last executing test programs: 1m28.496762652s ago: executing program 4 (id=462): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001b61e308d016a91052300102030109021b0001000000000904000001ff7f880009050302"], 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r1 = syz_ublk_setup_io_uring(0xdce, &(0x7f00000003c0)={0x0, 0x0, 0x400, 0x0, 0xc}, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000140)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) syz_open_dev$hiddev(&(0x7f0000000280), 0x2, 0x4400) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000880)={0x3, 0x0, &(0x7f0000000840)=[0xffffffffffffffff]}, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000100)={0x1c, &(0x7f0000000240)=ANY=[], 0x0, 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="05ff0300", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000007b14fb9b6e01795f0d7426860630aadf00d9c9a0ab6aa6d378a187295f47e6691edb046b86479688df06184e46d05437f074b66985153d88997a8c13f25b0400e54c888f2703e496837ab85954a0cb67"], 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000002000700850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a2c3197db9f1b0a, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r5}, 0xc) r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x80400, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, &(0x7f00000001c0)={'aio_aio12_8\x00', [0x100, 0x12, 0xd0, 0x2, 0x2, 0x100, 0x3, 0x82, 0x5, 0xb, 0x2, 0x7, 0xffffffff, 0x401, 0x10001, 0x1, 0x9, 0xe, 0xfe5, 0x403, 0x0, 0x2, 0x7, 0x9, 0x48, 0x9, 0x7, 0x6a77, 0x5, 0x20003, 0x9]}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x3, 0x6, 0xff}, 0x3a, [0x8000, 0xc95b, 0xf, 0x8, 0x80, 0x2, 0x3, 0x10007f, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x25, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x1004c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x7, 0x7, 0x17, 0x1, 0x7, 0x200, 0x3e, 0x8c, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x8000, 0x8, 0x0, 0x1, 0x40], [0x1000000a, 0x1, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x7, 0x6c7, 0x8000009, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0xa0fe, 0x400, 0x401, 0x6, 0x1, 0xff, 0x7, 0x1000005, 0x5f31, 0xe, 0x4e0, 0x2, 0x80000000, 0xb, 0x40001, 0x9, 0x8, 0x9, 0x6, 0x47, 0x0, 0x1, 0xfe000000, 0x6, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x1, 0xbc45, 0x48c93690, 0x43, 0x103], [0x7, 0xa, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d3, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x6, 0x5, 0x0, 0x6, 0x5, 0x1, 0x86, 0xffffffff, 0x303c, 0x3e7, 0xb, 0x5, 0x2002, 0x2, 0xffffffff, 0x20000008, 0x2, 0x6d03, 0x800006, 0x38, 0x800003, 0x200, 0x1080, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0x4, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x5, 0x1000000a, 0x0, 0x5, 0x201c, 0x2, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x80000000, 0xb, 0x5, 0x93b, 0x6, 0x1000006, 0x0, 0xb9, 0xce7, 0x4fa, 0x2, 0x57, 0x4, 0xb54, 0x101, 0x10000, 0x1ff, 0x7fff, 0x10000, 0x7f, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000000, 0x0, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x1000, 0x5, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x4, 0x1, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 1m23.135279613s ago: executing program 4 (id=470): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000cc0), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000000d80)={0x0, 0xf0, &(0x7f0000000d40)={&(0x7f00000002c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7000ffdbdf25010000ca000000000c41000000030014"], 0x30}, 0x1, 0x0, 0x0, 0x4040040}, 0x4000) 1m21.868966297s ago: executing program 4 (id=472): socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) add_key(0x0, 0x0, &(0x7f0000000080)="0000000000000001f069000000000001000080c00070000002000200861fa72e5b01504104bfeacdd5a9007d167c7164713697ef3caf9bfe3e60012ed84d0948d009c79458a36c3e87ea33ce9360a683218cd568dad568d890f236964c2f343ff045c795f2801eaf840413ef7cde5e04bd72fe28d1a221a9388971cf0e0d9d9eef039e358c9c386b301f39ebd67d426d849e42a5af55febb6e8e21566b1651e4cd570422acec6a12c2e1ba8122c89e9cc3ecb6861267a4bb2ebbb28ab055a9c4d00d61d13c7292a7", 0xc8, 0xffffffffffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x400, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x330, 0xffffffff, 0xffffffff, 0x330, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@unspec=@physdev={{0x68}, {'dummy0\x00', {0xff}, 'macvtap0\x00', {0xff}, 0x0, 0x2}}, @common=@srh1={{0x90}, {0x1, 0x1, 0x0, 0x0, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x3a}, @ipv4={'\x00', '\xff\xff', @multicast1}, [0xff000000, 0xffffff00, 0xffffffff, 0xffffffff], [0x0, 0x0, 0x0, 0xffffff00], [0xff, 0xffffffff, 0xff], 0x1, 0x1aeeb7877a132935}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x108, 0x170, 0x0, {}, [@common=@unspec=@devgroup={{0x38}, {0x2, 0x427, 0x6e, 0xef, 0x3}}, @common=@inet=@set1={{0x28}, {{0x0, 0x2, 0x4}}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x18, 0x3, 0x2, 0x80000001, '\x00', 'syz1\x00', {0x9}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x460) recvmmsg(r1, &(0x7f0000001240)=[{{&(0x7f00000002c0)=@ieee802154={0x24, @long}, 0x80, &(0x7f00000000c0), 0x0, &(0x7f0000001480)=""/69, 0x45}, 0x1}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000540)=""/24, 0x18}], 0x1, &(0x7f0000000480)=""/36, 0x24}, 0xf6}, {{&(0x7f00000004c0)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000d40)=""/184, 0xb8}], 0x1, &(0x7f0000000e40)=""/242, 0xf2}, 0x9}, {{&(0x7f0000000680)=@nfc_llcp, 0x80, &(0x7f0000000800)=[{&(0x7f0000001500)=""/182, 0xb6}, {&(0x7f00000007c0)=""/29, 0x1d}], 0x2}}, {{&(0x7f0000000840)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x80, &(0x7f00000021c0)=[{&(0x7f0000001e00)=""/82, 0x52}, {&(0x7f0000000940)=""/205, 0xcd}, {&(0x7f0000002080)=""/155, 0x9b}, {&(0x7f0000001f80)=""/254, 0xfe}, {&(0x7f00000008c0)=""/73, 0x49}], 0x5, &(0x7f0000002240)=""/147, 0x93}, 0x1e0d}, {{&(0x7f0000000cc0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000002640)=[{&(0x7f0000002380)=""/69, 0x45}, {&(0x7f0000000a40)=""/195, 0xc3}, {&(0x7f0000000bc0)=""/255, 0xff}, {&(0x7f0000000580)=""/83, 0x53}], 0x4, &(0x7f0000002680)=""/223, 0xdf}, 0x1ff}, {{0x0, 0x0, &(0x7f0000002940)}, 0x8}, {{0x0, 0x0, &(0x7f0000002a80)=[{&(0x7f0000002980)=""/182, 0xb6}, {&(0x7f0000002a40)=""/12, 0xc}], 0x2, &(0x7f0000002ac0)=""/132, 0x84}, 0x83a}, {{&(0x7f0000000600)=@phonet, 0x80, &(0x7f00000011c0)}, 0x6}], 0x9, 0x2, 0x0) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x6, 0x1) set_mempolicy_home_node(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0) r4 = socket(0x39, 0x0, 0x7) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000fc0)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6gre0\x00', 0x0, 0x2, 0x7c, 0x6, 0x9, 0x56, @dev={0xfe, 0x80, '\x00', 0x2a}, @private1, 0x7, 0x0, 0x7fff, 0x3}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[], 0x74}, 0x1, 0x0, 0x0, 0x20044891}, 0x4094) socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) ioctl$FBIOBLANK(r6, 0x4611, 0x2) creat(&(0x7f00000002c0)='./file0\x00', 0x0) 1m20.349172688s ago: executing program 4 (id=474): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000140)='./file0/../file0/file0\x00', &(0x7f0000000080)='./file0/../file0/file0\x00', 0x0, 0x324b0d1, 0x0) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f0000000500)='./file0/../file0\x00', 0x0, 0x2127099, 0x0) mount$bind(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x84000, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40140, 0x1) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x3) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000300)=""/102400, 0x19000) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f00000002c0)={0x1000200001ee0000, 0x3}) ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x3}}, './file0\x00'}) getsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180), &(0x7f0000019300)=0x4) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x1d, 0x2}, &(0x7f0000019340)=0x0) r6 = socket$kcm(0x2d, 0x2, 0x0) r7 = dup(r6) read$FUSE(r7, &(0x7f0000001b80)={0x2020}, 0x2020) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}}, 0x0) 1m19.006025641s ago: executing program 4 (id=480): openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000400)={{{@in=@initdev, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}}}, &(0x7f0000000580)=0xe8) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ff"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000280), 0x107ff, r5}, 0x38) r6 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_ADD_MIF(r6, 0x29, 0xca, &(0x7f0000000000)={0xffffffffffffffff, 0x1, 0x3, r4}, 0xc) r7 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x5543, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x20, "", [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0xff, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x45, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io(r7, &(0x7f0000000140)={0x2c, &(0x7f0000000240)={0x0, 0x21, 0x28, {0x28, 0x8, "f70ba381030000000000000000cb4fdca0560fb30d54f365c5b1d43ee44fbf6fc93f0808251f"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x400017e) dup2(0xffffffffffffffff, 0xffffffffffffffff) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44100}, 0x0) 1m18.063231907s ago: executing program 4 (id=484): socket$netlink(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, 0x0, 0x0) 1m17.623434692s ago: executing program 32 (id=484): socket$netlink(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, 0x0, 0x0) 10.029366547s ago: executing program 0 (id=710): ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x10000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000040)={0xa, 0x1, 0x1, 0x0, 0x1}) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405668, &(0x7f00000000c0)={0x5, 0x3, 0x1, "0000087aba10fdfffffb05001400", 0x59565955}) 9.050569815s ago: executing program 0 (id=713): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f00000008c0)="2b1c52ac82e71ea05b0c5e43ed1f", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 8.98679005s ago: executing program 0 (id=714): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000034709d405f0530c6acb60102030109021200fd000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f0000000400)={0x40, 0xd, 0x1, "1d"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000240)={0x34, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) 6.27707758s ago: executing program 2 (id=726): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x879995ce39cd0a74, 0x6}, 0xfe}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x94}, 0x1, 0x0, 0x0, 0x10010}, 0x0) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000340)={0x1d, r4, 0x3, {0x2, 0x0, 0x4}, 0xff}, 0x18) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)="81b641f1f3843704b6", 0x9}], 0x1}, 0x40480f0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xb, 0xf}, {0xb, 0xffe0}, {0x2, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) 6.224145583s ago: executing program 3 (id=727): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4020aeb2, &(0x7f0000000740)={0x1, 0x12c, @pic={0x4, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfd, 0x0, 0x1}}) 6.015147677s ago: executing program 1 (id=728): syz_open_dev$dvb_frontend(0x0, 0x0, 0x2) openat$adsp1(0xffffffffffffff9c, 0x0, 0xa0201, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x60, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x4c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xffffffff}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) 5.999086424s ago: executing program 0 (id=729): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1}, 0x881) r1 = dup(r0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000180)={0x4, 0xffffff95, 0xfa00, {0xffffffffffffffff, 0x4}}, 0x29fdf) syz_usb_connect(0x3, 0x24, &(0x7f00000004c0)={{0x12, 0x1, 0x250, 0xd2, 0xf, 0xa7, 0x10, 0xb49, 0x64f, 0x7d6f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x6, 0x4, 0x20, 0x8, "", [{{0x9, 0x4, 0x96, 0x6, 0x0, 0x77, 0x18, 0x58, 0x5}}]}}]}}, 0x0) recvmsg$unix(r1, &(0x7f0000002440)={0x0, 0x0, 0x0}, 0x40000110) 5.953955597s ago: executing program 1 (id=730): socket(0x8, 0x5, 0x0) openat$comedi(0xffffff9c, 0x0, 0x101001, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8) pread64(0xffffffffffffffff, 0x0, 0x0, 0x2) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setscheduler(0x0, 0x1, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc}) r2 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r2, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) connect$pptp(r2, &(0x7f0000000140)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) 5.368998075s ago: executing program 2 (id=731): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000012c0)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x3) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x40005) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000280)=@gcm_128={{0x303}, "ed197fbfb5c342b6", "28852cbbbeba35380ee5190047169f9d", "2eb387e0", "11edf8da8e55bb27"}, 0x28) recvfrom$inet6(r1, &(0x7f00000002c0)=""/120, 0x78, 0x140, 0x0, 0x0) 5.323530228s ago: executing program 3 (id=732): mount$afs(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x4080, &(0x7f0000000040)={[{@dyn}]}) 5.184006825s ago: executing program 3 (id=733): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000002200)={0x0, 0x0, &(0x7f00000021c0)={&(0x7f0000002080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000020004c0000000e0001006e65"], 0x44}}, 0x0) 5.168029885s ago: executing program 2 (id=734): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) r7 = socket$unix(0x1, 0x5, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff, 0xfffc}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x7, 0x8005, 0x5, 0xfffffdff, 0x4006}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x9, 0x9, 0x5, 0x96, 0xfff, 0xc}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 5.158424849s ago: executing program 1 (id=735): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) utime(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x53, 0x7fffffffffffffff}) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r1, 0xc1205531, &(0x7f00000001c0)={0x1, 0x8, 0x1, 0x3, '\x00', '\x00', '\x00', 0x9, 0x0, 0x6, 0x101, "1701c81cfd31d56b5f5e98043a6baf10"}) syz_emit_ethernet(0xe, &(0x7f0000000400)={@local, @remote, @void, {@generic={0x8914}}}, 0x0) syz_extract_tcp_res(0x0, 0x80000000, 0x6) r2 = syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r2, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) 4.783366433s ago: executing program 3 (id=736): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00222200000096010006010003000000002b90a0753883c83e25031bdde840503a0c6893"], 0x0}, 0x0) syz_usb_connect(0x0, 0x36, 0x0, 0x0) r1 = syz_usb_connect$lan78xx(0x5, 0x0, 0x0, 0x0) syz_usb_control_io$lan78xx(r1, 0x0, 0x0) syz_usb_connect(0x4, 0x36, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0xe0c81) syz_usb_connect(0x0, 0x36, 0x0, 0x0) 4.551457546s ago: executing program 2 (id=737): syz_emit_ethernet(0xf7, &(0x7f0000000200)={@local, @broadcast, @val={@void, {0x8100, 0x6, 0x0, 0x3}}, {@generic={0x88a8, "1e7d1d1870d78e1189a6c4602e97dbe6cc4a486fc02445d8de01f4dd32be466c8b561cd1f7f7d53f88ecc4ae0569596b0180651a6ccd37db190977ab7d203969ab99277f43eacd765335b5b0a2e8a43ada14026fada046703def0cd284968b76de8667fea69d11148d8f1976a7636ba2da67fa25b8a75e19d4cfc5c8b7165bef7211ef1fa2cd0c86e5746cf38d07b46d29c459d7172f29e23810a06095a9019483c406787ae91cdd3416a99bff1ab11dd6cab8f4e2e2503d8320702038c183ea966f44d5f206e5842044c07b3bc968fa089bc1ce8fb620d3172ca83ff5c8ebac033daf65b3"}}}, 0x0) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000626000/0x5000)=nil, 0x5000) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) lstat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem\xda\x99R@m\xfc\xfe\x9b#*\xff', 0x0) write(r1, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000180)=ANY=[], 0xe) sendfile(r1, r1, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f000002eff0)={0x135, &(0x7f0000000000)=[{}]}, 0x10) 4.236877095s ago: executing program 5 (id=739): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x44054}, 0xc4) r1 = syz_open_dev$video(&(0x7f0000000000), 0x8, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000100)={0x980000, 0x1, 0xfffffffa, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x98f90b, 0x9, '\x00', @p_u16=0x0}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$ttys(0xc, 0x2, 0x0) r3 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TCGETS2(r3, 0x802c542a, &(0x7f0000000300)) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, 0x0, 0x810) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000140)={0xff, r2, 'id0\x00'}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha512\x00'}, 0x77) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000011500)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004040}}], 0x1, 0x20040011) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb09587", 0x4b}, {&(0x7f0000000840)}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4000000}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000000c0)={0x0, 0xfedd, &(0x7f00000001c0)=[{&(0x7f0000000d40)=""/75, 0x7ffff02e}, {&(0x7f00000002c0)=""/83, 0x20000253}], 0x2}, 0x2120) r6 = fsopen(&(0x7f0000000040)='devpts\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) close(r7) close(0x3) socket(0x10, 0x803, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x850) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x42804}, 0x10) close_range(r2, 0xffffffffffffffff, 0x0) 3.897763005s ago: executing program 5 (id=740): mount$overlay(0x0, 0x0, 0x0, 0x1010, &(0x7f00000001c0)={[], [{@uid_eq}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@smackfshat={'smackfshat', 0x3d, ':'}}], 0x2f}) memfd_create(&(0x7f0000000740)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa\x1aX\x87\xd8\x1aP\x06\x9a\xa9\xa0\x98 )\xe3\xa1\xa2\xb1D\xe0\x15S\x89/m\xb71%\x80\x04Q\x1dN\xb0\x19\x81\x16@\xc0\xc4\"g\xd7Z\xb3\x17\xd1\xe7\x1b\xbd\xdck\x95\x16\x17\x95\xce\xa6\x92_\xe4\x9a\xaeA-\x02\x161\x8c\xe7\xa6.)\xadpM\x19\x1c\xcd\xf6S\x9a(:\x90\xb1\x8ft\xeb#\x82\x17\x8d\x00\xcaY\xe9\xf7\xee\x91\bx\x80\xa4\xa0\x16\b\x8b,\xdb\x88m\xc1m\x91\xf0S\xc4\xc9\xefEBT\x8e\xff6\xff\xbb\xd4\xbe&\xf5St\v\xe1\x98;q\\\x1c\xe9\xcc\xfeV\xc3M5\xa9\xec\xc9\x8a\xee7\xbb\xa4\x1f\xc8\xfb\xaar15\xdf\\\xf4d\xc0\xc7\xf3\x88\x13\x94^01\xfc_\x91B\xacp\x8f\xfdx\xa5\xa9_t\x86\xe3%\xf1q\x00\x89c\x05H\x92\xa6\x93je\xfa\xd148\xd0N7', 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f00000004c0)={'syzkaller0\x00', @link_local}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) read$FUSE(r1, &(0x7f0000001180)={0x2020}, 0x2020) 3.874205213s ago: executing program 2 (id=741): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000010c0)=ANY=[@ANYBLOB="12010000190000404f045db600000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\"\a'], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000100)={0x2c, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0}) 3.431164472s ago: executing program 5 (id=742): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20a02, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x5453, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x22882, 0x0) writev(r1, &(0x7f0000000240)=[{&(0x7f0000000e40)='\b', 0x1}], 0x1) 3.311779368s ago: executing program 5 (id=743): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000b80), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000000c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_KEY(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01032cbd7000fbdbdf251600000008000300", @ANYRES32=r3], 0x1c}, 0x1, 0x0, 0x0, 0x4c000}, 0x40004) 3.310575836s ago: executing program 5 (id=744): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sequencer(0xffffff9c, 0x0, 0x88302, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x800, 0x4) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000080)={0x28, 0x2, r2, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1}) ioctl$IOMMU_VFIO_IOAS$SET(r1, 0x3b88, &(0x7f0000000040)={0xc, r2}) ioctl$IOMMU_VFIO_SET_IOMMU(r1, 0x3b66, 0x1) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r1, 0x3b72, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000020"]) 3.229859191s ago: executing program 1 (id=745): sched_setscheduler(0x0, 0x1, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x8, 0x3, 0xc, 0x20000006, 0x53, 0x400006, 0x10000, 0x80005, 0x2, 0xffff2d24, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x26, 0xd, 0x1, 0x6, 0x0, 0xe661, 0x4, 0x7, 0x6, 0x8, 0x4c72, 0x80000000, 0x3, 0x3, 0xe, 0x8, 0x800080ee, 0xa, 0x17, 0x1, 0x9, 0x204, 0x3e, 0x8c, 0x6, 0xca9, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x10001, 0x5, 0x6, 0x6, 0x5, 0x1, 0x40], [0x10000007, 0x9, 0x80000130, 0x8004, 0x5, 0xfffffff3, 0x2, 0xc8, 0xf9, 0xe, 0x7, 0x687, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x6, 0x42f, 0xe, 0x312, 0x78, 0x1, 0x0, 0x2, 0x0, 0x7fff, 0x6, 0x1004400, 0x401, 0x6, 0x1, 0xfc, 0x5, 0x1000005, 0x5f31, 0xd, 0x40000101, 0x1, 0x4, 0xffff80f1, 0x8, 0x6, 0x8, 0xa, 0x6, 0x47, 0x8020, 0x1, 0xfdfffffd, 0xffff, 0xfffffe01, 0x4, 0x10, 0x3, 0x3, 0x9, 0x1, 0x40003, 0x2, 0xbc44, 0x48c93694, 0x43, 0x9], [0x7, 0xa, 0x0, 0x5, 0xfffffffe, 0x7, 0x8d2, 0xff1, 0x5, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x6, 0x5, 0x5, 0x8, 0x5, 0x1, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0xd, 0x800003, 0x200, 0x400080, 0x3, 0x4, 0x2950bfaf, 0x2, 0xa2, 0x6, 0xa9, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0xfffffff7, 0x1, 0x6, 0x0, 0x2, 0x21c, 0x120000, 0x3, 0x0, 0x80aaed, 0x4, 0x24], [0x9, 0x8, 0x7ffffffd, 0xb, 0x5, 0x93a, 0x9, 0x3, 0x100, 0xb9, 0xce7, 0x1ff, 0x2, 0x0, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x1000, 0x7f, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x800096, 0xffffffff, 0x2, 0x7, 0x4, 0xc8, 0xffbffffd, 0xfffff000, 0x4010080, 0x3, 0x7e, 0x100, 0x1001000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x1, 0x30b1d69b, 0xa1f, 0xf40, 0x8, 0x4, 0x6c1b, 0x0, 0x5, 0x0, 0xb1e, 0xc7, 0x200, 0xffff2441, 0xfff]}, 0x45c) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000340)={0x1, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa25}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fsopen(&(0x7f0000000180)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x80) r6 = openat$cgroup_procs(r5, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) sendfile(r2, r6, 0x0, 0x2000000000006) syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$SYNC_IOC_MERGE(r0, 0xc0303e03, 0x0) 1.629310065s ago: executing program 1 (id=746): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = epoll_create1(0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'lo\x00'}) r7 = socket$inet_tcp(0x2, 0x1, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc090}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000000)={0xa0000001}) epoll_pwait(r4, &(0x7f0000000040)=[{}], 0x1, 0xff, 0x0, 0x2000) 1.380751205s ago: executing program 3 (id=747): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000300)=[{0x6, 0x9, 0xfb, 0x7fff0000}]}) openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x101000, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 1.327543559s ago: executing program 0 (id=748): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x13, &(0x7f0000000140)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608fffffff80000180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8fffdffb702000008000000b50af8ff00000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x8}, 0x94) 162.847476ms ago: executing program 3 (id=749): bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x10) mknodat$loop(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x10, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) open(0x0, 0x105200, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r4 = fcntl$dupfd(r3, 0x406, r3) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x8040}, 0x0) mount$9p_tcp(&(0x7f0000000640), &(0x7f0000000680)='.\x00', &(0x7f00000006c0), 0x8010, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=tcp,port<0x0000000000004e22,privport,\x00']) 120.162993ms ago: executing program 2 (id=750): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsmount(r1, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r2 = getpid() r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x84, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}]}, @CTA_NAT_SRC={0x4}]}, 0x84}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x7ff, @empty, 0x9}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r6, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) setsockopt$inet6_int(r6, 0x29, 0x3a, &(0x7f0000000040)=0x8, 0x4) recvmmsg(r6, &(0x7f0000004780)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001500)=""/55, 0x18}, 0x8000}], 0x1, 0x2, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x20004184, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 104.559594ms ago: executing program 1 (id=751): sendmsg$key(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, 0x0, 0x20000080) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x3, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(0xffffffffffffffff, 0x5646, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) 86.680522ms ago: executing program 5 (id=752): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x240, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40080c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) 0s ago: executing program 0 (id=753): r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'veth1\x00', 0x0}) bind$can_raw(r0, &(0x7f00000000c0)={0x1d, r2}, 0x10) kernel console output (not intermixed with test programs): nied { setopt } for pid=7239 comm="syz.2.398" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 210.878356][ T29] audit: type=1400 audit(1783711505.772:881): avc: denied { write } for pid=7239 comm="syz.2.398" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 210.943917][ T7247] block nbd4: not configured, cannot reconfigure [ 211.181621][ T24] sr9700 4-1:0.41 eth1: register 'sr9700' at usb-dummy_hcd.3-1, CoreChip SR9700 USB Ethernet, 58:68:a7:08:1c:f4 [ 211.234718][ T24] usb 4-1: USB disconnect, device number 12 [ 211.268306][ T24] sr9700 4-1:0.41 eth1: unregister 'sr9700' usb-dummy_hcd.3-1, CoreChip SR9700 USB Ethernet [ 213.815279][ T5725] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 213.940683][ T5725] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 214.225892][ T7273] overlay: Unknown parameter 'fsuuid' [ 214.744306][ C1] sd 0:0:1:0: [sda] tag#1009 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 214.755751][ C1] sd 0:0:1:0: [sda] tag#1009 CDB: Read(6) 08 00 00 00 00 00 00 00 00 01 00 00 [ 215.162852][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 215.162884][ T29] audit: type=1400 audit(1783711510.102:892): avc: denied { create } for pid=7277 comm="syz.3.411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 215.911309][ T29] audit: type=1400 audit(1783711510.102:893): avc: denied { create } for pid=7277 comm="syz.3.411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 215.985034][ T9] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 216.129422][ T29] audit: type=1400 audit(1783711511.082:894): avc: denied { connect } for pid=7272 comm="syz.4.409" lport=135 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 216.184971][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 216.195763][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 216.216551][ T29] audit: type=1400 audit(1783711511.162:895): avc: denied { create } for pid=7285 comm="syz.0.412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 216.239130][ T9] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 216.273158][ T29] audit: type=1400 audit(1783711511.192:896): avc: denied { bind } for pid=7285 comm="syz.0.412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 216.295251][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 216.315447][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.335535][ T9] usb 4-1: Product: syz [ 216.339970][ T9] usb 4-1: Manufacturer: syz [ 216.344633][ T29] audit: type=1400 audit(1783711511.262:897): avc: denied { write } for pid=7285 comm="syz.0.412" path="socket:[15276]" dev="sockfs" ino=15276 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 216.369654][ T9] usb 4-1: SerialNumber: syz [ 216.390625][ T9] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 216.410748][ T9] usbtest 4-1:1.0: couldn't get endpoints, -22 [ 216.424464][ T29] audit: type=1400 audit(1783711511.332:898): avc: denied { connect } for pid=7285 comm="syz.0.412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 216.453530][ T9] usbtest 4-1:1.0: probe with driver usbtest failed with error -22 [ 216.538333][ T29] audit: type=1400 audit(1783711511.492:899): avc: denied { map } for pid=7285 comm="syz.0.412" path="/dev/comedi4" dev="devtmpfs" ino=1279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 216.648830][ T24] libceph: connect (1)[c::]:6789 error -101 [ 216.651407][ T29] audit: type=1400 audit(1783711511.522:900): avc: denied { execute } for pid=7285 comm="syz.0.412" path="/dev/comedi4" dev="devtmpfs" ino=1279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 216.681117][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 216.705458][ T24] libceph: connect (1)[c::]:6789 error -101 [ 216.724598][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 216.764156][ T29] audit: type=1400 audit(1783711511.712:901): avc: denied { write } for pid=7293 comm="syz.2.414" name="igmp6" dev="proc" ino=4026533070 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 216.896667][ T7296] mmap: syz.2.414 (7296) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 216.995393][ T5342] libceph: connect (1)[c::]:6789 error -101 [ 217.003503][ T5342] libceph: mon0 (1)[c::]:6789 connect error [ 217.400623][ T7297] ceph: No mds server is up or the cluster is laggy [ 218.092967][ T5342] usb 4-1: USB disconnect, device number 13 [ 218.956520][ T7327] Driver unsupported XDP return value 0 on prog (id 52) dev N/A, expect packet loss! [ 221.389530][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 221.389544][ T29] audit: type=1400 audit(1783711516.342:908): avc: denied { append } for pid=7349 comm="syz.1.427" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 221.440741][ T7350] tmpfs: Cannot change global quota limit on remount [ 221.473128][ T29] audit: type=1400 audit(1783711516.392:909): avc: denied { mount } for pid=7349 comm="syz.1.427" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 221.496881][ T29] audit: type=1400 audit(1783711516.392:910): avc: denied { remount } for pid=7349 comm="syz.1.427" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 221.548543][ T29] audit: type=1400 audit(1783711516.472:911): avc: denied { write } for pid=7349 comm="syz.1.427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 221.600261][ T29] audit: type=1400 audit(1783711516.502:912): avc: denied { unmount } for pid=5609 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 221.718937][ T7355] autofs: Unknown parameter './file0' [ 221.724877][ T29] audit: type=1400 audit(1783711516.672:913): avc: denied { mounton } for pid=7351 comm="syz.3.429" path="/88/file0" dev="tmpfs" ino=468 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 222.225301][ T29] audit: type=1400 audit(1783711517.172:914): avc: denied { read write } for pid=7360 comm="syz.2.431" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 222.283518][ T191] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 222.307973][ T29] audit: type=1400 audit(1783711517.212:915): avc: denied { open } for pid=7360 comm="syz.2.431" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 222.379057][ T29] audit: type=1400 audit(1783711517.332:916): avc: denied { mount } for pid=7360 comm="syz.2.431" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 222.444947][ T191] usb 1-1: Using ep0 maxpacket: 16 [ 223.415273][ T191] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 223.425168][ T191] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 223.464269][ T191] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 223.473940][ T191] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.640965][ T191] usb 1-1: Manufacturer: ࠾ [ 223.647518][ T191] usb 1-1: SerialNumber: ᠌ [ 223.717642][ T29] audit: type=1400 audit(1783711518.672:917): avc: denied { unmount } for pid=5610 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 224.422041][ T191] cdc_ncm 1-1:1.0: bind() failure [ 224.460331][ T191] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 224.494235][ T191] cdc_ncm 1-1:1.1: bind() failure [ 224.685246][ T191] usb 1-1: USB disconnect, device number 12 [ 225.615913][ T5732] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 225.796541][ T5732] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 225.837665][ T5732] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 225.865795][ T5732] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 225.902011][ T5732] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 225.914945][ T5732] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.927704][ T5732] usb 4-1: config 0 descriptor?? [ 226.021295][ T24] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 226.219715][ T24] usb 1-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 226.259876][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.285283][ T24] usb 1-1: Product: syz [ 226.293671][ T24] usb 1-1: Manufacturer: syz [ 226.296851][ T191] libceph: connect (1)[c::]:6789 error -101 [ 226.302574][ T24] usb 1-1: SerialNumber: syz [ 226.320153][ T191] libceph: mon0 (1)[c::]:6789 connect error [ 226.329968][ T24] usb 1-1: config 0 descriptor?? [ 226.373905][ T5732] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 226.404782][ T5732] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 226.404829][ T5732] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 226.404850][ T5732] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 226.404869][ T5732] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 226.407221][ T5732] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 226.485157][ T5732] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 226.489263][ T7399] FAULT_INJECTION: forcing a failure. [ 226.489263][ T7399] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 226.489302][ T7399] CPU: 0 UID: 0 PID: 7399 Comm: syz.2.440 Not tainted syzkaller #0 PREEMPT(full) [ 226.489327][ T7399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 226.489337][ T7399] Call Trace: [ 226.489343][ T7399] [ 226.489349][ T7399] dump_stack_lvl+0x100/0x190 [ 226.489375][ T7399] should_fail_ex.cold+0x5/0xa [ 226.489398][ T7399] _copy_to_user+0x32/0xd0 [ 226.489421][ T7399] simple_read_from_buffer+0xcb/0x170 [ 226.489449][ T7399] proc_fail_nth_read+0x1af/0x230 [ 226.489473][ T7399] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 226.489496][ T7399] ? rw_verify_area+0xce/0x6d0 [ 226.489517][ T7399] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 226.489540][ T7399] vfs_read+0x1e4/0xb40 [ 226.489566][ T7399] ? __pfx_vfs_read+0x10/0x10 [ 226.489589][ T7399] ? __fget_files+0x215/0x3d0 [ 226.489618][ T7399] ? __fget_files+0x21f/0x3d0 [ 226.489649][ T7399] ksys_read+0x12a/0x250 [ 226.489672][ T7399] ? __pfx_ksys_read+0x10/0x10 [ 226.489701][ T7399] do_syscall_64+0x115/0x870 [ 226.489724][ T7399] ? clear_bhb_loop+0x40/0x90 [ 226.489745][ T7399] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.489761][ T7399] RIP: 0033:0x7f9f6695e68e [ 226.489775][ T7399] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 226.489790][ T7399] RSP: 002b:00007f9f678e3fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 226.489807][ T7399] RAX: ffffffffffffffda RBX: 00007f9f678e46c0 RCX: 00007f9f6695e68e [ 226.489818][ T7399] RDX: 000000000000000f RSI: 00007f9f678e40a0 RDI: 0000000000000004 [ 226.489827][ T7399] RBP: 00007f9f678e4090 R08: 0000000000000000 R09: 0000000000000000 [ 226.489836][ T7399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 226.489851][ T7399] R13: 00007f9f66c26038 R14: 00007f9f66c25fa0 R15: 00007ffed915acd8 [ 226.489875][ T7399] [ 226.584184][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 226.584199][ T29] audit: type=1400 audit(1783711521.532:925): avc: denied { mounton } for pid=7388 comm="syz.0.437" path="/syzcgroup/unified/syz0" dev="cgroup2" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 226.605672][ T191] libceph: connect (1)[c::]:6789 error -101 [ 226.606935][ T191] libceph: mon0 (1)[c::]:6789 connect error [ 226.630228][ T7389] SQUASHFS error: Failed to read block 0x0: -5 [ 226.630360][ T7389] unable to read squashfs_super_block [ 226.672640][ T805] usb 4-1: USB disconnect, device number 14 [ 226.879458][ T7404] NILFS (nullb0): couldn't find nilfs on the device [ 226.893815][ T29] audit: type=1400 audit(1783711521.842:926): avc: denied { write } for pid=7401 comm="syz.2.441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 227.047945][ T24] peak_usb 1-1:0.0 can0: unable to request usb[type=2 value=5] err=-71 [ 227.053197][ T29] audit: type=1400 audit(1783711522.002:927): avc: denied { setopt } for pid=7405 comm="syz.3.442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 227.057968][ T7406] netlink: 11 bytes leftover after parsing attributes in process `syz.3.442'. [ 227.063044][ T29] audit: type=1400 audit(1783711522.012:928): avc: denied { ioctl } for pid=7405 comm="syz.3.442" path="socket:[16502]" dev="sockfs" ino=16502 ioctlcmd=0x5838 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 227.124562][ T191] libceph: connect (1)[c::]:6789 error -101 [ 227.124725][ T191] libceph: mon0 (1)[c::]:6789 connect error [ 227.172776][ T29] audit: type=1400 audit(1783711522.122:929): avc: denied { bind } for pid=7405 comm="syz.3.442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 227.174194][ T29] audit: type=1400 audit(1783711522.122:930): avc: denied { append } for pid=7407 comm="syz.4.443" name="video7" dev="devtmpfs" ino=952 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 227.175516][ T29] audit: type=1400 audit(1783711522.132:931): avc: denied { write } for pid=7405 comm="syz.3.442" path="socket:[15701]" dev="sockfs" ino=15701 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 227.177199][ T7408] Bluetooth: MGMT ver 1.23 [ 227.219745][ T24] peak_usb 1-1:0.0: probe with driver peak_usb failed with error -71 [ 227.233846][ T24] usb 1-1: USB disconnect, device number 13 [ 227.428247][ T7411] netlink: 32 bytes leftover after parsing attributes in process `syz.4.444'. [ 227.618917][ T7394] ceph: No mds server is up or the cluster is laggy [ 229.881930][ T7432] FAULT_INJECTION: forcing a failure. [ 229.881930][ T7432] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 229.882326][ T7432] CPU: 0 UID: 0 PID: 7432 Comm: syz.3.451 Not tainted syzkaller #0 PREEMPT(full) [ 229.882349][ T7432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 229.882360][ T7432] Call Trace: [ 229.882366][ T7432] [ 229.882372][ T7432] dump_stack_lvl+0x100/0x190 [ 229.882403][ T7432] should_fail_ex.cold+0x5/0xa [ 229.882425][ T7432] _copy_from_user+0x2e/0xd0 [ 229.882448][ T7432] sctp_setsockopt+0x8cc/0xb370 [ 229.882475][ T7432] ? __pfx_sctp_setsockopt+0x10/0x10 [ 229.882495][ T7432] ? __fget_files+0x215/0x3d0 [ 229.882523][ T7432] ? selinux_socket_setsockopt+0x6a/0x80 [ 229.882543][ T7432] ? sock_common_setsockopt+0x2e/0xf0 [ 229.882563][ T7432] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 229.882585][ T7432] do_sock_setsockopt+0xf3/0x1d0 [ 229.882607][ T7432] __sys_setsockopt+0x195/0x220 [ 229.882637][ T7432] __x64_sys_setsockopt+0xbd/0x160 [ 229.882661][ T7432] ? x64_sys_call+0x896/0x1530 [ 229.882686][ T7432] do_syscall_64+0x115/0x870 [ 229.882708][ T7432] ? clear_bhb_loop+0x40/0x90 [ 229.882728][ T7432] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.882745][ T7432] RIP: 0033:0x7fdcc679de59 [ 229.882758][ T7432] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 229.882774][ T7432] RSP: 002b:00007fdcc7639028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 229.882791][ T7432] RAX: ffffffffffffffda RBX: 00007fdcc6a25fa0 RCX: 00007fdcc679de59 [ 229.882801][ T7432] RDX: 0000000000000009 RSI: 0000000000000084 RDI: 0000000000000003 [ 229.882811][ T7432] RBP: 00007fdcc7639090 R08: 000000000000009c R09: 0000000000000000 [ 229.882820][ T7432] R10: 0000200000002180 R11: 0000000000000246 R12: 0000000000000001 [ 229.882829][ T7432] R13: 00007fdcc6a26038 R14: 00007fdcc6a25fa0 R15: 00007ffdbb1fa8f8 [ 229.882851][ T7432] [ 230.244459][ T7437] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 230.785905][ T7441] FAULT_INJECTION: forcing a failure. [ 230.785905][ T7441] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 230.786013][ T7441] CPU: 1 UID: 0 PID: 7441 Comm: syz.3.455 Not tainted syzkaller #0 PREEMPT(full) [ 230.786035][ T7441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 230.786046][ T7441] Call Trace: [ 230.786052][ T7441] [ 230.786059][ T7441] dump_stack_lvl+0x100/0x190 [ 230.786086][ T7441] should_fail_ex.cold+0x5/0xa [ 230.786108][ T7441] _copy_from_iter+0x1f4/0x1690 [ 230.786131][ T7441] ? __asan_memset+0x23/0x50 [ 230.786158][ T7441] ? __pfx__copy_from_iter+0x10/0x10 [ 230.786178][ T7441] ? __pfx___alloc_skb+0x10/0x10 [ 230.786214][ T7441] netlink_sendmsg+0x808/0xda0 [ 230.786242][ T7441] ? __pfx_netlink_sendmsg+0x10/0x10 [ 230.786275][ T7441] ____sys_sendmsg+0xa4d/0xbe0 [ 230.786296][ T7441] ? __pfx_netlink_sendmsg+0x10/0x10 [ 230.786326][ T7441] ? __pfx_____sys_sendmsg+0x10/0x10 [ 230.786353][ T7441] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 230.786382][ T7441] ___sys_sendmsg+0x190/0x1e0 [ 230.786406][ T7441] ? __pfx____sys_sendmsg+0x10/0x10 [ 230.786426][ T7441] ? find_held_lock+0x2b/0x80 [ 230.786451][ T7441] ? rcu_preempt_deferred_qs_irqrestore+0x4fd/0xb90 [ 230.786483][ T7441] ? __rcu_read_unlock+0x26a/0x5e0 [ 230.786518][ T7441] __sys_sendmsg+0x160/0x210 [ 230.786536][ T7441] ? __pfx___sys_sendmsg+0x10/0x10 [ 230.786559][ T7441] ? trace_irq_enable.constprop.0+0x2f/0x160 [ 230.786587][ T7441] do_syscall_64+0x115/0x870 [ 230.786611][ T7441] ? clear_bhb_loop+0x40/0x90 [ 230.786632][ T7441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.786649][ T7441] RIP: 0033:0x7fdcc679de59 [ 230.786664][ T7441] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 230.786680][ T7441] RSP: 002b:00007fdcc7639028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 230.786697][ T7441] RAX: ffffffffffffffda RBX: 00007fdcc6a25fa0 RCX: 00007fdcc679de59 [ 230.786709][ T7441] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000003 [ 230.786719][ T7441] RBP: 00007fdcc7639090 R08: 0000000000000000 R09: 0000000000000000 [ 230.786729][ T7441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 230.786738][ T7441] R13: 00007fdcc6a26038 R14: 00007fdcc6a25fa0 R15: 00007ffdbb1fa8f8 [ 230.786761][ T7441] [ 230.986214][ T29] audit: type=1400 audit(1783711525.682:932): avc: denied { sqpoll } for pid=7438 comm="syz.0.454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 231.727691][ T5614] Bluetooth: hci4: Malformed LE Event: 0x0d [ 231.732096][ T7456] random: crng reseeded on system resumption [ 232.119136][ T29] audit: type=1400 audit(1783711527.072:933): avc: denied { connect } for pid=7450 comm="syz.0.457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 233.416812][ T7470] netlink: 'syz.0.463': attribute type 88 has an invalid length. [ 233.690426][ T5732] libceph: connect (1)[c::]:6789 error -101 [ 233.690588][ T5732] libceph: mon0 (1)[c::]:6789 connect error [ 233.852883][ T7478] xt_hashlimit: size too large, truncated to 1048576 [ 233.953793][ T5732] libceph: connect (1)[c::]:6789 error -101 [ 233.953954][ T5732] libceph: mon0 (1)[c::]:6789 connect error [ 234.442632][ T7472] ceph: No mds server is up or the cluster is laggy [ 234.455188][ T5732] libceph: connect (1)[c::]:6789 error -101 [ 234.461336][ T5732] libceph: mon0 (1)[c::]:6789 connect error [ 234.579728][ T7486] xt_hashlimit: overflow, try lower: 6/0 [ 235.365802][ T24] libceph: connect (1)[c::]:6789 error -101 [ 235.397242][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 235.448144][ T24] libceph: connect (1)[c::]:6789 error -101 [ 235.487113][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 235.532106][ T5732] libceph: connect (1)[c::]:6789 error -101 [ 235.538923][ T5732] libceph: mon0 (1)[c::]:6789 connect error [ 235.770140][ T29] audit: type=1400 audit(1783711530.722:934): avc: denied { create } for pid=7504 comm="syz.3.469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 235.800301][ T5342] libceph: connect (1)[c::]:6789 error -101 [ 235.805335][ T5732] libceph: connect (1)[c::]:6789 error -101 [ 235.825807][ T5342] libceph: mon0 (1)[c::]:6789 connect error [ 235.844314][ T29] audit: type=1400 audit(1783711530.772:935): avc: denied { map } for pid=7504 comm="syz.3.469" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 235.943422][ T29] audit: type=1400 audit(1783711530.772:936): avc: denied { mmap_zero } for pid=7504 comm="syz.3.469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 235.964058][ T5732] libceph: mon0 (1)[c::]:6789 connect error [ 236.082964][ T29] audit: type=1400 audit(1783711531.032:937): avc: denied { write } for pid=7504 comm="syz.3.469" name="mtd0" dev="devtmpfs" ino=704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 236.727679][ T7495] ceph: No mds server is up or the cluster is laggy [ 236.732752][ T5342] libceph: connect (1)[c::]:6789 error -101 [ 236.771529][ T5725] libceph: connect (1)[c::]:6789 error -101 [ 236.945823][ T7500] ceph: No mds server is up or the cluster is laggy [ 237.026156][ T5725] libceph: mon0 (1)[c::]:6789 connect error [ 237.125125][ T5342] libceph: mon0 (1)[c::]:6789 connect error [ 237.182175][ T29] audit: type=1400 audit(1783711531.032:938): avc: denied { open } for pid=7504 comm="syz.3.469" path="/dev/mtd0" dev="devtmpfs" ino=704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 238.512673][ T29] audit: type=1400 audit(1783711531.032:939): avc: denied { ioctl } for pid=7504 comm="syz.3.469" path="/dev/mtd0" dev="devtmpfs" ino=704 ioctlcmd=0x4d16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 238.525903][ T5725] libceph: connect (1)[c::]:6789 error -101 [ 239.511497][ T24] libceph: connect (1)[c::]:6789 error -101 [ 239.532631][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 239.590171][ T5725] libceph: mon0 (1)[c::]:6789 connect error [ 239.637168][ T5725] libceph: connect (1)[c::]:6789 error -101 [ 239.676767][ T5725] libceph: mon0 (1)[c::]:6789 connect error [ 239.748945][ T29] audit: type=1400 audit(1783711531.032:940): avc: denied { ioctl } for pid=7504 comm="syz.3.469" path="socket:[16024]" dev="sockfs" ino=16024 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 239.777770][ T29] audit: type=1400 audit(1783711531.032:941): avc: denied { bind } for pid=7504 comm="syz.3.469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 240.340837][ T29] audit: type=1400 audit(1783711534.942:942): avc: denied { read } for pid=7532 comm="syz.3.471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 241.097155][ T29] audit: type=1400 audit(1783711535.712:943): avc: denied { write } for pid=7534 comm="syz.4.472" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 241.419536][ T29] audit: type=1400 audit(1783711535.712:944): avc: denied { open } for pid=7534 comm="syz.4.472" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 241.492002][ T29] audit: type=1400 audit(1783711535.712:945): avc: denied { ioctl } for pid=7534 comm="syz.4.472" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4611 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 241.615764][ T29] audit: type=1400 audit(1783711536.552:946): avc: denied { create } for pid=7542 comm="syz.4.474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 241.659183][ T29] audit: type=1400 audit(1783711536.562:947): avc: denied { read } for pid=7542 comm="syz.4.474" path="socket:[16066]" dev="sockfs" ino=16066 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 242.398720][ T29] audit: type=1400 audit(1783711537.192:948): avc: denied { unlink } for pid=7546 comm="syz.2.475" name="#1" dev="tmpfs" ino=406 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 242.461097][ T29] audit: type=1400 audit(1783711537.232:949): avc: denied { mount } for pid=7546 comm="syz.2.475" name="/" dev="overlay" ino=401 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 243.169302][ T29] audit: type=1400 audit(1783711538.112:950): avc: denied { unmount } for pid=5610 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 243.971733][ T5614] Bluetooth: hci1: Malformed LE Event: 0x0d [ 243.993011][ T792] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.010567][ T7574] random: crng reseeded on system resumption [ 244.162634][ T46] libceph: connect (1)[c::]:6789 error -101 [ 244.191599][ T46] libceph: mon0 (1)[c::]:6789 connect error [ 244.223061][ T46] libceph: connect (1)[c::]:6789 error -101 [ 244.223356][ T46] libceph: mon0 (1)[c::]:6789 connect error [ 244.276597][ T792] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.322322][ T29] audit: type=1400 audit(1783711539.272:951): avc: denied { read } for pid=7581 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 244.324545][ T29] audit: type=1400 audit(1783711539.272:952): avc: denied { open } for pid=7581 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 244.376614][ T29] audit: type=1400 audit(1783711539.332:953): avc: denied { ioctl } for pid=7581 comm="syz-executor" path="socket:[16147]" dev="sockfs" ino=16147 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 244.378445][ T4926] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 244.382358][ T4926] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 244.387760][ T4926] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 244.391047][ T4926] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 244.397212][ T4926] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 244.406536][ T29] audit: type=1400 audit(1783711539.362:954): avc: denied { mounton } for pid=7581 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 244.532598][ T46] libceph: connect (1)[c::]:6789 error -101 [ 244.532750][ T46] libceph: mon0 (1)[c::]:6789 connect error [ 244.586528][ T792] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.926386][ T29] audit: type=1400 audit(1783711539.872:955): avc: denied { write } for pid=7584 comm="syz.1.487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 244.981703][ T792] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.036803][ T805] libceph: connect (1)[c::]:6789 error -101 [ 245.037098][ T805] libceph: mon0 (1)[c::]:6789 connect error [ 245.155754][ T5732] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 245.307419][ T5732] usb 2-1: Using ep0 maxpacket: 8 [ 245.311480][ T5732] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 245.311531][ T5732] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 245.313565][ T5732] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 245.313589][ T5732] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.313608][ T5732] usb 2-1: Product: syz [ 245.313622][ T5732] usb 2-1: Manufacturer: syz [ 245.313636][ T5732] usb 2-1: SerialNumber: syz [ 245.341840][ T5732] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 245.352813][ T5732] usbtest 2-1:1.0: couldn't get endpoints, -22 [ 245.396574][ T7573] ceph: No mds server is up or the cluster is laggy [ 245.519849][ T29] audit: type=1400 audit(1783711540.462:956): avc: denied { search } for pid=5271 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 245.580490][ T5732] usbtest 2-1:1.0: probe with driver usbtest failed with error -22 [ 245.593885][ T792] dummy0: left allmulticast mode [ 245.614570][ T792] dummy0: left promiscuous mode [ 245.626615][ T792] bridge0: port 3(dummy0) entered disabled state [ 245.649051][ T792] bridge_slave_1: left allmulticast mode [ 245.662437][ T792] bridge_slave_1: left promiscuous mode [ 245.670550][ T29] audit: type=1400 audit(1783711540.462:957): avc: denied { search } for pid=5271 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 245.715452][ T792] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.737405][ T792] bridge_slave_0: left allmulticast mode [ 245.751759][ T792] bridge_slave_0: left promiscuous mode [ 245.768238][ T792] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.954304][ T805] libceph: connect (1)[c::]:6789 error -101 [ 246.006866][ T805] libceph: mon0 (1)[c::]:6789 connect error [ 246.118635][ T805] libceph: connect (1)[c::]:6789 error -101 [ 246.152064][ T805] libceph: mon0 (1)[c::]:6789 connect error [ 246.211441][ T792] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 246.278729][ T792] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 246.310524][ T792] bond0 (unregistering): Released all slaves [ 246.332322][ T792] bond1 (unregistering): Released all slaves [ 246.400604][ T792] bond2 (unregistering): Released all slaves [ 246.435720][ T46] libceph: connect (1)[c::]:6789 error -101 [ 246.442541][ T46] libceph: mon0 (1)[c::]:6789 connect error [ 246.449194][ T5614] Bluetooth: hci4: command tx timeout [ 246.652718][ T7597] ceph: No mds server is up or the cluster is laggy [ 247.659110][ T46] usb 2-1: USB disconnect, device number 15 [ 248.216505][ T5271] 8021q: adding VLAN 0 to HW filter on device eth1 [ 248.546792][ T7623] NILFS (nullb0): couldn't find nilfs on the device [ 248.610890][ T5614] Bluetooth: hci4: command tx timeout [ 248.742248][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 248.742267][ T29] audit: type=1400 audit(1783711543.542:976): avc: denied { read } for pid=7620 comm="syz.2.490" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 248.934286][ T29] audit: type=1400 audit(1783711543.552:977): avc: denied { open } for pid=7620 comm="syz.2.490" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 249.160916][ T29] audit: type=1400 audit(1783711543.552:978): avc: denied { ioctl } for pid=7620 comm="syz.2.490" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 249.403769][ T29] audit: type=1400 audit(1783711543.782:979): avc: denied { mount } for pid=7618 comm="syz.1.489" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 249.711134][ T7636] sg_write: data in/out 614400/136 bytes for SCSI command 0x0-- guessing data in; [ 249.711134][ T7636] program syz.3.493 not setting count and/or reply_len properly [ 250.339436][ T29] audit: type=1400 audit(1783711544.352:980): avc: denied { bind } for pid=7632 comm="syz.3.493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 250.382312][ T29] audit: type=1400 audit(1783711544.662:981): avc: denied { append } for pid=7632 comm="syz.3.493" name="sg0" dev="devtmpfs" ino=711 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 250.503696][ T7626] 8021q: adding VLAN 0 to HW filter on device bond1 [ 250.598874][ T7641] random: crng reseeded on system resumption [ 250.757356][ T5614] Bluetooth: hci1: Malformed LE Event: 0x0d [ 250.765279][ T5614] Bluetooth: hci4: command tx timeout [ 251.389116][ T792] hsr_slave_0: left promiscuous mode [ 251.424823][ T792] hsr_slave_1: left promiscuous mode [ 251.458472][ T792] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 251.493606][ T792] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 251.540279][ T792] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 251.587891][ T792] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 251.617921][ T29] audit: type=1400 audit(1783711546.562:982): avc: denied { write } for pid=7645 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 251.669850][ T46] libceph: connect (1)[c::]:6789 error -101 [ 251.704741][ T46] libceph: mon0 (1)[c::]:6789 connect error [ 251.737614][ T46] libceph: connect (1)[c::]:6789 error -101 [ 251.762837][ T46] libceph: mon0 (1)[c::]:6789 connect error [ 251.790895][ T792] veth1_macvtap: left promiscuous mode [ 251.801932][ T7673] loop5: detected capacity change from 0 to 7 [ 251.819060][ T9] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 251.873534][ T792] veth0_macvtap: left promiscuous mode [ 251.892093][ T29] audit: type=1400 audit(1783711546.842:983): avc: denied { write } for pid=7672 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 251.914765][ T7673] Dev loop5: unable to read RDB block 7 [ 251.924446][ T792] veth1_vlan: left promiscuous mode [ 251.935390][ T7673] loop5: AHDI p1 p3 p4 [ 251.940683][ T792] veth0_vlan: left promiscuous mode [ 251.953637][ T7673] loop5: partition table partially beyond EOD, truncated [ 251.985053][ T7673] loop5: p1 size 100663296 extends beyond EOD, [ 252.042445][ T9] usb 2-1: config 7 has an invalid interface number: 2 but max is 0 [ 252.045532][ T46] libceph: connect (1)[c::]:6789 error -101 [ 252.050251][ T9] usb 2-1: config 7 has no interface number 0 [ 252.071794][ T46] libceph: mon0 (1)[c::]:6789 connect error [ 252.081033][ T7673] truncated [ 252.109442][ T9] usb 2-1: config 7 interface 2 has no altsetting 0 [ 252.133628][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=2888, bcdDevice=64.e3 [ 252.151934][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.169813][ T9] usb 2-1: Product: syz [ 252.179626][ T9] usb 2-1: Manufacturer: syz [ 252.192372][ T7673] loop5: p3 size 4261412863 extends beyond EOD, truncated [ 252.192476][ T9] usb 2-1: SerialNumber: syz [ 252.224661][ T46] libceph: connect (1)[c::]:6789 error -101 [ 252.242947][ T46] libceph: mon0 (1)[c::]:6789 connect error [ 252.396010][ T5725] libceph: connect (1)[c::]:6789 error -101 [ 252.429619][ T5725] libceph: mon0 (1)[c::]:6789 connect error [ 252.467997][ T7675] Dev loop5: unable to read RDB block 7 [ 252.640919][ T46] libceph: connect (1)[c::]:6789 error -101 [ 252.648266][ T46] libceph: mon0 (1)[c::]:6789 connect error [ 252.649836][ T7675] loop5: AHDI p1 p3 p4 [ 252.655400][ T46] libceph: connect (1)[c::]:6789 error -101 [ 252.666452][ T46] libceph: mon0 (1)[c::]:6789 connect error [ 252.698239][ T7675] loop5: partition table partially beyond EOD, truncated [ 252.708890][ T7675] loop5: p1 size 100663296 extends beyond EOD, truncated [ 252.715191][ T5725] libceph: connect (1)[c::]:6789 error -101 [ 252.717757][ T7685] Invalid ELF header type: 3 != 1 [ 252.722444][ T29] audit: type=1400 audit(1783711547.672:984): avc: denied { module_load } for pid=7665 comm="syz.1.501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 252.759872][ T7675] loop5: p3 size 4261412863 extends beyond EOD, truncated [ 252.766736][ T5725] libceph: mon0 (1)[c::]:6789 connect error [ 252.844946][ T5614] Bluetooth: hci4: command tx timeout [ 252.977098][ T7668] ceph: No mds server is up or the cluster is laggy [ 253.088615][ T7677] ceph: No mds server is up or the cluster is laggy [ 253.166982][ T792] team0 (unregistering): Port device team_slave_1 removed [ 253.179603][ T46] libceph: connect (1)[c::]:6789 error -101 [ 253.189601][ T46] libceph: mon0 (1)[c::]:6789 connect error [ 253.229738][ T792] team0 (unregistering): Port device team_slave_0 removed [ 253.260220][ T7682] ceph: No mds server is up or the cluster is laggy [ 253.295187][ T5725] libceph: connect (1)[c::]:6789 error -101 [ 253.311089][ T5725] libceph: mon0 (1)[c::]:6789 connect error [ 253.617517][ T5271] 8021q: adding VLAN 0 to HW filter on device eth3 [ 253.657516][ T29] audit: type=1400 audit(1783711548.612:985): avc: denied { execute } for pid=7689 comm="syz.0.502" name="file2" dev="tmpfs" ino=595 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 253.790237][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 253.790263][ T29] audit: type=1400 audit(1783711548.752:989): avc: denied { create } for pid=7692 comm="syz.2.503" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 253.822831][ T29] audit: type=1400 audit(1783711548.762:990): avc: denied { mounton } for pid=7692 comm="syz.2.503" path="/81/file0" dev="tmpfs" ino=446 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 253.848913][ T29] audit: type=1400 audit(1783711548.762:991): avc: denied { mount } for pid=7692 comm="syz.2.503" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 254.005114][ T29] audit: type=1400 audit(1783711548.912:992): avc: denied { unlink } for pid=5610 comm="syz-executor" name="file0" dev="tmpfs" ino=446 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 254.122138][ T7697] sg_write: data in/out 614400/136 bytes for SCSI command 0x0-- guessing data in; [ 254.122138][ T7697] program syz.0.504 not setting count and/or reply_len properly [ 254.941062][ T7707] xt_hashlimit: size too large, truncated to 1048576 [ 255.212146][ T29] audit: type=1400 audit(1783711550.102:993): avc: denied { read } for pid=7701 comm="syz.2.505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 255.335809][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.345674][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.404757][ T9] cdc_subset 2-1:7.2: probe with driver cdc_subset failed with error -71 [ 255.475010][ T191] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 255.514200][ T9] usb 2-1: USB disconnect, device number 16 [ 255.589728][ T7581] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.618063][ T7581] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.661101][ T7581] bridge_slave_0: entered allmulticast mode [ 255.672185][ T191] usb 3-1: Using ep0 maxpacket: 8 [ 255.691981][ T7581] bridge_slave_0: entered promiscuous mode [ 255.701133][ T191] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 255.718526][ T7581] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.735700][ T191] usb 3-1: config 179 has no interface number 0 [ 255.753651][ T7581] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.758920][ T7727] netlink: 12 bytes leftover after parsing attributes in process `syz.1.510'. [ 255.763730][ T191] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 255.791180][ T7581] bridge_slave_1: entered allmulticast mode [ 255.819785][ T7581] bridge_slave_1: entered promiscuous mode [ 255.835174][ T191] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 255.839259][ T5614] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 255.871911][ T191] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 255.981227][ T191] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 256.268945][ T7581] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 256.365000][ T191] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 256.384979][ T191] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 256.403387][ T191] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.407711][ T7581] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 256.494549][ T7717] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 256.511948][ T29] audit: type=1400 audit(1783711551.462:994): avc: denied { write } for pid=7698 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 256.591194][ T7581] team0: Port device team_slave_0 added [ 256.661019][ T7581] team0: Port device team_slave_1 added [ 256.936309][ T7581] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 256.943979][ T7581] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 257.000570][ T29] audit: type=1400 audit(1783711551.952:995): avc: denied { write } for pid=7744 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 257.549579][ T7581] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 257.696771][ T7581] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 257.718234][ T46] usb 3-1: USB disconnect, device number 12 [ 257.718279][ C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 257.732550][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 257.784022][ T7581] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 257.795076][ T191] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 257.815307][ T7581] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 257.970367][ T5271] 8021q: adding VLAN 0 to HW filter on device eth4 [ 258.040567][ T7751] sg_write: data in/out 614400/136 bytes for SCSI command 0x0-- guessing data in; [ 258.040567][ T7751] program syz.0.516 not setting count and/or reply_len properly [ 258.147675][ T191] usb 4-1: Using ep0 maxpacket: 8 [ 258.157167][ T191] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 258.184371][ T191] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 258.192911][ T7581] hsr_slave_0: entered promiscuous mode [ 258.218638][ T191] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 258.219151][ T7581] hsr_slave_1: entered promiscuous mode [ 258.238648][ T7754] 9p: Bad value for 'wfdno' [ 258.243281][ T29] audit: type=1400 audit(1783711553.192:996): avc: denied { mounton } for pid=7752 comm="syz.2.515" path="/83/file0" dev="tmpfs" ino=457 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 258.263334][ T7581] debugfs: 'hsr0' already exists in 'hsr' [ 258.272432][ T191] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.290330][ T191] usb 4-1: Product: syz [ 258.296943][ T7581] Cannot create hsr debugfs directory [ 258.305686][ T191] usb 4-1: Manufacturer: syz [ 258.316332][ T7753] kvm: requested 2514 ns i8254 timer period limited to 200000 ns [ 258.326083][ T191] usb 4-1: SerialNumber: syz [ 258.348559][ T191] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 258.379425][ T191] usbtest 4-1:1.0: couldn't get endpoints, -22 [ 258.419522][ T191] usbtest 4-1:1.0: probe with driver usbtest failed with error -22 [ 258.462794][ T29] audit: type=1400 audit(1783711553.412:997): avc: denied { ioctl } for pid=7765 comm="syz.0.518" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x64c2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 258.772941][ T191] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 258.786177][ T29] audit: type=1400 audit(1783711553.672:998): avc: denied { append } for pid=7771 comm="syz.2.519" name="001" dev="devtmpfs" ino=745 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 258.976526][ T191] usb 1-1: Using ep0 maxpacket: 16 [ 258.983639][ T29] audit: type=1400 audit(1783711553.932:999): avc: denied { write } for pid=7759 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 259.022259][ T191] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 259.053938][ T191] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 259.069348][ T191] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.097317][ T7782] netlink: 8 bytes leftover after parsing attributes in process `syz.2.521'. [ 259.108582][ T191] usb 1-1: Product: syz [ 259.122041][ T191] usb 1-1: Manufacturer: syz [ 259.132683][ T191] usb 1-1: SerialNumber: syz [ 259.154249][ T191] usb 1-1: config 0 descriptor?? [ 259.308586][ T7783] binder: 7780:7783 ioctl c0306201 200000000080 returned -14 [ 259.318086][ T7783] binder: BINDER_SET_CONTEXT_MGR already set [ 259.325584][ T7783] binder: 7780:7783 ioctl 4018620d 200000000040 returned -16 [ 259.333498][ T7783] binder: 7780:7783 ioctl c0306201 2000000003c0 returned -14 [ 259.516898][ T29] audit: type=1400 audit(1783711554.262:1000): avc: denied { read write } for pid=7780 comm="syz.2.521" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 259.695077][ T191] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 259.725218][ T46] usb 4-1: USB disconnect, device number 15 [ 259.881089][ T29] audit: type=1400 audit(1783711554.262:1001): avc: denied { open } for pid=7780 comm="syz.2.521" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 260.155644][ T191] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 260.538300][ T29] audit: type=1400 audit(1783711554.262:1002): avc: denied { ioctl } for pid=7780 comm="syz.2.521" path="/dev/binderfs/binder0" dev="binder" ino=13 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 260.564396][ T29] audit: type=1400 audit(1783711554.262:1003): avc: denied { set_context_mgr } for pid=7780 comm="syz.2.521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 260.585271][ T29] audit: type=1400 audit(1783711554.282:1004): avc: denied { map } for pid=7780 comm="syz.2.521" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 260.710785][ T29] audit: type=1400 audit(1783711555.662:1005): avc: denied { ioctl } for pid=7786 comm="syz.2.522" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 ioctlcmd=0xf517 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 260.799895][ T7789] binder: 7786:7789 ioctl c0306201 0 returned -14 [ 260.815512][ T7789] binder: 7786:7789 ioctl c0306201 0 returned -14 [ 260.943107][ T29] audit: type=1400 audit(1783711555.882:1006): avc: denied { write } for pid=7793 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 261.036622][ T7797] xt_hashlimit: size too large, truncated to 1048576 [ 261.216400][ T7581] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 261.306811][ T7581] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 261.349995][ T7581] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 261.399769][ T7581] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 261.425402][ T191] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 261.437975][ T5271] 8021q: adding VLAN 0 to HW filter on device eth2 [ 261.452860][ T7581] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 261.495576][ T7581] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 261.526598][ T7581] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 261.572583][ T191] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 261.585053][ T5342] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 261.599924][ T7581] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 261.611686][ T29] audit: type=1400 audit(1783711556.542:1007): avc: denied { append } for pid=7804 comm="syz.0.526" name="loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 261.612645][ T191] em28xx 1-1:0.0: board has no eeprom [ 261.838590][ T191] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 261.855358][ T5342] usb 4-1: Using ep0 maxpacket: 8 [ 261.870426][ T191] em28xx 1-1:0.0: dvb set to bulk mode. [ 261.875195][ T5342] usb 4-1: New USB device found, idVendor=13d8, idProduct=0021, bcdDevice=30.62 [ 261.901761][ T9] em28xx 1-1:0.0: Binding DVB extension [ 261.922865][ T5342] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.940163][ T191] usb 1-1: USB disconnect, device number 14 [ 261.987418][ T5342] usb 4-1: Product: syz [ 261.996348][ T191] em28xx 1-1:0.0: Disconnecting em28xx [ 262.003182][ T5342] usb 4-1: Manufacturer: syz [ 262.028098][ T5342] usb 4-1: SerialNumber: syz [ 262.080608][ T5342] usb 4-1: config 0 descriptor?? [ 262.134089][ T9] em28xx 1-1:0.0: Registering input extension [ 262.142521][ T5342] usb 4-1: selecting invalid altsetting 3 [ 262.156184][ T5342] comedi comedi5: could not set alternate setting 3 in high speed [ 262.167504][ T191] em28xx 1-1:0.0: Closing input extension [ 262.175984][ T7581] 8021q: adding VLAN 0 to HW filter on device bond0 [ 262.190168][ T5342] usbduxsigma 4-1:0.0: driver 'usbduxsigma' failed to auto-configure device. [ 262.238693][ T5342] usbduxsigma 4-1:0.0: probe with driver usbduxsigma failed with error -22 [ 262.258386][ T7581] 8021q: adding VLAN 0 to HW filter on device team0 [ 262.308597][ T46] usb 4-1: USB disconnect, device number 16 [ 262.323713][ T5994] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.330883][ T5994] bridge0: port 1(bridge_slave_0) entered forwarding state [ 262.381053][ T191] em28xx 1-1:0.0: Freeing device [ 262.389320][ T5993] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.396482][ T5993] bridge0: port 2(bridge_slave_1) entered forwarding state [ 262.718181][ T191] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 262.817688][ T5614] Bluetooth: hci1: Malformed LE Event: 0x0d [ 262.843770][ T7835] random: crng reseeded on system resumption [ 262.890250][ T191] usb 1-1: Using ep0 maxpacket: 32 [ 262.923392][ T191] usb 1-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 262.964128][ T191] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.992066][ T191] usb 1-1: Product: syz [ 263.012599][ T191] usb 1-1: Manufacturer: syz [ 263.026454][ T191] usb 1-1: SerialNumber: syz [ 263.050187][ T191] usb 1-1: config 0 descriptor?? [ 263.080752][ T191] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 263.113478][ T191] dvb-usb: bulk message failed: -22 (4/0) [ 263.133227][ T191] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 263.168306][ T191] dvb-usb: bulk message failed: -22 (5/0) [ 263.201399][ T191] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 263.369697][ T191] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 263.381637][ T191] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 263.392421][ T191] usb 1-1: media controller created [ 263.722378][ T191] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 263.828925][ T191] usb 1-1: selecting invalid altsetting 3 [ 263.857057][ T191] ttusb2: set interface to alts=3 failed [ 263.906924][ T7819] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 263.941618][ T7819] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 263.955230][ T7581] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 263.971844][ T5342] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 264.038493][ T191] DVB: Unable to find symbol tda10086_attach() [ 264.066351][ T191] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 264.094839][ T191] dvb-usb: bulk message failed: -22 (4/0) [ 264.124028][ T191] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 264.157798][ T191] dvb-usb: bulk message failed: -22 (5/0) [ 264.180637][ T191] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 264.195233][ T5342] usb 4-1: Using ep0 maxpacket: 8 [ 264.217780][ T191] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 264.218748][ T5342] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 264.247013][ T5342] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 264.256334][ T191] usb 1-1: USB disconnect, device number 15 [ 264.277935][ T5342] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 264.311240][ T5342] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.358230][ T5342] usb 4-1: Product: syz [ 264.363211][ T5342] usb 4-1: Manufacturer: syz [ 264.377632][ T5342] usb 4-1: SerialNumber: syz [ 264.472025][ T191] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 264.472881][ T5342] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 264.515978][ T5342] usbtest 4-1:1.0: couldn't get endpoints, -22 [ 264.550520][ T5342] usbtest 4-1:1.0: probe with driver usbtest failed with error -22 [ 264.754792][ T7581] veth0_vlan: entered promiscuous mode [ 264.786868][ T7581] veth1_vlan: entered promiscuous mode [ 264.871335][ T7581] veth0_macvtap: entered promiscuous mode [ 264.900002][ T7581] veth1_macvtap: entered promiscuous mode [ 264.962600][ T7581] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 265.001139][ T7581] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 265.049654][ T5994] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.088389][ T5994] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.099041][ T5994] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.112503][ T5994] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.573090][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.594134][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.706132][ T5725] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 266.072239][ T5993] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 266.086886][ T5725] usb 1-1: Using ep0 maxpacket: 16 [ 266.104212][ T5725] usb 1-1: too many configurations: 60, using maximum allowed: 8 [ 266.113618][ T5993] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 266.163301][ T5725] usb 1-1: New USB device found, idVendor=0471, idProduct=032c, bcdDevice=ba.e9 [ 266.175663][ T29] audit: type=1400 audit(1783711561.112:1008): avc: denied { mounton } for pid=7581 comm="syz-executor" path="/root/syzkaller.efFoIY/syz-tmp" dev="sda1" ino=2048 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 266.180043][ T5725] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=204 [ 266.241680][ T46] usb 4-1: USB disconnect, device number 17 [ 266.264829][ T29] audit: type=1400 audit(1783711561.172:1009): avc: denied { mount } for pid=7581 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 266.325489][ T5725] usb 1-1: Product: syz [ 266.344271][ T5725] usb 1-1: Manufacturer: syz [ 266.372214][ T5725] usb 1-1: SerialNumber: syz [ 266.395283][ T29] audit: type=1400 audit(1783711561.172:1010): avc: denied { mounton } for pid=7581 comm="syz-executor" path="/root/syzkaller.efFoIY/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 266.434546][ T5725] usb 1-1: config 0 descriptor?? [ 266.442239][ T29] audit: type=1400 audit(1783711561.202:1011): avc: denied { mounton } for pid=7581 comm="syz-executor" path="/root/syzkaller.efFoIY/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=17375 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 266.506148][ T5725] pwc: Philips SPC 880NC USB webcam detected. [ 266.553392][ T29] audit: type=1400 audit(1783711561.312:1012): avc: denied { mounton } for pid=7581 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 266.675149][ T29] audit: type=1400 audit(1783711561.312:1013): avc: denied { mount } for pid=7581 comm="syz-executor" name="/" dev="gadgetfs" ino=7521 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 266.763490][ T29] audit: type=1400 audit(1783711561.322:1014): avc: denied { mount } for pid=7581 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 266.840202][ T29] audit: type=1400 audit(1783711561.322:1015): avc: denied { mounton } for pid=7581 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 267.507307][ T7881] FAULT_INJECTION: forcing a failure. [ 267.507307][ T7881] name failslab, interval 1, probability 0, space 0, times 0 [ 267.520336][ T7881] CPU: 0 UID: 0 PID: 7881 Comm: syz.5.538 Not tainted syzkaller #0 PREEMPT(full) [ 267.520365][ T7881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 267.520375][ T7881] Call Trace: [ 267.520382][ T7881] [ 267.520389][ T7881] dump_stack_lvl+0x100/0x190 [ 267.520414][ T7881] should_fail_ex.cold+0x5/0xa [ 267.520438][ T7881] should_failslab+0xc2/0x120 [ 267.520458][ T7881] __kvmalloc_node_noprof+0x116/0x970 [ 267.520478][ T7881] ? traverse.part.0.constprop.0+0x397/0x650 [ 267.520509][ T7881] traverse.part.0.constprop.0+0x397/0x650 [ 267.520541][ T7881] seq_read_iter+0x93f/0x1270 [ 267.520571][ T7881] ? lockdep_hardirqs_on+0x78/0x100 [ 267.520597][ T7881] seq_read+0x344/0x4d0 [ 267.520621][ T7881] ? __pfx_seq_read+0x10/0x10 [ 267.520649][ T7881] ? rw_verify_area+0xa0/0x6d0 [ 267.520668][ T7881] ? selinux_file_permission+0x20/0x6d0 [ 267.520695][ T7881] ? selinux_file_permission+0x8f/0x6d0 [ 267.520719][ T7881] ? __pfx_seq_read+0x10/0x10 [ 267.520743][ T7881] proc_reg_read+0x120/0x330 [ 267.520759][ T7881] ? __pfx_proc_reg_read+0x10/0x10 [ 267.520776][ T7881] vfs_read+0x1e4/0xb40 [ 267.520801][ T7881] ? __pfx_vfs_read+0x10/0x10 [ 267.520822][ T7881] ? find_held_lock+0x2b/0x80 [ 267.520850][ T7881] ? __fget_files+0x215/0x3d0 [ 267.520874][ T7881] ? __fget_files+0x215/0x3d0 [ 267.520902][ T7881] ? __fget_files+0x21f/0x3d0 [ 267.520933][ T7881] __x64_sys_pread64+0x1eb/0x250 [ 267.520957][ T7881] ? __pfx___x64_sys_pread64+0x10/0x10 [ 267.520988][ T7881] do_syscall_64+0x115/0x870 [ 267.521011][ T7881] ? clear_bhb_loop+0x40/0x90 [ 267.521032][ T7881] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.521049][ T7881] RIP: 0033:0x7f649a19de59 [ 267.521063][ T7881] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 267.521078][ T7881] RSP: 002b:00007f649b111028 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 267.521094][ T7881] RAX: ffffffffffffffda RBX: 00007f649a426090 RCX: 00007f649a19de59 [ 267.521105][ T7881] RDX: 00000000000000ab RSI: 0000200000002100 RDI: 0000000000000003 [ 267.521115][ T7881] RBP: 00007f649b111090 R08: 0000000000000000 R09: 0000000000000000 [ 267.521124][ T7881] R10: 000000000000009a R11: 0000000000000246 R12: 0000000000000001 [ 267.521133][ T7881] R13: 00007f649a426128 R14: 00007f649a426090 R15: 00007ffd2bf610b8 [ 267.521157][ T7881] [ 268.456807][ T29] audit: type=1400 audit(1783711562.722:1016): avc: denied { setopt } for pid=7879 comm="syz.5.538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 268.944307][ T29] audit: type=1400 audit(1783711562.722:1017): avc: denied { bind } for pid=7879 comm="syz.5.538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 269.202964][ T7862] bridge0: port 3(dummy0) entered disabled state [ 269.209557][ T7862] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.217089][ T7862] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.720761][ T7862] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 269.753867][ T7862] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 271.228143][ T5725] pwc: Warning: more than 1 configuration available. [ 271.311961][ T5725] pwc: Failed to set LED on/off time (-71) [ 271.340097][ T5725] pwc: send_video_command error -71 [ 271.397337][ T7906] batadv_slave_1: entered promiscuous mode [ 271.398864][ T5725] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 271.404311][ T7906] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 271.419408][ T7906] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 271.435873][ T5725] Philips webcam 1-1:0.0: probe with driver Philips webcam failed with error -71 [ 271.474227][ T5725] usb 1-1: USB disconnect, device number 16 [ 271.536378][ T3334] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.578612][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 271.578628][ T29] audit: type=1400 audit(1783711566.532:1020): avc: denied { create } for pid=7915 comm="syz.0.544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 271.647365][ T3334] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.077662][ T3334] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.102147][ T3334] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.945334][ T7936] netlink: 'syz.1.549': attribute type 4 has an invalid length. [ 272.977190][ T7900] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 272.978977][ T7936] netlink: 'syz.1.549': attribute type 5 has an invalid length. [ 273.035944][ T7936] netlink: 'syz.1.549': attribute type 5 has an invalid length. [ 273.058390][ T7936] netlink: 3269 bytes leftover after parsing attributes in process `syz.1.549'. [ 273.075368][ T29] audit: type=1400 audit(1783711568.012:1021): avc: denied { lock } for pid=7934 comm="syz.1.549" path="socket:[19477]" dev="sockfs" ino=19477 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 273.198181][ T7940] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 273.208555][ T7940] netlink: 20 bytes leftover after parsing attributes in process `syz.1.549'. [ 273.217650][ T7940] netlink: 9 bytes leftover after parsing attributes in process `syz.1.549'. [ 273.315420][ T7900] usb 4-1: Using ep0 maxpacket: 8 [ 273.333755][ T7900] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 273.353319][ T7900] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 273.426014][ T7900] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 273.461886][ T7900] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.491982][ T7900] usb 4-1: Product: syz [ 273.526789][ T7900] usb 4-1: Manufacturer: syz [ 273.552820][ T7900] usb 4-1: SerialNumber: syz [ 273.585735][ T7900] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 273.631769][ T7900] usbtest 4-1:1.0: couldn't get endpoints, -22 [ 273.663531][ T7900] usbtest 4-1:1.0: probe with driver usbtest failed with error -22 [ 273.858443][ T7952] netlink: 'syz.1.553': attribute type 1 has an invalid length. [ 273.898785][ T7952] bond3: entered promiscuous mode [ 273.908413][ T7952] 8021q: adding VLAN 0 to HW filter on device bond3 [ 273.953531][ T7952] 8021q: adding VLAN 0 to HW filter on device bond3 [ 273.963102][ T7952] bond3: (slave ipip0): The slave device specified does not support setting the MAC address [ 273.974710][ T7952] bond3: (slave ipip0): Setting fail_over_mac to active for active-backup mode [ 273.991460][ T7952] bond3: (slave ipip0): making interface the new active one [ 274.000624][ T7952] ipip0: entered promiscuous mode [ 274.016128][ T7952] bond3: (slave ipip0): Enslaving as an active interface with an up link [ 274.066529][ T7900] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 274.108830][ T29] audit: type=1400 audit(1783711569.062:1022): avc: denied { create } for pid=7956 comm="syz.0.554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 274.163795][ T7957] 9p: Bad value for 'cachetag' [ 274.198486][ T29] audit: type=1400 audit(1783711569.142:1023): avc: denied { ioctl } for pid=7956 comm="syz.0.554" path="socket:[19512]" dev="sockfs" ino=19512 ioctlcmd=0xaebd scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 274.269440][ T7900] usb 6-1: Using ep0 maxpacket: 32 [ 274.732949][ T7900] usb 6-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 274.746022][ T29] audit: type=1400 audit(1783711569.252:1024): avc: denied { create } for pid=7960 comm="syz.1.555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 274.776165][ T7900] usb 6-1: config 0 interface 0 has no altsetting 0 [ 274.790984][ T7900] usb 6-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 274.801772][ T29] audit: type=1400 audit(1783711569.252:1025): avc: denied { bind } for pid=7960 comm="syz.1.555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 274.824156][ T7900] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.863078][ T7900] usb 6-1: config 0 descriptor?? [ 274.873847][ T29] audit: type=1400 audit(1783711569.692:1026): avc: denied { write } for pid=7956 comm="syz.0.554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 274.936751][ T29] audit: type=1400 audit(1783711569.772:1027): avc: denied { write } for pid=7943 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 275.144359][ T29] audit: type=1400 audit(1783711570.092:1028): avc: denied { write } for pid=7966 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 275.222902][ T5725] usb 4-1: USB disconnect, device number 18 [ 275.334794][ T7900] corsair-psu 0003:1B1C:1C09.0003: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.5-1/input0 [ 275.526698][ T7908] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 275.666219][ T7908] usb 3-1: device descriptor read/64, error -71 [ 275.795005][ T5725] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 275.860226][ T7981] netlink: 'syz.0.560': attribute type 1 has an invalid length. [ 275.950219][ T7908] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 276.022538][ T7990] netlink: 28 bytes leftover after parsing attributes in process `syz.0.560'. [ 276.046234][ T5725] usb 4-1: Using ep0 maxpacket: 8 [ 276.093171][ T5725] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 276.135089][ T7908] usb 3-1: device descriptor read/64, error -71 [ 276.190552][ T5725] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 276.283336][ T7908] usb usb3-port1: attempt power cycle [ 276.350381][ T5725] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 276.462339][ T5725] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.561979][ T5725] usb 4-1: Product: syz [ 276.616960][ T5725] usb 4-1: Manufacturer: syz [ 276.682734][ T5725] usb 4-1: SerialNumber: syz [ 276.728210][ T7908] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 276.828182][ T7908] usb 3-1: device descriptor read/8, error -71 [ 276.874261][ T5725] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 277.061582][ T5725] usbtest 4-1:1.0: couldn't get endpoints, -22 [ 277.118293][ T5725] usbtest 4-1:1.0: probe with driver usbtest failed with error -22 [ 277.153356][ T7908] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 277.166087][ T7983] bond1: (slave geneve2): making interface the new active one [ 277.230802][ T5725] usb 4-1: USB disconnect, device number 19 [ 277.238756][ T7983] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 277.251067][ T7908] usb 3-1: device descriptor read/8, error -71 [ 277.320226][ T7990] 8021q: adding VLAN 0 to HW filter on device bond1 [ 277.352659][ T792] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 277.374561][ T7900] corsair-psu 0003:1B1C:1C09.0003: unable to initialize device (-71) [ 277.385549][ T792] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 277.409207][ T7908] usb usb3-port1: unable to enumerate USB device [ 277.438977][ T7900] corsair-psu 0003:1B1C:1C09.0003: probe with driver corsair-psu failed with error -71 [ 277.466340][ T7900] usb 6-1: USB disconnect, device number 2 [ 277.469072][ T792] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 277.511484][ T792] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 277.623701][ T29] audit: type=1400 audit(1783711572.572:1029): avc: denied { write } for pid=7980 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 278.479553][ T29] audit: type=1400 audit(1783711573.152:1030): avc: denied { create } for pid=8006 comm="syz.0.563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 278.655217][ T29] audit: type=1400 audit(1783711573.562:1031): avc: denied { write } for pid=8017 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 278.716773][ T8019] ALSA: mixer_oss: invalid OSS volume '' [ 278.783879][ T8019] ALSA: mixer_oss: invalid OSS volume 'eQCȡ*qpAڜe T|K' [ 278.825368][ T8019] ALSA: mixer_oss: invalid OSS volume ':az]qeXfb]݆B.' [ 278.882740][ T8019] ALSA: mixer_oss: invalid OSS volume 'j|q⩃˚[w3^.ג' [ 279.209869][ T8019] ALSA: mixer_oss: invalid OSS volume '"P޸ۜo[8>7|YMepq' [ 279.240782][ T8019] ALSA: mixer_oss: invalid OSS volume 'wI׷#t\W,bP=&e' [ 279.271739][ T8019] ALSA: mixer_oss: invalid OSS volume ']za-!)ϻvCYps' [ 279.655254][ T8019] ALSA: mixer_oss: invalid OSS volume 'LE]Dxt݂OY3fk$T "' [ 279.763981][ T8019] ALSA: mixer_oss: invalid OSS volume '[' [ 279.830766][ T8019] ALSA: mixer_oss: invalid OSS volume '3A14IN+|\' [ 279.851967][ T8019] ALSA: mixer_oss: invalid OSS volume '$7|YMepq' [ 284.757800][ T8115] ALSA: mixer_oss: invalid OSS volume 'wI׷#t\W,bP=&e' [ 284.777549][ T8115] ALSA: mixer_oss: invalid OSS volume ']za-!)ϻvCYps' [ 284.793345][ T8104] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=9761 sclass=netlink_route_socket pid=8104 comm=syz.3.582 [ 284.811176][ T8115] ALSA: mixer_oss: invalid OSS volume 'LE]Dxt݂OY3fk$T "' [ 284.828476][ T8115] ALSA: mixer_oss: invalid OSS volume '[' [ 284.839262][ T5725] pwc: recv_control_msg error -32 req 02 val 2000 [ 284.849007][ T8115] ALSA: mixer_oss: invalid OSS volume '3A14IN+|\' [ 284.860176][ T5725] pwc: recv_control_msg error -32 req 02 val 2100 [ 284.869551][ T8115] ALSA: mixer_oss: invalid OSS volume '$ HID v0.00 Device [syz1] on syz0 [ 291.674983][ T7908] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 291.685665][ T7901] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 291.773955][ T5733] kovaplus 0003:1E7D:2D50.0006: hidraw1: USB HID v7f.fd Device [HID 1e7d:2d50] on usb-dummy_hcd.1-1/input0 [ 291.841330][ T7908] usb 4-1: config 0 has no interfaces? [ 291.848910][ T7901] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 291.863943][ T7908] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 291.877207][ T7901] usb 3-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 291.880270][ T7908] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.894997][ T7901] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.898130][ T7908] usb 4-1: config 0 descriptor?? [ 291.913829][ T7901] usb 3-1: Product: syz [ 291.925195][ T7901] usb 3-1: Manufacturer: syz [ 291.935040][ T7901] usb 3-1: SerialNumber: syz [ 291.955214][ T7901] usb 3-1: config 0 descriptor?? [ 291.972048][ T7901] ims_pcu 3-1:0.0: Missing CDC union descriptor [ 291.994371][ T7901] ims_pcu 3-1:0.0: probe with driver ims_pcu failed with error -22 [ 292.129967][ T7901] usb 4-1: USB disconnect, device number 23 [ 292.170041][ T8200] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 292.177745][ T7910] usb 3-1: USB disconnect, device number 18 [ 292.179687][ T8200] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 292.209330][ T5733] kovaplus 0003:1E7D:2D50.0006: couldn't init struct kovaplus_device [ 292.218096][ T5733] kovaplus 0003:1E7D:2D50.0006: couldn't install mouse [ 292.233394][ T5733] kovaplus 0003:1E7D:2D50.0006: probe with driver kovaplus failed with error -71 [ 292.246766][ T5733] usb 2-1: USB disconnect, device number 17 [ 292.275380][ T7908] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 292.445254][ T7908] usb 1-1: Using ep0 maxpacket: 8 [ 292.451679][ T7908] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 292.464075][ T7908] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 292.474135][ T7908] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 292.484106][ T7908] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 292.497902][ T7908] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 292.507014][ T7908] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.726758][ T8228] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 292.757336][ T8228] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 292.799035][ T7908] usb 1-1: GET_CAPABILITIES returned 0 [ 292.827394][ T7908] usbtmc 1-1:16.0: can't read capabilities [ 293.362358][ C1] usbtmc 1-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 293.394836][ T7898] usb 1-1: USB disconnect, device number 18 [ 293.929836][ T8245] syz.3.632 (8245): drop_caches: 2 [ 294.034758][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 294.034775][ T29] audit: type=1400 audit(1783711588.982:1068): avc: denied { create } for pid=8249 comm="syz.3.633" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 294.086541][ T7901] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 294.645167][ T7901] usb 2-1: Using ep0 maxpacket: 32 [ 294.685332][ T7901] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 294.825721][ T7901] usb 2-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 294.892928][ T7901] usb 2-1: config 0 interface 0 has no altsetting 0 [ 294.902964][ T7901] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 294.984251][ T7901] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.994020][ T7901] usb 2-1: Product: syz [ 295.000046][ T7901] usb 2-1: Manufacturer: syz [ 295.007033][ T7901] usb 2-1: SerialNumber: syz [ 295.034690][ T7901] usb 2-1: config 0 descriptor?? [ 295.279140][ T29] audit: type=1400 audit(1783711590.232:1069): avc: denied { append } for pid=8274 comm="syz.0.642" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 295.335938][ T29] audit: type=1400 audit(1783711590.292:1070): avc: denied { map } for pid=8274 comm="syz.0.642" path="socket:[20429]" dev="sockfs" ino=20429 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 295.454649][ T7901] gs_usb 2-1:0.0: Configuring for 1 interfaces [ 295.513876][ T29] audit: type=1400 audit(1783711590.422:1071): avc: denied { nlmsg_read } for pid=8284 comm="syz.2.646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 295.650035][ T29] audit: type=1400 audit(1783711590.582:1072): avc: denied { bind } for pid=8290 comm="syz.3.649" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 295.696434][ T8291] netlink: 4 bytes leftover after parsing attributes in process `syz.3.649'. [ 295.705396][ T29] audit: type=1400 audit(1783711590.582:1073): avc: denied { setopt } for pid=8290 comm="syz.3.649" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 295.741208][ T5717] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 295.829757][ T8297] tmpfs: Bad value for 'mpol' [ 295.948833][ T29] audit: type=1400 audit(1783711590.902:1074): avc: denied { bind } for pid=8300 comm="syz.2.654" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 295.995142][ T5717] usb 6-1: Using ep0 maxpacket: 16 [ 296.001131][ T5717] usb 6-1: too many configurations: 123, using maximum allowed: 8 [ 296.024099][ T5717] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 296.046664][ T5717] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 296.067498][ T7910] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 296.084945][ T5717] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 296.097344][ T5717] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 296.127260][ T7901] gs_usb 2-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 296.148961][ T5717] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 296.700125][ T7910] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 296.724468][ T5717] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 296.747536][ T7910] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 296.809078][ T5717] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 296.824385][ T7910] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 296.860201][ T5717] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 296.873229][ T7910] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.899483][ T5717] usb 6-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 296.916082][ T7910] usb 4-1: config 0 descriptor?? [ 296.930263][ T5717] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 296.941778][ T7901] gs_usb 2-1:0.0: Couldn't register candev for channel 0 (-EINVAL) [ 296.977760][ T7901] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -22 [ 297.017405][ T7901] usb 2-1: USB disconnect, device number 18 [ 297.022979][ T5717] usb 6-1: SerialNumber: syz [ 297.062104][ T5717] usb 6-1: config 0 descriptor?? [ 297.116734][ T5717] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input12 [ 297.309503][ T29] audit: type=1400 audit(1783711592.262:1075): avc: denied { read write } for pid=8281 comm="syz.5.645" name="mice" dev="devtmpfs" ino=917 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 297.333276][ T29] audit: type=1400 audit(1783711592.262:1076): avc: denied { open } for pid=8281 comm="syz.5.645" path="/dev/input/mice" dev="devtmpfs" ino=917 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 297.357417][ T7908] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 297.371809][ T4961] bcm5974 6-1:0.0: could not read from device [ 297.380484][ T7910] hid_parser_main: 238 callbacks suppressed [ 297.380506][ T7910] pyra 0003:1E7D:2CF6.0007: unknown main item tag 0x0 [ 297.394744][ T7910] pyra 0003:1E7D:2CF6.0007: unknown main item tag 0x0 [ 297.408829][ T8283] bcm5974 6-1:0.0: could not read from device [ 297.416729][ T5717] usb 6-1: USB disconnect, device number 3 [ 297.430617][ T4961] bcm5974 6-1:0.0: could not read from device [ 297.444229][ T7910] pyra 0003:1E7D:2CF6.0007: unknown main item tag 0x0 [ 297.445041][ T7901] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 297.463985][ T7910] pyra 0003:1E7D:2CF6.0007: unknown main item tag 0x0 [ 297.478335][ T4961] bcm5974 6-1:0.0: could not read from device [ 297.487902][ T7910] pyra 0003:1E7D:2CF6.0007: unknown main item tag 0x0 [ 297.503914][ T7910] pyra 0003:1E7D:2CF6.0007: unknown main item tag 0x0 [ 297.516876][ T7910] pyra 0003:1E7D:2CF6.0007: unknown main item tag 0x0 [ 297.531652][ T7910] pyra 0003:1E7D:2CF6.0007: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.3-1/input0 [ 297.545924][ T7908] usb 3-1: config 150 has an invalid interface number: 204 but max is 2 [ 297.554635][ T7908] usb 3-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 297.565522][ T7908] usb 3-1: config 150 has no interface number 0 [ 297.572767][ T7908] usb 3-1: config 150 interface 204 has no altsetting 0 [ 297.585283][ T7908] usb 3-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 297.598828][ T7908] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.622583][ T7908] usb 3-1: Product: syz [ 297.632641][ T7908] usb 3-1: Manufacturer: syz [ 297.642771][ T7908] usb 3-1: SerialNumber: syz [ 297.646279][ T7901] usb 2-1: Using ep0 maxpacket: 32 [ 297.676552][ T7901] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 297.692501][ T7901] usb 2-1: config 0 has no interface number 0 [ 297.700148][ T7901] usb 2-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 297.718574][ T7901] usb 2-1: config 0 interface 1 has no altsetting 0 [ 297.730550][ T7901] usb 2-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 297.740806][ T7901] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.757719][ T7901] usb 2-1: Product: syz [ 297.762596][ T7901] usb 2-1: Manufacturer: syz [ 297.767688][ T7901] usb 2-1: SerialNumber: syz [ 297.778751][ T7901] usb 2-1: config 0 descriptor?? [ 297.867859][ T7908] xr_serial 3-1:150.204: skipping garbage [ 297.875526][ T7908] xr_serial 3-1:150.204: xr_serial converter detected [ 297.890452][ T7908] xr_serial ttyUSB0: Failed to set reg 0x60: -71 [ 297.897572][ T7908] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 297.915327][ T7908] usb 3-1: USB disconnect, device number 19 [ 297.931193][ T7908] xr_serial 3-1:150.204: device disconnected [ 298.154773][ T7901] cx231xx 2-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 298.165269][ T7901] cx231xx 2-1:0.1: Not found matching IAD interface [ 298.194336][ T7901] usb 2-1: USB disconnect, device number 19 [ 298.243195][ T8319] netlink: 8 bytes leftover after parsing attributes in process `syz.5.659'. [ 298.262690][ T8319] netlink: 8 bytes leftover after parsing attributes in process `syz.5.659'. [ 298.274625][ T8319] netlink: 8 bytes leftover after parsing attributes in process `syz.5.659'. [ 298.290115][ T8319] netlink: 8 bytes leftover after parsing attributes in process `syz.5.659'. [ 298.483533][ T7910] pyra 0003:1E7D:2CF6.0007: couldn't init struct pyra_device [ 298.491654][ T5717] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 298.506425][ T7910] pyra 0003:1E7D:2CF6.0007: couldn't install mouse [ 298.521246][ T7910] pyra 0003:1E7D:2CF6.0007: probe with driver pyra failed with error -71 [ 298.544785][ T7910] usb 4-1: USB disconnect, device number 24 [ 298.655109][ T5717] usb 1-1: Using ep0 maxpacket: 32 [ 298.661864][ T5717] usb 1-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 298.671157][ T5717] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.695000][ T5717] usb 1-1: config 0 descriptor?? [ 298.795513][ T5717] gspca_main: sunplus-2.14.0 probing 041e:400b [ 300.181188][ T29] audit: type=1400 audit(1783711595.132:1077): avc: denied { setopt } for pid=8334 comm="syz.2.664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 300.234784][ T8340] 9pnet_virtio: no channels available for device syz [ 300.906637][ T5717] gspca_sunplus: reg_w_riv err -71 [ 300.927488][ T5717] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 301.138463][ T5717] usb 1-1: USB disconnect, device number 19 [ 302.743333][ T29] audit: type=1400 audit(1783711597.692:1078): avc: denied { write } for pid=8354 comm="syz.3.670" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 302.784428][ T8356] lo speed is unknown, defaulting to 1000 [ 302.812783][ T8359] netlink: 40 bytes leftover after parsing attributes in process `syz.1.671'. [ 302.848693][ T8362] : renamed from lo [ 302.881272][ T8356] speed is unknown, defaulting to 1000 [ 302.893385][ T29] audit: type=1400 audit(1783711597.812:1079): avc: denied { create } for pid=8358 comm="syz.1.671" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 302.949619][ T8356] speed is unknown, defaulting to 1000 [ 302.991703][ T29] audit: type=1400 audit(1783711597.812:1080): avc: denied { write } for pid=8358 comm="syz.1.671" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 303.032588][ T8356] smbdirect: ib_dev[sy2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 303.049000][ T5717] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 303.065602][ T8356] smbdirect: ib_dev[sy2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 303.083471][ T8356] smbdirect: ib_dev[sy2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 303.100102][ T8356] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 303.122520][ T8356] infiniband sy2: RDMA CMA: cma_listen_on_dev, error -98 [ 303.197939][ T5614] Bluetooth: hci2: hcon ffff88807c7f4000 sent 1 < count 257 [ 303.270910][ T8356] speed is unknown, defaulting to 1000 [ 303.351298][ T5717] usb 1-1: Using ep0 maxpacket: 8 [ 303.391095][ T5717] usb 1-1: unable to get BOS descriptor or descriptor too short [ 303.477859][ T5717] usb 1-1: config 1 interface 0 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 303.581710][ T5717] usb 1-1: config 1 interface 0 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1023 [ 303.967669][ T8356] speed is unknown, defaulting to 1000 [ 304.002325][ T5717] usb 1-1: config 1 interface 0 has no altsetting 0 [ 304.025468][ T8356] speed is unknown, defaulting to 1000 [ 304.033703][ T5717] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 304.088473][ T29] audit: type=1400 audit(1783711599.042:1081): avc: denied { write } for pid=8363 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 304.121309][ T5717] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.136653][ T8356] speed is unknown, defaulting to 1000 [ 304.155422][ T5717] usb 1-1: Product: syz [ 304.169530][ T8356] speed is unknown, defaulting to 1000 [ 304.175412][ T5717] usb 1-1: Manufacturer: syz [ 304.190044][ T5717] usb 1-1: SerialNumber: syz [ 304.223945][ T8357] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 304.244318][ T8357] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 304.437261][ T29] audit: type=1400 audit(1783711599.392:1082): avc: denied { write } for pid=8392 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 304.501809][ T5717] usb 1-1: No union descriptors [ 304.565122][ T5717] usb 1-1: USB disconnect, device number 20 [ 304.805097][ T5271] veth0_vlan: left promiscuous mode [ 304.818726][ T29] audit: type=1400 audit(1783711599.772:1083): avc: denied { create } for pid=8399 comm="syz.3.681" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 304.879920][ T7898] veth0_vlan: entered promiscuous mode [ 304.882892][ T29] audit: type=1400 audit(1783711599.772:1084): avc: denied { write } for pid=8399 comm="syz.3.681" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 305.437261][ T29] audit: type=1400 audit(1783711600.392:1085): avc: denied { write } for pid=8412 comm="syz.0.686" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 306.352107][ T8423] netlink: 27 bytes leftover after parsing attributes in process `syz.0.688'. [ 306.581626][ T29] audit: type=1400 audit(1783711601.442:1086): avc: denied { name_bind } for pid=8422 comm="syz.2.689" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 306.758345][ T8433] netlink: 76 bytes leftover after parsing attributes in process `syz.1.690'. [ 307.080271][ T29] audit: type=1400 audit(1783711601.992:1087): avc: denied { ioctl } for pid=8430 comm="syz.1.690" path="socket:[19045]" dev="sockfs" ino=19045 ioctlcmd=0xf516 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 307.628790][ T29] audit: type=1400 audit(1783711602.582:1088): avc: denied { write } for pid=8414 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 308.293172][ T29] audit: type=1400 audit(1783711603.232:1089): avc: denied { write } for pid=8451 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 308.963999][ T29] audit: type=1400 audit(1783711603.722:1090): avc: denied { write } for pid=8460 comm="syz.3.695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 309.604800][ T29] audit: type=1400 audit(1783711604.542:1091): avc: denied { mount } for pid=8473 comm="syz.1.697" name="/" dev="hugetlbfs" ino=21264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 309.702595][ T29] audit: type=1400 audit(1783711604.652:1092): avc: denied { unmount } for pid=5609 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 311.186060][ T5614] Bluetooth: Unknown BR/EDR signaling command 0x0d [ 311.193636][ T5614] Bluetooth: Wrong link type (-22) [ 311.401514][ T8495] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.456812][ T5717] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 311.600355][ T29] audit: type=1400 audit(1783711606.542:1093): avc: denied { getopt } for pid=8496 comm="syz.0.707" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 311.637173][ T5614] Bluetooth: hci3: unexpected event for opcode 0x2042 [ 311.799442][ T5717] usb 2-1: Using ep0 maxpacket: 32 [ 311.870725][ T5717] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 311.900995][ T5717] usb 2-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 311.950735][ T5717] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.977579][ T5717] usb 2-1: Product: syz [ 311.990623][ T5717] usb 2-1: Manufacturer: syz [ 312.141437][ T5717] usb 2-1: SerialNumber: syz [ 312.243644][ T5717] usb 2-1: config 0 descriptor?? [ 312.271826][ T8495] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.347281][ T5717] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 312.505708][ T7901] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 312.614191][ T8495] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.661903][ T29] audit: type=1400 audit(1783711607.612:1094): avc: denied { getopt } for pid=8515 comm="syz.3.712" lport=256 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 312.740056][ T8495] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.755374][ T7901] usb 6-1: unable to get BOS descriptor or descriptor too short [ 312.767875][ T7901] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 312.782796][ T7901] usb 6-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 312.793565][ T7901] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.801571][ T7901] usb 6-1: Product: syz [ 312.810848][ T7901] usb 6-1: Manufacturer: syz [ 312.815469][ T7901] usb 6-1: SerialNumber: syz [ 313.482236][ T7901] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 313.553199][ T7901] usb 6-1: 2:1 : bogus bTerminalLink 2 [ 313.557781][ T7908] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 313.567799][ T5717] input: gspca_pac7302 as /devices/platform/dummy_hcd.1/usb2/2-1/input/input13 [ 313.587667][ T5717] usb 2-1: USB disconnect, device number 20 [ 313.604649][ T29] audit: type=1400 audit(1783711608.512:1095): avc: denied { write } for pid=8527 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 313.745727][ T7910] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 313.770538][ T7908] usb 1-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 313.787219][ T7908] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 313.818541][ T7908] usb 1-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 313.842346][ T7908] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.872285][ T7908] usb 1-1: Product: syz [ 313.885142][ T7908] usb 1-1: Manufacturer: syz [ 313.901283][ T7908] usb 1-1: SerialNumber: syz [ 313.928035][ T7910] usb 3-1: unable to get BOS descriptor or descriptor too short [ 313.945712][ T7908] usb 1-1: config 0 descriptor?? [ 313.958248][ T7910] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 313.969945][ T7901] usb 6-1: USB disconnect, device number 4 [ 313.979404][ T7908] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 313.987801][ T29] audit: type=1400 audit(1783711608.922:1096): avc: denied { write } for pid=8541 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 314.027081][ T7910] usb 3-1: can't read configurations, error -71 [ 314.100920][ T5271] 8021q: adding VLAN 0 to HW filter on device eth7 [ 314.207061][ T5618] udevd[5618]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 314.264431][ T8542] kvm: kvm [8540]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 314.509945][ T29] audit: type=1326 audit(1783711609.462:1097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8557 comm="syz.1.720" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6fdd9de59 code=0x7ffc0000 [ 314.607404][ T7901] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 314.617766][ T29] audit: type=1326 audit(1783711609.462:1098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8557 comm="syz.1.720" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6fdd9de59 code=0x7ffc0000 [ 314.648917][ T7908] gspca_sunplus: reg_r err -71 [ 314.666716][ T7908] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 314.691460][ T7908] usb 1-1: USB disconnect, device number 21 [ 314.715686][ T29] audit: type=1326 audit(1783711609.462:1099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8557 comm="syz.1.720" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6fdd9de59 code=0x7ffc0000 [ 314.833796][ T7901] usb 6-1: Using ep0 maxpacket: 32 [ 314.916551][ T29] audit: type=1326 audit(1783711609.462:1100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8557 comm="syz.1.720" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6fdd9de59 code=0x7ffc0000 [ 314.949663][ T29] audit: type=1326 audit(1783711609.492:1101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8557 comm="syz.1.720" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fa6fdd9de59 code=0x7ffc0000 [ 314.976298][ T29] audit: type=1326 audit(1783711609.492:1102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8557 comm="syz.1.720" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6fdd9de59 code=0x7ffc0000 [ 315.215236][ T7901] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 315.290746][ T7901] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 315.299481][ T7901] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 315.389079][ T7901] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 315.427834][ T7901] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 315.494266][ T7901] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 315.494620][ T8582] netlink: 4 bytes leftover after parsing attributes in process `syz.2.726'. [ 315.507993][ T7901] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 315.508021][ T7901] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.643158][ T7901] usb 6-1: config 0 descriptor?? [ 315.692386][ T5271] 8021q: adding VLAN 0 to HW filter on device eth6 [ 316.247337][ T7898] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 316.367098][ T7901] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 5 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 316.469099][ T7898] usb 1-1: Using ep0 maxpacket: 16 [ 316.659982][ T8609] netlink: 32 bytes leftover after parsing attributes in process `syz.3.733'. [ 316.732981][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 316.732997][ T29] audit: type=1400 audit(1783711611.682:1113): avc: denied { read write } for pid=8551 comm="syz.5.718" name="lp0" dev="devtmpfs" ino=3173 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 316.772257][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.781690][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.788416][ T7910] usb 6-1: USB disconnect, device number 5 [ 316.802690][ T7910] usblp0: removed [ 316.815901][ T8606] syzkaller0: entered promiscuous mode [ 316.830985][ T29] audit: type=1400 audit(1783711611.722:1114): avc: denied { open } for pid=8551 comm="syz.5.718" path="/dev/usb/lp0" dev="devtmpfs" ino=3173 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 316.843098][ T8606] syzkaller0: entered allmulticast mode [ 316.940763][ T8606] tipc: Enabled bearer , priority 0 [ 316.955445][ T7908] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 316.967488][ T8606] tipc: Resetting bearer [ 316.980915][ T8605] tipc: Resetting bearer [ 317.015658][ T8605] tipc: Disabling bearer [ 317.027092][ T29] audit: type=1400 audit(1783711611.982:1115): avc: denied { write } for pid=8595 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 317.100110][ T29] audit: type=1400 audit(1783711612.052:1116): avc: denied { write } for pid=8620 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 317.152657][ T7908] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 317.162458][ T5717] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 317.187697][ T7908] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.205784][ T7908] usb 2-1: Product: syz [ 317.214423][ T7908] usb 2-1: Manufacturer: syz [ 317.222404][ T7908] usb 2-1: SerialNumber: syz [ 317.243724][ T5271] 8021q: adding VLAN 0 to HW filter on device eth5 [ 317.345002][ T5717] usb 4-1: Using ep0 maxpacket: 16 [ 317.370665][ T5717] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 317.394656][ T5717] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 317.411075][ T5717] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 317.436952][ T5717] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 317.469365][ T5717] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.504126][ T5717] usb 4-1: config 0 descriptor?? [ 317.655633][ T29] audit: type=1400 audit(1783711612.602:1117): avc: denied { mount } for pid=8630 comm="syz.5.739" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 317.658377][ T7908] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 317.740872][ T7908] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO [ 317.765591][ T7908] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 317.794638][ T7908] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 317.835243][ T7908] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 317.870850][ T7908] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 317.894407][ T29] audit: type=1400 audit(1783711612.852:1118): avc: denied { write } for pid=8628 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 317.904198][ T7908] usb 2-1: USB disconnect, device number 21 [ 317.970301][ T5717] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 317.982363][ T5717] microsoft 0003:045E:07DA.0008: ignoring exceeding usage max [ 318.027972][ T5717] microsoft 0003:045E:07DA.0008: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 318.037264][ T29] audit: type=1400 audit(1783711612.962:1119): avc: denied { write } for pid=8649 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 318.061721][ T5717] microsoft 0003:045E:07DA.0008: no inputs found [ 318.068689][ T5717] microsoft 0003:045E:07DA.0008: could not initialize ff, continuing anyway [ 318.129180][ T5271] 8021q: adding VLAN 0 to HW filter on device eth8 [ 318.180479][ T7908] usb 4-1: USB disconnect, device number 25 [ 318.273497][ T7897] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 318.665126][ T7897] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 319.774621][ T7897] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 319.785028][ T7897] usb 3-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 319.795187][ T7897] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.819643][ T7897] usb 3-1: config 0 descriptor?? [ 320.405212][ T7898] usb 1-1: unable to get BOS descriptor or descriptor too short [ 321.368993][ T29] audit: type=1400 audit(1783711615.612:1120): avc: denied { block_suspend } for pid=8668 comm="syz.1.746" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 321.408679][ T7897] hid-thrustmaster 0003:044F:B65D.0009: unknown main item tag 0x0 [ 321.419236][ T7897] hid-thrustmaster 0003:044F:B65D.0009: unknown main item tag 0x0 [ 321.430099][ T7898] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 321.447498][ T7897] hid-thrustmaster 0003:044F:B65D.0009: unknown main item tag 0x0 [ 321.527022][ T7898] usb 1-1: can't read configurations, error -71 [ 321.595534][ T7897] hid-thrustmaster 0003:044F:B65D.0009: unknown main item tag 0x0 [ 321.629006][ T7897] hid-thrustmaster 0003:044F:B65D.0009: unknown main item tag 0x0 [ 321.636877][ T7897] hid-thrustmaster 0003:044F:B65D.0009: unknown main item tag 0x0 [ 321.807227][ T7897] hid-thrustmaster 0003:044F:B65D.0009: unknown main item tag 0x0 [ 321.817207][ T7897] hid-thrustmaster 0003:044F:B65D.0009: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.2-1/input0 [ 321.829914][ T7897] hid-thrustmaster 0003:044F:B65D.0009: Wrong number of endpoints? [ 321.840952][ T7897] usb 3-1: USB disconnect, device number 22 [ 321.869800][ C1] hid-thrustmaster 0003:044F:B65D.0009: URB to get model id failed with error -2 [ 427.404850][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 427.411822][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P8689/1:b..l [ 427.420253][ C0] rcu: (detected by 0, t=10505 jiffies, g=38073, q=435 ncpus=2) [ 427.427960][ C0] task:syz.3.749 state:R running task stack:25800 pid:8689 tgid:8685 ppid:5607 task_flags:0x400040 flags:0x00080000 [ 427.442005][ C0] Call Trace: [ 427.445288][ C0] [ 427.448214][ C0] __schedule+0x125c/0x6730 [ 427.453160][ C0] ? folio_unlock+0xf5/0x190 [ 427.457763][ C0] ? __pfx___schedule+0x10/0x10 [ 427.462616][ C0] ? folio_mark_accessed+0xf3/0x1040 [ 427.467900][ C0] ? preempt_schedule_thunk+0x16/0x40 [ 427.473276][ C0] preempt_schedule_common+0x42/0xc0 [ 427.478555][ C0] preempt_schedule_thunk+0x16/0x40 [ 427.483756][ C0] _raw_spin_unlock+0x3e/0x50 [ 427.488436][ C0] follow_page_pte+0x496/0x13f0 [ 427.493293][ C0] ? __pfx_follow_page_pte+0x10/0x10 [ 427.498585][ C0] ? __pfx___might_resched+0x10/0x10 [ 427.503886][ C0] __get_user_pages+0x741/0x32a0 [ 427.508835][ C0] ? __pfx___get_user_pages+0x10/0x10 [ 427.514208][ C0] populate_vma_page_range+0x267/0x3f0 [ 427.519821][ C0] ? __pfx_populate_vma_page_range+0x10/0x10 [ 427.525791][ C0] ? __pfx_find_vma_intersection+0x10/0x10 [ 427.531604][ C0] ? do_mmap+0x93f/0x12f0 [ 427.535931][ C0] __mm_populate+0x107/0x3a0 [ 427.540527][ C0] ? __pfx___mm_populate+0x10/0x10 [ 427.545636][ C0] ? up_write+0x2e5/0x5c0 [ 427.550048][ C0] vm_mmap_pgoff+0x37f/0x470 [ 427.554633][ C0] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 427.559741][ C0] ? __pfx_do_futex+0x10/0x10 [ 427.564417][ C0] ksys_mmap_pgoff+0xe4/0x610 [ 427.569719][ C0] ? __x64_sys_futex+0x358/0x4d0 [ 427.574686][ C0] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 427.580169][ C0] ? xfd_validate_state+0x129/0x190 [ 427.585397][ C0] __x64_sys_mmap+0x125/0x190 [ 427.590091][ C0] do_syscall_64+0x115/0x870 [ 427.594734][ C0] ? clear_bhb_loop+0x40/0x90 [ 427.599502][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.605391][ C0] RIP: 0033:0x7fdcc679de59 [ 427.609798][ C0] RSP: 002b:00007fdcc7618028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 427.618478][ C0] RAX: ffffffffffffffda RBX: 00007fdcc6a26090 RCX: 00007fdcc679de59 [ 427.626443][ C0] RDX: b635773f06ebbeeb RSI: 0000000000b36000 RDI: 0000200000000000 [ 427.634401][ C0] RBP: 00007fdcc6833e6f R08: ffffffffffffffff R09: 0000000000000000 [ 427.642361][ C0] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 427.650320][ C0] R13: 00007fdcc6a26128 R14: 00007fdcc6a26090 R15: 00007ffdbb1fa8f8 [ 427.658295][ C0] [ 427.661302][ C0] rcu: rcu_preempt kthread timer wakeup didn't happen for 10504 jiffies! g38073 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 427.673706][ C0] rcu: Possible timer handling issue on cpu=1 timer-softirq=14300 [ 427.681578][ C0] rcu: rcu_preempt kthread starved for 10505 jiffies! g38073 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1 [ 427.692930][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 427.702883][ C0] rcu: RCU grace-period kthread stack dump: [ 427.708759][ C0] task:rcu_preempt state:I stack:27528 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 427.720756][ C0] Call Trace: [ 427.724023][ C0] [ 427.726949][ C0] __schedule+0x125c/0x6730 [ 427.731463][ C0] ? __pfx___schedule+0x10/0x10 [ 427.736314][ C0] ? find_held_lock+0x2b/0x80 [ 427.740993][ C0] ? schedule+0x225/0x2c0 [ 427.745319][ C0] schedule+0xdd/0x2c0 [ 427.749470][ C0] schedule_timeout+0x127/0x280 [ 427.754316][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 427.759681][ C0] ? __pfx_process_timeout+0x10/0x10 [ 427.764971][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 427.770772][ C0] ? prepare_to_swait_event+0xdf/0x4a0 [ 427.776224][ C0] rcu_gp_fqs_loop+0x1a9/0x900 [ 427.780981][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 427.786262][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 427.791203][ C0] ? __pfx_rcu_gp_cleanup+0x10/0x10 [ 427.796410][ C0] rcu_gp_kthread+0x179/0x230 [ 427.801082][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 427.806455][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 427.812280][ C0] ? __kthread_parkme+0x18c/0x230 [ 427.817304][ C0] ? kthread+0x13a/0x450 [ 427.821713][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 427.826900][ C0] kthread+0x370/0x450 [ 427.830966][ C0] ? __pfx_kthread+0x10/0x10 [ 427.835556][ C0] ret_from_fork+0x72b/0xd50 [ 427.840140][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 427.845249][ C0] ? __switch_to+0x800/0x10f0 [ 427.849923][ C0] ? __pfx_kthread+0x10/0x10 [ 427.854519][ C0] ret_from_fork_asm+0x1a/0x30 [ 427.859289][ C0] [ 427.862315][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 427.868622][ C0] Sending NMI from CPU 0 to CPUs 1: [ 427.873818][ C1] NMI backtrace for cpu 1 [ 427.873830][ C1] CPU: 1 UID: 0 PID: 7897 Comm: kworker/1:11 Not tainted syzkaller #0 PREEMPT(full) [ 427.873845][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 427.873856][ C1] Workqueue: usb_hub_wq hub_event [ 427.873872][ C1] RIP: 0010:do_raw_spin_lock+0x139/0x260 [ 427.873889][ C1] Code: 28 00 00 00 00 e8 a7 9c 94 00 be 04 00 00 00 48 8d 7c 24 28 e8 98 9c 94 00 8b 44 24 28 ba 01 00 00 00 89 44 24 04 f0 0f b1 13 <0f> 85 93 00 00 00 48 89 ea 65 44 8b 35 2a 9d 7d 12 48 b8 00 00 00 [ 427.873901][ C1] RSP: 0018:ffffc90000a08cf8 EFLAGS: 00000046 [ 427.873911][ C1] RAX: 0000000000000000 RBX: ffffffff9b8d4280 RCX: ffffffff81e5b2e8 [ 427.873920][ C1] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffc90000a08d20 [ 427.873933][ C1] RBP: ffffffff9b8d4288 R08: 0000000000000001 R09: fffff520001411a4 [ 427.873942][ C1] R10: 0000000000000003 R11: 0000000000000000 R12: 1ffff920001411a0 [ 427.873949][ C1] R13: ffffffff9b8d4290 R14: ffff88802b3f9300 R15: 1ffff920001411b8 [ 427.873958][ C1] FS: 0000000000000000(0000) GS:ffff888123eeb000(0000) knlGS:0000000000000000 [ 427.873972][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 427.873980][ C1] CR2: 0000200000037000 CR3: 0000000074a29000 CR4: 00000000003526f0 [ 427.873989][ C1] Call Trace: [ 427.873993][ C1] [ 427.873999][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 427.874015][ C1] ? do_raw_spin_unlock+0x145/0x1e0 [ 427.874033][ C1] _raw_spin_lock_irqsave+0x42/0x60 [ 427.874049][ C1] ? debug_object_deactivate+0x135/0x3b0 [ 427.874064][ C1] debug_object_deactivate+0x135/0x3b0 [ 427.874079][ C1] ? __pfx_debug_object_deactivate+0x10/0x10 [ 427.874095][ C1] ? timerqueue_linked_add+0x260/0x430 [ 427.874111][ C1] __hrtimer_run_queues+0x2e9/0x9c0 [ 427.874130][ C1] ? rcu_is_watching+0x12/0xc0 [ 427.874148][ C1] hrtimer_interrupt+0x3e5/0x940 [ 427.874170][ C1] __sysvec_apic_timer_interrupt+0x109/0x470 [ 427.874190][ C1] sysvec_apic_timer_interrupt+0x9e/0xc0 [ 427.874208][ C1] [ 427.874213][ C1] [ 427.874217][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 427.874232][ C1] RIP: 0010:lock_is_held_type+0xf5/0x140 [ 427.874250][ C1] Code: ff ff ff ff 65 0f c1 15 19 85 aa 08 83 fa 01 8b 44 24 04 75 2d 9c 5a 80 e6 02 75 47 41 f7 c5 00 02 00 00 74 01 fb 48 83 c4 08 <5b> 5d 41 5c 41 5d 41 5e 41 5f e9 7c 3f 03 00 c3 cc cc cc cc 31 c0 [ 427.874262][ C1] RSP: 0018:ffffc9000302ea78 EFLAGS: 00000286 [ 427.874271][ C1] RAX: 0000000000000000 RBX: ffffffff8ebe6040 RCX: 0000000000000001 [ 427.874279][ C1] RDX: 0000000000000046 RSI: ffffffff8e17d44e RDI: ffffffff8c400c80 [ 427.874288][ C1] RBP: ffff88801e3ea540 R08: 0000000000000000 R09: fffffbfff22445f2 [ 427.874296][ C1] R10: ffffffff91222f97 R11: 0000000000000000 R12: 00000000ffffffff [ 427.874304][ C1] R13: 0000000000000246 R14: ffff88801e3eb270 R15: 000000000000000a [ 427.874318][ C1] __schedule+0x3232/0x6730 [ 427.874338][ C1] ? __lock_acquire+0x49f/0x1a40 [ 427.874353][ C1] ? __pfx___schedule+0x10/0x10 [ 427.874369][ C1] ? mark_held_locks+0x40/0x70 [ 427.874382][ C1] preempt_schedule_irq+0x50/0x90 [ 427.874399][ C1] irqentry_exit+0x205/0xa00 [ 427.874418][ C1] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 427.874431][ C1] RIP: 0010:__orc_find+0x70/0xf0 [ 427.874450][ C1] Code: ec 72 4e 4c 89 e2 48 29 ea 48 89 d6 48 c1 ea 3f 48 c1 fe 02 48 01 f2 48 d1 fa 48 8d 5c 95 00 48 89 da 48 c1 ea 03 0f b6 34 0a <48> 89 da 83 e2 07 83 c2 03 40 38 f2 7c 05 40 84 f6 75 4b 48 63 13 [ 427.874461][ C1] RSP: 0018:ffffc9000302ed28 EFLAGS: 00000a07 [ 427.874471][ C1] RAX: ffffffff923008b8 RBX: ffffffff91830d64 RCX: dffffc0000000000 [ 427.874479][ C1] RDX: 1ffffffff23061ac RSI: 0000000000000000 RDI: ffffffff91830d64 [ 427.874487][ C1] RBP: ffffffff91830d64 R08: ffffffff923008be R09: 0000000000000007 [ 427.874495][ C1] R10: 0000000000000200 R11: 0000000000067e16 R12: ffffffff91830d64 [ 427.874504][ C1] R13: ffffffff877e16f1 R14: ffffffff91830d64 R15: ffffffff91830d64 [ 427.874513][ C1] ? usb_disconnect+0x2e1/0x9a0 [ 427.874530][ C1] ? usb_disconnect+0x2e1/0x9a0 [ 427.874540][ C1] unwind_next_frame+0x2ec/0x2090 [ 427.874558][ C1] ? usb_disconnect+0x2e2/0x9a0 [ 427.874570][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 427.874590][ C1] arch_stack_walk+0x94/0xf0 [ 427.874609][ C1] ? usb_disconnect+0x2e2/0x9a0 [ 427.874622][ C1] stack_trace_save+0x8e/0xc0 [ 427.874641][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 427.874661][ C1] ? __lock_acquire+0x49f/0x1a40 [ 427.874675][ C1] kasan_save_stack+0x30/0x50 [ 427.874688][ C1] ? kasan_save_stack+0x30/0x50 [ 427.874701][ C1] ? kasan_record_aux_stack+0xa7/0xc0 [ 427.874718][ C1] ? __call_rcu_common.constprop.0+0xa5/0x9b0 [ 427.874733][ C1] ? kernfs_put.part.0+0x3a6/0xaa0 [ 427.874752][ C1] ? kernfs_remove_by_name_ns+0xf3/0x120 [ 427.874765][ C1] ? device_remove_class_symlinks+0x102/0x1d0 [ 427.874783][ C1] ? device_del+0x261/0x9b0 [ 427.874794][ C1] ? device_unregister+0x1d/0xe0 [ 427.874805][ C1] ? device_destroy+0x99/0xe0 [ 427.874816][ C1] ? drop_ref+0xd8/0x390 [ 427.874832][ C1] ? hidraw_disconnect+0x4b/0x60 [ 427.874847][ C1] ? hid_disconnect+0x13e/0x1b0 [ 427.874864][ C1] ? hid_hw_stop+0x16/0x80 [ 427.874879][ C1] ? hid_device_remove+0xd1/0x270 [ 427.874896][ C1] ? device_remove+0xcb/0x180 [ 427.874908][ C1] ? device_release_driver_internal+0x44e/0x620 [ 427.874928][ C1] ? bus_remove_device+0x2bc/0x560 [ 427.874945][ C1] ? device_del+0x376/0x9b0 [ 427.874956][ C1] ? hid_destroy_device+0x19c/0x240 [ 427.874973][ C1] ? usbhid_disconnect+0xa0/0xe0 [ 427.874988][ C1] ? usb_unbind_interface+0x1dd/0x9e0 [ 427.875002][ C1] ? device_remove+0x12a/0x180 [ 427.875014][ C1] ? device_release_driver_internal+0x44e/0x620 [ 427.875028][ C1] ? bus_remove_device+0x2bc/0x560 [ 427.875045][ C1] ? device_del+0x376/0x9b0 [ 427.875056][ C1] ? usb_disable_device+0x367/0x810 [ 427.875074][ C1] ? usb_disconnect+0x2e2/0x9a0 [ 427.875094][ C1] kasan_record_aux_stack+0xa7/0xc0 [ 427.875111][ C1] ? __pfx_kernfs_free_rcu+0x10/0x10 [ 427.875129][ C1] __call_rcu_common.constprop.0+0xa5/0x9b0 [ 427.875145][ C1] kernfs_put.part.0+0x3a6/0xaa0 [ 427.875166][ C1] kernfs_remove_by_name_ns+0xf3/0x120 [ 427.875181][ C1] device_remove_class_symlinks+0x102/0x1d0 [ 427.875200][ C1] device_del+0x261/0x9b0 [ 427.875212][ C1] ? __pfx_device_del+0x10/0x10 [ 427.875225][ C1] ? lock_acquire+0x5e/0x370 [ 427.875239][ C1] device_unregister+0x1d/0xe0 [ 427.875251][ C1] device_destroy+0x99/0xe0 [ 427.875263][ C1] ? __pfx_device_destroy+0x10/0x10 [ 427.875275][ C1] ? down_write+0x146/0x1f0 [ 427.875293][ C1] ? __pfx_down_write+0x10/0x10 [ 427.875312][ C1] drop_ref+0xd8/0x390 [ 427.875328][ C1] hidraw_disconnect+0x4b/0x60 [ 427.875344][ C1] hid_disconnect+0x13e/0x1b0 [ 427.875360][ C1] ? __pfx_thrustmaster_remove+0x10/0x10 [ 427.875379][ C1] hid_hw_stop+0x16/0x80 [ 427.875394][ C1] hid_device_remove+0xd1/0x270 [ 427.875413][ C1] ? __pfx_hid_device_remove+0x10/0x10 [ 427.875432][ C1] device_remove+0xcb/0x180 [ 427.875444][ C1] device_release_driver_internal+0x44e/0x620 [ 427.875460][ C1] bus_remove_device+0x2bc/0x560 [ 427.875479][ C1] ? __pfx_bus_remove_device+0x10/0x10 [ 427.875497][ C1] ? __pfx_device_remove_attrs+0x10/0x10 [ 427.875518][ C1] device_del+0x376/0x9b0 [ 427.875531][ C1] ? __pfx_device_del+0x10/0x10 [ 427.875542][ C1] ? do_raw_spin_lock+0x128/0x260 [ 427.875560][ C1] hid_destroy_device+0x19c/0x240 [ 427.875579][ C1] usbhid_disconnect+0xa0/0xe0 [ 427.875595][ C1] usb_unbind_interface+0x1dd/0x9e0 [ 427.875611][ C1] ? __pfx_usb_unbind_interface+0x10/0x10 [ 427.875625][ C1] device_remove+0x12a/0x180 [ 427.875637][ C1] device_release_driver_internal+0x44e/0x620 [ 427.875653][ C1] bus_remove_device+0x2bc/0x560 [ 427.875672][ C1] ? __pfx_bus_remove_device+0x10/0x10 [ 427.875690][ C1] ? __pfx_device_remove_attrs+0x10/0x10 [ 427.875711][ C1] device_del+0x376/0x9b0 [ 427.875723][ C1] ? __pfx_device_del+0x10/0x10 [ 427.875734][ C1] ? kobject_put+0xb9/0x640 [ 427.875750][ C1] usb_disable_device+0x367/0x810 [ 427.875771][ C1] usb_disconnect+0x2e2/0x9a0 [ 427.875785][ C1] hub_event+0x1d0c/0x4af0 [ 427.875804][ C1] ? __lock_acquire+0x49f/0x1a40 [ 427.875817][ C1] ? do_raw_spin_unlock+0x145/0x1e0 [ 427.875832][ C1] ? __pfx_hub_event+0x10/0x10 [ 427.875844][ C1] ? debug_object_deactivate+0x2e4/0x3b0 [ 427.875861][ C1] ? rcu_is_watching+0x12/0xc0 [ 427.875879][ C1] process_one_work+0xa23/0x1940 [ 427.875895][ C1] ? __pfx_process_one_work+0x10/0x10 [ 427.875910][ C1] ? __pfx_hub_event+0x10/0x10 [ 427.875929][ C1] worker_thread+0x5ef/0xe50 [ 427.875944][ C1] ? kthread+0x13a/0x450 [ 427.875962][ C1] ? __pfx_worker_thread+0x10/0x10 [ 427.875973][ C1] kthread+0x370/0x450 [ 427.875991][ C1] ? __pfx_kthread+0x10/0x10 [ 427.876009][ C1] ret_from_fork+0x72b/0xd50 [ 427.876026][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 427.876042][ C1] ? __switch_to+0x800/0x10f0 [ 427.876061][ C1] ? __pfx_kthread+0x10/0x10 [ 427.876080][ C1] ret_from_fork_asm+0x1a/0x30 [ 427.876102][ C1]