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 548.903500][ T2339] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 548.928820][ T2339] pvrusb2: Device being rendered inoperable [ 549.062783][ T9972] overlayfs: missing 'lowerdir' [ 549.365349][ T2339] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 549.413049][ T2339] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_j) [ 549.417380][ T9977] netlink: 'syz.2.957': attribute type 10 has an invalid length. [ 549.430337][ T9977] netlink: 2 bytes leftover after parsing attributes in process `syz.2.957'. [ 549.432671][ T2339] pvrusb2: Attached sub-driver cx25840 [ 549.460640][ T2339] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 549.547255][ T2339] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 549.738921][ T9985] team0: left allmulticast mode [ 549.745041][ T9985] bridge0: port 1(team0) entered disabled state [ 549.774272][ T9986] netlink: 'syz.1.959': attribute type 10 has an invalid length. [ 549.870522][ T9986] netlink: 2 bytes leftover after parsing attributes in process `syz.1.959'. [ 550.244121][ T9987] netlink: 16 bytes leftover after parsing attributes in process `syz.1.959'. [ 550.284218][ T9989] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 550.468914][ T9985] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 550.756477][ T9986] bridge0: port 1(team0) entered blocking state [ 551.076404][ T9986] bridge0: port 1(team0) entered disabled state [ 551.117210][ T9986] team0: entered allmulticast mode [ 552.736261][ T7284] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 552.886689][ T7284] usb 3-1: Using ep0 maxpacket: 32 [ 552.904639][ T7284] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 553.103033][ T7284] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59381, setting to 1024 [ 553.332021][ T7284] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 553.367557][ T7284] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 553.416914][ T7284] usb 3-1: config 0 descriptor?? [ 553.422414][T10000] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 553.679901][T10000] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 553.691037][T10000] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 553.943270][T10023] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 553.952857][T10023] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 554.286288][ T5987] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 554.486334][ T5987] usb 2-1: Using ep0 maxpacket: 32 [ 554.497681][ T5987] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 554.542804][ T5987] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59381, setting to 1024 [ 554.599105][ T5987] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 554.804757][ T5987] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 556.062761][ T7284] usbhid 3-1:0.0: can't add hid device: -71 [ 556.069023][ T7284] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 556.079211][ T7284] usb 3-1: USB disconnect, device number 31 [ 556.450734][ T5987] usb 2-1: config 0 descriptor?? [ 556.588699][T10031] team0: left allmulticast mode [ 556.594510][T10031] bridge0: port 1(team0) entered disabled state [ 556.627379][T10032] netlink: 'syz.2.970': attribute type 10 has an invalid length. [ 556.635227][T10032] netlink: 2 bytes leftover after parsing attributes in process `syz.2.970'. [ 556.717514][ T5987] usb 2-1: can't set config #0, error -71 [ 556.729266][ T5987] usb 2-1: USB disconnect, device number 29 [ 556.871975][T10030] netlink: 16 bytes leftover after parsing attributes in process `syz.2.970'. [ 556.905352][T10031] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 556.923096][T10032] bridge0: port 1(team0) entered blocking state [ 557.215620][T10032] bridge0: port 1(team0) entered disabled state [ 557.296594][T10032] team0: entered allmulticast mode [ 557.356237][T10035] team0: left allmulticast mode [ 557.366512][T10035] bridge0: port 1(team0) entered disabled state [ 557.530181][T10035] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 558.106676][ T6275] usb 1-1: new full-speed USB device number 31 using dummy_hcd [ 558.340442][ T6275] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 558.386481][ T6275] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.406677][ T6275] usb 1-1: Product: syz [ 558.410846][ T6275] usb 1-1: Manufacturer: syz [ 558.415422][ T6275] usb 1-1: SerialNumber: syz [ 558.433682][ T6275] usb 1-1: config 0 descriptor?? [ 558.594536][T10051] snd_dummy snd_dummy.0: control 0:0:4:syz0:0 is already present [ 558.790083][ T6275] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 559.949303][ T6275] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 560.217569][ T30] audit: type=1400 audit(1769185446.080:1436): avc: denied { create } for pid=10047 comm="syz.3.973" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 561.022452][ T30] audit: type=1400 audit(1769185446.900:1437): avc: denied { bind } for pid=10047 comm="syz.3.973" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 561.090008][ T30] audit: type=1400 audit(1769185446.910:1438): avc: denied { accept } for pid=10047 comm="syz.3.973" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 561.149446][ T30] audit: type=1400 audit(1769185446.910:1439): avc: denied { read } for pid=10047 comm="syz.3.973" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 561.276669][T10072] input: syz0 as /devices/virtual/input/input53 [ 561.589841][ T7611] usb 1-1: USB disconnect, device number 31 [ 561.857985][T10077] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 562.847471][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.853846][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.993206][ T30] audit: type=1400 audit(1769185448.890:1440): avc: denied { create } for pid=10084 comm="syz.1.981" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 563.075177][T10078] team0: left allmulticast mode [ 563.080225][T10078] bridge0: port 1(team0) entered disabled state [ 563.146793][T10082] netlink: 'syz.2.979': attribute type 10 has an invalid length. [ 563.165073][T10082] netlink: 2 bytes leftover after parsing attributes in process `syz.2.979'. [ 563.172122][T10078] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 563.334258][T10082] bridge0: port 1(team0) entered blocking state [ 563.352403][T10082] bridge0: port 1(team0) entered disabled state [ 563.377788][T10082] team0: entered allmulticast mode [ 563.432879][T10078] netlink: 16 bytes leftover after parsing attributes in process `syz.2.979'. [ 564.365911][T10101] netlink: 'syz.1.986': attribute type 10 has an invalid length. [ 564.373868][T10101] netlink: 2 bytes leftover after parsing attributes in process `syz.1.986'. [ 564.383003][T10101] bridge0: port 1(team0) entered blocking state [ 564.389330][T10101] bridge0: port 1(team0) entered disabled state [ 564.395710][T10101] team0: entered allmulticast mode [ 564.592936][T10109] input: syz0 as /devices/virtual/input/input54 [ 565.896603][ T30] audit: type=1400 audit(1769185451.710:1441): avc: denied { read write } for pid=5813 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 565.966341][ T30] audit: type=1400 audit(1769185451.710:1442): avc: denied { open } for pid=5813 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 566.048740][ T30] audit: type=1400 audit(1769185451.710:1443): avc: denied { ioctl } for pid=5813 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 566.879274][ T30] audit: type=1400 audit(1769185451.900:1444): avc: denied { prog_load } for pid=10120 comm="syz.0.990" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 566.922263][ T30] audit: type=1400 audit(1769185451.900:1445): avc: denied { bpf } for pid=10120 comm="syz.0.990" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 567.046326][ T30] audit: type=1400 audit(1769185451.990:1446): avc: denied { execmem } for pid=10120 comm="syz.0.990" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 567.086237][ T30] audit: type=1400 audit(1769185452.160:1447): avc: denied { read } for pid=10120 comm="syz.0.990" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 567.158794][ T30] audit: type=1400 audit(1769185452.160:1448): avc: denied { open } for pid=10120 comm="syz.0.990" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 567.206451][ T30] audit: type=1400 audit(1769185452.420:1449): avc: denied { append } for pid=10120 comm="syz.0.990" name="001" dev="devtmpfs" ino=739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 567.280451][ T30] audit: type=1400 audit(1769185452.670:1450): avc: denied { create } for pid=10104 comm="syz.2.987" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 567.840814][T10133] loop6: detected capacity change from 0 to 524287487 [ 567.850050][T10133] buffer_io_error: 6 callbacks suppressed [ 567.850086][T10133] Buffer I/O error on dev loop6, logical block 0, async page read [ 567.917741][T10133] Buffer I/O error on dev loop6, logical block 0, async page read [ 568.486757][T10133] Buffer I/O error on dev loop6, logical block 0, async page read [ 568.494606][T10133] Buffer I/O error on dev loop6, logical block 0, async page read [ 568.546301][T10133] Buffer I/O error on dev loop6, logical block 0, async page read [ 568.577622][T10133] Buffer I/O error on dev loop6, logical block 0, async page read [ 568.746253][T10133] Buffer I/O error on dev loop6, logical block 0, async page read [ 569.007010][T10133] Buffer I/O error on dev loop6, logical block 0, async page read [ 569.058593][T10133] ldm_validate_partition_table(): Disk read failed. [ 569.106270][T10133] Buffer I/O error on dev loop6, logical block 0, async page read [ 569.114160][T10133] Buffer I/O error on dev loop6, logical block 0, async page read [ 569.148615][T10133] Dev loop6: unable to read RDB block 0 [ 569.228386][T10133] loop6: unable to read partition table [ 569.234229][T10133] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 569.301363][ T5184] ldm_validate_partition_table(): Disk read failed. [ 569.322378][ T5184] Dev loop6: unable to read RDB block 0 [ 569.342885][ T5184] loop6: unable to read partition table [ 569.826257][ T5867] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 570.116290][ T5867] usb 1-1: Using ep0 maxpacket: 8 [ 570.131595][ T5867] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 570.159141][ T5867] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 570.187595][ T5867] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 570.398410][ T5867] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 570.434079][ T5867] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 570.567163][ T5867] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 570.630771][ T5867] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 570.766203][ T5867] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 570.901722][T10153] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 571.208338][T10152] netlink: 'syz.4.997': attribute type 10 has an invalid length. [ 571.216061][T10152] netlink: 2 bytes leftover after parsing attributes in process `syz.4.997'. [ 571.224995][T10152] bridge0: port 1(team0) entered blocking state [ 571.231306][T10152] bridge0: port 1(team0) entered disabled state [ 571.237696][T10152] team0: entered allmulticast mode [ 571.249495][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 571.249509][ T30] audit: type=1400 audit(1769185457.150:1476): avc: denied { create } for pid=10151 comm="syz.4.997" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 571.276158][T10152] netlink: 16 bytes leftover after parsing attributes in process `syz.4.997'. [ 571.410870][ T5867] usbtmc 1-1:16.0: probe with driver usbtmc failed with error -22 [ 571.448647][ T30] audit: type=1400 audit(1769185457.170:1477): avc: denied { write } for pid=10151 comm="syz.4.997" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 572.230108][ T30] audit: type=1400 audit(1769185457.950:1478): avc: denied { read } for pid=10157 comm="syz.1.995" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 572.311521][ T30] audit: type=1400 audit(1769185457.950:1479): avc: denied { open } for pid=10157 comm="syz.1.995" path="/dev/uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 572.386251][ T30] audit: type=1400 audit(1769185457.950:1480): avc: denied { ioctl } for pid=10157 comm="syz.1.995" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 573.146537][ T5927] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 573.306315][ T5927] usb 2-1: Using ep0 maxpacket: 8 [ 573.316837][ T5927] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 573.342023][ T5927] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 573.365430][ T5927] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 573.427172][ T5927] usb 2-1: Product: syz [ 573.444700][ T5927] usb 2-1: Manufacturer: syz [ 573.469804][ T5927] usb 2-1: SerialNumber: syz [ 573.490771][ T5927] usb 2-1: config 0 descriptor?? [ 573.515780][ T5927] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 573.550392][ T5927] usb 2-1: setting power ON [ 573.566737][ T5927] dvb-usb: bulk message failed: -22 (2/0) [ 573.606444][ T5927] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 573.642822][ T5927] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 573.674038][ T5927] usb 2-1: media controller created [ 573.714080][ T5927] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 573.731966][ T30] audit: type=1400 audit(1769185459.620:1481): avc: denied { append } for pid=10170 comm="syz.1.1002" name="i2c-1" dev="devtmpfs" ino=3243 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 573.786370][ T5927] usb 2-1: selecting invalid altsetting 6 [ 573.803058][ T5927] usb 2-1: digital interface selection failed (-22) [ 573.967722][ T5927] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 573.973567][T10173] dvb-usb: bulk message failed: -22 (3/0) [ 573.986224][T10173] dvb-usb: bulk message failed: -22 (4/0) [ 573.991968][T10173] cxusb: i2c read failed [ 574.007029][ T5927] usb 2-1: setting power OFF [ 574.011853][ T5927] dvb-usb: bulk message failed: -22 (2/0) [ 574.094252][ T5927] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 574.138317][ T5927] (NULL device *): no alternate interface [ 574.295332][ T5987] usb 1-1: USB disconnect, device number 32 [ 574.619050][T10192] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1003'. [ 574.779513][T10191] input: syz0 as /devices/virtual/input/input56 [ 574.834036][ T30] audit: type=1400 audit(1769185460.730:1482): avc: denied { read } for pid=5169 comm="acpid" name="event4" dev="devtmpfs" ino=3247 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 575.120149][ T30] audit: type=1400 audit(1769185460.730:1483): avc: denied { open } for pid=5169 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3247 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 575.286310][ T30] audit: type=1400 audit(1769185460.730:1484): avc: denied { ioctl } for pid=5169 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3247 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 575.356294][ T30] audit: type=1400 audit(1769185460.900:1485): avc: denied { execute } for pid=10187 comm="syz.0.1005" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=20731 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 576.196511][ T5927] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 577.035553][ T5927] usb 2-1: USB disconnect, device number 30 [ 577.342983][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 577.342995][ T30] audit: type=1400 audit(1769185463.240:1487): avc: denied { read write } for pid=10204 comm="syz.0.1009" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 577.395519][ T30] audit: type=1400 audit(1769185463.280:1488): avc: denied { open } for pid=10204 comm="syz.0.1009" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 577.674690][ T30] audit: type=1400 audit(1769185463.280:1489): avc: denied { mount } for pid=10204 comm="syz.0.1009" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 577.735302][ T30] audit: type=1400 audit(1769185463.600:1490): avc: denied { unmount } for pid=10204 comm="syz.0.1009" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 577.824238][T10216] team0: left allmulticast mode [ 577.829355][T10216] bridge0: port 1(team0) entered disabled state [ 577.872279][T10217] netlink: 'syz.2.1011': attribute type 10 has an invalid length. [ 577.874837][T10216] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 577.880303][T10217] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1011'. [ 577.956196][ T5927] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 578.012132][T10217] bridge0: port 1(team0) entered blocking state [ 578.046470][T10217] bridge0: port 1(team0) entered disabled state [ 578.046672][T10216] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1011'. [ 578.052974][T10217] team0: entered allmulticast mode [ 578.216193][ T5927] usb 1-1: Using ep0 maxpacket: 8 [ 578.305619][ T5927] usb 1-1: config index 0 descriptor too short (expected 30, got 18) [ 578.319748][ T5927] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 578.328995][ T5927] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.436480][ T5927] usb 1-1: Product: syz [ 578.440852][ T5927] usb 1-1: Manufacturer: syz [ 578.529147][ T5927] usb 1-1: SerialNumber: syz [ 578.573107][T10226] loop6: detected capacity change from 0 to 524287487 [ 578.584298][ T5927] usb 1-1: config 0 descriptor?? [ 578.590887][T10226] buffer_io_error: 24 callbacks suppressed [ 578.590917][T10226] Buffer I/O error on dev loop6, logical block 0, async page read [ 578.606963][ T5927] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 578.615096][ T5927] usb 1-1: setting power ON [ 578.619800][ T5927] dvb-usb: bulk message failed: -22 (2/0) [ 578.629803][T10226] Buffer I/O error on dev loop6, logical block 0, async page read [ 578.639690][ T5927] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 578.678244][T10226] Buffer I/O error on dev loop6, logical block 0, async page read [ 578.696245][T10226] Buffer I/O error on dev loop6, logical block 0, async page read [ 578.719174][T10226] Buffer I/O error on dev loop6, logical block 0, async page read [ 578.727166][T10226] Buffer I/O error on dev loop6, logical block 0, async page read [ 578.807771][T10226] Buffer I/O error on dev loop6, logical block 0, async page read [ 578.825907][ T5927] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 578.837435][T10226] Buffer I/O error on dev loop6, logical block 0, async page read [ 578.847894][T10226] ldm_validate_partition_table(): Disk read failed. [ 578.866560][ T5927] usb 1-1: media controller created [ 578.897407][T10226] Buffer I/O error on dev loop6, logical block 0, async page read [ 578.905304][T10226] Buffer I/O error on dev loop6, logical block 0, async page read [ 578.916450][T10226] Dev loop6: unable to read RDB block 0 [ 578.922574][T10226] loop6: unable to read partition table [ 578.928626][T10226] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 579.117252][T10213] dvb-usb: bulk message failed: -22 (3/0) [ 579.123117][T10213] dvb-usb: bulk message failed: -22 (4/0) [ 579.129061][T10213] cxusb: i2c read failed [ 579.343124][ T5184] ldm_validate_partition_table(): Disk read failed. [ 579.354398][ T5184] Dev loop6: unable to read RDB block 0 [ 579.375572][ T5184] loop6: unable to read partition table [ 579.387236][ T5927] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 579.484868][ T5927] usb 1-1: selecting invalid altsetting 6 [ 579.511900][ T5927] usb 1-1: digital interface selection failed (-22) [ 579.530174][ T5927] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 579.555775][ T5927] usb 1-1: setting power OFF [ 579.568763][ T5927] dvb-usb: bulk message failed: -22 (2/0) [ 579.582964][ T5927] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 579.608095][ T5927] (NULL device *): no alternate interface [ 580.573065][ T5927] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 580.728408][ T30] audit: type=1400 audit(1769185466.630:1491): avc: denied { create } for pid=10251 comm="syz.0.1019" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 580.968465][T10254] netlink: 'syz.3.1018': attribute type 10 has an invalid length. [ 580.977406][T10254] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1018'. [ 581.112969][ T30] audit: type=1400 audit(1769185466.650:1492): avc: denied { create } for pid=10250 comm="syz.3.1018" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 581.222780][ T30] audit: type=1400 audit(1769185466.650:1493): avc: denied { create } for pid=10250 comm="syz.3.1018" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 581.273746][ T30] audit: type=1400 audit(1769185466.650:1494): avc: denied { read } for pid=10250 comm="syz.3.1018" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 581.278910][ T5927] usb 1-1: USB disconnect, device number 33 [ 581.327239][ T30] audit: type=1400 audit(1769185466.650:1495): avc: denied { open } for pid=10250 comm="syz.3.1018" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 581.874886][ T30] audit: type=1400 audit(1769185466.730:1496): avc: denied { map_create } for pid=10251 comm="syz.0.1019" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 583.186461][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 583.186479][ T30] audit: type=1400 audit(1769185469.070:1517): avc: denied { prog_run } for pid=10266 comm="syz.2.1022" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 583.530489][ T30] audit: type=1400 audit(1769185469.140:1518): avc: denied { append } for pid=10273 comm="syz.1.1024" name="001" dev="devtmpfs" ino=739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 584.036041][ T30] audit: type=1400 audit(1769185469.930:1519): avc: denied { create } for pid=10280 comm="syz.0.1025" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 584.245404][T10285] team0: left allmulticast mode [ 584.252381][T10285] bridge0: port 1(team0) entered disabled state [ 584.439257][ T30] audit: type=1400 audit(1769185470.340:1520): avc: denied { write } for pid=10284 comm="syz.1.1027" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 584.507973][ T30] audit: type=1400 audit(1769185470.360:1521): avc: denied { read } for pid=10284 comm="syz.1.1027" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 584.595906][T10285] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 584.683025][ T5822] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 584.706220][ T5925] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 584.866199][ T5822] usb 1-1: Using ep0 maxpacket: 8 [ 584.882341][ T5822] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 584.886244][ T5925] usb 2-1: device descriptor read/64, error -71 [ 584.922006][ T5822] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 584.968192][ T5822] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 585.006630][ T5822] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 585.088976][ T5822] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 585.238365][ T5925] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 585.269021][ T5822] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 585.366893][ T5822] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 585.436221][ T5925] usb 2-1: device descriptor read/64, error -71 [ 585.556353][ T5925] usb usb2-port1: attempt power cycle [ 585.828811][ T5822] usb 1-1: usb_control_msg returned -32 [ 585.847486][ T5822] usbtmc 1-1:16.0: can't read capabilities [ 586.086264][ T5925] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 586.106838][ T5925] usb 2-1: device descriptor read/8, error -71 [ 586.166800][ T30] audit: type=1400 audit(1769185472.020:1522): avc: denied { read } for pid=10295 comm="syz.2.1029" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 586.260658][ T30] audit: type=1400 audit(1769185472.020:1523): avc: denied { open } for pid=10295 comm="syz.2.1029" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 586.455207][ T30] audit: type=1400 audit(1769185472.210:1524): avc: denied { read write } for pid=10295 comm="syz.2.1029" name="radio0" dev="devtmpfs" ino=957 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 586.486862][ T5925] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 586.644662][ T5925] usb 2-1: device descriptor read/8, error -71 [ 586.676163][ T30] audit: type=1400 audit(1769185472.210:1525): avc: denied { open } for pid=10295 comm="syz.2.1029" path="/dev/radio0" dev="devtmpfs" ino=957 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 586.707706][T10307] loop6: detected capacity change from 0 to 524287487 [ 586.715491][T10307] buffer_io_error: 23 callbacks suppressed [ 586.715512][T10307] Buffer I/O error on dev loop6, logical block 0, async page read [ 586.729366][T10307] Buffer I/O error on dev loop6, logical block 0, async page read [ 586.737616][T10307] Buffer I/O error on dev loop6, logical block 0, async page read [ 586.745505][T10307] Buffer I/O error on dev loop6, logical block 0, async page read [ 586.753416][T10307] Buffer I/O error on dev loop6, logical block 0, async page read [ 586.761356][T10307] Buffer I/O error on dev loop6, logical block 0, async page read [ 586.776417][ T5925] usb usb2-port1: unable to enumerate USB device [ 586.877745][ T30] audit: type=1400 audit(1769185472.210:1526): avc: denied { create } for pid=10295 comm="syz.2.1029" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 586.916239][ T5822] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 586.939443][T10307] Buffer I/O error on dev loop6, logical block 0, async page read [ 586.955073][T10307] Buffer I/O error on dev loop6, logical block 0, async page read [ 586.966201][T10307] ldm_validate_partition_table(): Disk read failed. [ 586.972843][T10307] Buffer I/O error on dev loop6, logical block 0, async page read [ 587.005344][T10307] Buffer I/O error on dev loop6, logical block 0, async page read [ 587.014946][T10307] Dev loop6: unable to read RDB block 0 [ 587.156182][ T5822] usb 4-1: Using ep0 maxpacket: 8 [ 587.163681][ T5822] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 587.172610][ T5822] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 587.200000][ T5822] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 587.222302][T10307] loop6: unable to read partition table [ 587.279924][ T5822] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 587.375363][T10307] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 587.392246][ T5822] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 587.567165][ T5958] usb 1-1: USB disconnect, device number 34 [ 588.176311][ T5822] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 588.206362][ T5822] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 588.279648][T10315] overlayfs: failed to clone upperpath [ 588.286205][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 588.286220][ T30] audit: type=1400 audit(1769185474.180:1531): avc: denied { mounton } for pid=10314 comm="syz.0.1033" path="/189/bus" dev="tmpfs" ino=1155 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 588.725051][ T5822] usb 4-1: GET_CAPABILITIES returned 0 [ 588.750938][ T5822] usbtmc 4-1:16.0: can't read capabilities [ 588.929754][ T30] audit: type=1400 audit(1769185474.830:1532): avc: denied { write } for pid=10301 comm="syz.3.1030" name="usbtmc0" dev="devtmpfs" ino=3264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 589.026310][ T30] audit: type=1400 audit(1769185474.900:1533): avc: denied { create } for pid=10320 comm="syz.4.1034" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 589.099116][ T30] audit: type=1400 audit(1769185475.000:1534): avc: denied { create } for pid=10320 comm="syz.4.1034" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 589.131943][ T30] audit: type=1400 audit(1769185475.020:1535): avc: denied { write } for pid=10320 comm="syz.4.1034" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 589.133020][T10324] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 589.478119][T10306] usbtmc 4-1:16.0: usb_control_msg returned -32 [ 590.329696][T10334] netlink: 'syz.2.1038': attribute type 10 has an invalid length. [ 590.338045][T10334] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1038'. [ 590.801040][ T5867] usb 4-1: USB disconnect, device number 25 [ 591.425617][T10342] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 591.523085][T10342] netlink: 'syz.3.1040': attribute type 10 has an invalid length. [ 591.531077][T10342] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1040'. [ 591.540260][T10342] bridge0: port 1(team0) entered blocking state [ 591.546576][T10342] bridge0: port 1(team0) entered disabled state [ 591.552886][T10342] team0: entered allmulticast mode [ 591.590184][T10342] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1040'. [ 591.601989][ T30] audit: type=1400 audit(1769185477.490:1536): avc: denied { write } for pid=10341 comm="syz.3.1040" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 591.649226][ T30] audit: type=1400 audit(1769185477.530:1537): avc: denied { read write } for pid=10345 comm="syz.1.1041" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 591.739669][ T7134] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 591.757267][ T30] audit: type=1400 audit(1769185477.530:1538): avc: denied { open } for pid=10345 comm="syz.1.1041" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 591.786346][ T30] audit: type=1400 audit(1769185477.530:1539): avc: denied { mounton } for pid=10345 comm="syz.1.1041" path="/227/file0" dev="tmpfs" ino=1402 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 591.809847][ T30] audit: type=1400 audit(1769185477.540:1540): avc: denied { mount } for pid=10345 comm="syz.1.1041" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 591.946547][ T7134] usb 1-1: Using ep0 maxpacket: 32 [ 591.958326][ T7134] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 591.976289][ T5958] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 592.016663][ T7134] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 592.039585][ T7134] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 592.088662][ T7134] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 592.136336][ T5925] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 592.146229][ T5958] usb 2-1: Using ep0 maxpacket: 8 [ 592.170513][ T7134] usb 1-1: config 0 descriptor?? [ 592.226538][ T5958] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 592.398912][ T5925] usb 3-1: Using ep0 maxpacket: 8 [ 592.462416][T10348] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 592.527473][ T5958] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 592.642864][T10364] netlink: 'syz.4.1045': attribute type 10 has an invalid length. [ 592.651740][T10364] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1045'. [ 592.730697][T10365] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1045'. [ 592.752429][T10348] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 592.767133][ T5958] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 592.867169][ T5958] usb 2-1: Product: syz [ 592.871974][ T5958] usb 2-1: Manufacturer: syz [ 592.887089][ T5958] usb 2-1: SerialNumber: syz [ 592.895154][ T5958] usb 2-1: config 0 descriptor?? [ 592.902813][ T5925] usb 3-1: config index 0 descriptor too short (expected 30, got 18) [ 593.212933][T10370] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 593.223607][T10370] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 593.348369][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 593.348380][ T30] audit: type=1400 audit(1769185478.890:1542): avc: denied { bind } for pid=10347 comm="syz.0.1042" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 593.402601][ T5925] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 593.417524][ T5958] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 593.425627][ T5925] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 593.434987][ T5958] usb 2-1: setting power ON [ 593.436322][T10362] team0: left allmulticast mode [ 593.453275][ T30] audit: type=1400 audit(1769185478.890:1543): avc: denied { listen } for pid=10347 comm="syz.0.1042" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 593.469904][T10362] bridge0: port 1(team0) entered disabled state [ 593.473822][ T5925] usb 3-1: Product: syz [ 593.483875][ T5958] dvb-usb: bulk message failed: -22 (2/0) [ 593.491073][ T5925] usb 3-1: Manufacturer: syz [ 593.497707][ T5958] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 593.516228][ T5925] usb 3-1: SerialNumber: syz [ 593.559024][ T5925] usb 3-1: config 0 descriptor?? [ 593.564510][ T5958] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 593.575411][ T30] audit: type=1400 audit(1769185478.890:1544): avc: denied { connect } for pid=10347 comm="syz.0.1042" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 593.607623][T10362] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 593.643579][ T5925] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 593.660180][ T30] audit: type=1400 audit(1769185478.960:1545): avc: denied { accept } for pid=10347 comm="syz.0.1042" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 593.663374][ T5958] usb 2-1: media controller created [ 593.690205][T10360] team0: left allmulticast mode [ 593.698328][ T5925] usb 3-1: setting power ON [ 593.715433][ T5925] dvb-usb: bulk message failed: -22 (2/0) [ 593.728935][T10360] bridge0: port 1(team0) entered disabled state [ 593.772189][ T30] audit: type=1400 audit(1769185479.030:1546): avc: denied { read } for pid=10347 comm="syz.0.1042" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 593.774533][ T5925] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 593.826501][ T5958] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 593.837944][T10360] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 593.902913][T10350] dvb-usb: bulk message failed: -22 (3/0) [ 593.935907][T10350] dvb-usb: bulk message failed: -22 (4/0) [ 593.941960][ T5925] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 593.951158][ T5925] usb 3-1: media controller created [ 593.961596][T10364] bridge0: port 1(team0) entered blocking state [ 593.967985][ T5925] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 593.977177][ T30] audit: type=1400 audit(1769185479.040:1547): avc: denied { ioctl } for pid=10347 comm="syz.0.1042" path="socket:[20961]" dev="sockfs" ino=20961 ioctlcmd=0x8b14 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 594.009965][ T5925] usb 3-1: selecting invalid altsetting 6 [ 594.020466][ T5925] usb 3-1: digital interface selection failed (-22) [ 594.028548][ T5925] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 594.108473][T10364] bridge0: port 1(team0) entered disabled state [ 594.114969][T10350] cxusb: i2c read failed [ 594.124019][T10364] team0: entered allmulticast mode [ 594.153147][ T5925] usb 3-1: setting power OFF [ 594.164684][ T5925] dvb-usb: bulk message failed: -22 (2/0) [ 594.182698][ T5925] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 594.210174][ T30] audit: type=1400 audit(1769185479.640:1548): avc: denied { append } for pid=10345 comm="syz.1.1041" name="i2c-1" dev="devtmpfs" ino=3270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 594.263707][ T5958] usb 2-1: selecting invalid altsetting 6 [ 594.276014][ T5958] usb 2-1: digital interface selection failed (-22) [ 594.283580][ T5925] (NULL device *): no alternate interface [ 594.402661][ T5958] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 594.432376][ T5925] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 594.446840][ T5958] usb 2-1: setting power OFF [ 594.452028][ T5958] dvb-usb: bulk message failed: -22 (2/0) [ 594.458164][ T5958] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 594.479523][ T5958] (NULL device *): no alternate interface [ 595.083031][ T5927] usb 3-1: USB disconnect, device number 32 [ 595.226186][ T5925] usb 1-1: USB disconnect, device number 35 [ 595.740992][T10379] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 595.802656][ T5958] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 595.848480][ T5958] usb 2-1: USB disconnect, device number 35 [ 595.857035][ T5927] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 595.960464][T10378] netlink: 'syz.3.1048': attribute type 10 has an invalid length. [ 595.968397][T10378] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1048'. [ 595.977473][T10378] bridge0: port 1(team0) entered blocking state [ 595.983748][T10378] bridge0: port 1(team0) entered disabled state [ 595.990335][T10378] team0: entered allmulticast mode [ 596.001651][T10378] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1048'. [ 596.099067][ T5927] usb 3-1: Using ep0 maxpacket: 8 [ 596.113621][ T5927] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 596.134264][ T5927] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 596.169591][ T5927] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 596.203493][ T5927] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 596.539284][ T5927] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 596.586322][ T5927] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 596.613286][ T5927] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 596.935950][ T5927] usb 3-1: GET_CAPABILITIES returned 0 [ 596.950359][ T5927] usbtmc 3-1:16.0: can't read capabilities [ 597.196387][ T30] audit: type=1400 audit(1769185482.930:1549): avc: denied { create } for pid=10392 comm="syz.3.1052" anonclass=[secretmem] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 597.514038][ T30] audit: type=1400 audit(1769185482.930:1550): avc: denied { map } for pid=10392 comm="syz.3.1052" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=21000 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 597.544822][ T30] audit: type=1400 audit(1769185482.940:1551): avc: denied { read write } for pid=10392 comm="syz.3.1052" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=21000 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 598.684144][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 598.684157][ T30] audit: type=1400 audit(1769185484.580:1558): avc: denied { ioctl } for pid=10403 comm="syz.0.1055" path="/dev/loop6" dev="devtmpfs" ino=653 ioctlcmd=0x4c0a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 598.896324][T10408] loop6: detected capacity change from 0 to 524287487 [ 599.106460][ T9810] buffer_io_error: 7 callbacks suppressed [ 599.106472][ T9810] Buffer I/O error on dev loop6, logical block 0, async page read [ 599.144867][ T30] audit: type=1400 audit(1769185484.980:1559): avc: denied { read write } for pid=5810 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 599.231153][ T9810] Buffer I/O error on dev loop6, logical block 0, async page read [ 599.245130][ T30] audit: type=1400 audit(1769185484.980:1560): avc: denied { open } for pid=5810 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 599.392927][ T30] audit: type=1400 audit(1769185485.120:1561): avc: denied { map_create } for pid=10420 comm="syz.1.1059" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 599.463178][ T9810] Buffer I/O error on dev loop6, logical block 0, async page read [ 599.478598][ T9810] Buffer I/O error on dev loop6, logical block 0, async page read [ 599.492212][ T9810] Buffer I/O error on dev loop6, logical block 0, async page read [ 599.500603][ T9810] Buffer I/O error on dev loop6, logical block 0, async page read [ 599.520176][ T9810] Buffer I/O error on dev loop6, logical block 0, async page read [ 599.528898][ T9810] Buffer I/O error on dev loop6, logical block 0, async page read [ 599.594810][ T30] audit: type=1400 audit(1769185485.120:1562): avc: denied { map_read map_write } for pid=10420 comm="syz.1.1059" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 599.688879][ T5925] usb 3-1: USB disconnect, device number 33 [ 599.832646][ T9810] ldm_validate_partition_table(): Disk read failed. [ 599.877676][ T9810] Buffer I/O error on dev loop6, logical block 0, async page read [ 599.886434][ T30] audit: type=1400 audit(1769185485.140:1563): avc: denied { execmem } for pid=10420 comm="syz.1.1059" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 599.926520][ T9810] Buffer I/O error on dev loop6, logical block 0, async page read [ 600.006250][ T30] audit: type=1400 audit(1769185485.230:1564): avc: denied { read } for pid=10418 comm="syz.4.1058" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 600.006328][ T9810] Dev loop6: unable to read RDB block 0 [ 600.126375][ T30] audit: type=1400 audit(1769185485.230:1565): avc: denied { open } for pid=10418 comm="syz.4.1058" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 600.249452][ T30] audit: type=1400 audit(1769185485.720:1566): avc: denied { prog_load } for pid=10414 comm="syz.3.1057" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 600.249648][ T9810] loop6: unable to read partition table [ 600.398349][ T30] audit: type=1400 audit(1769185485.720:1567): avc: denied { bpf } for pid=10414 comm="syz.3.1057" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 600.456762][ T5927] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 600.487594][T10408] ldm_validate_partition_table(): Disk read failed. [ 600.520396][T10408] Dev loop6: unable to read RDB block 0 [ 600.585650][T10408] loop6: unable to read partition table [ 600.601866][T10408] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 600.656358][ T5927] usb 3-1: Using ep0 maxpacket: 32 [ 600.670877][ T5927] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 600.692973][ T5927] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 600.783123][ T5927] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 600.823826][ T5927] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 600.930137][ T5927] usb 3-1: config 0 descriptor?? [ 601.139831][T10428] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 601.156743][T10428] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 601.398457][T10433] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 601.408362][T10433] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 603.105405][ T5958] usb 3-1: USB disconnect, device number 34 [ 603.841348][T10453] team0: left allmulticast mode [ 604.190906][T10453] bridge0: port 1(team0) entered disabled state [ 604.390896][T10453] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 604.707139][ T30] kauditd_printk_skb: 33 callbacks suppressed [ 604.707150][ T30] audit: type=1400 audit(1769185490.610:1601): avc: denied { read write } for pid=10458 comm="syz.4.1067" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 604.796685][ T30] audit: type=1400 audit(1769185490.640:1602): avc: denied { open } for pid=10458 comm="syz.4.1067" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 604.906177][ T30] audit: type=1400 audit(1769185490.660:1603): avc: denied { mounton } for pid=10458 comm="syz.4.1067" path="/213/file0" dev="tmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 605.001864][ T30] audit: type=1400 audit(1769185490.670:1604): avc: denied { mount } for pid=10458 comm="syz.4.1067" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 605.126270][ T5867] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 605.138420][T10466] fuse: Bad value for 'fd' [ 605.196697][ T30] audit: type=1400 audit(1769185490.730:1605): avc: denied { unmount } for pid=10458 comm="syz.4.1067" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 605.317462][ T5867] usb 5-1: device descriptor read/64, error -71 [ 605.406261][ T7134] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 605.566212][ T7134] usb 1-1: Using ep0 maxpacket: 8 [ 605.576394][ T5867] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 605.596021][ T7134] usb 1-1: config index 0 descriptor too short (expected 30, got 18) [ 605.697500][ T7134] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 605.719094][ T7134] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 605.768744][ T5867] usb 5-1: device descriptor read/64, error -71 [ 606.242408][ T30] audit: type=1400 audit(1769185491.740:1606): avc: denied { create } for pid=10470 comm="syz.2.1070" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 606.288340][ T7134] usb 1-1: Product: syz [ 606.300226][ T5867] usb usb5-port1: attempt power cycle [ 606.305786][ T7134] usb 1-1: Manufacturer: syz [ 606.311504][ T7134] usb 1-1: SerialNumber: syz [ 606.316998][ T30] audit: type=1400 audit(1769185491.740:1607): avc: denied { setopt } for pid=10470 comm="syz.2.1070" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 606.318007][T10469] team0: left allmulticast mode [ 606.339428][ T7134] usb 1-1: config 0 descriptor?? [ 606.355346][ T7134] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 606.371745][ T7134] usb 1-1: setting power ON [ 606.396265][ T7134] dvb-usb: bulk message failed: -22 (2/0) [ 606.417729][ T30] audit: type=1400 audit(1769185491.740:1608): avc: denied { ioctl } for pid=10470 comm="syz.2.1070" path="socket:[20312]" dev="sockfs" ino=20312 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 606.457567][ T7134] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 606.469417][T10469] bridge0: port 1(team0) entered disabled state [ 607.080285][ T7134] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 607.098142][T10466] dvb-usb: bulk message failed: -22 (3/0) [ 607.104121][T10466] dvb-usb: bulk message failed: -22 (4/0) [ 607.110016][T10466] cxusb: i2c read failed [ 607.128485][ T5867] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 607.142949][ T30] audit: type=1400 audit(1769185491.740:1609): avc: denied { write } for pid=10470 comm="syz.2.1070" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 607.165543][T10469] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 607.183221][ T7134] usb 1-1: media controller created [ 607.191541][ T5867] usb 5-1: device descriptor read/8, error -71 [ 607.972981][ T7134] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 607.982066][ T30] audit: type=1400 audit(1769185492.460:1610): avc: denied { read } for pid=10474 comm="syz.1.1071" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 608.013739][ T7134] usb 1-1: selecting invalid altsetting 6 [ 608.021214][ T5867] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 608.029966][ T7134] usb 1-1: digital interface selection failed (-22) [ 608.042960][ T7134] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 608.052810][ T7134] usb 1-1: setting power OFF [ 608.061700][ T7134] dvb-usb: bulk message failed: -22 (2/0) [ 608.236225][ T5867] usb 5-1: device not accepting address 37, error -71 [ 608.246152][ T7134] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 608.306277][ T5867] usb usb5-port1: unable to enumerate USB device [ 608.329906][ T7134] (NULL device *): no alternate interface [ 608.507859][ T7134] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 609.098774][ T7134] usb 1-1: USB disconnect, device number 36 [ 609.766439][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 609.766454][ T30] audit: type=1400 audit(1769185495.660:1615): avc: denied { read } for pid=10492 comm="syz.3.1077" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 609.896208][ T7134] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 610.437544][T10493] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 610.497194][ T7134] usb 1-1: Using ep0 maxpacket: 32 [ 610.515602][ T30] audit: type=1400 audit(1769185495.700:1616): avc: denied { open } for pid=10492 comm="syz.3.1077" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 610.550411][ T7134] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 610.858729][ T7134] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 610.881970][T10503] input: syz0 as /devices/virtual/input/input58 [ 610.891703][ T30] audit: type=1400 audit(1769185495.700:1617): avc: denied { ioctl } for pid=10492 comm="syz.3.1077" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 610.930513][ T7134] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 611.016773][ T7134] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 611.083523][ T7134] usb 1-1: config 0 descriptor?? [ 611.089259][ T30] audit: type=1326 audit(1769185495.840:1618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10492 comm="syz.3.1077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5090b9acb9 code=0x7ffc0000 [ 611.148464][T10510] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 611.224499][ T30] audit: type=1326 audit(1769185495.840:1619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10492 comm="syz.3.1077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5090b9acb9 code=0x7ffc0000 [ 611.314468][ T30] audit: type=1326 audit(1769185495.840:1620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10492 comm="syz.3.1077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5090b9acb9 code=0x7ffc0000 [ 611.356435][T10489] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 611.379874][T10489] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 611.427436][ T30] audit: type=1326 audit(1769185495.840:1621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10492 comm="syz.3.1077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f5090b9acb9 code=0x7ffc0000 [ 611.591193][ T30] audit: type=1326 audit(1769185495.850:1622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10492 comm="syz.3.1077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5090b9acb9 code=0x7ffc0000 [ 611.700550][T10515] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 611.710624][T10515] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 612.060199][ T30] audit: type=1326 audit(1769185495.850:1623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10492 comm="syz.3.1077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5090b9acb9 code=0x7ffc0000 [ 612.658814][ T30] audit: type=1326 audit(1769185495.850:1624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10492 comm="syz.3.1077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5090b9acb9 code=0x7ffc0000 [ 612.984598][T10520] team0: left allmulticast mode [ 612.990593][T10520] bridge0: port 1(team0) entered disabled state [ 613.124608][ T8014] usb 1-1: USB disconnect, device number 37 [ 613.214379][T10520] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 613.274322][T10519] netlink: 'syz.2.1081': attribute type 10 has an invalid length. [ 613.282187][T10519] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1081'. [ 613.291150][T10519] bridge0: port 1(team0) entered blocking state [ 613.297468][T10519] bridge0: port 1(team0) entered disabled state [ 613.755210][T10519] team0: entered allmulticast mode [ 615.100647][ T30] kauditd_printk_skb: 38 callbacks suppressed [ 615.100666][ T30] audit: type=1400 audit(1769185500.540:1663): avc: denied { mounton } for pid=10528 comm="syz.1.1084" path="/235/bus" dev="tmpfs" ino=1452 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 615.162713][T10519] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1081'. [ 615.174674][ T30] audit: type=1400 audit(1769185500.560:1664): avc: denied { unlink } for pid=10528 comm="syz.1.1084" name="#57" dev="tmpfs" ino=1456 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 615.216155][ T30] audit: type=1400 audit(1769185500.580:1665): avc: denied { mount } for pid=10528 comm="syz.1.1084" name="/" dev="overlay" ino=1451 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 615.251397][ T30] audit: type=1400 audit(1769185501.050:1666): avc: denied { create } for pid=10518 comm="syz.2.1081" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 615.274793][ T30] audit: type=1400 audit(1769185501.060:1667): avc: denied { write } for pid=10518 comm="syz.2.1081" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 615.328139][ T30] audit: type=1400 audit(1769185501.220:1668): avc: denied { unmount } for pid=5824 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 618.066193][ T6275] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 618.226247][ T6275] usb 4-1: Using ep0 maxpacket: 32 [ 618.232272][ T6275] usb 4-1: no configurations [ 618.237368][ T6275] usb 4-1: can't read configurations, error -22 [ 618.546245][ T6275] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 618.730171][ T6275] usb 4-1: Using ep0 maxpacket: 32 [ 618.750451][ T6275] usb 4-1: no configurations [ 618.765301][ T6275] usb 4-1: can't read configurations, error -22 [ 618.806742][ T6275] usb usb4-port1: attempt power cycle [ 619.040371][T10567] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 619.237628][ T6275] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 619.258341][ T6275] usb 4-1: Using ep0 maxpacket: 32 [ 619.269059][ T6275] usb 4-1: no configurations [ 619.273867][ T6275] usb 4-1: can't read configurations, error -22 [ 619.927069][T10573] overlayfs: failed to clone upperpath [ 620.356199][ T6275] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 620.508989][ T6275] usb 4-1: Using ep0 maxpacket: 32 [ 620.514702][ T6275] usb 4-1: no configurations [ 620.526182][ T6275] usb 4-1: can't read configurations, error -22 [ 621.050850][ T6275] usb usb4-port1: unable to enumerate USB device [ 621.277957][T10583] netlink: 'syz.3.1099': attribute type 10 has an invalid length. [ 621.285967][T10583] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1099'. [ 621.295929][T10583] bridge0: port 1(team0) entered blocking state [ 621.303454][T10583] bridge0: port 1(team0) entered disabled state [ 621.310554][T10583] team0: entered allmulticast mode [ 621.415116][T10583] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1099'. [ 621.590611][ T30] audit: type=1400 audit(1769185507.490:1669): avc: denied { write } for pid=10585 comm="syz.1.1086" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 621.656208][ T30] audit: type=1400 audit(1769185507.530:1670): avc: denied { read } for pid=10585 comm="syz.1.1086" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 622.420559][ T30] audit: type=1400 audit(1769185507.530:1671): avc: denied { open } for pid=10585 comm="syz.1.1086" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 622.481035][ T30] audit: type=1400 audit(1769185507.550:1672): avc: denied { ioctl } for pid=10585 comm="syz.1.1086" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x64a2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 623.733504][ T30] audit: type=1400 audit(1769185509.630:1673): avc: denied { create } for pid=10607 comm="syz.4.1105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 623.924176][T10613] netlink: 'syz.1.1106': attribute type 10 has an invalid length. [ 623.932353][T10613] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1106'. [ 623.945953][T10613] bridge0: port 1(team0) entered blocking state [ 623.951150][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 623.952817][T10613] bridge0: port 1(team0) entered disabled state [ 623.965525][T10613] team0: entered allmulticast mode [ 623.976389][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.122986][ T30] audit: type=1400 audit(1769185509.690:1674): avc: denied { write } for pid=10607 comm="syz.4.1105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 624.413501][T10622] Failed to initialize the IGMP autojoin socket (err -2) [ 624.726336][ T30] audit: type=1400 audit(1769185509.690:1675): avc: denied { nlmsg_write } for pid=10607 comm="syz.4.1105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 625.243164][ T30] audit: type=1400 audit(1769185510.160:1676): avc: denied { create } for pid=10609 comm="syz.2.1097" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 625.686216][ T5867] usb 3-1: new full-speed USB device number 35 using dummy_hcd [ 626.349410][ T5867] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 626.390470][ T5867] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 626.416314][ T5867] usb 3-1: Product: syz [ 626.427088][ T5867] usb 3-1: Manufacturer: syz [ 626.456415][ T5867] usb 3-1: SerialNumber: syz [ 626.463599][ T5867] usb 3-1: config 0 descriptor?? [ 626.790215][ T5867] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 626.796252][T10641] Set syz0 is full, maxelem 0 reached [ 626.829042][ T30] audit: type=1400 audit(1769185512.690:1677): avc: denied { write } for pid=10639 comm="syz.4.1112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 627.026340][ T30] audit: type=1400 audit(1769185512.910:1678): avc: denied { read } for pid=10628 comm="syz.2.1109" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 627.096345][T10644] dummy0: entered allmulticast mode [ 627.189334][T10646] ======================================================= [ 627.189334][T10646] WARNING: The mand mount option has been deprecated and [ 627.189334][T10646] and is ignored by this kernel. Remove the mand [ 627.189334][T10646] option from the mount to silence this warning. [ 627.189334][T10646] ======================================================= [ 627.226075][ T30] audit: type=1400 audit(1769185512.910:1679): avc: denied { open } for pid=10628 comm="syz.2.1109" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 627.260364][ T30] audit: type=1400 audit(1769185513.090:1680): avc: denied { remount } for pid=10642 comm="syz.0.1102" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 627.401511][T10642] dummy0: left allmulticast mode [ 627.666381][ T5925] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 627.833744][ T5925] usb 2-1: Using ep0 maxpacket: 32 [ 627.960929][ T5867] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 628.062158][ T5925] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 628.073206][ T5925] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59381, setting to 1024 [ 628.084788][ T5925] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 628.099498][ T5925] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 628.114442][ T5925] usb 2-1: config 0 descriptor?? [ 628.133847][T10648] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 628.534700][T10648] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 628.676023][T10648] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 628.796307][ T5867] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 628.891993][ T5822] usb 3-1: USB disconnect, device number 35 [ 630.776267][ T5867] usb 5-1: Using ep0 maxpacket: 8 [ 630.983008][T10669] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 630.992700][T10669] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 631.295116][ T5867] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 631.311972][ T5867] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 631.370376][ T5867] pvrusb2: Hardware description: Terratec Grabster AV400 [ 631.399010][ T5867] pvrusb2: ********** [ 631.434633][ T5867] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 631.474330][ T5867] pvrusb2: Important functionality might not be entirely working. [ 631.511817][ T5867] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 631.545132][ T5867] pvrusb2: ********** [ 631.627896][ T2339] pvrusb2: Invalid write control endpoint [ 631.791245][ T2339] pvrusb2: Invalid write control endpoint [ 631.813032][ T2339] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 631.854698][ T2339] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 631.866399][ T2339] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 631.876515][ T2339] pvrusb2: Device being rendered inoperable [ 631.882470][T10652] pvrusb2: Attempted to execute control transfer when device not ok [ 631.911878][ T30] audit: type=1400 audit(1769185517.810:1681): avc: denied { read } for pid=10651 comm="syz.4.1115" dev="nsfs" ino=4026533083 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 631.981838][ T5822] usb 5-1: USB disconnect, device number 38 [ 631.993407][ T2339] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 632.026177][ T2339] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_j) [ 632.054622][ T2339] pvrusb2: Attached sub-driver cx25840 [ 632.076291][ T2339] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 632.107851][ T30] audit: type=1400 audit(1769185517.810:1682): avc: denied { open } for pid=10651 comm="syz.4.1115" path="net:[4026533083]" dev="nsfs" ino=4026533083 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 632.116159][ T2339] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 632.356677][ T5925] usbhid 2-1:0.0: can't add hid device: -71 [ 632.386239][ T5925] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 632.409569][ T5925] usb 2-1: USB disconnect, device number 36 [ 632.449398][ T30] audit: type=1400 audit(1769185517.810:1683): avc: denied { create } for pid=10651 comm="syz.4.1115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 632.585168][ T30] audit: type=1400 audit(1769185517.840:1684): avc: denied { getopt } for pid=10651 comm="syz.4.1115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 633.853194][T10685] snd_dummy snd_dummy.0: control 0:0:4:syz0:0 is already present [ 635.273375][T10695] team0: left allmulticast mode [ 635.298700][T10695] bridge0: port 1(team0) entered disabled state [ 635.702795][T10695] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 635.789574][ T30] audit: type=1400 audit(1769185521.690:1685): avc: denied { prog_load } for pid=10697 comm="syz.3.1125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 636.296274][ T5867] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 636.346317][ T30] audit: type=1400 audit(1769185521.720:1686): avc: denied { bpf } for pid=10697 comm="syz.3.1125" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 636.367512][ T30] audit: type=1400 audit(1769185521.720:1687): avc: denied { perfmon } for pid=10697 comm="syz.3.1125" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 636.446253][ T30] audit: type=1400 audit(1769185521.720:1688): avc: denied { execmem } for pid=10697 comm="syz.3.1125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 636.508231][ T5867] usb 4-1: Using ep0 maxpacket: 8 [ 636.525377][ T5867] usb 4-1: config 167 has too many interfaces: 202, using maximum allowed: 32 [ 636.558769][ T30] audit: type=1400 audit(1769185521.930:1689): avc: denied { read write } for pid=10697 comm="syz.3.1125" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 636.598195][ T5867] usb 4-1: config 167 has 1 interface, different from the descriptor's value: 202 [ 636.625823][ T5867] usb 4-1: New USB device found, idVendor=1025, idProduct=005f, bcdDevice=fe.29 [ 636.655418][ T5867] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 636.664799][ T30] audit: type=1400 audit(1769185521.930:1690): avc: denied { open } for pid=10697 comm="syz.3.1125" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 636.699411][ T5867] usb 4-1: Product: syz [ 636.703985][ T5867] usb 4-1: Manufacturer: syz [ 636.717862][ T5867] usb 4-1: SerialNumber: syz [ 636.763716][ T5867] dvb-usb: found a 'Unknown USB1.1 DVB-T device ???? please report the name to the author' in warm state. [ 636.808580][ T5867] dvb-usb: bulk message failed: -22 (3/0) [ 636.829376][ T5867] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 636.872882][ T5867] dvbdev: DVB: registering new adapter (Unknown USB1.1 DVB-T device ???? please report the name to the author) [ 636.973715][ T5867] usb 4-1: media controller created [ 637.009475][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 637.009491][ T30] audit: type=1400 audit(1769185522.910:1695): avc: denied { read } for pid=10706 comm="syz.0.1121" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 637.064971][ T5867] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 637.118726][ T5867] dvb-usb: bulk message failed: -22 (6/0) [ 637.136394][ T30] audit: type=1400 audit(1769185522.910:1696): avc: denied { open } for pid=10706 comm="syz.0.1121" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 637.172583][ T5867] dvb-usb: no frontend was attached by 'Unknown USB1.1 DVB-T device ???? please report the name to the author' [ 637.221991][ T5867] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input59 [ 637.258584][ T30] audit: type=1400 audit(1769185523.160:1697): avc: denied { read } for pid=5169 comm="acpid" name="event4" dev="devtmpfs" ino=3315 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 637.287021][ T5867] dvb-usb: schedule remote query interval to 150 msecs. [ 637.302355][ T5867] dvb-usb: bulk message failed: -22 (3/0) [ 637.325121][ T30] audit: type=1400 audit(1769185523.180:1698): avc: denied { open } for pid=5169 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3315 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 637.351245][ T5867] dvb-usb: Unknown USB1.1 DVB-T device ???? please report the name to the author successfully initialized and connected. [ 637.392088][ T30] audit: type=1400 audit(1769185523.180:1699): avc: denied { ioctl } for pid=5169 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3315 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 637.465525][ T30] audit: type=1400 audit(1769185523.290:1700): avc: denied { create } for pid=10711 comm="syz.1.1128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 637.490663][ T5867] dvb-usb: bulk message failed: -22 (1/0) [ 637.528317][ T5867] dvb-usb: error while querying for an remote control event. [ 637.911206][T10707] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 637.938956][T10707] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 638.003517][ T30] audit: type=1400 audit(1769185523.390:1701): avc: denied { write } for pid=10711 comm="syz.1.1128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 638.061893][T10707] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 638.076211][ T5867] dvb-usb: bulk message failed: -22 (1/0) [ 638.099197][ T5867] dvb-usb: error while querying for an remote control event. [ 638.108414][T10707] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 638.122719][ T30] audit: type=1400 audit(1769185523.400:1702): avc: denied { mounton } for pid=10711 comm="syz.1.1128" path="/244/file1" dev="tmpfs" ino=1517 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 638.210996][ T30] audit: type=1400 audit(1769185523.410:1703): avc: denied { mount } for pid=10711 comm="syz.1.1128" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 638.275408][ T30] audit: type=1400 audit(1769185523.960:1704): avc: denied { unmount } for pid=5824 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 638.302501][T10707] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 638.327896][ T5867] dvb-usb: bulk message failed: -22 (1/0) [ 638.328581][T10707] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 638.361817][ T5867] dvb-usb: error while querying for an remote control event. [ 638.403936][T10707] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 638.452713][T10707] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 639.153484][ T5867] dvb-usb: bulk message failed: -22 (1/0) [ 639.172890][ T5867] dvb-usb: error while querying for an remote control event. [ 639.181253][ T6275] usb 4-1: USB disconnect, device number 30 [ 639.216174][ T5136] Bluetooth: hci1: command 0x0406 tx timeout [ 639.356336][ T5822] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 640.096189][ T5136] Bluetooth: hci2: command 0x0406 tx timeout [ 640.266370][ T5822] usb 3-1: Using ep0 maxpacket: 8 [ 640.396611][ T5136] Bluetooth: hci3: command 0x0406 tx timeout [ 640.416170][ T5136] Bluetooth: hci4: command 0x0406 tx timeout [ 640.476506][ T5822] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 640.493509][ T5822] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 640.503944][ T5822] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 640.513782][ T5822] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 640.523815][ T5822] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 640.537487][ T6275] dvb-usb: Unknown USB1.1 DVB-T device ???? please successfully deinitialized and disconnected. [ 640.557490][ T5822] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 640.566989][ T5822] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 640.614102][T10725] snd_dummy snd_dummy.0: control 0:0:4:syz0:0 is already present [ 640.849438][ T5822] usb 3-1: GET_CAPABILITIES returned 0 [ 640.854940][ T5822] usbtmc 3-1:16.0: can't read capabilities [ 641.264388][T10721] usbtmc 3-1:16.0: INITIATE_CLEAR returned 0 [ 641.296782][ T5136] Bluetooth: hci1: command 0x0406 tx timeout [ 642.382175][ T5136] Bluetooth: hci2: command 0x0406 tx timeout [ 642.410824][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 642.410863][ T30] audit: type=1400 audit(1769185527.910:1724): avc: denied { mounton } for pid=10742 comm="syz.3.1137" path="/226/file0" dev="tmpfs" ino=1386 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 642.416708][T10748] netlink: 'syz.0.1138': attribute type 10 has an invalid length. [ 642.448045][T10748] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1138'. [ 642.448169][ T5136] Bluetooth: hci3: command 0x0406 tx timeout [ 642.476737][ T30] audit: type=1400 audit(1769185527.910:1725): avc: denied { create } for pid=10742 comm="syz.3.1137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 642.481710][T10748] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1138'. [ 642.507367][ T5136] Bluetooth: hci4: command 0x0406 tx timeout [ 642.529363][ T30] audit: type=1400 audit(1769185528.310:1726): avc: denied { read write } for pid=10741 comm="syz.0.1138" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 642.806812][ T30] audit: type=1400 audit(1769185528.310:1727): avc: denied { open } for pid=10741 comm="syz.0.1138" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 642.942944][ T30] audit: type=1400 audit(1769185528.380:1728): avc: denied { create } for pid=10741 comm="syz.0.1138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 642.986448][ T30] audit: type=1400 audit(1769185528.380:1729): avc: denied { write } for pid=10741 comm="syz.0.1138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 643.014238][T10751] team0: left allmulticast mode [ 643.021818][T10751] bridge0: port 1(team0) entered disabled state [ 643.168382][ T7611] usb 3-1: USB disconnect, device number 36 [ 643.356673][ T30] audit: type=1400 audit(1769185529.230:1730): avc: denied { module_request } for pid=10750 comm="syz.3.1140" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 644.025291][T10759] overlayfs: failed to clone upperpath [ 644.338997][T10751] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 644.382451][ T30] audit: type=1400 audit(1769185530.280:1731): avc: denied { sys_module } for pid=10750 comm="syz.3.1140" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 644.499342][T10765] process 'syz.3.1140' launched '/dev/fd/8' with NULL argv: empty string added [ 644.590785][ T30] audit: type=1400 audit(1769185530.390:1732): avc: denied { read write } for pid=10750 comm="syz.3.1140" name="video3" dev="devtmpfs" ino=936 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 644.986239][ T30] audit: type=1400 audit(1769185530.390:1733): avc: denied { open } for pid=10750 comm="syz.3.1140" path="/dev/video3" dev="devtmpfs" ino=936 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 644.998461][T10770] loop6: detected capacity change from 0 to 524287487 [ 645.133963][T10770] buffer_io_error: 23 callbacks suppressed [ 645.134005][T10770] Buffer I/O error on dev loop6, logical block 0, async page read [ 645.219488][T10770] Buffer I/O error on dev loop6, logical block 0, async page read [ 645.319019][T10770] Buffer I/O error on dev loop6, logical block 0, async page read [ 645.343875][T10770] Buffer I/O error on dev loop6, logical block 0, async page read [ 645.431308][T10770] Buffer I/O error on dev loop6, logical block 0, async page read [ 645.439395][T10770] Buffer I/O error on dev loop6, logical block 0, async page read [ 645.447465][T10770] Buffer I/O error on dev loop6, logical block 0, async page read [ 645.455330][T10770] Buffer I/O error on dev loop6, logical block 0, async page read [ 645.568199][T10770] ldm_validate_partition_table(): Disk read failed. [ 645.574947][T10770] Buffer I/O error on dev loop6, logical block 0, async page read [ 645.582920][T10770] Buffer I/O error on dev loop6, logical block 0, async page read [ 645.593093][T10770] Dev loop6: unable to read RDB block 0 [ 645.599340][T10770] loop6: unable to read partition table [ 645.605429][T10770] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 647.278448][ T5822] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 647.346076][T10790] overlayfs: failed to clone upperpath [ 647.436289][ T5822] usb 1-1: Using ep0 maxpacket: 32 [ 647.474232][T10785] snd_dummy snd_dummy.0: control 0:0:4:syz0:0 is already present [ 647.507827][ T5822] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 647.747423][ T5822] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 647.757455][ T5822] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 647.798740][ T5822] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 647.920210][ T5822] usb 1-1: config 0 descriptor?? [ 648.102224][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 648.102240][ T30] audit: type=1400 audit(1769185534.000:1749): avc: denied { write } for pid=10796 comm="syz.3.1149" name="ptype" dev="proc" ino=4026533102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 648.313602][ T30] audit: type=1400 audit(1769185534.040:1750): avc: denied { append } for pid=10796 comm="syz.3.1149" name="v4l-subdev2" dev="devtmpfs" ino=944 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 648.361671][ T30] audit: type=1400 audit(1769185534.060:1751): avc: denied { create } for pid=10793 comm="syz.4.1135" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 648.409167][ T30] audit: type=1400 audit(1769185534.060:1752): avc: denied { map } for pid=10793 comm="syz.4.1135" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=22643 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 648.454930][ T5822] koneplus 0003:1E7D:2D51.0001: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.0-1/input0 [ 648.494494][ T30] audit: type=1400 audit(1769185534.060:1753): avc: denied { read write } for pid=10793 comm="syz.4.1135" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=22643 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 648.548845][ T30] audit: type=1400 audit(1769185534.170:1754): avc: denied { create } for pid=10796 comm="syz.3.1149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 648.597378][ T30] audit: type=1400 audit(1769185534.170:1755): avc: denied { connect } for pid=10796 comm="syz.3.1149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 648.646333][ T5822] koneplus 0003:1E7D:2D51.0001: couldn't init struct koneplus_device [ 648.664735][ T5822] koneplus 0003:1E7D:2D51.0001: couldn't install mouse [ 648.674798][ T30] audit: type=1400 audit(1769185534.210:1756): avc: denied { setopt } for pid=10796 comm="syz.3.1149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 648.785516][ T5822] koneplus 0003:1E7D:2D51.0001: probe with driver koneplus failed with error -32 [ 649.141519][ T5822] usb 1-1: USB disconnect, device number 38 [ 649.163319][ T30] audit: type=1400 audit(1769185534.670:1757): avc: denied { read } for pid=10793 comm="syz.4.1135" dev="nsfs" ino=4026533083 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 649.245941][ T30] audit: type=1400 audit(1769185534.670:1758): avc: denied { open } for pid=10793 comm="syz.4.1135" path="net:[4026533083]" dev="nsfs" ino=4026533083 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 649.267684][T10800] fido_id[10800]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 649.324697][T10808] overlayfs: failed to clone upperpath [ 649.532149][T10813] overlay: Unknown parameter '/' [ 649.577958][T10813] overlayfs: missing 'lowerdir' [ 649.706565][T10821] netlink: 'syz.4.1155': attribute type 10 has an invalid length. [ 649.714484][T10821] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1155'. [ 649.731941][T10821] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1155'. [ 650.118907][T10824] loop6: detected capacity change from 0 to 524287487 [ 650.127496][T10702] ldm_validate_partition_table(): Disk read failed. [ 650.134208][T10702] Dev loop6: unable to read RDB block 0 [ 650.149040][T10702] buffer_io_error: 18 callbacks suppressed [ 650.149052][T10702] Buffer I/O error on dev loop6, logical block 0, async page read [ 650.179104][T10702] Buffer I/O error on dev loop6, logical block 3, async page read [ 650.192415][T10702] Buffer I/O error on dev loop6, logical block 0, async page read [ 650.248548][T10702] Buffer I/O error on dev loop6, logical block 0, async page read [ 650.256592][T10702] loop6: unable to read partition table [ 650.263199][T10824] Buffer I/O error on dev loop6, logical block 0, async page read [ 650.271315][T10824] Buffer I/O error on dev loop6, logical block 0, async page read [ 650.387334][ T8014] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 650.416367][T10824] Buffer I/O error on dev loop6, logical block 0, async page read [ 650.501751][T10833] snd_dummy snd_dummy.0: control 0:0:4:syz0:0 is already present [ 650.706200][ T8014] usb 3-1: Using ep0 maxpacket: 32 [ 650.711715][T10824] Buffer I/O error on dev loop6, logical block 0, async page read [ 650.723809][ T8014] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 650.734646][ T8014] usb 3-1: config 0 has no interfaces? [ 650.740934][ T8014] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 650.752183][ T8014] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 650.788400][ T8014] usb 3-1: config 0 descriptor?? [ 650.819103][T10824] Buffer I/O error on dev loop6, logical block 0, async page read [ 650.942103][T10824] Buffer I/O error on dev loop6, logical block 0, async page read [ 651.020332][T10840] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1159'. [ 651.157458][T10824] ldm_validate_partition_table(): Disk read failed. [ 651.164126][T10824] Dev loop6: unable to read RDB block 0 [ 651.282669][T10827] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 651.292461][T10827] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 651.660249][T10846] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 651.670216][T10846] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 651.887072][T10824] loop6: unable to read partition table [ 651.923179][T10824] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 651.983629][ T5184] ldm_validate_partition_table(): Disk read failed. [ 652.008290][ T5184] Dev loop6: unable to read RDB block 0 [ 652.133360][ T5184] loop6: unable to read partition table [ 652.287662][T10851] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10851 comm=syz.0.1160 [ 653.221330][ T5949] usb 3-1: USB disconnect, device number 37 [ 653.420405][T10850] Set syz1 is full, maxelem 65536 reached [ 653.633355][ T30] kauditd_printk_skb: 43 callbacks suppressed [ 653.633372][ T30] audit: type=1400 audit(1769185539.530:1802): avc: denied { create } for pid=10852 comm="syz.2.1161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 653.820011][ T30] audit: type=1400 audit(1769185539.560:1803): avc: denied { setopt } for pid=10852 comm="syz.2.1161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 653.905800][ T30] audit: type=1400 audit(1769185539.570:1804): avc: denied { bind } for pid=10852 comm="syz.2.1161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 654.488330][ T30] audit: type=1400 audit(1769185540.000:1805): avc: denied { read write } for pid=10855 comm="syz.2.1162" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 654.514524][T10863] Set syz0 is full, maxelem 0 reached [ 654.524423][ T30] audit: type=1400 audit(1769185540.000:1806): avc: denied { open } for pid=10855 comm="syz.2.1162" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 654.586845][ T30] audit: type=1400 audit(1769185540.010:1807): avc: denied { watch } for pid=10858 comm="syz.3.1164" path="/232/net_prio.prioidx" dev="tmpfs" ino=1420 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 654.611012][ T30] audit: type=1400 audit(1769185540.010:1808): avc: denied { watch_sb watch_reads } for pid=10858 comm="syz.3.1164" path="/232/net_prio.prioidx" dev="tmpfs" ino=1420 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 655.246182][ T30] audit: type=1400 audit(1769185541.140:1809): avc: denied { read write } for pid=10869 comm="syz.4.1167" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 655.346246][ T30] audit: type=1400 audit(1769185541.140:1810): avc: denied { open } for pid=10869 comm="syz.4.1167" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 655.685797][T10874] netlink: 'syz.2.1169': attribute type 10 has an invalid length. [ 655.693709][T10874] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1169'. [ 655.702825][T10874] bridge0: port 1(team0) entered blocking state [ 655.709104][T10874] bridge0: port 1(team0) entered disabled state [ 655.715410][T10874] team0: entered allmulticast mode [ 655.772461][ T30] audit: type=1400 audit(1769185541.630:1811): avc: denied { execute } for pid=10871 comm="syz.4.1168" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=22817 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 655.828354][T10874] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1169'. [ 656.627903][T10882] snd_dummy snd_dummy.0: control 0:0:4:syz0:0 is already present [ 657.227058][ T8014] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 657.766299][ T8014] usb 2-1: Using ep0 maxpacket: 32 [ 657.790652][ T8014] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 658.616342][ T8014] usb 2-1: config 0 has no interfaces? [ 658.636393][ T8014] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 658.645487][ T8014] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 658.679193][ T8014] usb 2-1: config 0 descriptor?? [ 658.718496][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 658.718511][ T30] audit: type=1400 audit(1769185544.620:1823): avc: denied { unmount } for pid=5814 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 659.207447][T10885] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 659.256559][T10885] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 659.704463][T10920] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 659.714859][T10920] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 660.008635][T10922] loop6: detected capacity change from 0 to 524287487 [ 660.017194][T10922] buffer_io_error: 27 callbacks suppressed [ 660.017229][T10922] Buffer I/O error on dev loop6, logical block 0, async page read [ 660.033860][T10922] Buffer I/O error on dev loop6, logical block 0, async page read [ 660.114024][T10922] Buffer I/O error on dev loop6, logical block 0, async page read [ 660.183529][T10922] Buffer I/O error on dev loop6, logical block 0, async page read [ 660.291424][T10922] Buffer I/O error on dev loop6, logical block 0, async page read [ 660.416220][T10922] Buffer I/O error on dev loop6, logical block 0, async page read [ 660.435933][ T30] audit: type=1400 audit(1769185546.330:1824): avc: denied { ioctl } for pid=10930 comm="syz.2.1177" path="socket:[23062]" dev="sockfs" ino=23062 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 660.504132][T10922] Buffer I/O error on dev loop6, logical block 0, async page read [ 660.636369][ T6852] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 660.706374][T10922] Buffer I/O error on dev loop6, logical block 0, async page read [ 660.744272][T10922] ldm_validate_partition_table(): Disk read failed. [ 660.856569][ T6852] usb 4-1: Using ep0 maxpacket: 8 [ 660.873831][ T6852] usb 4-1: no configurations [ 660.900638][T10922] Buffer I/O error on dev loop6, logical block 0, async page read [ 660.922742][ T6852] usb 4-1: can't read configurations, error -22 [ 660.929189][T10922] Buffer I/O error on dev loop6, logical block 0, async page read [ 661.019723][ T5949] usb 2-1: USB disconnect, device number 37 [ 661.048156][T10922] Dev loop6: unable to read RDB block 0 [ 661.091887][T10922] loop6: unable to read partition table [ 661.212096][T10922] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 661.226264][ T6852] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 661.395900][T10937] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1182'. [ 661.414867][T10937] netlink: 'syz.0.1182': attribute type 10 has an invalid length. [ 661.423139][T10937] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1182'. [ 661.436889][T10937] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1182'. [ 661.676180][ T6852] usb 4-1: Using ep0 maxpacket: 8 [ 661.711985][ T6852] usb 4-1: no configurations [ 661.731958][ T6852] usb 4-1: can't read configurations, error -22 [ 661.766367][ T6852] usb usb4-port1: attempt power cycle [ 662.136372][ T6852] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 662.540073][ T30] audit: type=1400 audit(1769185548.440:1825): avc: denied { map_create } for pid=10944 comm="syz.0.1185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 662.736266][ T30] audit: type=1400 audit(1769185548.440:1826): avc: denied { execmem } for pid=10944 comm="syz.0.1185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 663.217293][ T30] audit: type=1400 audit(1769185548.680:1827): avc: denied { read } for pid=10944 comm="syz.0.1185" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 663.286780][ T30] audit: type=1400 audit(1769185548.680:1828): avc: denied { open } for pid=10944 comm="syz.0.1185" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 663.490913][ T30] audit: type=1400 audit(1769185549.240:1829): avc: denied { allowed } for pid=10947 comm="syz.4.1186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 663.527485][ T30] audit: type=1400 audit(1769185549.240:1830): avc: denied { create } for pid=10947 comm="syz.4.1186" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 663.650115][ T30] audit: type=1400 audit(1769185549.240:1831): avc: denied { map } for pid=10947 comm="syz.4.1186" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=23095 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 663.759244][ T30] audit: type=1400 audit(1769185549.240:1832): avc: denied { read write } for pid=10947 comm="syz.4.1186" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=23095 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 663.856843][ T30] audit: type=1400 audit(1769185549.510:1833): avc: denied { prog_load } for pid=10940 comm="syz.2.1184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 663.906688][ T30] audit: type=1400 audit(1769185549.510:1834): avc: denied { bpf } for pid=10940 comm="syz.2.1184" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 664.030853][ T30] audit: type=1400 audit(1769185549.510:1835): avc: denied { perfmon } for pid=10940 comm="syz.2.1184" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 664.113281][ T30] audit: type=1400 audit(1769185549.650:1836): avc: denied { read write } for pid=5813 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 664.206536][ T6852] usb 4-1: device descriptor read/8, error -71 [ 664.223428][ T30] audit: type=1400 audit(1769185549.650:1837): avc: denied { open } for pid=5813 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 664.325150][ T30] audit: type=1400 audit(1769185549.650:1838): avc: denied { ioctl } for pid=5813 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 664.419399][ T30] audit: type=1400 audit(1769185549.850:1839): avc: denied { create } for pid=10953 comm="syz.0.1187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 664.476240][ T30] audit: type=1400 audit(1769185549.890:1840): avc: denied { read write } for pid=10953 comm="syz.0.1187" name="nvme-fabrics" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 664.563976][ T30] audit: type=1400 audit(1769185549.890:1841): avc: denied { open } for pid=10953 comm="syz.0.1187" path="/dev/nvme-fabrics" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 664.666219][ T6852] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 664.734275][ T6852] usb 4-1: Using ep0 maxpacket: 32 [ 664.805569][ T6852] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 664.893047][ T6852] usb 4-1: config 0 has no interface number 0 [ 664.922618][T10960] team0: left allmulticast mode [ 664.941061][T10960] bridge0: port 1(team0) entered disabled state [ 664.963404][ T6852] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 664.983264][ T6852] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 664.994013][ T6852] usb 4-1: Product: syz [ 665.002023][ T6852] usb 4-1: Manufacturer: syz [ 665.032338][ T6852] usb 4-1: SerialNumber: syz [ 665.216688][ T6852] usb 4-1: config 0 descriptor?? [ 665.382662][T10960] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 665.403242][ T6852] smsc95xx v2.0.0 [ 665.616215][ T5925] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 665.638284][ T6852] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 665.664373][ T6852] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 665.776240][ T5925] usb 1-1: Using ep0 maxpacket: 32 [ 665.793087][ T5925] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 665.830853][ T5925] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 665.866454][ T5925] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 666.012182][ T5925] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 666.498669][T10981] input: syz0 as /devices/virtual/input/input62 [ 666.515264][ T5925] usb 1-1: config 0 descriptor?? [ 666.859298][T10970] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 666.868036][T10970] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 667.237591][T10991] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 667.247444][T10991] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 668.006247][ T6852] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000038: -71 [ 668.023012][ T6852] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 668.052561][ T6852] usb 4-1: USB disconnect, device number 34 [ 668.314196][T11002] Invalid logical block size (-4) [ 668.565440][ T6852] usb 1-1: USB disconnect, device number 39 [ 668.631721][T11002] Failed to initialize the IGMP autojoin socket (err -2) [ 668.836952][ T30] kauditd_printk_skb: 39 callbacks suppressed [ 668.836962][ T30] audit: type=1400 audit(1769185554.740:1881): avc: denied { prog_run } for pid=11007 comm="syz.0.1201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 669.068527][T11013] openvswitch: netlink: IPv4 tun info is not correct [ 669.095411][T11013] befs: (nbd0): unable to read superblock [ 669.145690][T11014] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1201'. [ 669.390155][ T30] audit: type=1400 audit(1769185554.990:1882): avc: denied { mounton } for pid=11007 comm="syz.0.1201" path="/syzcgroup/unified/syz0" dev="cgroup2" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 669.974914][T11023] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 669.981652][T11023] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 670.190355][T11023] vhci_hcd vhci_hcd.0: Device attached [ 670.222148][ T30] audit: type=1400 audit(1769185556.100:1883): avc: denied { create } for pid=10999 comm="syz.3.1199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 670.243824][ T5949] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 670.252509][ T30] audit: type=1400 audit(1769185556.110:1884): avc: denied { read write } for pid=10999 comm="syz.3.1199" name="video37" dev="devtmpfs" ino=1050 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 670.279249][ T30] audit: type=1400 audit(1769185556.110:1885): avc: denied { open } for pid=10999 comm="syz.3.1199" path="/dev/video37" dev="devtmpfs" ino=1050 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 670.365438][T11024] vhci_hcd: connection closed [ 670.368910][ T12] vhci_hcd vhci_hcd.3: stop threads [ 670.556248][ T5949] usb 3-1: Using ep0 maxpacket: 16 [ 670.616306][ T5987] usb 40-1: SetAddress Request (2) to port 0 [ 670.622584][ T5987] usb 40-1: new SuperSpeed USB device number 2 using vhci_hcd [ 670.634421][ T12] vhci_hcd vhci_hcd.3: release socket [ 670.650208][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 670.666445][ T5987] usb 40-1: enqueue for inactive port 0 [ 670.674530][ T5949] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 670.724433][ T5949] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 670.775153][ T5949] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 670.848191][ T5949] usb 3-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 671.001940][ T5949] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 671.018769][ T30] audit: type=1400 audit(1769185556.920:1886): avc: denied { write } for pid=11032 comm="syz.4.1206" name="route" dev="proc" ino=4026533235 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 671.047521][ T5949] usb 3-1: config 0 descriptor?? [ 671.094676][ T5987] usb usb40-port1: attempt power cycle [ 671.522189][ T30] audit: type=1400 audit(1769185557.420:1887): avc: denied { read append } for pid=11037 comm="syz.0.1208" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 671.586975][ T30] audit: type=1400 audit(1769185557.450:1888): avc: denied { open } for pid=11037 comm="syz.0.1208" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 671.693675][ T5987] usb usb40-port1: unable to enumerate USB device [ 671.707899][ T30] audit: type=1400 audit(1769185557.560:1889): avc: denied { map_read map_write } for pid=11037 comm="syz.0.1208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 671.825453][ T30] audit: type=1400 audit(1769185557.720:1890): avc: denied { ioctl } for pid=11037 comm="syz.0.1208" path="socket:[23226]" dev="sockfs" ino=23226 ioctlcmd=0xf504 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 671.996208][ T5925] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 672.060441][ T7284] usb 2-1: new full-speed USB device number 38 using dummy_hcd [ 672.070739][ T5949] input: HID 0955:7214 Haptics as /devices/virtual/input/input64 [ 672.108776][ T5949] shield 0003:0955:7214.0002: Registered Thunderstrike controller [ 672.124142][ T5949] shield 0003:0955:7214.0002: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.2-1/input0 [ 672.147354][ T5925] usb 5-1: Using ep0 maxpacket: 32 [ 672.153952][ T5925] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 672.165054][ T5925] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 672.174916][ T5925] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 672.184064][ T5925] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 672.193559][ T5925] usb 5-1: config 0 descriptor?? [ 672.233461][ T7284] usb 2-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 672.243045][ T7284] usb 2-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 672.251365][ T6275] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 672.259068][ T7284] usb 2-1: Product: syz [ 672.263262][ T7284] usb 2-1: Manufacturer: syz [ 672.264402][T11021] random: crng reseeded on system resumption [ 672.268733][ T7284] usb 2-1: SerialNumber: syz [ 672.290771][ T7284] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 672.291933][ T9] usb 3-1: USB disconnect, device number 38 [ 672.299358][ T5867] shield 0003:0955:7214.0002: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 672.320881][ T5867] shield 0003:0955:7214.0002: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 672.326748][ T9] ------------[ cut here ]------------ [ 672.333798][ T5867] shield 0003:0955:7214.0002: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 672.337389][ T9] workqueue: work disable count underflowed [ 672.337399][ T9] WARNING: kernel/workqueue.c:4359 at enable_work+0x2d1/0x320, CPU#0: kworker/0:0/9 [ 672.337436][ T9] Modules linked in: [ 672.337470][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Not tainted syzkaller #0 PREEMPT(full) [ 672.349168][ T5867] shield 0003:0955:7214.0002: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 672.354363][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 672.354379][ T9] Workqueue: usb_hub_wq hub_event [ 672.402715][ T9] RIP: 0010:enable_work+0x2d1/0x320 [ 672.407908][ T9] Code: ff e8 33 79 38 00 e8 6e 1b a8 09 e9 61 ff ff ff e8 24 79 38 00 90 0f 0b 90 e9 17 fe ff ff e8 16 79 38 00 48 8d 3d af a6 eb 0e <67> 48 0f b9 3a 45 31 f6 e9 36 fe ff ff 48 89 ef e8 4a c8 a2 00 e9 [ 672.427574][ T9] RSP: 0018:ffffc900000e7348 EFLAGS: 00010083 [ 672.433653][ T9] RAX: 0000000000051f64 RBX: 0000000000000000 RCX: ffffc90019a04000 [ 672.441743][ T9] RDX: 0000000000100000 RSI: ffffffff81ce86ea RDI: ffffffff90ba2da0 [ 672.449725][ T9] RBP: ffff888036020738 R08: 0000000000000007 R09: 0000000000000000 [ 672.457686][ T9] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 672.465640][ T9] R13: 1ffff9200001ce6a R14: ffff888036020698 R15: 000000007fffffff [ 672.473595][ T9] FS: 0000000000000000(0000) GS:ffff8881245dc000(0000) knlGS:0000000000000000 [ 672.482515][ T9] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 672.489081][ T9] CR2: 00005560dca37e60 CR3: 000000001eab4000 CR4: 00000000003526f0 [ 672.497045][ T9] Call Trace: [ 672.500310][ T9] [ 672.503310][ T9] ? __pfx_enable_work+0x10/0x10 [ 672.508236][ T9] ? __pfx___might_resched+0x10/0x10 [ 672.513510][ T9] cancel_delayed_work_sync+0x96/0xf0 [ 672.518869][ T9] thermal_zone_device_unregister+0x28e/0x4e0 [ 672.524928][ T9] ? __pfx_shield_remove+0x10/0x10 [ 672.530035][ T9] power_supply_unregister+0x10a/0x150 [ 672.535592][ T9] shield_remove+0x75/0x130 [ 672.540148][ T9] ? __pfx_shield_remove+0x10/0x10 [ 672.545262][ T9] hid_device_remove+0xd1/0x270 [ 672.550124][ T9] ? __pfx_hid_device_remove+0x10/0x10 [ 672.555598][ T9] device_remove+0xcb/0x180 [ 672.560106][ T9] device_release_driver_internal+0x42e/0x600 [ 672.566163][ T9] bus_remove_device+0x22f/0x440 [ 672.571102][ T9] device_del+0x376/0x9b0 [ 672.575450][ T9] ? __pfx_device_del+0x10/0x10 [ 672.580310][ T9] ? do_raw_spin_lock+0x128/0x260 [ 672.585325][ T9] hid_destroy_device+0x19c/0x240 [ 672.590356][ T9] usbhid_disconnect+0xa0/0xe0 [ 672.595128][ T9] usb_unbind_interface+0x1dd/0x9e0 [ 672.600322][ T9] ? kernfs_remove_by_name_ns+0x9f/0xf0 [ 672.605857][ T9] ? __pfx_usb_unbind_interface+0x10/0x10 [ 672.611568][ T9] device_remove+0x12a/0x180 [ 672.616145][ T9] device_release_driver_internal+0x42e/0x600 [ 672.622199][ T9] bus_remove_device+0x22f/0x440 [ 672.627130][ T9] device_del+0x376/0x9b0 [ 672.631447][ T9] ? kfree_const+0x5a/0x70 [ 672.635858][ T9] ? __pfx_device_del+0x10/0x10 [ 672.640736][ T9] ? kobject_put+0xb9/0x640 [ 672.645236][ T9] usb_disable_device+0x367/0x810 [ 672.650259][ T9] usb_disconnect+0x2e2/0x9a0 [ 672.654927][ T9] hub_event+0x1d0c/0x4af0 [ 672.659344][ T9] ? __lock_acquire+0x4a5/0x2630 [ 672.664277][ T9] ? do_raw_spin_unlock+0x145/0x1e0 [ 672.669478][ T9] ? __pfx_hub_event+0x10/0x10 [ 672.674241][ T9] ? assoc_array_subtree_iterate+0x210/0x390 [ 672.680220][ T9] ? finish_task_switch.isra.0+0x1ff/0xb70 [ 672.686019][ T9] ? process_one_work+0x80b/0x1840 [ 672.691123][ T9] ? rcu_is_watching+0x12/0xc0 [ 672.695879][ T9] process_one_work+0x9c2/0x1840 [ 672.700807][ T9] ? __pfx_process_one_work+0x10/0x10 [ 672.706171][ T9] ? assign_work+0x19c/0x250 [ 672.710754][ T9] worker_thread+0x5da/0xe40 [ 672.715338][ T9] ? kthread+0x17d/0x730 [ 672.719562][ T9] ? __pfx_worker_thread+0x10/0x10 [ 672.724654][ T9] kthread+0x3b3/0x730 [ 672.728705][ T9] ? __pfx_kthread+0x10/0x10 [ 672.733275][ T9] ? ret_from_fork+0x79/0xaf0 [ 672.737937][ T9] ? ret_from_fork+0x79/0xaf0 [ 672.742619][ T9] ? rcu_is_watching+0x12/0xc0 [ 672.747374][ T9] ? __pfx_kthread+0x10/0x10 [ 672.751945][ T9] ret_from_fork+0x754/0xaf0 [ 672.756520][ T9] ? __pfx_ret_from_fork+0x10/0x10 [ 672.761617][ T9] ? __switch_to+0x7b9/0x10c0 [ 672.766284][ T9] ? __pfx_kthread+0x10/0x10 [ 672.770945][ T9] ret_from_fork_asm+0x1a/0x30 [ 672.775703][ T9] [ 672.778710][ T9] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 672.785971][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Not tainted syzkaller #0 PREEMPT(full) [ 672.795058][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 672.805095][ T9] Workqueue: usb_hub_wq hub_event [ 672.810108][ T9] Call Trace: [ 672.813368][ T9] [ 672.816293][ T9] dump_stack_lvl+0x100/0x190 [ 672.820959][ T9] vpanic+0x20d/0x630 [ 672.824941][ T9] panic+0xd1/0xd1 [ 672.828654][ T9] ? __pfx_panic+0x10/0x10 [ 672.833075][ T9] check_panic_on_warn.cold+0x19/0x34 [ 672.838431][ T9] ? enable_work+0x2d1/0x320 [ 672.843027][ T9] __warn.cold+0x191/0x2f8 [ 672.847456][ T9] __report_bug+0x296/0x3d0 [ 672.851971][ T9] ? enable_work+0x2d1/0x320 [ 672.856554][ T9] ? __pfx___report_bug+0x10/0x10 [ 672.861569][ T9] ? enable_work+0x2ca/0x320 [ 672.866166][ T9] ? find_held_lock+0x2b/0x80 [ 672.870832][ T9] ? __flush_work+0x928/0xcb0 [ 672.875498][ T9] ? __flush_work+0x928/0xcb0 [ 672.880209][ T9] report_bug_entry+0xe1/0x290 [ 672.884966][ T9] ? enable_work+0x2d1/0x320 [ 672.889541][ T9] handle_bug+0x1c9/0x2a0 [ 672.893861][ T9] exc_invalid_op+0x17/0x50 [ 672.898361][ T9] asm_exc_invalid_op+0x1a/0x20 [ 672.903209][ T9] RIP: 0010:enable_work+0x2d1/0x320 [ 672.908422][ T9] Code: ff e8 33 79 38 00 e8 6e 1b a8 09 e9 61 ff ff ff e8 24 79 38 00 90 0f 0b 90 e9 17 fe ff ff e8 16 79 38 00 48 8d 3d af a6 eb 0e <67> 48 0f b9 3a 45 31 f6 e9 36 fe ff ff 48 89 ef e8 4a c8 a2 00 e9 [ 672.928014][ T9] RSP: 0018:ffffc900000e7348 EFLAGS: 00010083 [ 672.934061][ T9] RAX: 0000000000051f64 RBX: 0000000000000000 RCX: ffffc90019a04000 [ 672.942102][ T9] RDX: 0000000000100000 RSI: ffffffff81ce86ea RDI: ffffffff90ba2da0 [ 672.950053][ T9] RBP: ffff888036020738 R08: 0000000000000007 R09: 0000000000000000 [ 672.958004][ T9] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 672.965962][ T9] R13: 1ffff9200001ce6a R14: ffff888036020698 R15: 000000007fffffff [ 672.973946][ T9] ? enable_work+0x2ca/0x320 [ 672.978547][ T9] ? enable_work+0x2ca/0x320 [ 672.983144][ T9] ? __pfx_enable_work+0x10/0x10 [ 672.988154][ T9] ? __pfx___might_resched+0x10/0x10 [ 672.993427][ T9] cancel_delayed_work_sync+0x96/0xf0 [ 672.998800][ T9] thermal_zone_device_unregister+0x28e/0x4e0 [ 673.004951][ T9] ? __pfx_shield_remove+0x10/0x10 [ 673.010056][ T9] power_supply_unregister+0x10a/0x150 [ 673.015506][ T9] shield_remove+0x75/0x130 [ 673.020000][ T9] ? __pfx_shield_remove+0x10/0x10 [ 673.025110][ T9] hid_device_remove+0xd1/0x270 [ 673.030149][ T9] ? __pfx_hid_device_remove+0x10/0x10 [ 673.035596][ T9] device_remove+0xcb/0x180 [ 673.040083][ T9] device_release_driver_internal+0x42e/0x600 [ 673.046137][ T9] bus_remove_device+0x22f/0x440 [ 673.051087][ T9] device_del+0x376/0x9b0 [ 673.055413][ T9] ? __pfx_device_del+0x10/0x10 [ 673.060249][ T9] ? do_raw_spin_lock+0x128/0x260 [ 673.065283][ T9] hid_destroy_device+0x19c/0x240 [ 673.070336][ T9] usbhid_disconnect+0xa0/0xe0 [ 673.075120][ T9] usb_unbind_interface+0x1dd/0x9e0 [ 673.080318][ T9] ? kernfs_remove_by_name_ns+0x9f/0xf0 [ 673.085856][ T9] ? __pfx_usb_unbind_interface+0x10/0x10 [ 673.091563][ T9] device_remove+0x12a/0x180 [ 673.096135][ T9] device_release_driver_internal+0x42e/0x600 [ 673.102226][ T9] bus_remove_device+0x22f/0x440 [ 673.107180][ T9] device_del+0x376/0x9b0 [ 673.111499][ T9] ? kfree_const+0x5a/0x70 [ 673.115918][ T9] ? __pfx_device_del+0x10/0x10 [ 673.120748][ T9] ? kobject_put+0xb9/0x640 [ 673.125245][ T9] usb_disable_device+0x367/0x810 [ 673.130276][ T9] usb_disconnect+0x2e2/0x9a0 [ 673.134944][ T9] hub_event+0x1d0c/0x4af0 [ 673.139537][ T9] ? __lock_acquire+0x4a5/0x2630 [ 673.144458][ T9] ? do_raw_spin_unlock+0x145/0x1e0 [ 673.149643][ T9] ? __pfx_hub_event+0x10/0x10 [ 673.154390][ T9] ? assoc_array_subtree_iterate+0x210/0x390 [ 673.160370][ T9] ? finish_task_switch.isra.0+0x1ff/0xb70 [ 673.166210][ T9] ? process_one_work+0x80b/0x1840 [ 673.171338][ T9] ? rcu_is_watching+0x12/0xc0 [ 673.176119][ T9] process_one_work+0x9c2/0x1840 [ 673.181069][ T9] ? __pfx_process_one_work+0x10/0x10 [ 673.186440][ T9] ? assign_work+0x19c/0x250 [ 673.191019][ T9] worker_thread+0x5da/0xe40 [ 673.195601][ T9] ? kthread+0x17d/0x730 [ 673.199824][ T9] ? __pfx_worker_thread+0x10/0x10 [ 673.204919][ T9] kthread+0x3b3/0x730 [ 673.208970][ T9] ? __pfx_kthread+0x10/0x10 [ 673.213581][ T9] ? ret_from_fork+0x79/0xaf0 [ 673.218245][ T9] ? ret_from_fork+0x79/0xaf0 [ 673.222910][ T9] ? rcu_is_watching+0x12/0xc0 [ 673.227663][ T9] ? __pfx_kthread+0x10/0x10 [ 673.232240][ T9] ret_from_fork+0x754/0xaf0 [ 673.236818][ T9] ? __pfx_ret_from_fork+0x10/0x10 [ 673.241947][ T9] ? __switch_to+0x7b9/0x10c0 [ 673.246612][ T9] ? __pfx_kthread+0x10/0x10 [ 673.251190][ T9] ret_from_fork_asm+0x1a/0x30 [ 673.255947][ T9] [ 673.259247][ T9] Kernel Offset: disabled [ 673.263586][ T9] Rebooting in 86400 seconds..