last executing test programs: 3m31.215755669s ago: executing program 4 (id=649): r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040), 0x381382, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f00000000c0)={0x0, 0x7, 0x200000009}) r2 = socket(0x2a, 0x2, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xffffffffffffff6e}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtfilter={0x38, 0x2c, 0x601, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r3, {0xffe0}, {}, {0xc, 0xd}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xfff1, 0x7}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48000}, 0x24000840) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0xf, 0x8, &(0x7f0000000340)=ANY=[@ANYBLOB="18060000ffffffff000000000000000018020000", @ANYRES32, @ANYBLOB="0000000000000000b70300000000000085000000ba000000b70000000000000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="60000000490004012dbd7000fedbdf250a001f00", @ANYRES32=r3, @ANYBLOB="0400000004000100fc010000000000000000000087c80000080002000a000000140001000000000000000000000000000000000114000100fc020000000000000000000000000001b89d1b074631f3b982c78d69f01ba5a9f726554b92abc6d2e1ed20b29edaaab20e59edc2a18f1bc3eb765a58b8f0ec61c510570e06b2e239648f857d9d54dae2"], 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x0) r4 = getpid() r5 = userfaultfd(0x801) ioctl$F2FS_IOC_RESIZE_FS(r2, 0x4008f510, &(0x7f0000000240)=0x1) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet6_tcp_buf(r0, 0x6, 0xb, &(0x7f00000004c0)=""/137, &(0x7f0000000100)=0x89) sendmsg$IPSET_CMD_CREATE(r6, 0x0, 0x80) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000380)={0x1, 0x0, {0x1, 0xfffffffb, 0x2025, 0x7, 0x1, 0x6, 0x2}}) process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) 3m30.761283827s ago: executing program 4 (id=654): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="190000000400000008000000080000"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={r5, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000005c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6, &(0x7f0000000600)=[0x0], &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xb3, &(0x7f0000000680)=[{}], 0x8, 0x10, &(0x7f00000006c0), &(0x7f0000000700), 0x8, 0x75, 0x8, 0x8, &(0x7f0000000740)}}, 0x10) 3m29.666226509s ago: executing program 4 (id=656): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b40000000000000069109000000000006300000000000000950000000000000074e37cc3c97540f070402a3ec77080defe8d544d535351398bca5e8c3ec08c7881400e8200778bd7e37d9d0f5855dfaa3f424592d79d1396c6c1396c2b72447edd104171360e4e3b11cd8789557990bdf446a9daab188b34591320cc904edb81b508fa31e7871a7800ccb320b446dbb2839a07bbb017100ed2a703b6135fba19c3be"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) mount$9p_rdma(&(0x7f00000000c0), &(0x7f0000000140)='.\x00', &(0x7f00000001c0), 0x10000, &(0x7f0000000480)={'trans=rdma,', {'port', 0x3d, 0x4e23}, 0x2c, {[{@rq={'rq', 0x3d, 0x2}}]}}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3, 0x0, 0x3}, 0x18) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/vmcoreinfo', 0x30002, 0x4e) write$cgroup_int(r4, &(0x7f0000000040)=0x1c9, 0x12) connect$ax25(r4, &(0x7f0000000140)={{0x3, @default, 0x8}, [@bcast, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) socket$inet_udp(0x2, 0x2, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r2, 0x4008ae48, &(0x7f0000000100)=0x4) syz_usb_connect(0x0, 0x3d, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000fb03d1205e043a0469f50102030109022b00010000100009046700023dbb8e0009050202000202020009058202"], 0x0) ioctl$I2C_RDWR(r0, 0x707, &(0x7f00000001c0)={&(0x7f0000000340)=[{0x4, 0x6201, 0x0, 0x0}], 0x1}) 3m27.449926171s ago: executing program 4 (id=665): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe2$9p(0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x1) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000004882, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f00003da000/0x2000)=nil) io_setup(0x1, &(0x7f00000004c0)=0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x300) io_submit(r4, 0xf3, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x1, 0x0, r3, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}]) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) 3m25.780840653s ago: executing program 4 (id=668): ioctl$SNDCTL_DSP_GETTRIGGER(0xffffffffffffffff, 0x80045010, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) chdir(&(0x7f00000003c0)='./bus\x00') setpgid(r0, 0x0) setpgid(0x0, r0) mount$afs(0x0, &(0x7f00000000c0)='./file1\x00', 0x0, 0x20, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0x511e36599023629, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r1, 0x0) r2 = syz_io_uring_setup(0x24fa, &(0x7f00000002c0)={0x0, 0x0, 0x10100}, &(0x7f0000000240)=0x0, &(0x7f0000000680)=0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB='2'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READ_FIXED) io_uring_enter(r2, 0x2d3e, 0x0, 0x0, 0x0, 0x0) symlink(&(0x7f0000000dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mount(0x0, &(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) ioctl$VHOST_VDPA_GET_GROUP_NUM(0xffffffffffffffff, 0x8004af81, &(0x7f0000000000)) mkdir(&(0x7f0000000180)='./file2\x00', 0x10) statx(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x4000, 0x4, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={[{@index_off}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@nfs_export_on}, {@redirect_dir_off}], [{@euid_eq={'euid', 0x3d, r6}}]}) 3m25.462094977s ago: executing program 4 (id=669): io_setup(0x9, &(0x7f0000000b80)=0x0) r1 = openat$dlm_plock(0xffffff9c, &(0x7f0000000180), 0x101400, 0x0) io_submit(r0, 0x1, &(0x7f00000002c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 3m10.310470094s ago: executing program 32 (id=669): io_setup(0x9, &(0x7f0000000b80)=0x0) r1 = openat$dlm_plock(0xffffff9c, &(0x7f0000000180), 0x101400, 0x0) io_submit(r0, 0x1, &(0x7f00000002c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 11.358902538s ago: executing program 5 (id=1294): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x40, 0x13, 0x6, @remote}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001740)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)={0x40, 0x19, 0x2, "b1e7"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000000)={0x40, 0x1, 0xcf, {0xcf, 0xf, "cc45b67e909e61f7c0a25334a893e567747f8b72ff7b89ce8834055432bb73cf79e0aa18bf0b4b3bf7ebb2931d4d37a0d23d14e8d446b1fa3f2b1ffc913daa825dbc41400043ccf40b3b0f290522b8b0e94c5565f41c3d2980e7b409cb818f275b26cd3e98cda3c7831775a241126cf7aa0d40d326be9722fc42e13b51d33c3897cc043eecb8102a6118f4dfa644c59941ff4854da78a93c0ea1a4d0ee02777fe3ca2b8883891c749a5e327941325db6c6ad6edc064b8961ad0230fb39905e44c54ccc7a7b43b527160e336495"}}, &(0x7f0000000b40)=ANY=[@ANYBLOB="0003c7000000c7036c765ad98756dd648be26acd06e20c669fdb10afdc6980c988c94387b3516d4b220a1eaf710d5bc6b42287e6916fccf81909332fdf83a838c389f21bb447f30bc3114e0bf85ad22fead65f52d85e87b659aa5012f68c2a58aae13f07a7ef069b3be8a6077b787ae7c811128136a0dcec5caf15e44e7852b2de4115de00830b1eaa34c6bb7b94e79d5b20d22184b30568c958c679f3baa20d1b1debd2c3b8de445bd78b3ff97000f4075f9a7f2c8f31a4f65a82f63fe4399b1359540a1a4743feb82076c33520509c76"], &(0x7f00000002c0)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000340)={0x20, 0x29, 0xf, {0xf, 0x29, 0xf4, 0x80, 0xfc, 0x5, "309246b3", "66948c26"}}, &(0x7f0000000380)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x4, 0x3, 0x4, 0x3, 0x7, 0x773e, 0x913}}}, &(0x7f00000008c0)={0x84, &(0x7f00000004c0)={0x20, 0x16, 0xab, "7c4c2ffe4a4c1249dc6844c99796df142beb9652847406ab85ed8116ecb80436641d91825c110a13884f9ab5d38f8a04090be3af2a593873425157d0be2f177089fa80aa173a8e78614a1c7d5f3a76d6fade78b89f7ca6b3b393fa03b101e3a774e013bee225106ad51408bd0a2fef7beee2189bfec820337c1b992b9de9de0e390388a8f8e31be25e37ee7917877606c756f82c3a295475d3da0a3f042d3f3ee43ccc86dea5ed7a348cc4"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x31}, &(0x7f00000005c0)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000580)={0x20, 0x0, 0x4, {0x6, 0x1}}, &(0x7f0000000800)={0x20, 0x0, 0x8, {0x60, 0x20, [0xf0]}}, &(0x7f0000000600)={0x40, 0x7, 0x2, 0x23a}, &(0x7f0000000640)={0x40, 0x9, 0x1, 0xf9}, &(0x7f0000000680)={0x40, 0xb, 0x2, '\v;'}, &(0x7f00000006c0)={0x40, 0xf, 0x2, 0xd}, &(0x7f0000000700)={0x40, 0x13, 0x6}, &(0x7f0000000740)={0x40, 0x17, 0x6, @local}, &(0x7f0000000780)={0x40, 0x19, 0x2, "0d1c"}, &(0x7f00000007c0)={0x40, 0x1a, 0x2, 0x1000}, &(0x7f0000000980)={0x40, 0x1c, 0x1, 0x4}, &(0x7f0000000840)={0x40, 0x1e, 0x1, 0x6}, &(0x7f0000000880)={0x40, 0x21, 0x1, 0x1}}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 8.667157978s ago: executing program 3 (id=1301): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) r2 = openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r2, 0xa0044d03, &(0x7f00000000c0)) listen(r1, 0x0) accept4$bt_l2cap(r1, 0x0, 0x0, 0x80800) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2041, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r4, 0x4068aea3, &(0x7f0000000300)={0xdf, 0x0, 0x8000}) ioctl$KVM_GET_DIRTY_LOG(r4, 0x4010ae42, &(0x7f0000000040)={0x10200, 0x0, &(0x7f0000d1e000/0x2000)=nil}) timer_settime(0x0, 0x1, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x66, 0x0, &(0x7f00000010c0)) setsockopt$RDS_CANCEL_SENT_TO(r5, 0x114, 0x4, 0x0, 0x1c) syz_open_dev$hidraw(0x0, 0x5c00000000000000, 0x404200) 7.742516436s ago: executing program 1 (id=1304): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000240)={'wg0\x00', 0x0}) open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESOCT=r2, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) r4 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) connect$ax25(r4, &(0x7f0000000040)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x8}, [@default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x47) write$FUSE_INIT(r2, &(0x7f00000000c0)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x7ab78c4493c52f9b, 0x0, 0x0, 0x3}}, 0x50) syz_fuse_handle_req(r2, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r6, &(0x7f0000000300)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000b80)=ANY=[@ANYBLOB="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", @ANYRES32=r1, @ANYBLOB="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"], 0x2f8}, 0x1, 0x0, 0x0, 0x4048001}, 0x4) ioctl$CEC_S_MODE(r5, 0x40046109, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c00000018007f5e29bd7000ffdbdf25020010000200fe070000000008000400", @ANYRES32=r1, @ANYBLOB="08001ec55a7ec6e6e06540037aa30b400000000000000000c1b318b82690a75402c52f930034df210c0b8a6ec6384f0e5f174683f232f6e7306777008374c4b09490a368452ad840c53d3ab1d3c0aec4b0995c6d1ca815bc227fe55d6c3cc71fcd5a827c906905f3d3aad051b77fdd80f75c3a61ddad2bc24463c8671714adbb89bd5508259ded5d31ddaef0b6637b713444165d890ed4ffe83e3457cfb1e9dba976ad2254b03555dcbe89843744e8cefcd7"], 0x2c}, 0x1, 0xffffff7f, 0x0, 0x20000800}, 0x0) 7.595832727s ago: executing program 3 (id=1306): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r0}, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x30, r2, 0x1, 0x70bd24, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x24044805) (async) syz_emit_ethernet(0xae, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6000021000783afdfe8000000000000000000000000000bbff020000000000000000b4c70000000000009078000000000000000000000000180b00d414ce8ad4000aa78ce54006598080a8030037004023493b87aafaffffffffffffff23"], 0x0) r4 = syz_usb_connect(0x3, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r4, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (async) syz_usb_ep_write$ath9k_ep1(r4, 0x82, 0xc38, &(0x7f0000000080)=ANY=[]) (async) syz_usb_connect(0x3, 0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="120109000000c5400d0521013b6f000000010902120001fe0000000904"], 0x0) 6.837208008s ago: executing program 5 (id=1307): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x10b, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000000)=0x6) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, &(0x7f0000000100)=0x1000000) r5 = accept(r0, 0x0, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r8 = dup3(r7, r5, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0xfcffffffffffffff, &(0x7f0000000140)="cc"}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000540)={0x34, 0x0, &(0x7f0000000300)=[@decrefs, @acquire_done={0x40106309, 0x3}, @request_death={0x400c630e, 0x2}, @decrefs={0x40046307, 0x1}], 0x0, 0x0, 0x0}) r9 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r9, &(0x7f0000000480)={0x2020}, 0x2020) r10 = openat$tun(0xffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102}) ioctl$TUNSETQUEUE(r10, 0x400454d9, &(0x7f0000000080)={'nicvf0\x00', 0x400}) ioctl$TUNSETTXFILTER(r10, 0x401054d5, &(0x7f0000000380)=ANY=[]) sendmmsg$alg(r5, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="564004c6852da7a299e4c397614090d1a6e12edf1767f157", 0xfcdc}], 0x1, &(0x7f0000000480)=[@op={0x18}], 0x1d}], 0x1, 0x0) 6.755895217s ago: executing program 0 (id=1308): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$bt_l2cap(r0, &(0x7f00000001c0)={0x1f, 0x40, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x100, 0x1}, 0xe) close(r0) syz_usb_connect(0x5, 0x4a, &(0x7f0000000080)=ANY=[@ANYRES16=r0, @ANYRES16=r0], 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x10000, 0x0) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x80c4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$loop(0x0, 0xffffffff, 0x80000) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r3, &(0x7f0000000340)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x4002}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20044094}, 0x0) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x80201, 0x0) r5 = accept4$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @local}}, &(0x7f0000000200)=0x1c, 0x800) sendmsg$inet6(r5, &(0x7f0000033940)={0x0, 0x0, &(0x7f0000019600)=[{&(0x7f0000000280)="7894df2c190bcd198d971a2c780ec5027a3d1f2fcf354e2c91b3a8f4acaf633285e6ea6c8f001eaf920fdce82275ce1a8aa6ad0a249c023190f2878cceef5a67c4b46907d1c779120c61f36c7af6a1d9fc2fdee2b3ea71cb91427231e98bd1ea044d9855017bf0a5fbe4cf56c101816862efd427a14eaf6032d88e172a292ac0b3d0600c2c1d946ea57330a2caee26e944129ac0042e3223c5d97315cfd5d5", 0x9f}, {&(0x7f0000032680)="a393f9e19bdff155055b3c588c07d9fa85d5f8bae5fba6d2fbe5020a9099927c8353361d719c826de21c30b27f13d095250a83ced136ee0f8877cfd63b51a69ba3fd71c447ff1af463dd88bc06a6704b10678223ad54f5dcb96bcf7639cd78efd525b450f25d0caecc8a4de4a5a0bd345b1a60d2ae40ea29bff86546f0c77759b69d82e25a1adb5007d01bf949941ef75f8975dcd892b751c9f389b4fe9c5a19f5d2be5c6be2752c294f9be0a87f6795c39a9d478207ae0c2b4c019b23054cc5a942c00ee7610934e8cc80bd456fcb8842fa49467700ca2c977762506646199250384b819733cd5787c6b604644231f37a980f99f2c14dcc77d021ee1a5a5856745e484d8c77f272d69b5470514c10fa4ac3281e0ea49f459b53492e7bdcce9dbeb9594a698ed783ce6a574fb6e08845bbfb837cf809e94eb79ab2e51857b537fa95963eaa000b31a8cbf4a43c194e2fadf41d2fa7890cd972d59e9560ae6a545dfbb575fc392d5edb75efbbc2c7975757d06936381c27d9f05fb30bb7753543549f6e398fe2caddbe72ceb7142238a2038c5ede171378c1e914a25da03de6e7d7931e2c46e88d5c4cf2a1b8e6c5da4861fdb0917e056c13cbcb72d880211447c1dca66b610f9fc938a45ac69d9d426cf479780f3b7914b129957be3f0ca55b6f5d2fb67f60910a715baec316bf0edc69c75d44db2282554e356b6116b28f69bfb4c5f88abff234139f2c6c3c7168936392849ba181dba65a4c026265b559aa84f4b3f19c309896e9b5d55ca96decba3c5600709ab9c66669bf893821069b1e852e81817ea9d7d1af08188d8ce5d6a4ff8fec4c96270d97e4777a0c9555056f1c2a7d5b80f98de1134ae2d2a9c3aa8f02956b69b70a20b2844de80805555441aaa8eeddad3ba890af62111331f870b5b4ed76d40707ef252548e480a08babedb9f7551a6de3208db9f71d1a9031088f64e5ab7cc813bc447c71c68db855eb4b06e154ea2ee8ab4389d18b017793e55706122af54ac4b395ec19eea4a8e15f7f809775bd22916ca1b82448ec5770ec2b5406aafd3faad5ad99a9e6eebcdc609e2985bd2403028544ea47f375f91d3bdb9369993e2905a0b4f8d3a8de9c814db3379f936311b2152a231247e6c9626dedda39992b6198e3620e6feadbb11b0701cdb10e19f3c78f4ee2c52fdf8c4425d2b8061820bd9386af4ea1170a23327b3dfae404b504055e3b01a9ce8f116664ba0b5ebc5e35daedd79647ddca8076ad766aa83a01f2a4826d9939c2d3760dd9bff152d0ae5e3bd0941a4a9062a8ad4bf05f0e41618417bb09a1d4932852357ea6bd0bda5f82fea0b7ab13d0631576e64e6f204d0b305ae9a9fbdb7d72aa21cb50b80d74c86bf1564a4985123678dae82a90fd05b3f367728f7d18f55fe6cc6b7fb85685573e6a1d8b33024a22f025df69a485e97f5bb870aa7cb3c5654b0a80e6be049ec50459c3b1f1a1657b780a61a7f96dc05f4f22f2344f3e7012a870b80cfacf10872ab30d37b38ad086e37ebddd3b09e0189c029354bdad32f18abfe760d92b05e94c762ccd844e3646821bade5877e0ea2e0afd79a3e6b1d538b8bc5dec07f8fb646efaba877041c24347b00f9aecf50488ede61d79d6b9487386d20d9dc7b28c4cbc91aec1d1271e3ea111c6eee82e45f48360d8f9c32c81d587f424b704b4ae79891afaf712be1388d67a49ad13a576b4900dfb3f28df68a36cff5e8e3ca89f415610d7df7d3d372c80e73760996db12041491f5bc5aa8442ee9809d0817d10ccbd28c97d85199a5eb92ba25670d60e33a6ee7d772501cea63f8b5444f5ff2a183180cfd1c33417dbb364587d812eecdadbfad5d937ca2ed1f6d5167ca14631b13f2b8ee4e2dd318f3f7f038a4708c33288754c55c0c772807dfaa01d3d5f72fb371b03cfea48befddeb5e10f6864f08ebc1cb070577c42f53cde7414f10bc27a88164c07dd739b9d4c94f0d6e63e291785c09decacefae596a258eb2347fab1e172306047884755a23f7efe9ada851c8c4b07fdb14cf20e381fe3d474f6a3a1f2ded54c30b33ceb4fc3bd3d3f84f04eece6ccb1593fab029ef211bff98d888d3636e8760bd05876f0e44660811ddc8ca897dea6a7cab75980a1be64c8ea45295de4a8ac304ccd40f17ae9efab4989651486dc3e7c6b89fbdb5a396721315cf3d1db1682eb52c332514a4714649c5b32fc6cc208c899a5ebaf86970d855ceb5abf0409f6d2b5b31bb7f787f264cfd86672868235f7437dc9e56f67a89f29c7ca9d360297c7a62f674dd7394e97cd4552e8341c2cf0c419d6ea5ed21c25854b5362bf83ccb87ae34c29c565d0bf1f600b5a9ac5a3fefdf9e23a8cd639dc7efb0d547593bd599b55ee54448f93e5135086c484c6fe1d7a89c20599a0481990c3d192a9188c4bf7838419e5f57b5283a99441ca6903b74e06b87715928dbcbf3b373e988f43c56563ef8dafebc07f49d6175b980e85d1a06790e421be12dbb9d29845b383fbc929aea16aad109cf7bd399d5f5b6444def86a15c043c65a2ae62111f6c4365d5a5d9417538ff50a91889c9604b19f1910d1dcf9f257232aeeee9070a3f9eac9ecac0c7dfa12fc9094506eff7f40f9b6517b09e2054894801a45dc94490f2e5a9790e9696c9f94dea6000d0229750d84f7d4908350032b889e9a6ed87ae52138503231d50d3fe6ba2f1442f903100d27495b5802a98b2d3ff5222a840e038903d1d216fdea2ac58aba68b21384a93aefc9d0b35dbdfe565379dc3303f874c1c5a2a95a57bd63baa6de68a9bfa35db02df40016d741f137349c1ebb5215b68ae6eaf107eb81b62300e19f50a39338775a12b05afa81e68b1f087a0bc7899c08560e18f619d0531058fd60c66ed35da14538bb27e6b15e819593ab5f3c6c34a7a4f81be3a9e97d80f5ef2b351df8c3758f8cf5602309653fee982a15d2cced27aaf97958cdde38c7b438bb7b390882a09284a3f59d2fa887c57ae989bcd417fd39f31ecbfb5cef384fd993aae11b153d9ab6218cc4c39606c61ff2f3eeed4007f8d7bb16f1dda7178014f9dd5b453cfdf9c2062dd15b943d7c071a6f01fd1d06efecfc771ffa218d820fcd88ad1a804970575fabfc5d51c354a482235f4997410295e9380134f74cfe10cf3f1b4804a1c289bc7044b69f7fd03c29bc0c6f271a7898e75c40acb7d1f643fc1a05fcdb5a89d4e4d3327867ffff8fecaca52926f5d0e5689eaf4f017a603268f0c04c508a25c097eb0ba380ab29f9b1326917fbd9fd3cbc3f31ccb6c9d4193d3fa0f6d5485ee2fed46acf8bfb3da51a6263b688073af4f0d4edd2f525bf286e31716adb62f94b610a4cef9c4ba36e1b43c0ec9c7e69bc3345603a40457f72b476e918485ccc325d348c4f134953260aa5a1b5417287f85a38e044b8a0a85eac98f8908c6918dab4b5094900c1f67ea56a81552006da95de8417f45834c1cc7609de52f6c3585ae6de7c689ea197d7dc51c1bc38ead10140b9089bf2206954b1845cc4572c38e7367c9804507feb888f97aa00693cf204bb817d74ad499ef48f12cf2c7c5e63c3f0e9f5dbc9e7c7186e80280975ef3c5bebd2cd5d3de2aa5831f0214e6416bfa1a8b65cada564e44c756cf9451e162ccf1aff986f6e3779829370e5b6d819de0d53937132f3eb55e2c48f555781bc334ffada6610e28cecdcf5cdf5ac2dd219eb4ffb66c45e143e292425cb0d73217112317aea900ff54904348a271e9de1a714e41a06bebbd5d92ad1e0d31dbfed54d816071df9c019287e6b189e752ad10f8d588d4245749738c2647f65e5c82752822372934210c50aa1f9de730405b28b7e9b6bb3c07c1dbfbb5632edf64020b67726e23b6b90de7b3b72cd7ce6e9d390f29e057caea2c8306c5890719cdc4ff3e3fe285a3f2be094d565eadce6fe530f08229ced11a21950b953811fdc235c3b503b10e417595be784a11b9aa852e6468bf7e8301f2092972c8b8149c88f66bca8d9a9eb43ea9385a37b80b4fde6d09fe93f6fa637df4e63a34eafe00cd140a2b55994302914ea3f520cca7c20b20b8118232d42ce10e20cc9799ae72c920eb78289ff3a783ebe469729e4721b9798f2090d4d2e7b4b39eefa469da212e89b2e635415d6bd889fff165a82e7b8561ed043ac70c6a9f4fdbe42d0dedf268c65c5f0623650477b33bfa703d5ea4158c172b39c60623f9db43325f5bacb1f726f7ecec40ba5f405fb9074223f4b36530c5303bba3215eb4f40475d12472ce6971cbfb3b7e5a254f5b16ed054130fdf5e52ab8a8f7715b01225f3a4fe74ffcedc8f8dd9c4a81355673e5c6b331e4069f8bb7223eb78982c8f123b3e672c7c38323e787350084223f99f748b0e855a0e4c84de32571be3bc3c62c054b25911e3ae8d55b7abcd453817e32f2b60dcc5c6b3514a3af4f600a10dc02add224d3e21fee677ceae08a80b0cb4a4ec9aae94b4341a06038d69cdfed22facc0413298021c4580d08a5ac8ca2c4cc727b2c548a3cb6987206c558daa8de82b3a5afda6964895ecb2e0291b926e1dab400d67afcf8965115ebc8faae6ba95ce3ccdee36d62c9d3b43e77007224d6c867b02cc95901298452d8caca61c9ef167265054cfb13a7e4791ad9acf167ed727f9e7f99ad9f690f24788dc3decc782d7b6c6b26f92558774e2b3c3982101bc44918c2eb45bf79479449400b0d53162f3bf9a12824275602de147a232a51342ca6815369b1a72426759cb1af26fa7ff64fe9328531f0e8ac3c1b7fa0da1c68ab81f0180c8f7139e107f857de766cd2278673c5e9ffb8a6955fc48366c9560860a3b97cdd26d8566a6f551affab2347f7d5d0036378a1ffea8a0a142a777362d6764cb9011050c1ad976cbedd7bcb06680b225b3935caef7bf20636fe6dc4d8208f8e21d09c74f59181f870d0b2ab33ab445ee8031d0bb028eb052641396cb24076d84eea7b0654d2d0f15ce25bac03d10f05523fb1e42f9cd868bf8842f1b90570f54cbda309f3eb90f9e173a1ef2620434e6d9616136559616ac8c54f027c2f215156ac8fba981c03be9d6bc7464341c9f3e3e26db52e380b9fef3410f8e38a516b44d77b308a69ce8145d8d81e65b9fdcb0411c323631f61e3e6d6ee72016cfb912a308b171b9155338ccab20c7ba2fb793004fa587a177d42899d24ea52a8eab857cc898b7fd8d4074e062fba89cc57167140605abfedaf6fd94d3f351a90a8be35b45830ffe31ffbc85ffe3d9f78119bedc74bf9362d184441025ee9fdf92e18feb7a47aef831b3176411f49c78602b46213f08adc628c7272f1917df58274ef3833465eac1051b192062e5c577e448a01cf1c3f5e61db769dd9951068864c3b69ec7c788c9193adc19a2111847cab10dfb6223c68bf19a39baaaa83c9ea2129c96a9ebc747b453a557730e85f6fec0034b41f499e4c4a8acf1f809e0ebaf1e6cd4ce397397110d65a510e000f65ef56b84feb1314f374983e3740c580d5587d64a1b12c329797efb7b59366af8cd966c81355d38e69cc816d1edacdd0c4bbbe6475c463900e50cd5d86e03b198ea28be08bf3df8e5ded4e3a686763d7204daa8022e79481357a510f0037bf3b6a89eb3367a540ed2bfe8faca27c56e9216829986d4885da3e257012b77f2111847ce3f2ee704b003f47aea83f9717ba6b3f7f8188ec46f54bc797721e24e965cb528852b0d53649262a75ec19799122ddcafd9b122fedece5de8a5409a4ab8873b8a7649fb75be47ea7daac2f5f0932040", 0x1000}, {&(0x7f0000000380)="c2b17cdfab78a844e45de2f0e39192cd6665ed55f806", 0x16}, {&(0x7f00000003c0)="3e328d6383aeaafba742c7f3da77d1abb946f0db054267f31032411e9c05e9d42c715705b3c145b59ef0eb5fd561bd02676e5d423c6137ac5167593f250b4f6b81f85d0de200347ddedff821869fd34552e0f9ac8af90c22ae2ababae40017e7fd3c56af9e7535bbc7e494cef23171286dd1dd4fb41cc43564aa3e3295137fd82392c370ba41bbe8eb0e2325f8b4a5eaee7f9d49aa83e92c5b29d5780af0d47a1c1c9fc4cd4b08c69e013d44695b4c7fa20d40181b0bff1e3ac2494ab90e4b1534f7a1e89983cbae1c5295921e2c5da5709193469a8c4e70b561b053a2f9ca2f392a4a68ca75f191a96df0fb02", 0xed}, {&(0x7f00000004c0)="9168f44c86ce0e1e7077a5a6d2a8c15bc3b50a3fd714c7335126f2701227199fb3b517d5039fa06ef18d607f5cb81023b242abb492a3092e7bda4b7bfab5a8fbec743c0912ae23687c2ae185988f0b653e051170dfd20a2373991cace57c7e5ef177f71d102e422917c3a4a1ce7798dd263d9018185ec84596453bc7208911f8e7f39a4b1a2274e6ed171bde51d6a67d807b266425ff37d6f88e23bc2d116cb6421b5f59dd3c761920d1aaec3ccaa252c7fbcb592ff1", 0xb6}, {&(0x7f0000019580)="5c0fe24ee25fd72cb407c882d60b45bf84e0122710e2c2bc15121ac11d3978664e1aee5baa11c609eaa03f9bcffd1fbdef127e8de953231302a816e02160d6cd59430754cd70bd41527119a8f85df541ac626ae586db2d31381ceb449f5dd38dc4331e1ef48a", 0x66}], 0x6, &(0x7f0000033680)=[@flowinfo={{0x14, 0x29, 0xb, 0x6e8}}, @dontfrag={{0x14, 0x29, 0x3e, 0x3}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0x3}}, @dstopts={{0x98, 0x29, 0x37, {0x6, 0xf, '\x00', [@calipso={0x7, 0x18, {0x2, 0x4, 0x1, 0x575c, [0x7, 0xee]}}, @hao={0xc9, 0x10, @private0}, @pad1, @ra={0x5, 0x2, 0x8}, @pad1, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x2f}}, @generic={0x4, 0x19, "955a8051d878d763d8cd0a5e3d693ff94d0d60d712d7d876f1"}, @enc_lim={0x4, 0x1, 0x6}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @loopback}}, @ra]}}}, @dstopts_2292={{0x20, 0x29, 0x4, {0x32, 0x0, '\x00', [@pad1]}}}, @tclass={{0x14}}, @pktinfo={{0x24, 0x29, 0x32, {@dev={0xfe, 0x80, '\x00', 0xf}}}}, @dstopts_2292={{0x150, 0x29, 0x4, {0x2c, 0x26, '\x00', [@padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @ra, @generic={0xc, 0x53, "9e23a480af02db833559cc5b5a8057b7e82de0150a3232d342a3b14b5299c94ebbffa3d14df828488cdae1163f64b0bffbf77ff1ccc632057d3b725138f744bd9896d70fed2d690abe07930804b590b03f6d2e"}, @hao={0xc9, 0x10, @private2}, @jumbo={0xc2, 0x4, 0x800}, @ra={0x5, 0x2, 0xb7f7}, @enc_lim, @jumbo={0xc2, 0x4, 0x8000}, @jumbo={0xc2, 0x4, 0x6}, @generic={0x0, 0xa7, "03ee38371e526ebfb7cae08b960338a34a7d3d1d72a854de1a6c291b77cc5d133628c4d593cfcbab3964afccb2c3535e8e75054bb2a5490bfc30c9533db85e0e804a741612fd4e9d35d0801e215affb2c646db6f66a6bc39709d3bd0189cbac1a823ed3632c3d9c0b41b81aad395e8367cf35db150aece7ec8b29e7fea4531a3a9ea16b9cabbff89c66e5b4c2c4761aec16f91c550b8263896f771d8b9d8cd52d5d5859b3d6e0a"}]}}}], 0x2a8}, 0x4000000) write$rfkill(r4, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x1}, 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x15, 0x5, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x1c) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000030000000400010005"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b00000007000000010001000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000000400000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r9}, 0x10) 6.744671499s ago: executing program 1 (id=1309): r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000280)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000000)) r5 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000040), 0x0, &(0x7f00000002c0)={[{@usrquota_block_hardlimit={'usrquota_block_hardlimit', 0x3d, [0x6d]}}]}) openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={0xb}, 0x20) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000300)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000040], 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00'/17]}, 0x89) write$selinux_load(r5, &(0x7f0000000000)=ANY=[], 0x2000) clock_gettime(0x0, &(0x7f0000000180)) r6 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000000)='source', &(0x7f0000000840)='%\\,:\x85X\\\x03\xa6\xd7}\xcd\xeb*\xb1\xa8\xb7\x81\xc8\xcbR\xa8?\x97 \xcbz&\x17\xa4\xfd^\xe1I\x11X\x90\x03\xb7W\x05\xb0\x99\x10F0\xb5YP9\xc3\xe2M\xaa\x81\xfev:\xe40\x9e\xdb\x98\xb4\xd0\xdcE\x14\x910\x1b.G\xab\x86\xdfy\xe6\xde11_H]\xe2\xc3\xb2fa\x7f\x8c\xf3\xc6\x85\xc9\xd6j\xff\xaa\xdbWD\x87\xe3\\mUSy\x0f\x82qW\fE\xd15ec>:D+', 0x0) r7 = dup(r4) ioctl$VIDIOC_S_INPUT(r7, 0xc0045627, &(0x7f0000000140)=0x1) ioctl$KVM_SET_CPUID(r7, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000000000000d00"]) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000540)={0x0, 0x0, r1, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000400)={r8, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0], [0x0, 0x0, 0xf], [0x1000], [0x0, 0x0, 0x0, 0xffffffffffffffff]}) r10 = syz_usb_connect(0x2, 0x36, &(0x7f00000005c0)=ANY=[@ANYRES16, @ANYBLOB="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", @ANYRESDEC=0x0, @ANYRESHEX=r1, @ANYRES64=r9, @ANYRES64=r1, @ANYRESOCT=r8], 0x0) syz_usb_control_io$cdc_ncm(r10, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="40010400000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$NFT_BATCH(r7, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="140009000000000000000000000000000a00000a140000001100010000000000000000000700000a"], 0x28}, 0x1, 0x0, 0x0, 0x4004c180}, 0x80) 6.702000379s ago: executing program 2 (id=1310): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x48, &(0x7f0000001600), 0x4) socket(0x11, 0x3, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @empty, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @random="caac808b3db3", @multicast2, @link_local, @empty}}}}, 0x0) dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x4) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x2000, 0x2}, {0x10000, 0x3, 0x1, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffff9}, {0x0, 0x8, 0xfffffffffffffffc, 0x8}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in6=@empty, 0x2, 0x6c}, 0xa, @in=@empty, 0x0, 0x5, 0x0, 0xb7}}, 0xe8) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000000851000000100000095000000000000001800000020646c2500000000002020207b1af8ff00000000bd21ffff0000000007010000f8ffffffb502020008040000b703000000000000850000009d00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 6.233888201s ago: executing program 2 (id=1311): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) dup(0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r2], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@delchain={0x3c, 0x2c, 0xf31, 0x0, 0x2000, {0x0, 0x0, 0x0, r5, {0xfff1}, {0xfff2, 0xffff}, {0xffff, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x17}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008854}, 0x4010) 5.624018608s ago: executing program 2 (id=1312): r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000280)={{0x0, @rand_addr=0x64010101, 0x4e20, 0x4, 'lblcr\x00', 0x4, 0x0, 0xb}, {@private=0xa010102, 0x4e22, 0x2, 0x0, 0x4, 0x1}}, 0x44) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) chmod(0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r0) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000084, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000700)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0xbc, 0x2, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x6}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x401}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x54, 0x7, 0x0, 0x1, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x6}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x2}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x8000}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x19}, @IPSET_ATTR_BUCKETSIZE={0x5}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x5}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}}]}, @IPSET_ATTR_DATA={0x4}]}, 0xbc}, 0x1, 0x0, 0x0, 0x20008084}, 0x4004000) fsopen(&(0x7f0000000240)='tracefs\x00', 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = dup(r3) ioctl$IOC_PR_PREEMPT(r4, 0x401870cb, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) read$FUSE(r0, &(0x7f0000001600)={0x2020}, 0x2020) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x0, @local}, 0x2}}, 0x2e) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000180)={0x2, 0x0, &(0x7f0000000300)=""/236, &(0x7f0000000400)=""/156, &(0x7f00000004c0)=""/206, 0x2000}) sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[], 0xfc}}, 0x0) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e22, 0x81, @mcast2, 0x5}, 0x1c) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={0x34, r8, 0x1, 0x70bd2b, 0x25dfdbfe, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaaa}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x20006911}, 0x0) 5.525011332s ago: executing program 2 (id=1313): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) openat$dsp1(0xffffffffffffff9c, 0x0, 0x10180, 0x0) socket(0x10, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x1, 0x0, 0x2, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_spirange={0x2, 0x10, 0x0, 0xffffffff}, @sadb_address={0x3, 0x6, 0x6c, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) r2 = add_key$keyring(&(0x7f0000000140), 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f00000000c0)='cifs.idmap\x00', 0x0, 0x0, 0x0, r2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) bind$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xf5, 0x0, 0x1, 0x5, 0x6, @remote}, 0x14) openat$sysfs(0xffffffffffffff9c, 0x0, 0x169a82, 0x1ce) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000580)="d8000000180081034e91f783db4cb9040a1d020006007409e8fc55a10a0015000400142603600e120800060000000401a8000800080002000000000004000461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d4e1cace81ed0bffece0b42a9ecbeeccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d93000000000000004867edef090d82c399b3b549", 0xd8}], 0x1}, 0x0) fsopen(&(0x7f0000000100)='adfs\x00', 0x0) fchdir(0xffffffffffffffff) setgroups(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, 0x0, 0x0, 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 4.558282652s ago: executing program 5 (id=1314): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1, 0xffffffffffffffff}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f00000008c0)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9dd4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r3}, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfe, 0x4000000}, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x80000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r7, 0x25, &(0x7f00000000c0)) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r8, 0x26, &(0x7f0000000000)={0x1}) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r9, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r9, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x1}) close_range(r6, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x50, 0xffffffffffffffff, 0x78ee4000) 4.533511486s ago: executing program 2 (id=1315): setsockopt(0xffffffffffffffff, 0x1, 0x10000000000009, &(0x7f0000000100), 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f00000002c0)={0x0, 0x3e, 0x8, 0x0}) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) keyctl$join(0x1, 0x0) r2 = fsmount(r1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00'}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'virt_wifi0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@delneigh={0x5c, 0x1d, 0x1, 0x70bd25, 0x25dfdbfd, {0x7, 0x0, 0x0, r4, 0x5, 0x2d, 0x7}, [@NDA_LLADDR={0xa, 0x2, @broadcast}, @NDA_PROBES={0x8, 0x4, 0x7ff}, @NDA_PORT={0x6, 0x6, 0x4e23}, @NDA_CACHEINFO={0x14, 0x3, {0x4, 0xc46a, 0xdc5, 0x40}}, @NDA_IFINDEX={0x8, 0x8, r4}, @NDA_PORT={0x6, 0x6, 0x4e24}]}, 0x5c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x20, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x192}}, 0x20}}, 0x0) fchdir(r2) r5 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r5, 0x2007ffb) sendfile(r5, r5, 0x0, 0x1000000201005) r6 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) sendfile(r6, 0xffffffffffffffff, 0x0, 0x7ffff000) syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) 4.041967185s ago: executing program 3 (id=1316): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000400)=0x2, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000480)={0x1d, r1}, 0x10) close(r0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f00000190c0)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000019080)='./file0\x00', 0x0, 0x23010, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.stat\x00', 0x275a, 0x0) statx(r2, 0x0, 0x48e0cdf8471afff4, 0x54663aafb2d54055, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000080)=@generic={&(0x7f0000000040)='./file0\x00', r2}, 0x18) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_netfilter(0x10, 0x3, 0xc) sendto$inet6(r3, &(0x7f0000000080)="b3019c28", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000780)={0x44, r4, 0x801, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee339084eeef16f162471f4"}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x44151}, 0x0) 3.550310041s ago: executing program 0 (id=1317): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) syz_io_uring_setup(0x30f2, &(0x7f0000000080)={0x0, 0xffffffff, 0x2000, 0x2, 0x3d4, 0x0, r0}, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000340)='qdisc_destroy\x00', r2, 0x0, 0x9}, 0x13) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) socket$kcm(0x29, 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f00004ad000/0x2000)=nil, 0x2000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x10000) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000240)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f0000000280)={0x28, 0x7, r10, 0x0, &(0x7f00007ff000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r7, 0x3ba0, &(0x7f0000000400)={0x48, 0x5, r9, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r8, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, r11, 0x0, 0x10000, 0x0, 0x5, 0x1000, 0x749bc}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r8, 0x3ba0, &(0x7f0000000080)={0x48, 0x8, r11, 0x0, 0x81, 0xd90, &(0x7f0000000700)="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", 0x4}) r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8ffff00", @ANYRES16=r12, @ANYBLOB="01002bbd700000dcdf2513000000000001006e657464657673696d000000000002006e657464657673696d300000000003000300000000000b00090000000000110002000000"], 0xb8}, 0x1, 0x0, 0x0, 0x24040800}, 0x4040000) 3.549279208s ago: executing program 5 (id=1318): setpriority(0x0, 0x0, 0xd3b) r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) inotify_init() socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x3, 0x2fe, &(0x7f00000007c0)={{0x12, 0x1, 0x310, 0xf5, 0x8d, 0xd2, 0x8, 0x471, 0x32c, 0xeafc, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2ec, 0x3, 0x3, 0x6a, 0xc0, 0x10, [{{0x9, 0x4, 0x2b, 0x3, 0x1, 0x45, 0x58, 0x22, 0x7, [], [{{0x9, 0x5, 0x80, 0x8, 0x20, 0xff, 0x9, 0x5, [@generic={0x38, 0x5, "a88a1c54c3b185d8c35ced8f6a9f2d53d3bcbf0634985b3651e98804ab313540477acb84ef421626707ae624699451a887d1a059fadf"}, @generic={0x85, 0x8, "9a3a10a5e5b000bc49bf2f4c4d810a1eab353c83452d90a382f7966b53e3b608efb735eba2ca92e2ec8cf7fcaf4612c723e41c49af81690710e7bc9584b52682edf8e3b207d169081b9b14d0b78ee7cce46ca3bcfe272e847fd99bf20cfbb64e1ffc3ef66cf83923dc38b8b8d3105c02de5636ddfb7dcf86794daa3ffd1b0c34e85996"}]}}]}}, {{0x9, 0x4, 0xe2, 0x7f, 0x4, 0x7b, 0xa4, 0xd5, 0x9, [@uac_as={[@format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x3, 0x1, 0x6, 0x4, "c479"}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x9, 0x4, 0x5, 0x2, "d9b9a94c613c"}, @as_header={0x7, 0x24, 0x1, 0xc0, 0x9, 0x6}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x3f7, 0xfffd, 0x8}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x4, 0x2, 0x99, 0x5, "4d14", "0dd40b"}]}, @uac_as], [{{0x9, 0x5, 0x5, 0x4, 0x20, 0xe, 0x4, 0xf, [@generic={0x8b, 0x9, "723dfc8635045eea12abfb26f020216b6a79d4f03cb82f3cf80e212ed8dc8a791d7d441f67a3dfde8eb519486cdd1a574680770175b38782bdc97d72ad964100610625e89000cdb9f4e298d8a3316723c87b6f0b86d8f38f99690d3669ec8b19ee830565034c26b9694c3302f148ae69c119256de3c4dd08d7197656392ef24ae445dfff0bb56db72f"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x1e, 0x506d}]}}, {{0x9, 0x5, 0x7, 0x0, 0x3ff, 0x0, 0x2, 0x6}}, {{0x9, 0x5, 0xf, 0x0, 0x20, 0xc, 0x4, 0xb1}}, {{0x9, 0x5, 0xd, 0x4, 0x40, 0x5, 0x6, 0x4, [@generic={0xa8, 0xc, "f340ae07b3abb7a09ce965f3557fc1ac270e27cabf2b5244a704a2d0182ea2a192c70a5dc3de6991a8597016532148f3c5704dd51b80e616b768fba05c97b29f111b26c214f853c450fd7bc35dc67fd8d5b15a062c88856a5255d089a67033d410d6a7481f4b3fb4297b6a365795faada0b5bdd7987406f1914aac1e4a5c5aecc50cc771a842a9b1399b0a581445ee0fa098c90944e5770f9d6cc2367b4bb36b2379281ba885"}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x2, 0x7676}]}}]}}, {{0x9, 0x4, 0x35, 0xc, 0x6, 0xff, 0x41, 0xdf, 0x8, [], [{{0x9, 0x5, 0x5, 0x8, 0x208, 0x9, 0x6}}, {{0x9, 0x5, 0xe, 0x2, 0x3ff, 0x4, 0x6, 0xe}}, {{0x9, 0x5, 0x0, 0x4, 0x3ff, 0x5, 0xf9, 0x4}}, {{0x9, 0x5, 0xd, 0x8, 0x8, 0x4, 0x1, 0xc, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xa, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x181, 0x25, 0x8}]}}, {{0x9, 0x5, 0x6, 0xa3643b1e397becd8, 0x200, 0x5, 0x7, 0x6, [@generic={0x1d, 0x21, "982a53b6d30d3ad8754e369586214154be9b59b25eca9a83ab8ad3"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xb3, 0x8000}]}}, {{0x9, 0x5, 0xb, 0x2, 0x8, 0xf0, 0x56, 0x7f}}]}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) open(0x0, 0x0, 0x100) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="c6c9001055d788465468161d3704001c00"]) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000800, 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) rename(0x0, &(0x7f0000000780)='./file2\x00') symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') 3.389775004s ago: executing program 1 (id=1319): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000040000000) recvmmsg(r0, &(0x7f0000002d40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000002f00)=""/130, 0x82}], 0x1}, 0xfffffffd}, {{0x0, 0x0, 0x0}, 0xd335}], 0x2, 0x2120, 0x0) 3.209225453s ago: executing program 3 (id=1320): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r1) r3 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$6lowpan_enable(r3, &(0x7f0000000080)='0', 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000000000000000005000600060000000800090001000000050007"], 0x44}}, 0x0) 2.609918375s ago: executing program 3 (id=1321): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000001e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = mq_open(&(0x7f0000000040)='!se\xf7ih,\x17i\xacP\xe6lNnuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000300)={0xfffffffffffffffd, 0x1, 0x7, 0x4}) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r3, 0x0, 0x0, 0x3, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0xfffffffffffffffc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000006880)={0x80000010}) io_submit(0x0, 0x1, &(0x7f00000000c0)=[0x0]) getsockopt$SO_J1939_PROMISC(r1, 0x6b, 0x2, &(0x7f0000000140), &(0x7f0000000180)=0x4) 2.476372303s ago: executing program 0 (id=1322): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) dup(0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r2], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@delchain={0x3c, 0x2c, 0xf31, 0x0, 0x2000, {0x0, 0x0, 0x0, r5, {0xfff1}, {0xfff2, 0xffff}, {0xffff, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x17}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008854}, 0x4010) 2.475822466s ago: executing program 1 (id=1323): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_UNBLANKSCREEN(r0, 0x560c, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000080)='veno\x00', 0x5) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@ipv6_newrule={0x1c, 0x1a, 0x1, 0x400000, 0x0, {0x81, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x1c}}, 0x0) r4 = syz_open_dev$video4linux(&(0x7f00000000c0), 0x4000000000000d, 0x123002) syz_emit_ethernet(0x92, &(0x7f0000000200)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x84, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr, {[@timestamp_addr={0x44, 0x4c, 0x23, 0x1, 0xb, [{@empty, 0x2}, {@dev={0xac, 0x14, 0x14, 0x1d}}, {@multicast2, 0x7}, {@local, 0x5}, {@broadcast, 0x8d7}, {@remote, 0x4}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x1800000}, {@multicast1, 0xd7}, {@empty, 0xe0}]}]}}, "17c1b7df60c70000"}}}}}, 0x0) ioctl$VIDIOC_QUERYSTD(r4, 0x8008563f, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=ANY=[@ANYBLOB="380000001800dd8d000000000000000002"], 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) 2.147241023s ago: executing program 3 (id=1324): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x43, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f0000000040)) 1.33094462s ago: executing program 2 (id=1325): r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1e44000010203010902640002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c00000108000905810320000000000904010000020d00000904010102020d0000090582020004fefc000905030200020000"], 0x0) syz_usb_connect$cdc_ecm(0x2, 0xa3, &(0x7f0000000140)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x60, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x91, 0x1, 0x1, 0x2, 0x50, 0x7, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x2, 0x6, 0x0, 0x9, {{0x9, 0x24, 0x6, 0x0, 0x0, "3deae636"}, {0x5, 0x24, 0x0, 0xfffc}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x54, 0x40, 0x1}, [@mdlm_detail={0x49, 0x24, 0x13, 0x8, "dff40e039a5821b5e537c044bce9b4a4342c2a1152ca08afcd5f3ca4a8a690d678be200195f28b52c81324f5048f9289c700e68ec15da1ddacb727c3479f951a869d79b93f"}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x400, 0x1d, 0x3, 0xf8}}], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x1, 0x0, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x938f1cd432505437, 0x90, 0x8d, 0x1}}}}}]}}]}}, &(0x7f0000000740)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x300, 0x7, 0x9, 0xe7, 0xff, 0x9}, 0x47, &(0x7f0000000200)={0x5, 0xf, 0x47, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x9, 0xb, 0x2, 0x5}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x17, 0x6, 0x3}, @ptm_cap={0x3}, @ssp_cap={0x24, 0x10, 0xa, 0xb6, 0x6, 0xc, 0x870f, 0xf26d, [0xc0, 0x3fc0, 0x3f0f, 0xb647865cef1255b2, 0x3fc0, 0x0]}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0xc, 0xa, 0x7}]}, 0x6, [{0xf1, &(0x7f00000003c0)=@string={0xf1, 0x3, "b5bf583f64c453976922e159edf90f1f1b1f85f808a0a96acf1fdef122f188034677997bf3eaf5e2fa470bf42d6ebe6bbc5842b33eb2f79cbe65d229ca68647e1fd1b58cecfb724e115c7bc2dfa94423e6438f144ebebbd5458d9e056d2e726912a502247d72827e32e2610d38d804c7874a4ef6abbc99f43dfafd7c62faabeed70c803599575090ba5510815d2a0881bed33abed0a94474534a7b15c7bed6a8016382c88347b5cfc011ebd35e031e03865dbdbc0b2f7ee4247904799e6f33d537489260422a47bf2eed814acbeac02f1c13561d06046c5ef56b705dc4661494d5b4f6d79538526089a6d0225ce4dd"}}, {0xfa, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"]}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x801}}, {0xe1, &(0x7f00000005c0)=@string={0xe1, 0x3, "59da5e6d26c650cb5fb27263c56b9ab4de85f128b134a6c4d323c5eb9db8a03e6fe8cec985fb957eaa801369b0ea3f6f00ffd18e27868c04142a5271f9e4dc94671216d1a9d437882df4ab139d4e9613e6cd28436c9dc400318e129552b78cdddbbd4655a23868ad78418bb2fddc50adc14b86041d788685741682ed724582a74188e7ac7be8dfbbf7de312473e3fd8ff8a20ab382ae05e4acb0ad04ada7a02757143caecef4023d12d55055d2fec7963c7de871cbcd297d6130aa64154c49c921f20b6a1bb0d7319a5cda7676b0a8cf2ec92499ee060bb0f70767cec45a14"}}, {0x78, &(0x7f00000006c0)=@string={0x78, 0x3, "6e73a609f311049e4ee9d10fe7e09f0af45f2831ed7a61fe74dee3362f287bdcd5ccf03c1fc4c3ef320228cad76ac632cc2ae45451bc702e6ef5e97ed9588a6ac621677bfb1cb6252ec800606c5c69199470bbc49abdd7316fb4579e656b6f2e528e9a20dac8212a0631373d1e0ee3382d8db20494f2"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0xd7165be8bc2a758a}}]}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x20, 0x80, 0x40, {0x26, 0x10, 0x10, 0x10, 0xe, 0x10, 0x8f, 0x1ff, 0x10, 0x0, 0xa, 0x2010}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 1.269831663s ago: executing program 1 (id=1326): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) shmctl$IPC_RMID(0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_getaddr={0x40, 0x16, 0x1, 0x0, 0x0, {}, [@IFA_ADDRESS={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @loopback}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10004, 0x800}, [@IFLA_WEIGHT={0x8, 0xf, 0x6}]}, 0x28}, 0x1, 0xffffffea, 0x0, 0x4041041}, 0x0) chdir(&(0x7f00000000c0)='./bus\x00') r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@setlink={0x28, 0x13, 0x1, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x60c20, 0x8000}, [@IFLA_NET_NS_PID={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c854}, 0x4000) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x80, @void, @value}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_ringparam={0x11, 0x0, 0x0, 0x0, 0x0, 0x1b30}}) ioctl(r5, 0x8b1a, &(0x7f0000000040)) r6 = syz_open_dev$sndctrl(&(0x7f0000000600), 0x0, 0x8801) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000001340)={{0x0, 0x0, 0x0, 0x8, 'syz0\x00'}, 0x3, 0x0, 0x8, 0x0, 0x2, 0x0, 'syz1\x00', &(0x7f0000000180)=['\x00', '-[\'\x00'], 0x5}) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r2, 0x0, 0x0, 0xa00}]) syz_init_net_socket$x25(0x9, 0x5, 0x0) 840.84208ms ago: executing program 0 (id=1327): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000200)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000007", 0x58}], 0x1) 310.611083ms ago: executing program 5 (id=1328): set_mempolicy(0x4005, &(0x7f0000000040)=0x1001, 0x4) mmap(&(0x7f0000da5000/0x3000)=nil, 0x3000, 0x1, 0x4c831, 0xffffffffffffffff, 0x1000000) 162.057452ms ago: executing program 0 (id=1329): syz_emit_ethernet(0xbf, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd606410a600890000fe80000000000500000000000000001efe80"], 0x0) 69.908858ms ago: executing program 5 (id=1330): bpf$TOKEN_CREATE(0x24, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$inet6(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000006f80)=ANY=[@ANYBLOB="a03700002d00010026bd7000fcdbdf250400", @ANYBLOB], 0x37a0}, 0x1, 0x1000000, 0x0, 0x4000d}, 0x20000000) 51.659017ms ago: executing program 1 (id=1331): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x34, r1, 0x1, 0x0, 0x8000, {0x34}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c000}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x0, 0x0) mknodat(r2, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x23}]}}}]}]}], {0x14}}, 0x7c}, 0x1, 0x0, 0x0, 0x24044800}, 0x0) r4 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x81, 0x400, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = userfaultfd(0x1) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000080)) r7 = getegid() fsetxattr$system_posix_acl(r4, &(0x7f0000000180)='system.posix_acl_default\x00', &(0x7f0000000700)={{}, {0x1, 0x3}, [{0x2, 0x1}, {0x2, 0x1, 0xee00}, {0x2, 0x2}, {0x2, 0x4}, {0x2, 0x7, 0xffffffffffffffff}, {0x2, 0x4}], {0x4, 0x1}, [{0x8, 0xf}, {0x8, 0x5}, {}, {}, {0x8, 0x2}, {0x8, 0x3, r7}], {0x10, 0x6}, {0x20, 0x6}}, 0x84, 0x2) syz_emit_vhci(&(0x7f0000002840)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_DEF_ERR_DATA_REPORTING={{0x8}, 0xfc}}}, 0x7) ioctl$UFFDIO_ZEROPAGE(r6, 0xc020aa07, &(0x7f0000000280)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}, 0x200000000000000}) r8 = socket$inet6_udp(0xa, 0x2, 0x0) r9 = socket(0xa, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r9, 0x0, 0x80, &(0x7f0000000300)=@broute={'broute\x00', 0x20, 0x2, 0x2, [0x0, 0x204, 0x0, 0x1, 0xffffffffbffffffe, 0x200004c0], 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16]}, 0x7a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x11, 0x24000}, @TCA_FQ_QUANTUM={0x8, 0x3, 0x4000}]}}]}, 0x40}}, 0x0) linkat(r2, &(0x7f0000000100)='./file1\x00', r2, &(0x7f0000000240)='./file0\x00', 0x0) 0s ago: executing program 0 (id=1332): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x200000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r2}, 0x10) sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x20, 0x0, 0x1, 0x70bd27, 0x0, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_REG_RULES={0x4}]}, 0x20}}, 0x0) kernel console output (not intermixed with test programs): otocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9473 comm=syz.1.927 [ 343.369954][ T5891] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 343.390739][ T5891] usb 6-1: device descriptor read/8, error -71 [ 343.405157][ T5873] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 343.420341][ T5873] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 343.432540][ T5873] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 343.501384][ T5873] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.540246][ T5891] usb usb6-port1: unable to enumerate USB device [ 343.572602][ T9470] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 343.590100][ T5873] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 343.839518][ T5891] usb 2-1: new full-speed USB device number 52 using dummy_hcd [ 343.913661][ T30] audit: type=1400 audit(1748322295.493:720): avc: denied { create } for pid=9469 comm="syz.2.926" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 343.944132][ T30] audit: type=1400 audit(1748322295.513:721): avc: denied { accept } for pid=9469 comm="syz.2.926" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 344.022799][ T5891] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 344.065306][ T5891] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 344.094472][ T9484] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 344.102027][ T9484] UDF-fs: Scanning with blocksize 512 failed [ 344.109146][ T9484] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 344.116687][ T9484] UDF-fs: Scanning with blocksize 1024 failed [ 344.124124][ T9484] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 344.131728][ T9484] UDF-fs: Scanning with blocksize 2048 failed [ 344.138743][ T9484] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 344.146280][ T9484] UDF-fs: Scanning with blocksize 4096 failed [ 344.227724][ T5891] usb 2-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 344.306301][ T5891] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.533960][ T5891] usb 2-1: config 0 descriptor?? [ 344.627751][ T9481] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 345.786448][ T9481] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 345.908236][ T9481] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 346.090243][ T5891] input: HID 041e:3100 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:041E:3100.0008/input/input13 [ 346.231281][ T9481] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 346.268642][ T5891] creative-sb0540 0003:041E:3100.0008: input,hidraw0: USB HID v0.05 Device [HID 041e:3100] on usb-dummy_hcd.1-1/input0 [ 346.292345][ T9481] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 346.366313][ T5861] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 346.599967][ T30] audit: type=1400 audit(1748322298.073:722): avc: denied { create } for pid=9525 comm="syz.0.933" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 347.119427][ T30] audit: type=1400 audit(1748322298.143:723): avc: denied { bind } for pid=9525 comm="syz.0.933" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 347.182665][ T24] usb 2-1: USB disconnect, device number 52 [ 347.190241][ T5861] usb 6-1: Using ep0 maxpacket: 32 [ 347.198638][ T5861] usb 6-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 347.276530][ T5861] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.319088][ T5861] usb 6-1: config 0 descriptor?? [ 347.362536][ T5861] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 347.535415][ T24] usb 3-1: USB disconnect, device number 32 [ 348.237384][ T9524] xt_l2tp: unknown flags: 17 [ 349.197028][ T30] audit: type=1400 audit(1748322300.773:724): avc: denied { execmem } for pid=9523 comm="syz.5.932" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 349.217029][ T5861] gspca_vc032x: reg_w err -110 [ 349.251996][ T5861] gspca_vc032x: I2c Bus Busy Wait 00 [ 349.257310][ T5861] gspca_vc032x: I2c Bus Busy Wait 00 [ 349.307347][ T9556] sp0: Synchronizing with TNC [ 349.307423][ T5861] gspca_vc032x: I2c Bus Busy Wait 00 [ 349.337893][ T30] audit: type=1400 audit(1748322300.773:725): avc: denied { execute } for pid=9523 comm="syz.5.932" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=27435 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 349.363905][ C1] vkms_vblank_simulate: vblank timer overrun [ 349.393370][ T5861] gspca_vc032x: I2c Bus Busy Wait 00 [ 349.429998][ T5861] gspca_vc032x: I2c Bus Busy Wait 00 [ 349.435307][ T5861] gspca_vc032x: I2c Bus Busy Wait 00 [ 349.448291][ T30] audit: type=1400 audit(1748322300.903:726): avc: denied { mounton } for pid=9555 comm="syz.0.940" path="/202/file0" dev="tmpfs" ino=1109 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 349.470719][ T5861] gspca_vc032x: I2c Bus Busy Wait 00 [ 349.470733][ T5861] gspca_vc032x: I2c Bus Busy Wait 00 [ 349.470742][ T5861] gspca_vc032x: I2c Bus Busy Wait 00 [ 349.470751][ T5861] gspca_vc032x: I2c Bus Busy Wait 00 [ 349.470760][ T5861] gspca_vc032x: I2c Bus Busy Wait 00 [ 349.470768][ T5861] gspca_vc032x: I2c Bus Busy Wait 00 [ 349.470776][ T5861] gspca_vc032x: I2c Bus Busy Wait 00 [ 349.470785][ T5861] gspca_vc032x: I2c Bus Busy Wait 00 [ 349.470793][ T5861] gspca_vc032x: I2c Bus Busy Wait 00 [ 349.470801][ T5861] gspca_vc032x: I2c Bus Busy Wait 00 [ 349.470809][ T5861] gspca_vc032x: I2c Bus Busy Wait 00 [ 349.470817][ T5861] gspca_vc032x: I2c Bus Busy Wait 00 [ 349.470825][ T5861] gspca_vc032x: Unknown sensor... [ 349.470887][ T5861] vc032x 6-1:0.0: probe with driver vc032x failed with error -22 [ 349.563848][ T30] audit: type=1400 audit(1748322300.913:727): avc: denied { mount } for pid=9555 comm="syz.0.940" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 349.591243][ T30] audit: type=1400 audit(1748322300.953:728): avc: denied { read write } for pid=5808 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 349.621700][ T30] audit: type=1400 audit(1748322300.953:729): avc: denied { open } for pid=5808 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 349.709999][ T30] audit: type=1400 audit(1748322300.953:730): avc: denied { ioctl } for pid=5808 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 349.743731][ T30] audit: type=1400 audit(1748322301.003:731): avc: denied { create } for pid=9559 comm="syz.1.941" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 349.772780][ T30] audit: type=1400 audit(1748322301.013:732): avc: denied { read } for pid=9559 comm="syz.1.941" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 349.811829][ T24] usb 6-1: USB disconnect, device number 9 [ 349.976169][ T30] audit: type=1400 audit(1748322301.013:733): avc: denied { open } for pid=9559 comm="syz.1.941" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 350.597826][ T9564] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 350.605512][ T9564] UDF-fs: Scanning with blocksize 512 failed [ 350.612825][ T9564] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 350.621334][ T9564] UDF-fs: Scanning with blocksize 1024 failed [ 350.629326][ T9564] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 350.691113][ T9564] UDF-fs: Scanning with blocksize 2048 failed [ 350.699448][ T9564] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 350.707142][ T9564] UDF-fs: Scanning with blocksize 4096 failed [ 353.213943][ T9574] netlink: 'syz.5.945': attribute type 2 has an invalid length. [ 353.301352][ T9575] netlink: 24 bytes leftover after parsing attributes in process `syz.0.946'. [ 353.339000][ T9575] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9575 comm=syz.0.946 [ 353.351637][ T5864] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 353.469714][ T9578] bridge1: entered promiscuous mode [ 353.475863][ T9578] bridge1: entered allmulticast mode [ 353.493563][ T9578] team0: Port device bridge1 added [ 353.590916][ T5864] usb 2-1: Using ep0 maxpacket: 16 [ 353.604762][ T5864] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 353.618220][ T5864] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 353.632385][ T5864] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 353.643145][ T5864] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 353.674594][ T5864] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 353.720541][ T9580] syz.0.947: attempt to access beyond end of device [ 353.720541][ T9580] nbd0: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 353.733888][ T9580] EXT4-fs (nbd0): unable to read superblock [ 354.103833][ T5864] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 354.116455][ T5864] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 354.126136][ T5864] usb 2-1: Manufacturer: syz [ 354.138814][ T5864] usb 2-1: config 0 descriptor?? [ 354.590173][ T30] kauditd_printk_skb: 33 callbacks suppressed [ 354.590189][ T30] audit: type=1400 audit(1748322306.133:767): avc: denied { create } for pid=9569 comm="syz.1.944" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 354.696927][ T30] audit: type=1400 audit(1748322306.273:768): avc: denied { create } for pid=9590 comm="syz.0.949" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 354.780240][ T5864] rc_core: IR keymap rc-hauppauge not found [ 354.789951][ T5864] Registered IR keymap rc-empty [ 354.794915][ T5864] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 354.816007][ T30] audit: type=1400 audit(1748322306.343:769): avc: denied { create } for pid=9592 comm="syz.1.950" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 354.870635][ T5864] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 354.895714][ T30] audit: type=1400 audit(1748322306.343:770): avc: denied { setopt } for pid=9592 comm="syz.1.950" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 354.920811][ T5864] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 354.949252][ T5864] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input14 [ 354.966123][ T30] audit: type=1400 audit(1748322306.343:771): avc: denied { bind } for pid=9592 comm="syz.1.950" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 354.992948][ T30] audit: type=1400 audit(1748322306.573:772): avc: denied { read } for pid=5170 comm="acpid" name="event4" dev="devtmpfs" ino=3211 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 355.006320][ T9604] netlink: 60 bytes leftover after parsing attributes in process `syz.1.952'. [ 355.015591][ T5864] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 355.034357][ T30] audit: type=1400 audit(1748322306.573:773): avc: denied { open } for pid=5170 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3211 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 355.114538][ T9600] netlink: 60 bytes leftover after parsing attributes in process `syz.1.952'. [ 355.204408][ T5864] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 355.212099][ T30] audit: type=1400 audit(1748322306.573:774): avc: denied { ioctl } for pid=5170 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3211 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 355.243651][ T5864] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 355.258464][ T30] audit: type=1400 audit(1748322306.833:775): avc: denied { map_create } for pid=9606 comm="syz.1.954" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 355.277839][ T5864] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 355.303456][ T5864] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 355.396023][ T12] Bluetooth: (null): Too short H5 packet [ 355.853565][ T30] audit: type=1400 audit(1748322307.383:776): avc: denied { read write } for pid=9606 comm="syz.1.954" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 355.859970][ T5864] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 355.885266][ T12] Bluetooth: (null): Invalid header checksum [ 355.899840][ T12] Bluetooth: (null): Invalid header checksum [ 355.927096][ T12] Bluetooth: (null): Invalid header checksum [ 355.990598][ T12] Bluetooth: (null): Invalid header checksum [ 356.046887][ T12] Bluetooth: (null): Invalid header checksum [ 356.053373][ T5864] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 356.097380][ T12] Bluetooth: (null): Invalid header checksum [ 356.123932][ T12] Bluetooth: (null): Invalid header checksum [ 356.130358][ T5864] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 356.161917][ T12] Bluetooth: (null): Invalid header checksum [ 356.180402][ T5864] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 356.200287][ T12] Bluetooth: (null): Invalid header checksum [ 356.245223][ T5864] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 356.271683][ T12] Bluetooth: (null): Invalid header checksum [ 356.322355][ T5864] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 356.373572][ T5864] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 356.398247][ T12] Bluetooth: (null): Invalid header checksum [ 356.499592][ T12] Bluetooth: (null): Invalid header checksum [ 356.553902][ T5864] usb 2-1: USB disconnect, device number 53 [ 356.601480][ T6319] Bluetooth: (null): Invalid header checksum [ 356.714806][ T6319] Bluetooth: (null): Invalid header checksum [ 356.835987][ T12] Bluetooth: (null): Invalid header checksum [ 356.930702][ T6352] Bluetooth: (null): Invalid header checksum [ 357.040976][ T6322] Bluetooth: (null): Invalid header checksum [ 357.151077][ T12] Bluetooth: (null): Invalid header checksum [ 357.277707][ T12] Bluetooth: (null): Invalid header checksum [ 357.370990][ T6319] Bluetooth: (null): Invalid header checksum [ 357.486761][ T6319] Bluetooth: (null): Invalid header checksum [ 357.590774][ T1142] Bluetooth: (null): Invalid header checksum [ 357.701671][ T1142] Bluetooth: (null): Invalid header checksum [ 357.810531][ T12] Bluetooth: (null): Invalid header checksum [ 358.509933][ T5891] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 359.079795][ T9632] netlink: 'syz.0.960': attribute type 1 has an invalid length. [ 359.324692][ T9632] 8021q: adding VLAN 0 to HW filter on device bond1 [ 359.380362][ T5891] usb 2-1: Using ep0 maxpacket: 8 [ 359.388329][ T5891] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 359.399371][ T5891] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.461539][ T9626] 8021q: adding VLAN 0 to HW filter on device bond1 [ 359.477081][ T5891] usb 2-1: config 0 descriptor?? [ 359.491476][ T9626] bond1: (slave vxcan1): The slave device specified does not support setting the MAC address [ 359.514642][ T9626] bond1: (slave vxcan1): Error -95 calling set_mac_address [ 359.528473][ T1142] Bluetooth: hci1: Frame reassembly failed (-84) [ 359.538363][ T1142] Bluetooth: hci1: Frame reassembly failed (-84) [ 359.770281][ T5864] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 359.800355][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 359.800370][ T30] audit: type=1400 audit(1748322311.373:798): avc: denied { connect } for pid=9639 comm="syz.3.963" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 360.076045][ T30] audit: type=1400 audit(1748322311.573:799): avc: denied { firmware_load } for pid=9637 comm="syz.0.962" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 360.423589][ T5864] usb 6-1: Using ep0 maxpacket: 8 [ 360.434946][ T5864] usb 6-1: config 0 has an invalid interface number: 186 but max is 0 [ 360.445354][ T9645] netlink: 24 bytes leftover after parsing attributes in process `syz.3.964'. [ 360.454299][ T5864] usb 6-1: config 0 has no interface number 0 [ 360.470206][ T5864] usb 6-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 360.499579][ T5864] usb 6-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 360.512733][ T5864] usb 6-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 360.531655][ T9645] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9645 comm=syz.3.964 [ 360.544907][ T5864] usb 6-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 360.638600][ T30] audit: type=1400 audit(1748322312.213:800): avc: denied { mount } for pid=9622 comm="syz.1.958" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 360.720243][ T5864] usb 6-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 360.735580][ T5864] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.746209][ T5864] usb 6-1: Product: syz [ 360.750944][ T5864] usb 6-1: Manufacturer: syz [ 360.755864][ T5864] usb 6-1: SerialNumber: syz [ 360.763758][ T5864] usb 6-1: config 0 descriptor?? [ 360.770105][ T30] audit: type=1400 audit(1748322312.343:801): avc: denied { unlink } for pid=9651 comm="syz.0.966" name="#11" dev="tmpfs" ino=1157 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 360.778195][ T9652] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 361.030419][ T5815] Bluetooth: hci5: command 0x0405 tx timeout [ 361.275083][ T5864] iowarrior 6-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 361.287385][ T30] audit: type=1400 audit(1748322312.353:802): avc: denied { getattr } for pid=9651 comm="syz.0.966" name="/" dev="9p" ino=4412287765254868893 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 361.335269][ T30] audit: type=1400 audit(1748322312.653:803): avc: denied { mount } for pid=9651 comm="syz.0.966" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 361.452836][ T9659] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 361.464367][ T9659] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 361.465630][ T30] audit: type=1400 audit(1748322313.023:804): avc: denied { write } for pid=9635 comm="syz.5.961" name="iowarrior0" dev="devtmpfs" ino=3217 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 361.473418][ T9659] Bluetooth: hci1: Frame reassembly failed (-84) [ 361.636443][ T5828] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 361.643019][ T5815] Bluetooth: hci1: command 0x1003 tx timeout [ 361.864373][ T9665] kAFS: unparsable volume name [ 361.876755][ T30] audit: type=1400 audit(1748322313.123:805): avc: denied { create } for pid=9655 comm="syz.3.967" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 361.896495][ T30] audit: type=1400 audit(1748322313.133:806): avc: denied { setopt } for pid=9655 comm="syz.3.967" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 361.916652][ T30] audit: type=1400 audit(1748322313.203:807): avc: denied { unmount } for pid=5816 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 361.972537][ C0] iowarrior 6-1:0.186: iowarrior_callback - usb_submit_urb failed with result -1 [ 361.987709][ T24] usb 6-1: USB disconnect, device number 10 [ 362.311282][ T5891] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 362.385113][ T5891] asix 2-1:0.0: probe with driver asix failed with error -71 [ 362.506599][ T5891] usb 2-1: USB disconnect, device number 54 [ 364.788858][ T9703] Can't find a SQUASHFS superblock on nullb0 [ 364.944709][ T9705] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 364.953933][ T9705] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 364.975618][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 364.975634][ T30] audit: type=1800 audit(1748322316.353:818): pid=9703 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.980" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 365.085340][ T30] audit: type=1400 audit(1748322316.383:819): avc: denied { write } for pid=9698 comm="syz.0.979" name="btrfs-control" dev="devtmpfs" ino=1309 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 365.109217][ T30] audit: type=1400 audit(1748322316.383:820): avc: denied { open } for pid=9698 comm="syz.0.979" path="/dev/btrfs-control" dev="devtmpfs" ino=1309 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 365.186234][ T30] audit: type=1400 audit(1748322316.523:821): avc: denied { create } for pid=9698 comm="syz.0.979" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 365.466807][ T9713] syz.3.982 uses old SIOCAX25GETINFO [ 365.482976][ T30] audit: type=1400 audit(1748322316.523:822): avc: denied { bind } for pid=9698 comm="syz.0.979" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 365.642645][ T30] audit: type=1400 audit(1748322316.523:823): avc: denied { write } for pid=9698 comm="syz.0.979" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 365.724698][ T30] audit: type=1400 audit(1748322316.723:824): avc: denied { read write } for pid=9707 comm="syz.1.981" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 365.773328][ T30] audit: type=1400 audit(1748322316.723:825): avc: denied { open } for pid=9707 comm="syz.1.981" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 365.803214][ T30] audit: type=1400 audit(1748322316.733:826): avc: denied { mount } for pid=9707 comm="syz.1.981" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 365.806156][ T9724] fuse: Bad value for 'fd' [ 365.832495][ T30] audit: type=1400 audit(1748322316.763:827): avc: denied { bind } for pid=9709 comm="syz.5.983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 367.594708][ T9739] IPv6: Can't replace route, no match found [ 367.624306][ T9739] netlink: 4 bytes leftover after parsing attributes in process `syz.5.988'. [ 368.610320][ T24] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 368.990393][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 369.290223][ T24] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 369.298328][ T24] usb 6-1: config 0 has no interface number 0 [ 369.314550][ T24] usb 6-1: config 0 interface 8 altsetting 3 endpoint 0x81 has an invalid bInterval 202, changing to 11 [ 369.355182][ T24] usb 6-1: config 0 interface 8 altsetting 3 endpoint 0x81 has invalid maxpacket 25058, setting to 1024 [ 369.403941][ T24] usb 6-1: config 0 interface 8 has no altsetting 0 [ 369.426204][ T24] usb 6-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 369.453506][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.476556][ T24] usb 6-1: config 0 descriptor?? [ 369.790578][ T9757] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=5238 sclass=netlink_xfrm_socket pid=9757 comm=syz.3.995 [ 370.083547][ T30] kauditd_printk_skb: 34 callbacks suppressed [ 370.083581][ T30] audit: type=1400 audit(1748322321.663:862): avc: denied { setopt } for pid=9764 comm="syz.0.997" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 370.212912][ T30] audit: type=1400 audit(1748322321.783:863): avc: denied { map } for pid=9764 comm="syz.0.997" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 370.270014][ T30] audit: type=1400 audit(1748322321.783:864): avc: denied { execute } for pid=9764 comm="syz.0.997" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 370.311144][ T24] usbhid 6-1:0.8: can't add hid device: -71 [ 370.337352][ T24] usbhid 6-1:0.8: probe with driver usbhid failed with error -71 [ 370.349697][ T30] audit: type=1400 audit(1748322321.923:865): avc: denied { write } for pid=9767 comm="syz.1.998" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 370.387630][ T24] usb 6-1: USB disconnect, device number 11 [ 370.436461][ T30] audit: type=1400 audit(1748322321.963:866): avc: denied { map } for pid=9767 comm="syz.1.998" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 370.468610][ T30] audit: type=1400 audit(1748322321.963:867): avc: denied { execute } for pid=9767 comm="syz.1.998" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 370.521228][ T9776] dns_resolver: Unsupported content type (152) [ 370.549620][ T30] audit: type=1400 audit(1748322322.003:868): avc: denied { create } for pid=9764 comm="syz.0.997" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 370.670660][ T30] audit: type=1400 audit(1748322322.093:869): avc: denied { name_bind } for pid=9774 comm="syz.5.1000" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 370.738578][ T30] audit: type=1400 audit(1748322322.113:870): avc: denied { name_bind } for pid=9773 comm="syz.2.1001" src=65534 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 370.878734][ T9786] batman_adv: batadv0: Adding interface: dummy0 [ 370.885158][ T9786] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 370.911271][ T9786] batman_adv: batadv0: Interface activated: dummy0 [ 371.014743][ T9787] batadv0: mtu less than device minimum [ 371.021445][ T9787] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 371.032828][ T9787] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 371.044217][ T9787] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 371.055610][ T9787] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 371.067005][ T9787] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 371.078390][ T9787] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 371.089768][ T9787] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 371.101146][ T9787] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 371.112529][ T9787] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 371.377699][ T30] audit: type=1400 audit(1748322322.943:871): avc: denied { listen } for pid=9769 comm="syz.3.999" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 371.444096][ T9784] tmpfs: Bad value for 'usrquota_block_hardlimit' [ 371.666019][ T9784] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 372.152069][ T9770] loop6: detected capacity change from 0 to 524287999 [ 372.162613][ T9784] SELinux: failed to load policy [ 372.404878][ T9794] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=9794 comm=syz.5.1008 [ 372.440792][ T5821] usb 3-1: new full-speed USB device number 33 using dummy_hcd [ 373.390291][ T5821] usb 3-1: device descriptor read/64, error -71 [ 374.239949][ T5821] usb 3-1: new full-speed USB device number 34 using dummy_hcd [ 375.212013][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 375.212047][ T30] audit: type=1400 audit(1748322326.793:881): avc: denied { create } for pid=9826 comm="syz.1.1016" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 375.550172][ T30] audit: type=1400 audit(1748322326.813:882): avc: denied { create } for pid=9826 comm="syz.1.1016" name="#17" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 375.617218][ T30] audit: type=1400 audit(1748322326.813:883): avc: denied { link } for pid=9826 comm="syz.1.1016" name="#17" dev="tmpfs" ino=1105 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 375.655856][ T30] audit: type=1400 audit(1748322326.813:884): avc: denied { rename } for pid=9826 comm="syz.1.1016" name="#18" dev="tmpfs" ino=1105 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 375.696545][ T30] audit: type=1400 audit(1748322327.183:885): avc: denied { read write } for pid=9835 comm="syz.2.1017" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 375.720127][ C0] vkms_vblank_simulate: vblank timer overrun [ 375.843471][ T5891] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 375.996215][ T30] audit: type=1400 audit(1748322327.183:886): avc: denied { open } for pid=9835 comm="syz.2.1017" path="/dev/uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 376.019675][ C0] vkms_vblank_simulate: vblank timer overrun [ 376.026764][ T30] audit: type=1400 audit(1748322327.233:887): avc: denied { ioctl } for pid=9835 comm="syz.2.1017" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x5566 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 376.051716][ C0] vkms_vblank_simulate: vblank timer overrun [ 376.060179][ T30] audit: type=1400 audit(1748322327.233:888): avc: denied { mounton } for pid=9822 comm="syz.5.1015" path="/proc/186/task" dev="proc" ino=28589 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 376.083364][ T30] audit: type=1400 audit(1748322327.233:889): avc: denied { mount } for pid=9822 comm="syz.5.1015" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 376.087125][ T9845] input: syz1 as /devices/virtual/input/input15 [ 376.161727][ T5891] usb 2-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 376.172379][ T5891] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 376.184433][ T5891] usb 2-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.05 [ 376.193809][ T5891] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=2 [ 376.202076][ T5891] usb 2-1: Product: syz [ 376.206245][ T5891] usb 2-1: Manufacturer: syz [ 376.211108][ T5891] usb 2-1: SerialNumber: syz [ 376.217581][ T5891] usb 2-1: config 0 descriptor?? [ 376.239980][ T5863] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 376.390272][ T5863] usb 4-1: device descriptor read/64, error -71 [ 376.457880][ T5891] usb 2-1: USB disconnect, device number 55 [ 376.660172][ T5863] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 376.800239][ T5863] usb 4-1: device descriptor read/64, error -71 [ 377.026354][ T5863] usb usb4-port1: attempt power cycle [ 377.633646][ T30] audit: type=1400 audit(1748322329.213:890): avc: denied { setopt } for pid=9859 comm="syz.0.1022" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 377.779962][ T5821] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 377.872863][ T5863] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 377.950871][ T5821] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 378.142619][ T5821] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.198664][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.205105][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.364261][ T5863] usb 4-1: device descriptor read/8, error -71 [ 378.697601][ T5821] usb 2-1: config 0 descriptor?? [ 378.822692][ T5821] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 379.071856][ T5863] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 379.130000][ T5821] usb 2-1: USB disconnect, device number 56 [ 379.152380][ T9881] fuse: Unknown parameter 'fd0x0000000000000003' [ 379.395474][ T5863] usb 4-1: device not accepting address 36, error -71 [ 379.483737][ T5864] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 379.520451][ T5863] usb usb4-port1: unable to enumerate USB device [ 379.705873][ T5864] usb 3-1: New USB device found, idVendor=093a, idProduct=050f, bcdDevice=c2.b7 [ 379.726434][ T5864] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.850693][ T5863] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 379.875105][ T5864] usb 3-1: config 0 descriptor?? [ 379.961204][ T5864] gspca_main: mars-2.14.0 probing 093a:050f [ 380.060093][ T5863] usb 4-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.05 [ 380.071535][ T5863] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.079621][ T5863] usb 4-1: Product: syz [ 380.086227][ T5863] usb 4-1: Manufacturer: syz [ 380.096360][ T5863] usb 4-1: SerialNumber: syz [ 380.116750][ T5863] usb 4-1: config 0 descriptor?? [ 380.129832][ T5863] go7007 4-1:0.0: probe with driver go7007 failed with error -12 [ 380.142302][ T9878] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1027'. [ 380.151601][ T9878] netlink: 'syz.2.1027': attribute type 7 has an invalid length. [ 380.159313][ T9878] netlink: 'syz.2.1027': attribute type 8 has an invalid length. [ 380.171453][ T9878] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1027'. [ 380.184800][ T5821] usb 3-1: USB disconnect, device number 35 [ 380.335593][ T3074] usb 4-1: USB disconnect, device number 37 [ 380.349961][ T47] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 380.448418][ T9899] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 380.514323][ T47] usb 2-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 380.523925][ T47] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.532391][ T47] usb 2-1: Product: syz [ 380.536842][ T47] usb 2-1: Manufacturer: syz [ 380.541542][ T47] usb 2-1: SerialNumber: syz [ 380.547543][ T47] usb 2-1: config 0 descriptor?? [ 380.754255][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 380.754270][ T30] audit: type=1400 audit(1748322332.333:895): avc: denied { read write } for pid=9895 comm="syz.1.1034" name="sg0" dev="devtmpfs" ino=743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 380.766717][ T9896] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1034'. [ 380.785571][ T30] audit: type=1400 audit(1748322332.333:896): avc: denied { open } for pid=9895 comm="syz.1.1034" path="/dev/sg0" dev="devtmpfs" ino=743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 380.818399][ T30] audit: type=1400 audit(1748322332.333:897): avc: denied { ioctl } for pid=9895 comm="syz.1.1034" path="/dev/sg0" dev="devtmpfs" ino=743 ioctlcmd=0x2275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 380.818889][ T9906] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1034'. [ 380.843675][ C1] vkms_vblank_simulate: vblank timer overrun [ 380.962898][ T47] usb 2-1: f81604_read: reg: 105 failed: -EPROTO [ 380.973499][ T47] f81604 2-1:0.0: Setting termination of CH#0 failed: -EPROTO [ 380.984255][ T47] f81604 2-1:0.0: probe with driver f81604 failed with error -71 [ 381.047469][ T47] usb 2-1: USB disconnect, device number 57 [ 381.141889][ T9918] fuse: Unknown parameter 'fd0x0000000000000003' [ 381.330140][ T3074] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 381.508257][ T9924] input: syz1 as /devices/virtual/input/input16 [ 381.519987][ T3074] usb 3-1: Using ep0 maxpacket: 8 [ 381.561312][ T3074] usb 3-1: config index 0 descriptor too short (expected 6418, got 18) [ 381.707048][ T3074] usb 3-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=c7.76 [ 382.032820][ T3074] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.061777][ T9932] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1045'. [ 382.517068][ T3074] usb 3-1: Product: syz [ 382.555717][ T3074] usb 3-1: Manufacturer: syz [ 382.575786][ T30] audit: type=1400 audit(1748322334.153:898): avc: denied { create } for pid=9937 comm="syz.0.1047" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 382.575938][ T3074] usb 3-1: SerialNumber: syz [ 382.646690][ T3074] usb 3-1: config 0 descriptor?? [ 383.125412][ T5863] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 383.167107][ T3074] peak_usb 3-1:0.0: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 383.247434][ T30] audit: type=1400 audit(1748322334.823:899): avc: denied { read write } for pid=9943 comm="syz.1.1049" name="file0" dev="fuse" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 383.270037][ T30] audit: type=1400 audit(1748322334.823:900): avc: denied { open } for pid=9943 comm="syz.1.1049" path="/214/file0/file0" dev="fuse" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 383.294317][ T30] audit: type=1400 audit(1748322334.873:901): avc: denied { ioctl } for pid=9943 comm="syz.1.1049" path="/214/file0/file0" dev="fuse" ino=5 ioctlcmd=0x545c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 383.328054][ T3074] peak_usb 3-1:0.0 can0: unable to request usb[type=2 value=5] err=-71 [ 383.344744][ T5863] usb 4-1: unable to get BOS descriptor or descriptor too short [ 383.347102][ T3074] peak_usb 3-1:0.0: unable to tell PCAN-USB X6 driver is loaded (err -71) [ 383.354367][ T5863] usb 4-1: config 6 has an invalid interface number: 200 but max is 0 [ 383.369281][ T5863] usb 4-1: config 6 has no interface number 0 [ 383.378318][ T5863] usb 4-1: config 6 interface 200 has no altsetting 0 [ 383.390585][ T5863] usb 4-1: New USB device found, idVendor=05d8, idProduct=810c, bcdDevice=18.5f [ 383.399796][ T5863] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.415612][ T5863] usb 4-1: Product: syz [ 383.419830][ T5863] usb 4-1: Manufacturer: syz [ 383.424930][ T5863] usb 4-1: SerialNumber: syz [ 383.431287][ T3074] peak_usb 3-1:0.0: probe with driver peak_usb failed with error -71 [ 383.455026][ T3074] usb 3-1: USB disconnect, device number 36 [ 384.276418][ T5863] dvb-usb: found a 'Artec T14 - USB2.0 DVB-T' in warm state. [ 384.293404][ T5863] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 384.303734][ T5863] dvbdev: DVB: registering new adapter (Artec T14 - USB2.0 DVB-T) [ 384.312042][ T5863] usb 4-1: media controller created [ 384.333454][ T5863] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 384.500520][ T5863] dvb-usb: bulk message failed: -71 (6/0) [ 384.509616][ T5863] dvb-usb: bulk message failed: -71 (6/0) [ 384.516698][ T5863] dvb-usb: no frontend was attached by 'Artec T14 - USB2.0 DVB-T' [ 384.527347][ T5863] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input17 [ 384.542825][ T5863] dvb-usb: schedule remote query interval to 150 msecs. [ 384.549778][ T5863] dvb-usb: Artec T14 - USB2.0 DVB-T successfully initialized and connected. [ 384.556184][ T30] audit: type=1400 audit(1748322336.123:902): avc: denied { shutdown } for pid=9955 comm="syz.5.1053" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 384.597081][ T30] audit: type=1400 audit(1748322336.143:903): avc: denied { read } for pid=9955 comm="syz.5.1053" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 384.634479][ T9957] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1051'. [ 384.647052][ T3074] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 385.051853][ T1219] dvb-usb: bulk message failed: -71 (1/0) [ 385.122334][ T1219] dvb-usb: error while querying for an remote control event. [ 385.132102][ T5863] usb 4-1: USB disconnect, device number 38 [ 385.144746][ T9956] netlink: 'syz.5.1053': attribute type 23 has an invalid length. [ 385.551133][ T3074] usb 2-1: Using ep0 maxpacket: 16 [ 385.566044][ T9966] fuse: Unknown parameter 'fd0x0000000000000003' [ 385.566107][ T3074] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 385.586484][ T3074] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 385.595758][ T5863] dvb-usb: Artec T14 - USB2.0 DVB-T successfully deinitialized and disconnected. [ 385.597044][ T3074] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 385.619628][ T9968] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1056'. [ 385.629314][ T30] audit: type=1400 audit(1748322337.193:904): avc: denied { write } for pid=9967 comm="syz.5.1056" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 385.662689][ T3074] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 385.698322][ T3074] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.770331][ T5891] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 385.882452][ T30] audit: type=1400 audit(1748322337.463:905): avc: denied { create } for pid=9970 comm="syz.3.1058" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 385.902117][ T5891] usb 3-1: device descriptor read/64, error -71 [ 385.916347][ T3074] usb 2-1: config 0 descriptor?? [ 386.038445][ T30] audit: type=1400 audit(1748322337.613:906): avc: denied { write } for pid=9970 comm="syz.3.1058" path="socket:[29918]" dev="sockfs" ino=29918 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 386.379809][ T3074] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 386.397952][ T3074] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 386.429001][ T3074] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 386.443680][ T3074] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 386.490265][ T5891] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 386.630593][ T3074] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 386.637836][ T3074] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 386.645095][ T3074] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 386.652614][ T3074] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 386.659820][ T3074] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 386.667056][ T3074] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 386.679646][ T5891] usb 3-1: device descriptor read/64, error -71 [ 386.705206][ T3074] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0009/input/input18 [ 386.768562][ T30] audit: type=1400 audit(1748322338.343:907): avc: denied { write } for pid=9983 comm="syz.3.1062" name="ip_vs_stats" dev="proc" ino=4026533264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 386.798199][ T3074] microsoft 0003:045E:07DA.0009: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 386.800561][ T5891] usb usb3-port1: attempt power cycle [ 386.857957][ T3074] usb 2-1: USB disconnect, device number 58 [ 387.195123][ T5891] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 387.231027][ T5891] usb 3-1: device descriptor read/8, error -71 [ 387.305777][ T30] audit: type=1400 audit(1748322338.883:908): avc: denied { mounton } for pid=9991 comm="syz.3.1064" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=96 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 387.330694][ T9995] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 387.338172][ T9995] UDF-fs: Scanning with blocksize 512 failed [ 387.346168][ T9995] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 387.396025][ T9995] UDF-fs: Scanning with blocksize 1024 failed [ 387.404231][ T9995] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 387.411831][ T9995] UDF-fs: Scanning with blocksize 2048 failed [ 387.419088][ T9995] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 387.426696][ T9995] UDF-fs: Scanning with blocksize 4096 failed [ 388.080216][ T5891] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 388.390105][ C1] net_ratelimit: 10 callbacks suppressed [ 388.390124][ C1] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 389.265555][ T30] audit: type=1400 audit(1748322340.843:909): avc: denied { bind } for pid=10002 comm="syz.2.1067" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 389.674646][ T30] audit: type=1400 audit(1748322340.863:910): avc: denied { name_bind } for pid=10002 comm="syz.2.1067" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 389.697941][ T30] audit: type=1400 audit(1748322340.863:911): avc: denied { node_bind } for pid=10002 comm="syz.2.1067" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 389.718917][ T30] audit: type=1400 audit(1748322340.973:912): avc: denied { ioctl } for pid=10002 comm="syz.2.1067" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 389.884636][ T5891] usb 3-1: device not accepting address 40, error -71 [ 389.894935][ T5891] usb usb3-port1: unable to enumerate USB device [ 390.099797][T10014] veth0: entered promiscuous mode [ 390.228761][ T30] audit: type=1400 audit(1748322341.693:913): avc: denied { getopt } for pid=10008 comm="syz.0.1069" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 390.417502][ T30] audit: type=1400 audit(1748322341.803:914): avc: denied { write } for pid=10008 comm="syz.0.1069" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 390.666291][T10008] veth0: left promiscuous mode [ 391.380488][T10026] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 80:00:00:00:00:85 [ 391.945839][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 391.945864][ T30] audit: type=1400 audit(1748322343.523:916): avc: denied { getopt } for pid=10032 comm="syz.0.1074" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 392.776521][ T30] audit: type=1400 audit(1748322344.333:917): avc: denied { shutdown } for pid=10032 comm="syz.0.1074" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 392.893397][ T5821] IPVS: starting estimator thread 0... [ 393.161263][T10043] IPVS: using max 38 ests per chain, 91200 per kthread [ 393.173796][ T30] audit: type=1400 audit(1748322344.733:918): avc: denied { read write } for pid=10040 comm="syz.1.1076" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 393.831128][ T30] audit: type=1400 audit(1748322344.733:919): avc: denied { open } for pid=10040 comm="syz.1.1076" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 393.831325][ T30] audit: type=1400 audit(1748322344.783:920): avc: denied { getopt } for pid=10036 comm="syz.2.1075" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 393.873884][ T30] audit: type=1400 audit(1748322345.453:921): avc: denied { bind } for pid=10046 comm="syz.3.1077" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 394.102379][ T30] audit: type=1400 audit(1748322345.533:922): avc: denied { mount } for pid=10046 comm="syz.3.1077" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 394.750593][ T30] audit: type=1400 audit(1748322346.333:923): avc: denied { map } for pid=10060 comm="syz.0.1079" path="socket:[29371]" dev="sockfs" ino=29371 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 395.101049][ T30] audit: type=1400 audit(1748322346.673:924): avc: denied { wake_alarm } for pid=10066 comm="syz.1.1081" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 395.314285][T10079] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 395.328709][T10082] netlink: 'syz.1.1086': attribute type 1 has an invalid length. [ 395.350329][T10082] 8021q: adding VLAN 0 to HW filter on device bond2 [ 395.368331][T10082] veth7: entered promiscuous mode [ 395.375980][T10082] bond2: (slave veth7): Enslaving as an active interface with a down link [ 395.390448][T10082] vlan2: entered allmulticast mode [ 395.395622][T10082] bond2: entered allmulticast mode [ 395.403754][T10082] bond2: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 396.236592][T10085] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 80:00:00:00:00:85 [ 396.310356][ T30] audit: type=1400 audit(1748322347.863:925): avc: denied { connect } for pid=10086 comm="syz.1.1088" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 396.822527][T10098] binder: 10094:10098 ioctl c0306201 0 returned -14 [ 396.831447][T10098] binder: 10094:10098 ioctl c0306201 200000000100 returned -14 [ 397.105333][T10104] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1093'. [ 397.188404][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 397.188419][ T30] audit: type=1400 audit(1748322348.763:931): avc: denied { watch } for pid=10103 comm="syz.3.1093" path="/203" dev="tmpfs" ino=1080 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 397.389365][T10114] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1097'. [ 397.421588][T10114] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10114 comm=syz.1.1097 [ 397.479915][ T1219] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 398.159912][ T1219] usb 4-1: Using ep0 maxpacket: 16 [ 398.172610][ T1219] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 398.181251][ T1219] usb 4-1: config 0 has no interface number 0 [ 398.187351][ T1219] usb 4-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0xB9, changing to 0x89 [ 398.204516][ T1219] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 398.217485][ T1219] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 398.229408][ T1219] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 398.238769][ T1219] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 398.251010][ T30] audit: type=1326 audit(1748322349.833:932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10127 comm="syz.2.1100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7a898e969 code=0x7ffc0000 [ 398.281172][ T1219] usb 4-1: Product: syz [ 398.287303][ T1219] usb 4-1: SerialNumber: syz [ 398.290930][T10130] tmpfs: Bad value for 'usrquota_block_hardlimit' [ 398.323223][ T1219] usb 4-1: config 0 descriptor?? [ 398.341402][ T1219] cm109 4-1:0.8: invalid payload size 0, expected 4 [ 398.349679][ T30] audit: type=1326 audit(1748322349.833:933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10127 comm="syz.2.1100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7a898e969 code=0x7ffc0000 [ 398.398420][ T1219] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input20 [ 398.482331][ T30] audit: type=1326 audit(1748322349.863:934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10127 comm="syz.2.1100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7ff7a898e969 code=0x7ffc0000 [ 398.514361][T10130] SELinux: failed to load policy [ 398.529114][ T30] audit: type=1326 audit(1748322349.863:935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10127 comm="syz.2.1100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7a898e969 code=0x7ffc0000 [ 398.613407][ T30] audit: type=1326 audit(1748322349.863:936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10127 comm="syz.2.1100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7a898e969 code=0x7ffc0000 [ 398.678433][T10105] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 398.707286][ T30] audit: type=1326 audit(1748322349.863:937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10127 comm="syz.2.1100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff7a898e56b code=0x7ffc0000 [ 398.726407][T10137] input: syz1 as /devices/virtual/input/input21 [ 398.789385][T10105] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 398.840029][ T5821] usb 2-1: new full-speed USB device number 59 using dummy_hcd [ 399.540178][ T30] audit: type=1326 audit(1748322349.863:938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10127 comm="syz.2.1100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff7a898e56b code=0x7ffc0000 [ 399.571657][ T5821] usb 2-1: device descriptor read/64, error -71 [ 399.633960][ T30] audit: type=1326 audit(1748322349.863:939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10127 comm="syz.2.1100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff7a898e56b code=0x7ffc0000 [ 399.753815][ T5815] Bluetooth: hci5: link tx timeout [ 399.759457][ T5815] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 399.773933][ T5828] Bluetooth: hci5: link tx timeout [ 399.779333][ T5828] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 399.788191][ T5828] Bluetooth: hci5: link tx timeout [ 399.793619][ T5828] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 399.860887][ T5821] usb 2-1: new full-speed USB device number 60 using dummy_hcd [ 400.039938][ T30] audit: type=1326 audit(1748322349.863:940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10127 comm="syz.2.1100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff7a898e56b code=0x7ffc0000 [ 400.090282][ T5821] usb 2-1: device descriptor read/64, error -71 [ 400.364685][T10152] binder: 10149:10152 ioctl 4018620d 0 returned -22 [ 400.551941][ T5821] usb usb2-port1: attempt power cycle [ 401.142324][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 401.151098][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 401.158221][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 401.165289][ T5864] usb 4-1: USB disconnect, device number 39 [ 401.171802][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 401.171822][ C0] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 401.197692][ T5864] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 401.932232][ T5815] Bluetooth: hci5: command 0x0405 tx timeout [ 401.943267][ T1219] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 402.420132][ T1219] usb 6-1: Using ep0 maxpacket: 32 [ 402.431927][ T1219] usb 6-1: config 0 has an invalid interface number: 230 but max is 0 [ 402.465030][ T1219] usb 6-1: config 0 has no interface number 0 [ 402.471226][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 402.471240][ T30] audit: type=1400 audit(1748322354.053:958): avc: denied { connect } for pid=10170 comm="syz.3.1113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 402.474168][ T1219] usb 6-1: config 0 interface 230 has no altsetting 0 [ 402.508214][ T1219] usb 6-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 402.517380][ T1219] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.525725][ T1219] usb 6-1: Product: syz [ 402.530359][ T1219] usb 6-1: Manufacturer: syz [ 402.534956][ T1219] usb 6-1: SerialNumber: syz [ 402.536581][T10174] netlink: 'syz.3.1113': attribute type 1 has an invalid length. [ 402.549184][ T1219] usb 6-1: config 0 descriptor?? [ 402.557256][ T1219] ums-usbat 6-1:0.230: USB Mass Storage device detected [ 402.576647][T10174] 8021q: adding VLAN 0 to HW filter on device bond1 [ 402.581245][ T1219] ums-usbat 6-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 402.595076][ T30] audit: type=1400 audit(1748322354.173:959): avc: denied { append } for pid=10170 comm="syz.3.1113" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 402.618943][ C1] vkms_vblank_simulate: vblank timer overrun [ 402.629120][T10174] bond1: (slave geneve3): making interface the new active one [ 402.630875][ T30] audit: type=1400 audit(1748322354.173:960): avc: denied { open } for pid=10170 comm="syz.3.1113" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 402.638192][T10174] bond1: (slave geneve3): Enslaving as an active interface with an up link [ 402.680094][ T5821] usb 2-1: new full-speed USB device number 62 using dummy_hcd [ 402.730073][ T5891] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 402.902580][ T5891] usb 3-1: Using ep0 maxpacket: 32 [ 403.093688][ T5821] usb 2-1: config 0 has no interfaces? [ 403.106446][ T5891] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 403.109758][ T5821] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 403.130046][ T5821] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.138142][ T5821] usb 2-1: Product: syz [ 403.142653][ T5821] usb 2-1: Manufacturer: syz [ 403.146572][ T5891] usb 3-1: New USB device found, idVendor=3344, idProduct=22f0, bcdDevice=ef.4d [ 403.147281][ T5821] usb 2-1: SerialNumber: syz [ 403.177009][ T5891] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.180875][ T5821] usb 2-1: config 0 descriptor?? [ 403.203347][ T5891] usb 3-1: Product: syz [ 403.208052][ T5891] usb 3-1: Manufacturer: syz [ 403.213766][ T5891] usb 3-1: SerialNumber: syz [ 403.231089][ T1219] ums-usbat 6-1:0.230: probe with driver ums-usbat failed with error -5 [ 403.245476][ T1219] usb 6-1: USB disconnect, device number 12 [ 403.610188][ T5891] usb 3-1: selecting invalid altsetting 1 [ 403.797583][ T5863] usb 2-1: USB disconnect, device number 62 [ 403.818735][ T5891] LME2510(C): Firmware Status: 08 03 6a fd ed 7a [ 403.819111][ T5891] dvb_usb_lmedm04 3-1:2.0: probe with driver dvb_usb_lmedm04 failed with error -22 [ 404.352214][ T5891] usb 3-1: USB disconnect, device number 41 [ 404.502154][T10188] input: syz1 as /devices/virtual/input/input22 [ 406.219053][ T3074] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 406.244466][ T30] audit: type=1400 audit(1748322357.813:961): avc: denied { setopt } for pid=10202 comm="syz.3.1121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 406.264335][ T30] audit: type=1400 audit(1748322357.823:962): avc: denied { set_context_mgr } for pid=10206 comm="syz.5.1123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 406.285241][ T30] audit: type=1400 audit(1748322357.823:963): avc: denied { map } for pid=10206 comm="syz.5.1123" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 406.539758][T10215] binder: 10206:10215 unknown command 0 [ 406.546210][T10215] binder: 10206:10215 ioctl c0306201 200000000180 returned -22 [ 406.633651][ T3074] usb 3-1: Using ep0 maxpacket: 32 [ 406.652794][ T3074] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 406.659819][ T30] audit: type=1400 audit(1748322358.013:964): avc: denied { write } for pid=10203 comm="syz.0.1122" name="usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 406.711225][ T3074] usb 3-1: config 0 has no interface number 0 [ 406.794247][ T3074] usb 3-1: config 0 interface 184 altsetting 252 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 406.915994][ T3074] usb 3-1: config 0 interface 184 has no altsetting 0 [ 407.005520][ T3074] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 407.106084][ T3074] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.167824][ T30] audit: type=1400 audit(1748322358.013:965): avc: denied { map } for pid=10203 comm="syz.0.1122" path="/dev/usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 407.200423][ T30] audit: type=1400 audit(1748322358.013:966): avc: denied { setopt } for pid=10203 comm="syz.0.1122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 407.222364][ T30] audit: type=1400 audit(1748322358.303:967): avc: denied { write } for pid=10202 comm="syz.3.1121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 407.240286][ T3074] usb 3-1: Product: syz [ 407.251901][ T3074] usb 3-1: Manufacturer: syz [ 407.256480][ T3074] usb 3-1: SerialNumber: syz [ 407.312432][ T3074] usb 3-1: config 0 descriptor?? [ 407.368018][ T3074] smsc75xx v1.0.0 [ 407.406761][ T3074] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 407.457530][ T3074] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -22 [ 408.186357][T10225] input: syz1 as /devices/virtual/input/input23 [ 408.898066][ T5863] usb 3-1: USB disconnect, device number 42 [ 409.044305][ T3074] usb 2-1: new low-speed USB device number 63 using dummy_hcd [ 409.166411][T10242] xt_TPROXY: Can be used only with -p tcp or -p udp [ 409.179937][ T3074] usb 2-1: device descriptor read/64, error -71 [ 409.560161][ T3074] usb 2-1: new low-speed USB device number 64 using dummy_hcd [ 409.687154][ T30] audit: type=1400 audit(1748322361.253:968): avc: denied { connect } for pid=10243 comm="syz.5.1133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 409.723185][ T3074] usb 2-1: device descriptor read/64, error -71 [ 409.782270][ T30] audit: type=1400 audit(1748322361.263:969): avc: denied { write } for pid=10243 comm="syz.5.1133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 409.917652][ T3074] usb usb2-port1: attempt power cycle [ 410.516333][T10257] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1136'. [ 410.574334][ T30] audit: type=1400 audit(1748322362.153:970): avc: denied { ioctl } for pid=10256 comm="syz.2.1136" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x330d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 410.830456][ T3074] usb 2-1: new low-speed USB device number 65 using dummy_hcd [ 411.828957][ T30] audit: type=1400 audit(1748322363.403:971): avc: denied { append } for pid=10271 comm="syz.0.1140" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 412.377617][ T3074] usb 2-1: device not accepting address 65, error -71 [ 412.609295][ T30] audit: type=1400 audit(1748322364.173:972): avc: denied { mount } for pid=10271 comm="syz.0.1140" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 413.173873][ T5828] Bluetooth: hci5: command 0x0405 tx timeout [ 414.647823][T10301] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1146'. [ 415.064242][T10302] netlink: 'syz.2.1145': attribute type 6 has an invalid length. [ 415.073439][ T30] audit: type=1400 audit(1748322366.653:973): avc: denied { shutdown } for pid=10298 comm="syz.2.1145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 416.213705][ T30] audit: type=1400 audit(1748322367.773:974): avc: denied { write } for pid=10309 comm="syz.2.1149" path="socket:[30891]" dev="sockfs" ino=30891 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 416.368997][ T30] audit: type=1400 audit(1748322367.853:975): avc: denied { setattr } for pid=10316 comm="syz.5.1150" path="/dev/mixer" dev="devtmpfs" ino=1286 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 416.401121][T10319] input: syz1 as /devices/virtual/input/input24 [ 416.648520][T10322] netlink: 'syz.5.1152': attribute type 21 has an invalid length. [ 416.656559][T10322] netlink: 128 bytes leftover after parsing attributes in process `syz.5.1152'. [ 416.666173][T10322] netlink: 'syz.5.1152': attribute type 5 has an invalid length. [ 416.673999][T10322] netlink: 'syz.5.1152': attribute type 6 has an invalid length. [ 416.682159][T10322] netlink: 3 bytes leftover after parsing attributes in process `syz.5.1152'. [ 417.720302][ T5863] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 417.963461][ T5863] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 418.426645][T10333] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 80:00:00:00:00:85 [ 418.457137][ T30] audit: type=1400 audit(1748322369.993:976): avc: denied { unmount } for pid=5816 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 418.488275][ T5863] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 418.498356][ T5863] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 418.514826][ T5863] usb 4-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 418.529630][ T5863] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.543188][ T5863] usb 4-1: config 0 descriptor?? [ 418.649962][ T5821] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 418.810203][ T5821] usb 6-1: Using ep0 maxpacket: 16 [ 418.991035][ T5821] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 419.008320][ T5821] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 419.134165][ T5821] usb 6-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 419.147467][ T5821] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.160418][ T5821] usb 6-1: config 0 descriptor?? [ 419.868912][ T30] audit: type=1400 audit(1748322371.443:977): avc: denied { name_bind } for pid=10325 comm="syz.3.1154" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 420.020426][ T5861] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 420.272010][ T5861] usb 3-1: Using ep0 maxpacket: 8 [ 420.288558][ T5821] gt683r_led 0003:1770:FF00.000A: hidraw0: USB HID v0.00 Device [HID 1770:ff00] on usb-dummy_hcd.5-1/input0 [ 420.291516][ T5863] usb 4-1: USB disconnect, device number 40 [ 420.307687][ T5861] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 420.307713][ T5861] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.314645][ T5861] usb 3-1: config 0 descriptor?? [ 420.352597][ T5821] usb 6-1: USB disconnect, device number 13 [ 420.357075][ T3074] gt683r_led 0003:1770:FF00.000A: failed to send set report request: -19 [ 420.500634][T10354] fido_id[10354]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 420.569604][ T30] audit: type=1400 audit(1748322372.143:978): avc: denied { connect } for pid=10357 comm="syz.1.1164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 421.009998][ T3074] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 421.170020][ T3074] usb 2-1: Using ep0 maxpacket: 8 [ 421.206008][ T3074] usb 2-1: New USB device found, idVendor=0711, idProduct=0200, bcdDevice=69.34 [ 421.248485][ T3074] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.250760][ T30] audit: type=1400 audit(1748322372.823:979): avc: denied { execute_no_trans } for pid=10367 comm="syz.5.1166" path="/78/file2" dev="tmpfs" ino=437 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 421.279808][ C0] vkms_vblank_simulate: vblank timer overrun [ 421.291516][ T3074] usb 2-1: Product: syz [ 421.297987][ T3074] usb 2-1: Manufacturer: syz [ 421.303612][ T3074] usb 2-1: SerialNumber: syz [ 421.656624][ T3074] usb 2-1: config 0 descriptor?? [ 421.670850][ T3074] mct_u232 2-1:0.0: MCT U232 converter detected [ 421.703957][ T3074] mct_u232 ttyUSB0: expected endpoint missing [ 422.080219][ T5864] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 422.249957][ T5864] usb 4-1: device descriptor read/64, error -71 [ 422.263337][T10366] netlink: 'syz.1.1165': attribute type 1 has an invalid length. [ 422.271826][T10366] netlink: 'syz.1.1165': attribute type 1 has an invalid length. [ 422.915990][ T30] audit: type=1400 audit(1748322374.493:980): avc: denied { mount } for pid=10381 comm="syz.0.1170" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 422.970601][ T5864] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 423.110373][ T5864] usb 4-1: device descriptor read/64, error -71 [ 423.232157][ T5864] usb usb4-port1: attempt power cycle [ 423.249681][ T5861] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 423.265567][ T5861] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 423.277745][ T5861] asix 3-1:0.0: probe with driver asix failed with error -71 [ 423.317856][ T5861] usb 3-1: USB disconnect, device number 43 [ 423.443369][ T30] audit: type=1400 audit(1748322375.023:981): avc: denied { create } for pid=10386 comm="syz.0.1171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 423.464957][ T30] audit: type=1400 audit(1748322375.023:982): avc: denied { write } for pid=10386 comm="syz.0.1171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 423.556285][ T30] audit: type=1400 audit(1748322375.133:983): avc: denied { mount } for pid=10388 comm="syz.0.1172" name="/" dev="ramfs" ino=31044 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 423.600080][ T5864] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 423.631046][ T5864] usb 4-1: device descriptor read/8, error -71 [ 423.767856][ T5891] usb 2-1: USB disconnect, device number 67 [ 423.777970][ T5891] mct_u232 2-1:0.0: device disconnected [ 423.880899][ T5864] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 424.029553][ T5864] usb 4-1: device descriptor read/8, error -71 [ 424.240125][ C0] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 424.610776][ T5864] usb usb4-port1: unable to enumerate USB device [ 424.985446][ T30] audit: type=1400 audit(1748322376.553:984): avc: denied { read append } for pid=10406 comm="syz.1.1177" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 425.140828][ T30] audit: type=1400 audit(1748322376.553:985): avc: denied { open } for pid=10406 comm="syz.1.1177" path="/dev/ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 425.173287][ T30] audit: type=1400 audit(1748322376.603:986): avc: denied { create } for pid=10412 comm="syz.0.1180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 425.383316][ T30] audit: type=1400 audit(1748322376.673:987): avc: denied { read } for pid=10412 comm="syz.0.1180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 425.730107][ T5864] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 425.800630][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 425.800645][ T30] audit: type=1800 audit(1748322377.373:991): pid=10426 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.1183" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 425.801295][ T5815] Bluetooth: hci3: unexpected cc 0x2039 length: 9 > 1 [ 425.836662][ T5815] Bluetooth: hci3: unexpected event for opcode 0x2039 [ 425.920375][ T5864] usb 6-1: Using ep0 maxpacket: 8 [ 425.943793][ T5864] usb 6-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 425.987920][ T5864] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.009702][ T5864] usb 6-1: config 0 descriptor?? [ 426.015489][T10428] tmpfs: Bad value for 'mpol' [ 427.806234][T10455] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1193'. [ 427.821340][ T30] audit: type=1400 audit(1748322379.403:992): avc: denied { setopt } for pid=10454 comm="syz.2.1193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 428.159981][ T5861] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 428.311174][ T5861] usb 3-1: Using ep0 maxpacket: 8 [ 428.321098][ T1219] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 428.334068][ T5861] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 428.346837][ T5861] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x93, changing to 0x83 [ 428.365217][ T5861] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 428.376617][ T5861] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 428.397289][ T5861] usb 3-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 428.406918][ T5861] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.421340][ T5861] usb 3-1: Product: syz [ 428.425560][ T5861] usb 3-1: Manufacturer: syz [ 428.430512][ T5861] usb 3-1: SerialNumber: syz [ 428.452954][ T5861] usb 3-1: config 0 descriptor?? [ 428.493578][ T1219] usb 2-1: Using ep0 maxpacket: 32 [ 428.517043][ T1219] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 428.520952][ T5861] input: iMON Panel, Knob and Mouse(15c2:003b) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input26 [ 428.540665][ T1219] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 428.558132][ T1219] usb 2-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 428.569294][ T1219] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.637206][ T1219] usb 2-1: config 0 descriptor?? [ 428.696195][ T5864] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 428.760524][ T5864] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 428.947093][ T5864] asix 6-1:0.0: probe with driver asix failed with error -71 [ 428.998676][ T5864] usb 6-1: USB disconnect, device number 14 [ 429.016328][ T5861] imon:send_packet: packet tx failed (-71) [ 429.060218][ T5861] imon 3-1:0.0: panel buttons/knobs setup failed [ 429.149911][ T5861] rc_core: IR keymap rc-imon-pad not found [ 429.181584][ T5861] Registered IR keymap rc-empty [ 429.194062][ T5861] imon 3-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 429.206484][ T5861] imon 3-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 429.221743][ T5861] imon:send_packet: packet tx failed (-71) [ 429.227964][ T1219] input: HID 054c:03d5 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:054C:03D5.000B/input/input28 [ 429.256738][ T5861] imon 3-1:0.0: remote input dev register failed [ 429.294444][ T5861] imon 3-1:0.0: imon_init_intf0: rc device setup failed [ 429.325405][ T1219] sony 0003:054C:03D5.000B: input,hidraw0: USB HID v0.00 Joystick [HID 054c:03d5] on usb-dummy_hcd.1-1/input0 [ 429.412670][ T5861] imon 3-1:0.0: unable to initialize intf0, err 0 [ 429.436604][ T1219] usb 2-1: USB disconnect, device number 68 [ 429.449530][ T30] audit: type=1400 audit(1748322381.023:993): avc: denied { read write } for pid=10470 comm="syz.3.1199" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 429.449722][T10471] random: crng reseeded on system resumption [ 429.473543][ T5861] imon:imon_probe: failed to initialize context! [ 429.500932][ T5864] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 429.513444][ T5861] imon 3-1:0.0: unable to register, err -19 [ 429.567834][T10473] fido_id[10473]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 429.583145][ T30] audit: type=1400 audit(1748322381.023:994): avc: denied { ioctl open } for pid=10470 comm="syz.3.1199" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 429.620879][T10474] SELinux: policydb magic number 0x10001 does not match expected magic number 0xf97cff8c [ 429.649248][ T5861] usb 3-1: USB disconnect, device number 44 [ 429.669090][T10474] SELinux: failed to load policy [ 429.898599][ T5891] IPVS: starting estimator thread 0... [ 429.909997][ T5815] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 429.918566][ T5815] Bluetooth: hci3: Injecting HCI hardware error event [ 429.935047][ T5828] Bluetooth: hci3: hardware error 0x00 [ 430.012768][T10485] IPVS: using max 39 ests per chain, 93600 per kthread [ 430.117471][T10491] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 430.125220][T10491] UDF-fs: Scanning with blocksize 512 failed [ 430.133023][T10491] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 430.140861][T10491] UDF-fs: Scanning with blocksize 1024 failed [ 430.148569][T10491] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 430.156237][T10491] UDF-fs: Scanning with blocksize 2048 failed [ 430.163439][T10491] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 430.214020][T10491] UDF-fs: Scanning with blocksize 4096 failed [ 430.553663][ T30] audit: type=1400 audit(1748322382.083:995): avc: denied { create } for pid=10490 comm="syz.5.1206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 431.287921][ T30] audit: type=1400 audit(1748322382.123:996): avc: denied { write } for pid=10490 comm="syz.5.1206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 431.363636][T10494] netlink: 'syz.5.1206': attribute type 21 has an invalid length. [ 431.373299][T10494] IPv6: NLM_F_CREATE should be specified when creating new route [ 431.990192][ T5828] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 432.249318][T10515] netlink: 'syz.1.1215': attribute type 10 has an invalid length. [ 432.307260][T10517] netlink: 'syz.1.1216': attribute type 1 has an invalid length. [ 432.379104][T10517] 8021q: adding VLAN 0 to HW filter on device bond3 [ 432.406268][T10519] ip6erspan0: entered promiscuous mode [ 432.419918][ T3074] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 432.445806][T10519] bond3: (slave ip6erspan0): making interface the new active one [ 432.460278][ T5861] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 432.481952][T10519] bond3: (slave ip6erspan0): Enslaving as an active interface with an up link [ 432.590046][ T3074] usb 3-1: Using ep0 maxpacket: 32 [ 432.612534][ T3074] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 432.645829][ T3074] usb 3-1: config 0 has no interface number 0 [ 432.660268][ T5861] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 432.678506][ T5861] usb 6-1: config 0 has no interface number 0 [ 432.685281][ T3074] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 432.712108][ T5861] usb 6-1: New USB device found, idVendor=0b48, idProduct=1004, bcdDevice=8c.1e [ 432.731698][ T3074] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 432.750204][ T5861] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.758615][ T3074] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.765966][T10527] bridge0: port 2(bridge_slave_1) entered disabled state [ 432.773889][T10527] bridge0: port 1(bridge_slave_0) entered disabled state [ 432.779897][ T3074] usb 3-1: Product: syz [ 432.786100][T10527] bridge0: entered allmulticast mode [ 432.787600][ T5861] usb 6-1: config 0 descriptor?? [ 432.804245][T10527] bridge_slave_1: left allmulticast mode [ 432.810334][T10527] bridge_slave_1: left promiscuous mode [ 432.810755][ T3074] usb 3-1: Manufacturer: syz [ 432.817596][T10527] bridge0: port 2(bridge_slave_1) entered disabled state [ 432.830073][ T3074] usb 3-1: SerialNumber: syz [ 432.837397][ T5861] usb 6-1: selecting invalid altsetting 1 [ 432.852210][T10527] bridge_slave_0: left allmulticast mode [ 432.857864][T10527] bridge_slave_0: left promiscuous mode [ 432.861497][ T5861] dvb_ttusb_budget: ttusb_init_controller: error [ 432.865577][T10527] bridge0: port 1(bridge_slave_0) entered disabled state [ 432.874045][ T3074] usb 3-1: config 0 descriptor?? [ 432.884176][ T5861] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 432.909957][ T5891] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 432.911952][ T3074] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 433.164477][T10529] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1219'. [ 433.174237][T10529] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1219'. [ 433.226151][ T3074] em28xx 3-1:0.132: Video interface 132 found: [ 433.235833][T10529] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1219'. [ 433.247143][T10513] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 433.286588][T10513] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 433.332028][ T3074] em28xx 3-1:0.132: unknown em28xx chip ID (0) [ 433.342741][ T5891] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 433.358653][ T5891] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 433.382592][ T5891] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 433.382646][ T5861] DVB: Unable to find symbol ves1820_attach() [ 433.393929][ T5891] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.408147][ T3074] em28xx 3-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 433.418362][T10521] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 433.427579][ T5891] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 433.438575][ T3074] em28xx 3-1:0.132: board has no eeprom [ 433.527818][ T3074] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 433.545944][ T3074] em28xx 3-1:0.132: analog set to bulk mode. [ 433.586587][ T5821] em28xx 3-1:0.132: Registering V4L2 extension [ 433.593121][ T5861] DVB: Unable to find symbol stv0297_attach() [ 433.610351][ T5861] dvb_ttusb_budget: no frontend driver found for device [0b48:1004] [ 433.635456][ T3074] usb 3-1: USB disconnect, device number 45 [ 433.654567][ T5861] usb 6-1: USB disconnect, device number 15 [ 433.670739][ T3074] em28xx 3-1:0.132: Disconnecting em28xx [ 433.911286][ T30] audit: type=1400 audit(1748322385.453:997): avc: denied { create } for pid=10520 comm="syz.1.1217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 434.749918][ T30] audit: type=1400 audit(1748322385.503:998): avc: denied { accept } for pid=10520 comm="syz.1.1217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 434.845218][ T5821] em28xx 3-1:0.132: Config register raw data: 0xffffffed [ 434.869539][T10544] netlink: 'syz.5.1223': attribute type 2 has an invalid length. [ 434.883213][ T5821] em28xx 3-1:0.132: AC97 chip type couldn't be determined [ 434.910175][ T5821] em28xx 3-1:0.132: No AC97 audio processor [ 434.929334][ T5821] usb 3-1: Decoder not found [ 434.944153][ T24] usb 2-1: USB disconnect, device number 69 [ 434.970737][ T5821] em28xx 3-1:0.132: failed to create media graph [ 435.009225][ T5821] em28xx 3-1:0.132: V4L2 device video103 deregistered [ 435.055881][ T5821] em28xx 3-1:0.132: Remote control support is not available for this card. [ 435.062632][ T30] audit: type=1400 audit(1748322386.643:999): avc: denied { mounton } for pid=10547 comm="syz.5.1224" path="/88/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 435.087825][ T3074] em28xx 3-1:0.132: Closing input extension [ 435.128608][ T3074] em28xx 3-1:0.132: Freeing device [ 435.220168][ T5863] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 435.400888][ T5863] usb 4-1: Using ep0 maxpacket: 8 [ 435.961087][ T5863] usb 4-1: config 0 has an invalid interface number: 186 but max is 0 [ 435.985969][ T5863] usb 4-1: config 0 has no interface number 0 [ 435.997983][ T5863] usb 4-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 436.031617][ T5863] usb 4-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 436.045470][ T5863] usb 4-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 436.058394][ T5863] usb 4-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 436.076531][ T5863] usb 4-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 436.093529][ T5863] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.112775][ T5863] usb 4-1: Product: syz [ 436.116976][ T5863] usb 4-1: Manufacturer: syz [ 436.142895][ T5863] usb 4-1: SerialNumber: syz [ 436.156033][T10562] syz.5.1227: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 436.174371][ T5863] usb 4-1: config 0 descriptor?? [ 436.189893][T10562] CPU: 1 UID: 0 PID: 10562 Comm: syz.5.1227 Not tainted 6.15.0-syzkaller #0 PREEMPT(full) [ 436.189920][T10562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 436.189932][T10562] Call Trace: [ 436.189939][T10562] [ 436.189946][T10562] dump_stack_lvl+0x16c/0x1f0 [ 436.189980][T10562] warn_alloc+0x248/0x3a0 [ 436.190000][T10562] ? __pfx_warn_alloc+0x10/0x10 [ 436.190015][T10562] ? __pfx_stack_trace_save+0x10/0x10 [ 436.190045][T10562] ? stack_depot_save_flags+0x28/0xa50 [ 436.190079][T10562] ? kasan_save_stack+0x42/0x60 [ 436.190095][T10562] ? kasan_save_stack+0x33/0x60 [ 436.190109][T10562] ? kasan_save_track+0x14/0x30 [ 436.190126][T10562] ? __kasan_kmalloc+0xaa/0xb0 [ 436.190152][T10562] ? xskq_create+0x52/0x1d0 [ 436.190174][T10562] ? do_sock_setsockopt+0x221/0x470 [ 436.190197][T10562] ? __sys_setsockopt+0x1a0/0x230 [ 436.190214][T10562] ? __x64_sys_setsockopt+0xbd/0x160 [ 436.190238][T10562] __vmalloc_node_range_noprof+0x10ea/0x1540 [ 436.190274][T10562] ? xskq_create+0xfb/0x1d0 [ 436.190301][T10562] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 436.190337][T10562] ? xskq_create+0xfb/0x1d0 [ 436.190361][T10562] vmalloc_user_noprof+0x6b/0x90 [ 436.190386][T10562] ? xskq_create+0xfb/0x1d0 [ 436.190406][T10562] xskq_create+0xfb/0x1d0 [ 436.190429][T10562] xsk_setsockopt+0x640/0x840 [ 436.190449][T10562] ? __pfx_xsk_setsockopt+0x10/0x10 [ 436.190476][T10562] ? selinux_socket_setsockopt+0x6a/0x80 [ 436.190502][T10562] ? __pfx_xsk_setsockopt+0x10/0x10 [ 436.190523][T10562] do_sock_setsockopt+0x221/0x470 [ 436.190548][T10562] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 436.190588][T10562] __sys_setsockopt+0x1a0/0x230 [ 436.190612][T10562] __x64_sys_setsockopt+0xbd/0x160 [ 436.190628][T10562] ? do_syscall_64+0x91/0x260 [ 436.190652][T10562] ? lockdep_hardirqs_on+0x7c/0x110 [ 436.190675][T10562] do_syscall_64+0xcd/0x260 [ 436.190701][T10562] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.190720][T10562] RIP: 0033:0x7f7d10d8e969 [ 436.190735][T10562] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 436.190752][T10562] RSP: 002b:00007f7d11cbb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 436.190770][T10562] RAX: ffffffffffffffda RBX: 00007f7d10fb5fa0 RCX: 00007f7d10d8e969 [ 436.190782][T10562] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 436.190792][T10562] RBP: 00007f7d10e10ab1 R08: 0000000000000004 R09: 0000000000000000 [ 436.190804][T10562] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 436.190815][T10562] R13: 0000000000000000 R14: 00007f7d10fb5fa0 R15: 00007ffd924830c8 [ 436.190842][T10562] [ 436.190849][T10562] Mem-Info: [ 436.563994][ T5863] iowarrior 4-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 436.878895][T10546] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 436.898545][T10546] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 436.916767][T10562] active_anon:12860 inactive_anon:0 isolated_anon:0 [ 436.916767][T10562] active_file:16786 inactive_file:40730 isolated_file:0 [ 436.916767][T10562] unevictable:768 dirty:355 writeback:0 [ 436.916767][T10562] slab_reclaimable:11800 slab_unreclaimable:104270 [ 436.916767][T10562] mapped:30920 shmem:4247 pagetables:949 [ 436.916767][T10562] sec_pagetables:0 bounce:0 [ 436.916767][T10562] kernel_misc_reclaimable:0 [ 436.916767][T10562] free:1304005 free_pcp:58 free_cma:0 [ 436.961869][ C1] vkms_vblank_simulate: vblank timer overrun [ 436.966382][T10546] Bluetooth: hci1: Frame reassembly failed (-84) [ 437.031375][ T5815] Bluetooth: hci1: command 0x1003 tx timeout [ 437.040174][ T5828] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 437.081222][T10562] Node 0 active_anon:51440kB inactive_anon:0kB active_file:67144kB inactive_file:162676kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:123780kB dirty:1416kB writeback:0kB shmem:15452kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11320kB pagetables:3596kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 437.114705][ C1] vkms_vblank_simulate: vblank timer overrun [ 437.139616][T10562] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:244kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 437.170823][ C1] vkms_vblank_simulate: vblank timer overrun [ 437.186456][ T5821] usb 4-1: USB disconnect, device number 46 [ 437.194194][ T3074] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 437.221347][T10562] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 437.249565][T10562] lowmem_reserve[]: 0 2484 2486 2486 2486 [ 437.261527][T10562] Node 0 DMA32 free:1280036kB boost:0kB min:34108kB low:42632kB high:51156kB reserved_highatomic:0KB active_anon:51416kB inactive_anon:0kB active_file:67144kB inactive_file:160852kB unevictable:1536kB writepending:1384kB present:3129332kB managed:2543892kB mlocked:0kB bounce:0kB free_pcp:952kB local_pcp:88kB free_cma:0kB [ 437.294977][ T30] audit: type=1400 audit(1748322388.873:1000): avc: denied { read } for pid=10573 comm="syz.0.1233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 437.330511][T10562] lowmem_reserve[]: 0 0 1 1 1 [ 437.334488][ T30] audit: type=1400 audit(1748322388.893:1001): avc: denied { create } for pid=10571 comm="syz.1.1232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 437.335335][T10562] Node 0 Normal free:16kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB active_anon:24kB inactive_anon:0kB active_file:0kB inactive_file:1824kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:36kB local_pcp:8kB free_cma:0kB [ 437.383246][T10562] lowmem_reserve[]: 0 0 0 0 0 [ 437.387973][T10562] Node 1 Normal free:3922356kB boost:0kB min:55768kB low:69708kB high:83648kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:244kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 437.390455][ T3074] usb 3-1: Using ep0 maxpacket: 16 [ 437.416711][ C1] vkms_vblank_simulate: vblank timer overrun [ 437.419467][T10562] lowmem_reserve[]: 0 0 0 0 0 [ 437.433798][T10562] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 437.459647][ T3074] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 437.471230][ T3074] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 437.481599][ T3074] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 437.484522][T10562] Node 0 [ 437.490867][ T3074] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.501588][ T3074] usb 3-1: config 0 descriptor?? [ 437.511951][T10562] DMA32: 489*4kB (UME) 797*8kB (UME) 690*16kB (UME) 553*32kB (UME) 536*64kB (UME) 87*128kB (UME) 90*256kB (UM) 91*512kB (UM) 68*1024kB (UME) 6*2048kB (UM) 255*4096kB (UM) = 1278540kB [ 437.537261][T10562] Node 0 Normal: 0*4kB 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 437.551670][T10562] Node 1 Normal: 189*4kB (UME) 44*8kB (UME) 26*16kB (UME) 204*32kB (UME) 101*64kB (UME) 30*128kB (UME) 16*256kB (UME) 7*512kB (UME) 3*1024kB (UM) 3*2048kB (UE) 949*4096kB (M) = 3922356kB [ 437.575557][T10562] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 437.587171][T10562] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=1 hugepages_size=2048kB [ 437.598207][T10562] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 437.611515][T10562] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 437.650878][T10562] 61762 total pagecache pages [ 437.656260][T10562] 0 pages in swap cache [ 437.660830][T10562] Free swap = 124996kB [ 437.687679][T10562] Total swap = 124996kB [ 437.709726][T10562] 2097051 pages RAM [ 437.714313][T10562] 0 pages HighMem/MovableOnly [ 437.745333][T10562] 428972 pages reserved [ 437.770234][T10562] 0 pages cma reserved [ 438.006173][ T3074] corsair 0003:1B1C:1B02.000C: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.2-1/input0 [ 438.201711][ T3074] corsair 0003:1B1C:1B02.000C: Read invalid backlight brightness: a7. [ 438.349914][ T5861] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 438.414748][ T1219] usb 3-1: USB disconnect, device number 46 [ 438.429969][ T5863] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 438.430318][ T5821] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 438.522488][ T5861] usb 6-1: config 0 has an invalid interface number: 120 but max is 0 [ 438.531185][ T5861] usb 6-1: config 0 has no interface number 0 [ 438.537286][ T5861] usb 6-1: config 0 interface 120 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 438.548581][ T5861] usb 6-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 438.557711][ T5861] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.567734][ T5861] usb 6-1: config 0 descriptor?? [ 438.578747][ T5861] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.120/input/input29 [ 438.590261][ T5863] usb 2-1: Using ep0 maxpacket: 32 [ 438.604447][ T5863] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 438.612853][ T5863] usb 2-1: config 0 has no interface number 0 [ 438.619045][ T5863] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 438.621729][ T5821] usb 4-1: Using ep0 maxpacket: 16 [ 438.632172][ T5863] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 438.652578][ T5863] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.654070][ T5821] usb 4-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 438.665166][ T5863] usb 2-1: Product: syz [ 438.672954][ T5821] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.684889][ T5863] usb 2-1: Manufacturer: syz [ 438.686887][ T5821] usb 4-1: Product: syz [ 438.689492][ T5863] usb 2-1: SerialNumber: syz [ 438.691884][ T5863] usb 2-1: config 0 descriptor?? [ 438.699877][ T5821] usb 4-1: Manufacturer: syz [ 438.708275][ T5863] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 438.720817][ T5821] usb 4-1: SerialNumber: syz [ 438.721085][ T5863] em28xx 2-1:0.132: Video interface 132 found: [ 438.737034][ T5821] usb 4-1: config 0 descriptor?? [ 438.747141][ T5821] ssu100 4-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 438.783491][ T30] audit: type=1400 audit(1748322390.363:1002): avc: denied { create } for pid=10583 comm="syz.5.1236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 438.804527][ T30] audit: type=1400 audit(1748322390.363:1003): avc: denied { bind } for pid=10583 comm="syz.5.1236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 439.022339][ T5863] em28xx 2-1:0.132: unknown em28xx chip ID (0) [ 439.065639][ T5821] ssu100 4-1:0.0: probe with driver ssu100 failed with error -110 [ 439.100988][ T5861] usb 6-1: USB disconnect, device number 16 [ 439.106949][ C1] usbtouchscreen 6-1:0.120: usbtouch_irq - usb_submit_urb failed with result: -19 [ 439.140583][ T30] audit: type=1400 audit(1748322390.663:1004): avc: denied { append } for pid=10583 comm="syz.5.1236" name="event4" dev="devtmpfs" ino=3366 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 439.164069][ C1] vkms_vblank_simulate: vblank timer overrun [ 439.444483][ T5821] usb 4-1: USB disconnect, device number 47 [ 439.491677][ T5863] em28xx 2-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 439.506025][ T5863] em28xx 2-1:0.132: board has no eeprom [ 439.596269][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.602628][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.612537][ T5863] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 439.640798][ T5863] em28xx 2-1:0.132: analog set to bulk mode. [ 439.646834][ T5864] em28xx 2-1:0.132: Registering V4L2 extension [ 439.685876][ T5863] usb 2-1: USB disconnect, device number 70 [ 439.703765][ T5863] em28xx 2-1:0.132: Disconnecting em28xx [ 440.322297][ T5864] em28xx 2-1:0.132: Config register raw data: 0xffffffed [ 440.344470][ T5864] em28xx 2-1:0.132: AC97 chip type couldn't be determined [ 440.370813][ T5864] em28xx 2-1:0.132: No AC97 audio processor [ 440.391776][ T5864] usb 2-1: Decoder not found [ 440.419114][ T5864] em28xx 2-1:0.132: failed to create media graph [ 440.447624][ T5864] em28xx 2-1:0.132: V4L2 device video103 deregistered [ 440.476967][ T5864] em28xx 2-1:0.132: Remote control support is not available for this card. [ 440.494054][ T30] audit: type=1400 audit(1748322392.013:1005): avc: denied { connect } for pid=10619 comm="syz.3.1246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 440.569180][ T5863] em28xx 2-1:0.132: Closing input extension [ 441.039166][ T30] audit: type=1400 audit(1748322392.023:1006): avc: denied { read } for pid=10619 comm="syz.3.1246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 441.063466][ T5863] em28xx 2-1:0.132: Freeing device [ 441.080599][ T30] audit: type=1400 audit(1748322392.263:1007): avc: denied { setopt } for pid=10617 comm="syz.2.1245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 441.118276][ T30] audit: type=1400 audit(1748322392.653:1008): avc: denied { mount } for pid=10626 comm="syz.1.1249" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 441.436746][ T30] audit: type=1400 audit(1748322392.973:1009): avc: denied { remount } for pid=10626 comm="syz.1.1249" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 444.697733][T10665] netlink: 14220 bytes leftover after parsing attributes in process `syz.1.1257'. [ 446.790338][ T5861] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 447.130664][ T5861] usb 2-1: Using ep0 maxpacket: 16 [ 447.141120][ T5861] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 447.165431][ T5861] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 447.186202][ T5861] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 447.216973][ T5861] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.251873][ T5861] usb 2-1: config 0 descriptor?? [ 447.253390][T10693] netlink: 'syz.5.1266': attribute type 21 has an invalid length. [ 447.493691][ T5861] usbhid 2-1:0.0: can't add hid device: -71 [ 447.517231][ T5861] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 447.566229][ T5861] usb 2-1: USB disconnect, device number 71 [ 447.856754][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 447.856769][ T30] audit: type=1400 audit(1748322399.433:1011): avc: denied { write } for pid=10699 comm="syz.2.1269" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 448.021094][T10702] IPv6: Can't replace route, no match found [ 448.027328][ T30] audit: type=1400 audit(1748322399.433:1012): avc: denied { ioctl } for pid=10699 comm="syz.2.1269" path="/dev/ptp0" dev="devtmpfs" ino=1265 ioctlcmd=0x3d01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 448.124994][T10704] binder: BC_ATTEMPT_ACQUIRE not supported [ 448.131477][T10704] binder: 10703:10704 ioctl c0306201 2000000001c0 returned -22 [ 449.214763][T10711] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10711 comm=syz.5.1272 [ 449.729964][ T5863] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 449.879145][ T30] audit: type=1400 audit(1748322401.393:1013): avc: denied { create } for pid=10719 comm="syz.5.1275" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 449.952121][ T5863] usb 2-1: Using ep0 maxpacket: 32 [ 449.980477][ T5863] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 450.016114][ T5863] usb 2-1: config 0 has no interface number 0 [ 450.043201][ T5863] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 450.339114][ T5863] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 450.354711][ T5863] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.373404][ T30] audit: type=1400 audit(1748322401.563:1014): avc: denied { unlink } for pid=8527 comm="syz-executor" name="file0" dev="tmpfs" ino=540 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 450.406451][ T5863] usb 2-1: Product: syz [ 450.416414][ T5863] usb 2-1: Manufacturer: syz [ 450.441873][ T5863] usb 2-1: SerialNumber: syz [ 450.478024][ T5863] usb 2-1: config 0 descriptor?? [ 450.517979][ T5863] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 450.561478][ T5863] em28xx 2-1:0.132: Video interface 132 found: [ 450.768768][T10733] FAULT_INJECTION: forcing a failure. [ 450.768768][T10733] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 450.791688][T10733] CPU: 0 UID: 0 PID: 10733 Comm: syz.3.1279 Not tainted 6.15.0-syzkaller #0 PREEMPT(full) [ 450.791713][T10733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 450.791723][T10733] Call Trace: [ 450.791729][T10733] [ 450.791735][T10733] dump_stack_lvl+0x16c/0x1f0 [ 450.791765][T10733] should_fail_ex+0x512/0x640 [ 450.791793][T10733] _copy_to_user+0x32/0xd0 [ 450.791821][T10733] simple_read_from_buffer+0xcb/0x170 [ 450.791849][T10733] proc_fail_nth_read+0x197/0x270 [ 450.791877][T10733] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 450.791905][T10733] ? rw_verify_area+0xcf/0x680 [ 450.791927][T10733] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 450.791954][T10733] vfs_read+0x1e1/0xc70 [ 450.791983][T10733] ? __pfx___mutex_lock+0x10/0x10 [ 450.792009][T10733] ? __pfx_vfs_read+0x10/0x10 [ 450.792041][T10733] ? __fget_files+0x20e/0x3c0 [ 450.792066][T10733] ksys_read+0x12a/0x240 [ 450.792096][T10733] ? __pfx_ksys_read+0x10/0x10 [ 450.792129][T10733] do_syscall_64+0xcd/0x260 [ 450.792156][T10733] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.792174][T10733] RIP: 0033:0x7f077478d37c [ 450.792189][T10733] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 450.792205][T10733] RSP: 002b:00007f07755d9030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 450.792222][T10733] RAX: ffffffffffffffda RBX: 00007f07749b5fa0 RCX: 00007f077478d37c [ 450.792233][T10733] RDX: 000000000000000f RSI: 00007f07755d90a0 RDI: 0000000000000004 [ 450.792244][T10733] RBP: 00007f07755d9090 R08: 0000000000000000 R09: 0000000000000000 [ 450.792254][T10733] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 450.792264][T10733] R13: 0000000000000000 R14: 00007f07749b5fa0 R15: 00007ffd3ea759c8 [ 450.792288][T10733] [ 450.981218][ T5863] em28xx 2-1:0.132: unknown em28xx chip ID (0) [ 451.015524][ T30] audit: type=1400 audit(1748322402.583:1015): avc: denied { block_suspend } for pid=10734 comm="syz.2.1280" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 451.068342][ T5863] em28xx 2-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 451.078771][ T5863] em28xx 2-1:0.132: board has no eeprom [ 451.140302][ T5863] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 451.148152][ T5863] em28xx 2-1:0.132: analog set to bulk mode. [ 451.155163][ T1219] em28xx 2-1:0.132: Registering V4L2 extension [ 451.164297][ T5863] usb 2-1: USB disconnect, device number 72 [ 451.171556][ T5863] em28xx 2-1:0.132: Disconnecting em28xx [ 452.169946][ T1219] em28xx 2-1:0.132: Config register raw data: 0xffffffed [ 452.177011][ T1219] em28xx 2-1:0.132: AC97 chip type couldn't be determined [ 452.187455][ T1219] em28xx 2-1:0.132: No AC97 audio processor [ 452.195298][ T1219] usb 2-1: Decoder not found [ 452.202506][ T1219] em28xx 2-1:0.132: failed to create media graph [ 452.208847][ T1219] em28xx 2-1:0.132: V4L2 device video103 deregistered [ 452.218993][ T1219] em28xx 2-1:0.132: Remote control support is not available for this card. [ 452.231007][ T5863] em28xx 2-1:0.132: Closing input extension [ 452.245279][ T5863] em28xx 2-1:0.132: Freeing device [ 452.280003][ T5864] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 452.450360][ T5864] usb 3-1: Using ep0 maxpacket: 32 [ 452.920420][ T5864] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 452.933324][ T5864] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 452.943862][ T5864] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 452.953540][ T5864] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.993998][ T5864] usb 3-1: config 0 descriptor?? [ 453.124011][T10763] netlink: 'syz.3.1285': attribute type 10 has an invalid length. [ 453.132268][T10763] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1285'. [ 453.143063][T10763] batadv0: entered promiscuous mode [ 453.148283][T10763] batadv0: entered allmulticast mode [ 453.156433][T10763] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 453.180524][T10763] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1285'. [ 453.231840][ T30] audit: type=1400 audit(1748322404.773:1016): avc: denied { ioctl } for pid=10761 comm="syz.3.1285" path="socket:[33929]" dev="sockfs" ino=33929 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 454.002537][ T5864] ft260 0003:0403:6030.000D: unknown main item tag 0x0 [ 454.070817][ T5864] ft260 0003:0403:6030.000D: chip code: 6424 8183 [ 454.077895][ T5864] ft260 0003:0403:6030.000D: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.2-1/input0 [ 454.480177][ T30] audit: type=1400 audit(1748322406.053:1017): avc: denied { create } for pid=10743 comm="syz.2.1282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 455.759515][ T5864] ft260 0003:0403:6030.000D: failed to retrieve status: -71 [ 455.792518][ T5864] ft260 0003:0403:6030.000D: failed to reset I2C controller: -71 [ 455.865326][T10784] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 455.873337][T10784] UDF-fs: Scanning with blocksize 512 failed [ 455.880495][T10784] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 455.887977][T10784] UDF-fs: Scanning with blocksize 1024 failed [ 455.895321][T10784] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 455.903476][T10784] UDF-fs: Scanning with blocksize 2048 failed [ 455.910796][T10784] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 455.947708][T10784] UDF-fs: Scanning with blocksize 4096 failed [ 456.230916][ T5873] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 456.558727][ T5873] usb 6-1: Using ep0 maxpacket: 8 [ 456.677567][ T5873] usb 6-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 456.726839][ T5873] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.763376][ T5873] usb 6-1: config 0 descriptor?? [ 456.908149][ T5864] usb 3-1: USB disconnect, device number 47 [ 457.648675][ T5873] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 457.660661][ T5873] asix 6-1:0.0: probe with driver asix failed with error -32 [ 457.930427][ T5821] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 458.089915][ T5821] usb 2-1: Using ep0 maxpacket: 32 [ 458.102742][ T5821] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 458.119870][ T5821] usb 2-1: config 0 has no interface number 0 [ 458.139886][ T5821] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 458.161165][ T5821] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 458.170347][ T5821] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.178330][ T5821] usb 2-1: Product: syz [ 458.183190][ T5821] usb 2-1: Manufacturer: syz [ 458.187786][ T5821] usb 2-1: SerialNumber: syz [ 458.200581][ T5821] usb 2-1: config 0 descriptor?? [ 458.207999][ T5821] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 458.229896][ T5821] em28xx 2-1:0.132: Video interface 132 found: [ 458.488676][ T30] audit: type=1400 audit(1748322410.063:1018): avc: denied { listen } for pid=10813 comm="syz.3.1301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 458.490437][ T5821] em28xx 2-1:0.132: unknown em28xx chip ID (0) [ 458.517349][ T30] audit: type=1400 audit(1748322410.093:1019): avc: denied { accept } for pid=10813 comm="syz.3.1301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 458.576265][ T5821] em28xx 2-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 458.585355][ T5821] em28xx 2-1:0.132: board has no eeprom [ 458.649948][ T5821] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 458.657887][ T5821] em28xx 2-1:0.132: analog set to bulk mode. [ 458.664232][ T3074] em28xx 2-1:0.132: Registering V4L2 extension [ 458.682312][ T5821] usb 2-1: USB disconnect, device number 73 [ 458.695260][ T5821] em28xx 2-1:0.132: Disconnecting em28xx [ 458.770717][ T3074] em28xx 2-1:0.132: Config register raw data: 0xffffffed [ 458.777890][ T3074] em28xx 2-1:0.132: AC97 chip type couldn't be determined [ 458.789622][ T3074] em28xx 2-1:0.132: No AC97 audio processor [ 458.807453][ T3074] usb 2-1: Decoder not found [ 458.815514][ T3074] em28xx 2-1:0.132: failed to create media graph [ 458.823411][ T3074] em28xx 2-1:0.132: V4L2 device video103 deregistered [ 458.835102][ T3074] em28xx 2-1:0.132: Remote control support is not available for this card. [ 458.845109][ T5821] em28xx 2-1:0.132: Closing input extension [ 458.859360][ T5821] em28xx 2-1:0.132: Freeing device [ 459.515896][ T30] audit: type=1400 audit(1748322411.013:1020): avc: denied { connect } for pid=10828 comm="syz.1.1304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 460.130484][ T5864] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 460.286393][ T5873] usb 6-1: USB disconnect, device number 17 [ 460.453958][ T5864] usb 4-1: Using ep0 maxpacket: 16 [ 460.488208][ T5864] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 460.667787][T10848] tmpfs: Bad value for 'usrquota_block_hardlimit' [ 460.843374][T10848] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 460.894119][T10848] SELinux: failed to load policy [ 461.099929][ T3074] usb 2-1: new full-speed USB device number 74 using dummy_hcd [ 461.406508][ T5864] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 461.410253][T10856] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1311'. [ 461.417821][ T5864] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 461.439646][ T5864] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 461.450313][ T5864] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 461.458043][T10856] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10856 comm=syz.2.1311 [ 461.464225][ T5864] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 461.526387][ T5864] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 461.545162][ T5864] usb 4-1: Manufacturer: syz [ 461.559017][ T5864] usb 4-1: config 0 descriptor?? [ 461.560983][ T3074] usb 2-1: device descriptor read/64, error -71 [ 461.689343][T10863] netlink: 'syz.2.1313': attribute type 21 has an invalid length. [ 461.788889][T10865] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 461.809397][T10865] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 461.831190][ T3074] usb 2-1: new full-speed USB device number 75 using dummy_hcd [ 461.909991][ T5864] rc_core: IR keymap rc-hauppauge not found [ 461.921039][ T5864] Registered IR keymap rc-empty [ 461.926436][ T5864] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 461.953505][ T5864] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 461.979932][ T3074] usb 2-1: device descriptor read/64, error -71 [ 461.986528][ T5864] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 462.009399][ T5864] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input31 [ 462.033631][ T5864] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 462.063656][ T5864] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 462.089967][ T5864] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 462.111438][ T3074] usb usb2-port1: attempt power cycle [ 462.111458][ T5864] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 462.150127][ T5864] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 462.175308][ T5864] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 462.213334][ T5864] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 462.240305][ T5864] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 462.282533][ T5864] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 462.319980][ T5864] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 462.341876][ T5864] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 462.353957][ T5864] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 462.380374][ T5864] usb 4-1: USB disconnect, device number 48 [ 462.477388][ T3074] usb 2-1: new full-speed USB device number 76 using dummy_hcd [ 462.511807][ T3074] usb 2-1: device descriptor read/8, error -71 [ 462.750245][ T3074] usb 2-1: new full-speed USB device number 77 using dummy_hcd [ 463.000393][ T5864] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 463.200042][ T5864] usb 3-1: Using ep0 maxpacket: 32 [ 463.248336][ T5864] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 463.322111][ T5864] usb 3-1: config 0 has no interface number 0 [ 463.366321][ T5864] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 463.460254][ T30] audit: type=1400 audit(1748322415.033:1021): avc: denied { setopt } for pid=10877 comm="syz.3.1316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 463.515325][ T5864] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 463.535449][ T30] audit: type=1400 audit(1748322415.093:1022): avc: denied { bind } for pid=10877 comm="syz.3.1316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 463.612856][ T5864] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.623842][ T3074] usb 2-1: device descriptor read/8, error -71 [ 463.675740][ T5864] usb 3-1: Product: syz [ 463.703289][ T5864] usb 3-1: Manufacturer: syz [ 463.736480][ T5864] usb 3-1: SerialNumber: syz [ 463.751035][ T3074] usb usb2-port1: unable to enumerate USB device [ 463.768314][ T5864] usb 3-1: config 0 descriptor?? [ 463.807285][ T5864] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 463.821384][ T5864] em28xx 3-1:0.132: Video interface 132 found: [ 463.986325][ T30] audit: type=1400 audit(1748322415.563:1023): avc: denied { name_connect } for pid=10888 comm="syz.3.1320" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 464.006605][ C0] vkms_vblank_simulate: vblank timer overrun [ 464.435434][ T24] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 464.562162][ T5864] em28xx 3-1:0.132: unknown em28xx chip ID (0) [ 464.643389][ T5864] em28xx 3-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 464.670929][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 464.824808][ T5864] em28xx 3-1:0.132: board has no eeprom [ 464.969018][T10895] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1322'. [ 465.040208][ T5864] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 465.133682][T10895] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10895 comm=syz.0.1322 [ 465.162451][ T5864] em28xx 3-1:0.132: analog set to bulk mode. [ 465.172686][ T5863] em28xx 3-1:0.132: Registering V4L2 extension [ 465.948316][ T5864] usb 3-1: USB disconnect, device number 48 [ 466.019681][ T5863] em28xx 3-1:0.132: failed to trigger read from i2c address 0x4a (error=-19) [ 466.287136][ T5864] em28xx 3-1:0.132: Disconnecting em28xx [ 466.387206][T10912] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 466.456569][ T30] audit: type=1400 audit(1748322418.033:1024): avc: denied { create } for pid=10904 comm="syz.1.1326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 466.831443][ T24] usb 6-1: unable to get BOS descriptor or descriptor too short [ 466.885052][ T24] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 466.936020][ T24] usb 6-1: can't read configurations, error -71 [ 466.979068][ T5863] em28xx 3-1:0.132: Config register raw data: 0xffffffed [ 467.012885][ T5863] em28xx 3-1:0.132: AC97 chip type couldn't be determined [ 467.059886][ T5863] em28xx 3-1:0.132: No AC97 audio processor [ 467.094447][ T5863] usb 3-1: Decoder not found [ 467.109299][ T5863] em28xx 3-1:0.132: failed to create media graph [ 467.130251][ T5863] em28xx 3-1:0.132: V4L2 device video103 deregistered [ 467.306225][ T5863] em28xx 3-1:0.132: Remote control support is not available for this card. [ 467.324969][ T5864] em28xx 3-1:0.132: Closing input extension [ 467.332009][ T5864] ================================================================== [ 467.340074][ T5864] BUG: KASAN: slab-use-after-free in media_device_unregister+0x598/0x5c0 [ 467.348497][ T5864] Read of size 8 at addr ffff88807f6d0210 by task kworker/0:6/5864 [ 467.356471][ T5864] [ 467.358796][ T5864] CPU: 0 UID: 0 PID: 5864 Comm: kworker/0:6 Not tainted 6.15.0-syzkaller #0 PREEMPT(full) [ 467.358820][ T5864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 467.358833][ T5864] Workqueue: usb_hub_wq hub_event [ 467.358860][ T5864] Call Trace: [ 467.358866][ T5864] [ 467.358874][ T5864] dump_stack_lvl+0x116/0x1f0 [ 467.358904][ T5864] print_report+0xc3/0x670 [ 467.358922][ T5864] ? __virt_addr_valid+0x5e/0x590 [ 467.358949][ T5864] ? __phys_addr+0xc6/0x150 [ 467.358976][ T5864] ? media_device_unregister+0x598/0x5c0 [ 467.359002][ T5864] kasan_report+0xe0/0x110 [ 467.359022][ T5864] ? media_device_unregister+0x598/0x5c0 [ 467.359053][ T5864] media_device_unregister+0x598/0x5c0 [ 467.359082][ T5864] em28xx_release_resources+0xb2/0x2d0 [ 467.359106][ T5864] em28xx_usb_disconnect+0x1de/0x610 [ 467.359128][ T5864] usb_unbind_interface+0x1da/0x9a0 [ 467.359156][ T5864] ? kernfs_remove_by_name_ns+0xbe/0x110 [ 467.359181][ T5864] ? __pfx_usb_unbind_interface+0x10/0x10 [ 467.359206][ T5864] device_remove+0x122/0x170 [ 467.359226][ T5864] device_release_driver_internal+0x44b/0x620 [ 467.359251][ T5864] bus_remove_device+0x22f/0x420 [ 467.359270][ T5864] device_del+0x396/0x9f0 [ 467.359290][ T5864] ? __pfx_device_del+0x10/0x10 [ 467.359308][ T5864] ? kobject_put+0x210/0x5a0 [ 467.359338][ T5864] usb_disable_device+0x355/0x7d0 [ 467.359365][ T5864] usb_disconnect+0x2e1/0x920 [ 467.359389][ T5864] hub_event+0x1c57/0x4fa0 [ 467.359420][ T5864] ? __lock_acquire+0xaa4/0x1ba0 [ 467.359450][ T5864] ? __pfx_hub_event+0x10/0x10 [ 467.359472][ T5864] ? debug_object_deactivate+0x1ec/0x3a0 [ 467.359496][ T5864] ? rcu_is_watching+0x12/0xc0 [ 467.359518][ T5864] process_one_work+0x9cf/0x1b70 [ 467.359542][ T5864] ? __pfx_hub_event+0x10/0x10 [ 467.359564][ T5864] ? __pfx_process_one_work+0x10/0x10 [ 467.359587][ T5864] ? assign_work+0x1a0/0x250 [ 467.359612][ T5864] worker_thread+0x6c8/0xf10 [ 467.359636][ T5864] ? __kthread_parkme+0x19e/0x250 [ 467.359663][ T5864] ? __pfx_worker_thread+0x10/0x10 [ 467.359681][ T5864] kthread+0x3c2/0x780 [ 467.359699][ T5864] ? __pfx_kthread+0x10/0x10 [ 467.359715][ T5864] ? __pfx_kthread+0x10/0x10 [ 467.359731][ T5864] ? __pfx_kthread+0x10/0x10 [ 467.359747][ T5864] ? __pfx_kthread+0x10/0x10 [ 467.359762][ T5864] ? rcu_is_watching+0x12/0xc0 [ 467.359783][ T5864] ? __pfx_kthread+0x10/0x10 [ 467.359800][ T5864] ret_from_fork+0x45/0x80 [ 467.359817][ T5864] ? __pfx_kthread+0x10/0x10 [ 467.359832][ T5864] ret_from_fork_asm+0x1a/0x30 [ 467.359860][ T5864] [ 467.359866][ T5864] [ 467.605557][ T5864] Allocated by task 5863: [ 467.609868][ T5864] kasan_save_stack+0x33/0x60 [ 467.614530][ T5864] kasan_save_track+0x14/0x30 [ 467.619186][ T5864] __kasan_kmalloc+0xaa/0xb0 [ 467.623762][ T5864] em28xx_v4l2_init+0x114/0x4080 [ 467.628688][ T5864] em28xx_init_extension+0x137/0x200 [ 467.633960][ T5864] request_module_async+0x61/0x70 [ 467.638965][ T5864] process_one_work+0x9cf/0x1b70 [ 467.643887][ T5864] worker_thread+0x6c8/0xf10 [ 467.648459][ T5864] kthread+0x3c2/0x780 [ 467.652508][ T5864] ret_from_fork+0x45/0x80 [ 467.656906][ T5864] ret_from_fork_asm+0x1a/0x30 [ 467.661654][ T5864] [ 467.663958][ T5864] Freed by task 5863: [ 467.667911][ T5864] kasan_save_stack+0x33/0x60 [ 467.672569][ T5864] kasan_save_track+0x14/0x30 [ 467.677232][ T5864] kasan_save_free_info+0x3b/0x60 [ 467.682241][ T5864] __kasan_slab_free+0x51/0x70 [ 467.686984][ T5864] kfree+0x2b6/0x4d0 [ 467.690867][ T5864] em28xx_v4l2_init+0x22b5/0x4080 [ 467.695876][ T5864] em28xx_init_extension+0x137/0x200 [ 467.701142][ T5864] request_module_async+0x61/0x70 [ 467.706154][ T5864] process_one_work+0x9cf/0x1b70 [ 467.711081][ T5864] worker_thread+0x6c8/0xf10 [ 467.715654][ T5864] kthread+0x3c2/0x780 [ 467.719703][ T5864] ret_from_fork+0x45/0x80 [ 467.724105][ T5864] ret_from_fork_asm+0x1a/0x30 [ 467.728860][ T5864] [ 467.731166][ T5864] The buggy address belongs to the object at ffff88807f6d0000 [ 467.731166][ T5864] which belongs to the cache kmalloc-8k of size 8192 [ 467.745197][ T5864] The buggy address is located 528 bytes inside of [ 467.745197][ T5864] freed 8192-byte region [ffff88807f6d0000, ffff88807f6d2000) [ 467.759058][ T5864] [ 467.761363][ T5864] The buggy address belongs to the physical page: [ 467.767750][ T5864] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7f6d0 [ 467.776493][ T5864] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 467.784969][ T5864] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 467.792493][ T5864] page_type: f5(slab) [ 467.796454][ T5864] raw: 00fff00000000040 ffff88801b442280 dead000000000100 dead000000000122 [ 467.805020][ T5864] raw: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000 [ 467.813583][ T5864] head: 00fff00000000040 ffff88801b442280 dead000000000100 dead000000000122 [ 467.822235][ T5864] head: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000 [ 467.830885][ T5864] head: 00fff00000000003 ffffea0001fdb401 00000000ffffffff 00000000ffffffff [ 467.839534][ T5864] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 467.848704][ T5864] page dumped because: kasan: bad access detected [ 467.855090][ T5864] page_owner tracks the page as allocated [ 467.860779][ T5864] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5819, tgid 5819 (syz-executor), ts 61347211008, free_ts 61340723836 [ 467.882120][ T5864] post_alloc_hook+0x181/0x1b0 [ 467.886872][ T5864] get_page_from_freelist+0x135c/0x3920 [ 467.892397][ T5864] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 467.898271][ T5864] alloc_pages_mpol+0x1fb/0x550 [ 467.903102][ T5864] new_slab+0x244/0x340 [ 467.907245][ T5864] ___slab_alloc+0xd9c/0x1940 [ 467.911909][ T5864] __slab_alloc.constprop.0+0x56/0xb0 [ 467.917265][ T5864] __kvmalloc_node_noprof+0x3a6/0x600 [ 467.922624][ T5864] pfifo_fast_init+0x125/0x3b0 [ 467.927370][ T5864] qdisc_create_dflt+0x101/0x430 [ 467.932289][ T5864] dev_activate+0x63f/0x12d0 [ 467.936862][ T5864] __dev_open+0x43a/0x7d0 [ 467.941173][ T5864] __dev_change_flags+0x55d/0x720 [ 467.946178][ T5864] netif_change_flags+0x8d/0x160 [ 467.951099][ T5864] do_setlink.constprop.0+0xddf/0x44b0 [ 467.956541][ T5864] rtnl_newlink+0x1446/0x2000 [ 467.961201][ T5864] page last free pid 5808 tgid 5808 stack trace: [ 467.967504][ T5864] __free_frozen_pages+0x69d/0xff0 [ 467.972605][ T5864] __put_partials+0x16d/0x1c0 [ 467.977266][ T5864] qlist_free_all+0x4e/0x120 [ 467.981842][ T5864] kasan_quarantine_reduce+0x195/0x1e0 [ 467.987290][ T5864] __kasan_slab_alloc+0x69/0x90 [ 467.992125][ T5864] kmem_cache_alloc_node_noprof+0x1d5/0x3b0 [ 467.997996][ T5864] __alloc_skb+0x2b2/0x380 [ 468.002391][ T5864] netlink_alloc_large_skb+0x69/0x130 [ 468.007746][ T5864] netlink_sendmsg+0x6a1/0xdd0 [ 468.012491][ T5864] __sys_sendto+0x498/0x510 [ 468.016973][ T5864] __x64_sys_sendto+0xe0/0x1c0 [ 468.021714][ T5864] do_syscall_64+0xcd/0x260 [ 468.026205][ T5864] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.032080][ T5864] [ 468.034384][ T5864] Memory state around the buggy address: [ 468.039994][ T5864] ffff88807f6d0100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 468.048039][ T5864] ffff88807f6d0180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 468.056078][ T5864] >ffff88807f6d0200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 468.064115][ T5864] ^ [ 468.068678][ T5864] ffff88807f6d0280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 468.076716][ T5864] ffff88807f6d0300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 468.084756][ T5864] ================================================================== [ 468.092843][ C0] vkms_vblank_simulate: vblank timer overrun [ 468.094750][T10929] netlink: 14220 bytes leftover after parsing attributes in process `syz.5.1330'. [ 468.393439][ T30] audit: type=1400 audit(1748322419.943:1025): avc: denied { read } for pid=5167 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 468.443059][ T30] audit: type=1400 audit(1748322419.943:1026): avc: denied { search } for pid=5167 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 468.494457][ T30] audit: type=1400 audit(1748322419.943:1027): avc: denied { append } for pid=5167 comm="syslogd" name="messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 468.532700][ T30] audit: type=1400 audit(1748322419.943:1028): avc: denied { open } for pid=5167 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 468.557130][ T30] audit: type=1400 audit(1748322419.943:1029): avc: denied { getattr } for pid=5167 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 468.615048][ T5864] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 468.622270][ T5864] CPU: 0 UID: 0 PID: 5864 Comm: kworker/0:6 Not tainted 6.15.0-syzkaller #0 PREEMPT(full) [ 468.632248][ T5864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 468.642294][ T5864] Workqueue: usb_hub_wq hub_event [ 468.647820][ T5864] Call Trace: [ 468.651079][ T5864] [ 468.653982][ T5864] dump_stack_lvl+0x3d/0x1f0 [ 468.658551][ T5864] panic+0x71c/0x800 [ 468.662426][ T5864] ? __pfx_panic+0x10/0x10 [ 468.666819][ T5864] ? mark_held_locks+0x49/0x80 [ 468.671567][ T5864] ? preempt_schedule_thunk+0x16/0x30 [ 468.676911][ T5864] ? media_device_unregister+0x598/0x5c0 [ 468.682609][ T5864] ? preempt_schedule_common+0x44/0xc0 [ 468.688048][ T5864] ? media_device_unregister+0x598/0x5c0 [ 468.693664][ T5864] check_panic_on_warn+0xab/0xb0 [ 468.698576][ T5864] end_report+0x107/0x170 [ 468.702882][ T5864] kasan_report+0xee/0x110 [ 468.707272][ T5864] ? media_device_unregister+0x598/0x5c0 [ 468.712884][ T5864] media_device_unregister+0x598/0x5c0 [ 468.718322][ T5864] em28xx_release_resources+0xb2/0x2d0 [ 468.723758][ T5864] em28xx_usb_disconnect+0x1de/0x610 [ 468.729021][ T5864] usb_unbind_interface+0x1da/0x9a0 [ 468.734225][ T5864] ? kernfs_remove_by_name_ns+0xbe/0x110 [ 468.739862][ T5864] ? __pfx_usb_unbind_interface+0x10/0x10 [ 468.746035][ T5864] device_remove+0x122/0x170 [ 468.750602][ T5864] device_release_driver_internal+0x44b/0x620 [ 468.756648][ T5864] bus_remove_device+0x22f/0x420 [ 468.761561][ T5864] device_del+0x396/0x9f0 [ 468.765872][ T5864] ? __pfx_device_del+0x10/0x10 [ 468.770700][ T5864] ? kobject_put+0x210/0x5a0 [ 468.775272][ T5864] usb_disable_device+0x355/0x7d0 [ 468.780283][ T5864] usb_disconnect+0x2e1/0x920 [ 468.784944][ T5864] hub_event+0x1c57/0x4fa0 [ 468.789346][ T5864] ? __lock_acquire+0xaa4/0x1ba0 [ 468.794271][ T5864] ? __pfx_hub_event+0x10/0x10 [ 468.799016][ T5864] ? debug_object_deactivate+0x1ec/0x3a0 [ 468.804633][ T5864] ? rcu_is_watching+0x12/0xc0 [ 468.809376][ T5864] process_one_work+0x9cf/0x1b70 [ 468.814292][ T5864] ? __pfx_hub_event+0x10/0x10 [ 468.819048][ T5864] ? __pfx_process_one_work+0x10/0x10 [ 468.824395][ T5864] ? assign_work+0x1a0/0x250 [ 468.828960][ T5864] worker_thread+0x6c8/0xf10 [ 468.833526][ T5864] ? __kthread_parkme+0x19e/0x250 [ 468.838530][ T5864] ? __pfx_worker_thread+0x10/0x10 [ 468.843619][ T5864] kthread+0x3c2/0x780 [ 468.847660][ T5864] ? __pfx_kthread+0x10/0x10 [ 468.852226][ T5864] ? __pfx_kthread+0x10/0x10 [ 468.856788][ T5864] ? __pfx_kthread+0x10/0x10 [ 468.861351][ T5864] ? __pfx_kthread+0x10/0x10 [ 468.865911][ T5864] ? rcu_is_watching+0x12/0xc0 [ 468.870652][ T5864] ? __pfx_kthread+0x10/0x10 [ 468.875215][ T5864] ret_from_fork+0x45/0x80 [ 468.879604][ T5864] ? __pfx_kthread+0x10/0x10 [ 468.884165][ T5864] ret_from_fork_asm+0x1a/0x30 [ 468.888920][ T5864] [ 468.892116][ T5864] Kernel Offset: disabled [ 468.896417][ T5864] Rebooting in 86400 seconds..