last executing test programs: 10.471390894s ago: executing program 2 (id=1271): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="120100002eab5a40401c3405cc6d010203010902120001000000000904"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) syz_usb_connect$cdc_ecm(0x3, 0x50, &(0x7f0000000680)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3e, 0x1, 0x1, 0x2a, 0x20, 0xf7, "", [{{0x9, 0x4, 0x0, 0x1, 0x3, 0x2, 0x6, 0x0, 0xe, {{0x8, 0x24, 0x6, 0x0, 0x0, "7bf464"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0xf7f, 0x7, 0x7, 0xc0}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x10, 0x7f, 0x4, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0xd, 0x46, 0x4f}}}}}]}}]}}, &(0x7f0000000a80)={0xa, &(0x7f0000000700)={0xa, 0x6, 0x200, 0x7d, 0xfc, 0x9, 0x10, 0x5}, 0x27, &(0x7f0000000740)={0x5, 0xf, 0x27, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x1c, 0x5, 0x3, 0x47}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "4e5b7a4f1555f0f8cce252376ca85860"}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x6, 0x7, 0xfd95}]}, 0x7, [{0xd6, &(0x7f0000000780)=@string={0xd6, 0x3, "953725e5f0dc966d08c350dc32bf832b6c9f58e5dc9df0b8543491fb767c935438f13163672139cf1e8e2b026dc1e2dffa793f55eb02d72ad50e665b39d0cc6af0d05a78241ebbb043b3e9483075fd17a9b0059080b5ed3b7c08a980b51d32803975c82966b16fe477d189b262da54171b6cdbed34754a5c83c6b203cab7256be1a3b8996202e39467faa3335f97abacd0e1f5ff96518ad203a46b7ee37c9cd87bf4c410054f0375072f741acd83662952b189b64bc1575aec2af5985709f085a937f875a07f09eb1088c632859ccb69d6dce58c"}}, {0x2b, &(0x7f0000000880)=@string={0x2b, 0x3, "faedd96d7ba717e1d4d99053e3ab00462fe54b25657ec9936e216ceeb7d86549a630e95e68984bfca6"}}, {0x4, &(0x7f00000008c0)=@lang_id={0x4, 0x3, 0x429}}, {0x4, &(0x7f0000000900)=@lang_id={0x4, 0x3, 0x1409}}, {0x8, &(0x7f0000000940)=@string={0x8, 0x3, "9106c37b1bc8"}}, {0x4, &(0x7f0000000980)=@lang_id={0x4, 0x3, 0x100c}}, {0x2, &(0x7f00000009c0)=@string={0x2}}]}) listen(r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) syz_usb_control_io$lan78xx(r0, &(0x7f0000000300)={0x14, &(0x7f0000000240)={0x0, 0x9, 0x16, {0x16, 0x21, "1e245189a18c73e13bc0d77cd60bfd693da60937"}}, &(0x7f0000000280)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x409}}}, &(0x7f0000000540)={0x34, 0x0, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000400)={0xc0, 0xa1, 0x4, 0x1}, &(0x7f00000004c0)={0x40, 0xa0, 0x4, 0xffffffff}, &(0x7f0000000500)={0xc0, 0xa2, 0x2f, "288e49cd6c20d39e845a1a2decfa6bdab0d7af1d7dccb44c1387448086d2378c136d628a60fae6808e89eec817b1d1"}}) syz_usb_connect(0x5, 0x24, &(0x7f0000000600)={{0x12, 0x1, 0x250, 0xcb, 0x31, 0x91, 0x40, 0x2001, 0x330f, 0xa5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x6, 0xa5, 0x20, 0x5, "", [{{0x9, 0x4, 0x93, 0x0, 0x0, 0xff, 0xff, 0xff, 0x29}}]}}]}}, &(0x7f0000000f40)={0xa, &(0x7f0000000b00)={0xa, 0x6, 0x250, 0xfa, 0xf9, 0x5, 0x8, 0xf1}, 0x5d, &(0x7f0000000b40)={0x5, 0xf, 0x5d, 0x4, [@generic={0x21, 0x10, 0xa, "63dba8a079910d3f9e6120e09667d3ffda0705bb105606a0a320b30fe123"}, @ssp_cap={0x1c, 0x10, 0xa, 0x5, 0x4, 0x3ff, 0xff00, 0x1ff, [0xff00c0, 0xc0c0, 0xf, 0xffff5f]}, @ext_cap={0x7, 0x10, 0x2, 0x20, 0x3, 0x5, 0x8001}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "8b564ca5fd364174e1f1a3830b704fe8"}]}, 0x8, [{0x91, &(0x7f0000000bc0)=@string={0x91, 0x3, "d653289ca425ce68cd4630241df1e967af797f356119e861a6d269aad7bd4dab1fe6412f80f708338e916960ac2a6c268c89eb7fcfe13d81c2b3af107256adb5de6fe2092eb1a6e93fde0add54c1ab8fc924309ece69071cabc92ee26cdc265a4786a8e6a876596403e0e97305883fee92e06b04b686f0ff0cb8fe0b88119685f7bba52bc1d1df6f51eef217d4316c"}}, {0x8b, &(0x7f0000000c80)=@string={0x8b, 0x3, "bf90ecb5416ab245d7f0cda7a04585a5f79ed321383d765c29bf6e6f67ea5b37bcc15a7399d174c39970a75d57aefab734b32e15fa971747e2b643a99ed928d07eaee98451eaefe350f67aea3cc014da28d088aa1a8355f70d591966587fae7eb6f60221a1d69f459290fcded02bab345662ea619674e6cf7a3d36af4010dc16dcae4c2c96635ae6ed"}}, {0x9d, &(0x7f0000000d40)=@string={0x9d, 0x3, "2ba6238029b92ecd04928db9f9b05aa11d63eb26ad47a7c9713370aef696aafa65bc87757a01be288b069690291d48131964a437e7416d931a06c7251f9a3bfbe1de084c933caedaac272012ab09256fd72bd40f8183a411da8b29e054707f268657a9e03fb32873f35d439c70fc7bef61909f2573f2105866ce369589352a07ee2b1b6ec00fcd4202b5dbdd54a84f40be17b3373d344219d4dd2f"}}, {0x4, &(0x7f0000000e00)=@lang_id={0x4, 0x3, 0x449}}, {0x4, &(0x7f0000000e40)=@lang_id={0x4, 0x3, 0xc0c}}, {0x4, &(0x7f0000000e80)=@lang_id={0x4, 0x3, 0x300a}}, {0x4, &(0x7f0000000ec0)=@lang_id={0x4, 0x3, 0x80a}}, {0x4, &(0x7f0000000f00)=@lang_id={0x4, 0x3, 0x42b}}]}) connect$vsock_stream(r2, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r3 = accept(r1, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="120000000400000004000000a4"], 0x48) timer_create(0x4, &(0x7f0000000140)={0x0, 0x28, 0x4, @thr={&(0x7f0000000000)="0505b6bcb2f9d25bcf3d9884ca4bd5b9dc0a7111fa45f9231ebb3b89862a59437a466068c380fb01aca202d415ac86efff25a483c54dfe3346", &(0x7f0000000080)="eecc769e10005ececfe2c0fa060fda09d87410da92a1a11d7497d0459307d17e5be4ee8b016ca31f696ed8c400d106f02bc108263f2224be51f3e2a98fc09d341387e3c661217079411b7a0f82f89f2506afc3530b0e907020f2d248a948fc9751a8795c7be054953a79df978edf78c179391d3a459dddfdec98317165f23b2fe432d723d6423be84f14fa8684bce6bd7b27e9a1b2580ca8de2743ad187062eba2d927f342437c46603e40b3c6b9e3b3335ab1fdc38af173965e87"}}, &(0x7f0000000180)=0x0) timer_settime(r5, 0x0, &(0x7f0000000200)={{0x0, 0x3938700}, {0x77359400}}, 0x0) writev(r2, &(0x7f0000002640)=[{&(0x7f00000001c0)="80", 0x1}], 0x1) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={r4, &(0x7f0000000940), &(0x7f00000002c0)=@tcp6=r3}, 0x20) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_freeze_timeout', 0x101a02, 0x0) sendfile(r6, r6, 0x0, 0x9) recvmmsg$unix(r3, &(0x7f0000000c40), 0x40002ce, 0x80, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000005c0)={0x1c, &(0x7f0000000480)={0x40, 0x6589d1dcc1ed157f, 0x4, "677afef2"}, 0x0, 0x0}) 9.593265665s ago: executing program 1 (id=1273): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000002, 0x40010, r0, 0x241fe000) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xef7}}, './file0\x00'}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0x9d, 0x81, &(0x7f0000000080)="16260663e7750be4557ec4eb5fa2785ca304a52b57a2a7cbfa3e0ac9f0f5dd6cc35e54cedb21de95e01b576957f25755e5b5df66baf63c8d5778db5f32c52390d65f8cc995669af9e8f16f832674bdd9ea45a1cbd68adc49afddac98b417665ba1035ed773e210a4861d28d1baf352c1630c2a9a5e03c939d927e207d9d03d48a6144c9442f75fd17b5c2b6ff4cf2fe5e5b3f8f8dd08f2e89032c1afcb", &(0x7f0000000140)=""/129, 0x4, 0x0, 0x0, 0x50, &(0x7f0000000200), &(0x7f0000000240)="1c37c3b4ebc9dada1344aecd3849c0fa3fbe8c833f75f05763bcaabdf56bc149dae3b1e55a17516496f2b204dfb9bf045cf4884fab0923835daf11a1e3d75d696ebddb242862ee671fad897ba04bbdc7", 0x2, 0x0, 0x5}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0x9d, 0x81, &(0x7f0000000080)="16260663e7750be4557ec4eb5fa2785ca304a52b57a2a7cbfa3e0ac9f0f5dd6cc35e54cedb21de95e01b576957f25755e5b5df66baf63c8d5778db5f32c52390d65f8cc995669af9e8f16f832674bdd9ea45a1cbd68adc49afddac98b417665ba1035ed773e210a4861d28d1baf352c1630c2a9a5e03c939d927e207d9d03d48a6144c9442f75fd17b5c2b6ff4cf2fe5e5b3f8f8dd08f2e89032c1afcb", &(0x7f0000000140)=""/129, 0x4, 0x0, 0x0, 0x50, &(0x7f0000000200), &(0x7f0000000240)="1c37c3b4ebc9dada1344aecd3849c0fa3fbe8c833f75f05763bcaabdf56bc149dae3b1e55a17516496f2b204dfb9bf045cf4884fab0923835daf11a1e3d75d696ebddb242862ee671fad897ba04bbdc7", 0x2, 0x0, 0x5}, 0x50) ioctl$SG_GET_RESERVED_SIZE(r1, 0x2272, &(0x7f0000000340)) getsockopt$ARPT_SO_GET_ENTRIES(r1, 0x0, 0x61, &(0x7f0000000380)={'filter\x00', 0x95, "46046aaffdb19fc2e018ce6607007ea41e399645bdd2d43d15f3a949c0046ab94d85761c7bbdfe8621533ea8363785b28d0d3821ef31822ac5a2fcf9fe4787e3b1005e9ca893ecb6fce7bc95c5f94bca09d28be4343af6bb03ac256bb0125b3d8664ee4f1b691f2b3cc5dca013c77e85a95d982244cd8989877f9871fbeb78d44617ba60a66d80d68079a5b807e8abfb8100b76ba0"}, &(0x7f0000000440)=0xb9) (async) getsockopt$ARPT_SO_GET_ENTRIES(r1, 0x0, 0x61, &(0x7f0000000380)={'filter\x00', 0x95, "46046aaffdb19fc2e018ce6607007ea41e399645bdd2d43d15f3a949c0046ab94d85761c7bbdfe8621533ea8363785b28d0d3821ef31822ac5a2fcf9fe4787e3b1005e9ca893ecb6fce7bc95c5f94bca09d28be4343af6bb03ac256bb0125b3d8664ee4f1b691f2b3cc5dca013c77e85a95d982244cd8989877f9871fbeb78d44617ba60a66d80d68079a5b807e8abfb8100b76ba0"}, &(0x7f0000000440)=0xb9) close_range(r1, r0, 0x0) (async) close_range(r1, r0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(r1, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x34, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0xfff}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0xffffffff}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x50}, 0x1) openat$ipvs(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0) (async) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0) getpgrp(0x0) (async) r4 = getpgrp(0x0) r5 = syz_open_procfs(r4, &(0x7f0000000600)='net/vlan/config\x00') getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f00000006c0)={{{@in=@empty, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@empty}}, &(0x7f00000007c0)=0xe8) stat(&(0x7f0000000800)='./file1\x00', &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680), 0x24088, &(0x7f00000008c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, r6}, 0x2c, {'group_id', 0x3d, r7}, 0x2c, {[{@allow_other}], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@appraise_type}, {@obj_user={'obj_user', 0x3d, 'wlan1\x00'}}]}}) mount$cgroup(0x0, &(0x7f0000000980)='./file0\x00', &(0x7f00000009c0), 0x80c0, &(0x7f0000000a00)={[{@release_agent={'release_agent', 0x3d, './file0'}}], [{@obj_type={'obj_type', 0x3d, 'obj_user'}}]}) (async) mount$cgroup(0x0, &(0x7f0000000980)='./file0\x00', &(0x7f00000009c0), 0x80c0, &(0x7f0000000a00)={[{@release_agent={'release_agent', 0x3d, './file0'}}], [{@obj_type={'obj_type', 0x3d, 'obj_user'}}]}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f0000000a40)={{0x1, 0x1, 0x18, r1, {0x9}}, './file1\x00'}) ioctl$SG_BLKSECTGET(r8, 0x1267, &(0x7f0000000a80)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000ac0)='./cgroup.net/syz0\x00', 0x200002, 0x0) syz_clone(0x21c3c00, &(0x7f0000000b00)="9af261f808e6cd2f764c44a0392b8c3dbc7cddf27ca1035031b0f8322f75316bdaef003f1175c009ddc9b90ecdfa1ac4d9a28d949a7ea7abe1a0d7f373eb584727ee05a3f8140a09422838f7bf6222d0877d1e57e0d7624d692184cee109036abe616842d3e79cbf390bd5ca3db8f874015946538f0156d2a6fcbe91c1b9966f26081a8a9cc33b40de42b930882a383a039338c0c8a50be264c1", 0x9a, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)="0f82fb58a44180cec4f2a910543f84a832e0cddca83fbbe090dc50ef29e5a49dc80962aee3cf0df559834b") r9 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000c80), 0x500, 0x0) io_uring_setup(0x696d, &(0x7f0000000cc0)={0x0, 0xf4c6, 0x8000, 0x1, 0x19d, 0x0, r9}) (async) io_uring_setup(0x696d, &(0x7f0000000cc0)={0x0, 0xf4c6, 0x8000, 0x1, 0x19d, 0x0, r9}) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r9, 0x84, 0x72, &(0x7f0000000d40)={0x0, 0x7f, 0x60}, &(0x7f0000000d80)=0xc) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r9, 0x84, 0x18, &(0x7f0000000dc0)={r10}, &(0x7f0000000e00)=0x8) (async) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r9, 0x84, 0x18, &(0x7f0000000dc0)={r10}, &(0x7f0000000e00)=0x8) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f0000001440)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001400)={&(0x7f0000000e80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x128, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_TABLE_USERDATA={0x37, 0x6, "13fad867fcad17619271ba81dd018a6de26ecadd116a9b93f660f2fc79e11685840e3da8ac7068acb75e98c62cbc27abcb10b7"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0xdb89c3b}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0x81, 0x6, "dd9572727e57637e98b3bf4d5c7f1252cb1b2398ec8da6808b84b49611383cb0cfa5056ac6d808eda7750828be0ffd6cf74d0ce2521334643dca5b1950c272e43376888191b78a370a920d3f40fca773ae8fcf5fbf7a8e2c0b4549d15a923e6ce1c7e2997ba215dab7a8894b626ca3d3cc7137a2d2fdfa4e4e771cb288"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0x24, 0x6, "8c83d024314f1b95188d5d0a86e530af249b1d048a86c48b1f29c364a1d0edad"}]}, @NFT_MSG_DELSETELEM={0x428, 0xe, 0xa, 0x305, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x3fc, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}]}, {0x2ec, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x170, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VALUE={0x2d, 0x1, "70c08b2132dd4d34741626df6a02f7a4b9ae826c04e5cc5db7c83376346b1285d42e520f34b46ec299"}, @NFTA_DATA_VALUE={0x5, 0x1, "af"}, @NFTA_DATA_VALUE={0xf5, 0x1, "ddec73d8462c5cda24c923c10347801f7e28c27a6e2659649b05f6cf72f7c6b4aa028dd048479f5c867b61eb50b5ec539d842f5679c8182d7f0d2686e04f5635192fc2c25de484d0d4de4ad96877dc04ef21a7ac7bc29914a6a9a717ed6271eeae0c1819f72a8dc21c33e1a7d799982687e12bf0af20b1275c6fe8e00fc418013a435a7e8aa92ff375d0b1fe2652fe2779e33ad0b7439c18a3bab98400f29f28f0d9aaf406c8bd206bcb3f82b084ad4909d9a8057c90251389e0fd2476808a071fa1d13be15fbe1aaa2a1b4a3e1ec544b3f0ee345882b33757cf1b6d3a6c38b8615b711dc3974817b9563c7fdb3e93afb1"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x24, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @tproxy={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @xfrm={{0x9}, @void}}]}, @NFTA_SET_ELEM_DATA={0x28, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VALUE={0x1f, 0x1, "e449a3a5131386d0e1bacec5d4fa99955476d94911b27065837af8"}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x64, 0xb, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, {0x2c, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_NUM={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @target={{0xb}, @void}}, {0xc, 0x1, 0x0, 0x1, @dup={{0x8}, @void}}]}, @NFTA_SET_ELEM_KEY_END={0xc8, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0xa9, 0x1, "8701eb05fadb1e35b0dfd55d4889a955c1dbe2f26a6d232f0770b61d6fd30cc673b2302f691906449c710541069025baa7c408ccbd4ff6508f5509696e9f959a7d8f75b0127bbf6affae1f01ed92281740e2681f75d3eef400d385c1fda7073ea64a72cc78bcfc94773b0be594802de4b6c04859529002c62640ef7767a246a0c2bcb05f001d9334d433592477aecd2ea70c015674b91d9a9b4c583290e3ac3d72b88c15dd"}]}]}, {0xf0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0xa8, 0xb, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_BITWISE_DATA={0x1c, 0x7, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}]}}}, {0x30, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0xa}, @NFTA_NAT_REG_PROTO_MAX={0x8, 0x6, 0x1, 0x0, 0x11}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0xa}]}}}, {0x28, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x14, 0x1, 0x0, 0x1, @notrack={{0xc}, @val={0x4, 0x2, 0x0, 0x1, ["", "", "", "", "", "", "", "", "", ""]}}}]}, @NFTA_SET_ELEM_KEY={0x44, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x3e, 0x1, "40bd7a5e03795b6ae1bae432133814527a9f95465d420a008c88c469e0c5cc9fa2e7132e3b246fb9b573bea2bc2519ff4f692938a7997f212165"}]}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x8}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x578}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r8, 0xc0189372, &(0x7f0000001480)={{0x1, 0x1, 0x18, r8, {0x8452}}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r8, 0xc0189372, &(0x7f0000001480)={{0x1, 0x1, 0x18, r8, {0x8452}}, './file0\x00'}) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001500), r5) sendmsg$NL80211_CMD_SET_POWER_SAVE(r9, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000015c0)={&(0x7f0000001540)={0x48, r12, 0x100, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x8, 0x77}}}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x804}, 0x40000) bind$qrtr(r3, &(0x7f0000001640)={0x2a, 0x4, 0x3fff}, 0xc) 9.08808799s ago: executing program 1 (id=1277): recvmmsg(0xffffffffffffffff, &(0x7f0000000e00)=[{{&(0x7f00000000c0)=@x25={0x9, @remote}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000140)=""/127, 0x7f}, {&(0x7f00000001c0)=""/103, 0x67}, {&(0x7f0000000240)=""/156, 0x9c}, {&(0x7f0000000380)=""/209, 0xd1}, {&(0x7f0000000480)=""/228, 0xe4}, {&(0x7f0000000580)=""/230, 0xe6}], 0x6, &(0x7f0000000700)=""/35, 0x23}, 0x400}, {{0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000800)=""/75, 0x4b}, {&(0x7f0000000880)=""/10, 0xa}, {0x0}, {&(0x7f0000000940)=""/208, 0xd0}, {&(0x7f0000000a40)=""/57, 0x39}, {0x0}, {&(0x7f0000000bc0)=""/118, 0x76}], 0x7, &(0x7f0000000d00)=""/219, 0xdb}}], 0x2, 0x21, 0x0) r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000018105704da0700000000000109022400010000ba0009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "0100"}, @global=@item_012={0x2, 0x1, 0x0, "0100"}, @main=@item_4, @local=@item_012={0x2, 0x2, 0x2, "90a0"}, @global=@item_012={0x1, 0x1, 0x7, '8'}, @main=@item_4={0x3, 0x0, 0xb, "c83e2503"}, @local=@item_4={0x3, 0x2, 0x1, "dde84050"}, @local=@item_012={0x2, 0x2, 0x3, '\fh'}, @local=@item_4={0x3, 0x2, 0x7, 'c^,-'}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[], 0x0}, 0x0) 8.190759292s ago: executing program 0 (id=1281): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r1, 0xa23, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x1, 0x1}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x4008880}, 0x20000084) recvmmsg(r2, &(0x7f0000006580)=[{{&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/119, 0x77}, {&(0x7f0000000240)=""/47, 0x2f}], 0x2, &(0x7f00000003c0)=""/195, 0xc3}, 0x975f}, {{&(0x7f00000004c0)=@nfc_llcp, 0x80, &(0x7f0000002a80)=[{&(0x7f0000000540)=""/149, 0x95}, {&(0x7f0000000600)=""/23, 0x17}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000001640)=""/162, 0xa2}, {&(0x7f0000001700)=""/191, 0xbf}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/130, 0x82}, {&(0x7f0000002880)=""/81, 0x51}, {&(0x7f0000002900)=""/136, 0x88}, {&(0x7f00000029c0)=""/141, 0x8d}], 0xa}, 0x2}, {{&(0x7f0000002b40)=@nfc, 0x80, &(0x7f0000002dc0)=[{&(0x7f0000002bc0)=""/13, 0xd}, {&(0x7f0000002c00)=""/12, 0xc}, {&(0x7f0000002c40)=""/49, 0x31}, {&(0x7f0000002c80)=""/225, 0xe1}, {&(0x7f0000002d80)=""/25, 0x19}], 0x5, &(0x7f0000002e40)=""/112, 0x70}, 0xa066}, {{&(0x7f0000002ec0)=@ax25={{0x3, @bcast}, [@netrom, @remote, @bcast, @remote, @remote, @rose, @null, @bcast]}, 0x80, &(0x7f0000004300)=[{&(0x7f0000002f40)=""/25, 0x19}, {&(0x7f0000002f80)=""/190, 0xbe}, {&(0x7f0000003040)=""/4096, 0x1000}, {&(0x7f0000004040)=""/191, 0xbf}, {&(0x7f0000004100)=""/200, 0xc8}, {&(0x7f0000004200)=""/177, 0xb1}, {&(0x7f00000042c0)=""/37, 0x25}], 0x7}, 0x8}, {{&(0x7f0000004380)=@alg, 0x80, &(0x7f0000004a40)=[{&(0x7f0000004400)=""/247, 0xf7}, {&(0x7f0000004500)=""/188, 0xbc}, {&(0x7f00000045c0)=""/142, 0x8e}, {&(0x7f0000004680)}, {&(0x7f00000046c0)=""/217, 0xd9}, {&(0x7f00000047c0)=""/70, 0x46}, {&(0x7f0000004840)=""/218, 0xda}, {&(0x7f0000004940)=""/1, 0x1}, {&(0x7f0000004980)=""/186, 0xba}], 0x9, &(0x7f0000004b00)=""/146, 0x92}, 0x3}, {{&(0x7f0000004bc0)=@ax25={{0x3, @netrom}, [@null, @null, @default, @remote, @remote, @default, @null, @default]}, 0x80, &(0x7f0000004dc0)=[{&(0x7f0000004c40)=""/77, 0x4d}, {&(0x7f0000004cc0)=""/30, 0x1e}, {&(0x7f0000004d00)=""/23, 0x17}, {&(0x7f0000004d40)=""/66, 0x42}], 0x4, &(0x7f0000004e00)=""/181, 0xb5}, 0x1}, {{&(0x7f0000004ec0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f0000006080)=[{&(0x7f0000004f40)=""/4096, 0x1000}, {&(0x7f0000005f40)=""/118, 0x76}, {&(0x7f0000005fc0)=""/155, 0x9b}], 0x3, &(0x7f00000060c0)=""/119, 0x77}, 0x8}, {{&(0x7f0000006140)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f00000064c0)=[{&(0x7f00000061c0)=""/117, 0x75}, {&(0x7f0000006240)=""/228, 0xe4}, {&(0x7f0000006340)=""/87, 0x57}, {&(0x7f00000063c0)=""/247, 0xf7}], 0x4, &(0x7f0000006500)=""/128, 0x80}, 0x401}], 0x8, 0x40020100, &(0x7f0000006780)={0x77359400}) 6.983702086s ago: executing program 0 (id=1284): pipe2$watch_queue(0x0, 0x80) sendmsg$DEVLINK_CMD_SB_POOL_SET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x50, 0x0, 0x200, 0x70bd27, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8}, {0x6, 0x11, 0x5}, {0x8, 0x13, 0xfffffff8}, {0x5}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4048881}, 0x1) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="201109"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000080)={0x0, 0xa4, 0x1, 0x0}) sched_setscheduler(0x0, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@gettaction={0x30, 0x32, 0x6dd711a25f4cb68b, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x100}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}]}, 0x30}}, 0x0) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) prctl$PR_SET_THP_DISABLE(0x44, 0x200000000003) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x47, 0x1, 0x3, 0x6}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x55}, 0x4000) r4 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_usb_control_io$uac2(0xffffffffffffffff, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000000)={0x2c, 0x0, &(0x7f00000004c0)={0x0, 0x3, 0xb, @string={0xb, 0x3, "c78916542a254c47f1"}}, 0x0, 0x0, 0x0}, 0x0) connect$inet(r4, &(0x7f0000000bc0)={0x2, 0x4, @local}, 0x10) sendmmsg$inet(r4, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) 6.55762741s ago: executing program 2 (id=1285): sendmsg$DEVLINK_CMD_SB_POOL_SET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x50, 0x0, 0x200, 0x70bd27, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8}, {0x6, 0x11, 0x5}, {0x8, 0x13, 0xfffffff8}, {0x5}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4048881}, 0x1) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="201109"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000080)={0x0, 0xa4, 0x1, 0x0}) sched_setscheduler(0x0, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@gettaction={0x30, 0x32, 0x6dd711a25f4cb68b, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x100}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}]}, 0x30}}, 0x0) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) prctl$PR_SET_THP_DISABLE(0x44, 0x200000000003) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x47, 0x1, 0x3, 0x6}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x55}, 0x4000) r4 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_usb_control_io$uac2(0xffffffffffffffff, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000000)={0x2c, 0x0, &(0x7f00000004c0)={0x0, 0x3, 0xb, @string={0xb, 0x3, "c78916542a254c47f1"}}, 0x0, 0x0, 0x0}, 0x0) connect$inet(r4, &(0x7f0000000bc0)={0x2, 0x4, @local}, 0x10) sendmmsg$inet(r4, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) 6.136256531s ago: executing program 1 (id=1286): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000700)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x8890) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000680)={0x64, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xfff, 0x54}}}}, [@NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x1}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x5c2}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x1a, 0x13, [{0x1}, {0x6c, 0x1}, {0x6c}, {0x6c, 0x1}, {0x2, 0x1}, {0x48, 0x1}, {0x1}, {0x1b, 0x1}, {0x16}, {0x4}, {0x16, 0x1}, {0x36}, {0x24, 0x1}, {0x12, 0x1}, {0x3, 0x1}, {0x6}, {0x1}, {0x30}, {0xf}, {0xb, 0x1}, {0xc}, {0x12}]}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x7, 0xbe, "9c3321"}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004080) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x30, 0x0, 0x1, 0x70bd25, 0x0, {{0x2}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x1, 0x51}}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}]]}, 0x30}, 0x1, 0x0, 0x0, 0x4c854}, 0x20040880) add_key$fscrypt_provisioning(&(0x7f0000000340), 0x0, 0x0, 0x0, 0xfffffffffffffffe) mount$fuse(0x0, 0x0, 0x0, 0x1000430, &(0x7f0000000780)=ANY=[@ANYRESDEC=0x0, @ANYBLOB=',', @ANYBLOB="58e1a192964f91b2b2b082e5b2d36bfb79aa692b33c0fe4f45accc6a979fe95b1d5b4e"]) r2 = socket$alg(0x26, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="2c235aa9c5", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r4, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r4, 0x82, 0xc38, &(0x7f0000000dc0)=ANY=[]) 5.872315909s ago: executing program 4 (id=1288): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) madvise(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x14) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() gettid() sched_setaffinity(0x0, 0xffffffffffffff0b, &(0x7f00000002c0)=0xc5) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0xf8}, 0x1, 0x0, 0x0, 0x40010}, 0x4048080) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000040)=0x0) sched_setscheduler(r3, 0x0, &(0x7f0000000200)=0x20000006) mmap(&(0x7f0000074000/0x1000)=nil, 0x1000, 0xb635773f07ebbeee, 0x1010, r1, 0xc77dc000) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x355b8ea71e7dcc97}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) futex_waitv(&(0x7f0000001a80)=[{0xbe, 0x0, 0x2}], 0x1, 0x0, &(0x7f00000000c0), 0x0) connect$unix(r5, &(0x7f0000000180)=@file={0x0, './cgroup/../file0/file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x0, 0x2, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(0xffffffffffffffff, 0x1, 0x53, 0x0, 0x0) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4008094) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r6, &(0x7f0000000480), 0x2, 0x0) 5.789408725s ago: executing program 4 (id=1289): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, &(0x7f0000000100)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffff}, 0x94) 5.61602291s ago: executing program 4 (id=1291): openat$kvm(0xffffffffffffff9c, 0x0, 0x2a40, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) madvise(&(0x7f0000000000/0x600000)=nil, 0xffffffffffffffff, 0x16) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x5, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) write$tun(0xffffffffffffffff, 0x0, 0x6e) r1 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$FUSE(r1, 0x0, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x89901) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) openat$kvm(0x0, 0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r6, 0xffffffffffffffff, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) recvmsg$unix(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x0) sendmsg$inet(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0) 4.401217296s ago: executing program 4 (id=1293): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000006c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x7, 0x4) sendmmsg$inet(r0, &(0x7f0000000840)=[{{&(0x7f0000000c00)={0x2, 0x4e22, @multicast2}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r0, &(0x7f00000000c0)="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", 0x382, 0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x38, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000640)={'batadv0\x00', 0x0}) r4 = fanotify_init(0x200, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) fanotify_mark(r4, 0x501, 0x48001051, r5, 0x0) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000740)='net_prio.prioidx\x00', 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x2, 0x6, 0xffff, 0x5, 0x880, 0xffffffffffffffff, 0x736, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x5}, 0x50) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002280)='/proc/cpuinfo\x00', 0x0, 0x0) read$FUSE(r8, &(0x7f0000000200)={0x2020}, 0x2020) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000800)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000880)={0x0, 0x4, 0x10}, 0xc) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000008c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x11, 0xfffffff3, 0x5, 0xfff, 0x601c8, 0x1, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x5}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a00)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000980), &(0x7f00000009c0)}, 0x20) r14 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a40)={0xffffffffffffffff, 0x4, 0x10}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x2, 0xd, &(0x7f00000022c0)=ANY=[@ANYBLOB="1800000000020000000000000c00000035170000100000006195ffff1000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000018270000", @ANYRES32=r2, @ANYBLOB="0000affa0c159fffede29c330000910300006e6830000800000035090200fcffffff99000000000000001c1a95f7dfc456418ee0bb998ded0f7fb9a64c4af2f49ea12fd011ce141cf75ac02046d81b77abfae2b557d3eeebeb133d5ed5b5ca24b26fe6876f36b485a250d3a6f8b4bb941adadf3883b1bc"], &(0x7f0000000500)='syzkaller\x00', 0x5, 0xf0, &(0x7f0000000540)=""/240, 0x41000, 0x2, '\x00', r3, @fallback=0x1b, r5, 0x8, &(0x7f0000000680)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000700)={0x2, 0x5, 0x3, 0x2}, 0x10, 0x0, r0, 0x6, &(0x7f0000000a80)=[0xffffffffffffffff, r6, r7, r8, r9, r10, r11, r12, r13, r14], &(0x7f0000000ac0)=[{0x3, 0x4, 0xc, 0xa}, {0x1, 0x3, 0x2, 0xb}, {0x2, 0x2, 0x0, 0x5}, {0x4, 0x3, 0x10, 0xa}, {0x3, 0x4, 0x8, 0x2}, {0x4, 0x4, 0x10, 0x2}], 0x10, 0x2}, 0x94) 3.963338311s ago: executing program 4 (id=1294): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000700)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002abd7000fcdbdf1a210081aedc2334e65d45f9c589ccfc55f5000008000300"], 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x8890) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000680)={0x64, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xfff, 0x54}}}}, [@NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x1}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x5c2}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x1b, 0x13, [{0x1}, {0x6c, 0x1}, {0x6c}, {0x6c, 0x1}, {0x2, 0x1}, {0x48, 0x1}, {0x1}, {0x1b, 0x1}, {0x16}, {0x4}, {0x16, 0x1}, {0x36}, {0x24, 0x1}, {0x12, 0x1}, {0x3, 0x1}, {0x6}, {0x1}, {0x30}, {0xf}, {0x24, 0x1}, {0xb, 0x1}, {0xc}, {0x12}]}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x6, 0xbe, "9c33"}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004080) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x30, 0x0, 0x1, 0x70bd25, 0x0, {{0x2}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x1, 0x51}}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}]]}, 0x30}, 0x1, 0x0, 0x0, 0x4c854}, 0x20040880) add_key$fscrypt_provisioning(&(0x7f0000000340), 0x0, 0x0, 0x0, 0xfffffffffffffffe) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="2c235aa9c5", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r4, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r4, 0x82, 0xc38, &(0x7f0000000dc0)=ANY=[]) 3.846713507s ago: executing program 3 (id=1295): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="120100002eab5a40401c3405cc6d010203010902120001000000000904"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) syz_usb_connect$cdc_ecm(0x3, 0x50, &(0x7f0000000680)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3e, 0x1, 0x1, 0x2a, 0x20, 0xf7, "", [{{0x9, 0x4, 0x0, 0x1, 0x3, 0x2, 0x6, 0x0, 0xe, {{0x8, 0x24, 0x6, 0x0, 0x0, "7bf464"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0xf7f, 0x7, 0x7, 0xc0}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x10, 0x7f, 0x4, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0xd, 0x46, 0x4f}}}}}]}}]}}, &(0x7f0000000a80)={0xa, &(0x7f0000000700)={0xa, 0x6, 0x200, 0x7d, 0xfc, 0x9, 0x10, 0x5}, 0x27, &(0x7f0000000740)={0x5, 0xf, 0x27, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x1c, 0x5, 0x3, 0x47}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "4e5b7a4f1555f0f8cce252376ca85860"}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x6, 0x7, 0xfd95}]}, 0x7, [{0xd6, &(0x7f0000000780)=@string={0xd6, 0x3, "953725e5f0dc966d08c350dc32bf832b6c9f58e5dc9df0b8543491fb767c935438f13163672139cf1e8e2b026dc1e2dffa793f55eb02d72ad50e665b39d0cc6af0d05a78241ebbb043b3e9483075fd17a9b0059080b5ed3b7c08a980b51d32803975c82966b16fe477d189b262da54171b6cdbed34754a5c83c6b203cab7256be1a3b8996202e39467faa3335f97abacd0e1f5ff96518ad203a46b7ee37c9cd87bf4c410054f0375072f741acd83662952b189b64bc1575aec2af5985709f085a937f875a07f09eb1088c632859ccb69d6dce58c"}}, {0x2b, &(0x7f0000000880)=@string={0x2b, 0x3, "faedd96d7ba717e1d4d99053e3ab00462fe54b25657ec9936e216ceeb7d86549a630e95e68984bfca6"}}, {0x4, &(0x7f00000008c0)=@lang_id={0x4, 0x3, 0x429}}, {0x4, &(0x7f0000000900)=@lang_id={0x4, 0x3, 0x1409}}, {0x8, &(0x7f0000000940)=@string={0x8, 0x3, "9106c37b1bc8"}}, {0x4, &(0x7f0000000980)=@lang_id={0x4, 0x3, 0x100c}}, {0x2, &(0x7f00000009c0)=@string={0x2}}]}) listen(r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) syz_usb_control_io$lan78xx(r0, &(0x7f0000000300)={0x14, &(0x7f0000000240)={0x0, 0x9, 0x16, {0x16, 0x21, "1e245189a18c73e13bc0d77cd60bfd693da60937"}}, &(0x7f0000000280)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x409}}}, &(0x7f0000000540)={0x34, 0x0, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000400)={0xc0, 0xa1, 0x4, 0x1}, &(0x7f00000004c0)={0x40, 0xa0, 0x4, 0xffffffff}, &(0x7f0000000500)={0xc0, 0xa2, 0x2f, "288e49cd6c20d39e845a1a2decfa6bdab0d7af1d7dccb44c1387448086d2378c136d628a60fae6808e89eec817b1d1"}}) syz_usb_connect(0x5, 0x24, &(0x7f0000000600)={{0x12, 0x1, 0x250, 0xcb, 0x31, 0x91, 0x40, 0x2001, 0x330f, 0xa5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x6, 0xa5, 0x20, 0x5, "", [{{0x9, 0x4, 0x93, 0x0, 0x0, 0xff, 0xff, 0xff, 0x29}}]}}]}}, &(0x7f0000000f40)={0xa, &(0x7f0000000b00)={0xa, 0x6, 0x250, 0xfa, 0xf9, 0x5, 0x8, 0xf1}, 0x5d, &(0x7f0000000b40)={0x5, 0xf, 0x5d, 0x4, [@generic={0x21, 0x10, 0xa, "63dba8a079910d3f9e6120e09667d3ffda0705bb105606a0a320b30fe123"}, @ssp_cap={0x1c, 0x10, 0xa, 0x5, 0x4, 0x3ff, 0xff00, 0x1ff, [0xff00c0, 0xc0c0, 0xf, 0xffff5f]}, @ext_cap={0x7, 0x10, 0x2, 0x20, 0x3, 0x5, 0x8001}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "8b564ca5fd364174e1f1a3830b704fe8"}]}, 0x8, [{0x91, &(0x7f0000000bc0)=@string={0x91, 0x3, "d653289ca425ce68cd4630241df1e967af797f356119e861a6d269aad7bd4dab1fe6412f80f708338e916960ac2a6c268c89eb7fcfe13d81c2b3af107256adb5de6fe2092eb1a6e93fde0add54c1ab8fc924309ece69071cabc92ee26cdc265a4786a8e6a876596403e0e97305883fee92e06b04b686f0ff0cb8fe0b88119685f7bba52bc1d1df6f51eef217d4316c"}}, {0x8b, &(0x7f0000000c80)=@string={0x8b, 0x3, "bf90ecb5416ab245d7f0cda7a04585a5f79ed321383d765c29bf6e6f67ea5b37bcc15a7399d174c39970a75d57aefab734b32e15fa971747e2b643a99ed928d07eaee98451eaefe350f67aea3cc014da28d088aa1a8355f70d591966587fae7eb6f60221a1d69f459290fcded02bab345662ea619674e6cf7a3d36af4010dc16dcae4c2c96635ae6ed"}}, {0x9d, &(0x7f0000000d40)=@string={0x9d, 0x3, "2ba6238029b92ecd04928db9f9b05aa11d63eb26ad47a7c9713370aef696aafa65bc87757a01be288b069690291d48131964a437e7416d931a06c7251f9a3bfbe1de084c933caedaac272012ab09256fd72bd40f8183a411da8b29e054707f268657a9e03fb32873f35d439c70fc7bef61909f2573f2105866ce369589352a07ee2b1b6ec00fcd4202b5dbdd54a84f40be17b3373d344219d4dd2f"}}, {0x4, &(0x7f0000000e00)=@lang_id={0x4, 0x3, 0x449}}, {0x4, &(0x7f0000000e40)=@lang_id={0x4, 0x3, 0xc0c}}, {0x4, &(0x7f0000000e80)=@lang_id={0x4, 0x3, 0x300a}}, {0x4, &(0x7f0000000ec0)=@lang_id={0x4, 0x3, 0x80a}}, {0x4, &(0x7f0000000f00)=@lang_id={0x4, 0x3, 0x42b}}]}) connect$vsock_stream(r2, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r3 = accept(r1, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="120000000400000004000000a4"], 0x48) timer_create(0x4, &(0x7f0000000140)={0x0, 0x28, 0x4, @thr={&(0x7f0000000000)="0505b6bcb2f9d25bcf3d9884ca4bd5b9dc0a7111fa45f9231ebb3b89862a59437a466068c380fb01aca202d415ac86efff25a483c54dfe3346", &(0x7f0000000080)="eecc769e10005ececfe2c0fa060fda09d87410da92a1a11d7497d0459307d17e5be4ee8b016ca31f696ed8c400d106f02bc108263f2224be51f3e2a98fc09d341387e3c661217079411b7a0f82f89f2506afc3530b0e907020f2d248a948fc9751a8795c7be054953a79df978edf78c179391d3a459dddfdec98317165f23b2fe432d723d6423be84f14fa8684bce6bd7b27e9a1b2580ca8de2743ad187062eba2d927f342437c46603e40b3c6b9e3b3335ab1fdc38af173965e87"}}, &(0x7f0000000180)=0x0) timer_settime(r5, 0x0, &(0x7f0000000200)={{0x0, 0x3938700}, {0x77359400}}, 0x0) writev(r2, &(0x7f0000002640)=[{&(0x7f00000001c0)="80", 0x1}], 0x1) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={r4, &(0x7f0000000940), &(0x7f00000002c0)=@tcp6=r3}, 0x20) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_freeze_timeout', 0x101a02, 0x0) sendfile(r6, r6, 0x0, 0x9) recvmmsg$unix(r3, &(0x7f0000000c40), 0x40002ce, 0x80, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000005c0)={0x1c, &(0x7f0000000480)={0x40, 0x6589d1dcc1ed157f, 0x4, "677afef2"}, 0x0, 0x0}) 3.801215628s ago: executing program 0 (id=1296): r0 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000180)='source', &(0x7f00000001c0)='\xb7\xc4\xa2\xa8\xb4f\xd4\xf2\r\x04\xd8\xb9s\x94k7i\xf2\xa4\'\x1e\x1a\xfd&[', 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000001114010026bd3000ffdbdf250800030004000000"], 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x80) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000538acc089c0e00001e5b0102030109021b00010000000009040000014b34ef000905", @ANYBLOB="a49308da9385ffe335c3fadc7535198c13d8724c5e773e4cb2fe8f7266e495cff879b3b8e92db012cce8b988ec9aa2c92093f2f934b1e0d3492ddbe9ae3fe256957a055c4efb2c4b068882628450a0d9e5e6ddda67b0242ca53096a22567aded78b760993adc288f2369a5edb10595f1c65a9d38a2feb1a478125aa106895d5be2a676fa3c079d8475c56dd16b727fc2cef7337c3ce725789b57055fa955cfecbe05f3214e60a4fdefa2996ee64e53b94084eb452fb0ef270e410db6844124399c300c51f7e161ac41", @ANYRES16], 0x0) r3 = syz_open_dev$evdev(&(0x7f0000003880), 0x4, 0x2) ioctl$EVIOCSKEYCODE(r3, 0x40084504, &(0x7f0000000700)=[0x1, 0x2ff]) ioctl$EVIOCSKEYCODE_V2(r3, 0x40284504, &(0x7f0000004e40)={0xfb, 0x11, 0x0, 0x2ff, "4d512c91002a4950676142687108dcd3f82acf5a895bd90fca2bb40bb4fbf29c"}) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r4, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_rdma(0x10, 0x3, 0x14) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/address_bits', 0x202, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x100000, 0x1, &(0x7f0000006680)) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r7, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) 3.78173827s ago: executing program 2 (id=1297): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610408200000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x2c) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, 0xffffffffffffffff, 0x0}]) 3.414405367s ago: executing program 2 (id=1298): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="08000000040000000400000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000025000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000640)={r1}, 0x70) socket$kcm(0x11, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) fsopen(&(0x7f0000000080)='ext4\x00', 0x1) close(0x3) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc04, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_TARGET={0x8, 0x8, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$unix(0x1, 0x5, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$pppl2tp(0x18, 0x1, 0x1) r9 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r8, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r9, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRESOCT=r8, @ANYBLOB="01002cbd70100400000005000000080009000200000008000c00a80a0300000000a0430000000600010007000000"], 0x34}}, 0x20) sendmsg$L2TP_CMD_TUNNEL_GET(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r11, @ANYBLOB="25030000e47eeefa372fd7110000"], 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x0) recvmsg(r6, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000005c0)=""/151, 0x97}], 0x1, &(0x7f0000002f40)=""/229, 0xe5}, 0x0) sendmsg$tipc(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)="b8d3d8e48974aae56e0000000000000061b9459b68100dbf05177b2490a5408bdf271fd6b9aa6701365ffc723899ad120c5a54b1c64080f64f103ee1de769e5e9dd847dc85fea662eaad499c52a16f40cb3a1f6f3d5f8df14c53b2e6b5397f7806b6ff846de37a34c8342b9ac5a51eacf8a09cede8676044eafd3d7935f90698aa2d9c57276322b82e8976f5a4d980eaeb3b636630b810f2e2", 0x99}], 0x1, 0x0, 0x0, 0x8094}, 0x240048c9) close(r7) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00'}) 3.225445286s ago: executing program 2 (id=1299): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0x1}, 0x4) socket$vsock_stream(0x28, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="2f00000001000000", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB="92596131d5bb0176845f76402f2949f3c0347cff3a5251c9663f1751cb6b2961348bd6bab511db8eed2290901d6bec746629ed69d1349de3d49e9821820bdd473c1302de076603120067786bacc8d758bd3ab4d3ec668a4a13c375c7f7ab5b47c070e84d8a8382918ba22c7cf2cf", @ANYRES64=0x0], 0x20) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x26c100, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000100)={0x1, 0x0, @ioapic={0x8082801, 0x5fa, 0x8, 0x1ff, 0x0, [{0x3, 0x6, 0x9, '\x00', 0xe}, {0x5, 0xb, 0x72, '\x00', 0x6}, {0xfe, 0x5, 0x9, '\x00', 0x5}, {0x81, 0x77, 0x8, '\x00', 0x5}, {0x9, 0x50, 0x7f, '\x00', 0x60}, {0x0, 0x41, 0x2}, {0x1, 0x9, 0x9, '\x00', 0xa}, {0xd, 0x7, 0xb, '\x00', 0x45}, {0x8, 0x5, 0x0, '\x00', 0xff}, {0x6, 0x5a, 0x0, '\x00', 0x6}, {0x40, 0x4, 0xc, '\x00', 0x1}, {0x8, 0x4, 0x19, '\x00', 0xff}, {0x3, 0x86, 0x0, '\x00', 0xf9}, {0x5, 0x4f, 0x2}, {0x64, 0x87, 0x96, '\x00', 0x7}, {0xb, 0x0, 0x23, '\x00', 0x7b}, {0x3, 0x27, 0xd1}, {0x68, 0x3, 0xff, '\x00', 0x3}, {0x8, 0x1e, 0xc0, '\x00', 0x2}, {0x3e, 0x48, 0xa, '\x00', 0x3}, {0x7, 0x1, 0x2, '\x00', 0x1}, {0x4, 0x7, 0x6, '\x00', 0x4}, {0x93, 0x9, 0x4, '\x00', 0xe6}, {0x3, 0x7f, 0xe0, '\x00', 0x47}]}}) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f00000006c0)={0x2, 0x0, @ioapic={0xeeee0000, 0xa44, 0x5, 0x401, 0x0, [{0x8e, 0xb3, 0x3, '\x00', 0x5}, {0x7, 0x63, 0x3, '\x00', 0xc8}, {0x6, 0x38, 0x4a}, {0xae, 0x3, 0x0, '\x00', 0x9}, {0xf, 0x2, 0x0, '\x00', 0x6}, {0x70, 0x9, 0x6}, {0x4, 0x6c, 0x97, '\x00', 0x3}, {0xbc, 0x6b, 0x5, '\x00', 0x2}, {0x2, 0xf, 0x1, '\x00', 0x1}, {0x3, 0x5, 0x4, '\x00', 0x6}, {0x5, 0x2, 0xa9, '\x00', 0xd}, {0xe, 0x3, 0x9, '\x00', 0x3}, {0x7, 0x6, 0x8, '\x00', 0x3}, {0x7, 0x0, 0x2, '\x00', 0x7}, {0xd, 0x4, 0x9, '\x00', 0x3b}, {0x2, 0xa, 0x3, '\x00', 0x1}, {0x9, 0x8, 0x6, '\x00', 0x1}, {0x7, 0x1, 0x7f, '\x00', 0x2}, {0x13, 0x2, 0xfe, '\x00', 0xf8}, {0x8, 0x3, 0x5}, {0xc4, 0x80, 0x5, '\x00', 0xc}, {0x9, 0xd, 0x9, '\x00', 0xe}, {0x2, 0x80, 0x8, '\x00', 0x6}, {0x8, 0x6, 0x6, '\x00', 0x3}]}}) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000480)={0x4, 0x0, [{0x6, 0x5, 0x1, 0x5ff, 0x1000, 0x70, 0x5}, {0x6, 0x7, 0x0, 0x6, 0x2, 0xa, 0x5f}, {0xc0000001, 0x5, 0x0, 0x0, 0xab, 0x2, 0xff}, {0x6, 0xe58, 0xd, 0x5, 0x2, 0x1, 0x5}]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r5, 0xc02064b6, &(0x7f00000001c0)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r5, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r5, 0xc02064b9, &(0x7f0000000040)={&(0x7f0000000300)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r7, 0xcccccccc}) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r5, 0xc03864bc, &(0x7f0000000380)={0x0, 0x1, &(0x7f0000000440)=[r7], &(0x7f0000000200), &(0x7f00000000c0)=[r8], &(0x7f0000000040), 0x0, 0x300}) socket(0xa, 0x6, 0x3) socket$inet6(0xa, 0x80003, 0xff) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0) fcntl$lock(r9, 0x26, 0x0) 2.427655992s ago: executing program 1 (id=1300): socket$nl_netfilter(0x10, 0x3, 0xc) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f00000003c0)=""/195, 0x0, 0x43, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x50) r3 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r1, r2, 0x26, 0x0, @void}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000000c0)={r3, r1, 0x4}, 0x10) dup(r0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r5, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008001}, 0x4000080) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840), 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000040)={0x200000000000001}, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) 2.313605272s ago: executing program 2 (id=1301): syz_usb_connect(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120110031fcd1b08cf100355af75010203010902240001080910030904180202b41d3f0109050e83ff050207010905850320"], &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0}) r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x801) bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000533fa0)={0x0, 0x21}, &(0x7f00000001c0)) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r5, 0x1, &(0x7f0000000180)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0xfffc, r4, 0x0}]) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) r8 = io_uring_setup(0x744b, &(0x7f00000000c0)={0x0, 0xaf08, 0x1, 0x3, 0x1c6}) unshare(0x2020480) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000002c0)='ns/time_for_children\x00') close_range(r8, 0xffffffffffffffff, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r9 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r9, &(0x7f0000000040)={0xa, 0x0, 0xbf, @empty, 0x4, 0x100}, 0x20) connect$l2tp6(r9, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r9, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0xc0fe}}], 0x1, 0x40040) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000100)={0x0, 0x0, 0x0, r2}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000180)={0x15016910, 0x0, 0x4, r2}) 1.683299583s ago: executing program 1 (id=1302): setfsgid(0xee00) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x7005, 0x2, 0x0) syz_open_procfs$namespace(r2, 0x0) mount$binderfs(0x0, 0x0, 0x0, 0x4847, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000ac0)=ANY=[], 0x268}, 0x1, 0x0, 0x0, 0x24000041}, 0x4004040) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYRESHEX=r3, @ANYRESHEX=r4, @ANYRES64=r4], 0xb0}}, 0x20008801) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r7, &(0x7f0000001600)={0x9, {"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", 0x1000}}, 0x1006) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000240)="1000"/14, 0x0, 0x19, 0x60000000, 0x0, 0x14, 0x0, 0x0, 0x2}, 0x17) fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) syz_clone(0x400011, 0x0, 0x0, 0x0, 0x0, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) 1.451983322s ago: executing program 3 (id=1303): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x891c, &(0x7f0000000080)={'batadv_slave_1\x00', {0x2, 0x0, @private=0xfffffffc}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$qrtr(0x2a, 0x2, 0x0) r3 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r3, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r4, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) sendmsg$rds(r4, &(0x7f0000002d40)={&(0x7f0000000240)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10, &(0x7f0000000600)=[{&(0x7f00000002c0)=""/237, 0xed}, {&(0x7f0000000580)=""/65, 0x41}], 0x2, &(0x7f0000002b80)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x7}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000640)=""/4, 0x4}, &(0x7f0000001780), 0x44}}, @zcopy_cookie={0x18, 0x114, 0xc, 0xa}, @rdma_args={0x48, 0x114, 0x1, {{0x400, 0x4496}, {&(0x7f00000017c0)=""/204, 0xcc}, &(0x7f00000029c0)=[{&(0x7f00000018c0)=""/4096, 0x1000}, {&(0x7f00000028c0)=""/55, 0x37}, {&(0x7f0000002900)=""/149, 0x95}], 0x3, 0x28}}, @fadd={0x58, 0x114, 0x6, {{0xe, 0x6b9}, &(0x7f0000002a00), &(0x7f0000002a40)=0x6, 0x1, 0x8, 0x7, 0xe, 0x47, 0x63d}}, @fadd={0x58, 0x114, 0x6, {{0xffffffff, 0x7ff}, &(0x7f0000002a80)=0xdf5, &(0x7f0000002ac0)=0x5, 0x1, 0x7fffffffffffffff, 0x7, 0x3, 0x2, 0x3}}, @mask_cswp={0x58, 0x114, 0x9, {{0x1ff, 0xdbe5}, &(0x7f0000002b00)=0x7, &(0x7f0000002b40)=0xfffffffffffffffe, 0x8, 0x4, 0x0, 0xfff, 0x41, 0x1}}], 0x1b0, 0x40000}, 0x40) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r5 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) r6 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10) r7 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r8 = socket$tipc(0x1e, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000440)={0x0, 0x4c, &(0x7f00000003c0)=[@in={0x2, 0x4e20, @multicast2}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e23, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @in={0x2, 0x4e20, @broadcast}]}, &(0x7f0000000480)=0x10) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x0, 0x2}, 0x10) r9 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f0000000100)={0x41, 0x0, 0x2}, 0x1be) bind$bt_hci(r2, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0xffffff01, &(0x7f00000000c0)) 1.022976575s ago: executing program 4 (id=1304): r0 = syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) listen(r1, 0x2) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000280)={0x20, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x0}) 628.115287ms ago: executing program 3 (id=1305): syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd708", 0x1c, 0x6, 0xff, @remote, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x4a, 0x0, 0x0, 0x0, {[@exp_smc={0xfe, 0x6}]}}}}}}}}, 0x0) r0 = socket(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') mmap(&(0x7f00009c0000/0x4000)=nil, 0x4000, 0xb635773f04ebbeee, 0x8031, r1, 0xc6df8000) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0x2}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0xf}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1a0) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) chdir(&(0x7f00000000c0)='./bus\x00') getsockopt$IP_SET_OP_GET_BYNAME(0xffffffffffffffff, 0x1, 0x53, &(0x7f00000001c0)={0x6, 0x7, 'syz1\x00'}, &(0x7f0000000280)=0x28) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r5 = creat(&(0x7f0000000580)='./file1\x00', 0x0) r6 = fanotify_init(0xf00, 0x1) fanotify_mark(r6, 0x105, 0x40009975, r5, 0x0) syz_usb_connect$uac2(0x5, 0x7b, 0x0, 0x0) fallocate(r4, 0x0, 0x1000000, 0x3) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mmap(&(0x7f00002b8000/0x1000)=nil, 0x1000, 0x0, 0x2010, 0xffffffffffffffff, 0x18761000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r3, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x61d0, 0x0) r7 = socket(0x40000000015, 0x5, 0x0) listen(r7, 0x9) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000040)=0x392a0c168df816a6, 0x4) 627.446991ms ago: executing program 1 (id=1306): pipe2$watch_queue(0x0, 0x80) sendmsg$DEVLINK_CMD_SB_POOL_SET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x50, 0x0, 0x200, 0x70bd27, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8}, {0x6, 0x11, 0x5}, {0x8, 0x13, 0xfffffff8}, {0x5}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4048881}, 0x1) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="201109"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000080)={0x0, 0xa4, 0x1, 0x0}) sched_setscheduler(0x0, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@gettaction={0x30, 0x32, 0x6dd711a25f4cb68b, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x100}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}]}, 0x30}}, 0x0) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) prctl$PR_SET_THP_DISABLE(0x44, 0x200000000003) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x47, 0x1, 0x3, 0x6}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x55}, 0x4000) r4 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_usb_control_io$uac2(0xffffffffffffffff, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000000)={0x2c, 0x0, &(0x7f00000004c0)={0x0, 0x3, 0xb, @string={0xb, 0x3, "c78916542a254c47f1"}}, 0x0, 0x0, 0x0}, 0x0) connect$inet(r4, &(0x7f0000000bc0)={0x2, 0x4, @local}, 0x10) sendmmsg$inet(r4, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) 562.818573ms ago: executing program 0 (id=1307): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x5, 0xaf51, &(0x7f0000006680)) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) (async, rerun: 32) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') (rerun: 32) lseek(r0, 0x289e0cb5, 0x0) 284.271484ms ago: executing program 0 (id=1308): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610408200000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x2c) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, 0xffffffffffffffff, 0x0}]) 224.591983ms ago: executing program 3 (id=1309): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x40a00, 0x0) r0 = socket(0x2, 0x80805, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @multicast2, 0x4e21, 0x3, 'none\x00', 0x4, 0x6, 0x51}, {@rand_addr=0x64010100, 0x4e20, 0x10002, 0xcd, 0x4004000, 0xd}}, 0x44) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x2, 0x0, {}, [@NHA_OIF={0x8, 0x5, r3}]}, 0x20}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x20000000, 0x0, 0x4a044}, 0x4010) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0x20, 0x0, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000140)=@in6={0x2, 0x15, 0x20, @dev}, 0x80, 0x0}, 0x0) 161.859558ms ago: executing program 3 (id=1310): r0 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x26200) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f00000000c0)={'\x00', 0x0, 0x5, 0x44, 0xfffffff7, 0x0, "000000ffff0600000800", '\x00', "f8ffffe5", '\x00\b\x00', ["00710b00000900008aac00", "0400000000000000070900", "08e3fbff0700", "fdffffffff40b82dc44d00"]}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000040)=0x1) 87.925907ms ago: executing program 0 (id=1311): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) remap_file_pages(&(0x7f00003e3000/0x7000)=nil, 0x7000, 0x0, 0x4, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) r0 = socket$packet(0x11, 0x3, 0x300) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') open_by_handle_at(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="20000000f1000100", @ANYRES64=r0], 0x300000) r2 = io_uring_setup(0x5594, &(0x7f0000000100)={0x0, 0x10000000, 0x1, 0x1, 0x21e}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) prlimit64(0x0, 0xe, 0x0, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0xa2f01, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000bc0)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) fsopen(&(0x7f00000001c0)='sockfs\x00', 0x1) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r4, 0x4b67, &(0x7f0000001ec0)={0x1, &(0x7f0000001e80)=[{0x0, 0x1000}]}) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r5, 0x560f, &(0x7f0000000040)={0x1, 0x4002, 0xd, 0x2, 0x3f000000, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r3, 0xc04064aa, &(0x7f0000000980)={0x0, &(0x7f00000007c0)=[{}, {}, {}], 0x0, 0x0, '\x00', 0x0, 0x3}) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r3) sendmsg$ETHTOOL_MSG_EEE_SET(r3, &(0x7f0000001e00)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001dc0)={&(0x7f0000000c00)={0x154, r6, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x3}, @ETHTOOL_A_EEE_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}]}, @ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}, @ETHTOOL_A_EEE_ENABLED={0x5}, @ETHTOOL_A_EEE_MODES_OURS={0xb0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x9d, 0x5, "e65b2b3874c99dae5fbf7f1a78107d79eb257097a737aa188cc93677819bc5623094508d775facb21e871b0dd48492f8a53f9ff30dd14816753068e89adac759029d9930f8a937829ad5d6ed871ca18f71b486c802ce2dc833bdb108710d9a4fad1007361c1539c5b88021ff57582a09f725de284e3fb65e2c3c904250de303c37391783361996a95a467e2100d0a1b93d00644407cce1752b"}, @ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x40}]}]}, 0x154}, 0x1, 0x0, 0x0, 0x24000040}, 0x4000) mq_getsetattr(r3, &(0x7f0000000000)={0x6, 0x3, 0x80, 0x6}, &(0x7f0000000040)) 0s ago: executing program 3 (id=1312): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000700)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002abd7000fcdbdf1a210081aedc2334e65d45f9c589ccfc55f5000008000300", @ANYRES32=0x0, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x8890) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000680)={0x64, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xfff, 0x54}}}}, [@NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x1}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x5c2}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x1a, 0x13, [{0x1}, {0x6c, 0x1}, {0x6c}, {0x6c, 0x1}, {0x2, 0x1}, {0x48, 0x1}, {0x1}, {0x1b, 0x1}, {0x16}, {0x4}, {0x16, 0x1}, {0x36}, {0x24, 0x1}, {0x12, 0x1}, {0x3, 0x1}, {0x6}, {0x1}, {0x30}, {0xf}, {0xb, 0x1}, {0xc}, {0x12}]}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x7, 0xbe, "9c3321"}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004080) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x30, 0x0, 0x1, 0x70bd25, 0x0, {{0x2}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x1, 0x51}}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}]]}, 0x30}, 0x1, 0x0, 0x0, 0x4c854}, 0x20040880) add_key$fscrypt_provisioning(&(0x7f0000000340), 0x0, 0x0, 0x0, 0xfffffffffffffffe) mount$fuse(0x0, 0x0, 0x0, 0x1000430, &(0x7f0000000780)=ANY=[@ANYRESDEC=0x0, @ANYBLOB=',', @ANYBLOB="58e1a192964f91b2b2b082e5b2d36bfb79aa692b33c0fe4f45accc6a979fe95b1d5b4e"]) r2 = socket$alg(0x26, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="2c235aa9c5", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r4, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r4, 0x82, 0xc38, &(0x7f0000000dc0)=ANY=[]) kernel console output (not intermixed with test programs): [ 471.775924][ T9794] R13: 00007f8416016038 R14: 00007f8416015fa0 R15: 00007ffd1b737d98 [ 471.775948][ T9794] [ 471.997441][ T5346] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 472.011017][ T5346] usb 4-1: USB disconnect, device number 74 [ 472.134497][ T5716] usb 3-1: Using ep0 maxpacket: 16 [ 472.163760][ T5716] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 472.174477][ T5716] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 472.185799][ T5716] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 472.196000][ T5716] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 472.206562][ T5716] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 472.224789][ T5716] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 472.247308][ T5716] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 472.255830][ T5716] usb 3-1: Manufacturer: syz [ 472.258872][ T5746] usb 2-1: USB disconnect, device number 56 [ 472.263685][ T5716] usb 3-1: config 0 descriptor?? [ 472.351026][ T10] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 472.438902][ T50] Bluetooth: hci1: unexpected event for opcode 0x007f [ 472.515783][ T10] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 472.536327][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.556549][ T10] usb 5-1: Product: syz [ 472.562522][ T10] usb 5-1: Manufacturer: syz [ 472.571602][ T10] usb 5-1: SerialNumber: syz [ 472.579628][ T10] usb 5-1: config 0 descriptor?? [ 472.602216][ T5716] rc_core: IR keymap rc-hauppauge not found [ 472.613794][ T5716] Registered IR keymap rc-empty [ 472.622088][ T5716] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 472.640925][ T5716] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 472.671834][ T5716] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 472.689638][ T5716] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input104 [ 472.717896][ T5716] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 472.760955][ T5716] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 472.790962][ T5716] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 472.810699][ T5716] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 472.830887][ T5716] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 474.191244][ T5716] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 474.211015][ T5716] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 474.230733][ T5716] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 474.250880][ T5716] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 474.271328][ T5716] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 474.714385][ T10] usb 5-1: unexpected transceiver, part 0x6a version 0x03 [ 474.727718][ T5716] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 474.818634][ T5716] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 474.971031][ T9817] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1068'. [ 475.015418][ T5716] usb 3-1: USB disconnect, device number 69 [ 475.052352][ T10] usb 5-1: Firmware version (0.0) predates our first public release. [ 475.106309][ T10] usb 5-1: Please update to version 0.2 or newer [ 475.140354][ T10] usb 5-1: atusb_probe: initialization failed, error = -19 [ 475.188674][ T10] usb 5-1: USB disconnect, device number 67 [ 475.669478][ T9823] random: crng reseeded on system resumption [ 475.871020][ T30] kauditd_printk_skb: 159 callbacks suppressed [ 475.871054][ T30] audit: type=1400 audit(1779589753.323:10432): avc: denied { read write } for pid=5610 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 476.041154][ T30] audit: type=1400 audit(1779589753.323:10433): avc: denied { open } for pid=5610 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 476.079542][ T30] audit: type=1400 audit(1779589753.483:10435): avc: denied { read write } for pid=5612 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 476.212950][ T30] audit: type=1400 audit(1779589753.483:10436): avc: denied { open } for pid=5612 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 476.250760][ T30] audit: type=1400 audit(1779589753.483:10437): avc: denied { ioctl } for pid=5612 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 476.280646][ T30] audit: type=1400 audit(1779589753.323:10434): avc: denied { ioctl } for pid=5610 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 476.315013][ T9835] netlink: 'syz.3.1075': attribute type 1 has an invalid length. [ 476.321151][ T30] audit: type=1400 audit(1779589753.533:10438): avc: denied { read write } for pid=5621 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 478.016744][ T30] audit: type=1400 audit(1779589753.533:10439): avc: denied { open } for pid=5621 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 478.060677][ T30] audit: type=1400 audit(1779589753.533:10440): avc: denied { ioctl } for pid=5621 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 478.092718][ T30] audit: type=1400 audit(1779589753.563:10441): avc: denied { create } for pid=9828 comm="syz.1.1078" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 478.126158][ T9835] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1075'. [ 478.160767][ T5746] usb 2-1: new full-speed USB device number 57 using dummy_hcd [ 478.171236][ T9839] 8021q: adding VLAN 0 to HW filter on device bond2 [ 478.218516][ T9839] bond1: (slave bond2): making interface the new active one [ 478.250133][ T9839] bond1: (slave bond2): Enslaving as an active interface with an up link [ 478.298766][ T9840] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 478.311331][ T9835] 8021q: adding VLAN 0 to HW filter on device bond1 [ 478.436968][ T5746] usb 2-1: config 150 has an invalid descriptor of length 0, skipping remainder of the config [ 478.464688][ T5746] usb 2-1: config 150 has 0 interfaces, different from the descriptor's value: 3 [ 478.511220][ T5746] usb 2-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 478.532435][ T5746] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.540595][ T5746] usb 2-1: Product: syz [ 478.548540][ T5746] usb 2-1: Manufacturer: syz [ 478.553779][ T5746] usb 2-1: SerialNumber: syz [ 478.828795][ T5746] usb 2-1: USB disconnect, device number 57 [ 478.876540][ T9847] kAFS: unable to lookup cell 'ÿ' [ 480.926534][ T30] kauditd_printk_skb: 119 callbacks suppressed [ 480.926551][ T30] audit: type=1400 audit(1779589758.373:10561): avc: denied { create } for pid=9864 comm="syz.2.1085" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 480.984808][ T30] audit: type=1400 audit(1779589758.413:10562): avc: denied { map_create } for pid=9864 comm="syz.2.1085" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 481.005810][ T30] audit: type=1400 audit(1779589758.413:10563): avc: denied { perfmon } for pid=9864 comm="syz.2.1085" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 481.107279][ T30] audit: type=1400 audit(1779589758.413:10564): avc: denied { map_read map_write } for pid=9864 comm="syz.2.1085" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 481.178329][ T30] audit: type=1400 audit(1779589758.413:10565): avc: denied { prog_load } for pid=9864 comm="syz.2.1085" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 481.231457][ T30] audit: type=1400 audit(1779589758.413:10566): avc: denied { bpf } for pid=9864 comm="syz.2.1085" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 481.300627][ T30] audit: type=1400 audit(1779589758.413:10567): avc: denied { setopt } for pid=9864 comm="syz.2.1085" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 481.368934][ T30] audit: type=1400 audit(1779589758.413:10568): avc: denied { create } for pid=9864 comm="syz.2.1085" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 481.486581][ T30] audit: type=1400 audit(1779589758.413:10569): avc: denied { create } for pid=9864 comm="syz.2.1085" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 481.530547][ T10] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 481.540822][ T5716] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 481.650308][ T30] audit: type=1400 audit(1779589758.423:10570): avc: denied { connect } for pid=9864 comm="syz.2.1085" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 483.100761][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 483.108147][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 483.121560][ T5716] usb 2-1: Using ep0 maxpacket: 32 [ 483.126790][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 483.138684][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 483.150972][ T10] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 483.170884][ T5716] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 483.201430][ T5716] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.230336][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 483.277166][ T10] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 483.288623][ T10] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 483.306384][ T10] usb 3-1: Manufacturer: syz [ 483.319083][ T10] usb 3-1: config 0 descriptor?? [ 483.456839][ T5707] usb 5-1: new full-speed USB device number 68 using dummy_hcd [ 483.478940][ T5716] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 483.493470][ T5716] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 483.505198][ T5716] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 483.515008][ T5716] usb 2-1: media controller created [ 483.532182][ T5716] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 483.634493][ T5707] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 483.647553][ T5707] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 483.657357][ T5707] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 483.675845][ T5707] usb 5-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 483.687345][ T10] rc_core: IR keymap rc-hauppauge not found [ 483.695151][ T10] Registered IR keymap rc-empty [ 483.698973][ T5707] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.706299][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 483.716148][ T5716] az6027: usb out operation failed. (-71) [ 483.729330][ T5707] usb 5-1: config 0 descriptor?? [ 483.729760][ T5716] az6027: usb out operation failed. (-71) [ 483.743276][ T5716] stb0899_attach: Driver disabled by Kconfig [ 483.749490][ T5716] az6027: no front-end attached [ 483.749490][ T5716] [ 483.761087][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 483.777287][ T5716] az6027: usb out operation failed. (-71) [ 483.783541][ T5716] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 483.791990][ T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 483.808136][ T5716] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input106 [ 483.826761][ T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input105 [ 483.844145][ T5716] dvb-usb: schedule remote query interval to 400 msecs. [ 483.853477][ T5716] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 483.866394][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 483.900131][ T5716] usb 2-1: USB disconnect, device number 58 [ 483.911565][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 483.951152][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 483.991693][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 484.021972][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 484.050905][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 484.058787][ T5716] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 484.080598][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 484.123214][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 484.160603][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 484.190606][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 484.213900][ T10] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 484.226491][ T10] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 484.240837][ T10] usb 3-1: USB disconnect, device number 70 [ 484.381557][ T5707] hid-multitouch 0003:0457:07DA.0010: unknown main item tag 0x0 [ 484.391352][ T5707] hid-multitouch 0003:0457:07DA.0010: ignoring exceeding usage max [ 484.403866][ T5707] hid-multitouch 0003:0457:07DA.0010: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.4-1/input0 [ 484.422676][ T5707] usb 5-1: USB disconnect, device number 68 [ 485.789112][ T9904] fido_id[9904]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 485.942755][ T30] kauditd_printk_skb: 184 callbacks suppressed [ 485.942772][ T30] audit: type=1400 audit(1779589763.393:10755): avc: denied { read write } for pid=9907 comm="syz.3.1098" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 486.031997][ T30] audit: type=1400 audit(1779589763.423:10756): avc: denied { read write open } for pid=9907 comm="syz.3.1098" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 486.116559][ T30] audit: type=1400 audit(1779589763.423:10757): avc: denied { ioctl } for pid=9907 comm="syz.3.1098" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 486.242671][ T30] audit: type=1400 audit(1779589763.453:10758): avc: denied { create } for pid=9907 comm="syz.3.1098" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 486.315796][ T30] audit: type=1400 audit(1779589763.453:10759): avc: denied { read append } for pid=9907 comm="syz.3.1098" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 486.358189][ T9912] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1099'. [ 486.622767][ T9905] netlink: 'syz.1.1096': attribute type 21 has an invalid length. [ 486.630977][ T9905] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1096'. [ 487.397934][ T30] audit: type=1400 audit(1779589763.463:10760): avc: denied { read open } for pid=9907 comm="syz.3.1098" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 487.482231][ T30] audit: type=1400 audit(1779589763.463:10761): avc: denied { bind } for pid=9907 comm="syz.3.1098" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 487.642923][ T30] audit: type=1400 audit(1779589763.473:10762): avc: denied { setopt } for pid=9907 comm="syz.3.1098" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 487.715043][ T30] audit: type=1400 audit(1779589763.473:10763): avc: denied { accept } for pid=9907 comm="syz.3.1098" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 487.775720][ T9921] netlink: 'syz.2.1103': attribute type 1 has an invalid length. [ 487.785272][ T30] audit: type=1400 audit(1779589763.473:10764): avc: denied { write } for pid=9907 comm="syz.3.1098" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 487.975421][ T9921] 8021q: adding VLAN 0 to HW filter on device bond4 [ 488.127630][ T9923] 8021q: adding VLAN 0 to HW filter on device bond4 [ 488.194302][ T9923] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 488.222387][ T5707] libceph: connect (1)[c::]:6789 error -101 [ 488.228497][ T5707] libceph: mon0 (1)[c::]:6789 connect error [ 488.254152][ T9923] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 488.321292][ T9917] ceph: No mds server is up or the cluster is laggy [ 488.495918][ T5707] libceph: connect (1)[c::]:6789 error -101 [ 488.501950][ T5707] libceph: mon0 (1)[c::]:6789 connect error [ 488.596438][ T9917] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:1045 [ 489.312146][ T9926] gretap1: entered promiscuous mode [ 491.172857][ T30] kauditd_printk_skb: 135 callbacks suppressed [ 491.172909][ T30] audit: type=1400 audit(1779589768.623:10900): avc: denied { create } for pid=9951 comm="syz.0.1109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 491.440759][ T30] audit: type=1400 audit(1779589768.653:10901): avc: denied { write } for pid=9951 comm="syz.0.1109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 491.466010][ T30] audit: type=1400 audit(1779589768.653:10902): avc: denied { read } for pid=9951 comm="syz.0.1109" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 491.492641][ T30] audit: type=1400 audit(1779589768.653:10903): avc: denied { read open } for pid=9951 comm="syz.0.1109" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 491.519913][ T30] audit: type=1400 audit(1779589768.653:10904): avc: denied { read } for pid=9951 comm="syz.0.1109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 491.544803][ T30] audit: type=1400 audit(1779589768.673:10905): avc: denied { read write } for pid=5611 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 492.009476][ T30] audit: type=1400 audit(1779589768.673:10906): avc: denied { open } for pid=5611 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 492.011997][ T10] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 492.036801][ T30] audit: type=1400 audit(1779589768.673:10907): avc: denied { ioctl } for pid=5611 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 492.072826][ T30] audit: type=1400 audit(1779589768.723:10908): avc: denied { ioctl } for pid=9951 comm="syz.0.1109" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 492.101729][ T30] audit: type=1400 audit(1779589768.803:10909): avc: denied { read write } for pid=9951 comm="syz.0.1109" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 492.131365][ T5716] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 492.190402][ T9971] lo speed is unknown, defaulting to 1000 [ 492.202594][ T5346] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 492.250839][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 492.258375][ T10] usb 2-1: config 0 has an invalid interface number: 176 but max is 2 [ 492.267406][ T10] usb 2-1: config 0 has no interface number 1 [ 492.274660][ T10] usb 2-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 492.284750][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.292919][ T5716] usb 5-1: Using ep0 maxpacket: 16 [ 492.304464][ T5716] usb 5-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 492.316257][ T10] usb 2-1: config 0 descriptor?? [ 492.325513][ T5716] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.354791][ T5716] usb 5-1: Product: syz [ 492.366406][ T5346] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 492.383443][ T5716] usb 5-1: Manufacturer: syz [ 492.388211][ T5716] usb 5-1: SerialNumber: syz [ 492.393196][ T9] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 492.401626][ T5346] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.416434][ T5716] usb 5-1: config 0 descriptor?? [ 492.423400][ T5346] usb 4-1: Product: syz [ 492.434479][ T5346] usb 4-1: Manufacturer: syz [ 492.439953][ T5346] usb 4-1: SerialNumber: syz [ 492.446900][ T5716] visor 5-1:0.0: Sony Clie 3.5 converter detected [ 492.472725][ T5346] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 492.498638][ T5831] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 492.570922][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 492.590412][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 492.604979][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 492.618042][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 492.629790][ T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 492.642230][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 492.673725][ T10] usb 2-1: Could not set interface, error -71 [ 492.682291][ T9] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 492.693035][ T9] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 492.721989][ T9] usb 3-1: Manufacturer: syz [ 492.727355][ T10] usb 2-1: USB disconnect, device number 59 [ 492.738862][ T9] usb 3-1: config 0 descriptor?? [ 492.879323][ T5716] usb 5-1: clie_3_5_startup: get interface number failed: -71 [ 492.887922][ T5716] visor 5-1:0.0: probe with driver visor failed with error -71 [ 492.904521][ T5716] usb 5-1: USB disconnect, device number 69 [ 492.933557][ C0] usb 4-1: ath: unknown panic pattern! [ 493.032205][ T9] rc_core: IR keymap rc-hauppauge not found [ 493.038317][ T9] Registered IR keymap rc-empty [ 493.044463][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 493.070645][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 493.092042][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 493.106194][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input107 [ 493.126308][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 493.153123][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 493.172850][ T5716] usb 4-1: USB disconnect, device number 75 [ 493.201050][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 493.221842][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 493.241046][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 493.260664][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 493.280675][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 493.302637][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 493.351156][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 493.380668][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 493.404041][ T9] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 493.414454][ T9] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 493.466321][ T9] usb 3-1: USB disconnect, device number 71 [ 493.555258][ T5831] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 493.575349][ T5831] ath9k_htc: Failed to initialize the device [ 493.596587][ T5716] usb 4-1: ath9k_htc: USB layer deinitialized [ 493.711543][ T9986] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 494.039861][ T5746] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 494.263034][ T5831] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 494.355721][ T5746] usb 5-1: Using ep0 maxpacket: 16 [ 494.480090][ T5746] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 494.499708][ T5746] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 494.502292][ T5831] usb 2-1: Using ep0 maxpacket: 16 [ 494.511979][ T5746] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 494.534714][ T5746] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 494.547562][ T5746] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.562097][ T5831] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 494.576426][ T5746] usb 5-1: config 0 descriptor?? [ 494.592912][ T5831] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 494.619012][ T5831] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 494.641371][ T5831] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 494.665267][ T5831] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 494.776331][ T5831] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 494.790587][ T5831] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 494.804258][ T5831] usb 2-1: Manufacturer: syz [ 495.769563][ T5831] usb 2-1: config 0 descriptor?? [ 495.963657][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 496.195755][ T30] kauditd_printk_skb: 207 callbacks suppressed [ 496.195773][ T30] audit: type=1400 audit(1779589773.643:11117): avc: denied { map_create } for pid=10002 comm="syz.2.1123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 496.243309][ T5746] usbhid 5-1:0.0: can't add hid device: -71 [ 496.267194][ T5746] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 496.280686][ T30] audit: type=1400 audit(1779589773.643:11118): avc: denied { bpf } for pid=10002 comm="syz.2.1123" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 496.289480][ T5746] usb 5-1: USB disconnect, device number 70 [ 496.389019][ T30] audit: type=1400 audit(1779589773.643:11119): avc: denied { map_create } for pid=10002 comm="syz.2.1123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 496.419992][ T30] audit: type=1400 audit(1779589773.643:11120): avc: denied { map_read map_write } for pid=10002 comm="syz.2.1123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 496.443431][ T9999] netlink: 'syz.3.1120': attribute type 10 has an invalid length. [ 496.458211][ T30] audit: type=1400 audit(1779589773.653:11121): avc: denied { read write } for pid=10003 comm="syz.0.1122" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 496.485164][ T9999] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1120'. [ 496.495719][ T30] audit: type=1400 audit(1779589773.653:11122): avc: denied { open } for pid=10003 comm="syz.0.1122" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 496.546753][ T9999] team0: entered promiscuous mode [ 496.562131][ T9999] team_slave_0: entered promiscuous mode [ 496.583081][ T30] audit: type=1400 audit(1779589773.653:11123): avc: denied { ioctl } for pid=10003 comm="syz.0.1122" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 496.619391][ T9999] team_slave_1: entered promiscuous mode [ 496.685247][ T9999] vlan0: entered promiscuous mode [ 496.691315][ T30] audit: type=1400 audit(1779589773.663:11124): avc: denied { ioctl } for pid=10003 comm="syz.0.1122" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 496.850664][ T9999] team0: entered allmulticast mode [ 496.883656][ T30] audit: type=1400 audit(1779589773.673:11125): avc: denied { create } for pid=10002 comm="syz.2.1123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 496.910058][ T9999] team_slave_0: entered allmulticast mode [ 496.938963][ T9999] team_slave_1: entered allmulticast mode [ 496.950705][ T30] audit: type=1400 audit(1779589773.683:11126): avc: denied { read } for pid=10002 comm="syz.2.1123" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 496.986218][ T9999] vlan0: entered allmulticast mode [ 497.008327][ T50] Bluetooth: hci4: unexpected event for opcode 0x4889 [ 497.082686][ T9999] veth0_vlan: entered allmulticast mode [ 497.218321][ T9999] bridge0: port 3(team0) entered blocking state [ 497.357344][ T9999] bridge0: port 3(team0) entered disabled state [ 498.766011][ T5831] rc_core: IR keymap rc-hauppauge not found [ 498.772088][ T5831] Registered IR keymap rc-empty [ 498.777489][ T5831] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 498.785453][ T9999] bridge0: port 3(team0) entered blocking state [ 498.792318][ T9999] bridge0: port 3(team0) entered forwarding state [ 498.800596][ T5831] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 498.890360][ T5831] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 498.976902][ T5831] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input108 [ 499.010285][ T50] Bluetooth: hci1: unexpected event for opcode 0x007f [ 499.070969][ T5831] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 499.101372][ T5831] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 499.154910][ T5831] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 499.191251][ T5831] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 499.245523][ T5831] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 499.301118][ T5831] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 499.351140][ T5831] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 499.391019][ T5831] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 499.431733][ T5831] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 499.471309][ T5831] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 499.500653][ T5716] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 499.520742][ T5831] mceusb 2-1:0.0: Registered  with mce emulator interface version 1 [ 499.535528][ T5831] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 499.579202][ T5831] usb 2-1: USB disconnect, device number 60 [ 499.621222][ T9] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 499.695441][ T5716] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 499.730515][ T5716] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.753983][ T5716] usb 3-1: Product: syz [ 499.760258][ T5716] usb 3-1: Manufacturer: syz [ 499.771690][ T5716] usb 3-1: SerialNumber: syz [ 499.793869][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 499.809199][ T9] usb 5-1: config 0 has no interfaces? [ 499.838320][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 499.849121][ T5716] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 499.887786][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.908611][ T9] usb 5-1: Product: syz [ 499.922284][ T9] usb 5-1: Manufacturer: syz [ 499.928710][ T9] usb 5-1: SerialNumber: syz [ 499.934673][ T10] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 499.979037][ T9] usb 5-1: config 0 descriptor?? [ 500.197406][T10040] syz_tun: entered allmulticast mode [ 500.378719][ C0] usb 3-1: ath: unknown panic pattern! [ 500.417511][T10037] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 500.433831][T10037] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 500.564026][ T9] usb 5-1: USB disconnect, device number 71 [ 500.596365][ T9117] usb 3-1: USB disconnect, device number 72 [ 501.070928][ T10] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 501.090877][ T10] ath9k_htc: Failed to initialize the device [ 501.105689][ T9117] usb 3-1: ath9k_htc: USB layer deinitialized [ 501.205473][ T30] kauditd_printk_skb: 264 callbacks suppressed [ 501.205491][ T30] audit: type=1400 audit(1779589778.653:11391): avc: denied { create } for pid=10059 comm="syz.4.1137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 501.235851][ T30] audit: type=1400 audit(1779589778.663:11392): avc: denied { ioctl } for pid=10059 comm="syz.4.1137" path="socket:[32984]" dev="sockfs" ino=32984 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 501.266318][ T30] audit: type=1400 audit(1779589778.663:11393): avc: denied { module_request } for pid=10059 comm="syz.4.1137" kmod="netdev-wlan0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 501.314206][ T30] audit: type=1400 audit(1779589778.683:11394): avc: denied { ioctl } for pid=10054 comm="syz.1.1136" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 501.361176][ T9] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 501.420060][ T30] audit: type=1400 audit(1779589778.743:11395): avc: denied { write } for pid=10059 comm="syz.4.1137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 501.504167][ T30] audit: type=1400 audit(1779589778.743:11396): avc: denied { prog_load } for pid=10057 comm="syz.2.1138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 501.553852][ T30] audit: type=1400 audit(1779589778.743:11397): avc: denied { bpf } for pid=10057 comm="syz.2.1138" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 501.602961][ T30] audit: type=1400 audit(1779589778.743:11398): avc: denied { perfmon } for pid=10057 comm="syz.2.1138" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 501.637912][ T10] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 501.663607][ T30] audit: type=1400 audit(1779589778.743:11399): avc: denied { sys_module } for pid=10059 comm="syz.4.1137" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 501.685495][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 501.726768][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 501.743191][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 501.776187][ T30] audit: type=1400 audit(1779589778.743:11400): avc: denied { module_request } for pid=10059 comm="syz.4.1137" kmod="wlan0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 501.800778][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 501.814477][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 501.835499][ T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 501.879708][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 501.924155][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 501.948551][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 502.013569][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 502.026830][ T9] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 502.062263][ T9] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 502.074062][ T10] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 502.145578][ T9] usb 2-1: Manufacturer: syz [ 502.158290][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 502.211214][ T9] usb 2-1: config 0 descriptor?? [ 502.239577][ T10] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 502.277944][ T10] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 502.287109][ T10] usb 5-1: Manufacturer: syz [ 502.302948][ T10] usb 5-1: config 0 descriptor?? [ 502.328985][T10069] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1139'. [ 502.514208][ T50] Bluetooth: hci2: unexpected event for opcode 0x007f [ 502.530906][ T9] rc_core: IR keymap rc-hauppauge not found [ 502.538344][ T9] Registered IR keymap rc-empty [ 502.543557][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 502.571130][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 502.601103][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 502.616815][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input109 [ 502.630061][ T10] rc_core: IR keymap rc-hauppauge not found [ 502.637477][ T10] Registered IR keymap rc-empty [ 502.642576][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 502.660655][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 502.681040][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 502.690606][ T5716] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 502.700719][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 502.741264][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 502.754699][ T10] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc1 [ 502.774370][ T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc1/input110 [ 502.787406][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 502.810667][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 502.818638][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 503.060675][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 503.068079][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 503.086458][ T5716] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 503.712767][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 503.922505][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 504.716862][ T5716] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 505.168669][ T5716] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 505.187434][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 505.260730][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 505.268091][ T5716] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 505.278162][ T5716] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 505.290851][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 505.298144][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 505.320579][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 505.328972][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 505.337315][ T5716] usb 4-1: config 0 descriptor?? [ 505.393573][ T9] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 505.429649][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 505.470272][ T9] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 505.500749][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 505.559185][ T9] usb 2-1: USB disconnect, device number 61 [ 505.576331][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 505.594230][ T5716] usbhid 4-1:0.0: can't add hid device: -71 [ 505.616109][ T5716] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 505.632036][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 505.646389][ T5716] usb 4-1: USB disconnect, device number 76 [ 505.735786][ T10] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 505.808546][ T10] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 505.938902][ T10] usb 5-1: USB disconnect, device number 72 [ 506.539382][ T30] kauditd_printk_skb: 191 callbacks suppressed [ 506.539400][ T30] audit: type=1400 audit(1779589783.983:11592): avc: denied { write } for pid=10099 comm="syz.0.1149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 507.066365][ T30] audit: type=1400 audit(1779589784.043:11593): avc: denied { create } for pid=10104 comm="syz.4.1150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 507.390900][ T10] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 507.650945][ T30] audit: type=1400 audit(1779589784.053:11594): avc: denied { ioctl } for pid=10104 comm="syz.4.1150" path="socket:[32675]" dev="sockfs" ino=32675 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 507.678257][ T30] audit: type=1400 audit(1779589784.053:11595): avc: denied { module_request } for pid=10104 comm="syz.4.1150" kmod="netdev-wlan0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 507.700995][ T30] audit: type=1400 audit(1779589784.123:11596): avc: denied { read } for pid=10099 comm="syz.0.1149" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 507.723975][ T30] audit: type=1400 audit(1779589784.123:11597): avc: denied { read open } for pid=10099 comm="syz.0.1149" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 507.749232][ T30] audit: type=1400 audit(1779589784.123:11598): avc: denied { write } for pid=10104 comm="syz.4.1150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 507.901764][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 508.024848][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 508.034069][T10113] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1152'. [ 508.066275][ T30] audit: type=1400 audit(1779589784.133:11599): avc: denied { create } for pid=10104 comm="syz.4.1150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 508.089261][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 508.134075][ T50] Bluetooth: hci2: unexpected event for opcode 0x1005 [ 508.155850][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 508.165885][T10118] audit: audit_backlog=65 > audit_backlog_limit=64 [ 508.173144][ T30] audit: type=1400 audit(1779589784.133:11600): avc: denied { bind } for pid=10104 comm="syz.4.1150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 508.193048][ T10] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 508.203246][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 508.268068][ T10] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 508.278975][ T10] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 508.287499][ T10] usb 5-1: Manufacturer: syz [ 508.296165][ T10] usb 5-1: config 0 descriptor?? [ 509.161366][ T10] rc_core: IR keymap rc-hauppauge not found [ 509.168002][ T10] Registered IR keymap rc-empty [ 509.173628][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 509.201026][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 509.589354][ T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 510.535051][ T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input111 [ 510.617965][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 510.704824][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 510.740645][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 510.782006][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 510.820791][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 510.860655][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 510.880621][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 510.902974][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 510.920696][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 511.120840][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 511.281033][ T10] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 511.281062][ T10] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 511.285412][ T10] usb 5-1: USB disconnect, device number 73 [ 511.451591][T10132] genirq: Flags mismatch irq 31. 00200000 (comedi_parport) vs. 00200000 (virtio1-input.0) [ 511.701866][ T5707] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 511.788130][ T30] kauditd_printk_skb: 158 callbacks suppressed [ 511.788183][ T30] audit: type=1400 audit(1779589789.233:11754): avc: denied { read } for pid=10135 comm="syz.0.1157" dev="nsfs" ino=4026533045 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 511.789591][ T30] audit: type=1400 audit(1779589789.233:11755): avc: denied { open } for pid=10135 comm="syz.0.1157" path="net:[4026533045]" dev="nsfs" ino=4026533045 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 511.794386][ T30] audit: type=1400 audit(1779589789.243:11756): avc: denied { create } for pid=10135 comm="syz.0.1157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 511.819723][ T30] audit: type=1400 audit(1779589789.263:11757): avc: denied { write } for pid=10135 comm="syz.0.1157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 511.848111][ T30] audit: type=1400 audit(1779589789.293:11758): avc: denied { create } for pid=10135 comm="syz.0.1157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 511.861269][ T30] audit: type=1400 audit(1779589789.313:11759): avc: denied { create } for pid=10135 comm="syz.0.1157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 511.868874][ T30] audit: type=1400 audit(1779589789.313:11760): avc: denied { create } for pid=10135 comm="syz.0.1157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 511.876369][ T30] audit: type=1400 audit(1779589789.323:11761): avc: denied { write } for pid=10135 comm="syz.0.1157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 511.885930][ T30] audit: type=1400 audit(1779589789.333:11762): avc: denied { write } for pid=10135 comm="syz.0.1157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 512.024909][ T30] audit: type=1400 audit(1779589789.473:11763): avc: denied { ioctl } for pid=10128 comm="syz.2.1156" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 512.544746][ T5707] usb 3-1: Using ep0 maxpacket: 8 [ 513.332776][ T5707] usb 3-1: unable to get BOS descriptor or descriptor too short [ 513.612735][ T5707] usb 3-1: config 2 has an invalid interface number: 216 but max is 0 [ 513.623227][ T5707] usb 3-1: config 2 has no interface number 0 [ 513.634936][ T5707] usb 3-1: config 2 interface 216 has no altsetting 0 [ 513.665971][ T5707] usb 3-1: New USB device found, idVendor=0c98, idProduct=1140, bcdDevice=6c.76 [ 513.683836][ T5707] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 513.730627][ T9117] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 513.747356][ T5707] usb 3-1: Product: syz [ 513.757461][ T5707] usb 3-1: Manufacturer: syz [ 513.762090][ T5707] usb 3-1: SerialNumber: syz [ 513.888912][ T9117] usb 4-1: device descriptor read/64, error -71 [ 513.936877][T10151] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1161'. [ 513.952414][ T5707] pcwd_usb: The device isn't a Human Interface Device [ 513.988613][ T5707] usb 3-1: USB disconnect, device number 73 [ 513.993831][T10153] netlink: 260 bytes leftover after parsing attributes in process `syz.2.1163'. [ 514.088629][T10155] netlink: 45 bytes leftover after parsing attributes in process `syz.2.1163'. [ 514.150703][ T9117] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 514.292016][T10160] netlink: 'syz.2.1166': attribute type 1 has an invalid length. [ 514.302137][T10160] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1166'. [ 514.540661][ T9117] usb 4-1: device descriptor read/64, error -71 [ 514.983363][ T10] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 514.986801][ T9117] usb usb4-port1: attempt power cycle [ 515.154940][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 515.178448][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 515.189378][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 515.276509][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 515.461242][T10173] binder: 10171:10173 ioctl c0285840 200000000000 returned -22 [ 515.490676][ T9117] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 515.633545][ T9117] usb 4-1: Using ep0 maxpacket: 16 [ 515.872640][ T9117] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 515.916345][ T9117] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 515.973804][ T9117] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 515.996273][ T9117] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 516.009582][ T9117] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 516.098823][ T9117] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 516.123025][ T9117] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 516.147501][ T9117] usb 4-1: Manufacturer: syz [ 516.177720][ T10] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 516.178503][ T9117] usb 4-1: config 0 descriptor?? [ 516.187849][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 516.189373][ T10] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 516.189398][ T10] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 516.189416][ T10] usb 5-1: Manufacturer: syz [ 516.192150][ T10] usb 5-1: config 0 descriptor?? [ 516.592044][T10187] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1171'. [ 516.601910][ T9117] rc_core: IR keymap rc-hauppauge not found [ 516.607824][ T9117] Registered IR keymap rc-empty [ 516.771316][ T9117] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 516.845803][ T10] rc_core: IR keymap rc-hauppauge not found [ 516.853250][ T10] Registered IR keymap rc-empty [ 516.858337][ T30] kauditd_printk_skb: 235 callbacks suppressed [ 516.858356][ T30] audit: type=1400 audit(1779589794.303:11999): avc: denied { ioctl } for pid=10169 comm="syz.3.1167" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5507 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 516.891431][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 516.922514][ T9117] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 516.923619][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 517.182881][ T9117] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc1 [ 517.191306][ T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 517.220260][ T30] audit: type=1400 audit(1779589794.663:12000): avc: denied { execmem } for pid=10185 comm="syz.2.1171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 517.233356][ T9117] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc1/input113 [ 517.285013][ T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input112 [ 517.305956][ T30] audit: type=1400 audit(1779589794.703:12001): avc: denied { module_request } for pid=10184 comm="syz.1.1172" kmod="crypto-md5-all" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 517.372174][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 517.402126][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 517.412268][ T30] audit: type=1400 audit(1779589794.783:12002): avc: denied { read } for pid=10185 comm="syz.2.1171" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 517.470672][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 517.481556][ T30] audit: type=1400 audit(1779589794.783:12003): avc: denied { open } for pid=10185 comm="syz.2.1171" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 517.485801][ T9117] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 517.517371][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 517.534803][ T30] audit: type=1400 audit(1779589794.803:12004): avc: denied { read } for pid=4964 comm="acpid" name="event4" dev="devtmpfs" ino=3769 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 517.558365][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 517.591998][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 517.622793][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 517.638215][ T30] audit: type=1400 audit(1779589794.813:12005): avc: denied { open } for pid=4964 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3769 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 517.662788][T10188] could not allocate digest TFM handle md5 [ 517.671185][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 517.701702][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 517.721000][ T9117] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 517.740702][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 517.785319][ T10] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 517.802113][ T30] audit: type=1400 audit(1779589794.813:12006): avc: denied { ioctl } for pid=4964 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3769 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 517.802187][ T9117] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 517.848936][ T10] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 517.900140][ T10] usb 5-1: USB disconnect, device number 74 [ 517.911220][ T9117] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 517.923069][ T30] audit: type=1400 audit(1779589794.903:12007): avc: denied { read } for pid=4964 comm="acpid" name="event5" dev="devtmpfs" ino=3770 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 517.951192][ T9117] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 518.008097][ T30] audit: type=1400 audit(1779589794.903:12008): avc: denied { read open } for pid=4964 comm="acpid" path="/dev/input/event5" dev="devtmpfs" ino=3770 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 518.041467][ T9117] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 518.070739][ T9117] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 518.120959][T10200] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1175'. [ 518.290708][ T9117] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 518.311834][ T9117] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 518.341512][ T9117] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 519.122435][ T50] Bluetooth: hci4: unexpected event for opcode 0x007f [ 519.528150][ T9117] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 520.420583][ T9117] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 520.451932][ T9117] usb 4-1: USB disconnect, device number 79 [ 521.026872][T10224] netlink: 232 bytes leftover after parsing attributes in process `syz.2.1181'. [ 522.036432][ T30] kauditd_printk_skb: 93 callbacks suppressed [ 522.036456][ T30] audit: type=1400 audit(1779589798.133:12102): avc: denied { execmem } for pid=10222 comm="syz.2.1181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 522.134348][ T30] audit: type=1400 audit(1779589798.403:12103): avc: denied { read } for pid=10222 comm="syz.2.1181" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 522.175461][ T30] audit: type=1400 audit(1779589798.403:12104): avc: denied { open } for pid=10222 comm="syz.2.1181" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 522.237477][ T30] audit: type=1400 audit(1779589798.473:12105): avc: denied { create } for pid=10222 comm="syz.2.1181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 522.397851][ T30] audit: type=1400 audit(1779589798.473:12106): avc: denied { write } for pid=10222 comm="syz.2.1181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 522.465841][ T30] audit: type=1400 audit(1779589798.473:12107): avc: denied { nlmsg_write } for pid=10222 comm="syz.2.1181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 522.523715][ T30] audit: type=1400 audit(1779589799.483:12108): avc: denied { allowed } for pid=10218 comm="syz.1.1179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 522.550877][ T9117] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 522.589478][ T30] audit: type=1400 audit(1779589799.593:12109): avc: denied { create } for pid=10218 comm="syz.1.1179" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 522.658154][T10228] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1183'. [ 522.674230][ T30] audit: type=1400 audit(1779589799.623:12110): avc: denied { prog_load } for pid=10218 comm="syz.1.1179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 522.717353][T10228] l2tp_ppp: sess 2/0: no socket in recv [ 522.730964][ T30] audit: type=1400 audit(1779589799.623:12111): avc: denied { bpf } for pid=10218 comm="syz.1.1179" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 522.949882][ T9117] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 522.964547][ T9117] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.976198][ T9117] usb 4-1: Product: syz [ 522.981342][ T9117] usb 4-1: Manufacturer: syz [ 522.989330][ T9117] usb 4-1: SerialNumber: syz [ 523.025802][ T5746] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 523.079755][T10245] bridge0: port 3(team0) entered blocking state [ 523.086392][T10245] bridge0: port 3(team0) entered disabled state [ 523.093759][T10245] team0: entered allmulticast mode [ 523.099207][T10245] team_slave_0: entered allmulticast mode [ 523.105146][T10245] team_slave_1: entered allmulticast mode [ 523.115660][T10245] team0: entered promiscuous mode [ 523.121089][T10245] team_slave_0: entered promiscuous mode [ 523.126944][T10245] team_slave_1: entered promiscuous mode [ 523.212039][ T5746] usb 2-1: Using ep0 maxpacket: 16 [ 523.242832][ T5746] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 523.254846][ T5746] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 523.267994][ T5746] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 523.279990][ T5746] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 523.291076][ T5746] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 523.317392][ T5746] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 523.327283][ T5746] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 523.336138][ T5746] usb 2-1: Manufacturer: syz [ 523.346792][ T5746] usb 2-1: config 0 descriptor?? [ 523.450835][ T10] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 523.459189][ T9117] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 523.472968][ T9117] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 523.600826][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 523.609458][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 523.610631][ T5746] rc_core: IR keymap rc-hauppauge not found [ 523.627682][ T5746] Registered IR keymap rc-empty [ 523.634800][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 523.634855][ T5746] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 523.655188][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 523.660689][ T5746] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 523.665582][ T10] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 523.682871][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 523.691169][ T5746] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 523.701416][ T10] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 523.717997][ T10] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 523.721169][ T5746] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input114 [ 523.741544][ T10] usb 3-1: Manufacturer: syz [ 523.762734][ T10] usb 3-1: config 0 descriptor?? [ 523.771026][ T5746] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 523.792262][ T5746] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 523.817814][ T5746] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 523.850066][ T5746] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 523.862803][ T5746] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 523.880918][ T5746] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 523.902781][ T5746] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 523.926745][ T5746] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 523.959486][ T5746] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 523.985541][ T5746] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 524.018830][ T5746] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 524.028776][ T5746] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 524.050744][ T10] rc_core: IR keymap rc-hauppauge not found [ 524.056864][ T10] Registered IR keymap rc-empty [ 524.065366][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 524.091401][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 524.131519][ T10] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc1 [ 524.145889][ T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc1/input115 [ 524.163727][ T9] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 524.183426][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 524.210723][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 524.230982][ T5716] usb 2-1: USB disconnect, device number 62 [ 524.242098][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 524.271884][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 524.312127][ T9] usb 5-1: device descriptor read/64, error -71 [ 524.318917][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 524.340756][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 524.360834][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 524.380950][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 524.411047][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 524.432365][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 524.456354][ T10] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 524.466187][ T10] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 524.482110][ T10] usb 3-1: USB disconnect, device number 74 [ 524.570819][ T9] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 524.700543][ T9] usb 5-1: device descriptor read/64, error -71 [ 524.760252][ T9117] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 524.799519][ T9117] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPIPE [ 524.821023][ T9] usb usb5-port1: attempt power cycle [ 525.874242][ T9117] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000118. ret = -EPROTO [ 525.916679][ T9117] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 525.946783][ T9117] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 525.994210][ T9117] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 526.063458][ T9117] usb 4-1: USB disconnect, device number 80 [ 526.102130][ T9] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 527.226815][ T30] kauditd_printk_skb: 222 callbacks suppressed [ 527.226845][ T30] audit: type=1400 audit(1779589804.673:12334): avc: denied { read write } for pid=5610 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 527.259671][ T30] audit: type=1400 audit(1779589804.673:12335): avc: denied { read write open } for pid=5610 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 527.286283][ T30] audit: type=1400 audit(1779589804.673:12336): avc: denied { ioctl } for pid=5610 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 527.349309][ T9] usb 5-1: device descriptor read/8, error -71 [ 527.398748][ T30] audit: type=1400 audit(1779589804.843:12337): avc: denied { read write } for pid=5621 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 527.484359][ T30] audit: type=1400 audit(1779589804.843:12338): avc: denied { read write open } for pid=5621 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 527.520371][T10278] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 527.573415][ T30] audit: type=1400 audit(1779589804.843:12339): avc: denied { ioctl } for pid=5621 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 527.746106][T10282] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1198'. [ 527.757175][T10282] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1198'. [ 528.709587][ T30] audit: type=1400 audit(1779589804.843:12340): avc: denied { create } for pid=10263 comm="syz.3.1193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 528.731609][ T30] audit: type=1400 audit(1779589804.843:12341): avc: denied { ioctl } for pid=10263 comm="syz.3.1193" path="/dev/dma_heap/system" dev="devtmpfs" ino=700 ioctlcmd=0x4800 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 528.760843][ T30] audit: type=1400 audit(1779589804.903:12342): avc: denied { create } for pid=10274 comm="syz.0.1196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 528.781355][ T30] audit: type=1400 audit(1779589804.903:12343): avc: denied { prog_load } for pid=10274 comm="syz.0.1196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 528.906773][ T9] libceph: connect (1)[c::]:6789 error -101 [ 528.936052][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 528.969383][T10291] ceph: No mds server is up or the cluster is laggy [ 528.970869][ T9117] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 529.035521][T10295] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1201'. [ 529.150629][ T9117] usb 5-1: Using ep0 maxpacket: 32 [ 529.195094][ T9117] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 529.205261][ T9117] usb 5-1: config 0 has no interface number 0 [ 529.305512][ T9117] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 529.320068][ T9117] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 529.354859][ T9117] usb 5-1: Product: syz [ 529.359092][ T9117] usb 5-1: Manufacturer: syz [ 529.367158][ T9117] usb 5-1: SerialNumber: syz [ 529.408833][ T9117] usb 5-1: config 0 descriptor?? [ 529.446085][ T9117] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 529.474108][ T9117] usb 5-1: selecting invalid altsetting 1 [ 529.500540][ T9117] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 529.551564][ T9117] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 529.589344][ T9117] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 529.599190][ T9117] usb 5-1: media controller created [ 529.638108][ T9117] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 529.716849][T10303] trusted_key: syz.3.1203 sent an empty control message without MSG_MORE. [ 532.370918][ T30] kauditd_printk_skb: 196 callbacks suppressed [ 532.370936][ T30] audit: type=1400 audit(1779589808.283:12540): avc: denied { read write open } for pid=5612 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 532.378378][T10286] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 532.514250][ T9117] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 532.521055][ T30] audit: type=1400 audit(1779589809.823:12541): avc: denied { ioctl } for pid=5612 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 532.550634][ T9117] zl10353_read_register: readreg error (reg=127, ret==-71) [ 532.628613][ T9117] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 532.634374][ T30] audit: type=1400 audit(1779589809.933:12542): avc: denied { create } for pid=10320 comm="syz.1.1210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 532.837045][ T30] audit: type=1400 audit(1779589809.943:12543): avc: denied { create } for pid=10315 comm="syz.2.1209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 532.858450][ T30] audit: type=1400 audit(1779589809.943:12544): avc: denied { read write } for pid=5611 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 532.909564][ T30] audit: type=1400 audit(1779589809.943:12545): avc: denied { open } for pid=5611 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 533.045820][ T9117] usb 5-1: USB disconnect, device number 79 [ 533.046602][ T30] audit: type=1400 audit(1779589809.943:12546): avc: denied { ioctl } for pid=5611 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 533.192948][ T30] audit: type=1400 audit(1779589809.963:12547): avc: denied { write } for pid=10315 comm="syz.2.1209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 533.313815][ T30] audit: type=1400 audit(1779589809.963:12548): avc: denied { read } for pid=10315 comm="syz.2.1209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 533.484766][ T30] audit: type=1400 audit(1779589810.003:12549): avc: denied { write } for pid=10315 comm="syz.2.1209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 533.676609][T10338] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1214'. [ 533.770439][T10338] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1214'. [ 533.931501][ T9117] usb 5-1: new full-speed USB device number 80 using dummy_hcd [ 534.061061][ T50] Bluetooth: hci1: unexpected event for opcode 0x4889 [ 534.293695][ T9117] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 534.307684][ T9117] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 534.317437][ T9117] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 534.334035][ T9117] usb 5-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 534.343106][ T9117] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 534.368422][ T9117] usb 5-1: config 0 descriptor?? [ 534.564997][ T9] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 534.790876][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 534.827976][ T9] usb 3-1: config index 0 descriptor too short (expected 539, got 27) [ 534.855601][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 534.897426][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 25717, setting to 1024 [ 534.947291][ T9] usb 3-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 534.957376][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 534.971878][ T9] usb 3-1: Product: syz [ 534.977489][ T9] usb 3-1: Manufacturer: syz [ 534.984210][ T9] usb 3-1: SerialNumber: syz [ 535.825482][ T9] usb 3-1: config 0 descriptor?? [ 536.930805][T10345] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 537.527723][ T9117] hid-multitouch 0003:0457:07DA.0011: unknown main item tag 0x0 [ 537.545050][ T9117] hid-multitouch 0003:0457:07DA.0011: ignoring exceeding usage max [ 537.565997][ T9] hub 3-1:0.0: bad descriptor, ignoring hub [ 538.111537][ T9] hub 3-1:0.0: probe with driver hub failed with error -5 [ 538.123083][ T9] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input116 [ 538.144087][ T30] kauditd_printk_skb: 135 callbacks suppressed [ 538.144107][ T30] audit: type=1400 audit(1779589815.593:12685): avc: denied { read write } for pid=5612 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 538.175222][ T30] audit: type=1400 audit(1779589815.593:12686): avc: denied { open } for pid=5612 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 538.200402][ T30] audit: type=1400 audit(1779589815.593:12687): avc: denied { ioctl } for pid=5612 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 538.236427][ T30] audit: type=1400 audit(1779589815.673:12688): avc: denied { read } for pid=4964 comm="acpid" name="mouse1" dev="devtmpfs" ino=3794 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 538.237832][ T9117] hid-multitouch 0003:0457:07DA.0011: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.4-1/input0 [ 538.270424][ T9] usb 3-1: USB disconnect, device number 75 [ 538.270732][ C0] usbtouchscreen 3-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 538.316728][ T30] audit: type=1400 audit(1779589815.673:12689): avc: denied { open } for pid=4964 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=3794 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 538.492611][ T30] audit: type=1400 audit(1779589815.673:12690): avc: denied { ioctl } for pid=4964 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=3794 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 538.540211][ T9117] usb 5-1: USB disconnect, device number 80 [ 539.372048][ T30] audit: type=1400 audit(1779589815.743:12691): avc: denied { read } for pid=4964 comm="acpid" name="event4" dev="devtmpfs" ino=3795 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 539.412534][ T30] audit: type=1400 audit(1779589815.743:12692): avc: denied { open } for pid=4964 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3795 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 539.438927][ T30] audit: type=1400 audit(1779589815.753:12693): avc: denied { read write } for pid=5609 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 539.464913][ T30] audit: type=1400 audit(1779589815.753:12694): avc: denied { read write open } for pid=5609 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 539.483111][T10359] fido_id[10359]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 540.381238][ T9] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 543.349375][ T30] kauditd_printk_skb: 133 callbacks suppressed [ 543.349396][ T30] audit: type=1400 audit(1779589820.793:12828): avc: denied { read write } for pid=10380 comm="syz.2.1227" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 543.426553][ T30] audit: type=1400 audit(1779589820.803:12829): avc: denied { create } for pid=10378 comm="syz.3.1228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 543.446811][ T30] audit: type=1400 audit(1779589820.833:12830): avc: denied { read write open } for pid=10380 comm="syz.2.1227" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 543.446860][ T30] audit: type=1400 audit(1779589820.863:12831): avc: denied { map } for pid=10380 comm="syz.2.1227" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 543.446902][ T30] audit: type=1400 audit(1779589820.863:12832): avc: denied { execute } for pid=10380 comm="syz.2.1227" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 543.446941][ T30] audit: type=1400 audit(1779589820.873:12833): avc: denied { bind } for pid=10378 comm="syz.3.1228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 543.460472][ T30] audit: type=1400 audit(1779589820.903:12834): avc: denied { read write } for pid=5610 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 543.460599][ T30] audit: type=1400 audit(1779589820.903:12835): avc: denied { open } for pid=5610 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 543.460781][ T30] audit: type=1400 audit(1779589820.903:12836): avc: denied { ioctl } for pid=5610 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 543.515105][ T30] audit: type=1400 audit(1779589820.963:12837): avc: denied { create } for pid=10376 comm="syz.1.1226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 548.404348][ T30] kauditd_printk_skb: 52 callbacks suppressed [ 548.404378][ T30] audit: type=1400 audit(1779589825.853:12890): avc: denied { read } for pid=10409 comm="syz.2.1235" dev="nsfs" ino=4026532910 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 549.221891][ T30] audit: type=1400 audit(1779589825.893:12891): avc: denied { open } for pid=10409 comm="syz.2.1235" path="net:[4026532910]" dev="nsfs" ino=4026532910 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 549.246034][ T30] audit: type=1400 audit(1779589825.913:12892): avc: denied { create } for pid=10409 comm="syz.2.1235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 549.304441][ T30] audit: type=1400 audit(1779589825.923:12893): avc: denied { create } for pid=10409 comm="syz.2.1235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 549.377376][ T30] audit: type=1400 audit(1779589825.953:12894): avc: denied { create } for pid=10409 comm="syz.2.1235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 549.442550][ T30] audit: type=1400 audit(1779589825.973:12895): avc: denied { write } for pid=10409 comm="syz.2.1235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 549.489127][ T30] audit: type=1400 audit(1779589825.983:12896): avc: denied { write } for pid=10409 comm="syz.2.1235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 549.576782][ T30] audit: type=1400 audit(1779589826.373:12897): avc: denied { create } for pid=10411 comm="syz.3.1234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 549.743419][ T30] audit: type=1400 audit(1779589826.433:12898): avc: denied { read write } for pid=5621 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 549.769480][ T30] audit: type=1400 audit(1779589826.443:12899): avc: denied { open } for pid=5621 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 551.087714][T10435] tmpfs: Bad value for 'nr_blocks' [ 551.142620][ T9117] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 551.360638][ T9117] usb 3-1: Using ep0 maxpacket: 16 [ 551.405636][ T9117] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 551.421415][ T9117] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 551.441676][ T9117] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 551.463126][ T9117] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 551.491735][ T9117] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 551.563825][ T9117] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 551.580212][ T9117] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 551.590076][ T9117] usb 3-1: Manufacturer: syz [ 551.634240][ T9117] usb 3-1: config 0 descriptor?? [ 552.120687][ T9117] rc_core: IR keymap rc-hauppauge not found [ 552.137416][ T9117] Registered IR keymap rc-empty [ 552.152508][ T9117] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 552.202017][ T9117] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 552.232891][ T9117] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 552.283803][ T9117] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input117 [ 552.332579][ T9117] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 552.373320][ T9117] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 552.390784][ T10] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 552.403168][ T9117] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 552.435932][ T9117] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 552.459464][ T9117] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 552.482882][ T9117] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 552.511161][ T9117] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 552.540830][ T9117] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 552.561094][ T9117] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 552.584191][ T9117] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 552.597633][ T10] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 552.620040][ T9117] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 552.630687][ T9117] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 552.640724][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 552.682318][ T9117] usb 3-1: USB disconnect, device number 76 [ 552.819098][ T10] usb 5-1: config 0 descriptor?? [ 553.394905][T10454] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[10455] was attempted by "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[10454] [ 553.410952][ T30] kauditd_printk_skb: 302 callbacks suppressed [ 553.410985][ T30] audit: type=1400 audit(1779589830.863:13202): avc: denied { read write } for pid=10450 comm="syz.4.1245" name="sg0" dev="devtmpfs" ino=752 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 553.447016][ T30] audit: type=1400 audit(1779589830.893:13203): avc: denied { read write } for pid=5609 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 553.573285][T10457] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=128 sclass=netlink_route_socket pid=10457 comm=syz.4.1245 [ 556.048261][ T30] audit: type=1400 audit(1779589830.893:13204): avc: denied { read write open } for pid=5609 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 556.908533][ T30] audit: type=1400 audit(1779589830.893:13205): avc: denied { ioctl } for pid=5609 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 557.323977][ T30] audit: type=1400 audit(1779589830.933:13206): avc: denied { read write open } for pid=10450 comm="syz.4.1245" path="/dev/sg0" dev="devtmpfs" ino=752 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 557.396356][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 557.616662][ T30] audit: type=1400 audit(1779589831.053:13207): avc: denied { create } for pid=10450 comm="syz.4.1245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 557.728954][ T9] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 557.905550][ T30] audit: type=1400 audit(1779589831.073:13208): avc: denied { create } for pid=10450 comm="syz.4.1245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 558.024585][ T9] usb 3-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 558.081889][ T10] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 558.097361][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.139056][ T10] [drm:udl_init] *ERROR* Selecting channel failed [ 558.180551][ T9] usb 3-1: Product: syz [ 558.184817][ T30] audit: type=1400 audit(1779589831.083:13209): avc: denied { create } for pid=10458 comm="syz.2.1247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 558.239039][ T9] usb 3-1: Manufacturer: syz [ 558.283445][ T9] usb 3-1: SerialNumber: syz [ 558.319977][ T9] usb 3-1: config 0 descriptor?? [ 558.375116][ T30] audit: type=1400 audit(1779589831.113:13210): avc: denied { read } for pid=10458 comm="syz.2.1247" dev="nsfs" ino=4026532801 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 558.414552][ T9] i2c-tiny-usb 3-1:0.0: version 6d.cc found at bus 003 address 077 [ 558.589635][ T30] audit: type=1400 audit(1779589831.113:13211): avc: denied { open } for pid=10458 comm="syz.2.1247" path="cgroup:[4026532801]" dev="nsfs" ino=4026532801 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 558.656970][ T10] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 558.691399][ T10] [drm] Initialized udl on minor 2 [ 558.703968][ T30] audit: type=1400 audit(1779589832.173:13212): avc: denied { read } for pid=10458 comm="syz.2.1247" dev="nsfs" ino=4026532910 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 558.752993][ T5611] audit: audit_backlog=65 > audit_backlog_limit=64 [ 558.759868][ T10] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 558.771750][T10479] audit: audit_backlog=65 > audit_backlog_limit=64 [ 558.779247][T10479] audit: audit_lost=41 audit_rate_limit=0 audit_backlog_limit=64 [ 558.780485][ T5611] audit: audit_lost=42 audit_rate_limit=0 audit_backlog_limit=64 [ 558.803263][ T30] audit: type=1400 audit(1779589832.173:13213): avc: denied { open } for pid=10458 comm="syz.2.1247" path="net:[4026532910]" dev="nsfs" ino=4026532910 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 558.833626][ T5612] audit: audit_backlog=65 > audit_backlog_limit=64 [ 558.837623][T10465] audit: audit_backlog=65 > audit_backlog_limit=64 [ 558.852100][ T10] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 558.861844][T10465] audit: audit_lost=43 audit_rate_limit=0 audit_backlog_limit=64 [ 558.876951][ T50] Bluetooth: hci4: unexpected event for opcode 0x007f [ 558.909974][ T10] usb 5-1: USB disconnect, device number 81 [ 558.930261][ T5716] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 558.949398][T10481] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 558.998198][ T5716] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 559.027096][T10481] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 559.193917][ T9] (null): failure reading functionality [ 559.195469][T10465] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 559.305712][T10465] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 559.311524][T10484] SELinux: Context system_u:object_r: is not valid (left unmapped). [ 559.457344][ T9] i2c i2c-1: connected i2c-tiny-usb device [ 561.870652][ T50] Bluetooth: hci4: command 0x0406 tx timeout [ 562.361467][ T9] usb 3-1: USB disconnect, device number 77 [ 562.574559][T10491] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.565861][ T9117] usb 4-1: new full-speed USB device number 82 using dummy_hcd [ 563.593527][ T30] kauditd_printk_skb: 249 callbacks suppressed [ 563.593551][ T30] audit: type=1400 audit(1779589841.043:13443): avc: denied { allowed } for pid=10504 comm="syz.2.1260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 563.657497][ T30] audit: type=1400 audit(1779589841.043:13444): avc: denied { create } for pid=10504 comm="syz.2.1260" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 563.943869][ T30] audit: type=1400 audit(1779589841.073:13445): avc: denied { ioctl } for pid=10502 comm="syz.3.1259" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 563.978400][ T30] audit: type=1326 audit(1779589841.093:13446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10504 comm="syz.2.1260" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ec179ce59 code=0x7ffc0000 [ 564.236031][T10503] audit: audit_backlog=65 > audit_backlog_limit=64 [ 564.239979][T10516] audit: audit_backlog=65 > audit_backlog_limit=64 [ 564.250846][T10503] audit: audit_lost=50 audit_rate_limit=0 audit_backlog_limit=64 [ 564.260030][T10517] audit: audit_backlog=65 > audit_backlog_limit=64 [ 564.260056][T10517] audit: audit_lost=51 audit_rate_limit=0 audit_backlog_limit=64 [ 564.260073][T10517] audit: backlog limit exceeded [ 564.328230][ T9117] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 564.340536][ T9117] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 564.382892][ T9117] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 564.421974][ T9117] usb 4-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 564.464692][ T9117] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 564.485193][ T9117] usb 4-1: config 0 descriptor?? [ 564.965808][ T9117] hid-multitouch 0003:0457:07DA.0012: unknown main item tag 0x0 [ 564.994091][ T9117] hid-multitouch 0003:0457:07DA.0012: ignoring exceeding usage max [ 565.034794][ T9117] hid-multitouch 0003:0457:07DA.0012: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.3-1/input0 [ 565.130699][ T5707] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 565.228613][ T9117] usb 4-1: USB disconnect, device number 82 [ 565.328744][ T5707] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 565.329224][T10527] fido_id[10527]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 565.369092][ T5707] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 565.409248][ T5707] usb 5-1: Product: syz [ 565.421058][ T5707] usb 5-1: Manufacturer: syz [ 565.434922][ T5707] usb 5-1: SerialNumber: syz [ 565.492749][ T5707] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 566.014621][ T5746] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 567.491252][ T5707] usb 5-1: USB disconnect, device number 82 [ 567.791108][ T5746] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 567.800802][ T5746] ath9k_htc: Failed to initialize the device [ 567.896386][T10531] bond5 (unregistering): Released all slaves [ 567.926501][ T5707] usb 5-1: ath9k_htc: USB layer deinitialized [ 568.176897][T10532] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 568.601193][ T30] kauditd_printk_skb: 232 callbacks suppressed [ 568.601211][ T30] audit: type=1400 audit(1779589846.053:13634): avc: denied { read write } for pid=5611 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 568.958780][ T30] audit: type=1400 audit(1779589846.093:13635): avc: denied { read write open } for pid=5611 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 568.984922][ T30] audit: type=1400 audit(1779589846.103:13636): avc: denied { ioctl } for pid=5611 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 569.015598][ T805] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 569.061141][ T30] audit: type=1400 audit(1779589846.193:13637): avc: denied { setopt } for pid=10543 comm="syz.0.1270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 569.124407][ T30] audit: type=1400 audit(1779589846.193:13638): avc: denied { create } for pid=10543 comm="syz.0.1270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 569.173767][ T30] audit: type=1400 audit(1779589846.193:13639): avc: denied { setopt } for pid=10543 comm="syz.0.1270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 569.201932][T10555] FAULT_INJECTION: forcing a failure. [ 569.201932][T10555] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 569.202814][ T805] usb 3-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 569.248903][T10555] CPU: 0 UID: 0 PID: 10555 Comm: syz.3.1272 Tainted: G L syzkaller #0 PREEMPT(full) [ 569.248933][T10555] Tainted: [L]=SOFTLOCKUP [ 569.248940][T10555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 569.248950][T10555] Call Trace: [ 569.248957][T10555] [ 569.248964][T10555] dump_stack_lvl+0x100/0x190 [ 569.248992][T10555] should_fail_ex.cold+0x5/0xa [ 569.249015][T10555] _copy_from_user+0x2e/0xd0 [ 569.249042][T10555] kstrtouint_from_user+0xd6/0x1d0 [ 569.249062][T10555] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 569.249080][T10555] ? __lock_acquire+0x4a5/0x2630 [ 569.249106][T10555] ? lock_acquire+0x1b1/0x370 [ 569.249131][T10555] proc_fail_nth_write+0x83/0x220 [ 569.249150][T10555] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 569.249174][T10555] vfs_write+0x2aa/0x1070 [ 569.249194][T10555] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 569.249214][T10555] ? __pfx_vfs_write+0x10/0x10 [ 569.249232][T10555] ? __fget_files+0x215/0x3d0 [ 569.249258][T10555] ? __fget_files+0x21f/0x3d0 [ 569.249287][T10555] ksys_write+0x12a/0x250 [ 569.249307][T10555] ? __pfx_ksys_write+0x10/0x10 [ 569.249327][T10555] ? rcu_is_watching+0x12/0xc0 [ 569.249355][T10555] do_syscall_64+0x10b/0xf80 [ 569.249380][T10555] ? clear_bhb_loop+0x40/0x90 [ 569.249401][T10555] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 569.249418][T10555] RIP: 0033:0x7fb46275d68e [ 569.249433][T10555] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 569.249449][T10555] RSP: 002b:00007fb4609ccfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 569.249467][T10555] RAX: ffffffffffffffda RBX: 00007fb4609cd6c0 RCX: 00007fb46275d68e [ 569.249478][T10555] RDX: 0000000000000001 RSI: 00007fb4609cd0a0 RDI: 0000000000000005 [ 569.249487][T10555] RBP: 00007fb4609cd090 R08: 0000000000000000 R09: 0000000000000000 [ 569.249498][T10555] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 569.249508][T10555] R13: 00007fb462a16128 R14: 00007fb462a16090 R15: 00007ffeb227fa88 [ 569.249533][T10555] [ 569.456231][ T30] audit: type=1400 audit(1779589846.203:13640): avc: denied { write } for pid=10543 comm="syz.0.1270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 569.457833][ T805] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 569.476201][ T30] audit: type=1400 audit(1779589846.253:13641): avc: denied { ioctl } for pid=10545 comm="syz.2.1271" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 569.476256][ T30] audit: type=1400 audit(1779589846.493:13642): avc: denied { ioctl } for pid=10545 comm="syz.2.1271" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 569.476295][ T30] audit: type=1400 audit(1779589846.493:13643): avc: denied { ioctl } for pid=10545 comm="syz.2.1271" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 569.775583][ T805] usb 3-1: Product: syz [ 569.799917][ T805] usb 3-1: Manufacturer: syz [ 569.813884][ T805] usb 3-1: SerialNumber: syz [ 569.861120][ T805] usb 3-1: config 0 descriptor?? [ 569.991806][ T805] i2c-tiny-usb 3-1:0.0: version 6d.cc found at bus 003 address 078 [ 570.069316][T10574] netlink: 'syz.0.1278': attribute type 10 has an invalid length. [ 570.088810][T10574] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 570.123402][ T5746] usb 2-1: new full-speed USB device number 63 using dummy_hcd [ 570.214331][T10574] team0: Port device netdevsim1 added [ 570.376538][T10574] netlink: 'syz.0.1278': attribute type 10 has an invalid length. [ 570.391873][T10574] team0: Port device netdevsim1 removed [ 570.402484][T10574] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 570.418648][T10546] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 570.429739][T10574] netdevsim netdevsim0 netdevsim1: entered promiscuous mode [ 570.437630][T10546] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 570.462921][T10574] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 570.479562][T10546] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 570.507361][T10546] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 570.550688][ T9] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 570.735253][ T805] (null): failure reading functionality [ 570.745530][ T5746] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 570.755313][ T9] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 570.760424][ T5746] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 570.780219][ T5746] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 570.792578][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 570.795319][ T5746] usb 2-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 570.815104][ T5746] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 570.830960][ T5746] usb 2-1: config 0 descriptor?? [ 570.834134][ T9] usb 4-1: Product: syz [ 570.856964][ T9] usb 4-1: Manufacturer: syz [ 570.872465][ T9] usb 4-1: SerialNumber: syz [ 570.907338][ T9] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 571.893350][ T5716] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 571.905094][ T805] i2c i2c-1: failure reading functionality [ 571.935040][ T5746] hid-multitouch 0003:0457:07DA.0013: unknown main item tag 0x0 [ 571.980478][ T805] i2c i2c-1: connected i2c-tiny-usb device [ 572.014416][ T5746] hid-multitouch 0003:0457:07DA.0013: ignoring exceeding usage max [ 572.052139][ T805] usb 3-1: USB disconnect, device number 78 [ 572.065434][ T5746] hid-multitouch 0003:0457:07DA.0013: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.1-1/input0 [ 572.159973][ T5746] usb 2-1: USB disconnect, device number 63 [ 572.441396][ T5707] usb 4-1: USB disconnect, device number 83 [ 572.569154][T10598] fido_id[10598]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 572.602133][ T805] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 572.760583][ T805] usb 3-1: Using ep0 maxpacket: 32 [ 572.805004][ T805] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 572.816002][ T805] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 572.830894][ T805] usb 3-1: config 0 descriptor?? [ 572.995056][ T5716] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 573.005268][ T5716] ath9k_htc: Failed to initialize the device [ 573.014386][ T5707] usb 4-1: ath9k_htc: USB layer deinitialized [ 573.070559][ T9] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 573.104082][ T805] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 573.146264][ T805] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 573.180135][ T805] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 573.201922][ T805] usb 3-1: media controller created [ 573.230571][ T805] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 573.264131][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 573.287122][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 573.326167][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 573.345883][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 573.356844][ T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 573.369881][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 573.379193][ T805] az6027: usb out operation failed. (-71) [ 573.397563][ T9] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 573.410518][ T9] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 573.414936][ T805] az6027: usb out operation failed. (-71) [ 573.428276][ T9] usb 2-1: Manufacturer: syz [ 573.428289][ T805] stb0899_attach: Driver disabled by Kconfig [ 573.428302][ T805] az6027: no front-end attached [ 573.428302][ T805] [ 573.438824][ T805] az6027: usb out operation failed. (-71) [ 573.573417][ T805] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 573.936581][ T30] kauditd_printk_skb: 287 callbacks suppressed [ 573.936602][ T30] audit: type=1400 audit(1779589850.983:13931): avc: denied { map_create } for pid=10611 comm="syz.4.1291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 573.965925][ T805] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input118 [ 573.994529][ T805] dvb-usb: schedule remote query interval to 400 msecs. [ 573.994891][ T9] usb 2-1: config 0 descriptor?? [ 574.038331][ T30] audit: type=1400 audit(1779589850.983:13932): avc: denied { map_read map_write } for pid=10611 comm="syz.4.1291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 574.077689][ T805] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 574.214843][ T805] usb 3-1: USB disconnect, device number 79 [ 574.265672][ T30] audit: type=1400 audit(1779589851.443:13933): avc: denied { read } for pid=4964 comm="acpid" name="event4" dev="devtmpfs" ino=3833 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 574.571645][ T30] audit: type=1400 audit(1779589851.443:13934): avc: denied { read open } for pid=4964 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3833 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 574.828515][ T30] audit: type=1400 audit(1779589851.443:13935): avc: denied { ioctl } for pid=4964 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3833 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 574.924406][ T30] audit: type=1400 audit(1779589851.463:13936): avc: denied { read } for pid=4964 comm="acpid" name="event4" dev="devtmpfs" ino=3833 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 574.958798][ T805] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 575.014753][ T30] audit: type=1400 audit(1779589851.463:13937): avc: denied { open } for pid=4964 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3833 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 575.141139][ T30] audit: type=1400 audit(1779589851.463:13938): avc: denied { ioctl } for pid=4964 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3833 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 575.210693][T10629] kAFS: unparsable volume name [ 575.233637][ T30] audit: type=1400 audit(1779589851.513:13939): avc: denied { create } for pid=10613 comm="syz.3.1292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 575.259798][ T30] audit: type=1400 audit(1779589851.513:13940): avc: denied { write } for pid=10613 comm="syz.3.1292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 575.260997][ T9] rc_core: IR keymap rc-hauppauge not found [ 575.311480][ T9] Registered IR keymap rc-empty [ 575.316841][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 575.341325][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 575.361605][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 575.376719][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input119 [ 575.398442][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 575.413000][ T5716] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 575.421329][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 575.451062][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 575.461302][ T5707] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 575.492726][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 575.511472][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 575.531449][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 575.550610][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 575.582854][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 575.602656][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 575.614564][ T5716] usb 4-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 575.624720][ T5716] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 575.635576][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 575.643068][ T5716] usb 4-1: Product: syz [ 575.643789][ T5707] usb 5-1: Using ep0 maxpacket: 16 [ 575.647567][ T5716] usb 4-1: Manufacturer: syz [ 575.647593][ T5716] usb 4-1: SerialNumber: syz [ 575.653786][ T5716] usb 4-1: config 0 descriptor?? [ 575.671288][ T9] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 575.681555][ T9] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 575.687645][ T5707] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 575.701523][ T5716] i2c-tiny-usb 4-1:0.0: version 6d.cc found at bus 004 address 084 [ 575.706053][ T9] usb 2-1: USB disconnect, device number 64 [ 575.739306][ T5707] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 575.756203][ T5707] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 575.769049][ T5707] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 575.793037][ T5707] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 575.825905][ T5707] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 575.848908][ T5707] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 575.856965][ T5707] usb 5-1: Manufacturer: syz [ 575.883526][ T5707] usb 5-1: config 0 descriptor?? [ 576.126894][T10627] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 576.138640][T10627] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 576.154201][ T5716] (null): failure reading functionality [ 576.162335][T10627] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 576.173224][T10627] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 576.269606][ T5707] rc_core: IR keymap rc-hauppauge not found [ 576.275566][ T5707] Registered IR keymap rc-empty [ 576.282639][ T5707] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 576.307265][ T5707] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 576.332502][ T5707] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 576.355111][ T5707] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input120 [ 576.377348][ T5707] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 576.382009][ T5716] i2c i2c-1: connected i2c-tiny-usb device [ 576.412675][ T5707] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 576.473652][ T5707] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 576.514642][ T5707] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 576.540650][ T5707] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 576.561843][ T5707] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 576.580779][ T5707] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 576.600729][ T5707] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 576.603449][ T9] usb 4-1: USB disconnect, device number 84 [ 576.621625][ T5707] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 576.644852][ T5707] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 576.674706][ T5707] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 576.684634][ T5707] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 576.805550][ T10] usb 5-1: USB disconnect, device number 83 [ 576.812410][ T5716] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 576.961016][ T5716] usb 3-1: Using ep0 maxpacket: 8 [ 576.967950][ T5716] usb 3-1: unable to get BOS descriptor or descriptor too short [ 576.976891][ T5716] usb 3-1: config 8 has an invalid interface number: 24 but max is 0 [ 576.985085][ T5716] usb 3-1: config 8 has no interface number 0 [ 576.991759][ T5716] usb 3-1: config 8 interface 24 altsetting 2 endpoint 0xE has invalid maxpacket 1535, setting to 1024 [ 577.003533][ T5716] usb 3-1: config 8 interface 24 altsetting 2 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 577.014597][ T5716] usb 3-1: config 8 interface 24 has no altsetting 0 [ 577.025525][ T5716] usb 3-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=75.af [ 577.034997][ T5716] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 577.044917][ T5716] usb 3-1: Product: syz [ 577.050847][ T5716] usb 3-1: Manufacturer: syz [ 577.055980][ T5716] usb 3-1: SerialNumber: syz [ 577.074460][T10649] raw-gadget.5 gadget.2: fail, usb_ep_enable returned -22 [ 578.241964][ T5746] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 578.420602][ T5746] usb 5-1: Using ep0 maxpacket: 16 [ 578.486149][ T5746] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 578.506247][ T5746] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.530181][ T5746] usb 5-1: Product: syz [ 578.534494][ T5746] usb 5-1: Manufacturer: syz [ 578.539448][ T5746] usb 5-1: SerialNumber: syz [ 578.559786][ T5746] usb 5-1: config 0 descriptor?? [ 578.660784][ T9] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 578.821154][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 578.843081][ T9] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 578.867614][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 578.893930][ T9] usb 2-1: config 0 descriptor?? [ 578.941548][ T30] kauditd_printk_skb: 337 callbacks suppressed [ 578.941590][ T30] audit: type=1400 audit(1779589856.393:14278): avc: denied { read } for pid=10678 comm="syz.3.1312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 578.991620][ T30] audit: type=1400 audit(1779589856.433:14279): avc: denied { read write } for pid=10678 comm="syz.3.1312" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 579.023144][ T30] audit: type=1400 audit(1779589856.433:14280): avc: denied { open } for pid=10678 comm="syz.3.1312" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 579.052196][ T5746] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 579.065738][ T5746] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 579.081527][ T5746] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 579.090504][ T5746] usb 5-1: media controller created [ 579.103351][ T30] audit: type=1400 audit(1779589856.433:14281): avc: denied { ioctl } for pid=10678 comm="syz.3.1312" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 579.118140][ T9] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 579.138571][ T5746] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 579.149616][ T30] audit: type=1400 audit(1779589856.473:14282): avc: denied { ioctl } for pid=10658 comm="syz.4.1304" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 579.155619][T10677] mmap: syz.0.1311 (10677) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 579.204710][ T30] audit: type=1400 audit(1779589856.553:14283): avc: denied { ioctl } for pid=10662 comm="syz.1.1306" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 579.205688][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 579.265027][ T5707] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 579.279754][ T9] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 579.287962][ T30] audit: type=1400 audit(1779589856.553:14284): avc: denied { ioctl } for pid=10662 comm="syz.1.1306" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 579.288092][ T9] usb 2-1: media controller created [ 579.320651][ T5746] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 579.332532][ T5746] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 579.355626][ T30] audit: type=1400 audit(1779589856.653:14285): avc: denied { ioctl } for pid=10678 comm="syz.3.1312" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 579.364532][T10665] ------------[ cut here ]------------ [ 579.386876][T10665] usb 5-1: BOGUS control dir, pipe 80005480 doesn't match bRequestType c0 [ 579.386928][ T30] audit: type=1400 audit(1779589856.713:14286): avc: denied { read } for pid=10658 comm="syz.4.1304" dev="nsfs" ino=4026532829 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 579.396061][T10665] WARNING: drivers/usb/core/urb.c:411 at usb_submit_urb+0x1573/0x1910, CPU#0: syz.1.1306/10665 [ 579.396128][T10665] Modules linked in: [ 579.396238][T10665] CPU: 0 UID: 0 PID: 10665 Comm: syz.1.1306 Tainted: G L syzkaller #0 PREEMPT(full) [ 579.396282][T10665] Tainted: [L]=SOFTLOCKUP [ 579.396294][T10665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 579.396315][T10665] RIP: 0010:usb_submit_urb+0x157e/0x1910 [ 579.396398][T10665] Code: d2 74 5d 48 89 54 24 40 e8 4f 4f b2 fa 4c 89 ef e8 57 53 df fe 48 89 c6 48 8d 3d 4d 61 8e 09 48 8b 54 24 40 45 89 f8 44 89 f1 <67> 48 0f b9 3a e9 c7 ed ff ff e8 23 4f b2 fa 89 ee bf ff 00 00 00 [ 579.396429][T10665] RSP: 0018:ffffc900080d7680 EFLAGS: 00010287 [ 579.396456][T10665] RAX: ffffffff8c82aa20 RBX: ffff88802da7fe00 RCX: 0000000080005480 [ 579.396478][T10665] RDX: ffff888053296900 RSI: ffffffff8c82aa20 RDI: ffffffff90e4c3b0 [ 579.396531][T10665] RBP: ffff88804389c058 R08: 00000000000000c0 R09: 0000000000000000 [ 579.396553][T10665] R10: 0000000000000001 R11: 0000000000000000 R12: ffff8880479ae260 [ 579.396573][T10665] R13: ffff88804389c0b0 R14: 0000000080005480 R15: 00000000000000c0 [ 579.396592][T10665] FS: 00007f65c37f66c0(0000) GS:ffff88812436a000(0000) knlGS:0000000000000000 [ 579.396624][T10665] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 579.396645][T10665] CR2: 000000110c2f5c3a CR3: 00000000266ab000 CR4: 00000000003526f0 [ 579.396704][T10665] Call Trace: [ 579.396717][T10665] [ 579.396740][T10665] ? __init_swait_queue_head+0xca/0x150 [ 579.396796][T10665] usb_start_wait_urb+0x10e/0x580 [ 579.396871][T10665] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 579.427217][ T30] audit: type=1400 audit(1779589856.713:14287): avc: denied { open } for pid=10658 comm="syz.4.1304" path="net:[4026532829]" dev="nsfs" ino=4026532829 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 579.430639][T10665] ? __asan_memset+0x23/0x50 [ 579.501002][ T5707] usb 4-1: Using ep0 maxpacket: 16 [ 579.508376][T10665] usb_control_msg+0x328/0x4b0 [ 579.508428][T10665] ? __pfx_usb_control_msg+0x10/0x10 [ 579.508463][T10665] dtv5100_i2c_msg+0x1be/0x340 [ 579.508520][T10665] dtv5100_i2c_xfer+0x131/0x3d0 [ 579.508552][T10665] __i2c_transfer+0x5e9/0x1780 [ 579.508575][T10665] ? __x64_sys_ioctl+0x47/0x210 [ 579.508603][T10665] ? __pfx___i2c_transfer+0x10/0x10 [ 579.508651][T10665] i2c_smbus_xfer_emulated+0x22a/0x10e0 [ 579.508683][T10665] ? __pfx_i2c_smbus_xfer_emulated+0x10/0x10 [ 579.508724][T10665] ? kasan_quarantine_put+0x104/0x240 [ 579.508787][T10665] __i2c_smbus_xfer+0x619/0x1120 [ 579.508816][T10665] ? mark_held_locks+0x40/0x70 [ 579.508843][T10665] ? lockdep_hardirqs_on+0x78/0x100 [ 579.508874][T10665] ? __pfx___i2c_smbus_xfer+0x10/0x10 [ 579.508900][T10665] ? rt_mutex_slowtrylock+0x93/0x100 [ 579.508947][T10665] i2c_smbus_xfer+0x185/0x3c0 [ 579.508975][T10665] i2cdev_ioctl_smbus+0x4b9/0xac0 [ 579.508999][T10665] ? __pfx_i2cdev_ioctl_smbus+0x10/0x10 [ 579.509018][T10665] ? __might_fault+0xc5/0x140 [ 579.509047][T10665] ? __might_fault+0xc5/0x140 [ 579.509109][T10665] i2cdev_ioctl+0x3cf/0x830 [ 579.509130][T10665] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 579.509151][T10665] ? selinux_file_ioctl+0x13b/0x290 [ 579.509184][T10665] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 579.509205][T10665] __x64_sys_ioctl+0x18e/0x210 [ 579.509250][T10665] do_syscall_64+0x10b/0xf80 [ 579.509279][T10665] ? clear_bhb_loop+0x40/0x90 [ 579.509303][T10665] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 579.509325][T10665] RIP: 0033:0x7f65c559ce59 [ 579.509342][T10665] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 579.543074][ T5707] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 579.543289][T10665] RSP: 002b:00007f65c37f6028 EFLAGS: 00000246 [ 579.565714][ T5707] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 579.570030][T10665] ORIG_RAX: 0000000000000010 [ 579.634747][ T5707] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 579.634794][ T5707] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 579.639582][T10665] RAX: ffffffffffffffda RBX: 00007f65c5815fa0 RCX: 00007f65c559ce59 [ 579.639603][T10665] RDX: 0000200000000080 RSI: 0000000000000720 RDI: 0000000000000004 [ 579.639616][T10665] RBP: 00007f65c5632d6f R08: 0000000000000000 R09: 0000000000000000 [ 579.639627][T10665] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 579.639636][T10665] R13: 00007f65c5816038 R14: 00007f65c5815fa0 R15: 00007ffd16e5d598 [ 579.639663][T10665] [ 579.639676][T10665] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 579.639703][T10665] CPU: 0 UID: 0 PID: 10665 Comm: syz.1.1306 Tainted: G L syzkaller #0 PREEMPT(full) [ 579.639730][T10665] Tainted: [L]=SOFTLOCKUP [ 579.639738][T10665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 579.639751][T10665] Call Trace: [ 579.639760][T10665] [ 579.639768][T10665] dump_stack_lvl+0x100/0x190 [ 579.639797][T10665] vpanic+0x552/0x970 [ 579.639817][T10665] ? __pfx_vpanic+0x10/0x10 [ 579.639843][T10665] panic+0xd1/0xe0 [ 579.639861][T10665] ? __pfx_panic+0x10/0x10 [ 579.639892][T10665] check_panic_on_warn.cold+0x19/0x34 [ 579.639913][T10665] ? usb_submit_urb+0x1573/0x1910 [ 579.639938][T10665] __warn.cold+0x191/0x328 [ 579.639961][T10665] __report_bug+0x296/0x3d0 [ 579.639988][T10665] ? usb_submit_urb+0x1573/0x1910 [ 579.640014][T10665] ? __pfx___report_bug+0x10/0x10 [ 579.640040][T10665] ? lockdep_hardirqs_on+0x78/0x100 [ 579.640076][T10665] ? usb_submit_urb+0x157e/0x1910 [ 579.640105][T10665] report_bug_entry+0xe1/0x290 [ 579.640132][T10665] ? usb_submit_urb+0x157e/0x1910 [ 579.640157][T10665] handle_bug+0x1cd/0x2a0 [ 579.640177][T10665] exc_invalid_op+0x17/0x50 [ 579.640196][T10665] asm_exc_invalid_op+0x1a/0x20 [ 579.640214][T10665] RIP: 0010:usb_submit_urb+0x157e/0x1910 [ 579.640240][T10665] Code: d2 74 5d 48 89 54 24 40 e8 4f 4f b2 fa 4c 89 ef e8 57 53 df fe 48 89 c6 48 8d 3d 4d 61 8e 09 48 8b 54 24 40 45 89 f8 44 89 f1 <67> 48 0f b9 3a e9 c7 ed ff ff e8 23 4f b2 fa 89 ee bf ff 00 00 00 [ 579.640260][T10665] RSP: 0018:ffffc900080d7680 EFLAGS: 00010287 [ 579.640277][T10665] RAX: ffffffff8c82aa20 RBX: ffff88802da7fe00 RCX: 0000000080005480 [ 579.640289][T10665] RDX: ffff888053296900 RSI: ffffffff8c82aa20 RDI: ffffffff90e4c3b0 [ 579.640301][T10665] RBP: ffff88804389c058 R08: 00000000000000c0 R09: 0000000000000000 [ 579.640311][T10665] R10: 0000000000000001 R11: 0000000000000000 R12: ffff8880479ae260 [ 579.640320][T10665] R13: ffff88804389c0b0 R14: 0000000080005480 R15: 00000000000000c0 [ 579.640346][T10665] ? __init_swait_queue_head+0xca/0x150 [ 579.640375][T10665] usb_start_wait_urb+0x10e/0x580 [ 579.640403][T10665] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 579.640431][T10665] ? __asan_memset+0x23/0x50 [ 579.640458][T10665] usb_control_msg+0x328/0x4b0 [ 579.640480][T10665] ? __pfx_usb_control_msg+0x10/0x10 [ 579.640507][T10665] dtv5100_i2c_msg+0x1be/0x340 [ 579.640534][T10665] dtv5100_i2c_xfer+0x131/0x3d0 [ 579.640560][T10665] __i2c_transfer+0x5e9/0x1780 [ 579.640579][T10665] ? __x64_sys_ioctl+0x47/0x210 [ 579.640600][T10665] ? __pfx___i2c_transfer+0x10/0x10 [ 579.640622][T10665] i2c_smbus_xfer_emulated+0x22a/0x10e0 [ 579.640647][T10665] ? __pfx_i2c_smbus_xfer_emulated+0x10/0x10 [ 579.640681][T10665] ? kasan_quarantine_put+0x104/0x240 [ 579.640711][T10665] __i2c_smbus_xfer+0x619/0x1120 [ 579.640734][T10665] ? mark_held_locks+0x40/0x70 [ 579.640755][T10665] ? lockdep_hardirqs_on+0x78/0x100 [ 579.640778][T10665] ? __pfx___i2c_smbus_xfer+0x10/0x10 [ 579.640798][T10665] ? rt_mutex_slowtrylock+0x93/0x100 [ 579.640819][T10665] i2c_smbus_xfer+0x185/0x3c0 [ 579.640843][T10665] i2cdev_ioctl_smbus+0x4b9/0xac0 [ 579.640863][T10665] ? __pfx_i2cdev_ioctl_smbus+0x10/0x10 [ 579.640878][T10665] ? __might_fault+0xc5/0x140 [ 579.640901][T10665] ? __might_fault+0xc5/0x140 [ 579.640932][T10665] i2cdev_ioctl+0x3cf/0x830 [ 579.640949][T10665] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 579.640965][T10665] ? selinux_file_ioctl+0x13b/0x290 [ 579.640991][T10665] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 579.641008][T10665] __x64_sys_ioctl+0x18e/0x210 [ 579.641027][T10665] do_syscall_64+0x10b/0xf80 [ 579.641050][T10665] ? clear_bhb_loop+0x40/0x90 [ 579.641070][T10665] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 579.641087][T10665] RIP: 0033:0x7f65c559ce59 [ 579.641102][T10665] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 579.641117][T10665] RSP: 002b:00007f65c37f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 579.641133][T10665] RAX: ffffffffffffffda RBX: 00007f65c5815fa0 RCX: 00007f65c559ce59 [ 579.641144][T10665] RDX: 0000200000000080 RSI: 0000000000000720 RDI: 0000000000000004 [ 579.641154][T10665] RBP: 00007f65c5632d6f R08: 0000000000000000 R09: 0000000000000000 [ 579.641164][T10665] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 579.641175][T10665] R13: 00007f65c5816038 R14: 00007f65c5815fa0 R15: 00007ffd16e5d598 [ 579.641197][T10665] [ 579.645752][T10665] Kernel Offset: disabled