last executing test programs: 35.742550645s ago: executing program 3 (id=400): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file3\x00', 0x105042, 0x0) mount(&(0x7f0000000280)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000300)='./file3\x00', &(0x7f0000000000)='erofs\x00', 0x0, &(0x7f0000000380)='acl') mkdirat$binderfs(0xffffffffffffff9c, &(0x7f00000019c0)='./binderfs2\x00', 0x1ff) mount$binderfs(0x0, &(0x7f0000001dc0)='./binderfs2\x00', &(0x7f0000001e00), 0x0, &(0x7f0000000000)={[{@stats}]}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') read$FUSE(r0, &(0x7f0000000980)={0x2020}, 0x160e) 35.5961847s ago: executing program 3 (id=402): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, 0x0, 0x0, 0x5}, 0x94) (async) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@empty, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xc, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x66, 0x3, 0x0, 0x2f, 0x6, @remote, @loopback}}}}}}, 0x0) (async) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcf"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd8, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r3, 0x0, 0x0}, 0x10) (async) ioctl$HCIINQUIRY(r1, 0x800448d4, 0x0) 34.420513694s ago: executing program 0 (id=409): syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00'}, 0x10) symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, &(0x7f0000000180)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}]}) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0), 0x80000) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x94, &(0x7f0000000200)=ANY=[@ANYRESHEX=0x0, @ANYRESDEC, @ANYRESHEX, @ANYRES64=r0]) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r4, 0x4b72, &(0x7f0000000040)={0x0, 0xfffffffc, 0x8, 0xd, 0x200, &(0x7f0000000980)="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"}) r5 = memfd_create(&(0x7f0000000300)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xae\xd1md\xc8\x85\x00\x00\xfb\xff\x00\x18\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;2\xb5\xe1jS\xeb\xbf%||\xa0\x8e\x01\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x4) execveat(r5, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) syz_usb_connect(0x0, 0x24, &(0x7f0000000340)=ANY=[@ANYRESHEX=r1, @ANYBLOB="ed322b41fb04fc5443440444c8db9dc266488cd87526297a6f0b2780b0865837668a1b056660a5ff209d46d51a02cdbb8fedb81659fa8e6fb4deb90dd202ff0299b78a78321820cd30e1d0bd598506d7013480b3a114d89520ba1638d7bfd41edc3d4fafae0126b8d546c8500fec1e5f06633b410f00c7ac89233ed43316f6db940029f52068896688ae44c8e0281530fcc76b4d5741d03c3c053af1b765042c7b899e321ff754dd3a894da577999c204c44aade9c8d504013ca360ed7bca7b42a7161af8edc5e2219c331d88885b7a242ff8e332e47cfc63bbbcc6e7606675714b18e6753aefec260", @ANYRES32, @ANYRES64=r5], 0x0) 33.496647422s ago: executing program 3 (id=411): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040c41090ea000000000001090224000100000000090400000103000800092100070001220700090000000000000000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="0000080000000800392cdaab4a73c4da9c365361f28d4d841096e65d98ad9c6b20a8199a0c62a15a126f99ca1bea3e3d1e7f38652559f00a54bf258e63a32963a24803cb62b8842e2a808310210bf584f7e2f9361b7fd8b771b24c0fc802ede872789de47668fc0b10d6"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x1, 0x3, '\x00\x00\x00'}, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x1, 0xe, "ea6aafaabfc5926708627c6c0963"}, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) r2 = socket(0x1d, 0x2, 0x6) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r2, 0x6a, 0x5, 0x0, 0x0) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000080)=0x200000000) r4 = dup2(r3, r3) read$FUSE(r4, &(0x7f0000004d80)={0x2020}, 0x2020) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000440)={&(0x7f0000000040)=[{0x101, 0x1201, 0x3, &(0x7f0000000240)="3372df"}], 0x1}) 32.881783292s ago: executing program 1 (id=413): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x10c, 0x0, 0x0, 0x4) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(camellia),sha1-asm)\x00'}, 0x58) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, 0x0, 0x0) read$msr(0xffffffffffffffff, &(0x7f00000003c0)=""/145, 0x91) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0x1, &(0x7f0000000140)={0x10000000008, 0x4000000000001}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, 0x0, &(0x7f0000000200)) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) lseek(r6, 0x417, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, 0x0, 0x0) r7 = creat(0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYRES8=r4, @ANYRES8], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000680)=ANY=[@ANYRESOCT=r7, @ANYRES32=r8, @ANYBLOB="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"], 0x0, 0x82, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r9 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r9, 0x1, 0x3c, &(0x7f00000000c0)={0x200000000000001, 0x3}, 0x8) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) syslog(0x1, 0x0, 0x0) connect$inet6(r9, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) 31.380357387s ago: executing program 0 (id=418): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = eventfd(0xffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_VRING_CALL(r2, 0x4008af21, &(0x7f0000000100)={0x1, r0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix_mp={0x0, 0x1, 0x30314142, 0x6, 0x0, [{0x8, 0x2}, {}, {0x2}, {}, {}, {0x0, 0xfffffffc}, {0x8000000}, {0x0, 0x8}]}}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r6) sendmsg$DEVLINK_CMD_RATE_NEW(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r7, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 30.956050841s ago: executing program 1 (id=421): r0 = syz_usb_connect(0x0, 0x5a, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x0, 0x5a, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000060f94d100d05020027020000000000000040020000000009047d0403195abf0009050400005539000009050b00000000000009050200000005000009047d01013481af0009a00e00230000690009047dbef2e36d09aa4d1ae88e684ebba79ec0686381d9067b177eac90d43d49054cf1ceb9bebec1a65f7981612ac1f6af4f1741d39ea1b50256100c340f2a681b08dc642c45f4dde33d37039f92977b4e673aca7e1afcd50122eb3e8e6030c755aac3105ee7f230126c23dfe301462458101efe1b7ac39f17e34bc1af7ef89b6366ae0a5b1deca48c5509a5a2d9f6cb3cf35619d9ee5d58187269b27dd4720bdd4cad80991716d7e70b48f010d716cc95c0ade69d7f2fd31b61aadf6c8fe2b75465e14a6e90e6c74eb1097c74db32633ea7d0ba29b0be3da0ab126efc9ed845e33e0c29b2b374e9c3fd8b6f96c8d002cc9fd43c717ea5274b279fb73e5bf84812a292c3bedd83fd31f26fe58370990b8b62656e30decd4dd20b376d642439c0b4d78e99baf28970302cd2d4ad8883a85bce7cc2801791c22c55479bc5579d13d53c100892689c20c5d200b06e8762879d642a5393c92e63"], 0x0) (async) syz_usb_control_io$uac1(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) 30.455314029s ago: executing program 0 (id=422): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x48980, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r1 = fcntl$dupfd(r0, 0x0, r0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x11}, 0x41000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x41, &(0x7f0000000100)=r6, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r7 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r7, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x25, 0x0, 0x0) ioctl$TCFLSH(r1, 0x400455c8, 0x20000000009) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x1b) socket$tipc(0x1e, 0x5, 0x0) syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') r8 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x4000000, 0x0, 0x1, 0x10d}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r8, 0x47b7, 0x2000, 0x0, 0x0, 0xffffffffffffff0c) getsockopt$netrom_NETROM_IDLE(r1, 0x103, 0x7, &(0x7f0000000000)=0xfffffff9, &(0x7f0000000040)=0x4) ioctl$AUTOFS_IOC_SETTIMEOUT(r1, 0x80049367, &(0x7f0000000080)=0xffffffff) r11 = ioctl$UDMABUF_CREATE_LIST(r2, 0x40087543, &(0x7f00000002c0)={0x0, 0x1, [{r3, 0x0, 0x1000000000000, 0x1000000000000}]}) fchdir(r11) 2.269852147s ago: executing program 2 (id=425): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'veth0_to_hsr\x00'}) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(0xffffffffffffffff, 0xc1004110, &(0x7f0000000080)={0xbc3, [0x7, 0x2568a97], [{0x3ff, 0x2, 0x1, 0x0, 0x1}, {0x0, 0x15, 0x0, 0x1, 0x1, 0x1}, {0x6, 0x1, 0x1, 0x1}, {0x5, 0xfffff800, 0x0, 0x1, 0x1, 0x1}, {0xffffffff, 0x4, 0x1, 0x0, 0x0, 0x1}, {0x5, 0x7ff, 0x0, 0x1, 0x1, 0x1}, {0x60, 0x5, 0x0, 0x1, 0x1}, {0xf, 0x6, 0x0, 0x1, 0x1, 0x1}, {0x6, 0x5, 0x1, 0x1}, {0xd, 0x2, 0x0, 0x0, 0x0, 0x1}, {0x0, 0xed3a, 0x0, 0x1, 0x0, 0x1}, {0x8, 0x8988}], 0xfff}) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r4 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000005700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(r2, &(0x7f00000059c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000005740)={0x28, r3, 0x105, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x20008804) r6 = openat$ppp(0xffffffffffffff9c, 0x0, 0x200000, 0x0) ioctl$PPPIOCSFLAGS1(r6, 0x40047459, &(0x7f00000001c0)=0x1011) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x9) r7 = getpid() bpf$MAP_CREATE(0x0, 0x0, 0x48) sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r10 = socket$pppl2tp(0x18, 0x1, 0x1) r11 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r10, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r11, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xa}}, 0x2}}, 0x2e) r12 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r12, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r12, {0x2, 0xfffc}, 0x2, 0x4}}, 0x26) 2.268388255s ago: executing program 4 (id=427): socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = inotify_init1(0x800) inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x24000420) r1 = syz_io_uring_setup(0x4169, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000480)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x4000, @fd=r0, 0x4, &(0x7f0000000080)=""/164, 0xa4, 0x14, 0x1}) io_uring_enter(r1, 0x48e9, 0x8daf, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x12) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x702, 0xe, 0x700, &(0x7f0000000540)="e460334470b8d480eb00c15286dd", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) write$cgroup_devices(0xffffffffffffffff, 0x0, 0x0) 2.268075102s ago: executing program 3 (id=428): ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)=ANY=[@ANYRESHEX=r0, @ANYRESDEC, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_open_procfs(0x0, &(0x7f0000001fc0)='fd\x00') fchdir(r3) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x900, 0x80) getdents64(r4, &(0x7f0000000f80)=""/4096, 0x1000) ftruncate(0xffffffffffffffff, 0x0) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x400000f3, 0x0, 0xffffffffffffffff}]}) syz_open_procfs(0x0, &(0x7f00000003c0)='net/sctp\x00') r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="050000000000044800000f00000008000300", @ANYRES32=r7, @ANYBLOB="32000e0080000000ffffffffffff080211000000080211000000000000000000000000006400010001030cb66c0503030f080000080026006c090000"], 0x58}}, 0x0) unshare(0x22020600) connect$inet6(0xffffffffffffffff, &(0x7f0000000640)={0xa, 0x4e22, 0x7, @empty, 0x8}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@loopback, @in6=@empty, 0x4e25, 0x0, 0x0, 0x0, 0xa, 0x80, 0x0, 0xc, 0x0, 0xffffffffffffffff}, {0x2, 0x9, 0x3, 0x6, 0x9, 0xbffffffffffffffd, 0x5, 0x2000000000000000}, {0x800000fa, 0x1000000000008, 0x2, 0xfffffffffffffba6}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2}, {{@in=@local, 0x4cf, 0x6c}, 0xa, @in6=@dev={0xfe, 0x80, '\x00', 0x19}, 0x3506, 0x1, 0x0, 0x0, 0x4, 0x80000001}}, 0xe8) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r8, 0x0, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={0xffffffffffffffff, 0x0, 0x0}, 0xe4) 2.265789076s ago: executing program 2 (id=429): socket(0x2, 0x80805, 0x0) (async) r0 = socket(0x2, 0x80805, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000180)="e1", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x0, @private=0xa010102}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000100)="a7", 0x1}], 0x1}}, {{&(0x7f0000000400)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000b40)=[{&(0x7f0000000500)="b5a8", 0x2}], 0x1}}], 0x3, 0x0) 2.265483138s ago: executing program 4 (id=430): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000500000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x45}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r2, 0x4008af23, &(0x7f0000000040)={0x0, 0xb}) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) capset(&(0x7f0000000240)={0x19980330, r3}, &(0x7f0000000280)={0x8, 0x8, 0xb, 0x7, 0xfffff001, 0x81}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) capset(0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp\x00') read$FUSE(r6, &(0x7f0000004440)={0x2020}, 0x202d) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5393, 0x0) socket$inet(0x2, 0x80001, 0x84) 2.264813397s ago: executing program 0 (id=431): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) setuid(0xee01) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) syz_emit_ethernet(0x34e, &(0x7f0000000780)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd6000cd0403183afffe8000000000000000000000000000bbff02000000000000000000000000000186009078005a01000000000000000000050aa78c000005dc8080a2030003004003493b87aafaffffffffffffff23732472eefa45ad96579269748e354c1e4a8a8b3f0ab0c430d3be27df3e34060600000000000000dac15084dbaf736b41e5af050200010000050000000000260004000018fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf3915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978001d06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000000b17dcea468000000000054740a5d4901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2bce9ac946a3f0e2bc4000091394c02bcfbbb7d71138537d68e2d2c6393a9f3cc271a9ff09a48b5b303f4f00e07b8a3e10000a3e1100000006f00ffc0ffff00000000600000ff0bc0fe000000000000000000000000d9a027440000000000000000000000000c5e14ccb44d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d260600aa89c8f267d76ece1c9f6ae2e1eb3d8bf9c6ab2642c4808298e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c"], 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000200)={0x20, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000004}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) bind$inet6(r3, &(0x7f0000000280)={0xa, 0x2, 0x0, @loopback, 0x9}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000030000000400010005"], 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000580)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\t\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="40000000000000000000000200"/28], 0x50) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000012c35b400304106098c60e0000010902120001000000000904"], 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r6}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000540)={r4, 0x0, 0x0}, 0x10) sendto$inet6(r3, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5dac14e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0xb804}, 0x1c) recvmsg(r3, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x200500) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r7, 0x40505412, &(0x7f0000000b00)={0x6, 0x101, 0xff, 0x0, 0x2}) 2.262794464s ago: executing program 0 (id=432): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000200001002bbd700000001d0002002004000000000000000008000200e0000001"], 0x24}, 0x1, 0x0, 0x0, 0x20048055}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8994, &(0x7f00000002c0)={'bond0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = getpgrp(0x0) fcntl$setownex(r3, 0xf, &(0x7f0000000140)={0x0, r4}) r5 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r5, 0x402, 0x8000001f) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0), 0x5a) close_range(r5, 0xffffffffffffffff, 0x0) io_uring_setup(0x1450, &(0x7f0000000180)={0x0, 0x73d5, 0x80, 0x3, 0x1f}) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r5, 0x101, 0x19, &(0x7f0000000240)=@netrom={'nr', 0x0}, 0x10) r6 = openat$fb0(0xffffffffffffff9c, 0x0, 0x2100, 0x0) prlimit64(r4, 0xe, &(0x7f0000000100)={0x106, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) r7 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) flock(r0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r6, 0xd000943d, &(0x7f00000f1500)={0x9, [], 0x2, "537fc3af1ececb"}) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc2604110, &(0x7f0000000480)={0x5, [[0x7, 0x43e, 0x9, 0x8000, 0x1, 0x8, 0x7], [0x5, 0x80000001, 0x80000001, 0x5, 0x1, 0xaf41, 0x5, 0x8], [0x7, 0xaf, 0x467ca848, 0x36, 0x7c5a, 0x80000000, 0x40, 0x4800000]], '\x00', [{0xb, 0x0, 0x0, 0x1, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1, 0x1}, {0x8001, 0x8, 0x0, 0x1, 0x1, 0x1}, {0x8000, 0x1928dc38, 0x0, 0x0, 0x1, 0x1}, {0x81, 0x88, 0x0, 0x0, 0x1, 0x1}, {0x0, 0x101, 0x1, 0x0, 0x1}, {0x2, 0x8, 0x1, 0x0, 0x1}, {0x2, 0xffffffff, 0x1, 0x0, 0x1}, {0x1, 0x2788, 0x0, 0x0, 0x1}, {0x4, 0x5, 0x0, 0x0, 0x0, 0x1}, {0x4, 0x8, 0x0, 0x0, 0x1}, {0xc, 0x2, 0x1}]}) r8 = socket(0xa, 0x3, 0x3a) ioctl$SIOCSIFMTU(r8, 0x8922, &(0x7f0000000080)={'veth0_vlan\x00', 0x200}) bind$unix(0xffffffffffffffff, &(0x7f0000000040)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00!'], 0x28}}, 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r5, 0x84, 0x16, &(0x7f00000003c0)=ANY=[@ANYBLOB="0400000100ed840009000200f804aa5813de1d9898de8126fb372fd1398723fdafb534f69bbf06cacbe4cc6363ca3885574ed5731af67844eb8246e0a693873c392eeaf0d9c1e1418af4560e7fbbd2e982cd548fd56b13891a1bf29c1f59bdd3c174f88c97d8a79e8efa10808b0fde8ef6fd4943aa187e6cf8fa80a7ef82c8ff1b629a29788d74d0f512efed82151f"], 0xc) 2.262445114s ago: executing program 1 (id=433): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x0, 0x3, 0x3ff, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x10000000, 0x99, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x2, 0x3, 0x2000079, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0xc0000000, 0x0, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x5], [0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4], [0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, 0x0, 0x0, 0x0, 0x0, 0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0x100000]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f0000000500)) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x94173000) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x6, 0x0, 0x0, 0x0) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000980)={[{0x2d, 'pids'}]}, 0x1f) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000540)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$KVM_GET_IRQCHIP(r3, 0xc208ae62, &(0x7f0000000580)={0x0, 0x0, @ioapic}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x185}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x0, 0xe80, 0x0, &(0x7f0000000200)="5c71f951c8c413551b2ac06c88a8", 0x0, 0x0, 0x0, 0x0, 0xc0, 0x0, &(0x7f0000000300)="1dc25645f4b230d1d8f005824c78ba746fd985a21b98b3e5e43365af3265c79d6c4ebbe9e141adc8175e5324bf3d689f7135bde2f706ee8025b986b0dcf5092de087fe86e34f9ec6f4b96b43cdd5dca80c626d7cba3c8fb772724a6221fde98137b0cf74b2ee3ebe28a1bfea19c38ee865b8a36e2b6246d04b36dfc8d05d1f30747c4b39e2b8391a66edd549000048bd110b093d9a764fc0c22a6bdc29ead4d876e60da144de739a924754a4bba218b74090874e0000003f5d65615630f39c92", 0x4}, 0x4c) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x4}]}) 2.260844639s ago: executing program 2 (id=434): syz_open_dev$video(&(0x7f0000000000), 0x8, 0x10900) (async) r0 = syz_open_dev$video(&(0x7f0000000000), 0x8, 0x10900) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000040)={0x3, 0x9, 0xffffffc3}) socket$inet6(0xa, 0x2, 0x413) (async) r1 = socket$inet6(0xa, 0x2, 0x413) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x29, 0x6, 0x8, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @local, 0x80, 0x8, 0x1, 0x1}}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000140)={@empty, 0x63, r2}) close_range(0xffffffffffffffff, r0, 0x2) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x80}) (async) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x80}) accept4$bt_l2cap(r3, &(0x7f0000000200)={0x1f, 0x0, @fixed}, &(0x7f0000000240)=0xe, 0x800) (async) r4 = accept4$bt_l2cap(r3, &(0x7f0000000200)={0x1f, 0x0, @fixed}, &(0x7f0000000240)=0xe, 0x800) accept4(r4, 0x0, &(0x7f0000000280), 0x80000) (async) r5 = accept4(r4, 0x0, &(0x7f0000000280), 0x80000) fcntl$F_SET_RW_HINT(r3, 0x40c, &(0x7f00000002c0)=0x5) getsockopt$EBT_SO_GET_INIT_INFO(r3, 0x0, 0x82, &(0x7f0000000300)={'nat\x00', 0x0, 0x0, 0x0, [0x7fff, 0xffffffffffff0000, 0x6, 0x8, 0x8000000000000001, 0x77]}, &(0x7f0000000380)=0x78) (async) getsockopt$EBT_SO_GET_INIT_INFO(r3, 0x0, 0x82, &(0x7f0000000300)={'nat\x00', 0x0, 0x0, 0x0, [0x7fff, 0xffffffffffff0000, 0x6, 0x8, 0x8000000000000001, 0x77]}, &(0x7f0000000380)=0x78) write$6lowpan_enable(r3, &(0x7f00000003c0)='0', 0x1) r6 = syz_clone(0x200, &(0x7f0000000400)="ded963064219daca48a5fea09f6c84d6d89baa49f0f3bdeea6621d4af78d7f7996550bb18b554d9c260b4a2b05831994d44325a414c248aefed60c91439cc52fca19e9", 0x43, &(0x7f0000000480), &(0x7f00000004c0), &(0x7f0000000500)="3ce58f82f2a1babef78c4f4e0d9bd6623f0cb2f31c90dd122e3404b7add7bd9e2d235dc268cc2069f0422f7badbac30c952abe453fa23c02172605d9a5d24d76c9fc97f1088753f87eadc4e1760dc33d04edb97af19342e00d4f41838014b14a1456acfa59dc2049cba30a213dbc9fa16bc158ce0cf26b3ebd9af91bdf7af543ed6d9494ff2608a44d0fed799ee8b4395032d1f41b30cab25b5d59ef2435e0a154087380b75bc26edc9d03272b9e4e51b492285b22") r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), r3) sendmsg$TIPC_NL_NET_SET(r5, &(0x7f0000000a80)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a40)={&(0x7f0000000640)={0x3c4, r7, 0x100, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xb}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xd0}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffd}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fff}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8001}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}]}, @TIPC_NLA_LINK={0x50, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_NODE={0xc0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "01b4ba815b01ccc705ed632bdb8a15a2eba842bd0204a0a63328"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x6d, 0x3, "6785f29f9b3bd50d9df7428b4ecdcd649b3b97db1a6521d788239542facb0b3b1ff5823d7d466fb7428b05210a23f3e4ab5cf8d46513acc3d7fc643667522eaba97899db2fbce7966a6cf2494d77fe07ee7e36dbb8e382aaa8cc724e994aadbe5bf99afce120e665aa"}]}, @TIPC_NLA_MEDIA={0x4}, @TIPC_NLA_NODE={0x1d8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xee, 0x3, "f6e2f6a3ebcf855e49c0a8a749edfd4b6712911187cae0d45d127e2b04a5ab6fb58235702e01536814df87ee5e63186c9140ac7a2fccfa5d2600f3fd769781463b5a115d9dc17ee7d6ac6a7e00bf1c647267c2cc505871e1c23baa6eca55804ade738a25e5cbf0dd0eeeb2ffced707fb26a425362fcee6ab525f8a4aae7e5ad2ad989f6629cac60c5a78a1e52980e4415a01aca7c168e1e3056ea7d8eb6ea701b8280d3eaa2a2753bf71777c6e6d9457407f57b1d7690f624a93d18e31d9971365345a1abaa0174f90b0212e4207865336393b7195de2feb3c36d2db692071485a9be8754c59497fa1d3"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "0a1f26798f44dabfdbc2f735b49d0f4841e0bd0554780fdf1a564bec8e040460ae34eb"}}, @TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "6e2c5823f3264f9fb8627a8f3dd5378d23d96f98175ad96309dda71a538b"}}, @TIPC_NLA_NODE_KEY={0x43, 0x4, {'gcm(aes)\x00', 0x1b, "c11f33ce4bc776af7cc6f92051544bc7b972ecca358d3bc6f7ff5d"}}, @TIPC_NLA_NODE_REKEYING={0x8}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xd4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x27d80}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x40}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}]}]}, 0x3c4}, 0x1, 0x0, 0x0, 0x44880}, 0x1) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r6, 0x10, &(0x7f0000000ac0)={0x5}) (async) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r6, 0x10, &(0x7f0000000ac0)={0x5}) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, &(0x7f0000000bc0)={0x80000000, &(0x7f0000000b00), &(0x7f0000000b40)=[{{0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, &(0x7f0000000cc0)={0x80000000, &(0x7f0000000c00), &(0x7f0000000c40)}) (async) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, &(0x7f0000000cc0)={0x80000000, &(0x7f0000000c00), &(0x7f0000000c40)=[{{}, {0x80000000, 0x0}}]}) ioctl$MEDIA_IOC_G_TOPOLOGY(r3, 0xc0487c04, &(0x7f00000010c0)={0x0, 0x2, 0x0, &(0x7f0000000d00)=[{}, {}], 0x1, 0x0, &(0x7f0000000dc0)=[{}], 0xa, 0x0, &(0x7f0000000e40)=[{}, {}, {0x0, 0x80000000}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000f80)=[{}, {}, {}, {}, {}, {}, {}, {}]}) ioctl$MEDIA_IOC_G_TOPOLOGY(r3, 0xc0487c04, &(0x7f0000001780)={0x0, 0x5, 0x0, &(0x7f0000001140)=[{}, {}, {}, {}, {}], 0x6, 0x0, &(0x7f0000001340)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000001600)=[{}, {}, {}, {}, {}, {}, {}, {0x0, 0x80000000, 0x0, {0x0}}, {}, {}], 0x1, 0x0, &(0x7f0000001740)=[{}]}) ioctl$MEDIA_IOC_SETUP_LINK(r3, 0xc0347c03, &(0x7f0000001800)={{r8, r9, 0x1, [0x8, 0x80]}, {r10, r11, 0x4, [0x1f, 0x9]}, 0x0, [0xcfa, 0xfffffffa]}) syz_genetlink_get_family_id$tipc2(&(0x7f0000001840), r3) r12 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r12, 0x6, 0x14, &(0x7f0000001880)=0x2, 0x4) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f00000018c0)=@overlay={0x9, 0xc, 0x4, 0x70000, 0x8, {0x0, 0x2710}, {0x2, 0x0, 0x9, 0x2, 0x5, 0xc, "ae141a6d"}, 0x400, 0x3, {}, 0xf0, 0x0, r3}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f00000019c0)={{0x1, 0x1, 0x18, r1, {0xffffffffffffffff, 0xee00}}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f00000019c0)={{0x1, 0x1, 0x18, r1, {0xffffffffffffffff, 0xee00}}, './file0\x00'}) getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000001a00)={{{@in6=@ipv4={""/10, ""/2, @local}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@local}}, &(0x7f0000001b00)=0xe8) mount$9p_fd(0x0, &(0x7f0000001940)='./file0\x00', &(0x7f0000001980), 0x120a080, &(0x7f0000001b40)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@dfltuid={'dfltuid', 0x3d, r13}}], [{@uid_lt={'uid<', r14}}, {@fsmagic={'fsmagic', 0x3d, 0x7}}, {@smackfstransmute={'smackfstransmute', 0x3d, '/sys/kernel/debug/sync/info\x00'}}]}}) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r5, 0x28, 0x6, &(0x7f0000001c00)={0x77359400}, 0x10) 2.260700564s ago: executing program 3 (id=435): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000040000000c"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000340)='kmem_cache_free\x00', r0, 0x0, 0x4}, 0x18) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x3, 0x3}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x1f4, 0xd50, 0x1000000, &(0x7f0000000100)="ff412f66b0833efc8864968781", 0x0, 0x300, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x2}, 0x50) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x300, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 2.260045675s ago: executing program 4 (id=436): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_ADD_DEV(r0, 0x5000940a, &(0x7f0000000840)={{r1}, "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"}) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @empty, 0x10a}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) sendmsg$NFT_BATCH(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[], 0x56c}, 0x1, 0x0, 0x0, 0x40000}, 0x480d1) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r2) recvfrom$inet6(r2, &(0x7f0000000440)=""/139, 0x8b, 0x22, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000100)={'tunl0\x00', 0x0, 0x7, 0x80, 0x5c41, 0x401, {{0xe, 0x4, 0x0, 0x9, 0x38, 0x68, 0x0, 0x1, 0x29, 0x0, @empty, @remote, {[@rr={0x7, 0x13, 0x1e, [@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @rand_addr=0x64010100]}, @timestamp={0x44, 0x8, 0x95, 0x0, 0x1, [0x9]}, @timestamp={0x44, 0x8, 0x40, 0x0, 0x0, [0x5]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000280)={'gre0\x00', &(0x7f0000000500)={'gretap0\x00', r3, 0x10, 0x8010, 0x0, 0x36b, {{0x20, 0x4, 0x3, 0x5, 0x80, 0x65, 0x0, 0xd5, 0x2f, 0x0, @multicast2, @multicast2, {[@ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x59, 0x0, [{0x1, 0x7, "60de4c7cda"}, {0x6, 0x11, "2273590105fc0aa24accf1d336435e"}, {0x5, 0x12, "f593fe77ff5df4e5f8c8d7d6dbed7e80"}, {0x2, 0xc, "c5956c33bb6697a465e6"}, {0x7, 0x12, "fdf2ab68bbca1e315beea4b4df44c8e2"}, {0x1, 0xb, "9436d915f1b50d87c7"}]}, @end, @ssrr={0x89, 0xb, 0xb5, [@multicast1, @local]}]}}}}}) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), 0xffffffffffffffff) accept4$x25(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x12, 0x80800) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000240)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r4, @ANYBLOB="0100000000000000000001000000060006000300000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5426c010880f4000080060005000180000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff240002001bc715ee4868b12a49f4df11bc05475489f6a27c4d6483ad2fa5e45903b0ce851400040002000000ac1414aa00000000000000008c00098028000080060001000a00000014000200ff020000000000000000000000000001050003000000000028000080060001000a000000140002000000000000000000000000000000000105000300030000001c000080060001000200da0008000200e000000105000300000000001c000080060001000200000008000200ac141400050003000000000074000080200004000a004e2200000000fc0000000000000000000000000000000400000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff080003000100000024000200cde20bc0d9b90ac13642d7b66459dd9db5e20b4b16d3d23f2cb03a8aa417dce6080007000000000014000200776730"], 0x1c8}}, 0x0) 2.133905054s ago: executing program 2 (id=437): r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) wait4(r0, 0x0, 0x1000000, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000005000000fd09000084000000050100", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB=' \x00'/28], 0x50) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000440), 0x10) listen(r4, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) setsockopt$sock_timeval(r5, 0x1, 0x43, &(0x7f0000000040)={0x0, 0x2710}, 0x10) writev(r5, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x2) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000240), 0x800, r3}, 0x38) syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) r6 = syz_open_dev$dri(0x0, 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f0000000380)={0x0, 0xffffffca, r7}) ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003400200000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x60044884) r8 = fanotify_init(0x40, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000280)={r3, &(0x7f00000004c0)="239a104a2400dfd3c698abec2f0bc9eea416db7ce6e25c32ecddc42a5b48891bd835fa9b6907fd9f1fbd04f8e1c87779ab85808214586e2312d7008c3ab27e2da65326ad3bc78021965e597074fba2a21820396bf23cd46f29b1d2fcc201a4c586f759b44d2c2521e907b46978ba4fd1f49f59b7860d64bd3fbf32a00e885f8117dcca9a4580cc66f23bfacc9d3a87189cbf40", &(0x7f0000000600)=""/130, 0x4}, 0x20) write$binfmt_aout(r8, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x001'], 0x20) 2.08035889s ago: executing program 4 (id=438): r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x200000000000, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x20000000}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000000080), 0x4) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x10000, 0x1, 0x100, 0xc, 0xe, 0x0, 0x3}, 0x1c) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000000), 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) fsopen(&(0x7f0000000200)='hfsplus\x00', 0x0) (async) r5 = fsopen(&(0x7f0000000200)='hfsplus\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000280)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'\x04\x00\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) (async) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000280)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'\x04\x00\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8100, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0f00000004000000050000f71200000000050000f4bdd9fb24c430dd66a13c0068ed8ce4", @ANYRES8, @ANYRES8=r0, @ANYRES8=r0, @ANYBLOB="8abb71c349cfac6b575b15cc1d14467e348fffb21df1c65bf91880ad2fe644e9e335ad59614a60266122c0b28d85e026d8a54993f93b65f69d2cd46c7475e2cafd56d6826a3bd89636bf9f9279213dcdb19c54ded81170d45b27e77e0bcad1cf8f7938d121123994de0bce21604dadc3ec48466589a11256e23766144365d5e7fc33ecb7df1f73e91af9", @ANYRES8=r4], 0x48) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0f00000004000000050000f71200000000050000f4bdd9fb24c430dd66a13c0068ed8ce4", @ANYRES8, @ANYRES8=r0, @ANYRES8=r0, @ANYBLOB="8abb71c349cfac6b575b15cc1d14467e348fffb21df1c65bf91880ad2fe644e9e335ad59614a60266122c0b28d85e026d8a54993f93b65f69d2cd46c7475e2cafd56d6826a3bd89636bf9f9279213dcdb19c54ded81170d45b27e77e0bcad1cf8f7938d121123994de0bce21604dadc3ec48466589a11256e23766144365d5e7fc33ecb7df1f73e91af9", @ANYRES8=r4], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x6, 0x804, 0x0, 0x7}, {0x10400002, 0x2, 0x0, 0x5}], 0x10, 0xfffffffd}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x6, 0x804, 0x0, 0x7}, {0x10400002, 0x2, 0x0, 0x5}], 0x10, 0xfffffffd}, 0x94) socket$kcm(0x2, 0x5, 0x84) (async) r7 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r9) close(r7) (async) close(r7) recvmsg$unix(r8, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r11 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r13) (async) close(r13) recvmsg$unix(r12, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r11, 0x84, 0x64, &(0x7f0000000000)=r14, 0x10) setsockopt$sock_attach_bpf(r7, 0x84, 0x64, &(0x7f0000000000)=r10, 0x10) (async) setsockopt$sock_attach_bpf(r7, 0x84, 0x64, &(0x7f0000000000)=r10, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) recvmsg$unix(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000003c0)=""/109, 0x6d}], 0x1}, 0x40) syz_open_dev$vim2m(&(0x7f0000000040), 0x3, 0x2) 1.918446564s ago: executing program 4 (id=439): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=@allocspi={0x10c, 0x16, 0x1, 0x0, 0x0, {{{@in, @in6=@mcast1}, {@in6=@loopback, 0x0, 0x32}, @in6=@private2}}, [@XFRMA_IF_ID={0x8}, @mark={0xc}]}, 0x10c}, 0x1, 0x200000000000000}, 0x0) 1.460890244s ago: executing program 4 (id=440): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10c4, 0xea90, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x8, {0x8, 0x0, "392cdaab4a73"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x1, 0x3, '\x00\x00\x00'}, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x1, 0xe, "ea6aafaabfc5926708627c6c0963"}, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) r2 = socket(0x1d, 0x2, 0x6) r3 = open(&(0x7f0000000140)='./file0\x00', 0x101200, 0x1) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) write$evdev(r3, &(0x7f0000000280)=[{{}, 0x3, 0x2, 0x401}, {{}, 0x1, 0x8, 0x777}, {{r4, r5/1000+60000}, 0x11, 0x8, 0x5}, {{}, 0x2, 0x96e5, 0x7}], 0x60) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r2, 0x6a, 0x5, 0x0, 0x0) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000440)={&(0x7f0000000040)=[{0x101, 0x1201, 0x3, &(0x7f0000000240)="3372df"}], 0x1}) 1.420710227s ago: executing program 2 (id=441): creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e75"], 0x15) r2 = dup(r1) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000180), 0x10000, 0x0) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000200)={0x3, 0x2, 0x800, 0x1, 0xb, "3069cddef208213ffb86c99c1881108d7617c5"}) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) getdents64(0xffffffffffffffff, &(0x7f0000000240)=""/32, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000200000000000001000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000032710000000000000000000000000000000000010000"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) r7 = syz_io_uring_setup(0xef4, &(0x7f00000004c0)={0x0, 0xe3d3, 0x400, 0x0, 0x3}, &(0x7f0000000140)=0x0, &(0x7f0000000400)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r5}) io_uring_enter(r7, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r10 = openat$uinput(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$UI_DEV_SETUP(r10, 0x405c5503, &(0x7f0000000440)={{0xfffe, 0x5, 0x2, 0x5}, 'syz0\x00', 0x1c}) ioctl$UI_DEV_CREATE(r10, 0x5501) read(r10, &(0x7f0000000280)=""/44, 0x2c) socket$nl_netfilter(0x10, 0x3, 0xc) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) utimensat(0xffffffffffffff9c, 0x0, 0x0, 0x8c) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r12) sendmsg$NFC_CMD_LLC_SET_PARAMS(r11, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYRES64=r9, @ANYRES16=r13, @ANYBLOB="010027bd7000fedbdf251000000005000f0003000000060011002a070000050010000600000008000100", @ANYRES32=r12], 0x3c}, 0x1, 0x0, 0x0, 0x4004830}, 0x20004000) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB="2c6b4937b69e55ba88131d7b155c6ea432b3257acfb995047eae6879acdb6235e2e65561c51b9331ca29efd7e1dbcf7c9449aaf00160bf996fd7fdf6d05c"]) 1.248682999s ago: executing program 3 (id=442): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x48980, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r1 = fcntl$dupfd(r0, 0x0, r0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x11}, 0x41000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x41, &(0x7f0000000100)=r7, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r8 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r8, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x25, &(0x7f0000000100)=r4, 0x4) ioctl$TCFLSH(r1, 0x400455c8, 0x20000000009) ioctl$TIOCSETD(r1, 0x5423, 0x0) socket$tipc(0x1e, 0x5, 0x0) syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') r9 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x4000000, 0x0, 0x1, 0x10d}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r9, 0x47b7, 0x2000, 0x0, 0x0, 0xffffffffffffff0c) getsockopt$netrom_NETROM_IDLE(r1, 0x103, 0x7, &(0x7f0000000000)=0xfffffff9, &(0x7f0000000040)=0x4) ioctl$AUTOFS_IOC_SETTIMEOUT(r1, 0x80049367, &(0x7f0000000080)=0xffffffff) r12 = ioctl$UDMABUF_CREATE_LIST(r2, 0x40087543, &(0x7f00000002c0)={0x0, 0x1, [{r3, 0x0, 0x1000000000000, 0x1000000000000}]}) fchdir(r12) 719.176232ms ago: executing program 1 (id=443): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000000)) capset(&(0x7f0000000100)={0x20071026, r2}, &(0x7f0000000180)={0x3, 0x0, 0x5, 0x4, 0x800, 0x5}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x1, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f00000010c0)=[{0x84, 0x77, 0x0, 0x0, @time={0x1, 0x4}, {0xfd, 0xfb}, {0x7, 0x3b}, @raw32={[0x2, 0x7c, 0x8000000]}}, {0x2, 0x0, 0x5, 0x83, @tick, {0xf9}, {}, @note={0x81, 0x0, 0x0, 0x8}}, {0x6, 0x3, 0x9, 0x3, @tick=0x2001, {0xd, 0x5}, {0xd, 0x2}, @control={0x3, 0x7, 0x107fff}}], 0x54) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) write$sndseq(r3, &(0x7f0000000080)=[{0x1e, 0x0, 0x8, 0xfd, @tick=0x8, {}, {}, @result}], 0x1c) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000040)="b8", 0x1, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f00000000c0)={0x0, 0x6, 0x1, 'j'}, 0x9) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000300), 0x8) 398.624393ms ago: executing program 1 (id=444): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_buf(r0, 0x1, 0x37, &(0x7f00000010c0)=""/4096, &(0x7f0000000000)=0x1000) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x50, 0x0, '.\x00'}}) 128.478149ms ago: executing program 0 (id=445): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000140)={'8255\x00', [0xfffffffb, 0x2166, 0x2, 0x100000, 0x88d6, 0x8f, 0xfffffffd, 0x10, 0x2, 0xffffffff, 0x200, 0xfff, 0x344, 0x1, 0x2, 0x200, 0x9, 0x3, 0x3, 0xe, 0x4, 0x0, 0x80, 0x7ff, 0x1, 0x1, 0xb0c2, 0x7df, 0x8, 0xf3, 0x80000001]}) ioctl$COMEDI_INSNLIST(r0, 0x8010640b, &(0x7f0000000000)={0x1, &(0x7f00000edb00)=[{0x4000000, 0x0, 0x0, 0x4, 0x9}]}) syz_usb_connect(0x2, 0x24, 0x0, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x70f9a000) r2 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) pwrite64(r2, &(0x7f00000000c0)='%y', 0x2, 0x6) open$dir(&(0x7f0000000000)='./file0\x00', 0x80082, 0x0) open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) r3 = inotify_init1(0x0) inotify_add_watch(r3, &(0x7f00000001c0)='./file0\x00', 0x4000064f) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, 0x0) r6 = socket(0x848000000015, 0x805, 0x0) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x10}, 0x1c) sendto$inet6(r6, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @private2, 0x3ff}, 0x1c) r7 = socket(0x40000000015, 0x5, 0x0) getsockopt(r7, 0x200000000114, 0x271c, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x200040, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r8, 0x0, 0x81, &(0x7f0000000380)={'nat\x00', 0x0, 0x0, 0x0, [0x8, 0x7, 0x1, 0x7, 0x452, 0x100000001], 0x4, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x0, [{}, {}, {}, {}]}, 0xb8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x707c, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) 104.419146ms ago: executing program 2 (id=446): r0 = getpid() syz_pidfd_open(r0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) r3 = syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x40009c0e, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x40, 0x0, @fd_index=0x3, 0xf0c6}) io_uring_enter(r3, 0x2df0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x3cfa, 0x0, 0x2, 0x3b9}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) r9 = syz_io_uring_setup(0x24fa, &(0x7f0000000180)={0x0, 0xd5f1, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) write$UHID_CREATE2(r12, &(0x7f0000000040)=ANY=[@ANYBLOB='5'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r12, 0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000000)=@IORING_OP_FADVISE) io_uring_enter(r9, 0x2d3e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r6, 0x47f6, 0x0, 0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000346fc8)=ANY=[@ANYBLOB="180000000000000000000000000000006119de00000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x287b361ae6c523fa, 0x10, &(0x7f0000000000), 0x128}, 0x48) fanotify_mark(0xffffffffffffffff, 0x80, 0x8001058, 0xffffffffffffffff, 0x0) 0s ago: executing program 1 (id=447): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0xf0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000001c0)) close_range(r4, 0xffffffffffffffff, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000000)) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') read$FUSE(r7, &(0x7f0000003440)={0x2020}, 0x2020) ioctl$EVIOCGID(r7, 0x80084502, &(0x7f0000000040)=""/16) ioctl$KIOCSOUND(0xffffffffffffffff, 0x4b2f, 0x1ff) ioctl$sock_ax25_SIOCADDRT(r1, 0x890b, &(0x7f0000000180)={@default, @default, 0x3, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) quotactl_fd$Q_SYNC(r6, 0xffffffff80000101, 0x0, 0x0) r9 = accept4(r8, 0x0, 0x0, 0x80000) r10 = accept4(r9, 0x0, 0x0, 0x0) sendmmsg$inet6(r10, &(0x7f0000003b80)=[{{0x0, 0xd, &(0x7f00000003c0)=[{&(0x7f00000000c0)="e6", 0x1}], 0x1, 0x0, 0x0, 0x7000000}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000440)='&', 0x23fff}], 0x1}, 0xff03}], 0x4000070, 0x8000) kernel console output (not intermixed with test programs): dm_r:sysadm_t tclass=can_socket permissive=1 [ 72.362575][ T5938] cp2112 0003:10C4:EA90.0001: error reading lock byte: -71 [ 72.380827][ T6039] netlink: 68 bytes leftover after parsing attributes in process `syz.3.23'. [ 72.433644][ T5938] usb 1-1: USB disconnect, device number 2 [ 72.434852][ T30] audit: type=1400 audit(1752646676.663:174): avc: denied { create } for pid=6037 comm="syz.3.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 72.594432][ T30] audit: type=1400 audit(1752646676.723:175): avc: denied { write } for pid=6037 comm="syz.3.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 72.630601][ T30] audit: type=1400 audit(1752646676.723:176): avc: denied { connect } for pid=6037 comm="syz.3.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 72.654627][ T5949] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 73.191916][ T5949] usb 3-1: Using ep0 maxpacket: 16 [ 73.200971][ T5949] usb 3-1: config index 0 descriptor too short (expected 1051, got 27) [ 73.224366][ T5949] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 73.236779][ T6049] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 73.238176][ T5949] usb 3-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=7d.f9 [ 73.260487][ T5949] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.444541][ T5949] usb 3-1: Product: syz [ 73.448776][ T5949] usb 3-1: Manufacturer: syz [ 73.464500][ T5949] usb 3-1: SerialNumber: syz [ 73.534813][ T6056] capability: warning: `syz.0.27' uses 32-bit capabilities (legacy support in use) [ 74.437749][ T5949] usb 3-1: config 0 descriptor?? [ 74.926717][ T6068] netlink: 'syz.0.31': attribute type 4 has an invalid length. [ 74.934418][ T6068] netlink: 152 bytes leftover after parsing attributes in process `syz.0.31'. [ 74.969111][ T6068] : renamed from bond0 (while UP) [ 75.163635][ T6042] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.212150][ T6042] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.273895][ T6075] loop2: detected capacity change from 0 to 7 [ 75.297230][ T6075] Dev loop2: unable to read RDB block 7 [ 75.302988][ T6075] loop2: AHDI p1 p2 p3 [ 75.307254][ T6075] loop2: partition table partially beyond EOD, truncated [ 75.315534][ T6075] loop2: p1 start 1601398130 is beyond EOD, truncated [ 75.322393][ T6075] loop2: p2 start 1702059890 is beyond EOD, truncated [ 76.368536][ T6096] Zero length message leads to an empty skb [ 76.460521][ T6102] ======================================================= [ 76.460521][ T6102] WARNING: The mand mount option has been deprecated and [ 76.460521][ T6102] and is ignored by this kernel. Remove the mand [ 76.460521][ T6102] option from the mount to silence this warning. [ 76.460521][ T6102] ======================================================= [ 76.565507][ T6102] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 76.831100][ T30] kauditd_printk_skb: 34 callbacks suppressed [ 76.831113][ T30] audit: type=1400 audit(1752646680.793:211): avc: denied { mount } for pid=6090 comm="syz.4.37" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 76.882903][ T6097] netlink: 4 bytes leftover after parsing attributes in process `syz.1.36'. [ 76.907509][ T6097] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 76.939711][ T30] audit: type=1400 audit(1752646680.813:212): avc: denied { mounton } for pid=6090 comm="syz.4.37" path="/6/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 76.961518][ C0] vkms_vblank_simulate: vblank timer overrun [ 78.143340][ T30] audit: type=1400 audit(1752646680.823:213): avc: denied { mount } for pid=6090 comm="syz.4.37" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 78.164900][ C0] vkms_vblank_simulate: vblank timer overrun [ 78.178416][ T30] audit: type=1400 audit(1752646680.853:214): avc: denied { unlink } for pid=6090 comm="syz.4.37" name="#1" dev="tmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 78.266668][ T30] audit: type=1400 audit(1752646682.553:215): avc: denied { write } for pid=6108 comm="syz.3.39" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 78.274511][ T5949] usb 3-1: USB disconnect, device number 3 [ 78.372166][ T30] audit: type=1400 audit(1752646682.653:216): avc: denied { unmount } for pid=5838 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 79.543720][ T30] audit: type=1400 audit(1752646683.833:217): avc: denied { append } for pid=6123 comm="syz.4.43" name="media0" dev="devtmpfs" ino=929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 79.566221][ C0] vkms_vblank_simulate: vblank timer overrun [ 79.593709][ T6125] netdevsim netdevsim1: Firmware load for '..' refused, path contains '..' component [ 79.604862][ T6124] netdevsim netdevsim1: Firmware load for '..' refused, path contains '..' component [ 79.616182][ T6130] netlink: 'syz.1.42': attribute type 10 has an invalid length. [ 79.635345][ T6130] team0: Device ipvlan1 failed to register rx_handler [ 79.670209][ T30] audit: type=1400 audit(1752646683.883:218): avc: denied { ioctl } for pid=6122 comm="syz.1.42" path="socket:[7657]" dev="sockfs" ino=7657 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 79.694425][ C0] vkms_vblank_simulate: vblank timer overrun [ 79.746503][ T6134] netlink: 272 bytes leftover after parsing attributes in process `syz.3.44'. [ 79.776342][ T30] audit: type=1400 audit(1752646683.923:219): avc: denied { ioctl } for pid=6123 comm="syz.4.43" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 79.801617][ C0] vkms_vblank_simulate: vblank timer overrun [ 79.908354][ T6139] netlink: 8 bytes leftover after parsing attributes in process `syz.1.45'. [ 79.917706][ T6139] netlink: 4 bytes leftover after parsing attributes in process `syz.1.45'. [ 79.953235][ T6140] netlink: 272 bytes leftover after parsing attributes in process `syz.4.46'. [ 81.037458][ T30] audit: type=1400 audit(1752646685.253:220): avc: denied { unmount } for pid=5825 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 81.105053][ T6111] netlink: 12 bytes leftover after parsing attributes in process `syz.2.40'. [ 83.097811][ T30] audit: type=1400 audit(1752646687.383:221): avc: denied { create } for pid=6157 comm="syz.0.50" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 83.405358][ T30] audit: type=1400 audit(1752646687.683:222): avc: denied { sys_module } for pid=6170 comm="syz.0.55" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 83.927771][ T30] audit: type=1400 audit(1752646687.683:223): avc: denied { write } for pid=6170 comm="syz.0.55" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 84.204426][ T30] audit: type=1400 audit(1752646688.493:224): avc: denied { ioctl } for pid=6179 comm="syz.0.58" path="socket:[8977]" dev="sockfs" ino=8977 ioctlcmd=0x583b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 84.958153][ T30] audit: type=1400 audit(1752646689.213:225): avc: denied { bind } for pid=6179 comm="syz.0.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 85.039188][ T30] audit: type=1400 audit(1752646689.323:226): avc: denied { create } for pid=6190 comm="syz.2.60" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 85.344907][ T6189] evm: overlay not supported [ 85.372189][ T30] audit: type=1400 audit(1752646689.363:227): avc: denied { connect } for pid=6190 comm="syz.2.60" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 85.450237][ T6191] netlink: 68 bytes leftover after parsing attributes in process `syz.2.60'. [ 85.459359][ T30] audit: type=1400 audit(1752646689.363:228): avc: denied { create } for pid=6188 comm="syz.1.59" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 85.490076][ T30] audit: type=1400 audit(1752646689.703:229): avc: denied { create } for pid=6192 comm="syz.0.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 85.569743][ T30] audit: type=1400 audit(1752646689.703:230): avc: denied { write } for pid=6192 comm="syz.0.61" path="socket:[9069]" dev="sockfs" ino=9069 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 87.142794][ T6213] netlink: 16 bytes leftover after parsing attributes in process `syz.1.62'. [ 87.169207][ T6213] pim6reg: entered allmulticast mode [ 88.551747][ T6237] netlink: 4 bytes leftover after parsing attributes in process `syz.4.72'. [ 88.596801][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 88.596815][ T30] audit: type=1400 audit(1752646692.883:240): avc: denied { write } for pid=6230 comm="syz.2.70" lport=17 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 90.160379][ T30] audit: type=1400 audit(1752646694.443:241): avc: denied { write } for pid=6243 comm="syz.1.74" name="ipv6_route" dev="proc" ino=4026532988 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 90.356101][ T6253] fuse: Bad value for 'user_id' [ 90.386092][ T6253] fuse: Bad value for 'user_id' [ 90.450098][ T30] audit: type=1400 audit(1752646694.673:242): avc: denied { create } for pid=6247 comm="syz.3.76" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 90.592581][ T5834] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 90.682710][ T6255] netlink: 'syz.2.77': attribute type 4 has an invalid length. [ 90.690559][ T6255] netlink: 152 bytes leftover after parsing attributes in process `syz.2.77'. [ 90.691946][ T30] audit: type=1400 audit(1752646694.673:243): avc: denied { write } for pid=6247 comm="syz.3.76" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 90.715389][ T6255] : renamed from bond0 (while UP) [ 90.890071][ T5834] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 90.905001][ T5834] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 90.917813][ T5834] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 90.933452][ T30] audit: type=1400 audit(1752646695.023:244): avc: denied { audit_write } for pid=6246 comm="syz.2.77" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 90.989775][ T5834] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 91.002983][ T6242] delete_channel: no stack [ 91.086348][ T5834] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 91.106513][ T5834] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 91.249475][ T30] audit: type=1400 audit(1752646695.523:245): avc: denied { setopt } for pid=6256 comm="syz.3.79" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 91.294913][ T5834] usb 5-1: Manufacturer: syz [ 91.444450][ T5834] usb 5-1: config 0 descriptor?? [ 91.466192][ T30] audit: type=1400 audit(1752646695.523:246): avc: denied { read } for pid=6256 comm="syz.3.79" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 91.509055][ T6262] netlink: 20 bytes leftover after parsing attributes in process `syz.1.81'. [ 91.839779][ T30] audit: type=1400 audit(1752646696.123:247): avc: denied { name_bind } for pid=6264 comm="syz.0.80" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 91.901973][ T30] audit: type=1400 audit(1752646696.123:248): avc: denied { node_bind } for pid=6264 comm="syz.0.80" saddr=::1 src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 91.922914][ C1] vkms_vblank_simulate: vblank timer overrun [ 91.982765][ T5834] rc_core: IR keymap rc-hauppauge not found [ 92.712409][ T5834] Registered IR keymap rc-empty [ 92.728361][ T5834] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 92.768304][ T5834] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 92.812062][ T5834] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 92.865212][ T5834] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input5 [ 92.935648][ T5834] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 92.942777][ T6276] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 92.942822][ T6276] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 92.944820][ T6276] vhci_hcd vhci_hcd.0: Device attached [ 92.979057][ T30] audit: type=1400 audit(1752646697.263:249): avc: denied { read } for pid=5187 comm="acpid" name="event4" dev="devtmpfs" ino=2816 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 93.010794][ T5834] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 93.041092][ T5834] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 93.056372][ T6276] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=6276 comm=syz.3.85 [ 93.069147][ T5834] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 93.089778][ T5834] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 93.109782][ T5834] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 93.121834][ T5898] vhci_hcd: vhci_device speed not set [ 93.131098][ T6281] bond0: entered promiscuous mode [ 93.136151][ T6281] bond0: entered allmulticast mode [ 93.139783][ T5834] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 93.159917][ T5834] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 93.165744][ T6281] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.179789][ T5834] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 93.182062][ T5898] usb 39-1: new full-speed USB device number 2 using vhci_hcd [ 93.199943][ T5834] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 93.228563][ T6274] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.241543][ T5834] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 93.259781][ T5834] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 93.293058][ T5834] usb 5-1: USB disconnect, device number 6 [ 93.320041][ T5938] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 93.363819][ T6274] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.401409][ T6283] netlink: 8 bytes leftover after parsing attributes in process `syz.2.84'. [ 93.443505][ T6274] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.489719][ T5938] usb 4-1: Using ep0 maxpacket: 32 [ 93.507022][ T5938] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 93.521001][ T5938] usb 4-1: config 0 has no interface number 0 [ 93.536685][ T6274] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.556899][ T5938] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 93.577035][ T5938] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.592141][ T5938] usb 4-1: Product: syz [ 93.596707][ T5938] usb 4-1: Manufacturer: syz [ 93.601387][ T5938] usb 4-1: SerialNumber: syz [ 93.612060][ T5938] usb 4-1: config 0 descriptor?? [ 93.641923][ T5938] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 93.701380][ T6274] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.728845][ T6274] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.802610][ T6274] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.863442][ T5938] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 93.919308][ T5938] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 93.930766][ T6274] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.413419][ T6306] netlink: 'syz.3.85': attribute type 4 has an invalid length. [ 94.449720][ T5957] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 94.478331][ T6276] netlink: 'syz.3.85': attribute type 4 has an invalid length. [ 94.534427][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 94.534884][ T5834] usb 4-1: USB disconnect, device number 6 [ 94.557723][ T5834] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 94.571802][ T6279] vhci_hcd: connection reset by peer [ 94.584052][ T5834] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 94.588617][ T3558] vhci_hcd: stop threads [ 94.605174][ T5957] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.621280][ T3558] vhci_hcd: release socket [ 94.626422][ T3558] vhci_hcd: disconnect device [ 94.637054][ T5834] quatech2 4-1:0.51: device disconnected [ 94.646698][ T5957] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 94.672191][ T5957] usb 2-1: New USB device found, idVendor=046d, idProduct=c623, bcdDevice= 0.00 [ 94.686934][ T5957] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.706215][ T5957] usb 2-1: config 0 descriptor?? [ 95.034137][ T6319] netlink: 'syz.4.93': attribute type 4 has an invalid length. [ 95.043054][ T6319] netlink: 152 bytes leftover after parsing attributes in process `syz.4.93'. [ 95.100851][ T6319] : renamed from bond0 (while UP) [ 95.230938][ T5957] logitech 0003:046D:C623.0002: item fetching failed at offset 5/7 [ 95.316403][ T5957] logitech 0003:046D:C623.0002: parse failed [ 95.340075][ T5957] logitech 0003:046D:C623.0002: probe with driver logitech failed with error -22 [ 95.362832][ T5957] usb 2-1: USB disconnect, device number 2 [ 95.485136][ T6306] syz.3.85 (6306) used greatest stack depth: 21272 bytes left [ 95.529553][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 95.529568][ T30] audit: type=1400 audit(1752646699.813:252): avc: denied { mount } for pid=6324 comm="syz.4.95" name="/" dev="hugetlbfs" ino=9636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 95.614059][ T6327] ptrace attach of "./syz-executor exec"[5838] was attempted by "./syz-executor exec"[6327] [ 95.662933][ T6327] overlayfs: failed to resolve './file1': -2 [ 95.686435][ T30] audit: type=1400 audit(1752646699.943:253): avc: denied { mounton } for pid=6324 comm="syz.4.95" path="/16/file1/bus" dev="hugetlbfs" ino=9638 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=dir permissive=1 [ 95.792933][ T6328] netlink: 328 bytes leftover after parsing attributes in process `syz.3.96'. [ 96.636159][ T6327] netlink: 44 bytes leftover after parsing attributes in process `syz.4.95'. [ 96.793159][ T30] audit: type=1400 audit(1752646699.973:254): avc: denied { shutdown } for pid=6322 comm="syz.0.94" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 97.816469][ T30] audit: type=1400 audit(1752646700.393:255): avc: denied { getopt } for pid=6322 comm="syz.0.94" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 98.059491][ T30] audit: type=1400 audit(1752646700.413:256): avc: denied { setopt } for pid=6322 comm="syz.0.94" laddr=::ffff:172.20.20.59 lport=60543 faddr=::ffff:172.20.20.59 fport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 98.380777][ T5898] vhci_hcd: vhci_device speed not set [ 98.460375][ T30] audit: type=1400 audit(1752646700.693:257): avc: denied { unmount } for pid=5827 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 98.879110][ T30] audit: type=1400 audit(1752646701.283:258): avc: denied { bind } for pid=6333 comm="syz.1.98" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 98.966238][ T6352] 9pnet_virtio: no channels available for device syz [ 99.426209][ T30] audit: type=1400 audit(1752646701.283:259): avc: denied { name_bind } for pid=6333 comm="syz.1.98" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 99.545940][ T6354] netlink: 4 bytes leftover after parsing attributes in process `syz.4.101'. [ 99.554947][ T30] audit: type=1400 audit(1752646701.293:260): avc: denied { node_bind } for pid=6333 comm="syz.1.98" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 99.579231][ T30] audit: type=1400 audit(1752646701.303:261): avc: denied { block_suspend } for pid=6333 comm="syz.1.98" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 99.805263][ T6362] netlink: 1010 bytes leftover after parsing attributes in process `syz.3.103'. [ 99.846821][ T6362] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 99.968743][ T6369] kvm: kvm [6368]: vcpu0, guest rIP: 0xfff0 Unhandled RDMSR(0x4000008c) [ 100.191020][ T6381] netlink: 156 bytes leftover after parsing attributes in process `syz.2.107'. [ 100.345207][ T6381] process 'syz.2.107' launched './file0' with NULL argv: empty string added [ 101.525498][ T6399] netlink: 8 bytes leftover after parsing attributes in process `syz.1.112'. [ 101.560734][ T6399] team_slave_0: entered promiscuous mode [ 101.566535][ T6399] team_slave_1: entered promiscuous mode [ 101.582694][ T6399] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 101.648206][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 101.648222][ T30] audit: type=1400 audit(1752646705.933:282): avc: denied { map } for pid=6402 comm="syz.1.113" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 101.684482][ T30] audit: type=1400 audit(1752646705.963:283): avc: denied { sqpoll } for pid=6402 comm="syz.1.113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 101.704073][ T30] audit: type=1400 audit(1752646705.973:284): avc: denied { listen } for pid=6402 comm="syz.1.113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 101.724004][ T30] audit: type=1400 audit(1752646705.973:285): avc: denied { accept } for pid=6402 comm="syz.1.113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 102.149719][ T6379] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 102.149745][ T5840] Bluetooth: hci2: command 0x0c1a tx timeout [ 102.815464][ T30] audit: type=1400 audit(1752646707.103:286): avc: denied { watch } for pid=6413 comm="syz.2.115" path="/21" dev="tmpfs" ino=124 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 102.867686][ T6379] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 102.881268][ T6379] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 102.892580][ T6379] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 102.899101][ T6379] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 102.905955][ T6379] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 102.915470][ T6379] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 102.918123][ T30] audit: type=1400 audit(1752646707.203:287): avc: denied { create } for pid=6415 comm="syz.2.116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 102.923494][ T6379] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 102.941564][ T30] audit: type=1400 audit(1752646707.203:288): avc: denied { ioctl } for pid=6415 comm="syz.2.116" path="socket:[9964]" dev="sockfs" ino=9964 ioctlcmd=0x940d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 102.952202][ T30] audit: type=1400 audit(1752646707.243:289): avc: denied { listen } for pid=6415 comm="syz.2.116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 102.993462][ T30] audit: type=1400 audit(1752646707.283:290): avc: denied { write } for pid=6415 comm="syz.2.116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 103.014640][ T6379] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 103.022555][ T6379] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 103.029022][ T6379] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 103.036775][ T6379] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 103.043470][ T6379] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 103.049434][ T6379] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 103.057465][ T6379] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 103.226243][ T30] audit: type=1400 audit(1752646707.513:291): avc: denied { mounton } for pid=6421 comm="syz.2.118" path="/23/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 103.228231][ T6422] netlink: 4 bytes leftover after parsing attributes in process `syz.2.118'. [ 103.299898][ T55] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 103.398478][ T6426] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 103.449760][ T55] usb 2-1: device descriptor read/64, error -71 [ 103.473423][ T6437] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.482371][ T6437] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.501092][ T6427] netlink: 4 bytes leftover after parsing attributes in process `syz.2.118'. [ 103.540989][ T6439] fuse: Bad value for 'user_id' [ 103.546048][ T6439] fuse: Bad value for 'user_id' [ 103.689877][ T55] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 103.709783][ T5834] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 103.896760][ T5834] usb 4-1: Using ep0 maxpacket: 32 [ 103.909069][ T5834] usb 4-1: config 0 interface 0 has no altsetting 0 [ 103.925460][ T5834] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 103.943532][ T5834] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.979832][ T55] usb 2-1: device descriptor read/64, error -71 [ 103.999711][ T5834] usb 4-1: Product: syz [ 104.006360][ T5834] usb 4-1: Manufacturer: syz [ 104.011107][ T5834] usb 4-1: SerialNumber: syz [ 104.018130][ T5834] usb 4-1: config 0 descriptor?? [ 104.100217][ T55] usb usb2-port1: attempt power cycle [ 104.249728][ T5840] Bluetooth: hci2: command 0x0c1a tx timeout [ 104.374466][ T5834] gs_usb 4-1:0.0: Couldn't send data format (err=-71) [ 104.381287][ T5834] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -71 [ 104.392935][ T5834] usb 4-1: USB disconnect, device number 7 [ 104.502210][ T55] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 104.580347][ T55] usb 2-1: device descriptor read/8, error -71 [ 104.647019][ T6442] netlink: 56 bytes leftover after parsing attributes in process `syz.0.123'. [ 104.958701][ T6452] netlink: 4 bytes leftover after parsing attributes in process `syz.3.126'. [ 104.985713][ T5840] Bluetooth: hci1: command 0x0c1a tx timeout [ 104.989701][ T5833] Bluetooth: hci0: command 0x0c1a tx timeout [ 105.153876][ T5833] Bluetooth: hci3: command 0x0c1a tx timeout [ 105.153896][ T5840] Bluetooth: hci4: command 0x0c1a tx timeout [ 105.162072][ T55] usb 2-1: new low-speed USB device number 6 using dummy_hcd [ 105.192103][ T55] usb 2-1: unable to get BOS descriptor or descriptor too short [ 105.204129][ T55] usb 2-1: config 1 interface 0 altsetting 207 endpoint 0x81 has invalid maxpacket 16, setting to 8 [ 105.259410][ T55] usb 2-1: config 1 interface 0 has no altsetting 0 [ 105.268340][ T55] usb 2-1: language id specifier not provided by device, defaulting to English [ 105.287063][ T55] usb 2-1: New USB device found, idVendor=1130, idProduct=3101, bcdDevice= 0.40 [ 105.298304][ T55] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.303929][ T6452] team0: Port device team_slave_0 removed [ 105.306664][ T55] usb 2-1: Manufacturer: 㬋ﮬ뜞䆌ᙳᾴ⢓äªî‘™áœƒëž¨ë‹†ï »èŠšï­Žá¥˜æŽŽë¬—䷄㪭毦祒ꂄ⪕㇗ሑ땃㢽꺗ꪒ悓䒬簾å¼ë”¶ë˜ç¾”⊽ã£ï¸®ç–Šã­¶ï§¸çªé—£éŸ©ä»”齄撎랙椱ᩊ๿匼å¨ç–‚䄨蛽홺嘬㶱〡糒솜ç¬å«³â’éŒæ»ƒå¸”蚚幾캧ã¢ï–«ì•˜ê¹½â•œí‹»ã³ƒëœ§à ©éªèº‰ë ‰ì˜¶è¾µé’芓徂ãžîˆŠ [ 105.802594][ T6449] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 106.146663][ T6447] netlink: 4 bytes leftover after parsing attributes in process `syz.2.124'. [ 106.309840][ T5840] Bluetooth: hci2: command 0x0c1a tx timeout [ 106.433749][ T55] usbhid 2-1:1.0: can't add hid device: -71 [ 106.449033][ T55] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 106.710611][ T5940] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 106.759770][ T55] usb 2-1: USB disconnect, device number 6 [ 106.992807][ T5940] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 107.014168][ T5940] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 107.041623][ T5940] usb 5-1: config 1 has no interface number 0 [ 107.049825][ T5840] Bluetooth: hci1: command 0x0c1a tx timeout [ 107.055854][ T5840] Bluetooth: hci0: command 0x0c1a tx timeout [ 107.104482][ T5940] usb 5-1: config 1 interface 2 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 107.118534][ T5940] usb 5-1: Duplicate descriptor for config 1 interface 2 altsetting 0, skipping [ 107.129961][ T5940] usb 5-1: config 1 interface 2 has no altsetting 1 [ 107.138519][ T5940] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 107.151265][ T5940] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.159314][ T5940] usb 5-1: Product: syz [ 107.163630][ T5898] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 107.175657][ T5940] usb 5-1: Manufacturer: syz [ 107.181117][ T5940] usb 5-1: SerialNumber: syz [ 107.189981][ T5840] Bluetooth: hci4: command 0x0c1a tx timeout [ 107.206989][ T6495] netlink: 4 bytes leftover after parsing attributes in process `syz.0.137'. [ 107.244940][ T6495] loop2: detected capacity change from 0 to 7 [ 107.254918][ T5840] Bluetooth: hci3: command 0x0c1a tx timeout [ 107.319946][ T5898] usb 4-1: device descriptor read/64, error -71 [ 107.327002][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 107.327029][ T30] audit: type=1400 audit(1752646711.493:301): avc: denied { getopt } for pid=6485 comm="syz.0.137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 107.447023][ T6495] Dev loop2: unable to read RDB block 7 [ 107.452782][ T6495] loop2: unable to read partition table [ 107.458600][ T6495] loop2: partition table beyond EOD, truncated [ 107.464827][ T6495] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 107.497565][ T5957] usb 5-1: USB disconnect, device number 7 [ 107.569853][ T5834] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 107.624940][ T5202] Dev loop2: unable to read RDB block 7 [ 107.631478][ T5202] loop2: unable to read partition table [ 107.637411][ T5202] loop2: partition table beyond EOD, truncated [ 107.704231][ T5898] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 107.720850][ T5834] usb 2-1: Using ep0 maxpacket: 32 [ 107.733786][ T5834] usb 2-1: unable to get BOS descriptor or descriptor too short [ 107.744954][ T5834] usb 2-1: config 6 has an invalid interface number: 163 but max is 0 [ 107.777452][ T5834] usb 2-1: config 6 has no interface number 0 [ 107.784054][ T5834] usb 2-1: config 6 interface 163 altsetting 129 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 107.795430][ T5834] usb 2-1: config 6 interface 163 has no altsetting 0 [ 107.804557][ T5834] usb 2-1: New USB device found, idVendor=07fa, idProduct=0847, bcdDevice=ec.da [ 107.823112][ T5834] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.831552][ T5834] usb 2-1: Product: syz [ 107.835720][ T5834] usb 2-1: Manufacturer: syz [ 107.840743][ T5834] usb 2-1: SerialNumber: syz [ 107.870374][ T6498] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 107.899791][ T5898] usb 4-1: device descriptor read/64, error -71 [ 108.181888][ T5898] usb usb4-port1: attempt power cycle [ 108.534176][ T30] audit: type=1400 audit(1752646712.443:302): avc: denied { setopt } for pid=6499 comm="syz.0.140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 108.555003][ T6493] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 108.606887][ T30] audit: type=1400 audit(1752646712.893:303): avc: denied { search } for pid=5497 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 108.657154][ T5834] HFC-S_USB 2-1:6.163: probe with driver HFC-S_USB failed with error -5 [ 108.677736][ T30] audit: type=1400 audit(1752646712.923:304): avc: denied { search } for pid=5497 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 108.701922][ T5834] usb 2-1: USB disconnect, device number 7 [ 108.764883][ T6511] netlink: 'syz.2.142': attribute type 12 has an invalid length. [ 108.773037][ T6511] netlink: 'syz.2.142': attribute type 29 has an invalid length. [ 108.784365][ T30] audit: type=1400 audit(1752646712.923:305): avc: denied { search } for pid=5497 comm="dhcpcd" name="data" dev="tmpfs" ino=13 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 108.806104][ T30] audit: type=1400 audit(1752646712.923:306): avc: denied { read } for pid=5497 comm="dhcpcd" name="n100" dev="tmpfs" ino=2600 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 108.829994][ T6511] netlink: 148 bytes leftover after parsing attributes in process `syz.2.142'. [ 108.848202][ T30] audit: type=1400 audit(1752646712.923:307): avc: denied { open } for pid=5497 comm="dhcpcd" path="/run/udev/data/n100" dev="tmpfs" ino=2600 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 108.859695][ T5898] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 108.873436][ T6511] netlink: 59 bytes leftover after parsing attributes in process `syz.2.142'. [ 108.916927][ T5898] usb 4-1: device descriptor read/8, error -71 [ 108.928028][ T6512] vlan2: entered allmulticast mode [ 108.939923][ T6512] erspan0: entered allmulticast mode [ 108.955577][ T30] audit: type=1400 audit(1752646712.923:308): avc: denied { getattr } for pid=5497 comm="dhcpcd" path="/run/udev/data/n100" dev="tmpfs" ino=2600 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 109.005033][ T30] audit: type=1400 audit(1752646713.273:309): avc: denied { read open } for pid=6518 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1844 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 109.069967][ T30] audit: type=1400 audit(1752646713.273:310): avc: denied { getattr } for pid=6518 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1844 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 109.111295][ T5844] Bluetooth: hci1: command 0x0c1a tx timeout [ 109.117774][ T5833] Bluetooth: hci0: command 0x0c1a tx timeout [ 109.181165][ T6530] netlink: 4 bytes leftover after parsing attributes in process `syz.0.145'. [ 109.190214][ T6530] netlink: 4 bytes leftover after parsing attributes in process `syz.0.145'. [ 109.212057][ T6530] netlink: 4 bytes leftover after parsing attributes in process `syz.0.145'. [ 109.221062][ T6530] netlink: 4 bytes leftover after parsing attributes in process `syz.0.145'. [ 109.230053][ T6530] netlink: 4 bytes leftover after parsing attributes in process `syz.0.145'. [ 109.239166][ T6530] netlink: 4 bytes leftover after parsing attributes in process `syz.0.145'. [ 109.248501][ T6530] netlink: 4 bytes leftover after parsing attributes in process `syz.0.145'. [ 109.269721][ T5833] Bluetooth: hci3: command 0x0c1a tx timeout [ 109.276051][ T5833] Bluetooth: hci4: command 0x0c1a tx timeout [ 109.606516][ T5898] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 109.663192][ T5898] usb 4-1: device descriptor read/8, error -71 [ 109.820867][ T5898] usb usb4-port1: unable to enumerate USB device [ 110.243381][ T6540] overlayfs: failed to resolve './file1': -2 [ 110.352329][ T2936] Bluetooth: hci5: Frame reassembly failed (-84) [ 110.486774][ T6553] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 110.550290][ T6557] netlink: 'syz.3.150': attribute type 4 has an invalid length. [ 111.542899][ T5844] Bluetooth: hci4: command 0x0c1a tx timeout [ 111.824242][ T6546] delete_channel: no stack [ 111.931215][ T6580] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 112.415494][ T6592] netlink: 'syz.4.159': attribute type 4 has an invalid length. [ 112.426654][ T6592] __nla_validate_parse: 47 callbacks suppressed [ 112.426681][ T6592] netlink: 152 bytes leftover after parsing attributes in process `syz.4.159'. [ 112.463950][ T5844] Bluetooth: hci5: command 0xfc11 tx timeout [ 112.470893][ T5840] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 112.984188][ T6605] netlink: 1 bytes leftover after parsing attributes in process `syz.4.161'. [ 113.063720][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 113.063736][ T30] audit: type=1400 audit(1752646717.343:324): avc: denied { map } for pid=6601 comm="syz.4.161" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 113.092566][ C0] vkms_vblank_simulate: vblank timer overrun [ 113.904467][ T6617] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.969735][ T6617] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 114.042256][ T6624] netlink: 12 bytes leftover after parsing attributes in process `syz.1.165'. [ 114.060268][ T30] audit: type=1400 audit(1752646718.353:325): avc: denied { read } for pid=6623 comm="syz.1.165" path="socket:[11294]" dev="sockfs" ino=11294 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 114.154003][ T6617] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.175596][ T6617] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 114.176949][ T30] audit: type=1400 audit(1752646718.463:326): avc: denied { ioctl } for pid=6621 comm="syz.2.164" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 114.211005][ C0] vkms_vblank_simulate: vblank timer overrun [ 114.296344][ T6617] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.312031][ T6617] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 114.449884][ T30] audit: type=1400 audit(1752646718.733:327): avc: denied { read write } for pid=6630 comm="syz.1.167" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 114.473200][ C0] vkms_vblank_simulate: vblank timer overrun [ 114.520798][ T30] audit: type=1400 audit(1752646718.733:328): avc: denied { open } for pid=6630 comm="syz.1.167" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 114.544021][ C0] vkms_vblank_simulate: vblank timer overrun [ 114.606633][ T6617] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.619898][ T6617] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 114.631657][ T6638] netlink: 'syz.2.169': attribute type 1 has an invalid length. [ 114.656289][ T6638] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 114.938133][ T6652] netlink: 'syz.2.171': attribute type 4 has an invalid length. [ 114.954381][ T6652] netlink: 152 bytes leftover after parsing attributes in process `syz.2.171'. [ 115.440229][ T30] audit: type=1400 audit(1752646719.663:329): avc: denied { watch } for pid=6653 comm="syz.2.172" path="/37/file1" dev="tmpfs" ino=219 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 115.710439][ T30] audit: type=1400 audit(1752646719.673:330): avc: denied { watch_sb watch_reads } for pid=6653 comm="syz.2.172" path="/37/file1" dev="tmpfs" ino=219 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 115.868928][ T30] audit: type=1400 audit(1752646720.153:331): avc: denied { create } for pid=6645 comm="syz.1.170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 115.908778][ T6617] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 115.932381][ T6617] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 115.942738][ T30] audit: type=1400 audit(1752646720.153:332): avc: denied { connect } for pid=6645 comm="syz.1.170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 116.053730][ T30] audit: type=1400 audit(1752646720.183:333): avc: denied { read } for pid=6645 comm="syz.1.170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 116.057646][ T6617] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 116.072861][ C0] vkms_vblank_simulate: vblank timer overrun [ 116.087626][ T6617] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 116.173599][ T6617] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 116.238153][ T6617] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 116.322554][ T6617] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 116.369716][ T6617] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 116.550068][ T5891] usb 1-1: new low-speed USB device number 3 using dummy_hcd [ 116.919928][ T5891] usb 1-1: Invalid ep0 maxpacket: 16 [ 117.067079][ T6685] 9pnet_fd: Insufficient options for proto=fd [ 117.079696][ T5891] usb 1-1: new low-speed USB device number 4 using dummy_hcd [ 117.253737][ T5891] usb 1-1: Invalid ep0 maxpacket: 16 [ 117.260522][ T5891] usb usb1-port1: attempt power cycle [ 117.613893][ T6699] fuse: Bad value for 'group_id' [ 117.618953][ T6699] fuse: Bad value for 'group_id' [ 117.699918][ T5891] usb 1-1: new low-speed USB device number 5 using dummy_hcd [ 117.760168][ T5891] usb 1-1: Invalid ep0 maxpacket: 16 [ 117.880767][ T5940] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 117.900190][ T5891] usb 1-1: new low-speed USB device number 6 using dummy_hcd [ 117.950562][ T5891] usb 1-1: Invalid ep0 maxpacket: 16 [ 117.978485][ T5891] usb usb1-port1: unable to enumerate USB device [ 118.042926][ T6718] binder: 6714:6718 ioctl c018620c 200000000000 returned -22 [ 118.081566][ T5940] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 118.101588][ T5940] usb 3-1: config 0 has no interface number 0 [ 118.124893][ T5940] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.160933][ T5940] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.187972][ T5940] usb 3-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 118.235019][ T5940] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.293667][ T5940] usb 3-1: config 0 descriptor?? [ 118.355410][ T6721] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 118.365846][ T6721] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 118.413727][ T6721] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 118.423746][ T6721] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 118.521666][ T6721] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 118.531717][ T6721] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 118.585516][ T6721] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 118.596010][ T6721] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 118.766164][ T5940] prodikeys 0003:041E:2801.0003: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.2-1/input1 [ 118.794588][ T5940] hid_prodikeys: hid-prodikeys: failed to find output report [ 118.794588][ T5940] [ 118.993032][ T5891] usb 3-1: USB disconnect, device number 4 [ 119.362972][ T6755] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.415365][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 119.415380][ T30] audit: type=1400 audit(1752646723.703:341): avc: denied { read write } for pid=6762 comm="syz.0.194" name="sg0" dev="devtmpfs" ino=740 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 119.461548][ T6763] sg_write: data in/out 524252/14 bytes for SCSI command 0x0-- guessing data in; [ 119.461548][ T6763] program syz.0.194 not setting count and/or reply_len properly [ 119.481886][ T30] audit: type=1400 audit(1752646723.743:342): avc: denied { open } for pid=6762 comm="syz.0.194" path="/dev/sg0" dev="devtmpfs" ino=740 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 119.522511][ T6755] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.605820][ T6755] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.725323][ T6755] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.739806][ T5884] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 119.994665][ T6721] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 120.006708][ T6721] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 120.019826][ T6721] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 120.028178][ T6721] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 120.040627][ T6721] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 120.048979][ T6721] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 120.061520][ T6721] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 120.069892][ T6721] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 120.180259][ T5898] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 120.460457][ T5898] usb 3-1: Using ep0 maxpacket: 32 [ 120.794078][ T5884] usb 1-1: Using ep0 maxpacket: 32 [ 121.523700][ T5884] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 53, using maximum allowed: 30 [ 121.534805][ T5884] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 53 [ 121.558436][ T5884] usb 1-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 121.567922][ T5884] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.576135][ T5884] usb 1-1: Product: syz [ 121.580415][ T5884] usb 1-1: Manufacturer: syz [ 121.585079][ T5884] usb 1-1: SerialNumber: syz [ 121.623927][ T5884] usb 1-1: config 0 descriptor?? [ 121.648732][ T5898] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 121.922658][ T5898] usb 3-1: config 0 has no interface number 0 [ 121.929127][ T6755] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.942877][ T5898] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.971233][ T6755] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.987003][ T5898] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.344149][ T5898] usb 3-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 122.374025][ T6755] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.399735][ T5898] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.411853][ T6763] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.415945][ T6755] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.426397][ T6763] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.449290][ T5898] usb 3-1: config 0 descriptor?? [ 122.617966][ T30] audit: type=1400 audit(1752646726.893:343): avc: denied { mount } for pid=6775 comm="syz.3.198" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 122.697284][ T5884] peak_usb 1-1:0.0 can0: unable to request usb[type=2 value=5] err=-71 [ 122.900625][ T5898] usbhid 3-1:0.1: can't add hid device: -71 [ 122.910591][ T5898] usbhid 3-1:0.1: probe with driver usbhid failed with error -71 [ 122.941910][ T5884] peak_usb 1-1:0.0: probe with driver peak_usb failed with error -71 [ 122.952271][ T5898] usb 3-1: USB disconnect, device number 5 [ 123.500026][ T6782] geneve2: entered allmulticast mode [ 123.779888][ T5884] usb 1-1: USB disconnect, device number 7 [ 123.870413][ T30] audit: type=1400 audit(1752646728.143:344): avc: denied { create } for pid=6788 comm="syz.1.201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 123.919318][ T30] audit: type=1400 audit(1752646728.143:345): avc: denied { ioctl } for pid=6788 comm="syz.1.201" path="socket:[11155]" dev="sockfs" ino=11155 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 123.954246][ T30] audit: type=1400 audit(1752646728.243:346): avc: denied { read } for pid=6794 comm="syz.0.203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 124.004104][ T30] audit: type=1400 audit(1752646728.283:347): avc: denied { read } for pid=6791 comm="syz.3.202" name="usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 124.240910][ T30] audit: type=1400 audit(1752646728.283:348): avc: denied { open } for pid=6791 comm="syz.3.202" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 124.484824][ T30] audit: type=1400 audit(1752646728.403:349): avc: denied { ioctl } for pid=6794 comm="syz.0.203" path="/dev/ptyq4" dev="devtmpfs" ino=123 ioctlcmd=0xf515 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 125.041668][ T30] audit: type=1400 audit(1752646729.323:350): avc: denied { ioctl } for pid=6805 comm="syz.2.207" path="/dev/sg0" dev="devtmpfs" ino=740 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 125.067222][ C0] vkms_vblank_simulate: vblank timer overrun [ 125.466676][ T6820] netlink: 'syz.4.211': attribute type 4 has an invalid length. [ 125.474541][ T6820] netlink: 152 bytes leftover after parsing attributes in process `syz.4.211'. [ 125.641161][ T6821] block nbd0: NBD_DISCONNECT [ 125.647211][ T6821] block nbd0: Send disconnect failed -107 [ 125.965212][ T6809] block nbd0: Disconnected due to user request. [ 125.971657][ T6809] block nbd0: shutting down sockets [ 126.309787][ T10] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 126.631172][ T10] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC6, changing to 0x86 [ 127.397622][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 127.412272][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 127.423720][ T10] usb 2-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 127.434116][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.475547][ T10] usb 2-1: Product: syz [ 127.506946][ T10] usb 2-1: Manufacturer: syz [ 127.549875][ T10] usb 2-1: SerialNumber: syz [ 127.590722][ T10] usb 2-1: config 0 descriptor?? [ 127.621740][ T10] port100 2-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 127.755234][ T6840] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 127.767584][ T6840] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 127.846846][ T10] usb 2-1: USB disconnect, device number 8 [ 127.861801][ T6840] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 127.871677][ T6840] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 127.889706][ T5938] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 127.964709][ T6840] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 127.974720][ T6840] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 128.050312][ T5938] usb 5-1: Using ep0 maxpacket: 32 [ 128.058423][ T6840] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 128.065979][ T5938] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.068688][ T6840] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 128.093226][ T5938] usb 5-1: config 0 interface 0 has no altsetting 0 [ 128.113336][ T5938] usb 5-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 128.122667][ T5938] usb 5-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 128.132793][ T5938] usb 5-1: Product: syz [ 128.155616][ T6840] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 128.163890][ T6840] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 128.176366][ T6840] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 128.184633][ T6840] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 128.197982][ T6840] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 128.206232][ T6840] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 128.219763][ T6840] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 128.227997][ T6840] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 128.354926][ T5938] usb 5-1: config 0 descriptor?? [ 128.676745][ T6849] netlink: 12 bytes leftover after parsing attributes in process `syz.2.219'. [ 128.854823][ T6862] SELinux: Context : is not valid (left unmapped). [ 128.872303][ T5938] waterforce 0003:1044:7A4D.0004: unknown main item tag 0x0 [ 128.894415][ T6864] F2FS-fs (loop7): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 128.902640][ T30] audit: type=1400 audit(1752646733.173:351): avc: denied { create } for pid=6859 comm="syz.3.222" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 128.923578][ T6864] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 128.937070][ T5938] waterforce 0003:1044:7A4D.0004: unknown main item tag 0x0 [ 128.949197][ T6864] F2FS-fs (loop7): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 128.958708][ T5938] waterforce 0003:1044:7A4D.0004: unknown main item tag 0x0 [ 128.966522][ T6864] F2FS-fs (loop7): Can't find valid F2FS filesystem in 2th superblock [ 128.966776][ T30] audit: type=1400 audit(1752646733.203:352): avc: denied { relabelto } for pid=6861 comm="syz.1.221" name="rdma.current" dev="tmpfs" ino=279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=":" [ 128.999025][ C0] vkms_vblank_simulate: vblank timer overrun [ 129.005334][ T5938] waterforce 0003:1044:7A4D.0004: unknown main item tag 0x0 [ 129.018414][ T5938] waterforce 0003:1044:7A4D.0004: unknown main item tag 0x0 [ 129.055267][ T5938] waterforce 0003:1044:7A4D.0004: hidraw0: USB HID v0.05 Device [syz] on usb-dummy_hcd.4-1/input0 [ 129.098848][ T30] audit: type=1400 audit(1752646733.203:353): avc: denied { associate } for pid=6861 comm="syz.1.221" name="rdma.current" dev="tmpfs" ino=279 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=":" [ 129.099296][ T6869] ip6erspan0: entered allmulticast mode [ 129.145502][ T6837] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.158318][ T6864] netlink: 24 bytes leftover after parsing attributes in process `syz.3.222'. [ 129.169392][ T5938] waterforce 0003:1044:7A4D.0004: fw version request failed with -38 [ 129.178026][ T6837] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.222243][ T6837] netlink: 'syz.4.215': attribute type 1 has an invalid length. [ 129.235195][ T30] audit: type=1400 audit(1752646733.363:354): avc: denied { unlink } for pid=5829 comm="syz-executor" name="rdma.current" dev="tmpfs" ino=279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=":" [ 129.259885][ T6864] bridge0: entered promiscuous mode [ 129.349838][ T6864] macsec1: entered promiscuous mode [ 129.640433][ T6864] bridge0: port 3(macsec1) entered blocking state [ 129.662335][ T6864] bridge0: port 3(macsec1) entered disabled state [ 129.890968][ T6864] macsec1: entered allmulticast mode [ 129.896328][ T6864] bridge0: entered allmulticast mode [ 130.272275][ T6864] macsec1: left allmulticast mode [ 130.284466][ T6864] bridge0: left allmulticast mode [ 130.309221][ T6864] bridge0: left promiscuous mode [ 130.383648][ T6837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 130.536185][ T6875] bond0: (slave veth3): Enslaving as an active interface with a down link [ 130.639416][ T6877] bond0: (slave dummy0): making interface the new active one [ 130.654371][ T6877] dummy0: entered promiscuous mode [ 130.671442][ T30] audit: type=1400 audit(1752646734.963:355): avc: denied { lock } for pid=6894 comm="syz.1.230" path="socket:[13484]" dev="sockfs" ino=13484 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 130.697311][ T6877] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 131.005321][ T6881] (unnamed net_device) (uninitialized): option use_carrier: invalid value (8) [ 131.021672][ T5891] usb 5-1: USB disconnect, device number 8 [ 131.047039][ T6896] netlink: 168 bytes leftover after parsing attributes in process `syz.2.227'. [ 131.138790][ T30] audit: type=1400 audit(1752646735.413:356): avc: denied { unlink } for pid=5827 comm="syz-executor" name="file0" dev="tmpfs" ino=217 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 131.371167][ T5834] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 131.919482][ T30] audit: type=1400 audit(1752646736.203:357): avc: denied { write } for pid=6921 comm="syz.1.234" path="socket:[13514]" dev="sockfs" ino=13514 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 131.975486][ T5834] usb 1-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 131.996455][ T5834] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.287511][ T5834] usb 1-1: Product: syz [ 132.315039][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.321586][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.330443][ T3492] sl0: compressed packet ignored [ 132.339718][ T5834] usb 1-1: Manufacturer: syz [ 132.354544][ T5834] usb 1-1: SerialNumber: syz [ 132.381164][ T5834] usb 1-1: config 0 descriptor?? [ 132.400615][ T5834] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 132.457212][ T6933] vcan0: tx drop: invalid da for name 0x0000000000000004 [ 132.521327][ T6929] netlink: 'syz.4.235': attribute type 4 has an invalid length. [ 132.528978][ T6929] netlink: 152 bytes leftover after parsing attributes in process `syz.4.235'. [ 132.748637][ T6940] netlink: 4 bytes leftover after parsing attributes in process `syz.1.237'. [ 133.139087][ T6904] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.159885][ T6904] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.193716][ T5844] Bluetooth: hci4: command 0x0c1a tx timeout [ 133.414392][ T30] audit: type=1400 audit(1752646737.673:358): avc: denied { create } for pid=6941 comm="syz.2.238" name="#e" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 133.594367][ T6950] netlink: 432 bytes leftover after parsing attributes in process `syz.4.240'. [ 133.632119][ T5834] gspca_sq905c: sq905c_command: usb_control_msg failed (-110) [ 133.641691][ T5834] sq905c 1-1:0.0: probe with driver sq905c failed with error -110 [ 133.722797][ T30] audit: type=1400 audit(1752646737.673:359): avc: denied { link } for pid=6941 comm="syz.2.238" name="#e" dev="tmpfs" ino=300 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 133.744622][ C0] vkms_vblank_simulate: vblank timer overrun [ 133.758848][ T5834] usb 1-1: USB disconnect, device number 8 [ 133.759867][ T30] audit: type=1400 audit(1752646737.683:360): avc: denied { rename } for pid=6941 comm="syz.2.238" name="#f" dev="tmpfs" ino=300 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 133.801543][ T30] audit: type=1400 audit(1752646738.083:361): avc: denied { ioctl } for pid=6952 comm="syz.1.241" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x5564 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 133.834626][ T6953] mkiss: ax0: crc mode is auto. [ 133.969408][ T30] audit: type=1400 audit(1752646738.253:362): avc: denied { setopt } for pid=6957 comm="syz.1.244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 134.046650][ T30] audit: type=1400 audit(1752646738.333:363): avc: denied { ioctl } for pid=6957 comm="syz.1.244" path="socket:[13626]" dev="sockfs" ino=13626 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 134.103875][ T6958] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.124610][ T6958] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.341179][ T55] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 134.491612][ T6966] netlink: 'syz.0.245': attribute type 4 has an invalid length. [ 134.499407][ T6966] netlink: 152 bytes leftover after parsing attributes in process `syz.0.245'. [ 134.886181][ T55] usb 2-1: Using ep0 maxpacket: 32 [ 134.892863][ T55] usb 2-1: config 2 has an invalid interface number: 228 but max is 0 [ 134.904508][ T55] usb 2-1: config 2 has no interface number 0 [ 134.913735][ T55] usb 2-1: New USB device found, idVendor=0e41, idProduct=534d, bcdDevice=47.8d [ 135.409679][ T55] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.427135][ T55] usb 2-1: Product: syz [ 135.436862][ T55] usb 2-1: Manufacturer: syz [ 135.447920][ T55] usb 2-1: SerialNumber: syz [ 135.453827][ T6975] netlink: 12 bytes leftover after parsing attributes in process `syz.4.248'. [ 135.470640][ T55] snd_usb_variax 2-1:2.228: Line 6 Variax Workbench found [ 135.479023][ T6975] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 135.486891][ T55] usb 2-1: selecting invalid altsetting 1 [ 135.502112][ T55] snd_usb_variax 2-1:2.228: set_interface failed [ 135.526306][ T55] snd_usb_variax 2-1:2.228: Line 6 Variax Workbench now disconnected [ 135.546020][ T55] snd_usb_variax 2-1:2.228: probe with driver snd_usb_variax failed with error -22 [ 135.692925][ T5891] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 135.716211][ T30] audit: type=1400 audit(1752646740.003:364): avc: denied { bind } for pid=6957 comm="syz.1.244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 135.717232][ T6959] netlink: 4 bytes leftover after parsing attributes in process `syz.1.244'. [ 135.757347][ T6958] netlink: 4 bytes leftover after parsing attributes in process `syz.1.244'. [ 135.807553][ T6988] netlink: 16 bytes leftover after parsing attributes in process `syz.2.252'. [ 135.834541][ T5834] usb 2-1: USB disconnect, device number 9 [ 135.899691][ T5891] usb 1-1: Using ep0 maxpacket: 8 [ 135.905901][ T5891] usb 1-1: config 0 has an invalid interface number: 151 but max is 1 [ 135.914114][ T5891] usb 1-1: config 0 has no interface number 1 [ 135.920316][ T5891] usb 1-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 135.931305][ T5891] usb 1-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 135.942980][ T5891] usb 1-1: config 0 interface 151 altsetting 0 endpoint 0x83 has invalid maxpacket 64466, setting to 1024 [ 135.954292][ T5891] usb 1-1: config 0 interface 151 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 135.964468][ T5891] usb 1-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 135.978100][ T5891] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC9, changing to 0x89 [ 135.989605][ T5891] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 135.992108][ T55] usb 5-1: new low-speed USB device number 9 using dummy_hcd [ 135.999661][ T5891] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 136.001343][ T5891] usb 1-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 136.026601][ T5891] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.034802][ T5891] usb 1-1: Product: syz [ 136.038968][ T5891] usb 1-1: Manufacturer: syz [ 136.043577][ T5891] usb 1-1: SerialNumber: syz [ 136.049462][ T5891] usb 1-1: config 0 descriptor?? [ 136.055377][ T6973] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 136.065173][ T5891] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 136.075814][ T5891] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 136.100040][ T5891] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 136.163138][ T55] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 136.191613][ T55] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 136.201217][ T55] usb 5-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 136.213114][ T55] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 136.225331][ T55] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 136.237133][ T55] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 136.246332][ T55] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.261098][ T6985] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 136.275453][ T55] hub 5-1:1.0: bad descriptor, ignoring hub [ 136.292328][ T55] hub 5-1:1.0: probe with driver hub failed with error -5 [ 136.300327][ T55] cdc_wdm 5-1:1.0: skipping garbage [ 136.305593][ T55] cdc_wdm 5-1:1.0: skipping garbage [ 136.315725][ T55] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 136.322020][ T55] cdc_wdm 5-1:1.0: Unknown control protocol [ 136.342855][ T5891] usb 1-1: USB disconnect, device number 9 [ 136.492443][ T6985] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.508647][ T6985] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.519196][ T6985] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.528209][ T6985] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.619407][ T7005] binder: 7004:7005 ioctl c0306201 200000000280 returned -14 [ 136.650274][ T5940] usb 5-1: USB disconnect, device number 9 [ 136.766364][ T30] audit: type=1400 audit(1752646741.003:365): avc: denied { read } for pid=6999 comm="syz.1.255" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 136.820899][ T30] audit: type=1400 audit(1752646741.003:366): avc: denied { open } for pid=6999 comm="syz.1.255" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 136.845415][ C0] vkms_vblank_simulate: vblank timer overrun [ 136.887714][ T30] audit: type=1400 audit(1752646741.003:367): avc: denied { ioctl } for pid=6999 comm="syz.1.255" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 136.913711][ C0] vkms_vblank_simulate: vblank timer overrun [ 137.557567][ T7033] netlink: 272 bytes leftover after parsing attributes in process `syz.2.263'. [ 137.759674][ T5938] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 137.839490][ T7034] bridge_slave_0: invalid flags given to default FDB implementation [ 137.932202][ T5938] usb 1-1: Using ep0 maxpacket: 8 [ 137.939068][ T5938] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 137.952008][ T5938] usb 1-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 137.961251][ T5938] usb 1-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 137.987908][ T5938] usb 1-1: Product: syz [ 138.000494][ T5938] usb 1-1: Manufacturer: syz [ 138.005174][ T5938] usb 1-1: SerialNumber: syz [ 138.166893][ T30] audit: type=1400 audit(1752646742.453:368): avc: denied { read } for pid=7037 comm="syz.3.264" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 138.208135][ T30] audit: type=1400 audit(1752646742.483:369): avc: denied { open } for pid=7037 comm="syz.3.264" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 138.231569][ C0] vkms_vblank_simulate: vblank timer overrun [ 138.242864][ T30] audit: type=1400 audit(1752646742.483:370): avc: denied { ioctl } for pid=7037 comm="syz.3.264" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9379 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 138.267673][ C0] vkms_vblank_simulate: vblank timer overrun [ 138.320170][ T5938] usb 1-1: Invalid connection information received from device [ 138.517794][ T7030] capability: warning: `syz.0.262' uses deprecated v2 capabilities in a way that may be insecure [ 138.544387][ T5891] usb 1-1: USB disconnect, device number 10 [ 138.581056][ T5957] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 138.820984][ T5957] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 138.834609][ T5957] usb 4-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 138.846914][ T5957] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.855177][ T5957] usb 4-1: Product: syz [ 138.859710][ T5957] usb 4-1: Manufacturer: syz [ 139.006647][ T7047] input: syz1 as /devices/virtual/input/input8 [ 139.343054][ T5957] usb 4-1: SerialNumber: syz [ 139.361745][ T5957] usb 4-1: config 0 descriptor?? [ 139.586157][ T30] audit: type=1400 audit(1752646743.873:371): avc: denied { create } for pid=7054 comm="syz.4.269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 139.640054][ T30] audit: type=1400 audit(1752646743.913:372): avc: denied { write } for pid=7054 comm="syz.4.269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 140.928579][ T30] audit: type=1400 audit(1752646745.213:373): avc: denied { execute } for pid=7065 comm="syz.2.271" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=13836 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 141.180031][ T5884] usb 4-1: USB disconnect, device number 12 [ 141.270782][ T7076] fuse: Bad value for 'fd' [ 141.380817][ T7079] fuse: Bad value for 'fd' [ 142.018216][ T30] audit: type=1400 audit(1752646746.303:374): avc: denied { write } for pid=7085 comm="syz.2.276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 142.167699][ T30] audit: type=1400 audit(1752646746.303:375): avc: denied { wake_alarm } for pid=7060 comm="syz.1.272" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 142.470793][ T30] audit: type=1400 audit(1752646746.513:376): avc: denied { getopt } for pid=7083 comm="syz.4.277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 142.830353][ T7096] mmap: syz.2.276 (7096) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 142.969045][ T7103] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 142.990149][ T7103] overlayfs: conflicting options: userxattr,metacopy=on [ 142.999813][ T5940] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 143.020220][ T30] audit: type=1400 audit(1752646747.303:377): avc: denied { read } for pid=7102 comm="syz.0.279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 143.040641][ T55] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 143.160147][ T5940] usb 4-1: Using ep0 maxpacket: 16 [ 143.168126][ T5940] usb 4-1: unable to get BOS descriptor or descriptor too short [ 143.270513][ T5940] usb 4-1: config 129 has an invalid interface number: 198 but max is 0 [ 143.309770][ T5940] usb 4-1: config 129 has no interface number 0 [ 143.316113][ T5940] usb 4-1: config 129 interface 198 has no altsetting 0 [ 143.462762][ T30] audit: type=1400 audit(1752646747.683:378): avc: denied { write } for pid=7104 comm="syz.1.281" path="socket:[12907]" dev="sockfs" ino=12907 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 143.816023][ T55] usb 5-1: New USB device found, idVendor=041e, idProduct=400c, bcdDevice=af.98 [ 143.825244][ T5940] usb 4-1: New USB device found, idVendor=1b3d, idProduct=0174, bcdDevice=9f.8d [ 143.834414][ T5940] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.842763][ T55] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.859938][ T5940] usb 4-1: Product: syz [ 143.866044][ T5940] usb 4-1: Manufacturer: syz [ 143.871629][ T55] usb 5-1: config 0 descriptor?? [ 143.876719][ T5940] usb 4-1: SerialNumber: syz [ 143.887334][ T55] pwc: Creative Labs Webcam 5 detected. [ 144.118934][ T55] pwc: Failed to set LED on/off time (-71) [ 144.138412][ T5940] ftdi_sio 4-1:129.198: FTDI USB Serial Device converter detected [ 144.179764][ T55] pwc: send_video_command error -71 [ 144.197842][ T5940] ftdi_sio ttyUSB0: unknown device type: 0x9f8d [ 144.206013][ T55] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 144.221546][ T7112] netlink: 272 bytes leftover after parsing attributes in process `syz.1.282'. [ 144.312127][ T55] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 144.322229][ T5940] usb 4-1: USB disconnect, device number 13 [ 144.356301][ T5940] ftdi_sio 4-1:129.198: device disconnected [ 144.371118][ T55] usb 5-1: USB disconnect, device number 10 [ 145.278745][ T7122] Cannot find set identified by id 0 to match [ 145.279772][ T5957] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 145.594570][ T7129] netlink: 4 bytes leftover after parsing attributes in process `syz.1.286'. [ 145.967703][ T54] dummy0: left promiscuous mode [ 145.974429][ T5957] usb 5-1: config 1 has an invalid interface number: 160 but max is 0 [ 145.982675][ T5957] usb 5-1: config 1 has no interface number 0 [ 145.989003][ T5957] usb 5-1: config 1 interface 160 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 145.999034][ T5957] usb 5-1: config 1 interface 160 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 146.026301][ T5957] usb 5-1: New USB device found, idVendor=1385, idProduct=5f01, bcdDevice=1f.70 [ 146.059108][ T5957] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.113574][ T5957] usb 5-1: Product: syz [ 146.122452][ T5957] usb 5-1: Manufacturer: syz [ 146.129251][ T5957] usb 5-1: SerialNumber: syz [ 146.194680][ T7134] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 146.461261][ T5957] usb 5-1: Could not find all expected endpoints [ 146.909981][ T5957] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 146.958936][ T7141] netlink: 'syz.2.290': attribute type 4 has an invalid length. [ 146.967029][ T7141] netlink: 152 bytes leftover after parsing attributes in process `syz.2.290'. [ 146.969584][ T30] audit: type=1400 audit(1752646751.253:379): avc: denied { create } for pid=7121 comm="syz.4.285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 147.041331][ T7145] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.291'. [ 147.053192][ T7143] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.291'. [ 147.076428][ T7124] syz.4.285 uses obsolete (PF_INET,SOCK_PACKET) [ 147.127227][ T7145] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7145 comm=syz.0.291 [ 147.162285][ T5957] usb 2-1: config 12 has an invalid interface number: 104 but max is 0 [ 147.162310][ T5957] usb 2-1: config 12 has no interface number 0 [ 147.162341][ T5957] usb 2-1: config 12 interface 104 has no altsetting 0 [ 147.166259][ T5957] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice= 8.b0 [ 147.166280][ T5957] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.166291][ T5957] usb 2-1: Product: syz [ 147.166300][ T5957] usb 2-1: Manufacturer: syz [ 147.166309][ T5957] usb 2-1: SerialNumber: syz [ 147.428054][ T7151] netlink: 8 bytes leftover after parsing attributes in process `syz.1.289'. [ 147.576414][ T5957] appletouch 2-1:12.104: Could not find int-in endpoint [ 147.633282][ T5940] usb 5-1: USB disconnect, device number 11 [ 147.713001][ T5957] appletouch 2-1:12.104: probe with driver appletouch failed with error -5 [ 147.773908][ T5957] usbhid 2-1:12.104: couldn't find an input interrupt endpoint [ 147.847744][ T5957] usb 2-1: USB disconnect, device number 10 [ 148.376531][ T7165] overlayfs: failed to resolve './file1': -2 [ 148.646506][ T7174] sp0: Synchronizing with TNC [ 148.656997][ T7174] kAFS: unparsable volume name [ 148.687350][ T7176] netlink: 'syz.4.297': attribute type 39 has an invalid length. [ 148.991800][ T7179] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=39 sclass=netlink_route_socket pid=7179 comm=syz.3.299 [ 149.005244][ T5940] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 149.026395][ T7179] xt_policy: output policy not valid in PREROUTING and INPUT [ 149.084099][ T7181] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 149.173451][ T5940] usb 1-1: unable to get BOS descriptor or descriptor too short [ 149.186857][ T5940] usb 1-1: not running at top speed; connect to a high speed hub [ 149.209370][ T5940] usb 1-1: config 1 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 149.259703][ T5940] usb 1-1: config 1 interface 0 has no altsetting 0 [ 149.351171][ T5940] usb 1-1: New USB device found, idVendor=0eef, idProduct=0001, bcdDevice= 0.40 [ 149.361437][ T5940] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.382755][ T5940] usb 1-1: Product: syz [ 149.413912][ T5940] usb 1-1: Manufacturer: syz [ 149.418539][ T5940] usb 1-1: SerialNumber: syz [ 149.430015][ T7174] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 149.476351][ T5884] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 149.639800][ T5884] usb 4-1: Using ep0 maxpacket: 32 [ 149.869052][ T5884] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 149.871328][ T5940] usbhid 1-1:1.0: couldn't find an input interrupt endpoint [ 149.883260][ T5884] usb 4-1: config 0 has no interface number 0 [ 149.903584][ T5884] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 149.927035][ T5884] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.936242][ T5884] usb 4-1: Product: syz [ 149.941036][ T5884] usb 4-1: Manufacturer: syz [ 149.946876][ T5884] usb 4-1: SerialNumber: syz [ 149.963112][ T5940] usb 1-1: USB disconnect, device number 11 [ 149.970212][ T5884] usb 4-1: config 0 descriptor?? [ 149.984475][ T5884] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 150.199565][ T5884] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 150.234282][ T5884] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 150.549850][ T5840] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 150.600312][ T7201] __vm_enough_memory: pid: 7201, comm: syz.2.305, bytes: 21199641792512 not enough memory for the allocation [ 150.685975][ T30] audit: type=1400 audit(1752646754.953:380): avc: denied { remount } for pid=7186 comm="syz.3.301" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 150.754602][ T30] audit: type=1400 audit(1752646755.023:381): avc: denied { ioctl } for pid=7200 comm="syz.2.305" path="socket:[14213]" dev="sockfs" ino=14213 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 150.921451][ T30] audit: type=1400 audit(1752646755.023:382): avc: denied { setopt } for pid=7200 comm="syz.2.305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 150.972294][ T7223] 9pnet_fd: Insufficient options for proto=fd [ 151.069917][ T5940] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 151.232285][ T5940] usb 1-1: Using ep0 maxpacket: 32 [ 151.254571][ T5940] usb 1-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 151.328641][ T5940] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.345689][ T5940] usb 1-1: Product: syz [ 151.358099][ T5940] usb 1-1: Manufacturer: syz [ 151.368100][ T5940] usb 1-1: SerialNumber: syz [ 151.394989][ T5940] usb 1-1: config 0 descriptor?? [ 151.503626][ T30] audit: type=1400 audit(1752646755.793:383): avc: denied { validate_trans } for pid=7232 comm="syz.4.313" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 151.579977][ T55] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 151.729981][ T55] usb 2-1: device descriptor read/64, error -71 [ 151.744551][ T7239] netlink: 'syz.4.314': attribute type 3 has an invalid length. [ 151.745319][ T7240] netlink: 'syz.4.314': attribute type 3 has an invalid length. [ 151.761458][ T7239] netlink: 8 bytes leftover after parsing attributes in process `syz.4.314'. [ 151.762688][ T7240] netlink: 8 bytes leftover after parsing attributes in process `syz.4.314'. [ 151.812937][ T5940] airspy 1-1:0.0: Board ID: 00 [ 151.818501][ T5940] airspy 1-1:0.0: Firmware version: [ 151.980391][ T55] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 152.038135][ T5844] Bluetooth: hci0: unexpected event for opcode 0x1005 [ 152.046156][ T5940] airspy 1-1:0.0: usb_control_msg() failed -71 request 0e [ 152.058818][ T30] audit: type=1400 audit(1752646756.323:384): avc: denied { node_bind } for pid=7216 comm="syz.0.309" saddr=ff02::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 152.114034][ T5940] airspy 1-1:0.0: Registered as swradio24 [ 152.127761][ T5940] airspy 1-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 152.160097][ T55] usb 2-1: device descriptor read/64, error -71 [ 152.183219][ T5940] usb 1-1: USB disconnect, device number 12 [ 152.256065][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 152.454700][ T5938] usb 4-1: USB disconnect, device number 14 [ 152.462883][ T55] usb usb2-port1: attempt power cycle [ 152.469823][ T30] audit: type=1400 audit(1752646756.573:385): avc: denied { create } for pid=7242 comm="syz.2.315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 152.544475][ T5938] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 152.690370][ T30] audit: type=1400 audit(1752646756.573:386): avc: denied { shutdown } for pid=7242 comm="syz.2.315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 152.721136][ T5938] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 152.738828][ T5938] quatech2 4-1:0.51: device disconnected [ 152.789724][ C1] sl0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 20470 ms [ 152.798275][ C1] sl0: transmit timed out, driver error? [ 153.040122][ T55] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 153.082858][ T55] usb 2-1: device descriptor read/8, error -71 [ 153.560262][ T7256] kAFS: No cell specified [ 153.839727][ T55] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 153.910534][ T55] usb 2-1: device descriptor read/8, error -71 [ 154.039962][ T55] usb usb2-port1: unable to enumerate USB device [ 154.120253][ T30] audit: type=1400 audit(1752646758.413:387): avc: denied { connect } for pid=7269 comm="syz.4.323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 154.358548][ T5938] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 154.598354][ T30] audit: type=1400 audit(1752646758.853:388): avc: denied { remount } for pid=7273 comm="syz.1.326" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 154.606864][ T5938] usb 3-1: config 0 has no interfaces? [ 154.617984][ C1] vkms_vblank_simulate: vblank timer overrun [ 154.686442][ T7283] netlink: 'syz.0.327': attribute type 4 has an invalid length. [ 154.694986][ T7283] netlink: 152 bytes leftover after parsing attributes in process `syz.0.327'. [ 154.696641][ T30] audit: type=1400 audit(1752646758.883:389): avc: denied { bind } for pid=7273 comm="syz.1.326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 154.765476][ T5938] usb 3-1: New USB device found, idVendor=17dd, idProduct=5500, bcdDevice=f3.5e [ 154.907261][ T5938] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.915553][ T5938] usb 3-1: Product: syz [ 154.931785][ T5938] usb 3-1: Manufacturer: syz [ 155.048350][ T5938] usb 3-1: SerialNumber: syz [ 155.061311][ T5938] usb 3-1: config 0 descriptor?? [ 156.418004][ T7298] netlink: 36 bytes leftover after parsing attributes in process `syz.0.330'. [ 156.426961][ T7298] netlink: 36 bytes leftover after parsing attributes in process `syz.0.330'. [ 157.044187][ T30] audit: type=1400 audit(1752646760.903:390): avc: denied { read } for pid=7295 comm="syz.0.330" lport=53130 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 157.488972][ T30] audit: type=1326 audit(1752646761.773:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7265 comm="syz.2.322" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f56d1d8e929 code=0x0 [ 157.675836][ T55] usb 3-1: USB disconnect, device number 6 [ 157.808861][ T7322] Bluetooth: MGMT ver 1.23 [ 158.009708][ T55] usb 3-1: new low-speed USB device number 7 using dummy_hcd [ 158.209266][ T55] usb 3-1: config 12 has an invalid interface number: 210 but max is 3 [ 158.283626][ T55] usb 3-1: config 12 has an invalid interface number: 214 but max is 3 [ 158.309769][ T55] usb 3-1: config 12 has an invalid descriptor of length 1, skipping remainder of the config [ 158.350266][ T55] usb 3-1: config 12 has 2 interfaces, different from the descriptor's value: 4 [ 158.359331][ T55] usb 3-1: config 12 has no interface number 0 [ 158.396180][ T55] usb 3-1: config 12 has no interface number 1 [ 158.432671][ T55] usb 3-1: config 12 interface 210 altsetting 5 endpoint 0xD has invalid maxpacket 16, setting to 8 [ 158.484858][ T55] usb 3-1: config 12 interface 210 altsetting 5 endpoint 0xB has invalid maxpacket 16, setting to 8 [ 158.570447][ T55] usb 3-1: config 12 interface 210 altsetting 5 endpoint 0x2 has invalid maxpacket 1023, setting to 8 [ 158.624917][ T55] usb 3-1: config 12 interface 210 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 158.702019][ T55] usb 3-1: config 12 interface 210 altsetting 5 has a duplicate endpoint with address 0x2, skipping [ 158.743203][ T55] usb 3-1: config 12 interface 210 altsetting 5 endpoint 0x4 has invalid maxpacket 1023, setting to 8 [ 158.799205][ T55] usb 3-1: config 12 interface 210 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 158.815250][ T10] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 158.838800][ T55] usb 3-1: config 12 interface 210 altsetting 5 endpoint 0xF has invalid maxpacket 1024, setting to 8 [ 158.930089][ T55] usb 3-1: config 12 interface 210 altsetting 5 endpoint 0x7 has invalid maxpacket 64, setting to 8 [ 158.948162][ T55] usb 3-1: config 12 interface 210 altsetting 5 endpoint 0xC has invalid maxpacket 512, setting to 8 [ 158.968155][ T55] usb 3-1: config 12 interface 210 altsetting 5 has a duplicate endpoint with address 0x4, skipping [ 159.011513][ T55] usb 3-1: config 12 interface 210 altsetting 5 has a duplicate endpoint with address 0xC, skipping [ 159.050076][ T10] usb 2-1: config 160 has an invalid interface number: 200 but max is 0 [ 159.058452][ T10] usb 2-1: config 160 has no interface number 0 [ 159.069795][ T30] audit: type=1400 audit(1752646763.323:392): avc: denied { map } for pid=7332 comm="syz.2.339" path="socket:[13254]" dev="sockfs" ino=13254 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 159.112992][ T55] usb 3-1: config 12 interface 210 altsetting 5 has a duplicate endpoint with address 0xF, skipping [ 159.134509][ T10] usb 2-1: config 160 interface 200 has no altsetting 0 [ 159.152431][ T55] usb 3-1: config 12 interface 214 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 159.166166][ T30] audit: type=1400 audit(1752646763.353:393): avc: denied { read write } for pid=7332 comm="syz.2.339" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 159.196562][ T10] usb 2-1: New USB device found, idVendor=21bb, idProduct=2070, bcdDevice=87.0b [ 159.220343][ T55] usb 3-1: config 12 interface 214 altsetting 4 endpoint 0xA has invalid maxpacket 32, setting to 8 [ 159.246293][ T7339] netlink: 4 bytes leftover after parsing attributes in process `syz.3.338'. [ 159.260610][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.338171][ T30] audit: type=1400 audit(1752646763.353:394): avc: denied { open } for pid=7332 comm="syz.2.339" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 159.343011][ T55] usb 3-1: config 12 interface 214 altsetting 4 has a duplicate endpoint with address 0xB, skipping [ 159.363537][ T30] audit: type=1400 audit(1752646763.353:395): avc: denied { ioctl } for pid=7332 comm="syz.2.339" path="/dev/nvram" dev="devtmpfs" ino=623 ioctlcmd=0x534c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 159.374624][ T10] usb 2-1: Product: syz [ 159.419812][ T7339] hsr_slave_0: left promiscuous mode [ 160.299743][ T7339] hsr_slave_1: left promiscuous mode [ 160.314296][ T10] usb 2-1: Manufacturer: syz [ 160.327441][ T55] usb 3-1: config 12 interface 214 altsetting 4 has a duplicate endpoint with address 0x4, skipping [ 160.338297][ T10] usb 2-1: SerialNumber: syz [ 160.369702][ T55] usb 3-1: config 12 interface 214 altsetting 4 has a duplicate endpoint with address 0xF, skipping [ 160.559760][ T55] usb 3-1: config 12 interface 210 has no altsetting 0 [ 160.587570][ T55] usb 3-1: config 12 interface 214 has no altsetting 0 [ 160.640328][ T55] usb 3-1: string descriptor 0 read error: -71 [ 160.641819][ T7352] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.655915][ T55] usb 3-1: New USB device found, idVendor=13d3, idProduct=3237, bcdDevice=87.31 [ 160.713588][ T55] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.764512][ T55] usb 3-1: can't set config #12, error -71 [ 160.773842][ T7352] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.915245][ T55] usb 3-1: USB disconnect, device number 7 [ 160.955748][ T10] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 160.964425][ T10] usb 2-1: MIDIStreaming interface descriptor not found [ 161.047255][ T7359] netlink: 4 bytes leftover after parsing attributes in process `syz.3.345'. [ 161.073889][ T7359] loop2: detected capacity change from 0 to 7 [ 161.117918][ T7359] Dev loop2: unable to read RDB block 7 [ 161.123709][ T7359] loop2: unable to read partition table [ 161.130123][ T7359] loop2: partition table beyond EOD, truncated [ 161.136395][ T7359] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 161.388902][ T7352] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.428555][ T10] usb 2-1: USB disconnect, device number 15 [ 161.447520][ T7352] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.494518][ T6992] udevd[6992]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:160.200/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 161.556003][ T7352] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.566306][ T55] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 161.572778][ T7352] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.589740][ T7352] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.605692][ T7352] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.791131][ T55] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 161.807617][ T7366] netlink: 92 bytes leftover after parsing attributes in process `syz.0.347'. [ 161.834454][ T55] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 161.847103][ T7366] netlink: 24 bytes leftover after parsing attributes in process `syz.0.347'. [ 161.856602][ T55] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 161.867489][ T7366] netlink: 24 bytes leftover after parsing attributes in process `syz.0.347'. [ 161.876664][ T55] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.893464][ T55] usb 3-1: config 0 descriptor?? [ 161.962816][ T5844] Bluetooth: hci2: SCO packet for unknown connection handle 201 [ 162.065651][ T30] audit: type=1400 audit(1752646766.353:396): avc: denied { mount } for pid=7369 comm="syz.1.349" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 162.115367][ T7380] netlink: 4 bytes leftover after parsing attributes in process `syz.0.350'. [ 162.387625][ T55] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 162.403891][ T55] cp2112 0003:10C4:EA90.0005: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 162.500036][ T5834] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 162.599486][ T55] cp2112 0003:10C4:EA90.0005: Part Number: 0x00 Device Version: 0x00 [ 162.664394][ T5834] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 162.674604][ T5834] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.684340][ T5834] usb 1-1: Product: syz [ 162.688559][ T5834] usb 1-1: Manufacturer: syz [ 162.700215][ T5834] usb 1-1: SerialNumber: syz [ 162.720901][ T5834] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 162.755505][ T30] audit: type=1400 audit(1752646767.043:397): avc: denied { firmware_load } for pid=5949 comm="kworker/1:7" path="/lib/firmware/ath9k_htc/htc_9271-1.4.0.fw" dev="sda1" ino=313 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 162.982672][ T5949] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 163.492179][ T30] audit: type=1400 audit(1752646767.713:398): avc: denied { unmount } for pid=5829 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 163.622086][ T5957] usb 1-1: USB disconnect, device number 13 [ 163.664965][ T55] cp2112 0003:10C4:EA90.0005: error reading lock byte: -71 [ 163.674901][ T55] usb 3-1: USB disconnect, device number 8 [ 164.229707][ T5949] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 164.239562][ T5949] ath9k_htc: Failed to initialize the device [ 164.273314][ T5957] usb 1-1: ath9k_htc: USB layer deinitialized [ 164.310888][ T5940] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 164.591804][ T5940] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 164.615344][ T5940] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 164.676079][ T5940] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 164.721934][ T7427] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.730173][ T5940] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.730850][ T7427] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.790806][ T7430] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 164.837703][ T7415] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 164.864401][ T7433] vcan0: tx drop: invalid da for name 0xffffffffffffffff [ 165.004619][ T7434] input: syz0 as /devices/virtual/input/input9 [ 165.270816][ T7427] bridge0: entered allmulticast mode [ 165.291285][ T5940] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 165.509749][ T55] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 165.861153][ T7424] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 165.871909][ T7424] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 165.888591][ T30] audit: type=1400 audit(1752646769.623:399): avc: denied { append } for pid=7425 comm="syz.4.360" name="comedi2" dev="devtmpfs" ino=1278 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 165.939174][ T5940] usb 3-1: USB disconnect, device number 9 [ 166.060795][ T55] usb 1-1: Using ep0 maxpacket: 32 [ 166.072654][ T7424] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 166.083240][ T7424] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 166.099499][ T55] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 166.110653][ T55] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.127656][ T55] usb 1-1: config 0 descriptor?? [ 166.162961][ T7424] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 166.172890][ T7424] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 166.217896][ T7424] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 166.228420][ T7424] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 166.578124][ T7424] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 166.586451][ T7424] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 166.605351][ T7424] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 166.613695][ T7424] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 166.632717][ T7424] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 166.641069][ T7424] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 166.657075][ T7424] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 166.665382][ T7424] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 166.752670][ T55] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 166.767434][ T55] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 166.778593][ T55] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 166.796446][ T55] usb 1-1: media controller created [ 166.868251][ T7451] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.871585][ T55] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 166.911170][ T7459] netlink: 8 bytes leftover after parsing attributes in process `syz.2.368'. [ 166.996870][ T7451] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.002667][ T55] az6027: usb out operation failed. (-71) [ 167.033316][ T55] az6027: usb out operation failed. (-71) [ 167.052611][ T30] audit: type=1400 audit(1752646771.333:400): avc: denied { view } for pid=7461 comm="syz.3.369" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 167.054678][ T55] stb0899_attach: Driver disabled by Kconfig [ 167.089332][ T55] az6027: no front-end attached [ 167.089332][ T55] [ 167.104337][ T7451] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.176112][ T55] az6027: usb out operation failed. (-71) [ 167.182735][ T55] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 167.193882][ T7451] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.214703][ T55] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input10 [ 167.232960][ T55] dvb-usb: schedule remote query interval to 400 msecs. [ 167.244330][ T55] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 167.385325][ T7451] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.398553][ T7451] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.411714][ T7451] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.424321][ T7451] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.534363][ T55] usb 1-1: USB disconnect, device number 14 [ 167.659610][ T55] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 169.198701][ T30] audit: type=1400 audit(1752646773.433:401): avc: denied { write } for pid=7494 comm="syz.2.377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 169.761722][ T7500] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.802432][ T7504] overlayfs: failed to resolve './file1': -2 [ 169.825101][ T54] Bluetooth: hci5: Frame reassembly failed (-84) [ 169.836469][ T7500] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.886117][ T7500] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.936555][ T7500] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.090944][ T7517] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 170.719908][ T55] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 170.879805][ T55] usb 1-1: Using ep0 maxpacket: 16 [ 170.999692][ T5949] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 171.159730][ T5949] usb 2-1: Using ep0 maxpacket: 8 [ 171.166430][ T5949] usb 2-1: unable to get BOS descriptor or descriptor too short [ 171.189784][ T5949] usb 2-1: config 4 interface 0 has no altsetting 0 [ 171.211796][ T5949] usb 2-1: string descriptor 0 read error: -22 [ 171.218127][ T5949] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 171.227499][ T5949] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 171.249452][ T5949] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 171.293727][ T5949] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 171.343672][ T5949] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 171.356280][ T5949] usb 2-1: media controller created [ 171.389234][ T5949] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 171.699869][ T5898] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 171.752657][ T7500] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.780817][ T7500] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.795498][ T7500] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.810166][ T7500] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.839736][ T5844] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 172.002592][ T7541] cgroup: Unknown subsys name 'cpuset' [ 172.039376][ T7532] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.046953][ T7541] overlayfs: failed to resolve './file0/file0': -2 [ 172.048202][ T7532] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.071233][ T5898] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 172.102567][ T5898] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 172.134660][ T5898] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 172.184749][ T5898] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.200557][ T5949] zl10353_read_register: readreg error (reg=127, ret==0) [ 172.258546][ T5898] usb 3-1: config 0 descriptor?? [ 172.295849][ T55] usb 1-1: unable to get BOS descriptor or descriptor too short [ 172.345930][ T5949] usb 2-1: USB disconnect, device number 16 [ 172.357786][ T55] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 172.378917][ T55] usb 1-1: can't read configurations, error -71 [ 172.481953][ T7552] overlayfs: failed to resolve './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0': -2 [ 172.691111][ T5898] cp2112 0003:10C4:EA90.0006: unknown main item tag 0x0 [ 172.714580][ T5898] cp2112 0003:10C4:EA90.0006: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 172.833295][ T7557] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2304 sclass=netlink_tcpdiag_socket pid=7557 comm=syz.4.395 [ 172.964234][ T5898] cp2112 0003:10C4:EA90.0006: Part Number: 0x00 Device Version: 0x00 [ 173.270007][ T5834] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 173.284859][ T7566] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 173.484118][ T5834] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 173.495378][ T5834] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 173.507920][ T30] audit: type=1400 audit(1752646777.793:402): avc: denied { kexec_image_load } for pid=7567 comm="syz.0.397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 173.508702][ T5834] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 173.708518][ T30] audit: type=1400 audit(1752646777.793:403): avc: denied { module_request } for pid=7567 comm="syz.0.397" kmod="net-pf-10-proto-55-type-2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 173.731718][ T7538] cp2112 0003:10C4:EA90.0006: Error starting transaction: -38 [ 173.753943][ T5898] cp2112 0003:10C4:EA90.0006: error reading lock byte: -71 [ 173.756703][ T5834] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 173.774175][ T5834] usb 5-1: SerialNumber: syz [ 173.826904][ T5898] usb 3-1: USB disconnect, device number 10 [ 173.859703][ T55] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 174.001656][ T5834] usb 5-1: 0:2 : does not exist [ 174.006541][ T5834] usb 5-1: unit 5: unexpected type 0x0c [ 174.024850][ T55] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 174.054032][ T5834] usb 5-1: USB disconnect, device number 12 [ 174.069560][ T55] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 174.096484][ T55] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.104290][ T5839] udevd[5839]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 174.179728][ T55] usb 1-1: Product: syz [ 174.183951][ T55] usb 1-1: Manufacturer: syz [ 174.188545][ T55] usb 1-1: SerialNumber: syz [ 174.258947][ T7579] erofs (device nbd3): cannot find valid erofs superblock [ 174.299226][ T30] audit: type=1400 audit(1752646778.583:404): avc: denied { unmount } for pid=5827 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 174.409357][ T55] usb 1-1: config 0 descriptor?? [ 174.442806][ T7582] overlayfs: failed to resolve './file1': -2 [ 174.566438][ T30] audit: type=1400 audit(1752646778.843:405): avc: denied { setopt } for pid=7576 comm="syz.1.399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 174.892874][ T5898] IPVS: starting estimator thread 0... [ 174.933195][ T55] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 174.944195][ T55] usb 1-1: USB disconnect, device number 17 [ 174.957830][ T5839] udevd[5839]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 175.019988][ T7585] IPVS: using max 44 ests per chain, 105600 per kthread [ 175.130335][ T5834] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 175.289800][ T5834] usb 4-1: Using ep0 maxpacket: 16 [ 175.302743][ T5834] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 175.317181][ T5834] usb 4-1: config 0 has no interface number 0 [ 175.325220][ T5834] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 37, changing to 9 [ 175.339801][ T5834] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 10008, setting to 1024 [ 175.353932][ T5834] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 175.363357][ T5834] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 175.371993][ T5834] usb 4-1: Product: syz [ 175.376229][ T5834] usb 4-1: SerialNumber: syz [ 175.395077][ T5834] usb 4-1: config 0 descriptor?? [ 175.401335][ T7588] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 175.411455][ T5834] cm109 4-1:0.8: invalid payload size 1024, expected 4 [ 175.427176][ T5834] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input11 [ 175.504275][ T30] audit: type=1400 audit(1752646779.793:406): avc: denied { map } for pid=7605 comm="syz.0.408" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 175.532304][ T30] audit: type=1400 audit(1752646779.793:407): avc: denied { execute } for pid=7605 comm="syz.0.408" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 175.560567][ T30] audit: type=1400 audit(1752646779.793:408): avc: denied { create } for pid=7605 comm="syz.0.408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 175.582938][ T30] audit: type=1400 audit(1752646779.793:409): avc: denied { ioctl } for pid=7605 comm="syz.0.408" path="socket:[15246]" dev="sockfs" ino=15246 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 175.608190][ T30] audit: type=1400 audit(1752646779.793:410): avc: denied { bind } for pid=7605 comm="syz.0.408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 175.637760][ C1] cm109 4-1:0.8: cm109_urb_irq_callback: urb status -71 [ 175.711469][ T55] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 175.729404][ T30] audit: type=1400 audit(1752646780.013:411): avc: denied { execute_no_trans } for pid=7610 comm="syz.0.409" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAAED16D64C885202864656C6574656429 dev="hugetlbfs" ino=15263 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 175.859751][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 175.867022][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 175.874191][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 175.881381][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 175.888533][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 175.895644][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 175.902752][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 175.910521][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 175.917908][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 175.925085][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 175.959747][ T5834] usb 4-1: USB disconnect, device number 15 [ 175.965719][ C1] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 175.966945][ T55] usb 5-1: not running at top speed; connect to a high speed hub [ 176.020078][ T5834] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 176.097779][ T5940] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 176.141734][ T55] usb 5-1: config 1 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 176.155688][ T55] usb 5-1: config 1 interface 0 has no altsetting 0 [ 176.162998][ T55] usb 5-1: string descriptor 0 read error: -22 [ 176.169450][ T55] usb 5-1: New USB device found, idVendor=056a, idProduct=00da, bcdDevice= 0.40 [ 176.190621][ T55] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.204759][ T7604] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 176.269729][ T5940] usb 1-1: device descriptor read/64, error -71 [ 176.509832][ T5940] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 176.617057][ T7604] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.631589][ T7604] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.647965][ T7604] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.659707][ T5940] usb 1-1: device descriptor read/64, error -71 [ 176.668793][ T7604] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.688348][ T55] usbhid 5-1:1.0: can't add hid device: -71 [ 176.694360][ T55] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 176.713864][ T55] usb 5-1: USB disconnect, device number 13 [ 176.740092][ T5898] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 176.770227][ T5940] usb usb1-port1: attempt power cycle [ 176.891811][ T5898] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 176.906977][ T5898] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 176.921684][ T5898] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.935918][ T5898] usb 4-1: config 0 descriptor?? [ 176.950096][ T5833] Bluetooth: hci5: command 0xfc11 tx timeout [ 176.956420][ T5844] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 176.970562][ T5898] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 177.129758][ T5940] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 177.161226][ T5940] usb 1-1: device descriptor read/8, error -71 [ 177.284926][ T30] audit: type=1400 audit(1752646781.573:412): avc: denied { mount } for pid=7625 comm="syz.4.414" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 177.409917][ T5834] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 177.639808][ T5940] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 177.672266][ T5940] usb 1-1: device descriptor read/8, error -71 [ 177.710748][ T5834] usb 3-1: device descriptor read/64, error -71 [ 177.724780][ T7632] netlink: 36 bytes leftover after parsing attributes in process `syz.4.416'. [ 177.736348][ T7632] netlink: 16 bytes leftover after parsing attributes in process `syz.4.416'. [ 177.790738][ T5940] usb usb1-port1: unable to enumerate USB device [ 177.949707][ T5834] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 178.499701][ T5834] usb 3-1: device descriptor read/64, error -71 [ 178.620879][ T5834] usb usb3-port1: attempt power cycle [ 178.767837][ T7642] wireguard0: entered promiscuous mode [ 178.773482][ T7642] wireguard0: entered allmulticast mode [ 178.893432][ T7645] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.953519][ T7645] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.965507][ T5834] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 178.990971][ T5834] usb 3-1: device descriptor read/8, error -71 [ 179.003496][ T7645] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.055436][ T7645] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.126056][ T7645] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.138587][ T7645] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.152516][ T7645] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.165112][ T7645] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.229772][ T5834] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 179.250187][ T5834] usb 3-1: device descriptor read/8, error -71 [ 179.299889][ T5957] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 179.361431][ T5834] usb usb3-port1: unable to enumerate USB device [ 179.449736][ T5957] usb 2-1: Using ep0 maxpacket: 16 [ 179.455483][ T5957] usb 2-1: no configurations [ 179.460151][ T5957] usb 2-1: can't read configurations, error -22 [ 179.542839][ T7655] overlayfs: failed to resolve './file1': -2 [ 179.589840][ T5957] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 179.732163][ T30] audit: type=1800 audit(1752646784.023:413): pid=7660 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.423" name="bus" dev="overlay" ino=534 res=0 errno=0 [ 179.754565][ T5957] usb 2-1: Using ep0 maxpacket: 16 [ 179.762060][ T5957] usb 2-1: no configurations [ 179.767388][ T5957] usb 2-1: can't read configurations, error -22 [ 179.787667][ T5957] usb usb2-port1: attempt power cycle [ 180.059023][ T7663] netlink: 'syz.4.424': attribute type 4 has an invalid length. [ 180.067203][ T7663] netlink: 152 bytes leftover after parsing attributes in process `syz.4.424'. [ 180.139883][ T5957] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 180.172680][ T5957] usb 2-1: Using ep0 maxpacket: 16 [ 180.183021][ T5957] usb 2-1: no configurations [ 180.187778][ T5957] usb 2-1: can't read configurations, error -22 [ 180.369733][ T5957] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 180.401531][ T5957] usb 2-1: Using ep0 maxpacket: 16 [ 180.419248][ T5957] usb 2-1: no configurations [ 180.440019][ T5957] usb 2-1: can't read configurations, error -22 [ 180.599573][ T5957] usb usb2-port1: unable to enumerate USB device [ 180.891572][ T5834] usb 4-1: USB disconnect, device number 16 [ 181.589827][ T5833] Bluetooth: hci5: command 0xfc11 tx timeout [ 181.596172][ T5844] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 193.751593][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.757920][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.772919][ T80] sl0: compressed packet ignored [ 207.765180][ T7695] input: syz0 as /devices/virtual/input/input12 [ 207.926144][ T30] audit: type=1400 audit(1752646812.213:414): avc: denied { watch_reads } for pid=7693 comm="syz.0.432" path="/79" dev="tmpfs" ino=441 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 208.387450][ T7712] netlink: 'syz.2.437': attribute type 4 has an invalid length. [ 208.395361][ T7712] netlink: 152 bytes leftover after parsing attributes in process `syz.2.437'. [ 208.749738][ T30] audit: type=1326 audit(1752646813.033:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7688 comm="syz.1.433" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f046598e929 code=0x0 [ 208.829563][ T7725] overlayfs: failed to resolve './file1': -2 [ 208.853021][ T5957] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 208.892088][ T5984] Bluetooth: hci5: Frame reassembly failed (-84) [ 209.151353][ T5957] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 209.231665][ T7728] input: syz0 as /devices/virtual/input/input13 [ 209.250747][ T5957] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 209.261480][ T5957] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 209.271165][ T5957] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.288330][ T5957] usb 5-1: config 0 descriptor?? [ 209.724357][ T5957] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0 [ 209.756943][ T5957] cp2112 0003:10C4:EA90.0007: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 209.859527][ T7739] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffb,4) [ 209.882384][ T7739] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 209.890712][ T7739] comedi comedi3: 8255: I/O port conflict (0x100000,4) [ 209.897659][ T7739] comedi comedi3: 8255: I/O port conflict (0x8f,4) [ 209.909011][ T7739] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffd,4) [ 209.919576][ T7739] comedi comedi3: 8255: I/O port conflict (0x10,4) [ 209.922600][ T5957] cp2112 0003:10C4:EA90.0007: Part Number: 0x00 Device Version: 0x00 [ 209.955084][ T7739] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 209.984446][ T7739] comedi comedi3: 8255: I/O port conflict (0xffffffffffffffff,4) [ 210.030400][ T5898] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 210.158725][ T7739] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 210.338042][ T7739] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 210.390485][ T5898] hid-generic 0000:0000:0000.0008: hidraw1: HID v0.00 Device [syz1] on syz0 [ 210.408904][ T7739] comedi comedi3: 8255: I/O port conflict (0x200,4) [ 210.496846][ T7739] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 210.503390][ T7739] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 210.518638][ T7739] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 210.526459][ T7739] comedi comedi3: 8255: I/O port conflict (0xe,4) [ 210.533068][ T7739] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 210.533801][ T7719] cp2112 0003:10C4:EA90.0007: Error starting transaction: -38 [ 210.539711][ T7740] ------------[ cut here ]------------ [ 210.552649][ T7740] WARNING: CPU: 0 PID: 7740 at mm/page_alloc.c:4935 __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 210.562989][ T7740] Modules linked in: [ 210.567058][ T7740] CPU: 0 UID: 0 PID: 7740 Comm: syz.0.445 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 210.579130][ T7740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 210.589386][ T7740] RIP: 0010:__alloc_frozen_pages_noprof+0x30b/0x23f0 [ 210.596572][ T7740] Code: f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc 83 fe 0a 0f 86 0a fe ff ff 80 3d da fb 7b 0e 00 75 0b c6 05 d1 fb 7b 0e 01 90 <0f> 0b 90 45 31 f6 eb 81 4d 85 f6 74 22 44 89 fa 89 ee 4c 89 f7 e8 [ 210.616469][ T7740] RSP: 0018:ffffc90003167908 EFLAGS: 00010246 [ 210.623386][ T7740] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 210.632074][ T7740] RDX: 0000000000000000 RSI: 0000000000000019 RDI: 0000000000040dc0 [ 210.640281][ T7740] RBP: 000000127fd7a758 R08: 0000000000000007 R09: 0000000000000000 [ 210.648462][ T7740] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000019 [ 210.656657][ T7740] R13: 1ffff9200062cf36 R14: 000000127fd7a758 R15: 0000000000000019 [ 210.664886][ T7740] FS: 00007f9f5e0956c0(0000) GS:ffff888124713000(0000) knlGS:0000000000000000 [ 210.673964][ T7740] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 210.680564][ T7740] CR2: 000055cc94da60c0 CR3: 0000000020fe1000 CR4: 00000000003526f0 [ 210.688532][ T7740] Call Trace: [ 210.691805][ T7740] [ 210.694747][ T7740] ? __lock_acquire+0xb8a/0x1c90 [ 210.699747][ T7740] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 210.706085][ T7740] ? do_raw_spin_lock+0x12c/0x2b0 [ 210.711150][ T7740] ? __lock_acquire+0xb8a/0x1c90 [ 210.716088][ T7740] ? comedi_unlocked_ioctl+0x1757/0x2e90 [ 210.721762][ T7740] __alloc_pages_noprof+0xb/0x1b0 [ 210.727667][ T7740] ___kmalloc_large_node+0x84/0x1e0 [ 210.733608][ T7740] ? comedi_unlocked_ioctl+0x1757/0x2e90 [ 210.739263][ T7740] __kmalloc_large_node_noprof+0x1c/0x70 [ 210.744956][ T7740] __kmalloc_noprof.cold+0xc/0x61 [ 210.750036][ T7740] comedi_unlocked_ioctl+0x1757/0x2e90 [ 210.755511][ T7740] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 210.761481][ T7740] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 210.767295][ T7740] ? do_vfs_ioctl+0x523/0x1a60 [ 210.772115][ T7740] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 210.777157][ T7740] ? ioctl_has_perm.constprop.0.isra.0+0x379/0x540 [ 210.783733][ T7740] ? ioctl_has_perm.constprop.0.isra.0+0x383/0x540 [ 210.790290][ T7740] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 210.797176][ T7740] ? hook_file_ioctl_common+0x145/0x410 [ 210.802773][ T7740] ? selinux_file_ioctl+0x180/0x270 [ 210.807983][ T7740] ? selinux_file_ioctl+0xb4/0x270 [ 210.813175][ T7740] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 210.814534][ T5957] cp2112 0003:10C4:EA90.0007: error reading lock byte: -71 [ 210.818996][ T7740] __x64_sys_ioctl+0x18e/0x210 [ 210.819024][ T7740] do_syscall_64+0xcd/0x4c0 [ 210.836430][ T7740] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.843055][ T7740] RIP: 0033:0x7f9f5d18e929 [ 210.847516][ T7740] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 210.867204][ T7740] RSP: 002b:00007f9f5e095038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 210.875934][ T7740] RAX: ffffffffffffffda RBX: 00007f9f5d3b6080 RCX: 00007f9f5d18e929 [ 210.883975][ T7740] RDX: 0000200000000000 RSI: 000000008010640b RDI: 0000000000000003 [ 210.892086][ T7740] RBP: 00007f9f5d210b39 R08: 0000000000000000 R09: 0000000000000000 [ 210.900095][ T7740] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 210.908070][ T7740] R13: 0000000000000001 R14: 00007f9f5d3b6080 R15: 00007fff5afc72b8 [ 210.916114][ T7740] [ 210.919135][ T7740] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 210.926419][ T7740] CPU: 0 UID: 0 PID: 7740 Comm: syz.0.445 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 210.938310][ T7740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 210.948348][ T7740] Call Trace: [ 210.951612][ T7740] [ 210.954524][ T7740] dump_stack_lvl+0x3d/0x1f0 [ 210.959102][ T7740] panic+0x71c/0x800 [ 210.962983][ T7740] ? __pfx_panic+0x10/0x10 [ 210.967381][ T7740] ? show_trace_log_lvl+0x29b/0x3e0 [ 210.972579][ T7740] ? __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 210.978632][ T7740] check_panic_on_warn+0xab/0xb0 [ 210.983549][ T7740] __warn+0xf6/0x3c0 [ 210.987431][ T7740] ? __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 210.993482][ T7740] report_bug+0x3c3/0x580 [ 210.997800][ T7740] ? __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 211.003858][ T7740] handle_bug+0x184/0x210 [ 211.008175][ T7740] exc_invalid_op+0x17/0x50 [ 211.012671][ T7740] asm_exc_invalid_op+0x1a/0x20 [ 211.017516][ T7740] RIP: 0010:__alloc_frozen_pages_noprof+0x30b/0x23f0 [ 211.024178][ T7740] Code: f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc 83 fe 0a 0f 86 0a fe ff ff 80 3d da fb 7b 0e 00 75 0b c6 05 d1 fb 7b 0e 01 90 <0f> 0b 90 45 31 f6 eb 81 4d 85 f6 74 22 44 89 fa 89 ee 4c 89 f7 e8 [ 211.043773][ T7740] RSP: 0018:ffffc90003167908 EFLAGS: 00010246 [ 211.049825][ T7740] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 211.057776][ T7740] RDX: 0000000000000000 RSI: 0000000000000019 RDI: 0000000000040dc0 [ 211.065724][ T7740] RBP: 000000127fd7a758 R08: 0000000000000007 R09: 0000000000000000 [ 211.073681][ T7740] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000019 [ 211.081634][ T7740] R13: 1ffff9200062cf36 R14: 000000127fd7a758 R15: 0000000000000019 [ 211.089611][ T7740] ? __lock_acquire+0xb8a/0x1c90 [ 211.094550][ T7740] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 211.100870][ T7740] ? do_raw_spin_lock+0x12c/0x2b0 [ 211.105893][ T7740] ? __lock_acquire+0xb8a/0x1c90 [ 211.110822][ T7740] ? comedi_unlocked_ioctl+0x1757/0x2e90 [ 211.116441][ T7740] __alloc_pages_noprof+0xb/0x1b0 [ 211.121456][ T7740] ___kmalloc_large_node+0x84/0x1e0 [ 211.126642][ T7740] ? comedi_unlocked_ioctl+0x1757/0x2e90 [ 211.132257][ T7740] __kmalloc_large_node_noprof+0x1c/0x70 [ 211.137877][ T7740] __kmalloc_noprof.cold+0xc/0x61 [ 211.142901][ T7740] comedi_unlocked_ioctl+0x1757/0x2e90 [ 211.148351][ T7740] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 211.154231][ T7740] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 211.160025][ T7740] ? do_vfs_ioctl+0x523/0x1a60 [ 211.164775][ T7740] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 211.169789][ T7740] ? ioctl_has_perm.constprop.0.isra.0+0x379/0x540 [ 211.176280][ T7740] ? ioctl_has_perm.constprop.0.isra.0+0x383/0x540 [ 211.182773][ T7740] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 211.189623][ T7740] ? hook_file_ioctl_common+0x145/0x410 [ 211.195160][ T7740] ? selinux_file_ioctl+0x180/0x270 [ 211.200348][ T7740] ? selinux_file_ioctl+0xb4/0x270 [ 211.205448][ T7740] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 211.211241][ T7740] __x64_sys_ioctl+0x18e/0x210 [ 211.215992][ T7740] do_syscall_64+0xcd/0x4c0 [ 211.220491][ T7740] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.226369][ T7740] RIP: 0033:0x7f9f5d18e929 [ 211.230769][ T7740] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 211.250366][ T7740] RSP: 002b:00007f9f5e095038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 211.258766][ T7740] RAX: ffffffffffffffda RBX: 00007f9f5d3b6080 RCX: 00007f9f5d18e929 [ 211.266721][ T7740] RDX: 0000200000000000 RSI: 000000008010640b RDI: 0000000000000003 [ 211.274679][ T7740] RBP: 00007f9f5d210b39 R08: 0000000000000000 R09: 0000000000000000 [ 211.282638][ T7740] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 211.290596][ T7740] R13: 0000000000000001 R14: 00007f9f5d3b6080 R15: 00007fff5afc72b8 [ 211.298564][ T7740] [ 211.301754][ T7740] Kernel Offset: disabled [ 211.306057][ T7740] Rebooting in 86400 seconds..