last executing test programs: 2m33.821014372s ago: executing program 1 (id=560): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x1010, r0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000040)=0x7ff) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001680)=ANY=[@ANYBLOB="05000000010000008e000000c9e7000001"], 0x48) bpf$MAP_DELETE_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xe30a, r2}, 0x38) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007e3dc410cd0621013ddd0102030109021b000100094000090485000189fe1f0009058202"], 0x0) openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) 2m30.311434289s ago: executing program 1 (id=574): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0x400}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) r5 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r6, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value=0xfffff000}, 0x90) 2m29.365278707s ago: executing program 1 (id=576): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) r0 = add_key$keyring(0x0, &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) syz_clone(0x2b101100, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000000)={0x8, 0x0, 0x0, "6a37f5aa1172dd00000300000000ff0000ee000000ec00000000000000470f00", 0x3247504d}) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) r4 = socket$inet_smc(0x2b, 0x1, 0x0) socket(0xa, 0x3, 0x1003a) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40004) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x84) getsockopt$IP_VS_SO_GET_VERSION(r4, 0x0, 0x480, &(0x7f00000000c0), &(0x7f0000000180)=0x40) bind$x25(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c0000001800010000000004000000000a"], 0x2c}}, 0x0) ioperm(0x2, 0xf, 0x9e8f) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) fsetxattr(r5, &(0x7f0000000080)=@known='trusted.overlay.upper\x00', 0x0, 0x0, 0x0) fgetxattr(r5, &(0x7f00000002c0)=@random={'btrfs.', 'asymmetric\x00'}, 0x0, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x5, 0x1010, r1, 0x8a2ed000) r6 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1e00000000000000000000000000000040000000", @ANYRES32=r3, @ANYRES64=r6, @ANYRES8=r4, @ANYRES32=r2, @ANYBLOB="0000000000000000000000000000818bff121159d7000000d2239c4ffdcbd92934e86efe3ef532857026a5ce99bab19a7ff1cc8c7b91c88f4fd9487f8ee3bb539477d060e7006e9db93d186a79a84b5481a6b1b5a1dd61193b9300000000748532f22a2aea763848daca238da1a0ec3fc4a079166228af8e868f37f3645b7bc031073a1396d1869217fc5fc85434a002fe82d8c58d86f1dd72db77aa5f1731884b6a344f69a68f8532cb7a2f"], 0xffffffffffffffc3) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x8916, &(0x7f0000000000)={r6}) keyctl$restrict_keyring(0xa, r0, &(0x7f0000000300)='user\x00', &(0x7f0000000400)='ex\x0f\xac\xd1\xeb\xf4\xd8&w\xef\x9f`T3%\xfa\xbf\xef\xeb\x8e1w\xfd') 2m28.524784165s ago: executing program 1 (id=578): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newtaction={0x7c, 0x30, 0x9, 0x0, 0x0, {}, [{0x68, 0x1, [@m_vlan={0x64, 0x1, 0x0, 0x0, {{0x9}, {0x38, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x0, 0x0, 0x6c05}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x5}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000a850000000f000000850000009e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_SET_FPU(r3, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0x9, 0xbd, 0x0, 0x0, 0x2, 0x2, '\x00', 0x654}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2m28.508294833s ago: executing program 2 (id=579): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x3) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000000)=0x1, 0x4) (async) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000000)=0x1, 0x4) r2 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r2, &(0x7f0000000200)={0x2, 0x4e21, @local}, 0x10) (async) connect$inet(r2, &(0x7f0000000200)={0x2, 0x4e21, @local}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c000000040605000000000000000001000000020500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x80) (async) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c000000040605000000000000000001000000020500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x80) ioctl$SNDCTL_SEQ_GETOUTCOUNT(r6, 0x80045104, &(0x7f0000000040)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000015000100fbffb9b42a4c7243a1ffff00", @ANYRES32=r4, @ANYBLOB="08000100ffffffff"], 0x20}}, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) (async) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r7, &(0x7f0000000080), 0x1c) (async) connect$inet6(r7, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) write$binfmt_script(r7, &(0x7f0000000100), 0xfffffecd) (async) write$binfmt_script(r7, &(0x7f0000000100), 0xfffffecd) setsockopt$sock_int(r7, 0x1, 0x12, &(0x7f0000000440)=0xfffffffe, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0xe2}]}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x6006, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) (async) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'batadv_slave_1\x00', 0x10}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x300, 0x0) close(r9) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x1c, 0x0, 0x600, 0x70bd2b, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24008000}, 0xc042) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 2m27.868572209s ago: executing program 2 (id=581): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f00000000c0), 0x4) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r2 = socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x8000, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) migrate_pages(0x0, 0x3, &(0x7f0000000040)=0x7f, &(0x7f0000000300)=0xa) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000ac0)=@raw={'raw\x00', 0x8, 0x3, 0xa08, 0x100, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x970, 0xffffffff, 0xffffffff, 0x970, 0xffffffff, 0x3, 0x0, {[{{@ip={@broadcast, @private, 0x0, 0x0, 'batadv0\x00', 'batadv_slave_0\x00', {}, {}, 0x21}, 0x6, 0xa0, 0x100, 0x0, {}, [@common=@inet=@dccp={{0x30}, {[], [], 0x0, 0x88}}]}, @common=@SET={0x60}}, {{@ip={@loopback, @dev, 0x0, 0x0, 'veth0_virt_wifi\x00', 'bond_slave_0\x00'}, 0x0, 0x850, 0x870, 0x0, {}, [@common=@unspec=@u32={{0x7e0}, {[{}, {[{0x0, 0x2}]}, {[{}, {}, {}, {}, {}, {0x1ff}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x7fff}]}]}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xa68) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) vmsplice(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}], 0x1, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0xffffffffffffff5b, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000080)=[{&(0x7f0000000440)=""/187, 0xcc}], 0x35) io_uring_setup(0x6f9e, &(0x7f0000000600)={0x0, 0x1e28, 0x8, 0x3, 0x28b}) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="030700000000000000000800000068000480040007801300010062726f6164636173742d6c696e6b00001900078008000300000000000800020000000000080003000000000008000200000000000800030000000000040004"], 0x7c}}, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0x4, 0x0, &(0x7f0000000300)) 2m27.171490398s ago: executing program 2 (id=584): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000640)=@newqdisc={0xa8, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x78, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0xffff, 0x3, 0x300], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x3ffffff}]}]}]}}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 2m26.820336194s ago: executing program 2 (id=587): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x190) syz_emit_ethernet(0x26a, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$ptys(0xc, 0x3, 0x0) syz_open_dev$vim2m(0x0, 0x8, 0x2) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f0000000080)={@loopback, @multicast1, 0x0, "2634784b05261d387c920120000000000000ff80000000000600", 0x0, 0xffffffff, 0x5, 0xf6}, 0x3c) setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f0000000280)={@private, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23bd0f4eb500"}, 0x3c) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}}, 0x4000) recvmmsg(r2, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}, 0x8101}, {{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000001a00)}, 0x80000000}], 0x4, 0x40002160, 0x0) 2m26.695615964s ago: executing program 1 (id=589): socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0xa, 0x300) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0xfffffffe, {{{@in=@empty, @in=@remote, 0x0, 0xfb, 0x4e21, 0x0, 0x0, 0x20, 0x0, 0x6}, {@in=@broadcast, 0x4d3, 0x33}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {0xf4ffffffffffffff, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3}, {0x9, 0x0, 0x0, 0xfffffffffffffffc}, {}, 0x0, 0x0, 0xa}, 0x4, 0x5}}, 0xf8}}, 0x0) 2m25.832969824s ago: executing program 2 (id=590): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f00000006c0)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0, 0x0, 0x0, 0x0, 0xd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8, 0x1, 0x0, 0x600}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 2m25.692431365s ago: executing program 2 (id=591): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_lsm={0x10, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="791047000000000079004f000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000003940)=@base={0x21, 0x0, 0x0, 0x100000, 0x400, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2000000, 0x0, 0x200000000000000, @void, @value, @void, @value}, 0x48) close(r0) 2m25.610789038s ago: executing program 1 (id=593): openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x8042, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsopen(&(0x7f0000000000)='esdfs\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_io_uring_setup(0x23c, &(0x7f0000000380)={0x0, 0xd92d, 0x0, 0x18000003, 0x2}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x230}}) io_uring_enter(r1, 0x2ded, 0x4000, 0x0, 0x0, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a300000000048000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000210c0009800800014000000005600000000c0a010300000000000000000700fffe0900020073797a31000000000900010073797a300000000034000380300000802c000180250001002130404c6bfef3a31e2587ebd76200eb3ea056f39e3ab8a93c358099bf8cf3007d"], 0xf0}}, 0x0) 2m10.422442111s ago: executing program 32 (id=593): openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x8042, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsopen(&(0x7f0000000000)='esdfs\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_io_uring_setup(0x23c, &(0x7f0000000380)={0x0, 0xd92d, 0x0, 0x18000003, 0x2}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x230}}) io_uring_enter(r1, 0x2ded, 0x4000, 0x0, 0x0, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a300000000048000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000210c0009800800014000000005600000000c0a010300000000000000000700fffe0900020073797a31000000000900010073797a300000000034000380300000802c000180250001002130404c6bfef3a31e2587ebd76200eb3ea056f39e3ab8a93c358099bf8cf3007d"], 0xf0}}, 0x0) 2m10.226809725s ago: executing program 33 (id=591): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_lsm={0x10, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="791047000000000079004f000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000003940)=@base={0x21, 0x0, 0x0, 0x100000, 0x400, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2000000, 0x0, 0x200000000000000, @void, @value, @void, @value}, 0x48) close(r0) 1m23.209692425s ago: executing program 3 (id=813): mmap(&(0x7f00008c7000/0x3000)=nil, 0x3000, 0x0, 0x8031, 0xffffffffffffffff, 0x4dd4a000) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000000), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f000000c3c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x10408}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000f60000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1997e358660e994000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b60000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000056087d7200000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0x0, 0x5, 0x0, {0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3966, 0x6, 0x8000, 0x0, r3, r4, 0xe, 0x20004}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) r7 = eventfd(0xc) ioctl$VHOST_SET_VRING_ERR(r6, 0x4008af22, &(0x7f00000002c0)={0x1, r7}) write$tcp_congestion(r5, &(0x7f00000000c0)='lp\x00', 0xfffffdef) dup2(r5, r1) r8 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000001840)=ANY=[@ANYRES64=r3], 0x1e9}) pwritev(r8, &(0x7f0000001780)=[{&(0x7f0000000040)="5dc4c825dd001eb7b52eb2ef0e", 0xd}, {&(0x7f0000000500)="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", 0x1000}, {&(0x7f0000000100)="a45b2e9df74a5683ed09656a8d511636a5e86af82934aa41f574f344f7f068fdb3008855f61a82a6cc1239d4b10fe7ea811e8632c41c464780305c7c2d9da6c7d71190cb2ba106f353d8c45c472c6a6088a0273b6b1e20c9c73904e5dee59d4d1c78c0b63b162194c98a21899713b4a693c19a1f0ab34d5ad0", 0x79}, {&(0x7f0000000180)="a6f5c90ab3aaa2547148dd29eb234153b1f9c49e0762e43ab6f22097bbd30d5a2359bb089670b88eae958297e06aeb785ffa2c28a27532bfd263e37a979d7635897ea9a8bac1f628f835b91f96f71b4b78af5e313e0e5b2a0f543be0570331623accf45ec65adb83e20c14dc4d3eb8f2babca9553d81c99a21c4906a1848a9a323fc92f0cebd3544aa78d5ed5473b24d3eed176c89346f0d981cb04a809d1af040a77ce30bbe06895861b747a9f3dd9d259f054492c94a", 0xb7}, {&(0x7f0000000080)}, {&(0x7f0000001500)="4b6e7f9f4ff712fc66ed025c41f7becd1481ffca51ab07e12025e806610aed6934ef375eb7c014dd035bfaff0184b16978143b96a7fd10a2b781a5adb9163df0b006040097cd1f3d53975cc42951ad7bbed8c13f1b636ae6c2e1f13a202a169c2851e21289b9b125a62fc2a6b0771a19ebbf67b3aab98de6fbd73ae2e304a114a191856e6df7911e694b19b205d669", 0x8f}, {&(0x7f00000015c0)="780674b16bf17b55edbf850d26b33c1bb53e4fb4adbda226473dddab7074093f216f66afb0037aec7d206a5f672ddf05bcbb7d41cd4d82fb2e2ac38ba35a4c31cdd01abb0c97ea8af579d955ebdfe977f2c8d98f222432123f101ad66b7f76efdc3d8e219c1d807dcbc8570d1e6b96b6228679710537b8f4e5e4ca97629702e512e11311", 0x84}, {&(0x7f0000001680)="6c9e0c805ec277a29803a078ca4f630fbd1c325ce5f8f7ce9f7d8975ee66fc47fb842ea9427a265cbd0b2bffa5b1112b0d78c02f60e3502a84b814e8824f3dc4865c780b70d2ddd73a055ee5e3", 0x4d}, {&(0x7f0000001700)="8d0d9241147eee6084980f7ce941524ce29be1c6793f541dd19d4d51f7d606a6b113510478cd2b362b299822148b52b98855ccff5fa765ef602a6ed07e651593cfc6359daff949f58fccae03eebc10a1dcdc3a5e7566438164637b2b6f4521bb089b12a3023fd2195764b6e8a5e4437f42ce910e3d23", 0x76}], 0x9, 0x10001, 0x1300) r9 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@setneightbl={0x20, 0x43, 0x1, 0x70bd27, 0x25dfdbfe, {0xa}, [@NDTA_NAME={0xb, 0x1, 'bridge\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) 1m19.411673408s ago: executing program 3 (id=816): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r1) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f0000532000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000190000/0x1000)=nil) socket$rds(0x15, 0x5, 0x0) syz_emit_ethernet(0x2a, &(0x7f00000003c0)={@broadcast, @random="6487a2bed3d6", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x14, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) bind$unix(r4, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route(r3, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {0xa, 0x20}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="7400000010000104a7ffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800050001000000140007000000000000000005"], 0x74}}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000bc0), r6) sendmsg$IEEE802154_LLSEC_SETPARAMS(r6, 0x0, 0x880) socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8001}, 0x8) 1m18.283590039s ago: executing program 3 (id=818): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x58}}, 0x8000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) r0 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0xa, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) flock(r0, 0x2) r2 = open(&(0x7f0000000180)='.\x00', 0x10000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r4, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) sendto$inet6(r4, 0x0, 0x0, 0x200c8084, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) sendto$inet6(r4, &(0x7f0000001cc0)="2501d77b330b7e73d6b1d1b8a473ff7420b4b43ce0861f000000714fa228ee1f5b48", 0xfffffffffffffe57, 0x8000, 0x0, 0x0) setsockopt$inet6_int(r4, 0x29, 0x21, &(0x7f0000000040)=0x6, 0x4) recvmmsg(r4, &(0x7f0000002480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002003, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@broadcast, &(0x7f0000000840)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac=@device_b, {0x0, 0x30}}, 0x0, @default, 0x1, @val={0x0, 0x1f, @random="1e1db439fdca1fcc830d3d49f95edc98c5d9556118a5e2e4eb40636f4a7d74"}, @void, @void, @void, @void, @val={0x2d, 0x1a, {0x20, 0x2, 0x3, 0x0, {0x8, 0x3, 0x0, 0x6, 0x0, 0x1, 0x0, 0x1, 0x1}, 0x1, 0x1ff, 0x40}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x1, 0x0, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xa, 0x8}}, [{0xdd, 0x5b, "e58981adbb493c5789585557e89c6faabf78c33ea22db1f056c3d2094c1f1d7250f60b094d1d5855db6df0ce91a8e82739fd5bd6962cbde4d7fb4040d0ebaf8beb11cc551c9316eb0e42e1f00887a37e61674d2dc158607837c4ab"}]}, 0xcf) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000700)=@data_frame={@a_msdu=@type00={{0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x5}, @broadcast, @device_a, @from_mac=@broadcast, {0x0, 0x8}}, @a_msdu=[{@broadcast, @device_a, 0x90, "69789872757fb220f6bcd84c1650758f8d3baa043610dafb33e1516f07fba8ab87ac0295491b32119efdde92deb88eaf44e67ef62a0888a4bc6c35a55dc84a110ce5ad6e30a84344b63800093a0e48c7a565dc0b7f130ba6ee72776b238bd640d0f8cd42ed98cefd375019ee3973c1e7d3e0e0991e339bf10b641ce11754a81c96d3f37aea99813aa0de5c4185298706"}, {@device_b, @broadcast, 0x60, "f9aa1f642247e86db61b1dfa854e60288bcb697a6adbd76c444f5775e946e90485ebdc118f8b14b0ac96c528f92cf7ebcfcf3025a9f54a5648120e35d01a4621c4f8a1c2e60ceda2a683223d526d5a95a13f42332e6967bb427d6ae07a5c1ee8"}]}, 0x128) flock(r2, 0x2) 1m16.934178619s ago: executing program 3 (id=819): bind$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 32) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x50) (rerun: 32) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (async) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x25b9b9f1fb386671) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) getpid() syz_emit_vhci(&(0x7f0000001040)=ANY=[@ANYBLOB="04140a", @ANYRESOCT=r2], 0xd) (async) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) (async, rerun: 32) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 32) r4 = socket$vsock_stream(0x28, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x1000, &(0x7f0000001080)=ANY=[@ANYBLOB="8572616e733d66642c726664ee6f3d", @ANYRESHEX=r4, @ANYRES32=0x0, @ANYRESOCT=r0, @ANYBLOB=',\x00']) socket$inet_smc(0x2b, 0x1, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r5, 0x560e, &(0x7f0000000000)) (async) r6 = syz_open_dev$radio(&(0x7f0000000040), 0x2, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r6, 0x40305652, &(0x7f00000000c0)={0x2, 0x1, 0x300, 0x0, 0xffffefff, 0x5, 0x9}) (async) ioctl$TIOCSWINSZ(r5, 0x5414, &(0x7f0000000040)={0x9, 0x2, 0x1000, 0x5}) ioprio_set$uid(0x3, 0x0, 0x0) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f00000194c0)='numa_maps\x00') socket$netlink(0x10, 0x3, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 1m16.639546024s ago: executing program 3 (id=821): r0 = socket(0x28, 0x5, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x28801, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) unshare(0xc040400) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x42280, 0x0) r4 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r6, &(0x7f0000000480)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) fchown(r5, r7, r8) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f00000001c0)=0x10) close(r2) ioctl$KVM_CHECK_EXTENSION(r3, 0xae01, 0x1) syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000bfe000/0x400000)=nil) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, &(0x7f0000000080)={0x10000, 0x388000, 0x8}) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, 0x0, 0x0) r9 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r9, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @rand_addr=0xc0586300}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) 1m16.03180161s ago: executing program 3 (id=823): ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) prlimit64(r0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000340)={{0x2, 0x4e23, @loopback}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}}, 0xa, {0x2, 0xfffd, @broadcast}, 'lo\x00'}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) r5 = syz_open_dev$MSR(&(0x7f00000000c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) process_mrelease(0xffffffffffffffff, 0x0) r6 = socket(0x10, 0x3, 0x0) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r7, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0x40000000}}, './file0\x00'}) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r6, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000004000000000800040001000000", 0x24) 1m0.802741796s ago: executing program 34 (id=823): ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) prlimit64(r0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000340)={{0x2, 0x4e23, @loopback}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}}, 0xa, {0x2, 0xfffd, @broadcast}, 'lo\x00'}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) r5 = syz_open_dev$MSR(&(0x7f00000000c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) process_mrelease(0xffffffffffffffff, 0x0) r6 = socket(0x10, 0x3, 0x0) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r7, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0x40000000}}, './file0\x00'}) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r6, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000004000000000800040001000000", 0x24) 7.414402143s ago: executing program 0 (id=991): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) r1 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0xa, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) flock(r1, 0x2) r3 = open(&(0x7f0000000180)='.\x00', 0x10000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) flock(r3, 0x2) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESTART(r1, 0x1274, 0x0) 6.837201872s ago: executing program 4 (id=992): io_submit(0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x2, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000011620140480b05101e8c00000001090212000100000000"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x10000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000a40)={&(0x7f0000000380)=[{0x3, 0x1010, 0xd7, &(0x7f0000000400)="79ce0f750ec8245a14c66228ec9ba49d20596c35136b18ef107740b98490872f549ed3e7c80c0ff3a00870d03d0f73d5d8b043a5a1da0ce8c9c7da34add7f45369defba7edf620d644646b9e68da1ab3e45ae2df988ab7d996cb73590fcfe8240c6cdb22707624fdaea3fc34037b0a7e942ff31d1459f5532b1d7ce55d3de2e0feb81424d431536d0ba1f76ccd64f429467145a9439c743d0e0d420d55789195979ba7756881e4ab905b7353b4d526a7f4be9925ca2225cb5e6174856f29d301f4d662790eb54ee30560e53347466c73eaf60f23e9b67b"}, {0x1, 0x801, 0x5b, &(0x7f0000000500)="adb2f6a5057426165bc68fe2f23aaa00f61e6072861b9d8746c4b6be67234ea0897b62bbdf68786ae26dbfd139647962a45a85d3436b4af8096bfc763e6af1d683867bd18d0b5f1195d498c1fd53e40c995fbbf45583116765e87d"}, {0x3, 0x2210, 0xdf, &(0x7f0000000640)="e2217af169ee0c0acf69c2b3343fea99dcceca0da877564ea47eb2e67d8a113e4ef0b27fca99a5cd565659ec1ed456d5d06585943d1835864f7b47aa529047a786d4409031e7a13e4e08eedeba784aaa23e9621d87a62c9b2c0ece094ec645318c8a8afe9bf7e936b70f73d315837ecbe263f9c4896de0a26ab0f30a55b7ba776303e93bb51bee8bf3b186346cab696c82f254e5f1d1c9ef8b034f03b0f243af2a7ea702d6370d28b4913ce9fa24be7498bae6fc1df3076c32b845534cc52e8fbf082ffbf1807e2bfac67597a156f8b0635b52d40f5164aa400fdf96c31041"}], 0x3}) 6.433279778s ago: executing program 0 (id=993): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x405, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0x8000000}]}}}]}, 0x40}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r1 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000000)) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f000060c000/0x4000)=nil, 0x4000, 0x16) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f00001b8000/0x2000)=nil, &(0x7f000064f000/0x2000)=nil, 0x0, &(0x7f00000003c0)=[{}], 0x1, 0x0, 0x0, 0x0, 0x0, 0x59}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xe, &(0x7f0000000080)=0x2, 0x4) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x4e20, 0x0, @private1, 0x85bad93}]}, &(0x7f0000000080)=0x10) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000000c0)={r4, @in6={{0xa, 0x4e22, 0xf, @empty, 0x4}}, 0x9, 0x6, 0x0, 0x2, 0xce0206, 0xffffffe, 0x25}, 0x9c) 6.085299899s ago: executing program 0 (id=994): r0 = socket$inet6(0xa, 0x3, 0xff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000dc0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xfc5, 0xb080, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x3}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000740)={0x2c, &(0x7f0000000040)={0x40, 0x2, 0xe1, {0xe1, 0x21, "0000f8da2690b32ca829573f6bee33ec4485abd148ea67f3bae4245a4bf4d985a26ca7d3c82267d805c8b7d4ff50006b3553bc774dcb5a1bf1c4224ea6abb7ff024b3bcc8da9367c6ab7b0c09daa9b36f507ab3bde79d9422cda0ab859efcc26393c2fdf95cd1ba82919c5f927e568ddcaef122da0d3f1922004c80865e9ba137d8ee8ab5029c73977bd14e88d6a8e1800a7f0f2b6a48580eab0689626d9a81428e96a123f34e87914993f03142f67d7fb490540842edfc66a87422f4022281c46357bebf30d0c38095cf8e9c9476f9ce65400271373a01df3bbb62f6e9c35"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) connect$unix(r2, &(0x7f0000000000)=@abs={0x0, 0x0, 0x5}, 0x6e) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/handlers\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d00)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x800) recvmmsg(r7, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001180)=""/4096}, {&(0x7f0000000440)=""/128}], 0x0, &(0x7f00000004c0)=""/193}, 0x7f}, {{&(0x7f00000005c0)=@in, 0x0, &(0x7f0000000700)=[{&(0x7f0000000640)=""/35}, {&(0x7f0000000680)=""/127}], 0x0, &(0x7f0000000740)=""/23, 0x0, 0x2000000}, 0x3}], 0x400000000000054, 0x40012100, 0x0) syz_usb_connect(0x1, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="120100006edb10082505a0a4b66f010203010902121f014100000000000000015971082096dd26da4a7167eb3b81f4ea3e2359ac6a832b84fede393ec119aa6f3d0a501fe704000000a1850a237ba1309725ed1de494e6253e"], &(0x7f0000001780)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) connect$unix(r1, &(0x7f0000000800)=@file={0x0, './file0\x00'}, 0x6e) setsockopt$inet6_int(r0, 0x29, 0x7, &(0x7f0000000140)=0xf, 0x4) 5.647549203s ago: executing program 4 (id=995): socket(0xf, 0x803, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000480)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r5 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f00000005c0)=r4, 0x12) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x8040}, 0x8000) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000040)=0x1, 0x12) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_ro(r9, &(0x7f0000000280)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r10, &(0x7f0000000040)=0x1, 0x12) sendmsg$IPSET_CMD_PROTOCOL(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="540000000106010100000000000000000500000005000100070000000500010007000001050700000000000000000100070000000500010007000000050001000700000005000100070000000500010007000000"], 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x40) r11 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r2, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0xa, 0x0, 0xfff, 0x1}}, 0x20) close_range(r11, r11, 0x2) prlimit64(0x0, 0x4, &(0x7f00000007c0)={0xffffffff, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0xffffffffffffeffc, r4, 0x3, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r12, &(0x7f0000000340), 0x11000) 4.817204636s ago: executing program 4 (id=996): ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000100)={0xc, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000180)={0x28, 0x0, r0, 0x0, &(0x7f000029d000/0x2000)=nil, 0x2000, 0x3ff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000480), 0x80101, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r4, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0xffffffffffffff8c, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') setgroups(0x0, 0x0) socket(0x10, 0x3, 0x0) setxattr$system_posix_acl(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) 3.232375235s ago: executing program 4 (id=997): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) r3 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f00000000c0)=0x6) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000100)='0', 0x1) read$dsp(r4, &(0x7f00000011c0)=""/4117, 0x200021d5) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1430, 0x7bb, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xd0, 0x7, [{{0x9, 0x4, 0x0, 0xfe, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x400, 0xa0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x70, 0xa}}}}}]}}]}}, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io(r6, &(0x7f0000000000)={0x2c, &(0x7f00000001c0)=ANY=[@ANYRES64=r0], 0x0, 0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x70bd2c, 0x25dfdbff, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@FRA_GENERIC_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e24, 0x4e24}}]}, 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYRES64=r4], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x800) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$KVM_PRE_FAULT_MEMORY(0xffffffffffffffff, 0xc040aed5, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x3938700}, 0x1, 0x4, 0x1}) 2.695691373s ago: executing program 0 (id=998): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001340)={&(0x7f0000000b00)=ANY=[@ANYBLOB], 0x0, 0x2a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xfffffffffffffffe}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r6, 0x9c3fa077fa966179, 0x0, 0x9000000, {{0x7e}, {@void, @void}}}, 0x14}}, 0x4000054) r7 = syz_pidfd_open(0x0, 0x0) pidfd_getfd(r7, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x2, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) 1.831078899s ago: executing program 0 (id=999): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1fffffff}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0xb, 0x9, 0x0, 0x1, 0x3010000}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2}, {0x3, 0x0, 0x3, 0xa, 0x9, 0xfe04}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xe1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 878.663768ms ago: executing program 0 (id=1000): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x40, 0x13, 0x6, @multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001740)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)={0x40, 0x19, 0x2, "b1e7"}, 0x0, 0x0, 0x0, 0x0}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000f80), r2) sendmsg$NFC_CMD_LLC_SET_PARAMS(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, r3, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_LLC_PARAM_RW={0x5, 0x10, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x40011}, 0x800) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000440)={0x1c, &(0x7f0000000500)={0x0, 0xa, 0x1, "d5"}, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) r5 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) pwritev(r5, &(0x7f0000000300)=[{&(0x7f0000000100)="d4", 0x1}], 0x1, 0xb, 0x7ff) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r6, 0x4601, &(0x7f0000000040)={0x191, 0x258, 0x1e0, 0x3f, 0x32, 0x1, 0x0, 0xffffffdd, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4}) syz_usb_control_io$printer(r0, 0x0, 0x0) 10.647979ms ago: executing program 4 (id=1001): r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r0, 0x8, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x200008d1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r2, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x24}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x4040880) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000300)=0x0) sendmsg$NFC_CMD_LLC_GET_PARAMS(r3, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x50, r4, 0x400, 0x70bd26, 0x3, {}, [@NFC_ATTR_FIRMWARE_NAME={0x9, 0x14, 'SEG6\x00'}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_FIRMWARE_NAME={0x5, 0x14, ':'}, @NFC_ATTR_FIRMWARE_NAME={0x5, 0x14, '&'}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_FIRMWARE_NAME={0x8, 0x14, 'nbd\x00'}, @NFC_ATTR_FIRMWARE_NAME={0x7, 0x14, ',[-'}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x0) r6 = socket(0x21, 0x5, 0x8) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r1) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000004c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r6, &(0x7f00000005c0)={&(0x7f0000000440), 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x48, r7, 0x20, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x8, 0x3f}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x15}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x25}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3e}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x9}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40000) iopl(0x5) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000640)={'wg0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000700)={'ip6_vti0\x00', &(0x7f0000000680)={'syztnl1\x00', 0x0, 0x4, 0x8, 0x10, 0x400, 0x30, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8, 0x1, 0x5, 0x96a}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f0000000740)={'wg1\x00', 0x0}) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000013c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001380)={&(0x7f0000000780)={0xc00, 0x0, 0x800, 0x70bd2c, 0x25dfdbfe, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0x3}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_PEERS={0xb7c, 0x8, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x5c4, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x3c0, 0x9, 0x0, 0x1, [{0x10c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @empty}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2b}}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x2}}]}, {0x4}, {0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x26}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x42}}, {0x5, 0x3, 0x3}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x2}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_ALLOWEDIPS={0x200, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xe}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}]}]}]}, {0xd0, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x22}}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "a97cbbc58594acf0247ede2c91cc4181f08778cd172e50afe125229ac6d97b14"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "276917ee2633fe4fafab0185947ddbd35605c361afb25c233cf073f9e434a866"}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x1000000, @mcast2, 0x6}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x5}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}, {0x4d0, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x5}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xb55a}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "430febcbb65551b4dacddaf1771e84130bcbcef4cdbc21b0c267a2e1b21d0935"}, @WGPEER_A_ALLOWEDIPS={0x46c, 0x9, 0x0, 0x1, [{0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x3}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xc}}, {0x5, 0x3, 0x3}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x9}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x1}}]}, {0x124, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "a3b0ce07a26ee9bae45a8bb9c8f3bafd404f195c666d7eed5e627cd2d3d85349"}]}]}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r9}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r10}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r11}]}, 0xc00}, 0x1, 0x0, 0x0, 0x40004}, 0x8000) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(r12, &(0x7f0000001540)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001500)={&(0x7f0000001440)={0x88, r0, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0xc113}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_SOCKETS={0x28, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2f4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}]}, 0x88}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000001) r13 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001580), 0x2, 0x0) r14 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001600), r1) sendmsg$TIPC_NL_LINK_GET(r6, &(0x7f0000001700)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000016c0)={&(0x7f0000001640)={0x68, r14, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x683}]}, @TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'macvlan1\x00'}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0xc2) syz_genetlink_get_family_id$nbd(&(0x7f0000001740), r12) r15 = syz_open_dev$usbfs(&(0x7f0000001780), 0x1, 0xd0880) ioctl$USBDEVFS_GETDRIVER(r15, 0x41045508, &(0x7f00000017c0)={0xfffffffa, "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"}) sendmsg(r1, &(0x7f0000001f40)={0x0, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000001900)="6fd3790483bbbca7f437e2678d34ec6ed7b85f8621d23e9a7a4605963076fba3c02afc0da57abbb2fb3d34bf25f31132f1eeaf4c09e63065c14318543c0cdc1dea580fb2af282335196473543c810b4f4af9978aa30453ca1ef410633d7be0958e16342176e9ee0475fb3b79ac7fc19f11bcfcfdc3480ecc98bb5dfb6b15198005ec440dd791b1c9", 0x88}, {&(0x7f00000019c0)="5938e06783638e3e2d4c0a4c6b137b5d514849aca6f8a08fdb04bf7b66c3ee4404216ea9bbb74384c699f4bc5eef4d9c6ac50d7203c193d3683d17933e63da3b34cedc403f6be39e095af7bd325ce5d8733a56ba42c9c8087a5513a3ec337b6ae7db7e75f83a2dd6f896d7f2c3ebeedbb2dc6c105c73e4471a333826915389648dd9ea2d9f6c6707f897188ff21b79ea3239305ee0dac00b7d200180ecf35fef3c15d4ee358f69a529993e0104e9dc93ffb9750d5bd60568f1f2e1e9aae6dbb7a3f70980b72fff92b651df7ba5d607dd1fe0f5ac3bef76aa7e", 0xd9}, {&(0x7f0000001ac0)="457083c6c6f431af87bffcf9b5fb2ef4975c5c0d95b8d64363896b3a224fc7f3dd369b5762efbb43233eba766eaed9027c8a463b4fcaf54992f2363948a4310f04708022cb20360bcc99092c7f70afce8758b96ffd4ccd6d9726892219040511919be32db685eae0aa389c2597c16d5ebf0c7dbc6620bbc8b477c06c785b1cc5ea7a68eab63b9151849bc172b452b7c339a0850f30d5faf6ea28302a3d896444b2ca35f8d3965095a396dd62b24b5ccbbe3590e573c3a8029c3d969b254dd1e46fb422ee57963e88476c9a227c01311e7ba63bd7ff421a4ee3cb5543f155c7233df6362ec5b9", 0xe6}, {&(0x7f0000001bc0)="f5846bd8bb224d8a8a8d3582c23791ef8aa80415720e866fddb96f6a53cc6484f44efdcb511754618c7619f73cefd46fb1bc099f2fb6e1f0d5911c3288c909345138b843087f2db4204ff0936eccd82e7b4e6c2697d20e1ce0fd9a77d0d545948b8ac1dc4cf8fb2df980e4604601cc99e2ce2aa3695fb3448393321b7c0d6d7e532287e66213d1a94df8df99cb9e6ae6967caafc2873", 0x96}, {&(0x7f0000001c80)="e6d7f546873e2c42b6edb983a788d865d7b93200e83849252a9d7773ce1e8628e48a319f7fb6ae2eadf7c33245c233", 0x2f}], 0x5, &(0x7f0000001d40)=[{0xb0, 0x84, 0x800, "2e9970c5b35004e86e80db9ff61d0b0340558c9529ae508051107415788fa41e52f61023b37eb8128911a24ddac9478a0e2cd2e90a32c98a0b7a3d9e9f10e1b3a113ee1a0e6cefd7fe5692a19c2e0101a2e9c8eba89bb2ad3f44ffcc1dccd10347c07bb22ecb2a2464d956e5a3dd31bacbcc6891d5a89525df3aba29ab25f12a1490d8f2e79dee84082e0d05be051277e524be1c7b6d7d11340a35"}, {0xe8, 0x0, 0x7, "92f5888c96dc8326d25ef710a19028eaf2c070f6ea8e45d7ae55f00845a45bcf540fc2a9a00ceb58d52befc1c36a35a1eb901a31637cfe92ea92acf85887a2da690bb4d15352aa0e264256763f97e2d6ff0c17dd3851c6fbc943d75d162d1d25a7c1b38cf35c01070e289da7ac56d6e56e19b85f2eed54fb13e2f57ea93f43d1bbffd51c138328683052debed80641f9ae74a23bb93bdfd73e0dfa554424a5805bc76d21e9ddefeafbdba0e832f862deb76f8c1594f2b7ef6d1271b5c4d72081e624f91ad9677ccd4feb4caa83987bf5481a0ef0b91c473a"}, {0x30, 0x104, 0x400, "64a692e4cd737bb4a1c65bb51f2ede0fb1322377cd8b82559e93"}], 0x1c8}, 0x20000080) openat$cgroup_int(r13, &(0x7f0000001f80)='io.weight\x00', 0x2, 0x0) r16 = syz_genetlink_get_family_id$tipc(&(0x7f0000002000), r1) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r1, &(0x7f00000020c0)={&(0x7f0000001fc0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002080)={&(0x7f0000002040)={0x1c, r16, 0x20a, 0x70bd2c, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x4000014) 0s ago: executing program 4 (id=1002): io_submit(0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x2, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000011620140480b05101e8c000000010902120001000000000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x10000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000a40)={&(0x7f0000000380)=[{0x3, 0x1010, 0xd7, &(0x7f0000000400)="79ce0f750ec8245a14c66228ec9ba49d20596c35136b18ef107740b98490872f549ed3e7c80c0ff3a00870d03d0f73d5d8b043a5a1da0ce8c9c7da34add7f45369defba7edf620d644646b9e68da1ab3e45ae2df988ab7d996cb73590fcfe8240c6cdb22707624fdaea3fc34037b0a7e942ff31d1459f5532b1d7ce55d3de2e0feb81424d431536d0ba1f76ccd64f429467145a9439c743d0e0d420d55789195979ba7756881e4ab905b7353b4d526a7f4be9925ca2225cb5e6174856f29d301f4d662790eb54ee30560e53347466c73eaf60f23e9b67b"}, {0x1, 0x801, 0x5b, &(0x7f0000000500)="adb2f6a5057426165bc68fe2f23aaa00f61e6072861b9d8746c4b6be67234ea0897b62bbdf68786ae26dbfd139647962a45a85d3436b4af8096bfc763e6af1d683867bd18d0b5f1195d498c1fd53e40c995fbbf45583116765e87d"}, {0x3, 0x2210, 0xdf, &(0x7f0000000640)="e2217af169ee0c0acf69c2b3343fea99dcceca0da877564ea47eb2e67d8a113e4ef0b27fca99a5cd565659ec1ed456d5d06585943d1835864f7b47aa529047a786d4409031e7a13e4e08eedeba784aaa23e9621d87a62c9b2c0ece094ec645318c8a8afe9bf7e936b70f73d315837ecbe263f9c4896de0a26ab0f30a55b7ba776303e93bb51bee8bf3b186346cab696c82f254e5f1d1c9ef8b034f03b0f243af2a7ea702d6370d28b4913ce9fa24be7498bae6fc1df3076c32b845534cc52e8fbf082ffbf1807e2bfac67597a156f8b0635b52d40f5164aa400fdf96c31041"}], 0x3}) kernel console output (not intermixed with test programs): T9] usb 2-1: can't read configurations, error -61 [ 231.816646][ T9] usb usb2-port1: attempt power cycle [ 231.920451][ T30] audit: type=1400 audit(1747194004.798:815): avc: denied { read } for pid=7942 comm="syz.0.514" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 231.954037][ T30] audit: type=1400 audit(1747194004.798:816): avc: denied { open } for pid=7942 comm="syz.0.514" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 231.980794][ T30] audit: type=1400 audit(1747194004.798:817): avc: denied { ioctl } for pid=7942 comm="syz.0.514" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 232.061784][ T30] audit: type=1400 audit(1747194004.938:818): avc: denied { write } for pid=7942 comm="syz.0.514" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 232.125368][ T5867] usb 1-1: USB disconnect, device number 23 [ 232.160408][ T9] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 232.192811][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 232.200608][ T9] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 232.209119][ T9] usb 2-1: can't read configurations, error -61 [ 232.353791][ T9] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 232.391364][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 232.399730][ T9] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 232.408308][ T9] usb 2-1: can't read configurations, error -61 [ 232.418607][ T9] usb usb2-port1: unable to enumerate USB device [ 232.462565][ T5868] usb 3-1: 2:1 : format type 0 is detected, processed as PCM [ 232.474876][ T5868] usb 3-1: 2:1: cannot set freq 9338507 to ep 0x82 [ 232.532256][ T5868] usb 3-1: USB disconnect, device number 17 [ 232.574646][ T6576] udevd[6576]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 232.627229][ T53] usb 5-1: USB disconnect, device number 19 [ 232.775430][ T30] audit: type=1400 audit(1747194005.648:819): avc: denied { bind } for pid=7968 comm="syz.0.522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 232.799941][ T30] audit: type=1400 audit(1747194005.648:820): avc: denied { node_bind } for pid=7968 comm="syz.0.522" saddr=224.0.0.1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 232.838429][ T30] audit: type=1400 audit(1747194005.708:821): avc: denied { module_request } for pid=7968 comm="syz.0.522" kmod="xfrm-type-2-60" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 233.497774][ T7978] netlink: 28 bytes leftover after parsing attributes in process `syz.2.524'. [ 233.695955][ T7983] macvlan2: entered allmulticast mode [ 233.718464][ T7983] bond_slave_0: entered promiscuous mode [ 233.724593][ T7983] bond_slave_1: entered promiscuous mode [ 233.732739][ T7983] bond0: entered allmulticast mode [ 233.738375][ T7983] bond_slave_0: entered allmulticast mode [ 233.746643][ T7983] bond_slave_1: entered allmulticast mode [ 233.782018][ T7983] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 234.103179][ T7983] team0: Port device macvlan2 added [ 235.077942][ T8001] input: syz0 as /devices/virtual/input/input14 [ 235.630666][ T5868] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 235.692537][ T5904] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 235.794407][ T5868] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 235.821632][ T5868] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 235.870499][ T5868] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.885879][ T5904] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 235.908036][ T5868] usb 3-1: config 0 descriptor?? [ 235.917225][ T5904] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 235.944761][ T5904] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 235.991284][ T5904] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 236.231627][ T5904] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.329206][ T5904] usb 4-1: config 0 descriptor?? [ 236.496508][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 236.496555][ T30] audit: type=1400 audit(1747194009.348:837): avc: denied { write } for pid=8025 comm="syz.4.539" path="socket:[14193]" dev="sockfs" ino=14193 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sock_file permissive=1 [ 236.644717][ T5868] keytouch 0003:0926:3333.0009: fixing up Keytouch IEC report descriptor [ 236.918174][ T30] audit: type=1400 audit(1747194009.348:838): avc: denied { write } for pid=8025 comm="syz.4.539" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 237.117605][ T5868] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0009/input/input15 [ 237.158930][ T5904] plantronics 0003:047F:FFFF.000A: No inputs registered, leaving [ 237.263169][ T8031] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 237.506639][ T8031] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 237.557379][ T8030] xt_CT: You must specify a L4 protocol and not use inversions on it [ 237.685915][ T5904] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 237.719051][ T5868] keytouch 0003:0926:3333.0009: input,hidraw1: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 237.897302][ T5904] usb 4-1: USB disconnect, device number 20 [ 238.341917][ T5868] usb 3-1: USB disconnect, device number 18 [ 238.847408][ T8035] fido_id[8035]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 238.900330][ T30] audit: type=1400 audit(1747194011.768:839): avc: denied { create } for pid=8046 comm="syz.4.544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 238.927024][ T8042] fido_id[8042]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 238.982038][ T30] audit: type=1400 audit(1747194011.818:840): avc: denied { write } for pid=8046 comm="syz.4.544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 239.190811][ T8051] netlink: 136 bytes leftover after parsing attributes in process `syz.2.547'. [ 239.216885][ T8051] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 239.217452][ T8055] netlink: 'syz.4.548': attribute type 10 has an invalid length. [ 239.718261][ T30] audit: type=1400 audit(1747194012.258:841): avc: denied { connect } for pid=8048 comm="syz.3.545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 239.731974][ T8057] lo speed is unknown, defaulting to 1000 [ 239.743763][ T8057] lo speed is unknown, defaulting to 1000 [ 239.754688][ T8057] lo speed is unknown, defaulting to 1000 [ 239.766528][ T8057] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 239.781900][ T8057] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 239.866562][ T30] audit: type=1400 audit(1747194012.738:842): avc: denied { execute } for pid=8060 comm="syz.0.549" path="/104/file0" dev="tmpfs" ino=562 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 239.914306][ T8057] lo speed is unknown, defaulting to 1000 [ 239.922271][ T8057] lo speed is unknown, defaulting to 1000 [ 239.929564][ T8057] lo speed is unknown, defaulting to 1000 [ 239.937367][ T8057] lo speed is unknown, defaulting to 1000 [ 239.945001][ T8057] lo speed is unknown, defaulting to 1000 [ 239.967956][ T30] audit: type=1400 audit(1747194012.778:844): avc: denied { block_suspend } for pid=8063 comm="syz.1.550" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 240.069166][ T8061] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: 0, delta: -1 [ 240.086656][ T8061] ref_ctr decrement failed for inode: 0x232 offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff88807ff3d000 [ 240.100297][ T8061] uprobe: syz.0.549:8061 failed to unregister, leaking uprobe [ 240.112482][ T30] audit: type=1804 audit(1747194012.738:843): pid=8061 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.549" name="/newroot/104/file0" dev="tmpfs" ino=562 res=1 errno=0 [ 240.119810][ T8066] 9pnet_fd: Insufficient options for proto=fd [ 240.135704][ T30] audit: type=1400 audit(1747194012.958:845): avc: denied { getopt } for pid=8063 comm="syz.1.550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 240.403894][ T30] audit: type=1400 audit(1747194012.978:846): avc: denied { append } for pid=8065 comm="syz.2.551" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 241.863342][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 241.863365][ T30] audit: type=1400 audit(1747194014.718:856): avc: denied { write } for pid=8090 comm="syz.0.558" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 242.420559][ T30] audit: type=1400 audit(1747194015.258:857): avc: denied { bind } for pid=8100 comm="syz.0.561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 242.690384][ T5868] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 242.813341][ T30] audit: type=1400 audit(1747194015.688:858): avc: denied { shutdown } for pid=8095 comm="syz.4.559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 242.874640][ T5868] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 242.874670][ T5868] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 242.874692][ T5868] usb 3-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.3f [ 242.874707][ T5868] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.876167][ T5868] usb 3-1: config 0 descriptor?? [ 243.812896][ T5868] zydacron 0003:13EC:0006.000B: unknown main item tag 0x0 [ 243.851532][ T9] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 243.861236][ T5868] zydacron 0003:13EC:0006.000B: unknown main item tag 0x0 [ 243.871398][ T5868] zydacron 0003:13EC:0006.000B: unbalanced collection at end of report description [ 243.892294][ T5868] zydacron 0003:13EC:0006.000B: parse failed [ 243.905654][ T5868] zydacron 0003:13EC:0006.000B: probe with driver zydacron failed with error -22 [ 244.036372][ T9] usb 2-1: config 0 has an invalid interface number: 133 but max is 0 [ 244.058653][ T30] audit: type=1400 audit(1747194016.928:859): avc: denied { create } for pid=8115 comm="syz.0.564" name=FCFFFFFF scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 244.065941][ T9] usb 2-1: config 0 has no interface number 0 [ 244.094503][ T5868] usb 3-1: USB disconnect, device number 19 [ 244.106694][ T9] usb 2-1: config 0 interface 133 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 244.119020][ T9] usb 2-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 244.128413][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.140774][ T9] usb 2-1: Product: syz [ 244.332587][ T9] usb 2-1: Manufacturer: syz [ 244.337372][ T9] usb 2-1: SerialNumber: syz [ 244.426937][ T9] usb 2-1: config 0 descriptor?? [ 244.654546][ T30] audit: type=1400 audit(1747194017.528:860): avc: denied { unlink } for pid=5813 comm="syz-executor" name=FCFFFFFF dev="tmpfs" ino=592 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 244.725890][ T9] keyspan 2-1:0.133: Keyspan 1 port adapter converter detected [ 244.745150][ T9] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 81 [ 244.753410][ T9] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 1 [ 244.841009][ T9] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 2 [ 244.850886][ T9] usb 2-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 244.883934][ T9] usb 2-1: USB disconnect, device number 20 [ 244.897920][ T9] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 244.910103][ T9] keyspan 2-1:0.133: device disconnected [ 244.926669][ T30] audit: type=1400 audit(1747194017.768:861): avc: denied { mount } for pid=8132 comm="syz.2.568" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 244.972911][ T5868] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 244.981727][ T30] audit: type=1400 audit(1747194017.788:862): avc: denied { unmount } for pid=5815 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 245.250346][ T5868] usb 1-1: Using ep0 maxpacket: 32 [ 245.322119][ T5868] usb 1-1: config 0 interface 0 has no altsetting 0 [ 245.345004][ T5868] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 245.367470][ T5868] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.395804][ T5868] usb 1-1: Product: syz [ 245.404997][ T30] audit: type=1400 audit(1747194018.278:863): avc: denied { execute_no_trans } for pid=8139 comm="syz.2.570" path="/114/file2" dev="tmpfs" ino=613 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 245.410490][ T5868] usb 1-1: Manufacturer: syz [ 245.428273][ C0] vkms_vblank_simulate: vblank timer overrun [ 245.494959][ T5868] usb 1-1: SerialNumber: syz [ 245.504542][ T30] audit: type=1400 audit(1747194018.368:864): avc: denied { create } for pid=8141 comm="syz.4.571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 245.525204][ T5868] usb 1-1: config 0 descriptor?? [ 245.551184][ T5868] gs_usb 1-1:0.0: Required endpoints not found [ 245.569939][ T30] audit: type=1400 audit(1747194018.428:865): avc: denied { append } for pid=8141 comm="syz.4.571" name="qrtr-tun" dev="devtmpfs" ino=1307 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 245.651026][ T8145] tmpfs: Bad value for 'nr_inodes' [ 247.088172][ T8163] netlink: 16 bytes leftover after parsing attributes in process `syz.1.576'. [ 247.112636][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 247.112657][ T30] audit: type=1400 audit(1747194019.978:869): avc: denied { map } for pid=8159 comm="syz.1.576" path="socket:[16473]" dev="sockfs" ino=16473 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 247.358621][ T3694] usb 1-1: USB disconnect, device number 24 [ 247.579310][ T30] audit: type=1400 audit(1747194019.978:870): avc: denied { accept } for pid=8159 comm="syz.1.576" path="socket:[16473]" dev="sockfs" ino=16473 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 247.758616][ T30] audit: type=1400 audit(1747194020.598:871): avc: denied { write } for pid=8165 comm="syz.4.577" name="mouse0" dev="devtmpfs" ino=923 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 247.820735][ T8177] netlink: 92 bytes leftover after parsing attributes in process `syz.4.577'. [ 247.829736][ T8177] netlink: 8 bytes leftover after parsing attributes in process `syz.4.577'. [ 248.121620][ T30] audit: type=1400 audit(1747194020.958:872): avc: denied { read write } for pid=5815 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 248.229023][ T30] audit: type=1400 audit(1747194020.958:873): avc: denied { open } for pid=5815 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 248.409461][ T30] audit: type=1400 audit(1747194020.958:874): avc: denied { ioctl } for pid=5815 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 248.640584][ T30] audit: type=1400 audit(1747194020.978:875): avc: denied { execmem } for pid=8175 comm="syz.3.580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 248.670211][ T30] audit: type=1400 audit(1747194021.028:876): avc: denied { read } for pid=8182 comm="syz.2.581" dev="nsfs" ino=4026533103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 248.835172][ T8191] netlink: 28 bytes leftover after parsing attributes in process `syz.4.583'. [ 248.852514][ T30] audit: type=1400 audit(1747194021.028:877): avc: denied { open } for pid=8182 comm="syz.2.581" path="net:[4026533103]" dev="nsfs" ino=4026533103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 248.932967][ T30] audit: type=1400 audit(1747194021.028:878): avc: denied { create } for pid=8182 comm="syz.2.581" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 250.613856][ T8231] netlink: 8 bytes leftover after parsing attributes in process `syz.3.594'. [ 250.976815][ T5903] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 251.120343][ T5903] usb 5-1: device descriptor read/64, error -71 [ 251.268397][ T8223] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 251.311954][ T8223] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 251.388875][ T8223] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 251.395286][ T5903] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 251.421469][ T8223] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 251.476692][ T8223] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 251.500911][ T8223] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 251.526955][ T8223] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 251.540435][ T5903] usb 5-1: device descriptor read/64, error -71 [ 251.547871][ T8223] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 251.591706][ T8223] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 251.603755][ T8223] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 251.661605][ T5903] usb usb5-port1: attempt power cycle [ 251.953774][ T8248] loop6: detected capacity change from 0 to 524287999 [ 252.027228][ T5903] usb 5-1: new full-speed USB device number 22 using dummy_hcd [ 252.170127][ T8248] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=8248 comm=syz.0.601 [ 252.517623][ T8253] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 252.541426][ T8253] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 252.587331][ T8198] Process accounting resumed [ 252.596449][ T5903] usb 5-1: device descriptor read/8, error -71 [ 252.741040][ T5940] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 252.920333][ T5940] usb 1-1: Using ep0 maxpacket: 8 [ 252.969259][ T5940] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 253.022752][ T5940] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.040072][ T30] kauditd_printk_skb: 62 callbacks suppressed [ 253.040107][ T30] audit: type=1400 audit(1747194025.908:941): avc: denied { create } for pid=8260 comm="syz.3.605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 253.070671][ T5940] usb 1-1: Product: syz [ 253.075554][ T5940] usb 1-1: Manufacturer: syz [ 253.080517][ T5940] usb 1-1: SerialNumber: syz [ 253.126397][ T5940] usb 1-1: config 0 descriptor?? [ 253.185738][ T5940] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 253.277907][ T5940] usb 1-1: setting power ON [ 253.346299][ T5940] dvb-usb: bulk message failed: -22 (2/0) [ 253.542411][ T5940] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 253.571317][ T5940] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 253.579895][ T5940] usb 1-1: media controller created [ 253.627187][ T5940] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 253.683587][ T5940] usb 1-1: selecting invalid altsetting 6 [ 253.692216][ T5940] usb 1-1: digital interface selection failed (-22) [ 253.698866][ T5940] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 253.715284][ T5940] usb 1-1: setting power OFF [ 253.771865][ T5940] dvb-usb: bulk message failed: -22 (2/0) [ 253.832563][ T5940] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 253.845036][ T5940] (NULL device *): no alternate interface [ 254.115404][ T5940] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 254.215044][ T5940] usb 1-1: USB disconnect, device number 25 [ 254.258436][ T8273] netlink: 'syz.3.609': attribute type 6 has an invalid length. [ 254.274758][ T8273] veth0_vlan: entered allmulticast mode [ 254.275503][ T30] audit: type=1400 audit(1747194027.148:942): avc: denied { ioctl } for pid=8272 comm="syz.3.609" path="socket:[15656]" dev="sockfs" ino=15656 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 254.341015][ T30] audit: type=1400 audit(1747194027.208:943): avc: denied { create } for pid=8263 comm="syz.4.606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 254.371409][ T30] audit: type=1400 audit(1747194027.238:944): avc: denied { shutdown } for pid=8263 comm="syz.4.606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 254.455669][ T8278] netlink: 136 bytes leftover after parsing attributes in process `syz.0.610'. [ 254.485122][ T8278] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 254.775093][ T30] audit: type=1400 audit(1747194027.648:945): avc: denied { create } for pid=8285 comm="syz.3.613" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 254.841258][ T30] audit: type=1400 audit(1747194027.648:946): avc: denied { write } for pid=8285 comm="syz.3.613" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 254.900688][ T30] audit: type=1400 audit(1747194027.648:947): avc: denied { write } for pid=8285 comm="syz.3.613" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 254.966357][ T30] audit: type=1400 audit(1747194027.648:948): avc: denied { open } for pid=8285 comm="syz.3.613" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 254.999111][ T30] audit: type=1400 audit(1747194027.648:949): avc: denied { ioctl } for pid=8285 comm="syz.3.613" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 255.042283][ T30] audit: type=1400 audit(1747194027.708:950): avc: denied { mount } for pid=8287 comm="syz.4.614" name="/" dev="ramfs" ino=15676 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 255.215433][ T5940] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 255.510641][ T5940] usb 4-1: Using ep0 maxpacket: 16 [ 255.519980][ T5940] usb 4-1: config 64 has an invalid interface number: 176 but max is 0 [ 255.529615][ T5940] usb 4-1: config 64 has no interface number 0 [ 255.537278][ T5940] usb 4-1: config 64 interface 176 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 255.551555][ T5940] usb 4-1: config 64 interface 176 has no altsetting 0 [ 255.572380][ T5940] usb 4-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=14.8d [ 255.581917][ T5940] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.589983][ T5940] usb 4-1: Product: syz [ 255.597218][ T5940] usb 4-1: Manufacturer: syz [ 255.608488][ T5940] usb 4-1: SerialNumber: syz [ 256.111176][ T5940] peak_usb 4-1:64.176 can0: unable to request usb[type=0 value=1] err=-71 [ 256.119756][ T5940] peak_usb 4-1:64.176: unable to read PCAN-USB X6 firmware info (err -71) [ 256.195417][ T5940] peak_usb 4-1:64.176: probe with driver peak_usb failed with error -71 [ 256.294700][ T5940] usb 4-1: USB disconnect, device number 21 [ 256.396711][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.404788][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.779732][ T8317] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 256.872792][ T8314] loop6: detected capacity change from 0 to 524287999 [ 257.056010][ T8321] loop2: detected capacity change from 0 to 7 [ 257.101310][ T8321] Dev loop2: unable to read RDB block 7 [ 257.106821][ T8326] netlink: 'syz.3.625': attribute type 3 has an invalid length. [ 257.119941][ T8321] loop2: unable to read partition table [ 257.137725][ T8321] loop2: partition table beyond EOD, truncated [ 257.160619][ T8321] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 257.447047][ T5903] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 258.051839][ T5903] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 258.080384][ T5903] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 258.090211][ T5903] usb 1-1: New USB device found, idVendor=04d8, idProduct=f372, bcdDevice= 0.00 [ 258.109438][ T5903] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.132787][ T5903] usb 1-1: config 0 descriptor?? [ 258.311328][ T5940] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 258.399672][ T8325] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 258.424402][ T8325] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 258.454886][ T30] kauditd_printk_skb: 30 callbacks suppressed [ 258.454925][ T30] audit: type=1400 audit(1747194031.328:981): avc: denied { append } for pid=8324 comm="syz.0.627" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 258.549057][ T5940] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 258.603963][ T8340] netlink: 92 bytes leftover after parsing attributes in process `syz.3.631'. [ 258.613055][ T8340] netlink: 32 bytes leftover after parsing attributes in process `syz.3.631'. [ 258.654161][ T5940] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 258.756695][ T5940] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 258.793723][ T5940] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 258.804635][ T5940] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.858390][ T5940] usb 5-1: config 0 descriptor?? [ 259.084445][ T5903] usbhid 1-1:0.0: can't add hid device: -71 [ 259.100437][ T5903] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 259.123468][ T5903] usb 1-1: USB disconnect, device number 26 [ 259.439808][ T5940] plantronics 0003:047F:FFFF.000C: No inputs registered, leaving [ 259.452803][ T5940] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 259.499924][ T30] audit: type=1400 audit(1747194032.368:982): avc: denied { create } for pid=8342 comm="syz.3.632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 259.545873][ T30] audit: type=1400 audit(1747194032.368:983): avc: denied { setopt } for pid=8342 comm="syz.3.632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 259.584302][ T30] audit: type=1400 audit(1747194032.408:984): avc: denied { read write } for pid=8342 comm="syz.3.632" name="vbi3" dev="devtmpfs" ino=968 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 259.648067][ T30] audit: type=1400 audit(1747194032.408:985): avc: denied { open } for pid=8342 comm="syz.3.632" path="/dev/vbi3" dev="devtmpfs" ino=968 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 259.700715][ T8334] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 259.721127][ T8334] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 259.803450][ T5903] usb 5-1: USB disconnect, device number 24 [ 260.757110][ T30] audit: type=1400 audit(1747194033.628:986): avc: denied { read } for pid=8357 comm="syz.0.637" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 260.803121][ T3694] usb 4-1: new low-speed USB device number 22 using dummy_hcd [ 261.040682][ T30] audit: type=1400 audit(1747194033.858:987): avc: denied { read } for pid=8355 comm="syz.4.636" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 261.304428][ T3694] usb 4-1: device descriptor read/64, error -71 [ 261.319993][ T30] audit: type=1400 audit(1747194033.858:988): avc: denied { open } for pid=8355 comm="syz.4.636" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 261.403277][ T30] audit: type=1400 audit(1747194033.868:989): avc: denied { ioctl } for pid=8355 comm="syz.4.636" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x64a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 261.580381][ T3694] usb 4-1: new low-speed USB device number 23 using dummy_hcd [ 261.629839][ T30] audit: type=1400 audit(1747194034.498:990): avc: denied { accept } for pid=8362 comm="syz.0.638" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 261.730663][ T3694] usb 4-1: device descriptor read/64, error -71 [ 261.850608][ T3694] usb usb4-port1: attempt power cycle [ 262.070463][ T24] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 262.190445][ T3694] usb 4-1: new low-speed USB device number 24 using dummy_hcd [ 262.233505][ T3694] usb 4-1: device descriptor read/8, error -71 [ 262.246538][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 262.267627][ T24] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 262.289290][ T24] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 262.303042][ T24] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 262.319922][ T24] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 262.338608][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.357853][ T24] usb 5-1: Product: syz [ 262.363398][ T24] usb 5-1: Manufacturer: syz [ 262.368137][ T24] usb 5-1: SerialNumber: syz [ 262.600426][ T3694] usb 4-1: new low-speed USB device number 25 using dummy_hcd [ 262.634617][ T3694] usb 4-1: device descriptor read/8, error -71 [ 262.705776][ T8374] macvtap1: entered allmulticast mode [ 262.711361][ T8374] veth0_macvtap: entered allmulticast mode [ 262.762490][ T3694] usb usb4-port1: unable to enumerate USB device [ 263.214235][ T24] usb 5-1: 2:1 : format type 0 is detected, processed as PCM [ 263.222866][ T24] usb 5-1: 2:1: cannot set freq 9338507 to ep 0x82 [ 263.247172][ T24] usb 5-1: USB disconnect, device number 25 [ 263.290537][ T6571] udevd[6571]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 263.798568][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 263.798606][ T30] audit: type=1326 audit(1747194036.648:996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8375 comm="syz.3.643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7e178e969 code=0x7ffc0000 [ 264.111398][ T30] audit: type=1326 audit(1747194036.648:997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8375 comm="syz.3.643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7e178e969 code=0x7ffc0000 [ 264.139110][ T30] audit: type=1326 audit(1747194036.648:998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8375 comm="syz.3.643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe7e178e969 code=0x7ffc0000 [ 264.163651][ T30] audit: type=1326 audit(1747194036.648:999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8375 comm="syz.3.643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7e178e969 code=0x7ffc0000 [ 264.187894][ C0] vkms_vblank_simulate: vblank timer overrun [ 264.195329][ T30] audit: type=1326 audit(1747194036.648:1000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8375 comm="syz.3.643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7e178e969 code=0x7ffc0000 [ 264.257690][ T30] audit: type=1326 audit(1747194036.648:1001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8375 comm="syz.3.643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fe7e178e969 code=0x7ffc0000 [ 264.283725][ T30] audit: type=1326 audit(1747194037.158:1002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8375 comm="syz.3.643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7e178e969 code=0x7ffc0000 [ 264.307063][ C0] vkms_vblank_simulate: vblank timer overrun [ 264.314559][ T30] audit: type=1326 audit(1747194037.158:1003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8375 comm="syz.3.643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7e178e969 code=0x7ffc0000 [ 264.337905][ C0] vkms_vblank_simulate: vblank timer overrun [ 264.344580][ T30] audit: type=1400 audit(1747194037.188:1004): avc: denied { read } for pid=8381 comm="syz.4.644" name="usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 264.371150][ T30] audit: type=1400 audit(1747194037.188:1005): avc: denied { open } for pid=8381 comm="syz.4.644" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 264.670494][ T5903] usb 5-1: new full-speed USB device number 26 using dummy_hcd [ 264.750482][ T24] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 264.832484][ T5903] usb 5-1: config 0 has an invalid interface number: 213 but max is 0 [ 264.840920][ T5903] usb 5-1: config 0 has no interface number 0 [ 264.849693][ T5903] usb 5-1: New USB device found, idVendor=0079, idProduct=85eb, bcdDevice=90.b7 [ 264.859429][ T5903] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.867590][ T5903] usb 5-1: Product: syz [ 264.871969][ T5903] usb 5-1: Manufacturer: syz [ 264.876597][ T5903] usb 5-1: SerialNumber: syz [ 264.883047][ T5903] usb 5-1: config 0 descriptor?? [ 264.932376][ T24] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 264.943555][ T24] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 264.958935][ T24] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 264.968181][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.979410][ T8387] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 264.989377][ T24] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 265.303360][ T24] usb 4-1: USB disconnect, device number 26 [ 267.090434][ T5867] usb 1-1: new low-speed USB device number 27 using dummy_hcd [ 267.340337][ T5867] usb 1-1: config 0 has no interfaces? [ 267.346040][ T5867] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 267.388864][ T5867] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.552701][ T5867] usb 1-1: config 0 descriptor?? [ 267.819969][ T8415] CIFS: Unable to determine destination address [ 268.205363][ T8417] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 268.230900][ T8417] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 268.263239][ T5903] usb 1-1: USB disconnect, device number 27 [ 268.377520][ T5904] usb 5-1: USB disconnect, device number 26 [ 268.910203][ T8432] netdevsim netdevsim4: Direct firmware load for . [ 268.910203][ T8432] failed with error -2 [ 268.928638][ T8432] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 268.928638][ T8432] [ 268.939898][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 268.939912][ T30] audit: type=1400 audit(1747194041.798:1021): avc: denied { firmware_load } for pid=8431 comm="syz.4.659" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 269.214929][ T8436] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 270.059444][ T8440] netlink: 4 bytes leftover after parsing attributes in process `syz.4.661'. [ 270.069025][ T30] audit: type=1400 audit(1747194042.928:1022): avc: denied { accept } for pid=8439 comm="syz.4.661" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 270.143109][ T30] audit: type=1400 audit(1747194042.988:1023): avc: denied { create } for pid=8439 comm="syz.4.661" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 270.181502][ T30] audit: type=1400 audit(1747194042.988:1024): avc: denied { setopt } for pid=8439 comm="syz.4.661" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 270.220780][ T5868] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 270.489310][ T5868] usb 1-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 270.498810][ T5868] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.515297][ T5868] usb 1-1: config 0 descriptor?? [ 270.523315][ T5868] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 270.685730][ T30] audit: type=1400 audit(1747194043.518:1025): avc: denied { connect } for pid=8444 comm="syz.3.662" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 270.990577][ T5868] gspca_sunplus: reg_w_riv err -71 [ 270.998959][ T5868] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 271.014652][ T5868] usb 1-1: USB disconnect, device number 28 [ 271.896518][ T30] audit: type=1400 audit(1747194044.758:1026): avc: denied { create } for pid=8455 comm="syz.0.665" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 272.235989][ T30] audit: type=1400 audit(1747194044.768:1027): avc: denied { read write } for pid=8455 comm="syz.0.665" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 272.263326][ T30] audit: type=1400 audit(1747194044.768:1028): avc: denied { open } for pid=8455 comm="syz.0.665" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 272.292535][ T30] audit: type=1400 audit(1747194044.768:1029): avc: denied { ioctl } for pid=8455 comm="syz.0.665" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 272.722746][ T5868] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 273.367299][ T30] audit: type=1400 audit(1747194045.898:1030): avc: denied { write } for pid=8475 comm="syz.0.671" path="socket:[16164]" dev="sockfs" ino=16164 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 273.400353][ T5868] usb 4-1: Using ep0 maxpacket: 8 [ 273.406889][ T5868] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 273.419489][ T5868] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 273.429317][ T5868] usb 4-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 273.438613][ T5868] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.452572][ T5868] usb 4-1: config 0 descriptor?? [ 273.919356][ T8491] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 274.219115][ T5868] logitech 0003:046D:C20E.000D: rdesc size test failed for formula gp [ 275.793671][ T5868] logitech 0003:046D:C20E.000D: unknown main item tag 0x0 [ 276.132512][ T5868] logitech 0003:046D:C20E.000D: reserved main item tag 0xe [ 276.139959][ T5868] logitech 0003:046D:C20E.000D: unknown main item tag 0x0 [ 276.147285][ T5868] logitech 0003:046D:C20E.000D: unbalanced collection at end of report description [ 276.157673][ T5868] logitech 0003:046D:C20E.000D: parse failed [ 276.163895][ T5868] logitech 0003:046D:C20E.000D: probe with driver logitech failed with error -22 [ 276.214015][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 276.214040][ T30] audit: type=1400 audit(1747194049.048:1033): avc: denied { unmount } for pid=5813 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 279.458048][ T30] audit: type=1400 audit(1747194052.328:1034): avc: denied { execute } for pid=8519 comm="syz.4.683" dev="tmpfs" ino=94 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 279.646354][ T30] audit: type=1400 audit(1747194052.328:1035): avc: denied { execute_no_trans } for pid=8519 comm="syz.4.683" path=2F6D656D66643A202864656C6574656429 dev="tmpfs" ino=94 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 280.010535][ T30] audit: type=1400 audit(1747194052.798:1036): avc: denied { bind } for pid=8522 comm="syz.4.684" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 280.019005][ T5904] usb 4-1: USB disconnect, device number 27 [ 280.183657][ T30] audit: type=1400 audit(1747194052.808:1037): avc: denied { listen } for pid=8522 comm="syz.4.684" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 280.255577][ T30] audit: type=1400 audit(1747194052.938:1038): avc: denied { write } for pid=8522 comm="syz.4.684" path="socket:[16263]" dev="sockfs" ino=16263 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 280.335054][ T30] audit: type=1400 audit(1747194053.208:1039): avc: denied { accept } for pid=8522 comm="syz.4.684" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 280.459305][ T30] audit: type=1400 audit(1747194053.318:1040): avc: denied { watch } for pid=8526 comm="syz.3.685" path="/149/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=805 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 280.527021][ T8533] tipc: Enabling of bearer rejected, already enabled [ 280.560955][ T30] audit: type=1400 audit(1747194053.318:1041): avc: denied { watch_sb } for pid=8526 comm="syz.3.685" path="/149/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=805 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 281.671555][ T5868] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 281.867806][ T5868] usb 5-1: Using ep0 maxpacket: 16 [ 281.882247][ T5868] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 281.896927][ T5868] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 281.908229][ T5868] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 281.934496][ T5868] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 281.954507][ T5868] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.989987][ T5868] usb 5-1: Product: syz [ 281.994349][ T5868] usb 5-1: Manufacturer: syz [ 281.998960][ T5868] usb 5-1: SerialNumber: syz [ 282.760389][ T8560] netlink: 68 bytes leftover after parsing attributes in process `syz.3.695'. [ 283.071424][ T5868] usb 5-1: 2:1 : format type 0 is detected, processed as PCM [ 283.182556][ T5868] usb 5-1: 2:1: cannot set freq 9338507 to ep 0x82 [ 283.264890][ T5868] usb 5-1: USB disconnect, device number 27 [ 283.316493][ T6571] udevd[6571]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 283.480351][ T5904] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 283.631990][ T5904] usb 1-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 283.641271][ T5904] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.653595][ T5904] usb 1-1: config 0 descriptor?? [ 283.663229][ T5904] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 284.079383][ T5904] gspca_sunplus: reg_w_riv err -71 [ 284.089017][ T5904] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 284.103229][ T5904] usb 1-1: USB disconnect, device number 29 [ 285.221136][ T5868] usb 1-1: new full-speed USB device number 30 using dummy_hcd [ 285.371855][ T24] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 285.401773][ T5868] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 285.413791][ T5868] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 285.423625][ T5868] usb 1-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 285.432733][ T5868] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.443230][ T5868] usb 1-1: config 0 descriptor?? [ 285.450819][ T5867] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 285.510411][ T24] usb 5-1: device descriptor read/64, error -71 [ 285.610440][ T5867] usb 4-1: Using ep0 maxpacket: 16 [ 285.617176][ T5867] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 285.628311][ T5867] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 285.638702][ T5867] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 285.657685][ T5867] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 285.666888][ T5867] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.675006][ T5867] usb 4-1: Product: syz [ 285.679186][ T5867] usb 4-1: Manufacturer: syz [ 285.683977][ T5867] usb 4-1: SerialNumber: syz [ 285.760819][ T24] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 285.890337][ T24] usb 5-1: device descriptor read/64, error -71 [ 286.002267][ T24] usb usb5-port1: attempt power cycle [ 286.306597][ T5867] usb 4-1: 2:1 : format type 0 is detected, processed as PCM [ 286.315574][ T5867] usb 4-1: 2:1: cannot set freq 9338507 to ep 0x82 [ 286.342476][ T5867] usb 4-1: USB disconnect, device number 28 [ 286.360468][ T24] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 286.387569][ T6576] udevd[6576]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 286.412776][ T24] usb 5-1: device descriptor read/8, error -71 [ 286.680992][ T24] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 286.701039][ T24] usb 5-1: device descriptor read/8, error -71 [ 286.811253][ T24] usb usb5-port1: unable to enumerate USB device [ 287.736109][ T5868] usbhid 1-1:0.0: can't add hid device: -71 [ 287.742902][ T5868] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 287.783480][ T5868] usb 1-1: USB disconnect, device number 30 [ 288.610738][ T5867] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 288.860422][ T5867] usb 4-1: Using ep0 maxpacket: 32 [ 288.868615][ T5867] usb 4-1: New USB device found, idVendor=0458, idProduct=706e, bcdDevice=35.64 [ 288.878393][ T5867] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.890830][ T5867] usb 4-1: config 0 descriptor?? [ 289.283622][ T8619] [U] .ú [ 289.362624][ T8638] tipc: Enabling of bearer rejected, already enabled [ 289.372374][ T8638] tipc: Enabling of bearer rejected, already enabled [ 289.544804][ T5904] usb 4-1: USB disconnect, device number 29 [ 289.571941][ T30] audit: type=1400 audit(1747194062.448:1042): avc: denied { read write } for pid=8642 comm="syz.4.723" name="sg0" dev="devtmpfs" ino=735 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 289.608790][ T30] audit: type=1400 audit(1747194062.448:1043): avc: denied { open } for pid=8642 comm="syz.4.723" path="/dev/sg0" dev="devtmpfs" ino=735 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 290.523759][ T8649] netlink: 12 bytes leftover after parsing attributes in process `syz.3.725'. [ 290.541681][ T8649] netlink: 12 bytes leftover after parsing attributes in process `syz.3.725'. [ 290.565512][ T8649] netlink: 4 bytes leftover after parsing attributes in process `syz.3.725'. [ 290.811550][ T30] audit: type=1400 audit(1747194063.538:1044): avc: denied { ioctl } for pid=8646 comm="syz.0.724" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=17713 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 290.947712][ T8661] netlink: 92 bytes leftover after parsing attributes in process `syz.4.727'. [ 290.956946][ T8661] netlink: 16 bytes leftover after parsing attributes in process `syz.4.727'. [ 291.267758][ T30] audit: type=1400 audit(1747194064.138:1045): avc: denied { unlink } for pid=8646 comm="syz.0.724" name="#7" dev="tmpfs" ino=839 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 291.290152][ T30] audit: type=1400 audit(1747194064.138:1046): avc: denied { mount } for pid=8646 comm="syz.0.724" name="/" dev="overlay" ino=834 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 291.350152][ T30] audit: type=1400 audit(1747194064.218:1047): avc: denied { unmount } for pid=5813 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 292.235747][ T30] audit: type=1400 audit(1747194065.108:1048): avc: denied { read } for pid=8668 comm="syz.3.730" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 292.616840][ T8683] netlink: 'syz.4.734': attribute type 2 has an invalid length. [ 292.634660][ T30] audit: type=1400 audit(1747194065.508:1049): avc: denied { read } for pid=8682 comm="syz.4.734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 293.348220][ T984] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 293.884663][ T8706] netlink: 28 bytes leftover after parsing attributes in process `syz.4.741'. [ 294.000524][ T8709] netlink: 12 bytes leftover after parsing attributes in process `syz.0.742'. [ 294.045040][ T8709] netlink: 12 bytes leftover after parsing attributes in process `syz.0.742'. [ 294.170326][ T30] audit: type=1400 audit(1747194066.978:1050): avc: denied { create } for pid=8712 comm="syz.3.744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 294.225347][ T30] audit: type=1400 audit(1747194066.978:1051): avc: denied { write } for pid=8712 comm="syz.3.744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 294.247987][ T8719] geneve0: entered allmulticast mode [ 294.990605][ T24] usb 4-1: new full-speed USB device number 30 using dummy_hcd [ 296.002407][ T24] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 296.020758][ T24] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 296.037968][ T24] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 296.048595][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.063628][ T30] audit: type=1400 audit(1747194068.938:1052): avc: denied { setattr } for pid=8739 comm="syz.4.752" path="socket:[18757]" dev="sockfs" ino=18757 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 296.232854][ T8744] macvlan0: entered allmulticast mode [ 296.239359][ T8744] bond_slave_0: entered promiscuous mode [ 296.245411][ T8744] bond_slave_1: entered promiscuous mode [ 296.251458][ T8744] bond0: entered allmulticast mode [ 296.256967][ T8744] bond_slave_0: entered allmulticast mode [ 296.264305][ T8744] bond_slave_1: entered allmulticast mode [ 296.278837][ T8744] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 296.289695][ T8744] team0: Port device macvlan0 added [ 296.296422][ T24] usb 4-1: usb_control_msg returned -32 [ 296.302540][ T24] usbtmc 4-1:16.0: can't read capabilities [ 296.346450][ T8746] netlink: 'syz.0.755': attribute type 1 has an invalid length. [ 296.366384][ T8746] bond1: entered promiscuous mode [ 296.372232][ T8746] 8021q: adding VLAN 0 to HW filter on device bond1 [ 296.398386][ T8746] 8021q: adding VLAN 0 to HW filter on device bond1 [ 296.405457][ T8746] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 296.410877][ T5904] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 296.416146][ T8746] bond1: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 296.437075][ T8746] bond1: (slave wireguard0): making interface the new active one [ 296.445006][ T8746] wireguard0: entered promiscuous mode [ 296.451972][ T8746] bond1: (slave wireguard0): Enslaving as an active interface with an up link [ 296.590385][ T5904] usb 5-1: Using ep0 maxpacket: 16 [ 296.597126][ T5904] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 296.608976][ T5904] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 296.618799][ T5904] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 296.632442][ T5904] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 296.641716][ T5904] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.651070][ T5904] usb 5-1: Product: syz [ 296.656151][ T5904] usb 5-1: Manufacturer: syz [ 296.660847][ T5904] usb 5-1: SerialNumber: syz [ 296.791306][ T24] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 296.802060][ T971] usb 4-1: USB disconnect, device number 30 [ 297.076119][ T24] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 297.114288][ T24] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 297.188395][ T24] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 297.258111][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 297.270418][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 297.309186][ T24] usb 1-1: SerialNumber: syz [ 297.660753][ T30] audit: type=1400 audit(1747194070.538:1053): avc: denied { write } for pid=8753 comm="syz.0.758" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 297.686852][ T5904] usb 5-1: 2:1 : format type 0 is detected, processed as PCM [ 297.696659][ T5904] usb 5-1: 2:1: cannot set freq 9338507 to ep 0x82 [ 298.067121][ T5904] usb 5-1: USB disconnect, device number 32 [ 298.116128][ T24] usb 1-1: 0:2 : does not exist [ 298.122203][ T24] usb 1-1: unit 255 not found! [ 298.143286][ T5951] udevd[5951]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 298.173742][ T24] usb 1-1: USB disconnect, device number 31 [ 298.206306][ T5831] udevd[5831]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 298.343763][ T8774] netlink: 8 bytes leftover after parsing attributes in process `syz.4.761'. [ 298.640577][ T5904] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 298.824824][ T5904] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 298.845443][ T5904] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 298.864144][ T5904] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 298.903730][ T5904] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 298.923259][ T5904] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.060074][ T5904] usb 5-1: config 0 descriptor?? [ 299.279221][ T5904] ath6kl: Failed to submit usb control message: -71 [ 299.286185][ T5904] ath6kl: unable to send the bmi data to the device: -71 [ 299.337541][ T5904] ath6kl: Unable to send get target info: -71 [ 299.428719][ T5904] ath6kl: Failed to init ath6kl core: -71 [ 299.515960][ T5904] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 299.786885][ T5904] usb 5-1: USB disconnect, device number 33 [ 300.248806][ T5904] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 300.500847][ T5940] usb 5-1: new full-speed USB device number 34 using dummy_hcd [ 300.695022][ T5940] usb 5-1: config 0 has an invalid interface number: 183 but max is 0 [ 300.716500][ T5940] usb 5-1: config 0 has no interface number 0 [ 300.763920][ T5940] usb 5-1: New USB device found, idVendor=06d0, idProduct=0622, bcdDevice=70.f8 [ 300.792444][ T5940] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.816278][ T5940] usb 5-1: Product: syz [ 300.829351][ T5940] usb 5-1: Manufacturer: syz [ 300.846403][ T5940] usb 5-1: SerialNumber: syz [ 300.954724][ T5940] usb 5-1: config 0 descriptor?? [ 300.973746][ T5940] net1080 5-1:0.183: probe with driver net1080 failed with error -22 [ 301.083046][ T5904] usb 4-1: device descriptor read/64, error -71 [ 301.725030][ T8793] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 301.734370][ T8793] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 301.820485][ T5904] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 301.907580][ T971] usb 5-1: USB disconnect, device number 34 [ 302.044679][ T5904] usb 4-1: device descriptor read/64, error -71 [ 302.160697][ T8805] CIFS: Unable to determine destination address [ 302.571233][ T5904] usb usb4-port1: attempt power cycle [ 302.934649][ T8818] netdevsim netdevsim0: Direct firmware load for . [ 302.934649][ T8818] failed with error -2 [ 302.947649][ T8818] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 302.947649][ T8818] [ 302.993319][ T5904] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 303.013241][ T8821] netlink: 16 bytes leftover after parsing attributes in process `syz.3.774'. [ 303.210801][ T5904] usb 4-1: device not accepting address 33, error -71 [ 303.291312][ T8828] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 304.298070][ T8839] netlink: 28 bytes leftover after parsing attributes in process `syz.4.780'. [ 304.597707][ T30] audit: type=1400 audit(1747194077.468:1054): avc: denied { ioctl } for pid=8836 comm="syz.0.781" path="/dev/vbi0" dev="devtmpfs" ino=954 ioctlcmd=0x5627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 304.636604][ T5904] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 304.860685][ T5904] usb 4-1: Using ep0 maxpacket: 8 [ 304.927727][ T5904] usb 4-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 304.949686][ T5904] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.970319][ T5904] usb 4-1: Product: syz [ 304.974544][ T5904] usb 4-1: Manufacturer: syz [ 304.979120][ T5904] usb 4-1: SerialNumber: syz [ 304.993814][ T5904] usb 4-1: config 0 descriptor?? [ 305.004738][ T5904] gspca_main: sq905-2.14.0 probing 2770:9120 [ 305.560597][ T3694] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 305.774904][ T3694] usb 1-1: Using ep0 maxpacket: 16 [ 305.813672][ T3694] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 305.832077][ T3694] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 305.872478][ T3694] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 305.892432][ T3694] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 305.901857][ T3694] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.909891][ T3694] usb 1-1: Product: syz [ 305.915429][ T3694] usb 1-1: Manufacturer: syz [ 305.920052][ T3694] usb 1-1: SerialNumber: syz [ 306.079322][ T5904] gspca_sq905: bulk read fail (-22) len 0/4 [ 306.085969][ T5904] sq905 4-1:0.0: probe with driver sq905 failed with error -5 [ 306.474896][ T8859] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 306.543062][ T3694] usb 1-1: 2:1 : format type 0 is detected, processed as PCM [ 306.562914][ T3694] usb 1-1: 2:1: cannot set freq 9338507 to ep 0x82 [ 306.592545][ T30] audit: type=1400 audit(1747194079.468:1055): avc: denied { ioctl } for pid=8862 comm="syz.4.790" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 306.609241][ T3694] usb 1-1: USB disconnect, device number 32 [ 306.635383][ T8865] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 306.660475][ T8865] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 306.671592][ T8865] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 306.715629][ T8865] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 306.772295][ T5904] usb 4-1: USB disconnect, device number 35 [ 307.053440][ T30] audit: type=1400 audit(1747194079.928:1056): avc: denied { create } for pid=8875 comm="syz.4.794" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 307.075564][ T30] audit: type=1400 audit(1747194079.928:1057): avc: denied { setopt } for pid=8875 comm="syz.4.794" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 307.156331][ T30] audit: type=1400 audit(1747194080.028:1058): avc: denied { listen } for pid=8878 comm="syz.4.796" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 308.490372][ T5903] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 308.654273][ T5903] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 308.667971][ T5903] usb 1-1: New USB device found, idVendor=046d, idProduct=c295, bcdDevice= 0.00 [ 308.677421][ T5903] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.691976][ T5903] usb 1-1: config 0 descriptor?? [ 308.878513][ T30] audit: type=1400 audit(1747194081.748:1059): avc: denied { setopt } for pid=8900 comm="syz.3.802" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 308.921491][ T5903] usbhid 1-1:0.0: can't add hid device: -71 [ 308.934276][ T30] audit: type=1400 audit(1747194081.768:1060): avc: denied { read write } for pid=8900 comm="syz.3.802" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 308.989050][ T30] audit: type=1400 audit(1747194081.768:1061): avc: denied { open } for pid=8900 comm="syz.3.802" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 308.995240][ T5903] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 309.032311][ T5903] usb 1-1: USB disconnect, device number 33 [ 309.170385][ T5940] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 309.364936][ T5940] usb 4-1: device descriptor read/all, error -61 [ 309.410347][ T5904] usb 5-1: new full-speed USB device number 35 using dummy_hcd [ 309.500671][ T5940] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 309.564189][ T5904] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 309.576956][ T5904] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.597902][ T5904] usb 5-1: config 0 descriptor?? [ 309.766541][ T5940] usb 4-1: device descriptor read/64, error -71 [ 309.812944][ T5904] [drm] vendor descriptor length:e0 data:00 00 00 00 00 00 00 00 00 00 00 [ 309.826628][ T5904] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 309.892226][ T5940] usb usb4-port1: attempt power cycle [ 310.355160][ T5904] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 310.362355][ T5904] [drm] Initialized udl on minor 2 [ 310.387192][ T5904] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 310.412581][ T5904] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 310.459520][ T5903] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 310.470012][ T5904] usb 5-1: USB disconnect, device number 35 [ 310.481927][ T5903] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 310.659288][ T8920] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2064 sclass=netlink_route_socket pid=8920 comm=syz.4.808 [ 310.740436][ T5940] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 310.765080][ T5940] usb 4-1: device descriptor read/8, error -71 [ 311.060902][ T5940] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 311.245855][ T5940] usb 4-1: device descriptor read/8, error -71 [ 311.374037][ T5940] usb usb4-port1: unable to enumerate USB device [ 311.377718][ T8927] loop6: detected capacity change from 0 to 524287999 [ 311.676445][ T8926] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=8926 comm=syz.4.809 [ 312.032089][ T30] audit: type=1400 audit(1747194084.908:1062): avc: denied { create } for pid=8935 comm="syz.4.811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 312.952785][ T8945] netlink: 60 bytes leftover after parsing attributes in process `syz.0.812'. [ 315.905323][ T8951] overlayfs: conflicting options: userxattr,redirect_dir=on [ 316.135095][ T30] audit: type=1400 audit(1747194088.888:1063): avc: denied { create } for pid=8949 comm="syz.0.814" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 316.168321][ T30] audit: type=1400 audit(1747194088.898:1064): avc: denied { ioctl } for pid=8949 comm="syz.0.814" path="socket:[18252]" dev="sockfs" ino=18252 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 316.301073][ T3694] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 316.492484][ T3694] usb 1-1: config index 0 descriptor too short (expected 65520, got 162) [ 316.504431][ T3694] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 316.536110][ T3694] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 316.546016][ T3694] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.563488][ T3694] usb 1-1: Product: syz [ 316.568128][ T3694] usb 1-1: Manufacturer: syz [ 316.573255][ T3694] usb 1-1: SerialNumber: syz [ 316.599379][ T3694] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 316.653758][ T30] audit: type=1400 audit(1747194089.528:1065): avc: denied { firmware_load } for pid=5867 comm="kworker/1:5" path="/lib/firmware/ath9k_htc/htc_9271-1.4.0.fw" dev="sda1" ino=313 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 316.695676][ T5867] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 316.957311][ T8962] netlink: 8 bytes leftover after parsing attributes in process `syz.3.816'. [ 316.966628][ T8962] netlink: 'syz.3.816': attribute type 5 has an invalid length. [ 316.974456][ T8962] netlink: 28 bytes leftover after parsing attributes in process `syz.3.816'. [ 316.999537][ T8962] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 317.016292][ T8962] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 317.025130][ T8962] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 317.034361][ T8962] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 317.043400][ T8962] geneve3: entered promiscuous mode [ 317.048693][ T8962] geneve3: entered allmulticast mode [ 317.315654][ T3694] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 317.452744][ T8952] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 317.461748][ T8952] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 317.492930][ T3694] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 317.504757][ T3694] usb 5-1: config 0 interface 0 has no altsetting 0 [ 317.514297][ T3694] usb 5-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00 [ 317.524690][ T3694] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.536704][ T3694] usb 5-1: config 0 descriptor?? [ 317.752875][ T5867] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 317.768625][ T8966] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 317.770724][ T5867] ath9k_htc: Failed to initialize the device [ 317.837965][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.844779][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.866063][ T8967] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 317.958842][ T8966] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 317.960962][ T5867] usb 1-1: ath9k_htc: USB layer deinitialized [ 318.068586][ T3694] uclogic 0003:5543:0004.000E: item fetching failed at offset 4/5 [ 318.096219][ T3694] uclogic 0003:5543:0004.000E: parse failed [ 318.096696][ T5904] usb 1-1: USB disconnect, device number 34 [ 318.111600][ T3694] uclogic 0003:5543:0004.000E: probe with driver uclogic failed with error -22 [ 318.329194][ T30] audit: type=1400 audit(1747194091.198:1066): avc: denied { bind } for pid=8956 comm="syz.4.817" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 318.350116][ T30] audit: type=1400 audit(1747194091.198:1067): avc: denied { node_bind } for pid=8956 comm="syz.4.817" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 319.331057][ T8977] KVM: debugfs: duplicate directory 8977-5 [ 319.396521][ T30] audit: type=1400 audit(1747194092.268:1068): avc: denied { setopt } for pid=8976 comm="syz.3.821" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 319.741022][ T5867] usb 1-1: new full-speed USB device number 35 using dummy_hcd [ 319.889963][ T5904] usb 5-1: USB disconnect, device number 36 [ 319.915740][ T30] audit: type=1400 audit(1747194092.788:1069): avc: denied { setattr } for pid=5817 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 319.987784][ T5867] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 319.999598][ T5867] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 320.020146][ T5867] usb 1-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 320.040497][ T5867] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.061281][ T5867] usb 1-1: config 0 descriptor?? [ 321.198580][ T8989] netlink: 92 bytes leftover after parsing attributes in process `syz.4.824'. [ 321.670458][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 321.887947][ T30] audit: type=1400 audit(1747194094.758:1070): avc: denied { remount } for pid=8990 comm="syz.4.825" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 322.290463][ T5940] usb 5-1: new low-speed USB device number 37 using dummy_hcd [ 322.301817][ T5867] usbhid 1-1:0.0: can't add hid device: -71 [ 322.307935][ T5867] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 322.341552][ T5867] usb 1-1: USB disconnect, device number 35 [ 322.481193][ T5940] usb 5-1: unable to get BOS descriptor or descriptor too short [ 322.496564][ T5940] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 32, setting to 0 [ 322.508662][ T5940] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 73, changing to 4 [ 322.536267][ T5940] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 64, setting to 0 [ 322.565177][ T5940] usb 5-1: config 1 interface 1 has no altsetting 0 [ 322.576344][ T5940] usb 5-1: string descriptor 0 read error: -22 [ 322.585072][ T5940] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 322.603821][ T5940] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.831928][ T5940] usb 5-1: low speed audio streaming not supported [ 323.032927][ T5903] usb 5-1: USB disconnect, device number 37 [ 324.072918][ T30] audit: type=1400 audit(1747194096.938:1071): avc: denied { mount } for pid=9004 comm="syz.0.830" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 324.116980][ T30] audit: type=1400 audit(1747194096.988:1072): avc: denied { unmount } for pid=5813 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 325.298797][ T9020] ptm ptm4: ldisc open failed (-12), clearing slot 4 [ 326.810358][ T5940] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 326.961083][ T5940] usb 5-1: device descriptor read/64, error -71 [ 327.200580][ T5940] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 327.360701][ T5940] usb 5-1: device descriptor read/64, error -71 [ 327.473163][ T5940] usb usb5-port1: attempt power cycle [ 327.820454][ T5940] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 327.843651][ T5940] usb 5-1: device descriptor read/8, error -71 [ 327.865591][ T30] audit: type=1400 audit(1747194100.738:1073): avc: denied { mount } for pid=9037 comm="syz.0.838" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 327.904965][ T30] audit: type=1400 audit(1747194100.778:1074): avc: denied { unmount } for pid=5813 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 328.150855][ T5940] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 328.479322][ T5940] usb 5-1: device descriptor read/8, error -71 [ 328.529465][ T30] audit: type=1400 audit(1747194101.398:1075): avc: denied { name_connect } for pid=9041 comm="syz.0.840" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 328.600444][ T5940] usb usb5-port1: unable to enumerate USB device [ 329.339031][ T9051] CIFS: Unable to determine destination address [ 330.083599][ T30] audit: type=1400 audit(1747194102.958:1076): avc: denied { create } for pid=9059 comm="syz.0.845" name="#b" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 330.118680][ T30] audit: type=1400 audit(1747194102.958:1077): avc: denied { link } for pid=9059 comm="syz.0.845" name="#b" dev="tmpfs" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 330.194898][ T30] audit: type=1400 audit(1747194102.958:1078): avc: denied { rename } for pid=9059 comm="syz.0.845" name="#c" dev="tmpfs" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 330.656709][ T9065] netlink: 8 bytes leftover after parsing attributes in process `syz.0.846'. [ 330.746136][ T30] audit: type=1400 audit(1747194103.518:1079): avc: denied { connect } for pid=9062 comm="syz.0.846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 332.890327][ T53] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 333.042152][ T53] usb 5-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 333.053723][ T53] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.066092][ T53] usb 5-1: config 0 descriptor?? [ 333.077248][ T53] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 333.491250][ T53] gspca_sunplus: reg_w_riv err -71 [ 333.499933][ T53] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 333.514943][ T53] usb 5-1: USB disconnect, device number 42 [ 336.380505][ T53] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 336.540322][ T53] usb 1-1: Using ep0 maxpacket: 8 [ 336.557095][ T53] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 336.567346][ T53] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.585008][ T53] usb 1-1: config 0 descriptor?? [ 336.795738][ T53] asix 1-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 337.203340][ T9108] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 337.213602][ T9108] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 338.279578][ T9108] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 338.371537][ T9108] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 338.830767][ T53] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71 [ 338.841291][ T53] asix 1-1:0.0: probe with driver asix failed with error -71 [ 338.854441][ T53] usb 1-1: USB disconnect, device number 36 [ 339.372488][ T30] audit: type=1400 audit(1747194112.248:1080): avc: denied { read write } for pid=9131 comm="syz.0.866" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 339.379795][ T9132] input: syz0 as /devices/virtual/input/input18 [ 339.398556][ T30] audit: type=1400 audit(1747194112.248:1081): avc: denied { open } for pid=9131 comm="syz.0.866" path="/dev/uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 339.437189][ T30] audit: type=1400 audit(1747194112.248:1082): avc: denied { ioctl } for pid=9131 comm="syz.0.866" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x5564 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 339.466241][ T30] audit: type=1400 audit(1747194112.308:1083): avc: denied { read } for pid=5174 comm="acpid" name="event4" dev="devtmpfs" ino=3347 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 339.493380][ T30] audit: type=1400 audit(1747194112.308:1084): avc: denied { open } for pid=5174 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3347 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 339.519868][ T30] audit: type=1400 audit(1747194112.308:1085): avc: denied { ioctl } for pid=5174 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3347 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 339.780381][ T24] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 339.930379][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 339.937583][ T24] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 339.949187][ T24] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 339.950625][ T9140] netlink: 4 bytes leftover after parsing attributes in process `syz.4.868'. [ 339.969723][ T24] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 339.983042][ T24] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 339.997617][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.005845][ T24] usb 1-1: Product: syz [ 340.010079][ T24] usb 1-1: Manufacturer: syz [ 340.017353][ T24] usb 1-1: SerialNumber: syz [ 340.840572][ T24] usb 1-1: 2:1 : format type 0 is detected, processed as PCM [ 340.852435][ T24] usb 1-1: 2:1: cannot set freq 9338507 to ep 0x82 [ 340.872326][ T24] usb 1-1: USB disconnect, device number 37 [ 341.320119][ T6576] udevd[6576]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 341.666291][ T9155] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 341.689883][ T30] audit: type=1400 audit(1747194114.558:1086): avc: denied { getopt } for pid=9154 comm="syz.4.872" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 342.150411][ T24] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 342.310410][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 342.321864][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 342.333126][ T24] usb 5-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 342.344615][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.358118][ T24] usb 5-1: config 0 descriptor?? [ 342.772475][ T24] hid-multitouch 0003:0EEF:72C4.000F: unknown main item tag 0x0 [ 342.786282][ T24] hid-multitouch 0003:0EEF:72C4.000F: hidraw0: USB HID v0.03 Device [HID 0eef:72c4] on usb-dummy_hcd.4-1/input0 [ 342.977348][ T24] usb 5-1: USB disconnect, device number 43 [ 343.167935][ T9171] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 344.121652][ T30] audit: type=1400 audit(1747194116.998:1087): avc: denied { connect } for pid=9190 comm="syz.0.884" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 344.145003][ T9191] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 344.151536][ T9191] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 344.169498][ T30] audit: type=1400 audit(1747194117.018:1088): avc: denied { write } for pid=9190 comm="syz.0.884" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 344.938870][ T9198] netlink: 12 bytes leftover after parsing attributes in process `syz.4.886'. [ 344.949188][ T9198] openvswitch: netlink: Flow key attr not present in new flow. [ 345.138266][ T9202] overlayfs: failed to resolve './file1': -2 [ 345.146414][ T30] audit: type=1400 audit(1747194118.018:1089): avc: denied { watch_mount watch_reads } for pid=9201 comm="syz.0.887" path="/proc/1" dev="proc" ino=20633 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 345.244680][ T971] usb 5-1: new full-speed USB device number 44 using dummy_hcd [ 345.589578][ T971] usb 5-1: unable to get BOS descriptor or descriptor too short [ 345.598567][ T971] usb 5-1: not running at top speed; connect to a high speed hub [ 345.612735][ T971] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 345.624560][ T971] usb 5-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 345.643190][ T971] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 345.655887][ T971] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 345.668777][ T971] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 345.686671][ T971] usb 5-1: New USB device found, idVendor=045e, idProduct=043f, bcdDevice=fc.90 [ 345.696890][ T971] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.707000][ T971] usb 5-1: Product: syz [ 345.708163][ T9209] netlink: 'syz.0.890': attribute type 10 has an invalid length. [ 345.711256][ T971] usb 5-1: Manufacturer: syz [ 345.711278][ T971] usb 5-1: SerialNumber: syz [ 345.717167][ T971] ipaq 5-1:1.0: PocketPC PDA converter detected [ 345.734971][ T9209] bond0: (slave wlan1): Opening slave failed [ 345.785941][ T30] audit: type=1400 audit(1747194118.658:1090): avc: denied { ioctl } for pid=9210 comm="syz.0.891" path="socket:[20657]" dev="sockfs" ino=20657 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 345.931572][ T971] usb 5-1: PocketPC PDA converter now attached to ttyUSB0 [ 345.959638][ T971] usb 5-1: USB disconnect, device number 44 [ 345.985159][ T971] ipaq ttyUSB0: PocketPC PDA converter now disconnected from ttyUSB0 [ 345.999870][ T971] ipaq 5-1:1.0: device disconnected [ 348.463387][ T9237] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 349.760327][ T5866] usb 5-1: new full-speed USB device number 45 using dummy_hcd [ 349.913754][ T5866] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 349.924590][ T5866] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 349.933915][ T5866] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 349.943477][ T5866] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.962536][ T5866] usb 5-1: config 0 descriptor?? [ 349.987239][ T5866] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 350.005878][ T5866] dvb-usb: bulk message failed: -22 (3/0) [ 350.023952][ T5866] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 350.041971][ T5866] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 350.049292][ T5866] usb 5-1: media controller created [ 350.062778][ T5866] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 350.081534][ T5866] dvb-usb: bulk message failed: -22 (6/0) [ 350.087409][ T5866] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 350.096601][ T5866] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input19 [ 350.114338][ T5866] dvb-usb: schedule remote query interval to 150 msecs. [ 350.121467][ T5866] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 350.134920][ T9247] netlink: 8 bytes leftover after parsing attributes in process `syz.0.901'. [ 350.143823][ T9247] netlink: 'syz.0.901': attribute type 5 has an invalid length. [ 350.151665][ T9247] netlink: 28 bytes leftover after parsing attributes in process `syz.0.901'. [ 350.167887][ T9247] geneve3: entered promiscuous mode [ 350.173280][ T9247] geneve3: entered allmulticast mode [ 350.187006][ T30] audit: type=1400 audit(1747194123.058:1091): avc: denied { getopt } for pid=9245 comm="syz.0.901" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 350.280395][ T5866] dvb-usb: bulk message failed: -22 (1/0) [ 350.286178][ T5866] dvb-usb: error while querying for an remote control event. [ 350.461017][ T5866] dvb-usb: bulk message failed: -22 (1/0) [ 350.478973][ T5866] dvb-usb: error while querying for an remote control event. [ 350.640300][ T5866] dvb-usb: bulk message failed: -22 (1/0) [ 350.646244][ T5866] dvb-usb: error while querying for an remote control event. [ 350.815889][ T5866] dvb-usb: bulk message failed: -22 (1/0) [ 350.821916][ T5866] dvb-usb: error while querying for an remote control event. [ 350.980374][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 350.986213][ T24] dvb-usb: error while querying for an remote control event. [ 351.164776][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 351.170688][ T24] dvb-usb: error while querying for an remote control event. [ 351.331751][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 351.337591][ T24] dvb-usb: error while querying for an remote control event. [ 351.500406][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 351.506354][ T24] dvb-usb: error while querying for an remote control event. [ 351.672398][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 351.678229][ T24] dvb-usb: error while querying for an remote control event. [ 351.916258][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 351.936533][ T24] dvb-usb: error while querying for an remote control event. [ 352.133210][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 352.149555][ T24] dvb-usb: error while querying for an remote control event. [ 352.503266][ T971] usb 5-1: USB disconnect, device number 45 [ 352.543070][ T971] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 352.810754][ T9268] netlink: 'syz.4.906': attribute type 10 has an invalid length. [ 353.017879][ T9268] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 354.075743][ T971] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 354.310409][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 354.345107][ T971] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 354.358771][ T971] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 354.368725][ T971] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 354.381927][ T971] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 354.391279][ T971] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.401827][ T971] usb 5-1: config 0 descriptor?? [ 354.814908][ T971] plantronics 0003:047F:FFFF.0010: No inputs registered, leaving [ 354.827690][ T971] plantronics 0003:047F:FFFF.0010: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 355.386149][ T5898] libceph: connect (1)[c::]:6789 error -13 [ 355.393274][ T5898] libceph: mon0 (1)[c::]:6789 connect error [ 355.396087][ T9293] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 355.409407][ T9293] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 355.428932][ T5898] libceph: connect (1)[c::]:6789 error -13 [ 355.442264][ T5898] libceph: mon0 (1)[c::]:6789 connect error [ 355.487457][ T5940] usb 5-1: USB disconnect, device number 46 [ 355.703651][ T5898] libceph: connect (1)[c::]:6789 error -13 [ 355.709760][ T5898] libceph: mon0 (1)[c::]:6789 connect error [ 355.733864][ T9288] ceph: No mds server is up or the cluster is laggy [ 356.208704][ T30] audit: type=1400 audit(1747194129.078:1092): avc: denied { write } for pid=9299 comm="syz.4.913" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 357.650266][ T9312] kernel profiling enabled (shift: 7) [ 358.095374][ T9326] netlink: 8 bytes leftover after parsing attributes in process `syz.4.919'. [ 359.100413][ T5940] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 359.252270][ T5940] usb 5-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 359.261898][ T5940] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.272294][ T5940] usb 5-1: config 0 descriptor?? [ 359.281323][ T5940] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 359.687050][ T5940] gspca_sunplus: reg_w_riv err -71 [ 359.692544][ T5940] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 359.704593][ T5940] usb 5-1: USB disconnect, device number 47 [ 359.800463][ T5898] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 359.950417][ T5898] usb 1-1: Using ep0 maxpacket: 8 [ 359.958708][ T5898] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 359.967935][ T5898] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.976023][ T5898] usb 1-1: Product: syz [ 359.980415][ T5898] usb 1-1: Manufacturer: syz [ 359.985038][ T5898] usb 1-1: SerialNumber: syz [ 359.992122][ T5898] usb 1-1: config 0 descriptor?? [ 360.201166][ T5898] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 361.149153][ T5898] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 361.175389][ T5898] usb 1-1: USB disconnect, device number 38 [ 362.357688][ T30] audit: type=1400 audit(1747194135.198:1093): avc: denied { read write } for pid=9349 comm="syz.0.928" name="mouse0" dev="devtmpfs" ino=923 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 362.381329][ C1] vkms_vblank_simulate: vblank timer overrun [ 362.421365][ T9356] netlink: 92 bytes leftover after parsing attributes in process `syz.0.928'. [ 362.688852][ T30] audit: type=1400 audit(1747194135.198:1094): avc: denied { open } for pid=9349 comm="syz.0.928" path="/dev/input/mouse0" dev="devtmpfs" ino=923 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 362.712890][ C1] vkms_vblank_simulate: vblank timer overrun [ 362.723718][ T30] audit: type=1400 audit(1747194135.588:1095): avc: denied { ioctl } for pid=9348 comm="syz.4.927" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 362.748532][ C1] vkms_vblank_simulate: vblank timer overrun [ 362.755128][ T24] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 362.955846][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 362.994833][ T30] audit: type=1400 audit(1747194135.838:1096): avc: denied { read write } for pid=5813 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 363.057174][ T30] audit: type=1400 audit(1747194135.898:1097): avc: denied { open } for pid=5813 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 363.081400][ C1] vkms_vblank_simulate: vblank timer overrun [ 363.088299][ T30] audit: type=1400 audit(1747194135.898:1098): avc: denied { ioctl } for pid=5813 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 363.118907][ T24] usb 5-1: unable to get BOS descriptor or descriptor too short [ 363.119626][ T30] audit: type=1400 audit(1747194135.928:1099): avc: denied { create } for pid=9357 comm="syz.0.929" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 363.254097][ T24] usb 5-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 363.254477][ T30] audit: type=1400 audit(1747194135.958:1100): avc: denied { create } for pid=9357 comm="syz.0.929" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 363.268129][ T24] usb 5-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 363.285843][ T30] audit: type=1400 audit(1747194136.008:1101): avc: denied { write } for pid=9357 comm="syz.0.929" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 363.320130][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.338361][ T24] usb 5-1: Product: syz [ 363.714598][ T30] audit: type=1400 audit(1747194136.008:1102): avc: denied { read } for pid=9357 comm="syz.0.929" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 363.739127][ T24] usb 5-1: Manufacturer: syz [ 363.748566][ T24] usb 5-1: SerialNumber: syz [ 364.270569][ T24] usb 5-1: Cannot retrieve CPort count: -110 [ 364.280908][ T24] usb 5-1: Cannot retrieve CPort count: -110 [ 364.286910][ T24] es2_ap_driver 5-1:7.0: probe with driver es2_ap_driver failed with error -110 [ 365.133371][ T5866] usb 5-1: USB disconnect, device number 48 [ 365.959516][ T9380] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 367.546633][ T30] kauditd_printk_skb: 52 callbacks suppressed [ 367.546654][ T30] audit: type=1400 audit(1747194140.418:1155): avc: denied { read write } for pid=9408 comm="syz.0.943" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 367.576896][ T30] audit: type=1400 audit(1747194140.418:1156): avc: denied { open } for pid=9408 comm="syz.0.943" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 367.781727][ T971] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 367.940531][ T971] usb 1-1: Using ep0 maxpacket: 16 [ 367.947284][ T971] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 367.958187][ T971] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 367.967992][ T971] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 367.983167][ T971] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 367.992510][ T971] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.000548][ T971] usb 1-1: Product: syz [ 368.004728][ T971] usb 1-1: Manufacturer: syz [ 368.009306][ T971] usb 1-1: SerialNumber: syz [ 368.826713][ T971] usb 1-1: 2:1 : format type 0 is detected, processed as PCM [ 368.837305][ T971] usb 1-1: 2:1: cannot set freq 9338507 to ep 0x82 [ 368.862725][ T971] usb 1-1: USB disconnect, device number 39 [ 369.364625][ T30] audit: type=1400 audit(1747194142.238:1157): avc: denied { read write } for pid=9410 comm="syz.0.944" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 369.388585][ T30] audit: type=1400 audit(1747194142.238:1158): avc: denied { open } for pid=9410 comm="syz.0.944" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 369.388635][ T30] audit: type=1400 audit(1747194142.238:1159): avc: denied { ioctl } for pid=9410 comm="syz.0.944" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 369.674066][ T30] audit: type=1400 audit(1747194142.548:1160): avc: denied { unmount } for pid=5832 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 369.712707][ T5866] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 369.720951][ T30] audit: type=1400 audit(1747194142.588:1161): avc: denied { create } for pid=9414 comm="syz.4.946" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 369.743333][ T30] audit: type=1400 audit(1747194142.588:1162): avc: denied { ioctl } for pid=9414 comm="syz.4.946" path="socket:[20149]" dev="sockfs" ino=20149 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 369.779686][ T30] audit: type=1400 audit(1747194142.648:1163): avc: denied { map_create } for pid=9419 comm="syz.4.947" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 369.784423][ T9420] Bluetooth: MGMT ver 1.23 [ 369.810096][ T30] audit: type=1400 audit(1747194142.678:1164): avc: denied { sys_module } for pid=9419 comm="syz.4.947" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 369.893346][ T24] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 369.906615][ T24] hid-generic 0000:0000:0000.0011: hidraw0: HID v0.00 Device [syz1] on syz0 [ 369.923568][ T5866] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 369.937864][ T5866] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 369.948146][ T5866] usb 1-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 369.967618][ T5866] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.977930][ T5866] usb 1-1: config 0 descriptor?? [ 370.392626][ T5866] hid-led 0003:0FC5:B080.0012: reserved main item tag 0xe [ 370.402639][ T5866] hid-led 0003:0FC5:B080.0012: unknown main item tag 0x0 [ 370.759665][ T9427] netlink: 136 bytes leftover after parsing attributes in process `syz.4.948'. [ 370.770376][ T9427] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 370.928262][ T9431] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 370.939032][ T9431] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 372.543345][ T5866] hid-led 0003:0FC5:B080.0012: probe with driver hid-led failed with error -71 [ 372.557161][ T5866] usb 1-1: USB disconnect, device number 40 [ 372.676735][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 372.676778][ T30] audit: type=1400 audit(1747194145.538:1171): avc: denied { map_read map_write } for pid=9441 comm="syz.4.952" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 373.312968][ T30] audit: type=1400 audit(1747194146.128:1172): avc: denied { create } for pid=9447 comm="syz.0.954" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 373.333405][ T30] audit: type=1400 audit(1747194146.128:1173): avc: denied { read } for pid=9447 comm="syz.0.954" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 373.355950][ T30] audit: type=1400 audit(1747194146.128:1174): avc: denied { write } for pid=9447 comm="syz.0.954" path="socket:[20192]" dev="sockfs" ino=20192 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 373.620424][ T5866] usb 5-1: new full-speed USB device number 49 using dummy_hcd [ 373.782144][ T5866] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 373.792443][ T5866] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 373.801650][ T5866] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 373.810833][ T5866] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.820692][ T5866] usb 5-1: config 0 descriptor?? [ 373.828869][ T5866] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 373.838021][ T5866] dvb-usb: bulk message failed: -22 (3/0) [ 373.845775][ T5866] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 373.854971][ T5866] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 373.862237][ T5866] usb 5-1: media controller created [ 373.868299][ T5866] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 373.880337][ T5866] dvb-usb: bulk message failed: -22 (6/0) [ 373.888247][ T5866] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 373.901527][ T5866] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input21 [ 373.920457][ T30] audit: type=1400 audit(1747194146.788:1175): avc: denied { read } for pid=5174 comm="acpid" name="event4" dev="devtmpfs" ino=3412 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 373.946747][ T5866] dvb-usb: schedule remote query interval to 150 msecs. [ 373.954188][ T5866] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 373.968431][ T30] audit: type=1400 audit(1747194146.788:1176): avc: denied { open } for pid=5174 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3412 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 373.992498][ T30] audit: type=1400 audit(1747194146.788:1177): avc: denied { ioctl } for pid=5174 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3412 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 374.101033][ T30] audit: type=1400 audit(1747194146.908:1178): avc: denied { create } for pid=9452 comm="syz.4.955" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 374.123325][ T53] dvb-usb: bulk message failed: -22 (1/0) [ 374.129312][ T53] dvb-usb: error while querying for an remote control event. [ 374.137507][ T30] audit: type=1400 audit(1747194146.918:1179): avc: denied { create } for pid=9452 comm="syz.4.955" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 374.681143][ T5940] dvb-usb: bulk message failed: -22 (1/0) [ 374.687012][ T5940] dvb-usb: error while querying for an remote control event. [ 374.750327][ T5866] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 374.850373][ T5940] dvb-usb: bulk message failed: -22 (1/0) [ 374.856194][ T5940] dvb-usb: error while querying for an remote control event. [ 374.900353][ T5866] usb 1-1: Using ep0 maxpacket: 16 [ 374.907495][ T5866] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 374.915867][ T5866] usb 1-1: config 0 has no interface number 0 [ 374.922813][ T5866] usb 1-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0xB9, changing to 0x89 [ 374.934660][ T5866] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x89 has an invalid bInterval 213, changing to 11 [ 374.945935][ T5866] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x89 has invalid maxpacket 50285, setting to 1024 [ 374.958980][ T5866] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 374.970061][ T5866] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 374.978227][ T5866] usb 1-1: Product: syz [ 374.982753][ T5866] usb 1-1: SerialNumber: syz [ 374.989215][ T5866] usb 1-1: config 0 descriptor?? [ 374.999746][ T9455] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 375.012428][ T5866] cm109 1-1:0.8: invalid payload size 1024, expected 4 [ 375.020565][ T5940] dvb-usb: bulk message failed: -22 (1/0) [ 375.026891][ T5866] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input22 [ 375.036960][ T5940] dvb-usb: error while querying for an remote control event. [ 375.203753][ T5866] dvb-usb: bulk message failed: -22 (1/0) [ 375.209612][ T5866] dvb-usb: error while querying for an remote control event. [ 375.218178][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 375.218284][ T5903] usb 1-1: USB disconnect, device number 41 [ 375.225537][ C1] cm109 1-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 375.247874][ T5903] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 375.370346][ T5866] dvb-usb: bulk message failed: -22 (1/0) [ 375.376182][ T5866] dvb-usb: error while querying for an remote control event. [ 375.541120][ T5866] dvb-usb: bulk message failed: -22 (1/0) [ 375.546967][ T5866] dvb-usb: error while querying for an remote control event. [ 375.710349][ T5866] dvb-usb: bulk message failed: -22 (1/0) [ 375.716145][ T5866] dvb-usb: error while querying for an remote control event. [ 375.892259][ T5866] dvb-usb: bulk message failed: -22 (1/0) [ 375.898400][ T5866] dvb-usb: error while querying for an remote control event. [ 376.082648][ T5866] dvb-usb: bulk message failed: -22 (1/0) [ 376.088927][ T5866] dvb-usb: error while querying for an remote control event. [ 376.344365][ T5866] dvb-usb: bulk message failed: -22 (1/0) [ 376.350658][ T5866] dvb-usb: error while querying for an remote control event. [ 376.377665][ T9458] delete_channel: no stack [ 376.926855][ T5903] usb 5-1: USB disconnect, device number 49 [ 376.953762][ T5903] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 377.021712][ T30] audit: type=1400 audit(1747194149.898:1180): avc: denied { create } for pid=9469 comm="syz.4.960" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 377.027055][ T9470] tipc: Failed to remove unknown binding: 66,1,1/2886997162:3568411354/3568411356 [ 377.051049][ T9470] tipc: Failed to remove unknown binding: 66,1,1/2886997162:3568411354/3568411356 [ 378.341485][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 378.341561][ T30] audit: type=1400 audit(1747194151.188:1187): avc: denied { connect } for pid=9477 comm="syz.4.962" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 378.748516][ T30] audit: type=1400 audit(1747194151.618:1188): avc: denied { map } for pid=9484 comm="syz.4.964" path="socket:[21290]" dev="sockfs" ino=21290 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 378.773002][ T5903] usb 1-1: new full-speed USB device number 42 using dummy_hcd [ 378.773498][ T30] audit: type=1400 audit(1747194151.618:1189): avc: denied { accept } for pid=9484 comm="syz.4.964" path="socket:[21290]" dev="sockfs" ino=21290 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 378.954884][ T5903] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 378.966158][ T5903] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 378.979078][ T5903] usb 1-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 378.985474][ T9485] trusted_key: encrypted_key: master key parameter '' is invalid [ 378.991920][ T5903] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.026857][ T5903] usb 1-1: config 0 descriptor?? [ 379.052527][ T30] audit: type=1400 audit(1747194151.928:1190): avc: denied { read write } for pid=9487 comm="syz.4.965" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 379.079035][ T30] audit: type=1400 audit(1747194151.928:1191): avc: denied { open } for pid=9487 comm="syz.4.965" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 379.108984][ T30] audit: type=1400 audit(1747194151.948:1192): avc: denied { getopt } for pid=9487 comm="syz.4.965" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 379.254806][ T9489] FAULT_INJECTION: forcing a failure. [ 379.254806][ T9489] name failslab, interval 1, probability 0, space 0, times 0 [ 379.267575][ T9489] CPU: 1 UID: 0 PID: 9489 Comm: syz.4.965 Not tainted 6.15.0-rc6-syzkaller-00047-ge9565e23cd89 #0 PREEMPT(full) [ 379.267602][ T9489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 379.267612][ T9489] Call Trace: [ 379.267622][ T9489] [ 379.267631][ T9489] dump_stack_lvl+0x16c/0x1f0 [ 379.267678][ T9489] should_fail_ex+0x512/0x640 [ 379.267704][ T9489] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 379.267724][ T9489] should_failslab+0xc2/0x120 [ 379.267747][ T9489] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 379.267764][ T9489] ? skb_clone+0x190/0x3f0 [ 379.267789][ T9489] skb_clone+0x190/0x3f0 [ 379.267808][ T9489] nfnetlink_rcv_batch+0x1dd/0x2350 [ 379.267830][ T9489] ? kmem_cache_free+0x2d4/0x4d0 [ 379.267852][ T9489] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 379.267872][ T9489] ? find_held_lock+0x2b/0x80 [ 379.267895][ T9489] ? __dev_queue_xmit+0x896/0x43e0 [ 379.267937][ T9489] ? avc_has_perm_noaudit+0x149/0x3b0 [ 379.267956][ T9489] ? __asan_memset+0x23/0x50 [ 379.267973][ T9489] ? __nla_validate_parse+0x600/0x2880 [ 379.267988][ T9489] ? __pfx___nla_validate_parse+0x10/0x10 [ 379.268000][ T9489] ? cap_capable+0xb3/0x250 [ 379.268041][ T9489] ? __nla_parse+0x40/0x60 [ 379.268060][ T9489] nfnetlink_rcv+0x3c1/0x430 [ 379.268082][ T9489] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 379.268103][ T9489] netlink_unicast+0x53d/0x7f0 [ 379.268121][ T9489] ? __pfx_netlink_unicast+0x10/0x10 [ 379.268138][ T9489] netlink_sendmsg+0x8d1/0xdd0 [ 379.268159][ T9489] ? __pfx_netlink_sendmsg+0x10/0x10 [ 379.268189][ T9489] ____sys_sendmsg+0xa98/0xc70 [ 379.268214][ T9489] ? copy_msghdr_from_user+0x10a/0x160 [ 379.268233][ T9489] ? __pfx_____sys_sendmsg+0x10/0x10 [ 379.268254][ T9489] ___sys_sendmsg+0x134/0x1d0 [ 379.268268][ T9489] ? __pfx____sys_sendmsg+0x10/0x10 [ 379.268299][ T9489] __sys_sendmsg+0x16d/0x220 [ 379.268318][ T9489] ? __pfx___sys_sendmsg+0x10/0x10 [ 379.268352][ T9489] do_syscall_64+0xcd/0x260 [ 379.268377][ T9489] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.268392][ T9489] RIP: 0033:0x7f23d278e969 [ 379.268404][ T9489] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 379.268415][ T9489] RSP: 002b:00007f23d35d0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 379.268428][ T9489] RAX: ffffffffffffffda RBX: 00007f23d29b6080 RCX: 00007f23d278e969 [ 379.268435][ T9489] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 379.268444][ T9489] RBP: 00007f23d35d0090 R08: 0000000000000000 R09: 0000000000000000 [ 379.268454][ T9489] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 379.268464][ T9489] R13: 0000000000000000 R14: 00007f23d29b6080 R15: 00007ffe802b6f68 [ 379.268486][ T9489] [ 379.542932][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.549626][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.939726][ T5903] usbhid 1-1:0.0: can't add hid device: -71 [ 380.945876][ T5903] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 380.967076][ T5903] usb 1-1: USB disconnect, device number 42 [ 380.984793][ T30] audit: type=1400 audit(1747194153.858:1193): avc: denied { create } for pid=9494 comm="syz.0.967" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 381.048458][ T30] audit: type=1400 audit(1747194153.878:1194): avc: denied { write } for pid=9494 comm="syz.0.967" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 381.096205][ T30] audit: type=1400 audit(1747194153.968:1195): avc: denied { listen } for pid=9496 comm="syz.0.968" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 382.018914][ T9503] netlink: 36 bytes leftover after parsing attributes in process `syz.4.970'. [ 382.037587][ T30] audit: type=1400 audit(1747194154.908:1196): avc: denied { read } for pid=9502 comm="syz.4.970" name="event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 383.257487][ T9522] trusted_key: encrypted_key: insufficient parameters specified [ 383.850452][ T5904] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 384.010346][ T5904] usb 5-1: Using ep0 maxpacket: 32 [ 384.025886][ T5904] usb 5-1: config 0 interface 0 has no altsetting 0 [ 384.171758][ T5904] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 384.187423][ T5904] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.224468][ T5904] usb 5-1: Product: syz [ 384.230723][ T9527] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 384.238684][ T5904] usb 5-1: Manufacturer: syz [ 384.245987][ T5904] usb 5-1: SerialNumber: syz [ 384.361495][ T5904] usb 5-1: config 0 descriptor?? [ 384.373499][ T5904] gs_usb 5-1:0.0: Required endpoints not found [ 384.553871][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 384.553891][ T30] audit: type=1400 audit(1747194157.428:1202): avc: denied { create } for pid=9535 comm="syz.0.979" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 384.568618][ T9537] netlink: 108 bytes leftover after parsing attributes in process `syz.0.979'. [ 384.603135][ T30] audit: type=1400 audit(1747194157.428:1203): avc: denied { create } for pid=9535 comm="syz.0.979" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 384.623149][ T30] audit: type=1400 audit(1747194157.428:1204): avc: denied { write } for pid=9535 comm="syz.0.979" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 384.660672][ T30] audit: type=1400 audit(1747194157.428:1205): avc: denied { nlmsg_write } for pid=9535 comm="syz.0.979" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 384.728741][ T30] audit: type=1400 audit(1747194157.598:1206): avc: denied { write } for pid=9524 comm="syz.4.975" name="001" dev="devtmpfs" ino=750 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 385.065097][ T24] usb 5-1: USB disconnect, device number 50 [ 385.391956][ T30] audit: type=1400 audit(1747194158.268:1207): avc: denied { mounton } for pid=9545 comm="syz.0.981" path="/273/file0" dev="tmpfs" ino=1480 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 385.392030][ T9546] 9pnet_fd: Insufficient options for proto=fd [ 386.857095][ T30] audit: type=1400 audit(1747194159.728:1208): avc: denied { read } for pid=9559 comm="syz.4.985" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 386.885599][ T30] audit: type=1400 audit(1747194159.728:1209): avc: denied { open } for pid=9559 comm="syz.4.985" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 386.909418][ T30] audit: type=1400 audit(1747194159.728:1210): avc: denied { ioctl } for pid=9559 comm="syz.4.985" path="socket:[20334]" dev="sockfs" ino=20334 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 387.020532][ T30] audit: type=1400 audit(1747194159.888:1211): avc: denied { read } for pid=9565 comm="syz.4.987" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 388.677533][ T9581] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 388.776753][ T9580] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 388.895713][ T9579] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 389.300333][ T5903] usb 5-1: new full-speed USB device number 51 using dummy_hcd [ 389.462590][ T5903] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 389.473304][ T5903] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 389.490886][ T5903] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 389.500147][ T5903] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.511529][ T5903] usb 5-1: config 0 descriptor?? [ 389.728236][ T5903] usb 5-1: USB disconnect, device number 51 [ 389.747240][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 389.747261][ T30] audit: type=1400 audit(1747194162.618:1217): avc: denied { setopt } for pid=9584 comm="syz.0.993" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 389.774263][ T30] audit: type=1400 audit(1747194162.618:1218): avc: denied { shutdown } for pid=9584 comm="syz.0.993" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 389.797488][ T30] audit: type=1400 audit(1747194162.618:1219): avc: denied { getopt } for pid=9584 comm="syz.0.993" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 389.820002][ T30] audit: type=1400 audit(1747194162.618:1220): avc: denied { setopt } for pid=9584 comm="syz.0.993" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 390.120539][ T5904] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 390.272179][ T5904] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 390.284097][ T5904] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 390.299189][ T5904] usb 1-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 390.309620][ T5904] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.324173][ T5904] usb 1-1: config 0 descriptor?? [ 390.370970][ T9590] netlink: 48 bytes leftover after parsing attributes in process `syz.4.995'. [ 390.758315][ T5904] hid-led 0003:0FC5:B080.0013: reserved main item tag 0xe [ 390.767480][ T5904] hid-led 0003:0FC5:B080.0013: unknown main item tag 0x0 [ 391.300334][ T9597] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 391.310357][ T9597] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 391.997671][ T30] audit: type=1400 audit(1747194164.868:1221): avc: denied { write } for pid=9598 comm="syz.4.996" name="btrfs-control" dev="devtmpfs" ino=1309 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 392.022408][ T30] audit: type=1400 audit(1747194164.868:1222): avc: denied { open } for pid=9598 comm="syz.4.996" path="/dev/btrfs-control" dev="devtmpfs" ino=1309 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 392.092541][ T30] audit: type=1400 audit(1747194164.948:1223): avc: denied { create } for pid=9598 comm="syz.4.996" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 392.139992][ T30] audit: type=1400 audit(1747194164.958:1224): avc: denied { bind } for pid=9598 comm="syz.4.996" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 392.739733][ T30] audit: type=1400 audit(1747194165.608:1225): avc: denied { read } for pid=9602 comm="syz.4.997" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 392.762964][ T30] audit: type=1400 audit(1747194165.608:1226): avc: denied { open } for pid=9602 comm="syz.4.997" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 393.144275][ T5904] hid-led 0003:0FC5:B080.0013: probe with driver hid-led failed with error -71 [ 393.174894][ T5904] usb 1-1: USB disconnect, device number 43 [ 393.330953][ T5903] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 393.490337][ T5903] usb 5-1: Using ep0 maxpacket: 8 [ 393.497488][ T5903] usb 5-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 393.511499][ T5903] usb 5-1: config 0 interface 0 has no altsetting 0 [ 393.518316][ T5903] usb 5-1: New USB device found, idVendor=1430, idProduct=07bb, bcdDevice= 0.00 [ 393.528157][ T5903] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.539982][ T5903] usb 5-1: config 0 descriptor?? [ 395.350477][ T5904] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 395.511555][ T5904] usb 1-1: Using ep0 maxpacket: 8 [ 395.518479][ T5904] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 395.528102][ T5904] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.538467][ T5904] usb 1-1: config 0 descriptor?? [ 395.758498][ T5904] asix 1-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 395.831545][ T5903] usbhid 5-1:0.0: can't add hid device: -71 [ 395.843459][ T5903] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 395.861935][ T5903] usb 5-1: USB disconnect, device number 52 [ 395.910990][ T31] INFO: task kworker/0:0:9 blocked for more than 143 seconds. [ 395.918581][ T31] Not tainted 6.15.0-rc6-syzkaller-00047-ge9565e23cd89 #0 [ 395.927369][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 395.936375][ T31] task:kworker/0:0 state:D stack:23016 pid:9 tgid:9 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 395.948744][ T31] Workqueue: events rfkill_global_led_trigger_worker [ 395.956050][ T31] Call Trace: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 395.959391][ T31] [ 395.964510][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 395.964526][ T30] audit: type=1400 audit(1747194168.838:1233): avc: denied { write } for pid=5802 comm="syz-executor" path="pipe:[4485]" dev="pipefs" ino=4485 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 395.994684][ T31] __schedule+0x116f/0x5de0 [ 395.999495][ T31] ? __lock_acquire+0xaa1/0x1ba0 [ 396.030251][ T31] ? __pfx___schedule+0x10/0x10 [ 396.035243][ T31] ? find_held_lock+0x2b/0x80 [ 396.039975][ T31] ? schedule+0x2d7/0x3a0 [ 396.066039][ T31] schedule+0xe7/0x3a0 [ 396.080243][ T31] schedule_preempt_disabled+0x13/0x30 [ 396.093456][ T31] __mutex_lock+0x6c7/0xb90 [ 396.098067][ T31] ? __lock_acquire+0xaa4/0x1ba0 [ 396.109767][ T31] ? rfkill_global_led_trigger_worker+0x1b/0x160 [ 396.119412][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 396.124786][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 396.133835][ T31] ? rfkill_global_led_trigger_worker+0x1b/0x160 [ 396.140455][ T31] rfkill_global_led_trigger_worker+0x1b/0x160 [ 396.146668][ T31] process_one_work+0x9cf/0x1b70 [ 396.163931][ T31] ? __pfx_process_one_work+0x10/0x10 [ 396.169402][ T31] ? assign_work+0x1a0/0x250 [ 396.175866][ T31] worker_thread+0x6c8/0xf10 [ 396.185849][ T31] ? __pfx_worker_thread+0x10/0x10 [ 396.192545][ T31] kthread+0x3c2/0x780 [ 396.196692][ T31] ? __pfx_kthread+0x10/0x10 [ 396.204119][ T31] ? __pfx_kthread+0x10/0x10 [ 396.208768][ T31] ? __pfx_kthread+0x10/0x10 [ 396.213733][ T31] ? __pfx_kthread+0x10/0x10 [ 396.218400][ T31] ? rcu_is_watching+0x12/0xc0 [ 396.223339][ T31] ? __pfx_kthread+0x10/0x10 [ 396.227947][ T31] ret_from_fork+0x45/0x80 [ 396.232511][ T31] ? __pfx_kthread+0x10/0x10 [ 396.237117][ T31] ret_from_fork_asm+0x1a/0x30 [ 396.241976][ T31] [ 396.245410][ T31] INFO: task syz.2.591:8214 blocked for more than 143 seconds. [ 396.254351][ T31] Not tainted 6.15.0-rc6-syzkaller-00047-ge9565e23cd89 #0 [ 396.264254][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 396.292347][ T31] task:syz.2.591 state:D stack:26488 pid:8214 tgid:8214 ppid:5815 task_flags:0x400040 flags:0x00004006 [ 396.306203][ T31] Call Trace: [ 396.309516][ T31] [ 396.317339][ T31] __schedule+0x116f/0x5de0 [ 396.322018][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 396.327257][ T31] ? __lock_acquire+0x5ca/0x1ba0 [ 396.332466][ T31] ? __pfx___schedule+0x10/0x10 [ 396.337352][ T31] ? find_held_lock+0x2b/0x80 [ 396.342151][ T31] ? schedule+0x2d7/0x3a0 [ 396.346789][ T31] schedule+0xe7/0x3a0 [ 396.350964][ T31] schedule_preempt_disabled+0x13/0x30 [ 396.356576][ T31] __mutex_lock+0x6c7/0xb90 [ 396.361226][ T5940] usb 5-1: new full-speed USB device number 53 using dummy_hcd [ 396.369173][ T31] ? rfkill_unregister+0xec/0x2c0 [ 396.374346][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 396.379584][ T31] ? device_del+0x6b6/0x9f0 [ 396.384223][ T31] ? __pfx_device_del+0x10/0x10 [ 396.390036][ T31] ? rfkill_unregister+0xec/0x2c0 [ 396.396502][ T31] rfkill_unregister+0xec/0x2c0 [ 396.401453][ T31] nfc_unregister_device+0x94/0x330 [ 396.406679][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 396.412512][ T31] virtual_ncidev_close+0x4b/0xa0 [ 396.417592][ T31] __fput+0x3ff/0xb70 [ 396.421658][ T31] task_work_run+0x150/0x240 [ 396.426279][ T31] ? __pfx_task_work_run+0x10/0x10 [ 396.431444][ T31] ? __pfx___do_sys_close_range+0x10/0x10 [ 396.437202][ T31] ? xfd_validate_state+0x5d/0x180 [ 396.442382][ T31] syscall_exit_to_user_mode+0x27b/0x2a0 [ 396.448073][ T31] do_syscall_64+0xda/0x260 [ 396.452677][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.458594][ T31] RIP: 0033:0x7f7e6698e969 [ 396.463080][ T31] RSP: 002b:00007ffd36d67c88 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 396.471607][ T31] RAX: 0000000000000000 RBX: 00007f7e66bb7ba0 RCX: 00007f7e6698e969 [ 396.479613][ T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 396.487639][ T31] RBP: 00007f7e66bb7ba0 R08: 0000000000000064 R09: 0000000536d67f7f [ 396.495679][ T31] R10: 00007f7e66bb7ac0 R11: 0000000000000246 R12: 000000000003d4f6 [ 396.503754][ T31] R13: 00007ffd36d67d80 R14: ffffffffffffffff R15: 00007ffd36d67da0 [ 396.511792][ T31] [ 396.515079][ T31] INFO: task syz.2.591:8221 blocked for more than 143 seconds. [ 396.533750][ T31] Not tainted 6.15.0-rc6-syzkaller-00047-ge9565e23cd89 #0 [ 396.541572][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 396.550745][ T31] task:syz.2.591 state:D stack:27640 pid:8221 tgid:8214 ppid:5815 task_flags:0x400040 flags:0x00004004 [ 396.562796][ T31] Call Trace: [ 396.566105][ T31] [ 396.569060][ T31] __schedule+0x116f/0x5de0 [ 396.573661][ T31] ? __pfx___schedule+0x10/0x10 [ 396.578563][ T31] ? find_held_lock+0x2b/0x80 [ 396.583385][ T31] ? schedule+0x2d7/0x3a0 [ 396.587771][ T31] schedule+0xe7/0x3a0 [ 396.591964][ T31] schedule_preempt_disabled+0x13/0x30 [ 396.597482][ T31] __mutex_lock+0x6c7/0xb90 [ 396.602127][ T31] ? rfkill_unregister+0xec/0x2c0 [ 396.607191][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 396.612378][ T31] ? device_del+0x6b6/0x9f0 [ 396.616926][ T31] ? __pfx_device_del+0x10/0x10 [ 396.621875][ T31] ? rfkill_unregister+0xec/0x2c0 [ 396.626938][ T31] rfkill_unregister+0xec/0x2c0 [ 396.642683][ T31] nfc_unregister_device+0x94/0x330 [ 396.648045][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 396.655030][ T31] virtual_ncidev_close+0x4b/0xa0 [ 396.660132][ T31] __fput+0x3ff/0xb70 [ 396.666958][ T31] fput_close_sync+0x118/0x260 [ 396.672797][ T31] ? __pfx_fput_close_sync+0x10/0x10 [ 396.678137][ T31] ? dnotify_flush+0x79/0x4c0 [ 396.685742][ T31] __x64_sys_close+0x8b/0x120 [ 396.691670][ T31] do_syscall_64+0xcd/0x260 [ 396.696250][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.704790][ T31] RIP: 0033:0x7f7e6698e969 [ 396.709256][ T31] RSP: 002b:00007f7e6775f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 396.718313][ T31] RAX: ffffffffffffffda RBX: 00007f7e66bb6080 RCX: 00007f7e6698e969 [ 396.729109][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 396.737756][ T31] RBP: 00007f7e66a10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 396.751306][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 396.760398][ T31] R13: 0000000000000000 R14: 00007f7e66bb6080 R15: 00007ffd36d67b28 [ 396.768464][ T31] [ 396.771790][ T31] INFO: task syz.1.593:8223 blocked for more than 144 seconds. [ 396.779420][ T31] Not tainted 6.15.0-rc6-syzkaller-00047-ge9565e23cd89 #0 [ 396.787536][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 396.798355][ T31] task:syz.1.593 state:D stack:26360 pid:8223 tgid:8222 ppid:5812 task_flags:0x400140 flags:0x00004006 [ 396.810452][ T31] Call Trace: [ 396.813784][ T31] [ 396.816732][ T31] __schedule+0x116f/0x5de0 [ 396.821332][ T31] ? __pfx___schedule+0x10/0x10 [ 396.826205][ T31] ? find_held_lock+0x2b/0x80 [ 396.831029][ T31] ? schedule+0x2d7/0x3a0 [ 396.835393][ T31] schedule+0xe7/0x3a0 [ 396.839488][ T31] schedule_preempt_disabled+0x13/0x30 [ 396.845177][ T31] __mutex_lock+0x6c7/0xb90 [ 396.849716][ T31] ? nfc_dev_down+0x2d/0x2e0 [ 396.854464][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 396.859541][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 396.864641][ T31] ? do_raw_spin_lock+0x12c/0x2b0 [ 396.869687][ T31] ? nfc_dev_down+0x2d/0x2e0 [ 396.874370][ T31] ? mark_held_locks+0x49/0x80 [ 396.879158][ T31] nfc_dev_down+0x2d/0x2e0 [ 396.883651][ T31] nfc_rfkill_set_block+0x39/0xe0 [ 396.888708][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 396.894522][ T31] rfkill_set_block+0x1fe/0x550 [ 396.899399][ T31] rfkill_fop_write+0x2c0/0x580 [ 396.904544][ T31] ? __pfx_rfkill_fop_write+0x10/0x10 [ 396.909955][ T31] ? bpf_lsm_inode_setsecurity+0x20/0x20 [ 396.915886][ T31] ? security_file_permission+0x71/0x210 [ 396.921625][ T31] ? rw_verify_area+0xcf/0x680 [ 396.926410][ T31] vfs_write+0x25c/0x1180 [ 396.930811][ T31] ? __pfx_rfkill_fop_write+0x10/0x10 [ 396.936202][ T31] ? __pfx_vfs_write+0x10/0x10 [ 396.941023][ T31] ? find_held_lock+0x2b/0x80 [ 396.945730][ T31] ? __fget_files+0x204/0x3c0 [ 396.950565][ T31] ? __fget_files+0x20e/0x3c0 [ 396.955280][ T31] ksys_write+0x205/0x240 [ 396.959650][ T31] ? __pfx_ksys_write+0x10/0x10 [ 396.964664][ T31] ? rcu_is_watching+0x12/0xc0 [ 396.969491][ T31] do_syscall_64+0xcd/0x260 [ 396.974080][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.979993][ T31] RIP: 0033:0x7f3feaf8e969 [ 396.984436][ T31] RSP: 002b:00007f3febee3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 396.992931][ T31] RAX: ffffffffffffffda RBX: 00007f3feb1b5fa0 RCX: 00007f3feaf8e969 [ 397.000957][ T31] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000004 [ 397.008946][ T31] RBP: 00007f3feb010ab1 R08: 0000000000000000 R09: 0000000000000000 [ 397.016979][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 397.024988][ T31] R13: 0000000000000000 R14: 00007f3feb1b5fa0 R15: 00007ffdea3cab78 [ 397.033050][ T31] [ 397.036132][ T31] [ 397.036132][ T31] Showing all locks held in the system: [ 397.043961][ T31] 3 locks held by kworker/0:0/9: [ 397.048921][ T31] #0: ffff88801b478d48 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 397.059441][ T31] #1: ffffc900000e7d18 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 397.072615][ T31] #2: ffffffff905bef28 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x1b/0x160 [ 397.084163][ T31] 1 lock held by khungtaskd/31: [ 397.089040][ T31] #0: ffffffff8e3bfc00 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 397.099027][ T31] 2 locks held by getty/5574: [ 397.103761][ T31] #0: ffff88814d5850a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 397.114065][ T31] #1: ffffc9000333b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 397.124249][ T31] 1 lock held by syz-executor/5817: [ 397.129450][ T31] #0: ffffffff905bef28 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xec/0x2c0 [ 397.139746][ T31] 5 locks held by kworker/0:8/5904: [ 397.145002][ T31] #0: ffff88801f2c9548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 397.155878][ T31] #1: ffffc900050d7d18 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 397.167153][ T31] #2: ffff88802911e198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c0/0x4fa0 [ 397.176138][ T31] #3: ffff88805ea5d198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4b0 [ 397.185590][ T31] #4: ffff8880321cd160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4b0 [ 397.195322][ T31] 5 locks held by kworker/1:7/5940: [ 397.200605][ T31] #0: ffff88801f2c9548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 397.211488][ T31] #1: ffffc90005187d18 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 397.222766][ T31] #2: ffff888029386198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c0/0x4fa0 [ 397.231713][ T31] #3: ffff888145379510 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x2906/0x4fa0 [ 397.241674][ T31] #4: ffff88802934ac68 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x292b/0x4fa0 [ 397.251423][ T31] 2 locks held by syz.2.591/8214: [ 397.256464][ T31] #0: ffff8880337c7100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x60/0x330 [ 397.266274][ T31] #1: ffffffff905bef28 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xec/0x2c0 [ 397.276438][ T31] 2 locks held by syz.2.591/8221: [ 397.281496][ T31] #0: ffff88814e000100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x60/0x330 [ 397.291491][ T31] #1: ffffffff905bef28 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xec/0x2c0 [ 397.301696][ T31] 2 locks held by syz.1.593/8223: [ 397.306729][ T31] #0: ffffffff905bef28 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_write+0x166/0x580 [ 397.316921][ T31] #1: ffff88814e000100 (&dev->mutex){....}-{4:4}, at: nfc_dev_down+0x2d/0x2e0 [ 397.326109][ T31] 2 locks held by syz-executor/8400: [ 397.331449][ T31] #0: ffff88807c8a5118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_write+0x2b4/0x480 [ 397.340931][ T31] #1: ffffffff905bef28 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x3a/0xb40 [ 397.355966][ T31] 2 locks held by syz-executor/8407: [ 397.361361][ T31] #0: ffff88802b934918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_write+0x2b4/0x480 [ 397.370845][ T31] #1: ffffffff905bef28 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x3a/0xb40 [ 397.380857][ T31] 2 locks held by syz-executor/9033: [ 397.386160][ T31] #0: ffff88802de19918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_write+0x2b4/0x480 [ 397.395685][ T31] #1: ffffffff905bef28 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x3a/0xb40 [ 397.405858][ T31] 2 locks held by syz-executor/9035: [ 397.411206][ T31] #0: ffff888028f8c918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_write+0x2b4/0x480 [ 397.420719][ T31] #1: ffffffff905bef28 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x3a/0xb40 [ 397.430806][ T31] 2 locks held by syz-executor/9106: [ 397.436110][ T31] #0: ffff888029ec6918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_write+0x2b4/0x480 [ 397.445625][ T31] #1: ffffffff905bef28 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x3a/0xb40 [ 397.455648][ T31] 2 locks held by syz-executor/9560: [ 397.460987][ T31] #0: ffff88802cf24118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_write+0x2b4/0x480 [ 397.470463][ T31] #1: ffffffff905bef28 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x3a/0xb40 [ 397.480562][ T31] 2 locks held by syz-executor/9562: [ 397.485890][ T31] #0: ffff88802cf22918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_write+0x2b4/0x480 [ 397.495409][ T31] #1: ffffffff905bef28 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x3a/0xb40 [ 397.505439][ T31] 1 lock held by syz.0.1000/9613: [ 397.510712][ T31] #0: ffffffff905bef28 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xec/0x2c0 [ 397.520971][ T31] 2 locks held by syz-executor/9616: [ 397.526298][ T31] #0: ffff888062e5c118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_write+0x2b4/0x480 [ 397.535836][ T31] #1: ffffffff905bef28 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x3a/0xb40 [ 397.545835][ T31] 1 lock held by syz.4.1002/9619: [ 397.550913][ T31] #0: ffffffff905bef28 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xec/0x2c0 [ 397.561131][ T31] [ 397.563463][ T31] ============================================= [ 397.563463][ T31] [ 397.571948][ T31] NMI backtrace for cpu 1 [ 397.571964][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc6-syzkaller-00047-ge9565e23cd89 #0 PREEMPT(full) [ 397.571982][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 397.571991][ T31] Call Trace: [ 397.571996][ T31] [ 397.572003][ T31] dump_stack_lvl+0x116/0x1f0 [ 397.572036][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 397.572060][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 397.572081][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 397.572100][ T31] watchdog+0xf70/0x12c0 [ 397.572123][ T31] ? __pfx_watchdog+0x10/0x10 [ 397.572137][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 397.572163][ T31] ? __kthread_parkme+0x19e/0x250 [ 397.572186][ T31] ? __pfx_watchdog+0x10/0x10 [ 397.572202][ T31] kthread+0x3c2/0x780 [ 397.572219][ T31] ? __pfx_kthread+0x10/0x10 [ 397.572234][ T31] ? __pfx_kthread+0x10/0x10 [ 397.572250][ T31] ? __pfx_kthread+0x10/0x10 [ 397.572267][ T31] ? __pfx_kthread+0x10/0x10 [ 397.572282][ T31] ? rcu_is_watching+0x12/0xc0 [ 397.572305][ T31] ? __pfx_kthread+0x10/0x10 [ 397.572322][ T31] ret_from_fork+0x45/0x80 [ 397.572340][ T31] ? __pfx_kthread+0x10/0x10 [ 397.572357][ T31] ret_from_fork_asm+0x1a/0x30 [ 397.572394][ T31] [ 397.572416][ T31] Sending NMI from CPU 1 to CPUs 0: [ 397.705074][ C0] NMI backtrace for cpu 0 [ 397.705096][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.15.0-rc6-syzkaller-00047-ge9565e23cd89 #0 PREEMPT(full) [ 397.705117][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 397.705126][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 397.705157][ C0] Code: 05 62 02 e9 53 fc 02 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d f3 ef 1c 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 397.705170][ C0] RSP: 0018:ffffffff8e007e10 EFLAGS: 000002c6 [ 397.705183][ C0] RAX: 000000000125e3a9 RBX: 0000000000000000 RCX: ffffffff8b6d0419 [ 397.705191][ C0] RDX: 0000000000000000 RSI: ffffffff8dbe2848 RDI: ffffffff8bf48920 [ 397.705203][ C0] RBP: fffffbfff1c12ee8 R08: 0000000000000001 R09: ffffed10170865bd [ 397.705211][ C0] R10: ffff8880b8432deb R11: 0000000000000000 R12: 0000000000000000 [ 397.705219][ C0] R13: ffffffff8e097740 R14: ffffffff9084ff10 R15: 0000000000000000 [ 397.705227][ C0] FS: 0000000000000000(0000) GS:ffff8881249df000(0000) knlGS:0000000000000000 [ 397.705240][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 397.705249][ C0] CR2: 000056452279cb48 CR3: 000000000e180000 CR4: 00000000003526f0 [ 397.705257][ C0] Call Trace: [ 397.705262][ C0] [ 397.705267][ C0] default_idle+0x13/0x20 [ 397.705290][ C0] default_idle_call+0x6d/0xb0 [ 397.705300][ C0] do_idle+0x391/0x510 [ 397.705322][ C0] ? __pfx_do_idle+0x10/0x10 [ 397.705337][ C0] ? trace_sched_exit_tp+0x31/0x130 [ 397.705370][ C0] cpu_startup_entry+0x4f/0x60 [ 397.705385][ C0] rest_init+0x16b/0x2b0 [ 397.705395][ C0] ? acpi_subsystem_init+0x133/0x180 [ 397.705420][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 397.705438][ C0] start_kernel+0x3e9/0x4d0 [ 397.705460][ C0] x86_64_start_reservations+0x18/0x30 [ 397.705479][ C0] x86_64_start_kernel+0xb0/0xc0 [ 397.705496][ C0] common_startup_64+0x13e/0x148 [ 397.705520][ C0] [ 397.706122][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 397.904648][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc6-syzkaller-00047-ge9565e23cd89 #0 PREEMPT(full) [ 397.916446][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 397.926494][ T31] Call Trace: [ 397.929773][ T31] [ 397.932695][ T31] dump_stack_lvl+0x3d/0x1f0 [ 397.937307][ T31] panic+0x71c/0x800 [ 397.941202][ T31] ? __pfx_panic+0x10/0x10 [ 397.945610][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 397.950986][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 397.956953][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 397.962310][ T31] ? watchdog+0xdda/0x12c0 [ 397.966713][ T31] ? watchdog+0xdcd/0x12c0 [ 397.971113][ T31] watchdog+0xdeb/0x12c0 [ 397.975355][ T31] ? __pfx_watchdog+0x10/0x10 [ 397.980016][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 397.985206][ T31] ? __kthread_parkme+0x19e/0x250 [ 397.990232][ T31] ? __pfx_watchdog+0x10/0x10 [ 397.994897][ T31] kthread+0x3c2/0x780 [ 397.998957][ T31] ? __pfx_kthread+0x10/0x10 [ 398.003529][ T31] ? __pfx_kthread+0x10/0x10 [ 398.008111][ T31] ? __pfx_kthread+0x10/0x10 [ 398.012684][ T31] ? __pfx_kthread+0x10/0x10 [ 398.017267][ T31] ? rcu_is_watching+0x12/0xc0 [ 398.022019][ T31] ? __pfx_kthread+0x10/0x10 [ 398.026628][ T31] ret_from_fork+0x45/0x80 [ 398.031031][ T31] ? __pfx_kthread+0x10/0x10 [ 398.035612][ T31] ret_from_fork_asm+0x1a/0x30 [ 398.040389][ T31] [ 398.043616][ T31] Kernel Offset: disabled [ 398.047924][ T31] Rebooting in 86400 seconds..