last executing test programs: 8.143295677s ago: executing program 2 (id=293): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/nd/drivers/nd_pmem/unbind\x00', 0x1, 0x0) mkdir(&(0x7f0000000040)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x80800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt/module/block2mtd/parameters/block2mtd\x00', 0x1, 0x0) write(r4, &(0x7f0000000200)="b82ca8", 0x3) write(r1, &(0x7f0000000180)='na', 0x2) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000040)=0x200) 7.635529943s ago: executing program 2 (id=296): r0 = socket(0xa, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=@newtclass={0x24, 0x28, 0x300, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xe, 0x10}, {0x0, 0x10}, {0xfff1, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56441, 0x70b925, 0x80000, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xfff2}, {0x2, 0x1}, {0xb, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000c061}, 0x2004c811) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r0) r1 = socket(0x10, 0x3, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000140)="10797fcd6c7704e11e05000000000000009ff075475e4b94", 0x18) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000480)=[{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000540)="9c98d425afe56f214f063263de94ff93031f06039ddcb1d9cf89e039", 0x1c}], 0x1, 0x0, 0x0, 0x2400c004}], 0x1, 0x44014) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000200000000000000080001000100000004"], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000003340)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=ANY=[], 0x30, 0x8000}], 0x1, 0x8040) 7.227916977s ago: executing program 0 (id=298): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r0 = io_uring_setup(0xaae, &(0x7f0000000080)={0x0, 0xdf4, 0x800, 0x1, 0x205}) setxattr$security_ima(&(0x7f0000000240)='./file1/file0\x00', &(0x7f0000000280), &(0x7f0000000380)=@ng={0x4, 0x8, "84"}, 0x3, 0x1) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs2/custom0\x00', 0x802, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x8}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f00000001c0)={0x5, 0x0, 0x8209, 0x4, 0x1, 0x7fff, 0x4, 0xfff, r3}, &(0x7f0000000200)=0x20) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x40, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xb, 0x4}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008050}, 0x0) close(0x3) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) ioctl$BTRFS_IOC_SYNC(r1, 0x9408, 0x0) syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x169041) ioctl$sock_SIOCGSKNS(r2, 0x894c, 0x0) 7.224248502s ago: executing program 1 (id=299): r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/sys/vm/compaction_proactiveness\x00', 0x1, 0x0) write(r0, 0x0, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000240)='./proc/sys/vm/compaction_proactiveness\x00', 0x1ff) 7.163026485s ago: executing program 2 (id=300): syz_open_dev$loop(0x0, 0x4, 0x40100) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, &(0x7f0000000080)=0x1) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x13, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000540000000000000070000006b1138000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x4008080}, 0x8000) request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x187) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x44000880}, 0x4080) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xa909, 0x1f480, 0x2, 0x254}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x28, 0x0, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r4, 0x0, 0x0) write(r4, &(0x7f0000000300)='rt1719 0x49', 0xb) write(r4, &(0x7f0000000400)='wusb3801 0x4', 0xc) io_uring_enter(r2, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) 6.217819944s ago: executing program 2 (id=302): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000540)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41000, 0x7e}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./tracing\x00', &(0x7f0000000280)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./tracing/events/enable\x00', 0x100, 0x0) read$FUSE(r1, 0x0, 0x0) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x7, 0x201, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0xc004}, 0xc0c0) sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)={0x0}, 0x1, 0x0, 0x0, 0x840}, 0x80) getsockopt(r0, 0x0, 0x5, &(0x7f00000003c0)=""/187, &(0x7f0000000480)=0xbb) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000000000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000711221000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r4}, 0xc) mkdir(&(0x7f0000000000)='my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0) lseek(r5, 0x3, 0x1) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x42902, 0x0) kexec_load(0x3, 0x1, &(0x7f0000000140)=[{0x0, 0x0, 0x116094000, 0x41000000}], 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r7 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)=0x0) timer_settime(r8, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETSNDBUF(r6, 0x400454d4, &(0x7f0000000000)=0x3) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0x8100, 0xe, 0x0, &(0x7f00000002c0)="c810e19e00399da26f0000000000", 0x0, 0xadf0, 0x21, 0x0, 0x0, 0x0, 0x0}, 0x50) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r1) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000fc0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x208}, 0xc, &(0x7f0000000f80)={&(0x7f0000000a40)={0x428, r9, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC_HINT={0xa}, @NL80211_ATTR_USE_RRM={0x4}, @fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0x49, 0xfa, "f1a2f50888c9f0c493dfd931b6acfe9d3bad5284b5e904c355aeaf6cf44b36eed3695ff51812b759bdf5abca5eb4e7669701f6bba08690dbbc3e00bb29f91fdf5d0a742335"}, @NL80211_ATTR_FILS_ERP_REALM={0x2d, 0xfa, "a48a33c9e6affc0b6e38d728bd1f8ec95b08eadf8adab319f7e1bce0eeefd61a4d5d24fb7cb37f5dc2"}, @NL80211_ATTR_FILS_ERP_USERNAME={0xb, 0xf9, "407750170e5d85"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x12, 0xf9, "1352edf70d83b709df14098ba9d4"}], @fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0x4}, @NL80211_ATTR_FILS_ERP_REALM={0x9e, 0xfa, "a2a434f9c51ddd03abb8a41251b509e0479e7663fba963a44af0a68c654ef4406e2a43447c6e40143905b585ce2646b001c3529db4914bc9a703b3c0d9c830ab8419039187e776ba73581ad1bd2c9d4ab768b93717329d67ca597ed69bf89e426a63ff3b8174d8ee27cf43c653577ba3475c8e31f14d5689669ca7c3c50ec4b573d724992ff98e0c36306faa6fe1f06e4383d6828125ef2ada33"}, @NL80211_ATTR_FILS_ERP_RRK={0x39, 0xfc, "df261c62425306886c4aa2dd861fdea1ee66b0a3f201f64a486171945bc0f6c6f4bfcfa8163d7c6d2aecede2b3c697f0a936efd0bf"}], @NL80211_ATTR_IE={0x25d, 0x2a, [@perr={0x84, 0x12f, {0x8, 0x13, [{{}, @device_b, 0x3, @void, 0x42}, {{}, @device_b, 0x4, @void, 0x1}, {{}, @device_b, 0x9, @void, 0xa}, {{0x0, 0x1}, @device_a, 0x1, @value=@device_b, 0x3}, {{}, @broadcast, 0x55c3, @void, 0xa}, {{0x0, 0x1}, @broadcast, 0x6, @value=@broadcast, 0x20}, {{}, @broadcast, 0x7fff, @void, 0x22}, {{}, @device_a, 0x6, @void, 0x3d}, {{0x0, 0x1}, @broadcast, 0x1, @value=@broadcast, 0x28}, {{0x0, 0x1}, @device_a, 0x5, @value=@broadcast, 0x15}, {{0x0, 0x1}, @device_a, 0x6d, @value=@device_b, 0x36}, {{}, @device_a, 0x10, @void, 0x20}, {{0x0, 0x1}, @device_b, 0x10000, @value=@device_b, 0x41}, {{0x0, 0x1}, @device_a, 0x10000, @value, 0x2f}, {{}, @broadcast, 0x7, @void, 0x3c}, {{0x0, 0x1}, @device_b, 0x7, @value=@device_b, 0x8}, {{}, @device_b, 0x60829118, @void, 0x3e}, {{}, @device_a, 0x1, @void, 0xc}, {{0x0, 0x1}, @device_a, 0x80000000, @value, 0x17}]}}, @mic={0x8c, 0x10, {0xda, "cc457c9f6cca", @short="2d221b40d4c9150f"}}, @mesh_config={0x71, 0x7, {0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x9}}, @perr={0x84, 0xf0, {0x9, 0x10, [{{}, @broadcast, 0x1, @void, 0x2e}, {{}, @broadcast, 0x3f2, @void, 0x37}, {{0x0, 0x1}, @device_a, 0x5, @value, 0x24}, {{}, @device_a, 0x2, @void, 0x17}, {{0x0, 0x1}, @broadcast, 0x1, @value=@device_b, 0x33}, {{}, @broadcast, 0xd, @void, 0xa}, {{0x0, 0x1}, @device_a, 0x7130, @value=@device_b, 0x18}, {{}, @device_b, 0x400, @void, 0x39}, {{}, @broadcast, 0x101, @void, 0x6}, {{0x0, 0x1}, @broadcast, 0x6, @value, 0x1f}, {{}, @broadcast, 0x6, @void, 0xf}, {{0x0, 0x1}, @broadcast, 0x7, @value=@device_b, 0x34}, {{}, @broadcast, 0x6, @void, 0x39}, {{}, @device_b, 0x2, @void, 0x21}, {{}, @device_b, 0x7, @void, 0x6}, {{}, @device_a, 0x4, @void, 0x5}]}}, @sec_chan_ofs={0x3e, 0x1}, @peer_mgmt={0x75, 0x16, {0x0, 0x1000, @void, @val=0x23, @val="7d6b354d9c0ecb0ec91dbc61e2984fd1"}}]}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @crypto_settings=[@NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_WPA_VERSIONS={0x8, 0x4b, 0x2}], @NL80211_ATTR_IE={0x7, 0x2a, [@dsss={0x3, 0x1, 0xe}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x428}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) 6.160017983s ago: executing program 1 (id=303): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000002f0009001bc7c275a1ad4c7bd0fdd44bad4bf927bd7000fbdbdf05001180c100000000"], 0x1c}, 0x1, 0x0, 0x0, 0x42914}, 0x40000d4) syz_usb_connect(0x5, 0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040cd06350100010000000109023c0001010080320904000006ff0000000705810240000007050102"], 0x0) mkdir(&(0x7f00000000c0)='mnt\x00', 0x10d) mount(0x0, &(0x7f0000000300)='mnt\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000400)='mnt\x00', 0x3, 0x1) r2 = socket(0x10, 0x3, 0x4) r3 = syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040110700090001010203010902200001010080fa0904000002070102000705810200020007050202"], 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000200)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(r3, 0x81, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x10) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) lremovexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)=@known='user.incfs.id\x00') readv(r4, &(0x7f0000000c40)=[{&(0x7f00000008c0)=""/207, 0xcf}], 0x1) setsockopt$inet6_buf(r1, 0x29, 0x6, &(0x7f0000000180)="a2d4860a731fcad644e115189829c95a78798ba1ac7a35a4eec78ff76fda552b420a91ba55873702bfcafc568a8c275c7d6b4fded57ccc59c81862eb77b92b52de20b80fa3d05add7b1f981e09842fa15881776ba8344fdec21aee32a7a79e5dc3308dca8be22d2ed46d312dce50ea353f29e493d9c1ff350aa9d773480df70ae149f44cfd187088453190684b225f9a9379538c050580edf63d560f399fa019bfa186360f8377662f2a0197ace0", 0xae) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@newqdisc={0x24, 0x14, 0xf0b, 0x4, 0x0, {0x2, 0x0, 0x0, 0x0, {0xd, 0x4}, {0xe, 0x8}, {0x0, 0x9}}}, 0x24}}, 0x40) ioctl$XFS_IOC_AG_GEOMETRY(r0, 0xc080583d, &(0x7f0000000340)={0xe8e9, 0xfffffff9, 0x8, 0x5, 0x6, 0x9, 0x5, 0x6}) 5.314636349s ago: executing program 4 (id=304): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001c00070c002000000000000002000000", @ANYRES32, @ANYBLOB="0000c00014000100"], 0x30}}, 0x20024090) 5.277072048s ago: executing program 4 (id=306): r0 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="12012000f1048108cd060202d4c34e01000109021b1901000000d40904150001da40df000905", @ANYRES64], 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=ANY=[@ANYRESOCT=r0], 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) getpid() connect$unix(0xffffffffffffffff, 0x0, 0x0) r2 = fsopen(&(0x7f0000000280)='erofs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x28) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="0900000004000000040000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="0200000001"], 0x48) fsmount(r2, 0x1, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00', 0x0}) sendto$packet(r5, &(0x7f00000002c0)="05031600d3fc140000004788031c09103c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{r4}, &(0x7f0000000100), &(0x7f0000000140)='%pK \x00'}, 0x20) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00', r4}, 0x18) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r7, &(0x7f0000009f40)={0x2020}, 0x2020) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003cc0), 0x0, 0x4001c00) r8 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/sys/vm/compaction_proactiveness\x00', 0x1, 0x0) write(r9, 0x0, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0xfc) mkdirat(0xffffffffffffffff, &(0x7f0000000240)='./proc/sys/vm/compaction_proactiveness\x00', 0x1ff) 5.171543764s ago: executing program 0 (id=307): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) unshare(0x64000600) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0200000004000000080000eafffff20080000000f89a445a9ab5747266636a283a2412a8e8c931d73c3e09196c74746fac4fffed4c6f85eb5dcc148c18d8c5cdb46c4baf658b93f7565a80a85b11b234b936156f02f5c865611deb5be4c1be5e35985a2188138c06103ebccddea27177195fd7e589223123f578f62a6001f520c7bf641e131249d8b71a07cb3e2cabb052028cb531363b807ed1490576bf201490d34e58423149a6818767ef506daa605270ab0af03685f76561cff2243e00"/205, @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r2 = gettid() timer_create(0x0, &(0x7f00000003c0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000380)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r4, 0x0) connect$unix(r3, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r4, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 4.697995669s ago: executing program 2 (id=308): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) 4.442416576s ago: executing program 2 (id=309): syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e04023c20"], 0x7) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x6, 0x4, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000001000)=ANY=[@ANYBLOB="1201000200000040501d4d610001000000010902200001010080320904000002ff00000007050102"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)={0x20, 0x90069109b15ef6c8, 0x1e, "4d61501d0100000000000000100000000000800700000000000038040000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000200)=ANY=[@ANYBLOB="403f0100000080"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, &(0x7f00000000c0)={0x20, 0x24, 0x32, {0x32, 0x10, "6b27f96aeff9ad63e17770c0e225364ff5a83168264a58854b23a1ef67c015a8d936fdb2d280b0d3eb540a9854cdd6da"}}, &(0x7f0000000140)={0x0, 0x3, 0x97, @string={0x97, 0x3, "1530eae2d8f03e734faec25664d13b8e709ad02b5bedba75dbf76a8f06ea58c2e656e28c91d079714d3ff22ce657322e4634528f85695eda1311b6c86c09f67b140fa97c4e7a2dd9e1f1087ee43f05128d023a227749b64e8dfd7c873b9479c5fe56e583fd799a74c2c663b8e4e5d1396ecbb31daf34d0e20bdfd962e1e05f27f60e22d4fe387e9cc818031d65fa2e8d97e15ffaff"}}, &(0x7f0000000240)={0x0, 0x22, 0x16, {[@global=@item_012={0x0, 0x1, 0x2}, @local=@item_4={0x3, 0x2, 0x7, "98b77c2c"}, @local=@item_012={0x0, 0x2, 0x5}, @main=@item_4={0x3, 0x0, 0x8, "c18012f5"}, @main=@item_012={0x2, 0x0, 0xb, "af82"}, @global=@item_4={0x3, 0x1, 0x0, "8b69e08f"}, @global=@item_012={0x1, 0x1, 0xf, "8a"}]}}, &(0x7f0000000280)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8, 0x9, 0x1, {0x22, 0x707}}}}, &(0x7f0000000540)={0x2c, &(0x7f0000000300)={0x0, 0x1, 0xae, "3d814713adc559c27556ed8ea26c2c31b59d3533bf752eac4e2062020ec76c3a45e3a337c3649e938272bccedb62aa07f2a57843f6bdc7869a9db1e63688840cf511bb89a10655797da02904ffe713027b3bfd2505797876f7142d5968d225abd1c8a861bdcfa0ca3bd608a5a0647db806216ff0c6ce67ab11fb8e21f9bfe9df8e9b1b247038a87f12fe511a8d8e9df64dc23275a31e9bb402caf5bb02723d1f936f69e66c4d81b34f2959871adf"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x98}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000440)={0x20, 0x1, 0x73, "8fb96251cea673c2b896db99768aced81c3bdff7886da80def039d63f4826bb08e7a2b88a04b3dfd6f3d8a899ff2a46fcd69b302c380bae092186d08a9373909eb07339705771c3a99c564931ba72ae6be37ec360c5b293a39e517d0b4d8bb22d9e6055b7d18fa79cfef10cac2237046714395"}, &(0x7f0000000500)={0x20, 0x3, 0x1, 0x8c}}) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_change_link_key_complete={{0x9, 0x3}, {0x8, 0xc9}}}, 0x6) syz_usb_control_io$uac2(0xffffffffffffffff, &(0x7f0000001440)={0x14, &(0x7f00000013c0)={0x40, 0x1, 0x37, {0x37, 0xb, "2a53bb33639a0510aa3f3f89e54110406cf0832ed5ffeae230fcc6189878f9ceca1a8e5122d3e1d62609b427eede8942d3c5b3ffae"}}, &(0x7f0000001400)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xe4ecf9a51fb9e62c}}}, &(0x7f0000001680)={0x44, &(0x7f0000001480)={0x20, 0x14, 0x2f, "c18a44e17b2a4bfc560ed7b87d42e17971189fda339269f140ca32a11a2a7477ed6525864baae3602e3efacd60c977"}, &(0x7f00000014c0)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000001500)={0x0, 0x8, 0x1, 0xcc}, &(0x7f0000001540)={0x20, 0x81, 0x3, "32d080"}, &(0x7f0000001580)={0x20, 0x82, 0x3, '`/i'}, &(0x7f00000015c0)={0x20, 0x83, 0x2, "afc9"}, &(0x7f0000001600)={0x20, 0x84, 0x2, "7f1d"}, &(0x7f0000001640)={0x20, 0x85, 0x3, "f8132b"}}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f00000001c0)=0x2, 0x4) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000780)={0x44, &(0x7f00000004c0)={0x40, 0x14, 0x1, '\''}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x6, 0x1d7, &(0x7f0000000580)={{0x12, 0x1, 0x310, 0xc0, 0xc3, 0xbf, 0x40, 0xbb4, 0xa5e, 0xe1a4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1c5, 0x1, 0xb, 0xff, 0x0, 0x5, "", [{{0x9, 0x4, 0xd9, 0x2, 0xe, 0x20, 0x60, 0xc0, 0xb, [@generic={0xe4, 0x7, "8c286802eac868c3cea02db27272caf75bb5a0a88b0b2432e13cf773fa041fb17c656a7dc9d6f5047941a35437009f6383f93c92fab91606ae379b4b4b316947c0bda2230a146c158ae7efe8b0056dc1ddae381a95dfb372bd17c3fc5fcf7021e430d9bd8d39e7dd814cf7716ff7c70a4495c19161abacebcecc7483d57637f2b37691a588cff5b86d7cc2dd23737aa3252f44224f4052713dde4d98193575cbc0db955de9dc0cd57bc641b92af3bd8c64dd9f8b66399dd191c444bd50097191a3a10e092e3948db25f539d56bbe691d66e5cf11b07c885cb8dafa0f53fe4dd7c2fa"}], [{{0x9, 0x5, 0x8, 0x2, 0x40, 0x2, 0x8, 0x7}}, {{0x9, 0x5, 0xd, 0x10, 0x40, 0x40, 0x3, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x9, 0x7}]}}, {{0x9, 0x5, 0x80, 0x0, 0x3ff, 0x2, 0xa, 0x7}}, {{0x9, 0x5, 0xe, 0x0, 0x20, 0xcc, 0xf, 0x40}}, {{0x9, 0x5, 0x80, 0x10, 0x20, 0x9c, 0xda, 0x3d, [@generic={0x2e, 0x24, "f4385eae1bbf4a6850e52c117ebea5cef1285c8e513466ba412725786824cf17c89a6b860003668df62762fa"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x400, 0x8, 0x9, 0xa0}}, {{0x9, 0x5, 0x80, 0x0, 0x8, 0x3, 0xa, 0xea, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x9f, 0x8}]}}, {{0x9, 0x5, 0x9, 0x2, 0x8, 0x5, 0x3, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x1, 0x1}]}}, {{0x9, 0x5, 0x3, 0x1, 0x400, 0x8, 0x2, 0x1}}, {{0x9, 0x5, 0x5, 0x10, 0x3ff, 0x9, 0x1, 0xd0, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x8, 0x4b3}]}}, {{0x9, 0x5, 0x6, 0x0, 0x210, 0xf2, 0x0, 0x9}}, {{0x9, 0x5, 0x0, 0x4, 0x8, 0x26, 0x0, 0x6}}, {{0x9, 0x5, 0x8, 0x0, 0x3ff, 0xfa, 0x4, 0xf8}}, {{0x9, 0x5, 0x9, 0x0, 0x0, 0x81, 0x6, 0xf9, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x1, 0x5}]}}]}}]}}]}}, &(0x7f0000000e00)={0xa, &(0x7f0000000800)={0xa, 0x6, 0x110, 0x9, 0x9, 0x8, 0x10, 0x8}, 0x141, &(0x7f0000000840)={0x5, 0xf, 0x141, 0x6, [@generic={0xfb, 0x10, 0xb, "ca4175225e097031f3199c42ed2f6a99e9ef2cc8ea9269b68ac748d4d63a5b55583dee14f40e9125e1eba4236dbebe72c9ae5e22975cb2f38108f3f384416f5d189302c5bb66224bf8e73c9febfc3f5c59687e98ed33392a8629ba01fc7c90c7db1a3f4c61f5cada5bec61a8dd8edd091e08bf548c3c67f8cbae97734078c565b66121f9dd7c307c39251a5e6832460c73e60c511639ea03507dc83c03940e79141c5bac0451c829b027c11ddd9bba331e5a05811a144869c2e6572af468f0c8007aae7b9ad4e09bd76e61bd1e016876201b9b7ab1c9eebd4ce9141c83a41df1fb82080f47151233b48c4d16039a927cd5cbe66d9db55103"}, @ext_cap={0x7, 0x10, 0x2, 0x12, 0x3, 0x3, 0x81}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0xa, "eb316acd006fb5f619689ef076e68e09"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x46, 0x4, 0x0, 0x0, 0x7}, @ssp_cap={0x18, 0x10, 0xa, 0x1, 0x3, 0x1, 0x0, 0x6, [0xff0000, 0x0, 0xc030]}]}, 0xa, [{0xa8, &(0x7f00000009c0)=@string={0xa8, 0x3, "f2dd1e1d683232b3e2f859b590dbe8a65a5d7c17fa11a8a7aa5a3d7e153e43b3142fc26fdecada7a72b9d104ff3aec6aab0a2dfcf6f099069b69762eaad3a5cd89d64ea794f8108fbe276ef10ff217a067b3e66c14cfed5b08ca47da39d35cabfb73209e9649a0c18cae9ad0089c4d6681527f6dbfdf143d44b88721d70e183112956d024fb4e417fff53c339fa37be7845d423998e58714790f12a34f44f22d8c20cf75cfbe"}}, {0x6, &(0x7f0000000a80)=@string={0x6, 0x3, "53d56255"}}, {0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x400a}}, {0x5c, &(0x7f0000000b00)=@string={0x5c, 0x3, "340d082f3dcddab5cadea270ff2aa2a1b970da1ad9c807a90b406cd9c03bd2d70a62aaee2611a53693fb6e626e575c9bcf21a8fb1aa6aa74fec1ea833cbc6d43ccfaa1834d797c19883906c370030272881c794148eab4f5a3d9"}}, {0x4, &(0x7f0000000b80)=@lang_id={0x4, 0x3, 0x2809}}, {0x4, &(0x7f0000000bc0)=@lang_id={0x4, 0x3, 0x420}}, {0x100, &(0x7f0000000c00)=@string={0x100, 0x3, "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"}}, {0x5c, &(0x7f0000000d00)=@string={0x5c, 0x3, "f30f9a1bd2da85410d1fb5ef2117c88e2a1cd3fcff49138b079a316e3a412b43dff4b6268943aaff7114156f37bb5768f94c6aaea178902a3a4ec8375d577857420e8e15b20cfc5ae7038aff0e4ea67d98164f1c88b2fa61a08a"}}, {0x4, &(0x7f0000000d80)=@lang_id={0x4, 0x3, 0x41a}}, {0x4, &(0x7f0000000dc0)=@lang_id={0x4, 0x3, 0x140c}}]}) 4.239700944s ago: executing program 0 (id=311): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x1, 0x4, 0x10001, 0x5}) mprotect(&(0x7f0000f95000/0x1000)=nil, 0x1000, 0x180000f) timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000100)={@local}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r1, 0x7b1, &(0x7f0000000140)={0x0, 0x2}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r1, 0x7a4, &(0x7f0000000180)={{@hyper, 0x401}, 0x1000, 0x6, 0x800, 0x2a}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080), 0x4) pselect6(0x40, &(0x7f0000000100), &(0x7f0000000000)={0x1f}, 0x0, 0x0, 0x0) 4.214032711s ago: executing program 3 (id=312): syz_open_dev$loop(0x0, 0x4, 0x40100) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, &(0x7f0000000080)=0x1) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x13, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000540000000000000070000006b1138000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x4008080}, 0x8000) request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x187) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x44000880}, 0x4080) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xa909, 0x1f480, 0x2, 0x254}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x28, 0x0, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r4, 0x0, 0x0) write(r4, &(0x7f0000000300)='rt1719 0x49', 0xb) write(r4, &(0x7f0000000400)='wusb3801 0x4', 0xc) io_uring_enter(r2, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) 3.802332804s ago: executing program 0 (id=313): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000007d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000838500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) socket$inet6_sctp(0xa, 0x5, 0x84) 3.219313064s ago: executing program 1 (id=314): symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') setxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), &(0x7f00000000c0)=@v2={0x2000000, [{0x1000, 0x7bb}, {0x2, 0x5}]}, 0x14, 0x1) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x1) lremovexattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)=@known='trusted.overlay.metacopy\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./mnt_trace\x00', 0x1ff) mount(0x0, &(0x7f0000001040)='./mnt_trace\x00', &(0x7f0000001080)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001100)='./mnt_trace/trace\x00', 0x40000, 0xa) lseek(r0, 0x100000001, 0x1) 3.175902992s ago: executing program 4 (id=315): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = gettid() tkill(r4, 0x2a) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x42, 0x0) r6 = fanotify_init(0xef0, 0x2) fanotify_mark(r6, 0x105, 0x40009965, r5, 0x0) ioctl$NBD_CLEAR_SOCK(r5, 0xab04) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r7, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000400)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/functions/uac1.usb0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/uac1.usb0/p_chmask\x00', 0x141842, 0x10) 3.175413439s ago: executing program 0 (id=316): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141302) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20, @private=0xa010100}], 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@ipv4_newroute={0x34, 0x18, 0x35f32a6dfa748ddd, 0x0, 0xfffffffd, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x6, 0x400}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @RPL_IPTUNNEL_SRH={0xc, 0x1, {0x4, 0x8, 0x1, 0x7, 0xd}}}]}, 0x34}}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200980, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x1) ioctl$KVM_SET_CLOCK(r4, 0x4188aec6, &(0x7f0000000040)) ioctl$KVM_SET_CLOCK(r4, 0x4188aec6, &(0x7f0000000040)={0x0, 0x4, 0x0, 0x125, 0x9}) accept4(r1, &(0x7f0000000240)=@sco={0x1f, @none}, &(0x7f0000000340)=0x80, 0x80800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, 0x0, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42202) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000dc0)={0x1f, 0x14, &(0x7f00000012c0)=ANY=[@ANYBLOB="1800000000600000000000000400000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000090000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000042b50000850000008200000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r5, 0x4058534c, &(0x7f00000000c0)={0x80, 0x9, 0x67fff, 0x40069ce, 0xfffff4f1, 0x4}) ioctl$SNDCTL_DSP_SYNC(0xffffffffffffffff, 0x5001, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000500)={{{@in=@remote, @in6=@mcast2}}, {{@in6=@mcast1}, 0x0, @in6=@empty}}, &(0x7f00000003c0)=0xe8) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2) mkdir(&(0x7f0000000100)='./dbg\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./dbg\x00', &(0x7f0000000400)='debugfs\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./dbg/ieee80211/phy1/netdev:wlan1/beacon_loss\x00', 0x1, 0x0) write(r8, 0x0, 0x0) close(r4) 3.13026121s ago: executing program 3 (id=317): timer_settime(0x0, 0x1, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000240), 0x4) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100), &(0x7f0000000180)={0x0, 0xfb, 0x16, 0x2, 0x41, "29a265cb36a659f965f0a72240bb4924", '|'}, 0x16, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f00000019c0)=@newtaction={0x14, 0x30, 0x0, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x80) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f00000019c0)=@newtaction={0x14, 0x30, 0x0, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x80) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRESHEX=r1, @ANYBLOB="000000000000000008001b"], 0x44}}, 0x4000800) socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.856367092s ago: executing program 4 (id=318): setns(0xc9, 0x0) socket(0x2a, 0x2, 0x9) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newneigh={0x30, 0x1c, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, r3, 0x0, 0x11}, [@NDA_DST_MAC={0xa, 0x1, @link_local}, @NDA_FLAGS_EXT={0x8, 0xf, 0x1}]}, 0x30}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r5 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r5, &(0x7f0000000080), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r5, &(0x7f00000000c0), 0x2) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80880) tee(r6, r7, 0x4ac, 0xa) socket$unix(0x1, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="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", 0x13a}], 0x2}, 0x40460c1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000400)="14", 0x2, 0x0, 0x4}, 0x50) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r8}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) r10 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) write$FUSE_INIT(r10, 0x0, 0x0) syz_fuse_handle_req(r10, 0x0, 0x0, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d00)={0x90, 0x0, 0x0, {0x4, 0xffffffffffffffff, 0xb70, 0x7e30, 0xf, 0x3, {0x0, 0xffffffffffffffff, 0x0, 0x100000000, 0x3, 0x1, 0x2, 0x2, 0x2608636, 0x4000, 0x20080000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000200)={{{@in=@loopback, @in6=@private2, 0x4e20, 0x2, 0x4e20, 0x5, 0xa, 0xa0, 0x80, 0x2f, r9}, {0x4, 0x7, 0x6, 0x100000000, 0x8, 0xfb, 0xf57, 0x83}, {0x7fff, 0x82d1, 0x600, 0x3fffffff80}, 0xffffff81, 0x6e6bbb, 0x1, 0x1, 0x1, 0x2}, {{@in6=@private1, 0x4d3, 0x4d}, 0xa, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3506, 0x0, 0x0, 0x4, 0x3ae, 0x21a4695a, 0x1}}, 0xe8) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNGETVNETBE(r12, 0x800454df, &(0x7f0000000000)) sendmsg$NFT_BATCH(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000050002000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a300000000008000540000000040c00098008000140ff"], 0x90}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001c00070c002000000000000002000000", @ANYRES32=r4, @ANYBLOB="0000c00014000100"], 0x30}}, 0x20024090) 1.851651933s ago: executing program 1 (id=319): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 1.76022829s ago: executing program 0 (id=320): syz_usb_connect(0x2, 0x2d, &(0x7f0000000540)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e001c030109021b0001000000040904080001030000000905", @ANYBLOB="9fef"], 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f00000005c0)={0xf, {"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", 0x1010}}, 0x1006) msgrcv(0x0, 0x0, 0x0, 0x2, 0x3000) syz_usb_connect(0x5, 0xe4, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYRES32, @ANYRESDEC=0x0], 0x0) 1.611769215s ago: executing program 1 (id=321): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) close(r0) socket$kcm(0x10, 0x2, 0x4) ioctl$SIOCSIFHWADDR(r0, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @remote}) recvmsg$unix(0xffffffffffffffff, 0x0, 0x80) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x6, 0x4, 0x4, 0x56}, {0x5, 0x8, 0x50, 0x1001}, {0x902b, 0x7, 0xd0, 0xc}]}) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) r1 = io_uring_setup(0x2a8c, &(0x7f0000000080)={0x0, 0x869e, 0x80, 0x3, 0x1fb}) socket$igmp6(0xa, 0x3, 0x2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x22, &(0x7f0000001680)=0x1, 0x4) setsockopt$inet6_int(r2, 0x29, 0x8, &(0x7f0000000140)=0x9, 0x4) bind$inet6(r2, &(0x7f0000000240)={0xa, 0x4e20, 0x9, @empty, 0x5}, 0x1c) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/usb/devices/usb1/1-0:1.0/usb1-port1/disable\x00', 0x1, 0x0) write(r3, &(0x7f0000000200)="87", 0x1) sendmmsg$inet6(r3, &(0x7f0000002fc0)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @ipv4={'\x00', '\xff\xff', @empty}, 0x1}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000a40)="fb", 0x1}], 0x33}}], 0x1, 0x20080058) close_range(r1, 0xffffffffffffffff, 0x0) 1.525966829s ago: executing program 3 (id=322): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0xe4ff, &(0x7f0000000000)={&(0x7f0000000380)=@newtaction={0x6c, 0x30, 0x9, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_TC={0x5}, @TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x3}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) 1.40362976s ago: executing program 1 (id=323): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000000)={0x2d, 0x2c, 0x2, 0x4000002, 0x2, 0xb1, 0x5, 0x2, 0x1}) r1 = socket$nl_route(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) exit(0x5) r2 = userfaultfd(0x801) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$KVM_TPR_ACCESS_REPORTING(r5, 0xc028ae92, &(0x7f0000000000)={0x10, 0x7fff}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0) r8 = accept4(r7, 0x0, 0x0, 0x0) sendmmsg$alg(r8, &(0x7f00000007c0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000580)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0ea796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9f86935849e6098ed00004fe035bbb0958730", 0x43}, {&(0x7f00000002c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e", 0xad}], 0x3, &(0x7f0000000540)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xfff1, 0xe}}, [@TCA_RATE={0x6, 0x5, {0x3, 0x6}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x880}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@gettfilter={0xffffffffffffffb2, 0x2e, 0x400, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0x5, 0x6}, {0xfff2, 0x6}, {0x1, 0x7}}}, 0x24}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000b98bc2c900000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000004}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000005880)={r11, 0x2000000, 0xe, 0x0, &(0x7f0000000380)="3f121b5ae730a16b38ec3c25a36f", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x50) 1.401857373s ago: executing program 3 (id=324): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) listen(r1, 0xfffffffd) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8000}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000005e110000000000000000612f7800000000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x70) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETVNETHDRSZ(r4, 0x400454d8, &(0x7f0000000180)=0x2cf7) write$cgroup_devices(r4, &(0x7f00000001c0)=ANY=[@ANYRESHEX], 0xffdd) ioctl$FS_IOC_GETVERSION(r3, 0x80087601, &(0x7f0000000000)) listen(r1, 0x5) r5 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r5, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43, 0x0, 0x3}}, 0x10) r6 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) r7 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r5, &(0x7f0000000280)={&(0x7f0000000040), 0x10, 0x0}, 0x0) sendmsg$tipc(r7, &(0x7f00000002c0)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x2, {0x40, 0x2, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x48001}, 0x20044095) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRES32=r1], 0x34}, 0x1, 0x0, 0x0, 0x48000}, 0x0) 1.342390257s ago: executing program 4 (id=325): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r0, &(0x7f0000000140)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty, 0xfffffffe}, 0x1c, 0x0}}], 0x1, 0x20080058) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x8c40, 0x0) writev(0xffffffffffffffff, &(0x7f00000004c0)=[{&(0x7f0000000000)="26eba9fdb4cbab48929e1af1510000000000000005000000000001", 0x1b}], 0x1) r3 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280), 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) setsockopt$sock_int(r4, 0x1, 0x21, &(0x7f0000000040), 0x4) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000000c0)=r2, 0x4) r5 = accept4(r3, 0x0, 0x0, 0x80000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0xc, 0x143182) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r7 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f00000002c0)={0x84, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e1c, 0x3, 'wrr\x00', 0x5, 0x80, 0x1b}, 0x2c) socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x0, 0x81, 0x5}, {@broadcast, 0x4e23, 0x2, 0x1cb, 0x12d61, 0x12d58}}, 0x44) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@perf_event={0x429}}, 0x18) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) modify_ldt$read(0x0, &(0x7f0000000500)=""/234, 0xea) sendmsg$AUDIT_USER_AVC(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB], 0x20000}, 0x1, 0x0, 0x0, 0x8000}, 0x20000080) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="48000000100001060100000000000000000000000000000000000000000000001000030073797a6b616c6c65723000001800128008000100767266000c000280080001"], 0x48}}, 0x800) 1.327997616s ago: executing program 3 (id=326): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r0, &(0x7f0000000140)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty, 0xfffffffe}, 0x1c, 0x0}}], 0x1, 0x20080058) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x8c40, 0x0) writev(0xffffffffffffffff, &(0x7f00000004c0)=[{&(0x7f0000000000)="26eba9fdb4cbab48929e1af1510000000000000005000000000001", 0x1b}], 0x1) r3 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280), 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) setsockopt$sock_int(r4, 0x1, 0x21, &(0x7f0000000040), 0x4) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000000c0)=r2, 0x4) r5 = accept4(r3, 0x0, 0x0, 0x80000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0xc, 0x143182) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r7 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f00000002c0)={0x84, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e1c, 0x3, 'wrr\x00', 0x5, 0x80, 0x1b}, 0x2c) socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x0, 0x81, 0x5}, {@broadcast, 0x4e23, 0x2, 0x1cb, 0x12d61, 0x12d58}}, 0x44) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@perf_event={0x429}}, 0x18) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) modify_ldt$read(0x0, &(0x7f0000000500)=""/234, 0xea) sendmsg$AUDIT_USER_AVC(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB], 0x20000}, 0x1, 0x0, 0x0, 0x8000}, 0x20000080) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="48000000100001060100000000000000000000000000000000000000000000001000030073797a6b616c6c65723000001800128008000100767266000c000280080001"], 0x48}}, 0x800) 362.915074ms ago: executing program 4 (id=327): syz_open_dev$loop(0x0, 0x4, 0x40100) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, &(0x7f0000000080)=0x1) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x13, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000540000000000000070000006b1138000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x4008080}, 0x8000) request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x187) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x44000880}, 0x4080) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xa909, 0x1f480, 0x2, 0x254}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x28, 0x0, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r4, 0x0, 0x0) write(r4, &(0x7f0000000300)='rt1719 0x49', 0xb) write(r4, &(0x7f0000000400)='wusb3801 0x4', 0xc) io_uring_enter(r2, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) 0s ago: executing program 3 (id=328): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x5, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0400000004000000040000001000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000008e74ffffffffffff00000000000000000000000000000000604b9a5aaa92661607739e5f94b8a4edaf5adc08f10e23246959d4c7c22b2a6804d869c6b3be40bf6341234aeeaa00d9c71d9f22d7912bc23a42e7cba0de389bc55ecd5c63c4f10cfcde27b97f392bc35b9a85107108b6e45fce11f11aaf72"], 0x48) syz_emit_ethernet(0x2a, &(0x7f00000003c0)=ANY=[@ANYBLOB="aabb08060001080006040002aaaaaa2aaa39ac1414bbaaaaaaaaaabb7f0000011fd7db720aaf1b535d4012f752deec4ebfebe00833917ddf16a7d77a2d23fae6a403f0c4948e3b66dc859a0252f105f9f8e34ae8ab16f4d73b8ae03d0fdf8a0d56799a3be689000000eba09fa7db00000000000000"], 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x98100, 0x20) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd930000000000ac1e0001000000000000000000000000ac1414aa000000000000000000000000000000000000000fc219e8624fc6a47b", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7f000000000000000000000000000000000400000000000000ffffffffffffffff070000000000000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008ffffffff0000000001000600000000004400050000000000000000000000ffff0a010101000000003c0000000200000000000000000000000000ffffac1e010106000000040300000100"/180], 0xfc}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r4 = socket$inet6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x200) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x4e25, 0x0, @empty, 0x7}, 0x1c) sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0xffd8) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r7, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) bind$inet6(r7, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r7, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$sock(r7, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)=' ', 0x1}], 0x1}}], 0x1, 0x40000) shutdown(r7, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x14, 0x9, &(0x7f00000005c0)=ANY=[@ANYBLOB="18120000", @ANYRES64=r5, @ANYRESOCT=r5, @ANYRES32=r2, @ANYBLOB="0000000000000000bf9c00000000000007040000f8ffffff9864ffff0100000085000000190000009520330002000000", @ANYRESOCT=r2], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000001c0)={'bridge0\x00', &(0x7f0000000080)=@ethtool_rxfh={0x1}}) sendmsg$nl_generic(r0, 0x0, 0x4000000) socket$key(0xf, 0x3, 0x2) kernel console output (not intermixed with test programs): T5876] orangefs_mount: mount request failed with -4 [ 72.375524][ T5863] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 72.578938][ T187] IPVS: starting estimator thread 0... [ 72.712518][ T5888] IPVS: using max 37 ests per chain, 88800 per kthread [ 72.794422][ T5718] gud 3-1:1.0: USB-1: Failed to add properties (ret=-5) [ 72.845954][ T5718] gud 3-1:1.0: Failed to get connectors (error=-5) [ 72.923642][ T5718] gud 3-1:1.0: probe with driver gud failed with error -5 [ 73.462524][ T60] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.481638][ T5718] usb 3-1: USB disconnect, device number 2 [ 73.519094][ T5883] netlink: 40 bytes leftover after parsing attributes in process `syz.0.17'. [ 73.532649][ T5825] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.578818][ T5825] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.615277][ T5825] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.322237][ T10] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 74.328235][ T5892] netlink: 40 bytes leftover after parsing attributes in process `syz.4.19'. [ 74.399420][ T5906] netlink: 8 bytes leftover after parsing attributes in process `syz.0.21'. [ 74.958278][ T5894] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 74.968106][ T5894] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 74.978597][ T5894] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 74.988924][ T5894] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 74.998813][ T5894] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 75.008467][ T5894] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 75.018257][ T5894] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 75.027854][ T5894] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 75.037411][ T5894] UDF-fs: warning (device loop0): udf_fill_super: No partition found (1) [ 75.059588][ T5328] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 75.124196][ T30] kauditd_printk_skb: 30 callbacks suppressed [ 75.124218][ T30] audit: type=1400 audit(1787157270.724:240): avc: denied { unmount } for pid=5591 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 75.225018][ T5328] usb 2-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 75.257028][ T10] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 75.306696][ T5328] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.308450][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.327010][ T5913] netlink: 8 bytes leftover after parsing attributes in process `syz.4.26'. [ 75.338687][ T10] usb 3-1: Product: syz [ 75.344258][ T10] usb 3-1: Manufacturer: syz [ 75.389207][ T10] usb 3-1: SerialNumber: syz [ 75.391344][ T5328] usb 2-1: config 0 descriptor?? [ 75.537839][ T5913] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 75.556644][ T5913] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 75.562004][ T5328] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 75.599510][ T5913] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 75.611802][ T5913] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 75.630978][ T5913] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 75.632215][ T24] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 75.647718][ T5913] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 75.660372][ T5913] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 75.670759][ T5913] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 75.680581][ T5913] UDF-fs: warning (device loop4): udf_fill_super: No partition found (1) [ 75.741805][ T5908] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.760161][ T5908] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.772584][ T30] audit: type=1400 audit(1787157271.374:241): avc: denied { read write } for pid=5917 comm="syz.3.29" name="vbi5" dev="devtmpfs" ino=980 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 75.795905][ T5908] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.814951][ T5908] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.822866][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 75.835177][ T24] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 75.853923][ T30] audit: type=1400 audit(1787157271.374:242): avc: denied { open } for pid=5917 comm="syz.3.29" path="/dev/vbi5" dev="devtmpfs" ino=980 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 75.879703][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 75.896023][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 75.908388][ T30] audit: type=1400 audit(1787157271.374:243): avc: denied { ioctl } for pid=5917 comm="syz.3.29" path="/dev/vbi5" dev="devtmpfs" ino=980 ioctlcmd=0x562f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 75.933643][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.933919][ T5908] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 75.948595][ T980] cfg80211: failed to load regulatory.db [ 75.957912][ T24] usb 1-1: config 0 descriptor?? [ 75.985696][ T24] hub 1-1:0.0: USB hub found [ 76.000026][ T5921] netlink: 12 bytes leftover after parsing attributes in process `syz.4.30'. [ 76.011387][ T5921] netlink: 12 bytes leftover after parsing attributes in process `syz.4.30'. [ 76.054183][ T30] audit: type=1400 audit(1787157271.654:244): avc: denied { mount } for pid=5917 comm="syz.3.29" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 76.086753][ T5923] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.213140][ T24] hub 1-1:0.0: 1 port detected [ 76.218464][ T10] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 76.220680][ T5923] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.247259][ T30] audit: type=1400 audit(1787157271.804:245): avc: denied { mount } for pid=5899 comm="syz.2.23" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 76.283365][ T10] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 76.318946][ T10] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 76.332070][ T5328] gp8psk: usb in 128 operation failed. [ 76.339758][ T5328] gp8psk: usb in 137 operation failed. [ 76.349754][ T5328] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 76.360682][ T5328] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 76.405334][ T30] audit: type=1400 audit(1787157271.894:246): avc: denied { unmount } for pid=5591 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 76.449719][ T5328] usb 2-1: USB disconnect, device number 3 [ 77.215307][ T24] hub 1-1:0.0: activate --> -90 [ 77.386495][ T5937] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 77.660138][ T30] audit: type=1400 audit(1787157272.904:247): avc: denied { search } for pid=5932 comm="syz.3.32" name="/" dev="configfs" ino=60 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 77.815121][ T30] audit: type=1400 audit(1787157272.904:248): avc: denied { search } for pid=5932 comm="syz.3.32" name="usb_gadget" dev="configfs" ino=130 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 77.857166][ T5936] orangefs_mount: mount request failed with -4 [ 77.933958][ T24] usb 1-1: USB disconnect, device number 2 [ 77.972047][ T10] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 78.003825][ T10] usb 3-1: USB disconnect, device number 3 [ 78.090652][ T30] audit: type=1400 audit(1787157273.374:249): avc: denied { unmount } for pid=5600 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 78.577361][ T5966] netlink: 8 bytes leftover after parsing attributes in process `syz.2.33'. [ 78.663232][ T5967] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 78.680878][ T5967] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 78.700057][ T5967] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 78.711687][ T5967] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 78.727767][ T5967] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 78.739472][ T5967] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 78.757558][ T5967] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 78.769282][ T5967] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 78.778937][ T5967] UDF-fs: warning (device loop2): udf_fill_super: No partition found (1) [ 79.188369][ T5979] can0: slcan on ttyS3. [ 79.319748][ T5979] can0 (unregistered): slcan off ttyS3. [ 79.897612][ T5985] netlink: 36 bytes leftover after parsing attributes in process `syz.0.41'. [ 80.550758][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 80.550798][ T30] audit: type=1400 audit(1787157275.714:251): avc: denied { create } for pid=5983 comm="syz.0.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 80.926418][ T30] audit: type=1400 audit(1787157275.714:252): avc: denied { write } for pid=5983 comm="syz.0.41" path="socket:[9366]" dev="sockfs" ino=9366 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 81.027202][ T5987] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 81.038819][ T5995] netlink: 8 bytes leftover after parsing attributes in process `syz.3.39'. [ 81.048354][ T30] audit: type=1400 audit(1787157276.144:253): avc: denied { read append } for pid=5982 comm="syz.2.40" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 81.104027][ T5987] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 81.110358][ T30] audit: type=1400 audit(1787157276.144:254): avc: denied { open } for pid=5982 comm="syz.2.40" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 81.139889][ T5987] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 81.463036][ T6003] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 81.479937][ T6003] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 81.498662][ T6003] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 81.509484][ T6003] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 81.526418][ T6003] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 81.537851][ T6003] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 81.575545][ T6000] netlink: 8 bytes leftover after parsing attributes in process `syz.0.44'. [ 81.589747][ T5987] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 81.599124][ T6003] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 81.609688][ T5987] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 81.629395][ T5981] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 81.642998][ T6003] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 81.654659][ T6003] UDF-fs: warning (device loop0): udf_fill_super: No partition found (1) [ 81.669541][ T5987] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 81.688540][ T5981] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 81.700907][ T5987] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 81.724494][ T5987] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 81.736798][ T5981] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 81.777717][ T5987] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 81.784453][ T5981] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 81.797094][ T5981] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 81.829157][ T5987] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 81.848749][ T5987] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 81.855579][ T5981] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 81.870840][ T5981] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 81.888595][ T5987] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 81.903762][ T30] audit: type=1400 audit(1787157277.494:255): avc: denied { read } for pid=6007 comm="syz.0.46" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 81.941351][ T5987] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 81.954700][ T5981] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 81.967119][ T5987] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 81.973967][ T30] audit: type=1400 audit(1787157277.494:256): avc: denied { open } for pid=6007 comm="syz.0.46" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 81.998024][ T5981] UDF-fs: warning (device loop3): udf_fill_super: No partition found (1) [ 82.008503][ T5987] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 82.361565][ T30] audit: type=1400 audit(1787157277.504:257): avc: denied { ioctl } for pid=6007 comm="syz.0.46" path="/dev/binderfs/binder0" dev="binder" ino=13 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 82.429294][ T30] audit: type=1400 audit(1787157277.524:258): avc: denied { set_context_mgr } for pid=6007 comm="syz.0.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 82.491720][ T30] audit: type=1400 audit(1787157277.534:259): avc: denied { map } for pid=6007 comm="syz.0.46" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 82.541766][ T30] audit: type=1400 audit(1787157278.074:260): avc: denied { read write } for pid=5982 comm="syz.2.40" name="ptp0" dev="devtmpfs" ino=1264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 82.593660][ T6012] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 82.610640][ T5607] Bluetooth: hci4: unexpected event for opcode 0x0000 [ 83.062233][ T5607] Bluetooth: hci0: command 0x0c1a tx timeout [ 83.623376][ T5607] Bluetooth: hci1: command 0x0c1a tx timeout [ 83.714360][ T5607] Bluetooth: hci2: command 0x0c1a tx timeout [ 83.862325][ T5607] Bluetooth: hci3: command 0x0c1a tx timeout [ 84.807585][ T6029] netlink: 8 bytes leftover after parsing attributes in process `syz.1.49'. [ 84.940276][ T6020] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.947566][ T6020] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.969141][ T6029] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 84.990199][ T6029] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 85.010010][ T6029] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 85.020088][ T6029] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 85.053662][ T6029] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 85.078476][ T6029] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 85.089835][ T6020] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 85.099880][ T6029] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 85.111796][ T6020] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 85.119926][ T5689] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 85.132996][ T6029] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 85.142647][ T5607] Bluetooth: hci0: command 0x0c1a tx timeout [ 85.177140][ T6029] UDF-fs: warning (device loop1): udf_fill_super: No partition found (1) [ 85.252590][ T12] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.287655][ T12] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.300139][ T5689] usb 3-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 85.325174][ T12] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.335108][ T5689] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 85.358835][ T5689] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 85.368640][ T12] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.387173][ T5689] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 85.411232][ T5689] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 85.441384][ T5689] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.476999][ T6056] Zero length message leads to an empty skb [ 85.712420][ T5607] Bluetooth: hci1: command 0x0c1a tx timeout [ 85.782450][ T5607] Bluetooth: hci2: command 0x0c1a tx timeout [ 85.835050][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 85.835064][ T30] audit: type=1400 audit(1787157281.434:264): avc: denied { kexec_image_load } for pid=6055 comm="syz.3.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 85.942224][ T5607] Bluetooth: hci3: command 0x0c1a tx timeout [ 85.988010][ T6059] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 86.017829][ T6059] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 86.044242][ T6059] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 86.066962][ T6059] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 86.102527][ T6059] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 86.579549][ T6067] netlink: 8 bytes leftover after parsing attributes in process `syz.4.55'. [ 86.766889][ T5689] gud 3-1:1.0: USB-1: Failed to add properties (ret=-5) [ 86.776409][ T5689] gud 3-1:1.0: Failed to get connectors (error=-5) [ 86.806228][ T5689] gud 3-1:1.0: probe with driver gud failed with error -5 [ 86.842108][ T6065] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 86.851794][ T6065] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 86.862195][ T6065] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 86.871788][ T6065] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 86.881642][ T6065] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 86.891229][ T6065] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 86.901013][ T6065] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 86.910624][ T6065] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 86.920148][ T6065] UDF-fs: warning (device loop4): udf_fill_super: No partition found (1) [ 86.997574][ T5689] usb 3-1: USB disconnect, device number 4 [ 87.258749][ T30] audit: type=1400 audit(1787157282.844:265): avc: denied { search } for pid=6069 comm="syz.3.56" name="/" dev="configfs" ino=60 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 87.334084][ T6074] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 87.946569][ T6072] orangefs_mount: mount request failed with -4 [ 88.115554][ T5607] Bluetooth: hci0: command 0x0c1a tx timeout [ 88.121607][ T5610] Bluetooth: hci1: command 0x0c1a tx timeout [ 88.127628][ T5610] Bluetooth: hci3: command 0x0c1a tx timeout [ 88.133627][ T5610] Bluetooth: hci2: command 0x0c1a tx timeout [ 88.179148][ T30] audit: type=1400 audit(1787157282.844:266): avc: denied { search } for pid=6069 comm="syz.3.56" name="usb_gadget" dev="configfs" ino=130 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 88.215608][ T5593] Bluetooth: hci4: command 0x0c1a tx timeout [ 88.223059][ T6077] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 88.506669][ T6076] orangefs_mount: mount request failed with -4 [ 88.559929][ T30] audit: type=1804 audit(1787157283.974:267): pid=6083 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.58" name="file1" dev="ramfs" ino=8979 res=1 errno=0 [ 88.721868][ T6082] netlink: 4 bytes leftover after parsing attributes in process `syz.3.59'. [ 88.822708][ T6095] netlink: 4 bytes leftover after parsing attributes in process `syz.3.59'. [ 88.856037][ T6092] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 88.865957][ T6092] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 88.873953][ T6092] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 88.880861][ T6092] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 88.883806][ T30] audit: type=1400 audit(1787157284.474:268): avc: denied { execute } for pid=6079 comm="syz.0.58" name="file1" dev="ramfs" ino=8979 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 88.887095][ T6092] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 89.421294][ T6099] netlink: 20 bytes leftover after parsing attributes in process `syz.1.63'. [ 90.658966][ T30] audit: type=1400 audit(1787157286.244:269): avc: denied { block_suspend } for pid=6102 comm="syz.1.65" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 90.942252][ T5607] Bluetooth: hci3: command 0x0c1a tx timeout [ 90.948501][ T5607] Bluetooth: hci1: command 0x0c1a tx timeout [ 90.960569][ T5607] Bluetooth: hci2: command 0x0c1a tx timeout [ 90.967499][ T5607] Bluetooth: hci0: command 0x0c1a tx timeout [ 90.982221][ T5610] Bluetooth: hci4: command 0x0c1a tx timeout [ 91.331899][ T6114] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 91.340759][ T30] audit: type=1400 audit(1787157286.854:270): avc: denied { search } for pid=6105 comm="syz.3.66" name="/" dev="configfs" ino=60 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 91.617435][ T30] audit: type=1400 audit(1787157286.854:271): avc: denied { search } for pid=6105 comm="syz.3.66" name="usb_gadget" dev="configfs" ino=130 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 91.843000][ T6113] orangefs_mount: mount request failed with -4 [ 92.055510][ T6122] netlink: 8 bytes leftover after parsing attributes in process `syz.1.69'. [ 92.152623][ T6119] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 92.162492][ T6119] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 92.172507][ T6119] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 92.182078][ T6119] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 92.192452][ T6119] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 92.202044][ T6119] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 92.211849][ T6119] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 92.221428][ T6119] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 92.230956][ T6119] UDF-fs: warning (device loop1): udf_fill_super: No partition found (1) [ 92.617358][ T6128] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 92.624196][ T6128] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 92.630132][ T6128] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 92.636084][ T6128] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 92.642004][ T6128] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 93.089852][ T6143] can0: slcan on ttyS3. [ 93.726684][ T6151] netlink: 8 bytes leftover after parsing attributes in process `syz.3.73'. [ 93.808582][ T6140] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 93.927393][ T6147] can0 (unregistered): slcan off ttyS3. [ 93.934438][ T6140] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 93.988654][ T6140] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 93.999646][ T6140] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 94.072658][ T6140] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 94.091998][ T6140] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 94.168236][ T6140] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 94.195241][ T6140] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 94.208212][ T6140] UDF-fs: warning (device loop3): udf_fill_super: No partition found (1) [ 94.299961][ T6172] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 94.382610][ T5689] IPVS: starting estimator thread 0... [ 94.497573][ T6176] IPVS: using max 37 ests per chain, 88800 per kthread [ 94.672993][ T5593] Bluetooth: hci3: command 0x0c1a tx timeout [ 94.679395][ T5593] Bluetooth: hci4: command 0x0c1a tx timeout [ 94.686838][ T5607] Bluetooth: hci1: command 0x0c1a tx timeout [ 94.693188][ T5593] Bluetooth: hci2: command 0x0c1a tx timeout [ 94.699399][ T5610] Bluetooth: hci0: command 0x0c1a tx timeout [ 95.421878][ T6185] binder: BINDER_SET_CONTEXT_MGR already set [ 95.426937][ T6187] futex_wake_op: syz.1.80 tries to shift op by 144; fix this program [ 95.441069][ T30] audit: type=1400 audit(1787157291.034:272): avc: denied { bind } for pid=6186 comm="syz.1.80" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 95.526302][ T5689] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 95.679575][ T6185] binder: 6184:6185 ioctl 4018620d 200000004a80 returned -16 [ 95.704753][ T5689] usb 1-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 95.726646][ T6191] warning: `syz.1.80' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 95.761980][ T5689] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.839843][ T30] audit: type=1400 audit(1787157291.424:273): avc: denied { create } for pid=6186 comm="syz.1.80" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 95.865586][ T5689] usb 1-1: config 0 descriptor?? [ 95.884984][ T5689] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 95.897026][ T6191] tmpfs: Bad value for 'huge' [ 95.936842][ T30] audit: type=1400 audit(1787157291.424:274): avc: denied { ioctl } for pid=6186 comm="syz.1.80" path="socket:[9612]" dev="sockfs" ino=9612 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 95.997076][ T30] audit: type=1400 audit(1787157291.464:275): avc: denied { setopt } for pid=6186 comm="syz.1.80" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 96.017006][ T30] audit: type=1400 audit(1787157291.524:276): avc: denied { create } for pid=6186 comm="syz.1.80" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 96.039579][ T30] audit: type=1400 audit(1787157291.524:277): avc: denied { setopt } for pid=6186 comm="syz.1.80" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 96.763454][ T6179] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.796694][ T6179] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.813100][ T6179] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.835013][ T6179] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.883906][ T6179] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 96.921157][ T6179] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.099996][ T6179] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.122694][ T5689] gp8psk: usb in 128 operation failed. [ 97.135510][ T5689] gp8psk: usb in 137 operation failed. [ 97.158935][ T5689] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 97.599361][ T30] audit: type=1400 audit(1787157292.824:278): avc: denied { create } for pid=6202 comm="syz.2.83" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 97.649524][ T5689] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 97.673468][ T5689] usb 1-1: USB disconnect, device number 3 [ 97.699273][ T30] audit: type=1400 audit(1787157292.824:279): avc: denied { setopt } for pid=6202 comm="syz.2.83" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 98.249237][ T6217] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 98.289822][ T6215] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 98.310262][ T6211] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 98.359013][ T6211] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 98.368978][ T6211] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 98.378630][ T6211] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 98.388443][ T6211] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 98.398081][ T6211] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 98.407824][ T6211] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 98.417393][ T6211] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 98.426930][ T6211] UDF-fs: warning (device loop4): udf_fill_super: No partition found (1) [ 98.644806][ T6228] binder: BINDER_SET_CONTEXT_MGR already set [ 98.664709][ T6228] binder: 6226:6228 ioctl 4018620d 200000004a80 returned -16 [ 98.714922][ T30] audit: type=1400 audit(1787157294.304:280): avc: denied { create } for pid=6223 comm="syz.1.90" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 98.788095][ T30] audit: type=1400 audit(1787157294.354:281): avc: denied { read write } for pid=6223 comm="syz.1.90" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 98.833731][ T5689] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 98.844889][ T30] audit: type=1400 audit(1787157294.364:282): avc: denied { open } for pid=6223 comm="syz.1.90" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 99.012251][ T5689] usb 3-1: device descriptor read/64, error -71 [ 99.252253][ T5689] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 99.402378][ T5689] usb 3-1: device descriptor read/64, error -71 [ 99.519407][ T5689] usb usb3-port1: attempt power cycle [ 99.578382][ T30] audit: type=1400 audit(1787157295.174:283): avc: denied { write } for pid=6232 comm="syz.1.92" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 99.634962][ T6233] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3835797286 (7671594572 ns) > initial count (4918772610 ns). Using initial count to start timer. [ 99.901515][ T6237] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=2527804186 (323558935808 ns) > initial count (117850194176 ns). Using initial count to start timer. [ 99.952219][ T5689] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 99.986098][ T5689] usb 3-1: device descriptor read/8, error -71 [ 100.107156][ T6235] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 100.113177][ T6235] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 100.119109][ T6235] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 100.125069][ T6235] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 100.130986][ T6235] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 100.263808][ T5689] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 100.302709][ T5689] usb 3-1: device descriptor read/8, error -71 [ 100.352121][ T30] audit: type=1400 audit(1787157295.944:284): avc: denied { create } for pid=6247 comm="syz.4.96" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 100.398134][ T6252] netlink: 28 bytes leftover after parsing attributes in process `syz.1.97'. [ 100.399268][ T30] audit: type=1400 audit(1787157295.954:285): avc: denied { ioctl } for pid=6247 comm="syz.4.96" path="socket:[9196]" dev="sockfs" ino=9196 ioctlcmd=0x61f2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 100.452833][ T5689] usb usb3-port1: unable to enumerate USB device [ 100.475695][ T6254] can0: slcan on ttyS3. [ 100.563585][ T6256] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4 sclass=netlink_route_socket pid=6256 comm=syz.1.97 [ 100.589454][ T6254] can0 (unregistered): slcan off ttyS3. [ 100.631247][ T30] audit: type=1400 audit(1787157296.224:286): avc: denied { write } for pid=6251 comm="syz.1.97" name="001" dev="devtmpfs" ino=746 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 100.700104][ T30] audit: type=1400 audit(1787157296.274:287): avc: denied { name_connect } for pid=6258 comm="syz.4.98" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 101.370447][ T6274] binder: BINDER_SET_CONTEXT_MGR already set [ 101.393435][ T6274] binder: 6273:6274 ioctl 4018620d 200000004a80 returned -16 [ 101.444859][ T6269] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.452747][ T6269] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.572757][ T5328] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 101.760667][ T6269] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 101.794662][ T5328] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 101.849290][ T5328] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.901254][ T5328] usb 2-1: Product: syz [ 101.917474][ T6269] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 101.933034][ T5328] usb 2-1: Manufacturer: syz [ 101.943006][ T5328] usb 2-1: SerialNumber: syz [ 102.112479][ T5610] Bluetooth: hci0: command 0x0c1a tx timeout [ 102.182967][ T5610] Bluetooth: hci3: command 0x0c1a tx timeout [ 102.192798][ T5607] Bluetooth: hci2: command 0x0c1a tx timeout [ 102.198877][ T5593] Bluetooth: hci1: command 0x0c1a tx timeout [ 102.205523][ T5610] Bluetooth: hci4: command 0x0c1a tx timeout [ 102.406118][ T6268] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 102.522428][ T6285] netlink: 'syz.2.108': attribute type 1 has an invalid length. [ 102.682278][ T1018] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.697310][ T1018] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.709591][ T1018] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.718884][ T1018] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.741997][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 102.742009][ T30] audit: type=1400 audit(1787157298.334:305): avc: denied { unmount } for pid=5600 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 102.792305][ T5689] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 102.807159][ T30] audit: type=1400 audit(1787157298.404:306): avc: denied { search } for pid=6270 comm="syz.1.104" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 102.833967][ T5328] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 102.846872][ T30] audit: type=1400 audit(1787157298.404:307): avc: denied { read } for pid=6270 comm="syz.1.104" name="export_features" dev="nfsd" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 102.869989][ T5328] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 102.881743][ T5328] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 102.890717][ T30] audit: type=1400 audit(1787157298.404:308): avc: denied { open } for pid=6270 comm="syz.1.104" path="/23/nfsd/export_features" dev="nfsd" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 102.915853][ T5328] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 102.932265][ T24] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 102.940648][ T5328] usb 2-1: USB disconnect, device number 4 [ 102.942315][ T5689] usb 4-1: Using ep0 maxpacket: 8 [ 102.958613][ T5689] usb 4-1: New USB device found, idVendor=0421, idProduct=0099, bcdDevice=ce.f2 [ 102.981859][ T5689] usb 4-1: config 6 has an invalid interface number: 150 but max is 0 [ 102.991238][ T5689] usb 4-1: config 6 has no interface number 0 [ 103.021254][ T5689] usb 4-1: config 6 interface 150 has no altsetting 0 [ 103.036522][ T5689] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.045586][ T5689] usb 4-1: Product: syz [ 103.049768][ T5689] usb 4-1: Manufacturer: syz [ 103.054650][ T5689] usb 4-1: SerialNumber: syz [ 103.092235][ T24] usb 5-1: device descriptor read/64, error -71 [ 103.221648][ T30] audit: type=1400 audit(1787157298.814:309): avc: denied { sys_module } for pid=6299 comm="syz.2.114" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 103.281772][ T6287] netlink: 12 bytes leftover after parsing attributes in process `syz.3.109'. [ 103.294216][ T30] audit: type=1400 audit(1787157298.894:310): avc: denied { write } for pid=6286 comm="syz.3.109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 103.332285][ T24] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 103.440719][ T30] audit: type=1400 audit(1787157299.034:311): avc: denied { firmware_load } for pid=6286 comm="syz.3.109" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 103.466396][ T24] usb 5-1: device descriptor read/64, error -71 [ 103.483912][ T6304] can0: slcan on ttyS3. [ 103.496201][ T6306] FAULT_INJECTION: forcing a failure. [ 103.496201][ T6306] name failslab, interval 1, probability 0, space 0, times 1 [ 103.509032][ T6306] CPU: 0 UID: 0 PID: 6306 Comm: syz.1.116 Not tainted syzkaller #0 PREEMPT(full) [ 103.509052][ T6306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 103.509061][ T6306] Call Trace: [ 103.509067][ T6306] [ 103.509074][ T6306] dump_stack_lvl+0x100/0x190 [ 103.509099][ T6306] should_fail_ex.cold+0x5/0xa [ 103.509122][ T6306] should_failslab+0xc2/0x120 [ 103.509148][ T6306] __kmalloc_noprof+0xfc/0x820 [ 103.509170][ T6306] ? __memcg_slab_post_alloc_hook+0x74c/0x1160 [ 103.509190][ T6306] ? io_cache_alloc_new+0x45/0xe0 [ 103.509219][ T6306] io_cache_alloc_new+0x45/0xe0 [ 103.509243][ T6306] __io_prep_rw+0x21d/0xfb0 [ 103.509272][ T6306] ? __pfx___io_prep_rw+0x10/0x10 [ 103.509303][ T6306] ? __io_alloc_req_refill+0x2e1/0x330 [ 103.509332][ T6306] io_prep_rw+0x76/0x2c0 [ 103.509358][ T6306] ? __pfx_io_prep_rw+0x10/0x10 [ 103.509392][ T6306] io_prep_readv+0x20/0xa0 [ 103.509409][ T6306] io_submit_sqes+0xa03/0x2480 [ 103.509441][ T6306] __do_sys_io_uring_enter+0xa88/0x1b10 [ 103.509464][ T6306] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 103.509483][ T6306] ? __fget_files+0x21f/0x3d0 [ 103.509506][ T6306] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 103.509529][ T6306] ? fput+0x7c/0x100 [ 103.509553][ T6306] ? ksys_write+0x1ac/0x250 [ 103.509571][ T6306] ? __pfx_ksys_write+0x10/0x10 [ 103.509597][ T6306] do_syscall_64+0x123/0x790 [ 103.509616][ T6306] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.509634][ T6306] RIP: 0033:0x7f9bd779e0d9 [ 103.509648][ T6306] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.509664][ T6306] RSP: 002b:00007f9bd59f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 103.509682][ T6306] RAX: ffffffffffffffda RBX: 00007f9bd7a25fa0 RCX: 00007f9bd779e0d9 [ 103.509694][ T6306] RDX: 00000000fffffffd RSI: 0000000000002000 RDI: 0000000000000004 [ 103.509704][ T6306] RBP: 00007f9bd59f6090 R08: 0000000000000000 R09: 0000000000000000 [ 103.509715][ T6306] R10: 0000000000000009 R11: 0000000000000246 R12: 0000000000000001 [ 103.509725][ T6306] R13: 00007f9bd7a26038 R14: 00007f9bd7a25fa0 R15: 00007ffe55bba698 [ 103.509748][ T6306] [ 103.622508][ T24] usb usb5-port1: attempt power cycle [ 103.780805][ T5689] rndis_host 4-1:6.150: skipping garbage [ 103.790684][ T6304] can0 (unregistered): slcan off ttyS3. [ 103.793306][ T5689] rndis_host 4-1:6.150: rndis: master #0/0000000000000000 slave #1/0000000000000000 [ 103.806463][ T5689] cdc_acm 4-1:6.150: skipping garbage [ 103.827585][ T5689] usb 4-1: USB disconnect, device number 3 [ 103.966955][ T6312] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3835797286 (7671594572 ns) > initial count (4918772610 ns). Using initial count to start timer. [ 103.986417][ T6312] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=2527804186 (323558935808 ns) > initial count (117850194176 ns). Using initial count to start timer. [ 104.080092][ T6318] netlink: 4 bytes leftover after parsing attributes in process `syz.1.121'. [ 104.155493][ T24] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 104.202270][ T24] usb 5-1: device descriptor read/8, error -71 [ 104.290567][ T6325] netlink: 52 bytes leftover after parsing attributes in process `syz.1.122'. [ 104.316228][ T6325] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 104.327540][ T6325] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 104.343874][ T6325] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 104.354302][ T6325] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 104.381620][ T6287] syz.3.109 (6287) used greatest stack depth: 19928 bytes left [ 104.412324][ T6325] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 104.422276][ T6325] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 104.456275][ T6325] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 104.480189][ T6325] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 104.492266][ T6325] UDF-fs: warning (device loop1): udf_fill_super: No partition found (1) [ 104.763944][ T30] audit: type=1400 audit(1787157299.904:312): avc: denied { create } for pid=6321 comm="syz.2.123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 105.054588][ T6323] FAULT_INJECTION: forcing a failure. [ 105.054588][ T6323] name failslab, interval 1, probability 0, space 0, times 0 [ 105.067422][ T6323] CPU: 0 UID: 0 PID: 6323 Comm: syz.2.123 Not tainted syzkaller #0 PREEMPT(full) [ 105.067444][ T6323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 105.067454][ T6323] Call Trace: [ 105.067460][ T6323] [ 105.067467][ T6323] dump_stack_lvl+0x100/0x190 [ 105.067493][ T6323] should_fail_ex.cold+0x5/0xa [ 105.067517][ T6323] should_failslab+0xc2/0x120 [ 105.067543][ T6323] __kmalloc_cache_noprof+0x91/0x6b0 [ 105.067565][ T6323] ? io_uring_setup.cold+0x6c/0x1cae [ 105.067596][ T6323] io_uring_setup.cold+0x6c/0x1cae [ 105.067632][ T6323] ? __pfx_io_uring_setup+0x10/0x10 [ 105.067652][ T6323] ? find_held_lock+0x2b/0x80 [ 105.067671][ T6323] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 105.067693][ T6323] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 105.067728][ T6323] ? xfd_validate_state+0x129/0x190 [ 105.067759][ T6323] __x64_sys_io_uring_setup+0xc2/0x170 [ 105.067781][ T6323] do_syscall_64+0x123/0x790 [ 105.067801][ T6323] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.067819][ T6323] RIP: 0033:0x7f5a33b9e0d9 [ 105.067835][ T6323] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 105.067852][ T6323] RSP: 002b:00007f5a34b1bee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 105.067870][ T6323] RAX: ffffffffffffffda RBX: 0000200000000a88 RCX: 00007f5a33b9e0d9 [ 105.067882][ T6323] RDX: 0000200000000b08 RSI: 0000200000000a88 RDI: 00000000000003c9 [ 105.067893][ T6323] RBP: 0000200000000a80 R08: 0000000000000000 R09: 0000000000000101 [ 105.067904][ T6323] R10: 0000200000000b10 R11: 0000000000000206 R12: 0000200000000b08 [ 105.067915][ T6323] R13: 0000200000000b10 R14: 00007f5a34b1bfd8 R15: 0000000000000000 [ 105.067937][ T6323] [ 105.071316][ T30] audit: type=1400 audit(1787157300.644:313): avc: denied { mmap_zero } for pid=6321 comm="syz.2.123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 105.119197][ T24] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 105.914758][ T30] audit: type=1400 audit(1787157301.514:314): avc: denied { create } for pid=6333 comm="syz.3.126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 105.945553][ T6336] misc userio: The device must be registered before sending interrupts [ 105.992219][ T6336] misc userio: The device must be registered before sending interrupts [ 106.192208][ T5689] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 106.192355][ T24] usb 5-1: device not accepting address 5, error -71 [ 106.262796][ T24] usb usb5-port1: unable to enumerate USB device [ 106.351211][ T6355] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3092 sclass=netlink_route_socket pid=6355 comm=syz.3.131 [ 106.375193][ T5689] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 106.395819][ T5689] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.426126][ T5689] usb 2-1: Product: syz [ 106.441660][ T5689] usb 2-1: Manufacturer: syz [ 106.457784][ T5689] usb 2-1: SerialNumber: syz [ 106.592674][ T6365] netlink: 4 bytes leftover after parsing attributes in process `syz.3.132'. [ 107.647135][ T5689] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 107.732100][ T5689] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 107.747147][ T5610] Bluetooth: hci3: unexpected event for opcode 0x203c [ 107.767776][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 107.767788][ T30] audit: type=1400 audit(1787157303.364:318): avc: denied { write } for pid=6376 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 107.800244][ T30] audit: type=1400 audit(1787157303.374:319): avc: denied { map_read map_write } for pid=6377 comm="syz.0.135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 107.808817][ T5689] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 108.131448][ T5696] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 108.139660][ T5689] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 108.175808][ T5689] usb 2-1: USB disconnect, device number 5 [ 108.259284][ T6386] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 108.278249][ T6386] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 108.287514][ T6386] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 108.296435][ T6386] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 108.303998][ T6386] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 108.349555][ T5696] usb 1-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 108.369820][ T5696] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 108.388674][ T6388] netlink: 4 bytes leftover after parsing attributes in process `syz.2.137'. [ 108.401557][ T5696] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 108.432548][ T5696] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 108.479353][ T5696] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 108.534058][ T5696] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.800189][ T6402] netlink: 12 bytes leftover after parsing attributes in process `syz.1.139'. [ 108.982324][ T5689] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 109.023866][ T30] audit: type=1400 audit(1787157304.614:320): avc: denied { name_bind } for pid=6404 comm="syz.3.140" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 109.133788][ T30] audit: type=1400 audit(1787157304.674:321): avc: denied { name_connect } for pid=6404 comm="syz.3.140" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 109.166643][ T5689] usb 5-1: device descriptor read/64, error -71 [ 109.297400][ T30] audit: type=1400 audit(1787157304.704:322): avc: denied { write } for pid=6389 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 109.452296][ T5689] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 109.632337][ T5689] usb 5-1: device descriptor read/64, error -71 [ 109.668826][ T5696] gud 1-1:1.0: USB-1: Failed to add properties (ret=-5) [ 109.759693][ T5696] gud 1-1:1.0: Failed to get connectors (error=-5) [ 109.770053][ T5689] usb usb5-port1: attempt power cycle [ 109.839189][ T5696] gud 1-1:1.0: probe with driver gud failed with error -5 [ 109.849639][ T30] audit: type=1400 audit(1787157305.444:323): avc: denied { write } for pid=6416 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 110.080084][ T5696] usb 1-1: USB disconnect, device number 4 [ 110.081644][ T6422] netlink: 8 bytes leftover after parsing attributes in process `syz.1.141'. [ 110.162307][ T5689] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 110.250267][ T6419] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 110.263298][ T5610] Bluetooth: hci0: command 0x0c1a tx timeout [ 110.271678][ T5689] usb 5-1: device descriptor read/8, error -71 [ 110.342417][ T5610] Bluetooth: hci4: command 0x0c1a tx timeout [ 110.348655][ T5610] Bluetooth: hci3: command 0x0c1a tx timeout [ 110.358349][ T5610] Bluetooth: hci2: command 0x0c1a tx timeout [ 110.361708][ T5593] Bluetooth: hci1: command 0x0c1a tx timeout [ 110.378829][ T6419] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 110.439338][ T6419] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 110.455059][ T6419] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 110.543266][ T5689] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 110.652793][ T5689] usb 5-1: device descriptor read/8, error -71 [ 110.659408][ T6419] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 110.717428][ T6419] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 110.825564][ T5689] usb usb5-port1: unable to enumerate USB device [ 110.947933][ T6419] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 111.019619][ T6419] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 111.060362][ T6419] UDF-fs: warning (device loop1): udf_fill_super: No partition found (1) [ 111.083374][ T6444] netlink: 4 bytes leftover after parsing attributes in process `syz.3.143'. [ 111.252625][ T5689] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 111.417017][ T5689] usb 1-1: New USB device found, idVendor=10cf, idProduct=8061, bcdDevice=b7.12 [ 111.457211][ T5689] usb 1-1: config 0 has an invalid interface number: 6 but max is 0 [ 111.611117][ T5689] usb 1-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 111.644232][ T5689] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 111.698772][ T5689] usb 1-1: config 0 has no interface number 0 [ 111.757218][ T5689] usb 1-1: config 0 interface 6 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 111.797654][ T5689] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.852985][ T5689] usb 1-1: Product: syz [ 111.873714][ T5689] usb 1-1: Manufacturer: syz [ 111.937499][ T5689] usb 1-1: SerialNumber: syz [ 112.153202][ T5689] usb 1-1: config 0 descriptor?? [ 112.246268][ T5689] vmk80xx 1-1:0.6: driver 'vmk80xx' failed to auto-configure device. [ 112.431297][ T30] audit: type=1400 audit(1787157308.024:324): avc: denied { write } for pid=6457 comm="syz.2.148" name="ptype" dev="proc" ino=4026533107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 112.513364][ T30] audit: type=1400 audit(1787157308.114:325): avc: denied { getopt } for pid=6457 comm="syz.2.148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 112.542406][ T6460] netlink: 36 bytes leftover after parsing attributes in process `syz.4.149'. [ 112.646920][ T30] audit: type=1400 audit(1787157308.244:326): avc: denied { read write } for pid=6457 comm="syz.2.148" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 113.213158][ T30] audit: type=1400 audit(1787157308.244:327): avc: denied { open } for pid=6457 comm="syz.2.148" path="/dev/dri/renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 113.305582][ T30] audit: type=1400 audit(1787157308.344:328): avc: denied { allowed } for pid=6459 comm="syz.4.149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 113.410310][ T30] audit: type=1400 audit(1787157308.754:329): avc: denied { write } for pid=6457 comm="syz.2.148" name="iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 113.473975][ T30] audit: type=1400 audit(1787157308.754:330): avc: denied { open } for pid=6457 comm="syz.2.148" path="/dev/iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 113.525340][ T30] audit: type=1400 audit(1787157308.944:331): avc: denied { read } for pid=6465 comm="syz.3.150" name="nvme-fabrics" dev="devtmpfs" ino=701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 113.552710][ T30] audit: type=1400 audit(1787157309.004:332): avc: denied { prog_run } for pid=6465 comm="syz.3.150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 113.658142][ T30] audit: type=1400 audit(1787157309.254:333): avc: denied { ioctl } for pid=6473 comm="syz.3.153" path="/dev/vmci" dev="devtmpfs" ino=696 ioctlcmd=0x7a7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 113.699141][ T5696] IPVS: starting estimator thread 0... [ 113.798827][ T6477] IPVS: using max 40 ests per chain, 96000 per kthread [ 113.838849][ T6469] netlink: 40 bytes leftover after parsing attributes in process `syz.2.152'. [ 114.052435][ T5696] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 114.100160][ T5689] usb 1-1: USB disconnect, device number 5 [ 114.241902][ T5696] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 114.320746][ T5696] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 114.373930][ T5696] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 114.431066][ T5696] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 114.487920][ T5696] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 114.523712][ T5696] usb 4-1: Product: syz [ 114.542977][ T5696] usb 4-1: Manufacturer: syz [ 114.560329][ T5696] usb 4-1: SerialNumber: syz [ 114.994028][ T6496] netlink: 8 bytes leftover after parsing attributes in process `syz.0.158'. [ 115.352119][ T6498] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 115.446952][ T30] audit: type=1400 audit(1787157310.984:334): avc: denied { ioctl } for pid=6497 comm="syz.2.160" path="socket:[10234]" dev="sockfs" ino=10234 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 115.571913][ T30] audit: type=1400 audit(1787157311.124:335): avc: denied { write } for pid=6497 comm="syz.2.160" name="filehandle" dev="nfsd" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 115.668100][ T5696] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 115.681342][ T6498] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 115.790211][ T30] audit: type=1400 audit(1787157311.384:336): avc: denied { ioctl } for pid=6473 comm="syz.3.153" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=10186 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 115.801778][ T6498] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 115.826166][ T6498] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 115.975527][ T6508] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 116.344094][ T6512] netlink: 36 bytes leftover after parsing attributes in process `syz.2.162'. [ 116.452116][ T6506] orangefs_mount: mount request failed with -4 [ 116.726472][ T6498] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 116.909106][ T6498] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 116.929046][ T6516] faux_driver vgem: [drm] Unknown color mode 135165; guessing buffer size. [ 116.938020][ T6498] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 116.952376][ T5696] usb 4-1: USB disconnect, device number 4 [ 116.971896][ T5696] usblp0: removed [ 116.986013][ T6498] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 116.999080][ T6509] can0: slcan on ttyS3. [ 117.022416][ T6498] UDF-fs: warning (device loop0): udf_fill_super: No partition found (1) [ 117.092920][ T6509] can0 (unregistered): slcan off ttyS3. [ 118.123873][ T5802] kernel read not supported for file /dsp1 (pid: 5802 comm: kworker/1:7) [ 119.186043][ T6529] rt1719 0-0049: probe with driver rt1719 failed with error -5 [ 119.201700][ T6529] i2c i2c-0: new_device: Instantiated device rt1719 at 0x49 [ 119.238701][ T6531] wusb3801 0-0004: supply vbus not found, using dummy regulator [ 119.713231][ T6531] i2c i2c-0: new_device: Instantiated device wusb3801 at 0x04 [ 119.812756][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 119.812771][ T30] audit: type=1400 audit(1787157315.404:342): avc: denied { write } for pid=6519 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 119.884908][ T6538] ip_tables: iptables: counters copy to user failed while replacing table [ 119.959989][ T30] audit: type=1400 audit(1787157315.554:343): avc: denied { checkpoint_restore } for pid=6546 comm="syz.2.169" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 120.486094][ T30] audit: type=1400 audit(1787157316.084:344): avc: denied { write } for pid=6544 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 120.503709][ T5696] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 120.682233][ T5696] usb 4-1: Using ep0 maxpacket: 8 [ 120.689359][ T5696] usb 4-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=c3.d4 [ 120.773942][ T5696] usb 4-1: config index 0 descriptor too short (expected 6427, got 27) [ 120.782454][ T5696] usb 4-1: config 0 has an invalid interface number: 21 but max is 0 [ 120.792013][ T5696] usb 4-1: config 0 has no interface number 0 [ 120.801975][ T5696] usb 4-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 120.819202][ T5696] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 120.850465][ T5696] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 120.864083][ T5696] usb 4-1: New USB device strings: Mfr=78, Product=1, SerialNumber=0 [ 120.873391][ T5696] usb 4-1: Product: syz [ 120.877551][ T5696] usb 4-1: Manufacturer: syz [ 120.885837][ T5696] usb 4-1: config 0 descriptor?? [ 120.891367][ T6541] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 121.766180][ T30] audit: type=1400 audit(1787157317.344:345): avc: denied { mount } for pid=6564 comm="syz.0.172" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 122.045661][ T30] audit: type=1400 audit(1787157317.644:346): avc: denied { write } for pid=6539 comm="syz.3.167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 122.647114][ T6565] netlink: 8 bytes leftover after parsing attributes in process `syz.2.170'. [ 122.762364][ T30] audit: type=1400 audit(1787157318.354:347): avc: denied { read write } for pid=6564 comm="syz.0.172" name="event0" dev="devtmpfs" ino=917 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 122.853945][ T6565] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 122.873782][ T6565] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 122.889556][ T5696] usb 4-1: USB disconnect, device number 5 [ 122.902815][ T6565] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 122.931788][ T6565] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 122.993607][ T30] audit: type=1400 audit(1787157318.354:348): avc: denied { open } for pid=6564 comm="syz.0.172" path="/dev/input/event0" dev="devtmpfs" ino=917 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 123.034217][ T6565] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 123.059360][ T6565] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 123.071935][ T6565] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 123.082035][ T6565] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 123.093430][ T6565] UDF-fs: warning (device loop2): udf_fill_super: No partition found (1) [ 123.140884][ T30] audit: type=1400 audit(1787157318.394:349): avc: denied { ioctl } for pid=6564 comm="syz.0.172" path="/dev/input/event0" dev="devtmpfs" ino=917 ioctlcmd=0x4592 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 123.336815][ T30] audit: type=1400 audit(1787157318.934:350): avc: denied { write } for pid=6557 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 123.471241][ T6588] netlink: 40 bytes leftover after parsing attributes in process `syz.1.175'. [ 123.531198][ T30] audit: type=1400 audit(1787157319.124:351): avc: denied { write } for pid=6591 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 123.769408][ T6596] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 124.679292][ T6602] jffs2: notice: (6602) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 125.345962][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 125.345979][ T30] audit: type=1400 audit(1787157320.564:355): avc: denied { watch watch_reads } for pid=6607 comm="syz.1.181" path="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 125.547959][ T30] audit: type=1400 audit(1787157320.574:356): avc: denied { open } for pid=6607 comm="syz.1.181" path="/dev/ptp0" dev="devtmpfs" ino=1264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 125.785528][ T6601] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 125.828814][ T30] audit: type=1400 audit(1787157321.024:357): avc: denied { bind } for pid=6611 comm="syz.4.182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 125.853219][ T5696] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 126.000329][ T30] audit: type=1400 audit(1787157321.034:358): avc: denied { listen } for pid=6611 comm="syz.4.182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 126.126802][ T5696] usb 5-1: Using ep0 maxpacket: 32 [ 126.165448][ T5696] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 126.239025][ T30] audit: type=1400 audit(1787157321.044:359): avc: denied { connect } for pid=6611 comm="syz.4.182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 126.309342][ T30] audit: type=1400 audit(1787157321.404:360): avc: denied { search } for pid=6600 comm="syz.3.180" name="/" dev="configfs" ino=60 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 126.427140][ T5696] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.460115][ T6627] FAULT_INJECTION: forcing a failure. [ 126.460115][ T6627] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 126.512728][ T5696] usb 5-1: config 0 descriptor?? [ 126.668507][ T5696] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 126.697198][ T6627] CPU: 0 UID: 0 PID: 6627 Comm: syz.1.184 Not tainted syzkaller #0 PREEMPT(full) [ 126.697222][ T6627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 126.697233][ T6627] Call Trace: [ 126.697239][ T6627] [ 126.697246][ T6627] dump_stack_lvl+0x100/0x190 [ 126.697274][ T6627] should_fail_ex.cold+0x5/0xa [ 126.697297][ T6627] _copy_to_user+0x32/0xd0 [ 126.697318][ T6627] simple_read_from_buffer+0xcb/0x170 [ 126.697344][ T6627] proc_fail_nth_read+0x1af/0x230 [ 126.697369][ T6627] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 126.697394][ T6627] ? rw_verify_area+0xce/0x6d0 [ 126.697422][ T6627] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 126.697445][ T6627] vfs_read+0x1e4/0xb40 [ 126.697466][ T6627] ? __pfx_vfs_read+0x10/0x10 [ 126.697484][ T6627] ? find_held_lock+0x2b/0x80 [ 126.697504][ T6627] ? __fget_files+0x215/0x3d0 [ 126.697532][ T6627] ? __fget_files+0x21f/0x3d0 [ 126.697561][ T6627] ksys_read+0x12a/0x250 [ 126.697579][ T6627] ? __pfx_ksys_read+0x10/0x10 [ 126.697605][ T6627] do_syscall_64+0x123/0x790 [ 126.697626][ T6627] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.697645][ T6627] RIP: 0033:0x7f9bd775e90e [ 126.697660][ T6627] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 126.697683][ T6627] RSP: 002b:00007f9bd59b3fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 126.697700][ T6627] RAX: ffffffffffffffda RBX: 00007f9bd59b46c0 RCX: 00007f9bd775e90e [ 126.697711][ T6627] RDX: 000000000000000f RSI: 00007f9bd59b40a0 RDI: 0000000000000003 [ 126.697721][ T6627] RBP: 00007f9bd59b4090 R08: 0000000000000000 R09: 0000000000000000 [ 126.697732][ T6627] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 126.697743][ T6627] R13: 00007f9bd7a26218 R14: 00007f9bd7a26180 R15: 00007ffe55bba698 [ 126.697767][ T6627] [ 126.908017][ T6612] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.915518][ T6612] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.066009][ T6612] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 127.130827][ T6612] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 127.154644][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 127.160967][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 127.319394][ T30] audit: type=1400 audit(1787157321.404:361): avc: denied { search } for pid=6600 comm="syz.3.180" name="target" dev="configfs" ino=3481 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 127.362323][ T30] audit: type=1400 audit(1787157321.404:362): avc: denied { mount } for pid=6600 comm="syz.3.180" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 127.387936][ T30] audit: type=1400 audit(1787157321.404:363): avc: denied { search } for pid=6600 comm="syz.3.180" name="core" dev="configfs" ino=3482 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 127.416685][ T30] audit: type=1400 audit(1787157321.404:364): avc: denied { search } for pid=6600 comm="syz.3.180" name="/" dev="configfs" ino=60 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 127.652292][ T5802] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 127.752288][ T36] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.761266][ T36] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.773336][ T36] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.788804][ T36] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.812376][ T5802] usb 4-1: Using ep0 maxpacket: 32 [ 127.818630][ T5802] usb 4-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 127.845435][ T5802] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.865243][ T5802] usb 4-1: Product: syz [ 127.879732][ T5802] usb 4-1: Manufacturer: syz [ 127.886471][ T5802] usb 4-1: SerialNumber: syz [ 127.896073][ T5802] usb 4-1: config 0 descriptor?? [ 127.910794][ T5802] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 127.929641][ T5802] dvb-usb: bulk message failed: -22 (4/0) [ 127.939039][ T5802] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 127.952328][ T5802] dvb-usb: bulk message failed: -22 (5/0) [ 127.959721][ T5802] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 127.983810][ T5802] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 127.996778][ T5802] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 128.005221][ T5802] usb 4-1: media controller created [ 128.023374][ T24] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 128.038678][ T5802] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 128.107573][ T5802] usb 4-1: selecting invalid altsetting 3 [ 128.117699][ T6663] jffs2: notice: (6663) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 128.135580][ T5802] ttusb2: set interface to alts=3 failed [ 128.263258][ T5696] gspca_vc032x: reg_w err -110 [ 128.268104][ T5696] gspca_vc032x: I2c Bus Busy Wait 00 [ 128.273661][ T5696] gspca_vc032x: I2c Bus Busy Wait 00 [ 128.287050][ T5696] gspca_vc032x: I2c Bus Busy Wait 00 [ 128.304275][ T5696] gspca_vc032x: I2c Bus Busy Wait 00 [ 128.306256][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 128.320424][ T24] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 128.340179][ T5802] DVB: Unable to find symbol tda10086_attach() [ 128.340680][ T5696] gspca_vc032x: I2c Bus Busy Wait 00 [ 128.346588][ T5802] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 128.361622][ T24] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 128.370854][ T24] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 128.381792][ T24] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 128.383054][ T5696] gspca_vc032x: I2c Bus Busy Wait 00 [ 128.391806][ T5802] dvb-usb: bulk message failed: -22 (4/0) [ 128.407058][ T5802] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 128.418140][ T24] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 128.429668][ T5802] dvb-usb: bulk message failed: -22 (5/0) [ 128.436069][ T24] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 128.450646][ T5802] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 128.460932][ T5802] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 128.470128][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.480787][ T6671] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(11) [ 128.487490][ T6671] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 128.509542][ T5696] gspca_vc032x: I2c Bus Busy Wait 00 [ 128.538608][ T5696] gspca_vc032x: I2c Bus Busy Wait 00 [ 128.563739][ T5696] gspca_vc032x: I2c Bus Busy Wait 00 [ 128.598350][ T6671] vhci_hcd vhci_hcd.0: Device attached [ 128.605013][ T5696] gspca_vc032x: I2c Bus Busy Wait 00 [ 128.633598][ T5696] gspca_vc032x: I2c Bus Busy Wait 00 [ 128.659882][ T5696] gspca_vc032x: I2c Bus Busy Wait 00 [ 128.692857][ T5696] gspca_vc032x: I2c Bus Busy Wait 00 [ 128.714896][ T5696] gspca_vc032x: I2c Bus Busy Wait 00 [ 128.743946][ T6672] vhci_hcd: connection closed [ 128.754185][ T5827] vhci_hcd vhci_hcd.3: stop threads [ 128.765389][ T5696] gspca_vc032x: I2c Bus Busy Wait 00 [ 128.797877][ T5696] gspca_vc032x: I2c Bus Busy Wait 00 [ 128.804233][ T5689] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 128.832724][ T5827] vhci_hcd vhci_hcd.3: release socket [ 128.838305][ T5696] gspca_vc032x: I2c Bus Busy Wait 00 [ 128.888752][ T5827] vhci_hcd vhci_hcd.3: disconnect device [ 128.895344][ T5696] gspca_vc032x: I2c Bus Busy Wait 00 [ 128.912535][ T5689] usb 39-1: new full-speed USB device number 2 using vhci_hcd [ 128.938742][ T5696] gspca_vc032x: Unknown sensor... [ 128.958129][ T5689] usb 39-1: enqueue for inactive port 0 [ 128.993074][ T5696] vc032x 5-1:0.0: probe with driver vc032x failed with error -22 [ 129.021918][ T5802] usb 4-1: USB disconnect, device number 6 [ 129.077358][ T5696] usb 5-1: USB disconnect, device number 10 [ 129.102903][ T5689] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 129.144954][ T5802] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 129.462164][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 129.522165][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 129.602166][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 129.845235][ T6683] openvswitch: netlink: IP tunnel dst address not specified [ 129.851646][ T24] usb 2-1: usb_control_msg returned -32 [ 129.903033][ T24] usbtmc 2-1:16.0: can't read capabilities [ 130.472108][ T6686] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 130.490532][ T6686] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 130.512440][ T6686] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 130.523233][ T6686] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 130.540782][ T6686] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 130.872437][ T10] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 131.033147][ T10] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 131.048164][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.063548][ T10] usb 4-1: Product: syz [ 131.075867][ T10] usb 4-1: Manufacturer: syz [ 131.091581][ T10] usb 4-1: SerialNumber: syz [ 131.139513][ T6708] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 131.394340][ T5689] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 131.432234][ T24] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 131.532206][ T5689] usb 3-1: device descriptor read/64, error -71 [ 131.582194][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 131.587836][ T24] usb 1-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 131.597881][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.610071][ T24] usb 1-1: config 0 descriptor?? [ 131.619228][ T24] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 131.732929][ T10] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 131.747757][ T10] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 131.757522][ T10] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 131.767542][ T10] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 131.780687][ T10] usb 4-1: USB disconnect, device number 7 [ 131.786880][ T5689] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 131.860838][ T6705] orangefs_mount: mount request failed with -4 [ 131.919881][ T5696] usb 2-1: USB disconnect, device number 6 [ 131.947959][ T5689] usb 3-1: device descriptor read/64, error -71 [ 131.965448][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 131.965462][ T30] audit: type=1400 audit(1787157327.564:387): avc: denied { ioctl } for pid=6712 comm="syz.4.204" path="socket:[11548]" dev="sockfs" ino=11548 ioctlcmd=0x6f3f scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 132.021003][ T30] audit: type=1400 audit(1787157327.614:388): avc: denied { ioctl } for pid=6712 comm="syz.4.204" path="/dev/rtc0" dev="devtmpfs" ino=920 ioctlcmd=0x7007 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 132.094325][ T6718] misc userio: The device must be registered before sending interrupts [ 132.105837][ T5689] usb usb3-port1: attempt power cycle [ 132.112923][ T6718] misc userio: The device must be registered before sending interrupts [ 132.253631][ T6722] IPVS: length: 89 != 8 [ 132.298651][ T6724] netlink: 40 bytes leftover after parsing attributes in process `syz.4.207'. [ 132.316523][ T30] audit: type=1400 audit(1787157327.914:389): avc: denied { read write } for pid=6726 comm="syz.1.208" name="vbi4" dev="devtmpfs" ino=979 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 132.343437][ T5593] Bluetooth: hci0: command 0x0c1a tx timeout [ 132.346562][ T6727] FAULT_INJECTION: forcing a failure. [ 132.346562][ T6727] name failslab, interval 1, probability 0, space 0, times 0 [ 132.360437][ T30] audit: type=1400 audit(1787157327.914:390): avc: denied { open } for pid=6726 comm="syz.1.208" path="/dev/vbi4" dev="devtmpfs" ino=979 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 132.370582][ T6727] CPU: 0 UID: 0 PID: 6727 Comm: syz.1.208 Not tainted syzkaller #0 PREEMPT(full) [ 132.370602][ T6727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 132.370610][ T6727] Call Trace: [ 132.370615][ T6727] [ 132.370621][ T6727] dump_stack_lvl+0x100/0x190 [ 132.370645][ T6727] should_fail_ex.cold+0x5/0xa [ 132.370665][ T6727] should_failslab+0xc2/0x120 [ 132.370687][ T6727] __kmalloc_noprof+0xfc/0x820 [ 132.370707][ T6727] ? tomoyo_encode2+0xfb/0x3c0 [ 132.370727][ T6727] tomoyo_encode2+0xfb/0x3c0 [ 132.370745][ T6727] tomoyo_encode+0x29/0x50 [ 132.370760][ T6727] tomoyo_realpath_from_path+0x18c/0x690 [ 132.370781][ T6727] tomoyo_path_number_perm+0x23c/0x580 [ 132.370802][ T6727] ? tomoyo_path_number_perm+0x22e/0x580 [ 132.370826][ T6727] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 132.370869][ T6727] ? find_held_lock+0x2b/0x80 [ 132.370884][ T6727] ? hook_file_ioctl_common+0x140/0x440 [ 132.370908][ T6727] ? __fget_files+0x21f/0x3d0 [ 132.370931][ T6727] security_file_ioctl+0xd3/0x230 [ 132.370957][ T6727] __x64_sys_ioctl+0xb7/0x210 [ 132.370975][ T6727] do_syscall_64+0x123/0x790 [ 132.370992][ T6727] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.371009][ T6727] RIP: 0033:0x7f9bd779e0d9 [ 132.371022][ T6727] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 132.371037][ T6727] RSP: 002b:00007f9bd59f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 132.371052][ T6727] RAX: ffffffffffffffda RBX: 00007f9bd7a25fa0 RCX: 00007f9bd779e0d9 [ 132.371062][ T6727] RDX: 0000200000000200 RSI: 00000000c0845657 RDI: 0000000000000003 [ 132.371072][ T6727] RBP: 00007f9bd59f6090 R08: 0000000000000000 R09: 0000000000000000 [ 132.371081][ T6727] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 132.371095][ T6727] R13: 00007f9bd7a26038 R14: 00007f9bd7a25fa0 R15: 00007ffe55bba698 [ 132.371116][ T6727] [ 132.371129][ T6727] ERROR: Out of memory at tomoyo_realpath_from_path. [ 132.505799][ T6733] netlink: 36 bytes leftover after parsing attributes in process `syz.4.210'. [ 132.520594][ T30] audit: type=1400 audit(1787157328.114:391): avc: denied { ioctl } for pid=6726 comm="syz.1.208" path="/dev/vbi4" dev="devtmpfs" ino=979 ioctlcmd=0x5657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 132.526250][ T5593] Bluetooth: hci1: command 0x0c1a tx timeout [ 132.562209][ T5689] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 132.585449][ T5607] Bluetooth: hci3: command 0x0c1a tx timeout [ 132.596204][ T5610] Bluetooth: hci2: command 0x0c1a tx timeout [ 132.618938][ T5593] Bluetooth: hci4: command 0x0c1a tx timeout [ 132.654209][ T30] audit: type=1400 audit(1787157328.254:392): avc: denied { read } for pid=6732 comm="syz.4.210" name="usbmon0" dev="devtmpfs" ino=715 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 132.682689][ T5689] usb 3-1: device descriptor read/8, error -71 [ 132.691869][ T30] audit: type=1400 audit(1787157328.254:393): avc: denied { open } for pid=6732 comm="syz.4.210" path="/dev/usbmon0" dev="devtmpfs" ino=715 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 132.716676][ T30] audit: type=1400 audit(1787157328.274:394): avc: denied { ioctl } for pid=6732 comm="syz.4.210" path="/dev/usbmon0" dev="devtmpfs" ino=715 ioctlcmd=0x9208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 132.772228][ T5696] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 132.785279][ T6739] misc userio: The device must be registered before sending interrupts [ 132.794263][ T6739] misc userio: The device must be registered before sending interrupts [ 132.923690][ T5689] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 132.934542][ T5696] usb 4-1: New USB device found, idVendor=8087, idProduct=0025, bcdDevice= 0.00 [ 132.953283][ T5696] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 132.972611][ T5689] usb 3-1: device descriptor read/8, error -71 [ 132.979980][ T5696] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.013138][ T6741] netlink: 4 bytes leftover after parsing attributes in process `syz.1.214'. [ 133.092483][ T5689] usb usb3-port1: unable to enumerate USB device [ 133.137381][ T24] gspca_vc032x: reg_w err -71 [ 133.144144][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 133.151764][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 133.158116][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 133.164814][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 133.170332][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 133.176157][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 133.182600][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 133.188086][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 133.194307][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 133.199702][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 133.205464][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 133.210862][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 133.216600][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 133.221996][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 133.228262][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 133.234630][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 133.240180][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 133.247169][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 133.252863][ T24] gspca_vc032x: Unknown sensor... [ 133.258374][ T24] vc032x 1-1:0.0: probe with driver vc032x failed with error -22 [ 133.281490][ T24] usb 1-1: USB disconnect, device number 6 [ 133.683697][ T6747] netlink: 4 bytes leftover after parsing attributes in process `syz.4.215'. [ 134.218666][ T6760] misc userio: The device must be registered before sending interrupts [ 134.603037][ T6761] misc userio: The device must be registered before sending interrupts [ 135.051481][ T6784] netlink: 8 bytes leftover after parsing attributes in process `syz.2.218'. [ 135.064330][ T5607] Bluetooth: hci5: command 0xfc05 tx timeout [ 135.087959][ T5610] Bluetooth: hci5: Reading Intel version command failed (-110) [ 135.226508][ T5607] Bluetooth: hci5: Resetting usb device. [ 135.787633][ T5689] usb 4-1: reset high-speed USB device number 8 using dummy_hcd [ 135.868597][ T6795] netlink: 20 bytes leftover after parsing attributes in process `syz.1.219'. [ 136.545327][ T6794] netlink: 40 bytes leftover after parsing attributes in process `syz.0.220'. [ 137.008356][ T6804] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 137.074371][ T5696] usb 4-1: USB disconnect, device number 8 [ 137.186237][ T6791] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 137.195987][ T6791] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 137.206087][ T6791] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 137.219367][ T6791] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 137.238679][ T6791] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 137.482445][ T24] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 137.664023][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 137.686355][ T24] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 137.723354][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.754163][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 137.784402][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.806424][ T24] usb 3-1: config 0 descriptor?? [ 137.824833][ T24] hub 3-1:0.0: USB hub found [ 137.842252][ T5328] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 137.849886][ T5610] Bluetooth: hci1: unexpected event for opcode 0x203c [ 138.015597][ T5328] usb 4-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 138.026290][ T5328] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 64 [ 138.039097][ T5328] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0xE has invalid maxpacket 64 [ 138.049650][ T5328] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 138.060209][ T5328] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 138.070333][ T5328] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 64 [ 138.080582][ T5328] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0xD has invalid maxpacket 64 [ 138.092196][ T5696] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 138.092641][ T5328] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 138.108093][ T5328] usb 4-1: Product: syz [ 138.112596][ T5328] usb 4-1: Manufacturer: syz [ 138.121864][ T6820] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 138.130017][ T6820] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 138.137619][ T6820] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 138.160078][ T6820] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 138.168832][ T6820] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 138.176404][ T6820] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 138.196102][ T5328] usb 4-1: USB2VGA dongle found at address 9 [ 138.205268][ T5328] usb 4-1: Allocated 8 output buffers [ 138.216530][ T5328] usb 4-1: Failed to early initialize device [ 138.240208][ T24] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 138.253390][ T5696] usb 2-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 138.275797][ T5696] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 138.299170][ T5696] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 138.316330][ T5696] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 138.331719][ T5696] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 138.352498][ T5696] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.446523][ T30] audit: type=1400 audit(1787157334.044:395): avc: denied { create } for pid=6817 comm="syz.3.229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 138.474579][ T5328] usb 4-1: USB disconnect, device number 9 [ 138.493450][ T24] usbhid 3-1:0.0: can't add hid device: -71 [ 138.500963][ T24] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 138.545516][ T24] usb 3-1: USB disconnect, device number 13 [ 138.602227][ T5802] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 138.752769][ T5802] usb 5-1: Using ep0 maxpacket: 8 [ 138.758781][ T5802] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 138.768659][ T5802] usb 5-1: config 0 has no interfaces? [ 138.775125][ T5802] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.787167][ T5802] usb 5-1: config 0 descriptor?? [ 139.132666][ T30] audit: type=1400 audit(1787157334.734:396): avc: denied { create } for pid=6833 comm="syz.3.235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 139.175757][ T30] audit: type=1400 audit(1787157334.764:397): avc: denied { connect } for pid=6833 comm="syz.3.235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 139.223679][ T5610] Bluetooth: hci3: command 0x0c1a tx timeout [ 139.223694][ T5607] Bluetooth: hci2: command 0x0c1a tx timeout [ 139.223720][ T5607] Bluetooth: hci0: command 0x0c1a tx timeout [ 139.302577][ T5607] Bluetooth: hci4: command 0x0c1a tx timeout [ 139.436878][ T5696] gud 2-1:1.0: USB-1: Failed to add properties (ret=-5) [ 139.445780][ T5696] gud 2-1:1.0: Failed to get connectors (error=-5) [ 139.482319][ T5696] gud 2-1:1.0: probe with driver gud failed with error -5 [ 139.717790][ T5696] usb 2-1: USB disconnect, device number 7 [ 140.197675][ T6841] bridge0: port 3(syz_tun) entered blocking state [ 140.204200][ T6841] bridge0: port 3(syz_tun) entered disabled state [ 140.210731][ T6841] syz_tun: entered allmulticast mode [ 140.217002][ T6841] syz_tun: entered promiscuous mode [ 140.552217][ T5696] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 140.903654][ T6857] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 140.912281][ T6857] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 140.920441][ T6857] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 140.928705][ T6857] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 140.936878][ T6857] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 141.026680][ T5696] usb 4-1: New USB device found, idVendor=0c70, idProduct=f001, bcdDevice= 0.40 [ 141.069742][ T5696] usb 4-1: config 1 interface 0 has no altsetting 0 [ 141.094027][ T5696] usb 4-1: string descriptor 0 read error: -22 [ 141.113814][ T5696] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.359217][ T6862] process 'syz.0.244' launched './file0' with NULL argv: empty string added [ 141.420061][ T30] audit: type=1400 audit(1787157337.014:398): avc: denied { execute_no_trans } for pid=6861 comm="syz.0.244" path="/41/file0" dev="tmpfs" ino=238 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 141.456577][ T5689] usb 5-1: USB disconnect, device number 11 [ 141.666067][ T6847] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.693598][ T6847] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.784229][ T6867] sd 0:0:1:0: device reset [ 141.917923][ T30] audit: type=1400 audit(1787157337.514:399): avc: denied { setopt } for pid=6846 comm="syz.3.240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 141.919050][ T6847] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.939937][ T5696] aquacomputer_d5next 0003:0C70:F001.0001: unknown main item tag 0x0 [ 142.908974][ T5696] aquacomputer_d5next 0003:0C70:F001.0001: unknown main item tag 0x0 [ 142.918663][ T5696] aquacomputer_d5next 0003:0C70:F001.0001: unknown main item tag 0x0 [ 142.926957][ T5696] aquacomputer_d5next 0003:0C70:F001.0001: unknown main item tag 0x0 [ 142.936677][ T5696] aquacomputer_d5next 0003:0C70:F001.0001: unknown main item tag 0x0 [ 142.945647][ T5696] aquacomputer_d5next 0003:0C70:F001.0001: unknown main item tag 0x0 [ 142.953907][ T5696] aquacomputer_d5next 0003:0C70:F001.0001: unknown main item tag 0x0 [ 142.989018][ T6874] syz.4.246 (6874): drop_caches: 2 [ 143.015088][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 143.031931][ T6847] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.063152][ T5610] Bluetooth: hci4: command 0x0c1a tx timeout [ 143.069204][ T5607] Bluetooth: hci3: command 0x0c1a tx timeout [ 143.076031][ T5593] Bluetooth: hci2: command 0x0c1a tx timeout [ 143.082073][ T5602] Bluetooth: hci1: command 0x0c1a tx timeout [ 143.088259][ T5593] Bluetooth: hci0: command 0x0c1a tx timeout [ 143.121508][ T5696] aquacomputer_d5next 0003:0C70:F001.0001: unknown main item tag 0x0 [ 143.267197][ T5696] aquacomputer_d5next 0003:0C70:F001.0001: unknown main item tag 0x0 [ 143.299574][ T5696] aquacomputer_d5next 0003:0C70:F001.0001: unknown main item tag 0x0 [ 143.402290][ T5696] aquacomputer_d5next 0003:0C70:F001.0001: hidraw0: USB HID vff.7f Device [HID 0c70:f001] on usb-dummy_hcd.3-1/input0 [ 144.331605][ T5696] usb 4-1: USB disconnect, device number 10 [ 144.449393][ T6882] fido_id[6882]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 144.511544][ T6889] netlink: 'syz.3.250': attribute type 1 has an invalid length. [ 144.529616][ T6894] netlink: 4 bytes leftover after parsing attributes in process `syz.2.249'. [ 144.559197][ T6889] bond1: entered promiscuous mode [ 144.568080][ T6889] 8021q: adding VLAN 0 to HW filter on device bond1 [ 144.869571][ T6902] jffs2: notice: (6902) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 144.896436][ T6889] 8021q: adding VLAN 0 to HW filter on device bond1 [ 144.903716][ T6889] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 144.914375][ T6889] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 144.941333][ T6889] bond1: (slave ip6gre1): making interface the new active one [ 144.951000][ T6889] ip6gre1: entered promiscuous mode [ 144.960581][ T6889] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 145.022544][ T5696] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 145.174105][ T5696] usb 2-1: unable to get BOS descriptor or descriptor too short [ 145.194126][ T5696] usb 2-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 145.216846][ T5696] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 145.246913][ T5696] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 145.268192][ T6909] netlink: 80 bytes leftover after parsing attributes in process `syz.3.256'. [ 145.284146][ T5696] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.340257][ T5696] usb 2-1: Product: syz [ 145.345179][ T5696] usb 2-1: Manufacturer: syz [ 145.349783][ T5696] usb 2-1: SerialNumber: syz [ 145.358475][ T5696] usb 2-1: selecting invalid altsetting 1 [ 145.366903][ T5696] usb 2-1: unit 6 not found! [ 145.719763][ T6916] netlink: 8 bytes leftover after parsing attributes in process `syz.3.257'. [ 145.771140][ T6916] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 145.783798][ T6916] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 145.807104][ T6916] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 145.822261][ T6916] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 145.839766][ T6916] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 145.850713][ T6916] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 145.865058][ T6916] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 145.874841][ T6916] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 145.892711][ T6916] UDF-fs: warning (device loop3): udf_fill_super: No partition found (1) [ 145.976242][ T5802] hid-generic 6D00:12000004:00B0.0002: unexpected long global item [ 146.001627][ T5802] hid-generic 6D00:12000004:00B0.0002: probe with driver hid-generic failed with error -22 [ 146.084376][ T6921] misc userio: The device must be registered before sending interrupts [ 146.120343][ T5696] usb 2-1: 2:0: failed to get current value for ch 0 (-71) [ 146.140929][ T6922] misc userio: The device must be registered before sending interrupts [ 146.382102][ T5696] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 146.418808][ T5696] usb 2-1: USB disconnect, device number 8 [ 146.456913][ T5609] udevd[5609]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 146.812858][ T5689] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 146.992839][ T5689] usb 4-1: New USB device found, idVendor=0c70, idProduct=f001, bcdDevice= 0.40 [ 147.020154][ T6945] jffs2: notice: (6945) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 147.060900][ T5689] usb 4-1: config 1 interface 0 has no altsetting 0 [ 147.092808][ T5689] usb 4-1: string descriptor 0 read error: -22 [ 147.099193][ T30] audit: type=1400 audit(1787157342.694:400): avc: denied { create } for pid=6940 comm="syz.2.263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 147.121494][ T5689] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.962241][ T30] audit: type=1400 audit(1787157342.694:401): avc: denied { ioctl } for pid=6940 comm="syz.2.263" path="socket:[12505]" dev="sockfs" ino=12505 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 147.987172][ T30] audit: type=1400 audit(1787157342.704:402): avc: denied { write } for pid=6940 comm="syz.2.263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 148.011248][ T30] audit: type=1400 audit(1787157343.604:403): avc: denied { create } for pid=6950 comm="syz.1.266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 148.018081][ T6929] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.067990][ T30] audit: type=1400 audit(1787157343.654:404): avc: denied { write } for pid=6950 comm="syz.1.266" path="socket:[12580]" dev="sockfs" ino=12580 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 148.125216][ T6929] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.145451][ T30] audit: type=1400 audit(1787157343.664:405): avc: denied { write } for pid=6925 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 148.338283][ T6967] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 148.349002][ T6967] i2c i2c-0: Failed to register i2c client wusb3801 at 0x04 (-16) [ 148.409644][ T5689] hid_parser_main: 4008 callbacks suppressed [ 148.409941][ T5689] aquacomputer_d5next 0003:0C70:F001.0003: unknown main item tag 0x0 [ 148.497653][ T6929] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.522340][ T30] audit: type=1400 audit(1787157344.094:406): avc: denied { read write } for pid=6928 comm="syz.3.261" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 148.608182][ T30] audit: type=1400 audit(1787157344.094:407): avc: denied { open } for pid=6928 comm="syz.3.261" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 148.688954][ T30] audit: type=1400 audit(1787157344.094:408): avc: denied { ioctl } for pid=6928 comm="syz.3.261" path="/dev/nvram" dev="devtmpfs" ino=623 ioctlcmd=0xae46 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 148.770755][ T30] audit: type=1400 audit(1787157344.284:409): avc: denied { write } for pid=6968 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 149.170877][ T5689] aquacomputer_d5next 0003:0C70:F001.0003: unknown main item tag 0x0 [ 149.179735][ T6929] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.187562][ T5689] aquacomputer_d5next 0003:0C70:F001.0003: unknown main item tag 0x0 [ 149.196028][ T5689] aquacomputer_d5next 0003:0C70:F001.0003: unknown main item tag 0x0 [ 149.208135][ T5689] aquacomputer_d5next 0003:0C70:F001.0003: unknown main item tag 0x0 [ 149.218369][ T5689] aquacomputer_d5next 0003:0C70:F001.0003: unknown main item tag 0x0 [ 149.226926][ T5689] aquacomputer_d5next 0003:0C70:F001.0003: unknown main item tag 0x0 [ 149.235133][ T5689] aquacomputer_d5next 0003:0C70:F001.0003: unknown main item tag 0x0 [ 149.243327][ T5689] aquacomputer_d5next 0003:0C70:F001.0003: unknown main item tag 0x0 [ 149.251476][ T5689] aquacomputer_d5next 0003:0C70:F001.0003: unknown main item tag 0x0 [ 149.308244][ T5689] aquacomputer_d5next 0003:0C70:F001.0003: hidraw0: USB HID vff.7f Device [HID 0c70:f001] on usb-dummy_hcd.3-1/input0 [ 149.700201][ T5689] usb 4-1: USB disconnect, device number 11 [ 152.530560][ T6997] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.592414][ T5802] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 152.680596][ T6997] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.710628][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 152.710642][ T30] audit: type=1400 audit(1787157348.304:415): avc: denied { mount } for pid=7000 comm="syz.1.275" name="/" dev="autofs" ino=12631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 152.808908][ T5802] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 152.918070][ T7007] netlink: zone id is out of range [ 152.924152][ T7007] netlink: zone id is out of range [ 152.933101][ T7007] netlink: zone id is out of range [ 152.940045][ T7007] netlink: zone id is out of range [ 152.946702][ T7007] netlink: zone id is out of range [ 152.953039][ T7007] netlink: zone id is out of range [ 152.958499][ T7007] netlink: zone id is out of range [ 152.967343][ T7007] netlink: zone id is out of range [ 152.973345][ T7007] netlink: zone id is out of range [ 152.980086][ T7007] netlink: zone id is out of range [ 153.126054][ T30] audit: type=1800 audit(1787157348.514:416): pid=6986 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.270" name="file1" dev="ramfs" ino=12607 res=0 errno=0 [ 153.146988][ T5802] usb 5-1: too many configurations: 44, using maximum allowed: 8 [ 153.532262][ T5802] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 153.541365][ T5802] usb 5-1: can't read configurations, error -71 [ 153.595611][ T30] audit: type=1400 audit(1787157349.194:417): avc: denied { write } for pid=6973 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 153.685927][ T6999] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 153.707594][ T6999] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 153.723696][ T6999] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 153.736319][ T6999] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 153.746541][ T30] audit: type=1400 audit(1787157349.344:418): avc: denied { write } for pid=7019 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 153.770000][ T6999] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 153.935151][ T7025] jffs2: notice: (7025) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 154.005395][ T7032] syz_tun: entered allmulticast mode [ 154.026559][ T30] audit: type=1400 audit(1787157349.624:419): avc: denied { read append } for pid=7015 comm="syz.0.276" name="ppp" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 154.061550][ T7017] netlink: 8 bytes leftover after parsing attributes in process `syz.0.276'. [ 154.074213][ T30] audit: type=1400 audit(1787157349.644:420): avc: denied { open } for pid=7015 comm="syz.0.276" path="/dev/ppp" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 154.099443][ T30] audit: type=1400 audit(1787157349.644:421): avc: denied { write } for pid=7015 comm="syz.0.276" name="ppp" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 154.136917][ T30] audit: type=1400 audit(1787157349.654:422): avc: denied { create } for pid=7015 comm="syz.0.276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 154.158072][ T30] audit: type=1400 audit(1787157349.654:423): avc: denied { ioctl } for pid=7015 comm="syz.0.276" path="/dev/ppp" dev="devtmpfs" ino=708 ioctlcmd=0x64c2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 154.282170][ T7035] syz_tun: left allmulticast mode [ 154.312333][ T5597] Bluetooth: hci3: unexpected event for opcode 0x203c [ 154.329918][ T30] audit: type=1400 audit(1787157349.654:424): avc: denied { write } for pid=7015 comm="syz.0.276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 154.432277][ T24] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 154.529362][ T7043] misc userio: The device must be registered before sending interrupts [ 154.538847][ T7043] misc userio: The device must be registered before sending interrupts [ 154.562217][ T5689] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 154.582211][ T5597] Bluetooth: hci0: command 0x0c1a tx timeout [ 154.597215][ T24] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 154.616266][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.627528][ T24] usb 3-1: Product: syz [ 154.637633][ T24] usb 3-1: Manufacturer: syz [ 154.645663][ T24] usb 3-1: SerialNumber: syz [ 155.097375][ T5689] usb 1-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 155.113169][ T5689] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 155.131835][ T5689] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 155.142091][ T5689] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 155.154045][ T5689] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 155.167421][ T5689] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.392272][ T5802] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 155.524058][ T24] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 155.537125][ T24] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 155.549689][ T24] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 155.562844][ T5802] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 155.573458][ T24] usb 3-1: USB disconnect, device number 14 [ 155.583016][ T5802] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 155.604429][ T5802] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 155.622197][ T5802] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 155.667632][ T5802] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 155.682169][ T5802] usb 4-1: Product: syz [ 155.687569][ T5802] usb 4-1: Manufacturer: syz [ 155.702094][ T5802] usb 4-1: SerialNumber: syz [ 155.782706][ T5610] Bluetooth: hci2: command 0x0c1a tx timeout [ 155.788833][ T5593] Bluetooth: hci1: command 0x0c1a tx timeout [ 155.795469][ T5597] Bluetooth: hci4: command 0x0c1a tx timeout [ 156.007522][ T5802] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 12 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 156.261973][ T5689] gud 1-1:1.0: USB-1: Failed to add properties (ret=-5) [ 156.402806][ T5802] usb 4-1: USB disconnect, device number 12 [ 156.472613][ T5689] gud 1-1:1.0: Failed to get connectors (error=-5) [ 156.479158][ T5689] gud 1-1:1.0: probe with driver gud failed with error -5 [ 156.496150][ T5689] usb 1-1: USB disconnect, device number 7 [ 156.568538][ T5802] usblp0: removed [ 156.797521][ T7093] block2mtd: illegal erase size [ 156.937203][ T7099] netlink: 8 bytes leftover after parsing attributes in process `syz.1.294'. [ 157.018298][ T7099] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 157.032463][ T7099] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 157.065918][ T7099] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 157.077720][ T7099] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 157.096713][ T7099] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 157.121121][ T7099] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 157.134321][ T7099] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 157.145103][ T7099] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 157.154924][ T7099] UDF-fs: warning (device loop1): udf_fill_super: No partition found (1) [ 157.558618][ T7115] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 157.568261][ T7115] i2c i2c-0: Failed to register i2c client wusb3801 at 0x04 (-16) [ 158.536577][ T7123] netlink: 12 bytes leftover after parsing attributes in process `syz.3.301'. [ 158.550445][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 158.550467][ T30] audit: type=1400 audit(1787157354.124:428): avc: denied { bind } for pid=7114 comm="syz.3.301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 158.621644][ T30] audit: type=1400 audit(1787157354.134:429): avc: denied { write } for pid=7114 comm="syz.3.301" path="socket:[12049]" dev="sockfs" ino=12049 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 159.288111][ T7130] binder: 7129:7130 ioctl c0306201 0 returned -14 [ 159.498718][ T5802] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 159.562227][ T24] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 159.652637][ T5802] usb 2-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 159.672939][ T5802] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 159.692013][ T5802] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 159.717519][ T5802] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 159.727429][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 159.739653][ T24] usb 5-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=c3.d4 [ 159.758018][ T5802] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 159.773643][ T24] usb 5-1: config index 0 descriptor too short (expected 6427, got 27) [ 159.789007][ T5802] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 159.804733][ T24] usb 5-1: config 0 has an invalid interface number: 21 but max is 0 [ 159.818602][ T24] usb 5-1: config 0 has no interface number 0 [ 159.824991][ T5802] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.833139][ T24] usb 5-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 159.850860][ T7122] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 159.860593][ T24] usb 5-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 159.876665][ T5802] keyspan 2-1:1.0: Keyspan 2 port adapter converter detected [ 159.884393][ T24] usb 5-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 159.897036][ T5802] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 84 [ 159.905429][ T5802] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 2 [ 159.916372][ T24] usb 5-1: New USB device strings: Mfr=78, Product=1, SerialNumber=0 [ 159.926240][ T24] usb 5-1: Product: syz [ 159.943678][ T24] usb 5-1: Manufacturer: syz [ 159.948575][ T5802] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 159.966324][ T24] usb 5-1: config 0 descriptor?? [ 159.978338][ T5802] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 88 [ 159.990606][ T5802] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 6 [ 159.998553][ T7128] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 160.020497][ T5802] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 160.096319][ T7122] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.109270][ T7122] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.124522][ T7122] jffs2: notice: (7122) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 160.183379][ T5802] usb 2-1: USB disconnect, device number 9 [ 160.197355][ T5802] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 160.228938][ T30] audit: type=1400 audit(1787157355.774:430): avc: denied { write } for pid=7119 comm="syz.1.303" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 160.243452][ T5802] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 160.327824][ T5597] Bluetooth: hci4: unexpected event for opcode 0x203c [ 160.337128][ T30] audit: type=1400 audit(1787157355.774:431): avc: denied { setattr } for pid=7119 comm="syz.1.303" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 160.351441][ T5802] keyspan 2-1:1.0: device disconnected [ 160.486143][ T24] usb 5-1: USB disconnect, device number 14 [ 160.672220][ T5718] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 161.672813][ T30] audit: type=1400 audit(1787157357.234:432): avc: denied { watch } for pid=7158 comm="syz.4.315" path="/69/bus" dev="tmpfs" ino=389 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 162.073359][ T5718] usb 3-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 162.327361][ T7165] bridge0: port 3(syz_tun) entered blocking state [ 162.333849][ T7165] bridge0: port 3(syz_tun) entered forwarding state [ 162.342896][ T7165] 8021q: adding VLAN 0 to HW filter on device bond0 [ 162.350203][ T7165] 8021q: adding VLAN 0 to HW filter on device team0 [ 162.359414][ T7165] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 162.383723][ T7165] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 162.391806][ T7165] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 162.401463][ T7165] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 162.411787][ T7165] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 162.424453][ T7165] veth1_vlan: left promiscuous mode [ 162.430395][ T7165] veth0_vlan: left promiscuous mode [ 162.436326][ T7165] veth0_vlan: entered promiscuous mode [ 162.442725][ T7165] veth1_vlan: entered promiscuous mode [ 162.450309][ T7165] veth1_macvtap: left promiscuous mode [ 162.456242][ T7165] veth0_macvtap: left promiscuous mode [ 162.462148][ T7165] veth0_macvtap: entered promiscuous mode [ 162.468325][ T7165] veth1_macvtap: entered promiscuous mode [ 162.476573][ T7165] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 162.484130][ T7165] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 162.491641][ T7165] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 162.499201][ T7165] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 162.509129][ T5847] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.525159][ T5718] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 162.560248][ T5854] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.562978][ T5718] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 162.567370][ T5854] bridge0: port 1(bridge_slave_0) entered forwarding state [ 162.636750][ T30] audit: type=1400 audit(1787157357.234:433): avc: denied { watch_sb watch_reads } for pid=7158 comm="syz.4.315" path="/69/bus" dev="tmpfs" ino=389 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 162.669706][ T30] audit: type=1400 audit(1787157357.354:434): avc: denied { write } for pid=7158 comm="syz.4.315" name="usb_gadget" dev="configfs" ino=130 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 162.669962][ T7171] netlink: 36 bytes leftover after parsing attributes in process `syz.3.317'. [ 162.692823][ T5854] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.708281][ T5854] bridge0: port 2(bridge_slave_1) entered forwarding state [ 162.726664][ T5718] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 162.733039][ T30] audit: type=1400 audit(1787157357.374:435): avc: denied { write } for pid=7158 comm="syz.4.315" name="functions" dev="configfs" ino=12919 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 162.798599][ T7172] netlink: 36 bytes leftover after parsing attributes in process `syz.3.317'. [ 162.807861][ T7174] netlink: 36 bytes leftover after parsing attributes in process `syz.3.317'. [ 162.818105][ T5718] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 162.859507][ T30] audit: type=1400 audit(1787157357.384:436): avc: denied { write } for pid=7158 comm="syz.4.315" name="uac1.usb0" dev="configfs" ino=12924 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 162.861945][ T5718] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.882480][ T996] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.941883][ T30] audit: type=1400 audit(1787157357.394:437): avc: denied { create } for pid=7158 comm="syz.4.315" name="p_chmask" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=file permissive=1 [ 162.944549][ T7179] misc userio: The device must be registered before sending interrupts [ 162.966744][ T5847] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.998111][ T5847] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.021157][ T7182] nfs: Unknown parameter '' [ 163.065405][ T7183] misc userio: The device must be registered before sending interrupts [ 163.182464][ T5696] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 163.343825][ T5696] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 163.355539][ T7197] netlink: 24 bytes leftover after parsing attributes in process `syz.1.323'. [ 164.162668][ T5696] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 164.172237][ T5696] usb 1-1: config 0 has no interface number 0 [ 164.191906][ T5696] usb 1-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 164.274929][ T5696] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 164.332739][ T5696] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 164.420453][ T7205] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 164.430397][ T7205] i2c i2c-0: Failed to register i2c client wusb3801 at 0x04 (-16) [ 164.444492][ T5696] usb 1-1: New USB device strings: Mfr=0, Product=28, SerialNumber=3 [ 164.508915][ T5696] usb 1-1: Product: syz [ 164.553900][ T5696] usb 1-1: SerialNumber: syz [ 164.622583][ T5696] usb 1-1: config 0 descriptor?? [ 164.646777][ T5718] gud 3-1:1.0: USB-1: Failed to add properties (ret=-5) [ 164.668948][ T5718] gud 3-1:1.0: Failed to get connectors (error=-5) [ 164.719583][ T5696] cm109 1-1:0.8: invalid payload size 0, expected 4 [ 164.731767][ T5718] gud 3-1:1.0: probe with driver gud failed with error -5 [ 164.875685][ T5696] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input8 [ 165.025356][ T5696] ------------[ cut here ]------------ [ 165.031011][ T5696] URB ffff8880273f3a00 submitted while active [ 165.037139][ T5696] WARNING: drivers/usb/core/urb.c:379 at usb_submit_urb+0x1689/0x19b0, CPU#0: kworker/0:4/5696 [ 165.047600][ T5696] Modules linked in: [ 165.052072][ T5696] CPU: 0 UID: 0 PID: 5696 Comm: kworker/0:4 Not tainted syzkaller #0 PREEMPT(full) [ 165.061677][ T5696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 165.071783][ T5696] Workqueue: usb_hub_wq hub_event [ 165.076846][ T5696] RIP: 0010:usb_submit_urb+0x168c/0x19b0 [ 165.082543][ T5696] Code: 00 48 8b 04 24 48 8b 90 b0 00 00 00 e9 70 ff ff ff bb ed ff ff ff e9 ac f1 ff ff e8 2e 61 89 fa 48 8d 3d d7 4a ce 09 48 89 de <67> 48 0f b9 3a bb f0 ff ff ff e9 8e f1 ff ff c7 44 24 30 00 00 00 [ 165.103242][ T5696] RSP: 0018:ffffc9000450ee78 EFLAGS: 00010283 [ 165.109356][ T5696] RAX: 000000000005a29d RBX: ffff8880273f3a00 RCX: ffffc9001a4fe000 [ 165.117376][ T5696] RDX: 0000000000100000 RSI: ffff8880273f3a00 RDI: ffffffff914f8820 [ 165.125375][ T5696] RBP: ffff888022a879a0 R08: 0000000000000000 R09: fffffbfff22843fa [ 165.133386][ T5696] R10: ffffc9000450ef00 R11: 000000000000759b R12: ffff8880562c88a0 [ 165.141372][ T5696] R13: ffff8880562c8810 R14: ffff8880562c8850 R15: ffff8880579be2e0 [ 165.150298][ T5696] FS: 0000000000000000(0000) GS:ffff888123bd4000(0000) knlGS:0000000000000000 [ 165.159574][ T5696] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 165.166224][ T5696] CR2: 0000200000001000 CR3: 000000005bf03000 CR4: 00000000003526f0 [ 165.174233][ T5696] DR0: 0000000000010000 DR1: 0000000000000000 DR2: 0000000000000000 [ 165.182237][ T5696] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 165.190235][ T5696] Call Trace: [ 165.193550][ T5696] [ 165.196500][ T5696] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 165.202354][ T5696] cm109_input_open+0x273/0x400 [ 165.207226][ T5696] ? __pfx_cm109_input_open+0x10/0x10 [ 165.212651][ T5696] input_open_device+0x24c/0x3d0 [ 165.217621][ T5696] kbd_connect+0x124/0x180 [ 165.222051][ T5696] input_attach_handler.isra.0+0x177/0x1e0 [ 165.228268][ T5696] input_register_device.cold+0x139/0x375 [ 165.234141][ T5696] cm109_usb_probe+0x128d/0x17f0 [ 165.239108][ T5696] usb_probe_interface+0x303/0x8f0 [ 165.244270][ T5696] ? __pfx_usb_probe_interface+0x10/0x10 [ 165.249924][ T5696] really_probe+0x241/0xa60 [ 165.254470][ T5696] __driver_probe_device+0x20e/0x450 [ 165.259776][ T5696] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 165.265705][ T5696] driver_probe_device+0x4a/0x140 [ 165.270746][ T5696] __device_attach_driver+0x1df/0x320 [ 165.276154][ T5696] ? __pfx___device_attach_driver+0x10/0x10 [ 165.282059][ T5696] bus_for_each_drv+0x159/0x1e0 [ 165.286963][ T5696] ? __pfx_bus_for_each_drv+0x10/0x10 [ 165.292400][ T5696] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 165.298265][ T5696] __device_attach+0x1e4/0x4d0 [ 165.303488][ T5696] ? __pfx___device_attach+0x10/0x10 [ 165.308798][ T5696] ? do_raw_spin_unlock+0x145/0x1e0 [ 165.314097][ T5696] device_initial_probe+0xaf/0xd0 [ 165.319155][ T5696] bus_probe_device+0x64/0x160 [ 165.323973][ T5696] device_add+0x121d/0x1970 [ 165.328513][ T5696] ? __pfx_device_add+0x10/0x10 [ 165.333414][ T5696] usb_set_configuration+0xd97/0x1c60 [ 165.338825][ T5696] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 165.344976][ T5696] usb_generic_driver_probe+0xa1/0xe0 [ 165.350389][ T5696] usb_probe_device+0xef/0x400 [ 165.355196][ T5696] ? __pfx_usb_probe_device+0x10/0x10 [ 165.360588][ T5696] really_probe+0x241/0xa60 [ 165.365125][ T5696] __driver_probe_device+0x20e/0x450 [ 165.370426][ T5696] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 165.376360][ T5696] driver_probe_device+0x4a/0x140 [ 165.381402][ T5696] __device_attach_driver+0x1df/0x320 [ 165.386860][ T5696] ? __pfx___device_attach_driver+0x10/0x10 [ 165.392788][ T5696] bus_for_each_drv+0x159/0x1e0 [ 165.397665][ T5696] ? __pfx_bus_for_each_drv+0x10/0x10 [ 165.403106][ T5696] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 165.408954][ T5696] __device_attach+0x1e4/0x4d0 [ 165.413755][ T5696] ? __pfx___device_attach+0x10/0x10 [ 165.419067][ T5696] device_initial_probe+0xaf/0xd0 [ 165.424130][ T5696] bus_probe_device+0x64/0x160 [ 165.428934][ T5696] device_add+0x121d/0x1970 [ 165.433489][ T5696] ? __pfx_device_add+0x10/0x10 [ 165.438362][ T5696] ? add_device_randomness+0xc9/0x110 [ 165.443775][ T5696] usb_new_device.part.0+0xcc2/0x1686 [ 165.449177][ T5696] ? do_raw_spin_lock+0x128/0x260 [ 165.454233][ T5696] ? __pfx_usb_new_device.part.0+0x10/0x10 [ 165.460062][ T5696] ? mark_held_locks+0x40/0x70 [ 165.464958][ T5696] hub_event.cold+0x1e3/0xe90 [ 165.469681][ T5696] ? __pfx_hub_event+0x10/0x10 [ 165.474483][ T5696] ? debug_object_deactivate+0x2e4/0x3b0 [ 165.480156][ T5696] ? rcu_is_watching+0x13/0xc0 [ 165.484952][ T5696] process_one_work+0xa23/0x1940 [ 165.489920][ T5696] ? __pfx_process_one_work+0x10/0x10 [ 165.495347][ T5696] ? __pfx_hub_event+0x10/0x10 [ 165.500131][ T5696] worker_thread+0x5ef/0xe50 [ 165.504788][ T5696] ? __pfx_worker_thread+0x10/0x10 [ 165.509923][ T5696] ? kthread+0x13a/0x450 [ 165.514193][ T5696] ? __pfx_worker_thread+0x10/0x10 [ 165.519324][ T5696] kthread+0x373/0x450 [ 165.523430][ T5696] ? __pfx_kthread+0x10/0x10 [ 165.528040][ T5696] ret_from_fork+0x730/0xd60 [ 165.532669][ T5696] ? __pfx_ret_from_fork+0x10/0x10 [ 165.537808][ T5696] ? __switch_to+0x800/0x10f0 [ 165.542553][ T5696] ? __pfx_kthread+0x10/0x10 [ 165.547160][ T5696] ret_from_fork_asm+0x1a/0x30 [ 165.551963][ T5696] [ 165.555015][ T5696] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 165.562284][ T5696] CPU: 0 UID: 0 PID: 5696 Comm: kworker/0:4 Not tainted syzkaller #0 PREEMPT(full) [ 165.571649][ T5696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 165.581696][ T5696] Workqueue: usb_hub_wq hub_event [ 165.586722][ T5696] Call Trace: [ 165.589991][ T5696] [ 165.592914][ T5696] dump_stack_lvl+0x100/0x190 [ 165.597595][ T5696] vpanic+0x553/0x970 [ 165.601575][ T5696] ? __pfx_vpanic+0x10/0x10 [ 165.606084][ T5696] panic+0xd1/0xe0 [ 165.609809][ T5696] ? __pfx_panic+0x10/0x10 [ 165.614235][ T5696] check_panic_on_warn.cold+0x19/0x34 [ 165.619605][ T5696] ? usb_submit_urb+0x1689/0x19b0 [ 165.624634][ T5696] __warn.cold+0x191/0x318 [ 165.629052][ T5696] __report_bug+0x30f/0x440 [ 165.633567][ T5696] ? usb_submit_urb+0x1689/0x19b0 [ 165.638594][ T5696] ? __pfx___report_bug+0x10/0x10 [ 165.643631][ T5696] ? preempt_schedule_common+0x3c/0xb0 [ 165.649099][ T5696] ? preempt_schedule_thunk+0x16/0x40 [ 165.654473][ T5696] report_bug_entry+0xe2/0x290 [ 165.659243][ T5696] ? usb_submit_urb+0x168c/0x19b0 [ 165.664269][ T5696] handle_bug+0x1cd/0x2a0 [ 165.668597][ T5696] exc_invalid_op+0x17/0x50 [ 165.673100][ T5696] asm_exc_invalid_op+0x1a/0x20 [ 165.677946][ T5696] RIP: 0010:usb_submit_urb+0x168c/0x19b0 [ 165.683587][ T5696] Code: 00 48 8b 04 24 48 8b 90 b0 00 00 00 e9 70 ff ff ff bb ed ff ff ff e9 ac f1 ff ff e8 2e 61 89 fa 48 8d 3d d7 4a ce 09 48 89 de <67> 48 0f b9 3a bb f0 ff ff ff e9 8e f1 ff ff c7 44 24 30 00 00 00 [ 165.703193][ T5696] RSP: 0018:ffffc9000450ee78 EFLAGS: 00010283 [ 165.709260][ T5696] RAX: 000000000005a29d RBX: ffff8880273f3a00 RCX: ffffc9001a4fe000 [ 165.717224][ T5696] RDX: 0000000000100000 RSI: ffff8880273f3a00 RDI: ffffffff914f8820 [ 165.725187][ T5696] RBP: ffff888022a879a0 R08: 0000000000000000 R09: fffffbfff22843fa [ 165.733149][ T5696] R10: ffffc9000450ef00 R11: 000000000000759b R12: ffff8880562c88a0 [ 165.741115][ T5696] R13: ffff8880562c8810 R14: ffff8880562c8850 R15: ffff8880579be2e0 [ 165.749101][ T5696] ? usb_submit_urb+0x1682/0x19b0 [ 165.754136][ T5696] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 165.759957][ T5696] cm109_input_open+0x273/0x400 [ 165.764804][ T5696] ? __pfx_cm109_input_open+0x10/0x10 [ 165.770171][ T5696] input_open_device+0x24c/0x3d0 [ 165.775115][ T5696] kbd_connect+0x124/0x180 [ 165.779531][ T5696] input_attach_handler.isra.0+0x177/0x1e0 [ 165.785337][ T5696] input_register_device.cold+0x139/0x375 [ 165.791102][ T5696] cm109_usb_probe+0x128d/0x17f0 [ 165.796049][ T5696] usb_probe_interface+0x303/0x8f0 [ 165.801168][ T5696] ? __pfx_usb_probe_interface+0x10/0x10 [ 165.806801][ T5696] really_probe+0x241/0xa60 [ 165.811303][ T5696] __driver_probe_device+0x20e/0x450 [ 165.816586][ T5696] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 165.822482][ T5696] driver_probe_device+0x4a/0x140 [ 165.827507][ T5696] __device_attach_driver+0x1df/0x320 [ 165.832877][ T5696] ? __pfx___device_attach_driver+0x10/0x10 [ 165.838763][ T5696] bus_for_each_drv+0x159/0x1e0 [ 165.843620][ T5696] ? __pfx_bus_for_each_drv+0x10/0x10 [ 165.848999][ T5696] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 165.854813][ T5696] __device_attach+0x1e4/0x4d0 [ 165.859576][ T5696] ? __pfx___device_attach+0x10/0x10 [ 165.864865][ T5696] ? do_raw_spin_unlock+0x145/0x1e0 [ 165.870089][ T5696] device_initial_probe+0xaf/0xd0 [ 165.875117][ T5696] bus_probe_device+0x64/0x160 [ 165.879887][ T5696] device_add+0x121d/0x1970 [ 165.884392][ T5696] ? __pfx_device_add+0x10/0x10 [ 165.889254][ T5696] usb_set_configuration+0xd97/0x1c60 [ 165.894639][ T5696] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 165.900710][ T5696] usb_generic_driver_probe+0xa1/0xe0 [ 165.906094][ T5696] usb_probe_device+0xef/0x400 [ 165.910854][ T5696] ? __pfx_usb_probe_device+0x10/0x10 [ 165.916224][ T5696] really_probe+0x241/0xa60 [ 165.920728][ T5696] __driver_probe_device+0x20e/0x450 [ 165.926012][ T5696] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 165.931919][ T5696] driver_probe_device+0x4a/0x140 [ 165.936944][ T5696] __device_attach_driver+0x1df/0x320 [ 165.942317][ T5696] ? __pfx___device_attach_driver+0x10/0x10 [ 165.948208][ T5696] bus_for_each_drv+0x159/0x1e0 [ 165.953061][ T5696] ? __pfx_bus_for_each_drv+0x10/0x10 [ 165.958448][ T5696] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 165.964261][ T5696] __device_attach+0x1e4/0x4d0 [ 165.969022][ T5696] ? __pfx___device_attach+0x10/0x10 [ 165.974312][ T5696] device_initial_probe+0xaf/0xd0 [ 165.979333][ T5696] bus_probe_device+0x64/0x160 [ 165.984110][ T5696] device_add+0x121d/0x1970 [ 165.988617][ T5696] ? __pfx_device_add+0x10/0x10 [ 165.993468][ T5696] ? add_device_randomness+0xc9/0x110 [ 165.998857][ T5696] usb_new_device.part.0+0xcc2/0x1686 [ 166.004232][ T5696] ? do_raw_spin_lock+0x128/0x260 [ 166.009249][ T5696] ? __pfx_usb_new_device.part.0+0x10/0x10 [ 166.015040][ T5696] ? mark_held_locks+0x40/0x70 [ 166.019795][ T5696] hub_event.cold+0x1e3/0xe90 [ 166.024478][ T5696] ? __pfx_hub_event+0x10/0x10 [ 166.029225][ T5696] ? debug_object_deactivate+0x2e4/0x3b0 [ 166.034849][ T5696] ? rcu_is_watching+0x13/0xc0 [ 166.039596][ T5696] process_one_work+0xa23/0x1940 [ 166.044526][ T5696] ? __pfx_process_one_work+0x10/0x10 [ 166.049890][ T5696] ? __pfx_hub_event+0x10/0x10 [ 166.054635][ T5696] worker_thread+0x5ef/0xe50 [ 166.059213][ T5696] ? __pfx_worker_thread+0x10/0x10 [ 166.064308][ T5696] ? kthread+0x13a/0x450 [ 166.068532][ T5696] ? __pfx_worker_thread+0x10/0x10 [ 166.073623][ T5696] kthread+0x373/0x450 [ 166.077672][ T5696] ? __pfx_kthread+0x10/0x10 [ 166.082245][ T5696] ret_from_fork+0x730/0xd60 [ 166.086824][ T5696] ? __pfx_ret_from_fork+0x10/0x10 [ 166.091923][ T5696] ? __switch_to+0x800/0x10f0 [ 166.096582][ T5696] ? __pfx_kthread+0x10/0x10 [ 166.101155][ T5696] ret_from_fork_asm+0x1a/0x30 [ 166.105920][ T5696] [ 166.109112][ T5696] Kernel Offset: disabled [ 166.113411][ T5696] Rebooting in 86400 seconds..