last executing test programs: 11.988264369s ago: executing program 3 (id=1085): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000200000000000000000000000811200000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 11.755559035s ago: executing program 3 (id=1088): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x55779000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) socket$xdp(0x2c, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x10000, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffffd}, {0x0, 0x8, 0x0, 0x8}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in=@remote, 0x2, 0x6c}, 0x0, @in=@empty, 0x0, 0x5, 0x0, 0xb7}}, 0xe8) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x11, &(0x7f0000000300)=ANY=[@ANYBLOB="18650000090040000000000000030000", @ANYRES32=0x1, @ANYBLOB], &(0x7f00000003c0)='syzkaller\x00', 0x5, 0x69, &(0x7f0000000400)=""/105, 0x41100, 0x1a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0xa, 0x3}, 0x8, 0x10, &(0x7f00000004c0)={0x0, 0xc, 0x16087f10, 0xfffffff5}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'veth1_to_bridge\x00'}) 11.532359463s ago: executing program 2 (id=1090): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f00000007c0)={0x84, &(0x7f00000002c0)={0x0, 0x6, 0xf7, "dedf65850b6419a1a91c30ecff7db53c8015fcb3de224932019904462a54a0fef510a32901f1fa5e0e3b71ae9f86115f2e213360296f09f63e2ea6e4ddb6edab0eb23b3be982e9f819f1464a2b452db7a1260dafcabef0a08b865c011a9e57e7c3643920da5cdd06e9d2dc92be4a16408118daa06bfea939d3edfb8f2b1002a0a1951d2591a8340133effdba0170ee163be7c685e3b837a9f7a345d702f885d2af281094d8d3bab2fcf6e8a1119c851f23c22c297d3465b88cd00f28625623e1cec512a0c5b9a9ec9c71f82cfa250b0e047e057f160dd6055816910a57cc6d301979f22b4c9eeea2ba6466ff550022343dbd28f59cc65b"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), r1) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="ac000000", @ANYRES16=r2, @ANYBLOB="01060000000000000000090000002c0004801300010062726f6164636173742d6c696e6b00001400078008000600"], 0xac}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x80046) r4 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r4, &(0x7f0000002700)=""/102392, 0x18ff8) mount$binderfs(0x0, &(0x7f00000001c0)='./binderfs\x00', &(0x7f0000000280), 0x0, &(0x7f0000000000)={[{}]}) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r5, @ANYBLOB="01000000000000000000170000000c00060001000000010000000c01308014000400976f1044852bca665354bd217b"], 0x12c}, 0x1, 0x0, 0x0, 0x24004821}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)={0x1c, 0x0, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000180)={'wpan3\x00'}) 10.837896246s ago: executing program 3 (id=1091): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000540)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000000)={0x0, 0x22, 0x2, {0x2, 0x23}}, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x10, 0x80, 0x5, 0xf8, 0x3, 0x8000}}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000200)={0x14, &(0x7f0000000040)={0x40, 0x31, 0xa7, {0xa7, 0xc78f717769cf338f, "4907d4a4134dd90fa6f0055bd5837008fca7b30cee5e4c198313ce162410842944209089e14080c35d566af52d011ab70853dc7a3182070b7138fb5173f196a6a0582b73ff4c27a7f4f90a1b74257ba529e2fcd747de66b9964613bf790a2eb77c53f77357184c523774f6d5f9717a6cb5b4afbafde2d578e58b756e51923a7b80b73c33666d92b4e89575f71b4705f99f6f23c575fdada6a038cda51c98b2e849a157209e"}}, &(0x7f0000000100)={0x0, 0x3, 0xc4, @string={0xc4, 0x3, "cbb462fe558712d106c836b12854023cdcdd69256882b6ff68256d8b9811b8ac1bf8966215044c68b24e0dadfb7f64b9b16a87ce50d84211ec22a4efeef43d73d361c3f462bece004800a19239efcd7b6b40d6fe3bcd7e1998515577fc27600c3ae086e60caf6201a9da068b4c3a61b8cd113d1a014f3d46dff7f36a1f930f5ff6f52096abcadd6e67c034d2db5fa1aece26649cd915e78e42741f84ef7967f091f966baaea195fc9f05f8c0135933a7cfb4f284cb6cf535d1ca4273da617dc143da"}}}, &(0x7f00000004c0)={0x44, &(0x7f0000000240)={0x20, 0x30, 0x6, "7499c02c8054"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0xf}, &(0x7f0000000380)={0x20, 0x81, 0x3, "18c7a1"}, &(0x7f00000003c0)={0x20, 0x82, 0x2, "33da"}, &(0x7f0000000400)={0x20, 0x83, 0x1, 'n'}, &(0x7f0000000440)={0x20, 0x84, 0x3, "86e1a0"}, &(0x7f0000000480)={0x20, 0x85, 0x3, "9e1cae"}}) 9.038821783s ago: executing program 0 (id=1093): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000002000000000000001600000d03000000000000000000000105002000800000000000000000000003000000000200000002"], 0x0, 0x4e, 0x0, 0x1}, 0x28) 9.035539208s ago: executing program 2 (id=1094): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs={0x0, 0x0, 0xb}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0xfffffed4}, 0x48) getpgrp(0x0) capset(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b70300000000008085000000c0000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) getpid() 8.92344954s ago: executing program 0 (id=1095): r0 = socket(0x11, 0x800000003, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[], 0x1c}}, 0x0) r1 = syz_io_uring_setup(0x237, 0x0, 0x0, 0x0) io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0xc) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESHEX], 0xb8}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300020000000000fedbdf25fc000000000000000000000000000000fc00000000000000000000000000000000000400000000000a0060003b0000", @ANYRES32=0x0, @ANYBLOB], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x20008004) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000048000000ac1e000100000000000000000000000000000000000000000a0040"], 0xb8}, 0x1, 0x4800000000000000}, 0x4000) 8.724718815s ago: executing program 0 (id=1097): ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'batadv_slave_0\x00'}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x42, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x5}}, 0x20) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r3, 0xc0884113, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000f00000000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x94) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_SCRNMAP(r5, 0x4b41, &(0x7f0000000f80)) migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, &(0x7f0000000040)=0x272) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000004200)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0xffffffff80002000, 0x2f, 0x0, 0x4, 0x5, 0x0, 0x0, 0x1}}, 0x50) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYRES16, @ANYBLOB="01160700000000000025020000000800010003000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x8000) syz_open_dev$video4linux(&(0x7f0000000180), 0xae, 0x20000) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a017f7f00000000000000050000000900010073797a30000000000900030073797a300000000008000a400000000328000480080002400000001208000140000000000d0003"], 0xac}}, 0x0) clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) timer_settime(0x0, 0x1, &(0x7f00000004c0)={{0x0, 0x989680}, {r6, r7+10000000}}, &(0x7f0000001600)) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r8 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r8, 0xc0105500, &(0x7f0000000040)={0x0, 0x3, 0x1, 0x3, 0x0, 0x7, 0x0}) 8.235841188s ago: executing program 4 (id=1099): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000880)={'#! ', './file0', [{0x20, '\xfd\xff\xaa.\xf6\x9a\xbdO\xf7\b\x8dn>\x1cKU\x85\r\x93lM\x01&\xd6\x03\xf6\xfb\xddWY\x96N\t\xd6\x8e+\x1aa\a\xda\xa9*\xaf3\x02&\x8c\xe0%\xe9\x90\xb8k\xdb\xd6:\x02v\x8f\x9f\xaa\xf9\xa6&\xfc\xc4v\xc3\xc7x;\x88\xf4)L+\b\x0ff\xff\xff\xff\xff\xff\xff\xff\x7fT\x83\xf6(\xa4\x93\xachj\xc8*\xc2\x00\x1d\xc6\xd8\xd0\x89\x9bF&\xd2.\xaa\xfd\x16_\xe2\x1f\a\x18\xae\t\x8eDhh\xdfi\xfc\x16\x83\xe3\xbb=\xbf\xa3\xcb\x87\x16\x8a\xbf\x1f\xea\x9c\xb0\x1ad\xb5\x85\x85}\x0f_\xba-n\x87\x7f\xff\xab6\xc6\xac\xeeD\x14%x\xa34\x1dTU\xa9\xfb\xd0T\xb0\xc6\xebm\xbe!>I\x1f9\x9eX%U{!\xbc\xf6\xb6\x9a\x10\xfdXho\x87h\x18\xea\x8bQ\xc1WY(\xf3~\x0e5\x93h\x1a:^n\xe5\xe4\xa9\xc9\x91a\t\x80\xae\xa1\xea_7\xa1\x00gY\xd7GP\xe8\xed\x8f\xb7\xcbSA\x8aO \xaf{\xe4|\"\x8c\x9c\xa0\x92\xf0]+\x1b\xfd\xe2\xdb\x18\xd07bz\f\xf2-\xbc\xd4\x04\xf7\xe4\x1a\xbb\x10hq\xcf*\xb3e\xa076\n\xcd\x10\xd3\xc4\xd9k\xa2\xda\x8bT\x1d\xf5w\x03\x99\xc4N\xb8\xd3\x11\xeb\'3\xe4\xe0\x95%\xf3\xa1H\x8c\xd0\x198\xdfb\riy\x95vZ\xa1\xe5\x89\xb6&\x1e\xf9\x06\x1a=\x81\xc3\"\xf2\xf7.\xc0\xdbH\x02\xe6\xf9\xc6~\xc0\xbb\xe9H\xf8!\x83J\xa0\xe5\xe7\xc3|R\xd1.\x18\x9f\xeb\xb3\xf3\xfbU~\x9d\xc9\xf3\x15)\xd0Te\x0fc\v/A\x05-\x0f\xd6tO\xba\xe3\xf7\xf6j!\xa24\nm\x8as\xba\xf8\xde \xb5\xa7\x95\xa1\x1f\xd7\x7f\x9c\xd8#\n\xa9\xc6c\xe4\xd7%\xfb\xb6\xd7\xc1\xdc\xf9]\xa4\xa9@\'\x9cJ\xa2\xcf\xbfj\xee\xe3aY!\xc22\x17\xbc\xee\x9f\"(\xf0\x01\x98\x11\x05^h\xefv\xd2\xc0DW\xf1()\xff'}]}, 0x1ed) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x110, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x3b, 0x0, 0x1, 0x0, 0x0, 0x20008844}, 0x20044011) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_SET_NESTED_STATE(r5, 0xc048aeca, &(0x7f0000003680)={{0x4, 0x0, 0x80, {0x5000, 0x10000, 0x1}}, "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", "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"}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYRESDEC=r0], 0x70}, 0x1, 0x0, 0x0, 0x811}, 0x4000000) close(r2) fspick(r0, 0x0, 0x1) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r6, 0xfffffffc) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendmsg$inet(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000880)}, {&(0x7f00000006c0)="9e5139ba6f09278b6d148376c3e54c668c07be7b435b67a4ecbff6d40359063bf69bfff351f9ca467035476b8aa460537f9780cb549bc32a0f74ac94a30aa2540318c7cf68305c55", 0x48}], 0x2}, 0x40c4) r8 = accept(r2, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(0xffffffffffffffff, 0x5, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0xfffffdef}}, 0x801) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0) recvfrom(r7, &(0x7f0000000180)=""/57, 0x39, 0x4100, 0x0, 0x0) 8.17465053s ago: executing program 1 (id=1100): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="a4000000000101040000000000000000020000002400018014000180080001007f00000108000200e00000010c3a02800500010000000000240002800c000280050001000000000014000180080001000000000008000200e000000208000740000000001c00188008000140"], 0xa4}}, 0x0) 6.929665889s ago: executing program 1 (id=1101): openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x8080) socket$inet_tcp(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mknod$loop(&(0x7f0000000080)='./bus\x00', 0x2, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x2) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000180)=0x7a, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000080)) connect$pppoe(0xffffffffffffffff, &(0x7f0000000140)={0x18, 0x0, {0x4, @remote, 'wg2\x00'}}, 0x1e) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x77359400}, {0x77359400}}, 0x0) r3 = mq_open(&(0x7f0000000180)='eth0\x00', 0x40, 0x59, 0x0) mq_notify(r3, 0x0) readv(r3, &(0x7f0000000240)=[{0x0}], 0x1) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r2, &(0x7f0000001200)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001280)="bb2d839f3bf337ccd0d8f3513ab30aba4b00b6f0ef506a60f4082ace5a8a10d80d8d595071f2ff529ff6996481ffc7e4de448343b85079722c4f1a1ce360836392283201a1a5ac0b6e24ccf9f075c64fe58b7a37d37019a49908876bc37c9f304eeefed8a6d8cae3ca0f81e900c8735b8b3063967b68a1567e30726f2c0edb6c85e78619700b0645b728a0c88b22d18366a6db2e391401feb630396bf42b987b102eb2d0a804e188648df6c8ddd79e0fde3893930e06e91c39cc01d239a1c20cb0cee84da924212382163c6638e798d66660c356195a56523456052c42aca7c8404e259561dfea5cbdc21a31b7e7eb73a710b68ba2ae2eff86d3d4fbda8b72014f5de839d48acbc9d217f7ac0b3362a66f3a7d04277cc4b918687ed082170f98dc54bd56f28ea3fecc4e86e1820ed811919dac4d09c18e27c4d839c7ac015d34522c7d87ae968dc872d97db81da9a4b6f631535348d9d44ca3fe846f6706fd3d3bd2f62f2d046a2973c9e8c6ccbf96fd0060d532433732627bf213a35870cea250f79ac773b8adba386e0ae960801b073646dcfe7c89f0cb410d22146cb3109bb9a12649e943104875c0272dfdfac5998854c0f62438909522fba45a4ac83b917a6d9a45704fefe035986b7ae676dd6b8094d2ce7ed64f0aaf138cc827553d74b2c04488d849df41fb98a6c966c07cbb1a9fe3ee5e41c3082c51b37f9df811461cf123830ee606c7b5816b6b86b21860177bfc3fd9aeb689dbb39963a55cee2afe7352200f719a3c0fe44e059446bd7226d9e814d2358c2524c0103c48f7516cc69eb04815bbef84a5bd840a5131f45c335ef8939d6100cf89160f5f1c5aec60e479d18f4680a5a525964fbf2371c1493df2c3e67f98645f329d984250dc98a48a5ab14624438ad259145794a22055ace7d33b5218ed2bda0a528bee49e4e4ae3068477da429945eef0e06128a3202f62634d8faba02e7a951fd2ceba99d2a1488872c66ceef1c5ba5a3e4a523be24c7c2de0316ae12a66d11a8089888c1e2635206ad43da841b07324fdb18eaf8d8a41a8eee7e9cd948967234049bf5ff3c8ce9cd708cf33fca2896221990573c08ef7eb0843189f7033f93b753a40c49bfc92effc9a663fbd1389f1719d14b3d33558bc1ca6c7a66c3ce93151091b23b0efdc14b6e4af3bd914ae73ef2c823346af97d7d2a53f644ba75587ab85e95c43244ba1c97cd1e692bd3e781c21b937e005c9b617ef80b0b39be0da367d2d6320a9d9efa49b574239631adb87f1b5028ee294136a8ba", 0x394}], 0x1}}], 0x1, 0x40000d0) sendto$inet(r2, &(0x7f0000000300)="0906c422e0243219ff7b440e76a1b51b82ba23599f81b52c9d4db4486cec105e4b9f0f859f8a43eef6352f1e46e3145089b6a22f618ca14e288029b613a329c422481c6b7aff6806bce699cea461ecf591d9018b2a1d84e389a8d3127fd35913fe69754435c2", 0xffffffffffffffbb, 0x40040011, 0x0, 0x0) unshare(0x22020400) syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x802) 6.863557204s ago: executing program 4 (id=1102): openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x8080) socket$inet_tcp(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mknod$loop(&(0x7f0000000080)='./bus\x00', 0x2, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x2) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000180)=0x7a, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000080)) connect$pppoe(0xffffffffffffffff, &(0x7f0000000140)={0x18, 0x0, {0x4, @remote, 'wg2\x00'}}, 0x1e) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x77359400}, {0x77359400}}, 0x0) r3 = mq_open(&(0x7f0000000180)='eth0\x00', 0x40, 0x59, 0x0) mq_notify(r3, 0x0) readv(r3, &(0x7f0000000240)=[{0x0}], 0x1) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r2, &(0x7f0000001200)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001280)="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", 0x394}], 0x1}}], 0x1, 0x40000d0) sendto$inet(r2, &(0x7f0000000300)="0906c422e0243219ff7b440e76a1b51b82ba23599f81b52c9d4db4486cec105e4b9f0f859f8a43eef6352f1e46e3145089b6a22f618ca14e288029b613a329c422481c6b7aff6806bce699cea461ecf591d9018b2a1d84e389a8d3127fd35913fe69754435c2", 0xffffffffffffffbb, 0x40040011, 0x0, 0x0) unshare(0x22020400) syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x802) 6.773067786s ago: executing program 2 (id=1103): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x8c5f49850670a6da, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/246, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_raw(r2, &(0x7f00000005c0), 0x10) read(r2, &(0x7f00000027c0)=""/4073, 0xfe9) ioctl$SIOCGSTAMPNS(r2, 0x8907, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, &(0x7f0000000580)=0x1, 0x4) sendmsg$can_raw(r2, &(0x7f0000000240)={&(0x7f0000000780)={0x1d, r3}, 0x10, &(0x7f0000000200)={&(0x7f00000007c0)=@can={{0x2, 0x0, 0x1, 0x1}, 0x1, 0x3f57955e7be81d83, 0x0, 0x0, "f97003b8750e5566"}, 0x10}}, 0x4000040) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000f}, 0x94) 6.531344939s ago: executing program 2 (id=1104): socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(0x0, 0x0, &(0x7f00000002c0)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) open(&(0x7f0000000000)='./file1\x00', 0x14927e, 0x22) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYBLOB="ec0000002100010000000000fefffffffc020000000000000000000000000000fc02000000000000000000000000000000000000000000000a00000084000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c001100ac14140c000000000000000000000000fc000000000000000000000000000001fc020000000000000000000000000000fe8000000100400000000000000000aaff0000000200000002000a0000000000000000000000ffff7f000001fc02000000000000000000000000000064010102005fd8edc788dcd60c000000fc0200000000000000000000000000003c0000000000000008000200887532ed5f34a260a77127d4bdc782b5a24d"], 0xec}}, 0x0) chdir(0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) getpid() bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) 6.51232823s ago: executing program 0 (id=1105): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x34, 0x70, 0x9d, 0x40, 0x55f, 0xc230, 0xb6ac, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf2, 0xa7, 0xcc}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000dc0)={0x2c, &(0x7f0000000ac0)={0x0, 0x9, 0x1, "af"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000001f80)={{0xa, 0x4e23, 0x21, @mcast1}, {0xa, 0x4e21, 0x7, @empty, 0x200003}, 0xffffffffffffffff, {[0x0, 0x0, 0x0, 0x7fff, 0x1, 0x4]}}, 0x5c) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000100)='[', 0xfeed, 0xffffffffffffffff) 5.875162225s ago: executing program 3 (id=1106): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000002000000000000002000000d03000000000000000000000105002000800000000000000000000003000000000200000002"], 0x0, 0x4e, 0x0, 0x1}, 0x28) 5.496180035s ago: executing program 2 (id=1107): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000100), 0x80000000, 0x2) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, 0x0, 0x0) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r3, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) open(&(0x7f0000000140)='./file0\x00', 0x82200, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) close(r3) timerfd_settime(0xffffffffffffffff, 0x3, 0x0, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r1, 0x4004662b, &(0x7f0000000340)=0x5) syz_usb_control_io(r0, &(0x7f0000000100)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="200617"], 0x0, 0x0, 0x0, 0x0}, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x2801, 0x0) 5.472019202s ago: executing program 3 (id=1108): r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000540), 0x40000, 0x0) getdents64(r0, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) socket$inet6_sctp(0xa, 0x1, 0x84) socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x42, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008081}, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) r3 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r3, 0x5421, 0x0) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e20, @dev}, 0x10) close(r3) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x64}}, 0x0) syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r6, 0xf000, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r4, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f00000001c0)='m', 0xfffffdfc}]) io_destroy(r6) syz_usb_connect(0x0, 0x24, &(0x7f00000005c0)=ANY=[@ANYBLOB="1201000056544820e10508041125010203010902120001000000ff00"], 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x3) lsm_get_self_attr(0x65, 0x0, &(0x7f0000000080)=0x20, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r7, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000000)=0x40) syz_usb_connect(0x6, 0x354, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], &(0x7f0000000780)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x201, 0x81, 0x81, 0x8, 0xff, 0x4}, 0x121, &(0x7f0000000800)={0x5, 0xf, 0x121, 0x6, [@wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x10, 0x7, 0x8, 0x8}, @ssp_cap={0x14, 0x10, 0xa, 0xa2, 0x2, 0x6, 0x0, 0x7, [0x30, 0x7e00]}, @generic={0xcf, 0x10, 0x0, "5e395be7515708b1550ce834144906c7957215167a875384277fd61ab9fb92e88e5b430dc2e402308060a772a2808e09a5e7c99650151eebfdc4123c3cafcd306dc69340d74de61472098104e16f9390fe4f4faeba2411f8a21b46d45d2e4ceadf04b442fdacf2f0c6d6539189edacb00b701095ec22e66e008547e83614a112a7e4904e9a168b9b779fd72d8e9f40e31c6f035d89771d09acd36386720978f8ba0f2380ecc72a8f56bc5ff0962bc390254ca89600257623df976957313a21a02ec60920f04eed0195299901"}, @ext_cap={0x7, 0x10, 0x2, 0xa, 0x4, 0x7, 0x6}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x2, 0xf, 0x40, [0xffff30, 0x1f91, 0xc0ff, 0x3f00, 0x0]}, @ext_cap={0x7, 0x10, 0x2, 0x17, 0x0, 0x4, 0x1ff}]}, 0x7, [{0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x441}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x816}}, {0xe3, &(0x7f0000000480)=@string={0xe3, 0x3, "ee30de68bdfa90fd4240cf4060ceb774ab3bddfc5c6a327f527df33cfe79f5bf73d9e30425ab8ff25f248d5b7b0027e73d21796062535ca8a01faafbd3336adc4cb657e86cc335582f4c8ceb96e5c740000000a980f047c495bd3ebbbbe60a4be5970d267c0350fd2a39ca14a8ae4c84c062cdf5837778584fe8298b75a48d2329e98283ee02fa6229c3f7e66374f4993d9bed2efc05152e1d057d8678bb3d43572ae0fb79d3d76784703168e7c7e897feda13f9dd25afd2ea1089737138d3818d51c066606cfe142f4747fdc2c6830e45012c535e32ccf3f8c44fa586dd4d7042"}}, {0x7f, &(0x7f0000000700)=@string={0x7f, 0x3, "f32599598d8bf23d7d8920fd9f06aa859fd3592ebb76092ad4a04e80d02a5898753b59c76e5834c52ada00731abd27e8ca3d89bb2930b98348fa49356fc52f32c932733980b7f254c540c8874c430d5be04ea42523a77c7701e609c142e0daf098894b7005bd292e94222764785c1a377e7ed6566fd01ff2ad94251009"}}, {0x42, &(0x7f0000000600)=ANY=[@ANYBLOB="4203ad398de0b6f14df86e1f884c10693c1133868119dfc677de143df7cc7d904f79c118c607000000000000000133dbb566a737bf3f75350c580000000000000000"]}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x1c0a}}, {0x2a, &(0x7f00000006c0)=@string={0x2a, 0x3, "f5a3bd86133158b4405ed426138e78c3f95d8faa081305d7b1e2f7ca6d17f9078589d9a95970f179"}}]}) 4.899043523s ago: executing program 4 (id=1109): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xffdff7e8}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffff7}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x8000}, 0xf0ffffff) 4.873764744s ago: executing program 1 (id=1110): ioctl$TIOCSBRK(0xffffffffffffffff, 0x5427) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x29, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) unshare(0x20000) 4.779044214s ago: executing program 4 (id=1111): r0 = accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000000)) close_range(0xffffffffffffffff, r0, 0x2) (async) fstatfs(r0, &(0x7f0000000040)=""/139) (async) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000100)={'veth0_to_team\x00', @ifru_ivalue=0x9}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) (async) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280)=0xffffffffffffffff, 0x4) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000300)={0x3, r0, 0x80001}) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x4, &(0x7f0000000140)=@raw=[@btf_id={0x18, 0xb, 0x3, 0x0, 0x4}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}], &(0x7f0000000180)='GPL\x00', 0x1, 0x52, &(0x7f00000001c0)=""/82, 0x0, 0x40, '\x00', r1, 0x25, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x5, 0x2, 0x6c, 0x2}, 0x10, 0x0, 0x0, 0xa, &(0x7f0000000340)=[r3], &(0x7f0000000380)=[{0x2, 0x1, 0x2, 0xa}, {0x2, 0x5, 0x10, 0x5}, {0x4, 0x2, 0x8, 0x8}, {0x4, 0x5, 0xd, 0x9}, {0x3, 0x1, 0xe, 0xc}, {0x1, 0x5, 0x7, 0x9}, {0x1, 0x1, 0xd, 0x6}, {0x5, 0x4, 0xb, 0x1}, {0x0, 0x2, 0x1, 0xb}, {0x4, 0x5, 0xe, 0x7}], 0x10, 0x5}, 0x94) (async) r5 = getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x4, r5, 0x0, &(0x7f0000000500)) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@fallback=r3, 0xd, 0x0, 0x7, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) (async) setsockopt$WPAN_SECURITY_LEVEL(r3, 0x0, 0x2, &(0x7f0000000680), 0x4) r7 = syz_open_dev$audion(&(0x7f00000006c0), 0x20000000000, 0x48000) sendmsg$nl_route(r7, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)=@ipv4_getrule={0x1c, 0x22, 0x1, 0x70bd2d, 0x25dfdbfb, {0x2, 0x80, 0x20, 0x1, 0x2, 0x0, 0x0, 0xe, 0x10020}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x51}, 0xc0008) (async) rename(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00') r8 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000880), 0xa40, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000ac0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000900)={0x178, 0x1403, 0x20, 0x70bd27, 0x25dfdbfd, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'erspan0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth1_to_hsr\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'ipvlan1\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'batadv_slave_1\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vlan1\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'macsec0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'pimreg1\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth1_macvtap\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'netpci0\x00'}}]}, 0x178}}, 0xd4580a49ceae5e53) (async) ptrace(0x10, r5) ioctl$DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, &(0x7f0000000b00)={0x7, r6, 0x80000}) ioctl$vim2m_VIDIOC_S_CTRL(r9, 0xc008561c, &(0x7f0000000b40)={0x81, 0xffff}) r10 = syz_usb_connect(0x6, 0x2bf, &(0x7f0000000b80)={{0x12, 0x1, 0x300, 0xa4, 0xf6, 0x6, 0x70, 0x1bc7, 0x1073, 0x2482, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2ad, 0x1, 0x84, 0x3a, 0x20, 0x3, [{{0x9, 0x4, 0xa, 0x8, 0x6, 0xff, 0xd6, 0x49, 0xb, [@cdc_ecm={{0x9, 0x24, 0x6, 0x0, 0x0, "8646f283"}, {0x5, 0x24, 0x0, 0x81}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x8, 0x7, 0xec}, [@acm={0x4, 0x24, 0x2, 0x5}, @acm={0x4, 0x24, 0x2, 0x5}]}], [{{0x9, 0x5, 0x2, 0x0, 0x40, 0xa4, 0x1, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0x1}]}}, {{0x9, 0x5, 0x7, 0x0, 0x10, 0x8, 0xc, 0x7, [@generic={0x5b, 0x30, "8525151886b47bc352f836e0703dd5eaa4556688683b8842327c340a13db7fd087c6386750d4ba61be76584bbddf892c53d0c52ac6e1ca4f614247601d778274364277f5bef2457480f212279c9c7a80e1f8964b11f445b152"}]}}, {{0x9, 0x5, 0x3, 0x8, 0x40, 0x2, 0x5, 0x3, [@generic={0xd, 0x23, "5adec92309478143a19a6f"}, @generic={0xf4, 0x2, "f3f3293b023d59fb1afb0a5a353465e297ce8ece31db2f30e8a8c232a8164f42b4d7f6ee86f099cc8250025a4c51d6cfd1e6836aaceefb1243eab64339e245c24d495fb50ade2f669b438f6ac9f0fd3a35a6596e4b13f88b2625477f59739585d030f8f7c21779b3e2adee6015ed874306586e848161473e652101379761c7497cc926272a7af0d95e6e8d7b910e0c4ba92601ab5d9e29e33ec69f959fada445518c4823405de9d8e3e73f508951068302c0e0cca4ceddda4e9fb0ac733a079f32388d65d916305919199142c529da8f290a4cbb97a00f224046b2306d0f91a1be0123b357e3116f23b083f7752c38188597"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x3ef, 0x2, 0xd, 0x4c, [@generic={0xc3, 0x22, "b43b393e6870ed2ea7a8382fa13df7a22df31aa1c8f9dfb4e3ca8ac20df04a1e5d15c46a29b9b8a0d5cb1bbf731597b0772d82e3631cca8f0fa33a4018a03a2d22089e3d4423db52c42dc4dd76203b07ccff18505870b5211d32cf763e95dec4d25a72dcc4e467833c0ac47800a184b7b077d89c2bd887483b8f15af71df9f1f2a6ebbf9d3c415eb4574deaea910546d5203fb2cbc0f1769600aa94bc207310707914f089bba66108b98384f5b2293c02db54bbf41e09c682990fa8acf17b0cd2f"}]}}, {{0x9, 0x5, 0x3, 0x10, 0x3ff, 0xc, 0xe, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xfc, 0x240}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x9}]}}, {{0x9, 0x5, 0x1, 0x8, 0x400, 0x3, 0x1, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x3, 0x7ff}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xd, 0x9}]}}]}}]}}]}}, &(0x7f0000000f00)={0xa, &(0x7f0000000e40)={0xa, 0x6, 0x110, 0xfd, 0x80, 0xfb, 0x8}, 0x19, &(0x7f0000000e80)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x1, "54d0c82a44e7bca0116bbc5d081ca5da"}]}, 0x1, [{0x4, &(0x7f0000000ec0)=@lang_id={0x4, 0x3, 0x807}}]}) syz_usb_control_io(r10, &(0x7f0000001100)={0x2c, &(0x7f0000000f40)={0x0, 0x23, 0xa8, {0xa8, 0x31, "76ad9970e6bce9dd3cf7db73eabcd176c6971d751cdd24fb7756f75ed0266dbd1052f6e0f83b5483e7e4224992565792856f07bff7b3862581c9be7c022f09cb3c0782c8e14df63ba0f94fcd0a7707749098d09e7d73327577e077f60f09b326d17f932a975e02948ec866c50acf28c791e6dc4628d10e9e623e7b16b5c066122560dfd70888e61986b5d5eeeda557805d8a903d57909695f40adfb410244404eb8f331243f8"}}, &(0x7f0000001000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}, &(0x7f0000001040)={0x0, 0xf, 0xf, {0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x6, 0x7f, 0x5}]}}, &(0x7f0000001080)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x3, 0x47, 0x9, "20b38ffe", "0c4e1f39"}}, &(0x7f00000010c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6, 0x3, 0x7, 0x10, 0x81, 0x100, 0xb59b}}}, &(0x7f0000001580)={0x84, &(0x7f0000001140)={0x20, 0x16, 0x59, "bbfd4e6a334fcb22e511b331ee019ff14da8a686e210de59a9bfb79c2fbbc9c728bb8db7d1d15a36694094647457ddeb750d24f0ecb991aea7df30048a239fb52d41626a2953ff39e9db3f7d1cd921dad4f45a6eb41a5e33c3"}, &(0x7f00000011c0)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000001200)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000001240)={0x20, 0x0, 0x4, {0x2}}, &(0x7f0000001280)={0x20, 0x0, 0x8, {0x200, 0x4c, [0xf]}}, &(0x7f00000012c0)={0x40, 0x7, 0x2}, &(0x7f0000001300)={0x40, 0x9, 0x1, 0x8}, &(0x7f0000001340)={0x40, 0xb, 0x2, "ba5a"}, &(0x7f0000001380)={0x40, 0xf, 0x2, 0x200}, &(0x7f00000013c0)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000001400)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, &(0x7f0000001440)={0x40, 0x19, 0x2, "d0d2"}, &(0x7f0000001480)={0x40, 0x1a, 0x2, 0xfffc}, &(0x7f00000014c0)={0x40, 0x1c, 0x1, 0x9}, &(0x7f0000001500)={0x40, 0x1e, 0x1, 0x4}, &(0x7f0000001540)={0x40, 0x21, 0x1, 0x72}}) (async) r11 = socket$can_raw(0x1d, 0x3, 0x1) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000001640)={{0x1, 0x1, 0x18, r9}, './file0\x00'}) epoll_ctl$EPOLL_CTL_ADD(r12, 0x1, r4, &(0x7f0000001680)) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f00000016c0)='device_pm_callback_end\x00', 0xffffffffffffffff, 0x0, 0x6}, 0x18) (async) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001780), r12) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000017c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r3, &(0x7f0000001940)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001900)={&(0x7f0000001800)={0xe8, r13, 0x100, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r14}, @val={0xc, 0x99, {0x401, 0x23}}}}, [@NL80211_ATTR_REKEY_DATA={0x20, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="bbf1adcc7dad6f8f57c04ec8b2564d38"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x100}]}, @NL80211_ATTR_REKEY_DATA={0xa0, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "6a30494e147658bd"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x80000000}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="0f8f75296bc74d28e22d9a85b24442a87e56e7202322d356"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="793dd8789bdee88b4f014def8a31b65d8e5e609a5b72c74576605475d5b1663c"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x2}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="664cadab6cf107495c7d73803078452d3eacb3ec6154f968"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="d639a3a988732649ccd75befb76c4a297b5c4dd777bff16799f7a90e6fa85fb0"}]}]}, 0xe8}}, 0x4800) (async) socket$nl_netfilter(0x10, 0x3, 0xc) 4.594567544s ago: executing program 1 (id=1112): socket$nl_sock_diag(0x10, 0x3, 0x4) socket$inet(0x2, 0x3, 0x8) socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_int(r0, &(0x7f0000000380)=0xfffffffffffff800, 0x12) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x40880) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, 0x0, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000000)=[@mss={0x2, 0x822}, @mss={0x2, 0x10000fff}, @window], 0x3) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x100000, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 1.850956706s ago: executing program 1 (id=1113): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f0000000580)={0x0, 0xc1, 0x81, 0x20203843, 0x3, [0x2], [0x800, 0x0, 0x9, 0xfffffffc], [0x0, 0x1000000, 0x4], [0x0, 0x0, 0x0, 0x2]}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x80) ioctl$sock_SIOCBRDELBR(r2, 0x89a2, &(0x7f0000000000)='bridge0\x00') r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x14, r3, 0x1}, 0x14}}, 0x0) syz_emit_ethernet(0x76b, &(0x7f0000001540)={@multicast, @random="c2f66222e6aa", @void, {@ipv6={0x86dd, @generic={0x7, 0x6, "b36281", 0x735, 0x2c, 0xff, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {[], "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"}}}}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$afs(0x0, 0x0, 0x0, 0x4, &(0x7f0000000200)={[{@dyn}]}) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[]) chdir(&(0x7f00000000c0)='./file0\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file5\x00', 0x2) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x14, 0x25, 0x1, 0x70bd28, 0x25dffbfc, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2406c049}, 0x20000000) 1.849240514s ago: executing program 4 (id=1114): socket(0xa, 0x3, 0x3a) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x1c, 0x8, 0x40, 0x42, 0x1}, 0x50) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000000)='.dead\x00', &(0x7f0000000080)) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x33) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000dc0)={{r6, 0xffffffffffffffff}, &(0x7f0000000500), &(0x7f00000000c0)='%ps \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0)={r7}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x25, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000700)=[{0x0}, {0x0}, {0x0}], 0x3, &(0x7f0000000780)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}], 0x58}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB]) 1.602666076s ago: executing program 3 (id=1115): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=@newspdinfo={0x3c, 0x24, 0x200, 0x70bd2d, 0x25dfdbfb, 0x4d2c, [@XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x28014) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000000)=0x9, 0xe7) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x5e22, 0x0, @empty}, 0x1c) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r3, 0xc0bc5351, &(0x7f00000000c0)={0x7fffffff, 0x0, 'client1\x00', 0x0, "f8ee6e5e2b38b5cc", "b8c5126deca3c384693ba0e2b53b908612ca856de6ac921b579ddca05c6d32b9"}) listen(r1, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_pidfd_open(r5, 0x0) ioctl$FS_IOC_GETVERSION(r6, 0xc040ff0b, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r7, 0x0) writev(r4, &(0x7f0000000080)=[{&(0x7f0000000180)="580000001400add427323b470c45b45602067fffffff81005e22000d00ff0028925aa8002000eaa57b00090080000efffeffe809000000ff0000f03a0200f00000000000000001ffffffffe7ee0000000000000000020000", 0x58}], 0x1) syz_open_dev$video4linux(&(0x7f0000000080), 0xe97, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r8}, 0x10) r9 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0c00000004000000040000000700000000000000", @ANYRES32=r9, @ANYBLOB="0000000000000000000000000095f3ed3492351a0000e7ff000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x13101}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x4}}}]}, 0x38}}, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r10, &(0x7f0000000000), 0x400000000000041, 0x0) getitimer(0x2, 0x0) 1.46720692s ago: executing program 0 (id=1116): ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000280)={0x0, 0x0}) prlimit64(r0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000000)=@nullb, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='ufs\x00', 0x8000, 0x0) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, r5) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="1c00000014000100000080000000000007000080080002"], 0x1c}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r7 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r7, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) getsockname$l2tp(r7, 0x0, &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, 0x0, 0x0) write$sndseq(r4, &(0x7f00000005c0), 0x0) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000011000100000000000000000007000000", @ANYRES32=r9, @ANYBLOB="60a40200080000001c001a8018000580140005800800020000000000080001"], 0x3c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) 435.042578ms ago: executing program 4 (id=1117): syz_clone(0x1800040, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_FREQUENCY(0xffffffffffffffff, 0x402c5639, 0x0) r0 = syz_clone(0x20042400, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ptrace(0x4206, r0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0x511e36599023629, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r1, 0x0) r2 = syz_io_uring_setup(0x3480, &(0x7f00000002c0)={0x0, 0x0, 0x10100}, &(0x7f0000000240)=0x0, &(0x7f00000023c0)=0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB='2'], 0x118) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000003000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd, 0x0, 0x0, 0x0, 0x3}) io_uring_enter(r2, 0x2d3e, 0x0, 0x0, 0x0, 0x0) wait4(0x0, 0xfffffffffffffffe, 0x8, 0x0) 270.615508ms ago: executing program 0 (id=1118): socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(0x0, 0x0, &(0x7f00000002c0)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) open(&(0x7f0000000000)='./file1\x00', 0x14927e, 0x22) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYBLOB="ec0000002100010000000000fefffffffc020000000000000000000000000000fc02000000000000000000000000000000000000000000000a00000084000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c001100ac14140c000000000000000000000000fc000000000000000000000000000001fc020000000000000000000000000000fe8000000100400000000000000000aaff0000000200000002000a0000000000000000000000ffff7f000001fc02000000000000000000000000000064010102005fd8edc788dcd60c000000fc0200000000000000000000000000003c0000000000000008000200887532ed5f34a260a77127d4bdc782b5a24d"], 0xec}}, 0x0) chdir(0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) getpid() bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) 22.81471ms ago: executing program 1 (id=1119): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x25dfdbfc, {0x7a, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x8, 0xffffa888}]}}}]}, 0x3c}}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, 0x0, 0x0) memfd_create(0x0, 0x7) socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socket$kcm(0x10, 0x3, 0x10) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) 0s ago: executing program 2 (id=1120): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r0}, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xffff, 0x20000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r3}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) capget(&(0x7f0000000040)={0x20080522}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x7b53a000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x18) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f00000000c0)={0x40000000}) ioctl$BINDER_THREAD_EXIT(r8, 0x40046208, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000711212000004000095000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000000700)=@mangle={'mangle\x00', 0x64, 0x6, 0x658, 0xd0, 0x300, 0x1b8, 0x1b8, 0xd0, 0x588, 0x588, 0x588, 0x588, 0x588, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@socket1={{0x28}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4=@private}}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}, {0x0, 0x1}}]}, @inet=@DSCP={0x28}}, {{@ipv6={@mcast1, @empty, [0xffffff00, 0xffffff00, 0xff], [0xff000000, 0xff, 0xffffff00], 'hsr0\x00', 'veth0_to_team\x00', {0xff}, {}, 0x67, 0x3, 0x5, 0x4}, 0x0, 0x118, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @common=@dst={{0x48}, {0x1b8}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x46, 0x8}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6b8) kernel console output (not intermixed with test programs): _t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 194.753976][ T30] audit: type=1400 audit(1753682736.288:541): avc: denied { getopt } for pid=7668 comm="syz.1.464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 194.861566][ T30] audit: type=1400 audit(1753682736.478:542): avc: denied { watch } for pid=7682 comm="syz.2.466" path="/109" dev="tmpfs" ino=579 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 195.111917][ T7484] 8021q: adding VLAN 0 to HW filter on device bond0 [ 195.143262][ T24] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 195.511567][ T7484] 8021q: adding VLAN 0 to HW filter on device team0 [ 195.554611][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.561815][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 195.576857][ T6046] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.581110][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 195.584025][ T6046] bridge0: port 2(bridge_slave_1) entered forwarding state [ 195.673553][ T24] usb 4-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 195.687105][ T7712] netlink: 'syz.2.470': attribute type 8 has an invalid length. [ 195.694851][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.709731][ T24] usb 4-1: Product: syz [ 195.737424][ T24] usb 4-1: Manufacturer: syz [ 195.752079][ T7712] netlink: 'syz.2.470': attribute type 21 has an invalid length. [ 195.794923][ T24] usb 4-1: SerialNumber: syz [ 195.843766][ T7712] netlink: 'syz.2.470': attribute type 6 has an invalid length. [ 195.861509][ T7712] netlink: 132 bytes leftover after parsing attributes in process `syz.2.470'. [ 195.874422][ T24] usb 4-1: config 0 descriptor?? [ 196.125849][ T24] RobotFuzz Open Source InterFace, OSIF 4-1:0.0: version d4.15 found at bus 004 address 016 [ 196.503627][ T24] usb 4-1: USB disconnect, device number 16 [ 196.744029][ T7484] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 197.300278][ T917] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 197.586244][ T917] usb 2-1: device descriptor read/64, error -71 [ 197.766910][ T7484] veth0_vlan: entered promiscuous mode [ 197.784368][ T7484] veth1_vlan: entered promiscuous mode [ 197.840438][ T917] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 197.884937][ T7756] netlink: 'syz.3.477': attribute type 4 has an invalid length. [ 198.074082][ T7484] veth0_macvtap: entered promiscuous mode [ 198.098550][ T7484] veth1_macvtap: entered promiscuous mode [ 198.150243][ T917] usb 2-1: device descriptor read/64, error -71 [ 198.171337][ T7484] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 198.218994][ T7484] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 198.270909][ T917] usb usb2-port1: attempt power cycle [ 198.317520][ T7768] pim6reg1: entered promiscuous mode [ 198.323186][ T7768] pim6reg1: entered allmulticast mode [ 198.338386][ T7484] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.431359][ T7484] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.440539][ T7484] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.477589][ T7484] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.760410][ T917] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 198.860805][ T917] usb 2-1: device descriptor read/8, error -71 [ 199.099564][ T3549] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 199.115750][ T7771] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 199.131532][ T917] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 199.135827][ T3549] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 199.180801][ T917] usb 2-1: device descriptor read/8, error -71 [ 199.234051][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 199.267476][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 199.304006][ T917] usb usb2-port1: unable to enumerate USB device [ 199.314167][ T30] audit: type=1400 audit(1753682740.918:543): avc: denied { mounton } for pid=7484 comm="syz-executor" path="/root/syzkaller.DJyPSA/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 199.354136][ T30] audit: type=1400 audit(1753682740.968:544): avc: denied { mount } for pid=7484 comm="syz-executor" name="/" dev="gadgetfs" ino=5987 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 199.869010][ T7797] netlink: 'syz.3.484': attribute type 8 has an invalid length. [ 199.962199][ T7799] afs: Unknown parameter 'GPL' [ 200.433755][ T7797] netlink: 'syz.3.484': attribute type 21 has an invalid length. [ 200.452741][ T7797] netlink: 'syz.3.484': attribute type 6 has an invalid length. [ 200.468029][ T7797] netlink: 132 bytes leftover after parsing attributes in process `syz.3.484'. [ 200.676324][ T30] audit: type=1400 audit(1753682742.288:545): avc: denied { lock } for pid=7804 comm="syz.0.486" path="socket:[17563]" dev="sockfs" ino=17563 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 201.307185][ T7821] fuse: Bad value for 'group_id' [ 201.312403][ T7821] fuse: Bad value for 'group_id' [ 201.334528][ T7816] afs: Unknown parameter 'GPL' [ 201.398813][ T30] audit: type=1326 audit(1753682742.938:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7804 comm="syz.0.486" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f034918e9a9 code=0x0 [ 201.884972][ T30] audit: type=1400 audit(1753682743.488:547): avc: denied { read } for pid=7827 comm="syz.4.491" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 202.560199][ T917] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 202.769323][ T30] audit: type=1400 audit(1753682743.488:548): avc: denied { open } for pid=7827 comm="syz.4.491" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 202.793543][ T30] audit: type=1400 audit(1753682743.488:549): avc: denied { ioctl } for pid=7827 comm="syz.4.491" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x937b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 203.010866][ T917] usb 5-1: Using ep0 maxpacket: 16 [ 203.063621][ T917] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0x1 has invalid maxpacket 1023 [ 203.114043][ T917] usb 5-1: config 1 interface 0 altsetting 3 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 203.587083][ T917] usb 5-1: config 1 interface 0 has no altsetting 0 [ 203.597584][ T917] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 203.609863][ T917] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.713861][ T917] usb 5-1: Product: ớ맏ҏȮ仌覶쑞 [ 203.738049][ T917] usb 5-1: Manufacturer: ࡡ [ 203.824115][ T7847] netlink: 44 bytes leftover after parsing attributes in process `syz.1.494'. [ 203.842356][ T7847] capability: warning: `syz.1.494' uses 32-bit capabilities (legacy support in use) [ 204.048584][ T917] usb 5-1: SerialNumber: Ь [ 204.133079][ T7828] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 204.153681][ T7828] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 204.472458][ T7855] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 204.485535][ T7855] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 204.815014][ T30] audit: type=1400 audit(1753682746.098:550): avc: denied { firmware_load } for pid=7850 comm="syz.2.496" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 204.853873][ T917] usb 5-1: USB disconnect, device number 11 [ 205.424990][ T7858] afs: Unknown parameter 'GPL' [ 205.535371][ T7863] netlink: 'syz.1.499': attribute type 8 has an invalid length. [ 205.557659][ T7863] netlink: 'syz.1.499': attribute type 21 has an invalid length. [ 205.579778][ T7863] netlink: 'syz.1.499': attribute type 6 has an invalid length. [ 205.623764][ T7863] netlink: 132 bytes leftover after parsing attributes in process `syz.1.499'. [ 205.818910][ T30] audit: type=1400 audit(1753682747.428:551): avc: denied { write } for pid=7868 comm="syz.1.503" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 205.967665][ T30] audit: type=1400 audit(1753682747.518:552): avc: denied { mount } for pid=7872 comm="syz.4.504" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 205.991277][ T30] audit: type=1400 audit(1753682747.568:553): avc: denied { block_suspend } for pid=7868 comm="syz.1.503" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 206.921748][ T7885] program syz.4.507 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 207.265289][ T7899] netlink: 'syz.4.514': attribute type 8 has an invalid length. [ 207.281698][ T7899] netlink: 'syz.4.514': attribute type 21 has an invalid length. [ 207.483672][ T7899] netlink: 'syz.4.514': attribute type 6 has an invalid length. [ 207.510163][ T7899] netlink: 132 bytes leftover after parsing attributes in process `syz.4.514'. [ 208.170239][ T30] audit: type=1400 audit(1753682749.768:554): avc: denied { read write } for pid=5825 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 208.275756][ T30] audit: type=1400 audit(1753682749.768:555): avc: denied { create } for pid=7894 comm="syz.4.514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 208.341560][ T30] audit: type=1400 audit(1753682749.778:556): avc: denied { open } for pid=5825 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 208.425868][ T30] audit: type=1400 audit(1753682749.778:557): avc: denied { ioctl } for pid=5825 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 208.456942][ T30] audit: type=1400 audit(1753682749.928:558): avc: denied { read } for pid=7906 comm="syz.2.516" dev="nsfs" ino=4026533228 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 208.845606][ T7916] overlay: ./file0 is not a directory [ 209.255118][ T30] audit: type=1400 audit(1753682749.928:559): avc: denied { open } for pid=7906 comm="syz.2.516" path="net:[4026533228]" dev="nsfs" ino=4026533228 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 209.325469][ T7918] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 210.031494][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 210.031507][ T30] audit: type=1400 audit(1753682751.648:583): avc: denied { prog_load } for pid=7923 comm="syz.0.520" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 210.034008][ T7924] loop2: detected capacity change from 0 to 1 [ 210.041003][ T30] audit: type=1400 audit(1753682751.648:584): avc: denied { bpf } for pid=7923 comm="syz.0.520" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 210.097835][ T5837] ldm_validate_privheads(): Disk read failed. [ 210.105015][ T5837] Dev loop2: unable to read RDB block 1 [ 210.114308][ T5837] loop2: unable to read partition table [ 210.124288][ T30] audit: type=1400 audit(1753682751.708:585): avc: denied { write } for pid=7925 comm="syz.4.521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 210.181390][ T7926] overlay: ./file0 is not a directory [ 210.497128][ T7928] Bluetooth: hci5: Frame reassembly failed (-84) [ 210.668587][ T6046] Bluetooth: hci5: Frame reassembly failed (-84) [ 210.670425][ T5837] loop2: partition table beyond EOD, truncated [ 210.803644][ T7924] ldm_validate_privheads(): Disk read failed. [ 210.835726][ T30] audit: type=1400 audit(1753682751.708:586): avc: denied { perfmon } for pid=7925 comm="syz.4.521" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 210.850357][ T7924] Dev loop2: unable to read RDB block 1 [ 211.153665][ T7924] loop2: unable to read partition table [ 211.153841][ T7924] loop2: partition table beyond EOD, truncated [ 211.153869][ T7924] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 211.187834][ T5202] ldm_validate_privheads(): Disk read failed. [ 211.187902][ T5202] Dev loop2: unable to read RDB block 1 [ 211.187931][ T5202] loop2: unable to read partition table [ 211.188094][ T5202] loop2: partition table beyond EOD, truncated [ 211.197655][ T30] audit: type=1400 audit(1753682751.708:587): avc: denied { prog_run } for pid=7925 comm="syz.4.521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 211.197711][ T30] audit: type=1400 audit(1753682751.728:588): avc: denied { create } for pid=7925 comm="syz.4.521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 211.197743][ T30] audit: type=1400 audit(1753682751.798:589): avc: denied { mounton } for pid=7925 comm="syz.4.521" path="/8/bus" dev="tmpfs" ino=62 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 211.197775][ T30] audit: type=1400 audit(1753682752.518:590): avc: denied { read } for pid=7908 comm="syz.3.515" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 211.197809][ T30] audit: type=1400 audit(1753682752.528:591): avc: denied { open } for pid=7908 comm="syz.3.515" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 211.197841][ T30] audit: type=1400 audit(1753682752.598:592): avc: denied { bind } for pid=7908 comm="syz.3.515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 212.246949][ T7965] netlink: 'syz.1.528': attribute type 8 has an invalid length. [ 212.247386][ T7965] netlink: 'syz.1.528': attribute type 21 has an invalid length. [ 212.247430][ T7965] netlink: 'syz.1.528': attribute type 6 has an invalid length. [ 212.247443][ T7965] netlink: 132 bytes leftover after parsing attributes in process `syz.1.528'. [ 212.464811][ T51] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 212.676429][ C1] vkms_vblank_simulate: vblank timer overrun [ 212.744982][ T7983] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(11) [ 212.745029][ T7983] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 212.754970][ T7983] vhci_hcd vhci_hcd.0: Device attached [ 212.776424][ C1] vkms_vblank_simulate: vblank timer overrun [ 213.168758][ T10] vhci_hcd: vhci_device speed not set [ 213.240846][ T7988] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(14) [ 213.247717][ T7988] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 213.517564][ T7989] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(17) [ 213.524216][ T7989] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 213.553711][ T10] usb 35-1: new full-speed USB device number 2 using vhci_hcd [ 213.631699][ T7988] vhci_hcd vhci_hcd.0: Device attached [ 213.637539][ T7989] vhci_hcd vhci_hcd.0: Device attached [ 213.725739][ T7991] vhci_hcd: connection closed [ 213.727323][ T6046] vhci_hcd: stop threads [ 213.738733][ T7990] vhci_hcd: connection closed [ 213.739120][ T7984] vhci_hcd: connection reset by peer [ 213.782802][ T6046] vhci_hcd: release socket [ 213.798297][ T6046] vhci_hcd: disconnect device [ 213.818376][ T6046] vhci_hcd: stop threads [ 213.832596][ T6046] vhci_hcd: release socket [ 213.837470][ T6046] vhci_hcd: disconnect device [ 213.857869][ T6046] vhci_hcd: stop threads [ 213.875817][ T6046] vhci_hcd: release socket [ 213.892776][ T6046] vhci_hcd: disconnect device [ 214.945377][ T8026] afs: Unknown parameter 'GPL' [ 215.292495][ T8015] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 215.299578][ T8015] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 215.407653][ T8015] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 215.416562][ T8015] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 215.436333][ T8015] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 215.616453][ T8015] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 215.641568][ T8015] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 215.697220][ T30] kauditd_printk_skb: 47 callbacks suppressed [ 215.714193][ T30] audit: type=1400 audit(1753682757.288:640): avc: denied { read } for pid=8027 comm="syz.3.543" name="binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 215.802109][ T8031] xt_TPROXY: Can be used only with -p tcp or -p udp [ 216.035878][ T8015] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 216.042161][ T30] audit: type=1400 audit(1753682757.298:641): avc: denied { open } for pid=8027 comm="syz.3.543" path="/dev/binderfs/binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 216.042203][ T30] audit: type=1400 audit(1753682757.308:642): avc: denied { ioctl } for pid=8027 comm="syz.3.543" path="/dev/binderfs/binder1" dev="binder" ino=8 ioctlcmd=0x6208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 216.236346][ T30] audit: type=1400 audit(1753682757.848:643): avc: denied { ioctl } for pid=8032 comm="syz.0.544" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x64a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 216.261713][ C1] vkms_vblank_simulate: vblank timer overrun [ 216.534473][ T8015] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 216.607045][ T8015] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 216.694939][ T8040] netlink: 108 bytes leftover after parsing attributes in process `syz.3.546'. [ 216.704870][ T5835] Bluetooth: hci1: command 0x0406 tx timeout [ 216.743406][ T8040] netlink: 8 bytes leftover after parsing attributes in process `syz.3.546'. [ 217.098530][ T30] audit: type=1400 audit(1753682758.708:644): avc: denied { kexec_image_load } for pid=8039 comm="syz.3.546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 217.119555][ C1] vkms_vblank_simulate: vblank timer overrun [ 217.385435][ T30] audit: type=1400 audit(1753682758.708:645): avc: denied { mounton } for pid=8039 comm="syz.3.546" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 217.419071][ T5835] Bluetooth: hci2: command 0x0406 tx timeout [ 217.534276][ T30] audit: type=1400 audit(1753682758.718:646): avc: denied { ioctl } for pid=8039 comm="syz.3.546" path="socket:[17379]" dev="sockfs" ino=17379 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 217.639443][ T30] audit: type=1400 audit(1753682759.228:647): avc: denied { getopt } for pid=8054 comm="syz.2.551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 217.668411][ T8056] loop2: detected capacity change from 0 to 1 [ 217.674667][ T5835] Bluetooth: hci4: command 0x0406 tx timeout [ 217.722991][ T30] audit: type=1400 audit(1753682759.238:648): avc: denied { getopt } for pid=8054 comm="syz.2.551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 217.814132][ T5837] ldm_validate_privheads(): Disk read failed. [ 217.825054][ T5837] Dev loop2: unable to read RDB block 1 [ 217.830725][ T5837] loop2: unable to read partition table [ 217.847310][ T5837] loop2: partition table beyond EOD, truncated [ 218.050219][ T5835] Bluetooth: hci3: command 0x0c1a tx timeout [ 218.271291][ T8056] ldm_validate_privheads(): Disk read failed. [ 218.282072][ T8056] Dev loop2: unable to read RDB block 1 [ 218.294395][ T8056] loop2: unable to read partition table [ 218.300790][ T8056] loop2: partition table beyond EOD, truncated [ 218.313340][ T8056] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 218.319386][ T8062] netlink: 16 bytes leftover after parsing attributes in process `syz.2.554'. [ 218.323468][ T30] audit: type=1400 audit(1753682759.928:649): avc: denied { setopt } for pid=8061 comm="syz.2.554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 218.616676][ T8071] netlink: 28 bytes leftover after parsing attributes in process `syz.1.555'. [ 218.768920][ T8073] netlink: 8 bytes leftover after parsing attributes in process `syz.0.558'. [ 218.797014][ T5835] Bluetooth: hci1: command 0x0406 tx timeout [ 218.800193][ T10] vhci_hcd: vhci_device speed not set [ 219.490205][ T5835] Bluetooth: hci2: command 0x0406 tx timeout [ 219.730204][ T5835] Bluetooth: hci4: command 0x0406 tx timeout [ 220.146054][ T5835] Bluetooth: hci3: command 0x0c1a tx timeout [ 220.582387][ T8094] 9pnet_fd: Insufficient options for proto=fd [ 221.570749][ T5835] Bluetooth: hci2: command 0x0406 tx timeout [ 221.897186][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 221.903525][ T30] audit: type=1400 audit(1753682763.418:660): avc: denied { ioctl } for pid=8101 comm="syz.2.565" path="/dev/video7" dev="devtmpfs" ino=949 ioctlcmd=0x561c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 222.129321][ T30] audit: type=1400 audit(1753682763.738:661): avc: denied { setopt } for pid=8105 comm="syz.4.566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 222.210445][ T5835] Bluetooth: hci3: command 0x0c1a tx timeout [ 223.491941][ T30] audit: type=1326 audit(1753682765.108:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8123 comm="syz.2.571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d6978e9a9 code=0x7ffc0000 [ 223.523190][ T30] audit: type=1326 audit(1753682765.108:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8123 comm="syz.2.571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d6978e9a9 code=0x7ffc0000 [ 223.546416][ C0] vkms_vblank_simulate: vblank timer overrun [ 224.088707][ T30] audit: type=1326 audit(1753682765.168:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8123 comm="syz.2.571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=4 compat=0 ip=0x7f6d6978e9a9 code=0x7ffc0000 [ 224.196006][ T8127] syz.0.572 uses obsolete (PF_INET,SOCK_PACKET) [ 224.279703][ T30] audit: type=1326 audit(1753682765.638:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8123 comm="syz.2.571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d6978e9a9 code=0x7ffc0000 [ 224.304453][ T30] audit: type=1326 audit(1753682765.638:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8123 comm="syz.2.571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f6d6978e9a9 code=0x7ffc0000 [ 224.327558][ T30] audit: type=1326 audit(1753682765.638:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8123 comm="syz.2.571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d6978e9a9 code=0x7ffc0000 [ 224.351477][ T30] audit: type=1326 audit(1753682765.638:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8123 comm="syz.2.571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d6978e9a9 code=0x7ffc0000 [ 224.375106][ T30] audit: type=1326 audit(1753682765.638:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8123 comm="syz.2.571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f6d6978e9a9 code=0x7ffc0000 [ 224.982925][ T917] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 225.232645][ T917] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 225.248674][ T917] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2c24, bcdDevice= 0.00 [ 225.264179][ T917] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.282034][ T8153] netlink: 'syz.2.578': attribute type 8 has an invalid length. [ 225.292563][ T917] usb 2-1: config 0 descriptor?? [ 226.749428][ T917] pyra 0003:1E7D:2C24.0003: hidraw0: USB HID v0.08 Device [HID 1e7d:2c24] on usb-dummy_hcd.1-1/input0 [ 226.795830][ T917] usb 2-1: USB disconnect, device number 11 [ 227.376342][ T8168] afs: Unknown parameter 'GPL' [ 227.439444][ T8175] fido_id[8175]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 227.929632][ T30] kauditd_printk_skb: 113 callbacks suppressed [ 227.929647][ T30] audit: type=1400 audit(1753682769.538:783): avc: denied { watch watch_reads } for pid=8186 comm="syz.4.586" path="/18" dev="tmpfs" ino=133 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 228.075876][ T30] audit: type=1800 audit(1753682769.588:784): pid=8187 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.586" name="bus" dev="overlay" ino=146 res=0 errno=0 [ 228.443880][ T8196] xt_TPROXY: Can be used only with -p tcp or -p udp [ 229.025516][ T8200] netlink: 12 bytes leftover after parsing attributes in process `syz.4.588'. [ 229.035129][ T30] audit: type=1400 audit(1753682770.638:785): avc: denied { bind } for pid=8197 comm="syz.4.588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 230.075834][ T30] audit: type=1400 audit(1753682771.108:786): avc: denied { connect } for pid=8202 comm="syz.3.589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 230.522537][ T5835] Bluetooth: hci3: adv larger than maximum supported [ 230.522662][ T5835] Bluetooth: hci3: Unknown advertising packet type: 0x20 [ 230.529593][ T5835] Bluetooth: hci3: Malformed LE Event: 0x0d [ 231.358338][ T30] audit: type=1400 audit(1753682772.968:787): avc: denied { read write } for pid=8224 comm="syz.1.597" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 231.380723][ T8229] fuse: Unknown parameter '00000000000000000000003' [ 231.385110][ T30] audit: type=1400 audit(1753682772.968:788): avc: denied { open } for pid=8224 comm="syz.1.597" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 231.505786][ T8232] afs: Unknown parameter 'GPL' [ 232.519962][ T8236] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 232.928751][ T8241] 9pnet_fd: Insufficient options for proto=fd [ 233.828271][ T8246] loop2: detected capacity change from 0 to 1 [ 233.864352][ T8246] ldm_validate_privheads(): Disk read failed. [ 233.897419][ T8246] Dev loop2: unable to read RDB block 1 [ 233.915982][ T8246] loop2: unable to read partition table [ 233.934253][ T8246] loop2: partition table beyond EOD, truncated [ 233.953336][ T8246] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 234.569651][ T5835] Bluetooth: hci3: Malformed LE Event: 0x0d [ 234.576260][ T8270] netlink: 44 bytes leftover after parsing attributes in process `syz.3.610'. [ 234.589147][ T8270] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 234.722543][ T8279] netlink: 'syz.2.613': attribute type 3 has an invalid length. [ 237.054974][ T8305] netlink: 36 bytes leftover after parsing attributes in process `syz.1.619'. [ 237.076325][ T30] audit: type=1400 audit(1753682778.688:789): avc: denied { write } for pid=8306 comm="syz.3.621" laddr=172.20.20.170 lport=255 faddr=224.0.0.1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 237.165203][ T8305] netlink: 16 bytes leftover after parsing attributes in process `syz.1.619'. [ 237.195558][ T30] audit: type=1400 audit(1753682778.688:790): avc: denied { name_connect } for pid=8306 comm="syz.3.621" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 237.218274][ T30] audit: type=1400 audit(1753682778.808:791): avc: denied { getopt } for pid=8306 comm="syz.3.621" laddr=172.20.20.170 lport=255 faddr=224.0.0.1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 237.241832][ T30] audit: type=1400 audit(1753682778.808:792): avc: denied { setopt } for pid=8306 comm="syz.3.621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 237.261699][ T8305] netlink: 36 bytes leftover after parsing attributes in process `syz.1.619'. [ 237.270670][ T8305] netlink: 36 bytes leftover after parsing attributes in process `syz.1.619'. [ 237.296651][ T8313] netlink: 8 bytes leftover after parsing attributes in process `syz.4.623'. [ 237.420198][ T24] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 237.842783][ T30] audit: type=1400 audit(1753682779.308:793): avc: denied { create } for pid=8312 comm="syz.4.623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 237.974412][ T30] audit: type=1400 audit(1753682779.328:794): avc: denied { ioctl } for pid=8312 comm="syz.4.623" path="socket:[20481]" dev="sockfs" ino=20481 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 238.146405][ T30] audit: type=1400 audit(1753682779.348:795): avc: denied { connect } for pid=8312 comm="syz.4.623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 238.264088][ T30] audit: type=1400 audit(1753682779.398:796): avc: denied { setopt } for pid=8312 comm="syz.4.623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 238.528208][ T30] audit: type=1400 audit(1753682780.138:797): avc: denied { name_bind } for pid=8322 comm="syz.4.627" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 238.720151][ T8326] afs: Unknown parameter 'GPL' [ 238.851519][ T24] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 238.863154][ T24] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 238.874632][ T24] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 238.883892][ T24] usb 3-1: New USB device strings: Mfr=0, Product=13, SerialNumber=0 [ 238.892262][ T24] usb 3-1: Product: syz [ 238.914395][ T8309] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 238.954088][ T24] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 239.280500][ T8333] afs: Unknown parameter 'GPL' [ 240.137111][ T24] usb 3-1: USB disconnect, device number 4 [ 240.770386][ T8344] block nbd1: Device being setup by another task [ 240.777722][ T8342] block nbd1: shutting down sockets [ 241.060718][ T30] audit: type=1400 audit(1753682782.668:798): avc: denied { connect } for pid=8345 comm="syz.3.632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 241.496962][ T8353] netlink: 'syz.3.635': attribute type 8 has an invalid length. [ 241.690826][ T8355] netlink: 'syz.3.635': attribute type 21 has an invalid length. [ 242.007638][ T8355] netlink: 'syz.3.635': attribute type 6 has an invalid length. [ 242.108241][ T8355] netlink: 132 bytes leftover after parsing attributes in process `syz.3.635'. [ 243.287014][ T9] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 243.399061][ T8375] afs: Unknown parameter 'GPL' [ 243.956119][ T48] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 244.161292][ T9] usb 2-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice=b7.de [ 244.186082][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.201970][ T9] usb 2-1: Product: syz [ 244.206626][ T9] usb 2-1: Manufacturer: syz [ 244.212288][ T48] usb 4-1: Using ep0 maxpacket: 16 [ 244.219434][ T9] usb 2-1: SerialNumber: syz [ 244.225613][ T8377] netlink: 108 bytes leftover after parsing attributes in process `syz.4.644'. [ 244.237347][ T9] usb 2-1: config 0 descriptor?? [ 244.245205][ T48] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 244.255344][ T8377] netlink: 8 bytes leftover after parsing attributes in process `syz.4.644'. [ 244.267362][ T9] ttusb_dec_send_command: command bulk message failed: error -22 [ 244.279383][ T48] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 244.280706][ T9] ttusb-dec 2-1:0.0: probe with driver ttusb-dec failed with error -22 [ 244.414875][ T8380] Device name cannot be null; rc = [-22] [ 244.632085][ T30] audit: type=1400 audit(1753682786.048:799): avc: denied { module_request } for pid=8378 comm="syz.2.645" kmod="fs-" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 244.657091][ T48] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.671475][ T48] usb 4-1: Product: syz [ 244.676473][ T48] usb 4-1: Manufacturer: syz [ 244.688038][ T48] usb 4-1: SerialNumber: syz [ 244.690462][ T9] usb 2-1: USB disconnect, device number 12 [ 244.692849][ T30] audit: type=1400 audit(1753682786.128:800): avc: denied { ioctl } for pid=8378 comm="syz.2.645" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x5450 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 244.903854][ T48] usb 4-1: config 0 descriptor?? [ 245.146431][ T9] usb 4-1: USB disconnect, device number 17 [ 245.629530][ T8386] netlink: 156 bytes leftover after parsing attributes in process `syz.2.646'. [ 245.679670][ T30] audit: type=1400 audit(1753682787.288:801): avc: denied { write } for pid=8394 comm="syz.3.647" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 245.721422][ T30] audit: type=1400 audit(1753682787.328:802): avc: denied { create } for pid=8394 comm="syz.3.647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 245.928246][ T30] audit: type=1400 audit(1753682787.328:803): avc: denied { bind } for pid=8394 comm="syz.3.647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 246.425010][ T30] audit: type=1400 audit(1753682787.608:804): avc: denied { sys_module } for pid=8394 comm="syz.3.647" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 246.446158][ T30] audit: type=1400 audit(1753682787.668:805): avc: denied { name_bind } for pid=8399 comm="syz.0.649" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 246.488810][ T30] audit: type=1400 audit(1753682788.098:806): avc: denied { accept } for pid=8394 comm="syz.3.647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 246.526101][ T30] audit: type=1400 audit(1753682788.138:807): avc: denied { relabelfrom } for pid=8407 comm="syz.2.650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 246.549162][ T30] audit: type=1400 audit(1753682788.168:808): avc: denied { relabelto } for pid=8407 comm="syz.2.650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 247.073241][ T8423] netlink: 'syz.0.655': attribute type 4 has an invalid length. [ 248.213459][ T8444] netlink: 'syz.4.660': attribute type 8 has an invalid length. [ 248.242986][ T8444] netlink: 'syz.4.660': attribute type 21 has an invalid length. [ 248.360262][ T8444] netlink: 'syz.4.660': attribute type 6 has an invalid length. [ 248.387935][ T8446] netlink: 108 bytes leftover after parsing attributes in process `syz.0.661'. [ 248.397492][ T8444] netlink: 132 bytes leftover after parsing attributes in process `syz.4.660'. [ 248.409290][ T8446] netlink: 8 bytes leftover after parsing attributes in process `syz.0.661'. [ 248.748161][ T8451] loop2: detected capacity change from 0 to 1 [ 248.755588][ T8451] ldm_validate_privheads(): Disk read failed. [ 248.764439][ T8451] Dev loop2: unable to read RDB block 1 [ 248.798999][ T8451] loop2: unable to read partition table [ 249.083049][ T8451] loop2: partition table beyond EOD, truncated [ 249.137517][ T8451] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 249.297014][ T8458] overlay: Unknown parameter 'pcr' [ 249.307159][ T8458] netlink: 28 bytes leftover after parsing attributes in process `syz.4.664'. [ 250.028534][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 250.028549][ T30] audit: type=1400 audit(1753682791.638:813): avc: denied { unmount } for pid=7484 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 250.098995][ T8475] netlink: 16 bytes leftover after parsing attributes in process `syz.4.671'. [ 250.233702][ T8477] vlan0: entered promiscuous mode [ 250.304817][ T8480] netlink: 12 bytes leftover after parsing attributes in process `syz.1.669'. [ 250.760793][ T8481] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 250.872437][ T8477] team0: Port device vlan0 added [ 251.224728][ T8487] netlink: 108 bytes leftover after parsing attributes in process `syz.1.674'. [ 251.250082][ T8487] netlink: 8 bytes leftover after parsing attributes in process `syz.1.674'. [ 251.388665][ T8493] afs: Unknown parameter 'GPL' [ 252.628588][ T8498] afs: Unknown parameter 'GPL' [ 252.678559][ T30] audit: type=1400 audit(1753682794.278:814): avc: denied { setopt } for pid=8499 comm="syz.3.677" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 253.089210][ T30] audit: type=1400 audit(1753682794.288:815): avc: denied { write } for pid=8499 comm="syz.3.677" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 253.301278][ T30] audit: type=1400 audit(1753682794.298:816): avc: denied { read } for pid=8499 comm="syz.3.677" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 254.384984][ T30] audit: type=1400 audit(1753682795.998:817): avc: denied { create } for pid=8519 comm="syz.2.685" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 254.429164][ T30] audit: type=1400 audit(1753682796.028:818): avc: denied { name_connect } for pid=8511 comm="syz.3.681" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 254.453460][ T30] audit: type=1400 audit(1753682796.038:819): avc: denied { read } for pid=8511 comm="syz.3.681" name="event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 254.690748][ T5894] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 254.905433][ T5894] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 254.939840][ T5894] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 254.955260][ T5894] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.966176][ T5894] usb 3-1: config 0 descriptor?? [ 255.000191][ T48] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 255.229655][ T48] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 255.256562][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.264662][ T48] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 255.277729][ T48] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 255.287341][ T48] usb 1-1: New USB device strings: Mfr=0, Product=13, SerialNumber=0 [ 255.295478][ T48] usb 1-1: Product: syz [ 255.302509][ T8516] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 255.323732][ T48] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 256.068371][ T9] usb 1-1: USB disconnect, device number 8 [ 257.297137][ T8550] netlink: 108 bytes leftover after parsing attributes in process `syz.4.692'. [ 257.351199][ T8550] netlink: 8 bytes leftover after parsing attributes in process `syz.4.692'. [ 257.527493][ T8557] xt_TPROXY: Can be used only with -p tcp or -p udp [ 258.534744][ T8564] afs: Unknown parameter 'GPL' [ 258.878251][ T30] audit: type=1400 audit(1753682800.478:820): avc: denied { getopt } for pid=8567 comm="syz.0.696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 258.934294][ T8568] block nbd0: server does not support multiple connections per device. [ 258.978593][ T5894] usbhid 3-1:0.0: can't add hid device: -71 [ 259.018113][ T5894] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 259.031567][ T8568] block nbd0: shutting down sockets [ 259.184485][ T5894] usb 3-1: USB disconnect, device number 5 [ 259.401560][ T8575] netlink: 28 bytes leftover after parsing attributes in process `syz.0.698'. [ 259.420919][ T8575] netlink: 8 bytes leftover after parsing attributes in process `syz.0.698'. [ 259.619817][ T30] audit: type=1400 audit(1753682801.218:821): avc: denied { create } for pid=8577 comm="syz.4.700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 259.687371][ T30] audit: type=1400 audit(1753682801.218:822): avc: denied { setopt } for pid=8577 comm="syz.4.700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 259.710051][ T30] audit: type=1400 audit(1753682801.218:823): avc: denied { write } for pid=8577 comm="syz.4.700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 259.790278][ T5894] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 260.748698][ T30] audit: type=1400 audit(1753682801.218:824): avc: denied { ioctl } for pid=8577 comm="syz.4.700" path="socket:[20869]" dev="sockfs" ino=20869 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 260.982394][ T5894] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 261.000289][ T5894] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 261.012522][ T5894] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 261.444196][ T5894] usb 3-1: New USB device strings: Mfr=0, Product=13, SerialNumber=0 [ 261.452725][ T5894] usb 3-1: Product: syz [ 261.475006][ T8573] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 261.502884][ T5894] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 261.894694][ T30] audit: type=1400 audit(1753682803.508:825): avc: denied { mount } for pid=8570 comm="syz.2.697" name="/" dev="ramfs" ino=21526 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 262.083564][ T30] audit: type=1400 audit(1753682803.688:826): avc: denied { create } for pid=8570 comm="syz.2.697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 262.428119][ T30] audit: type=1400 audit(1753682803.688:827): avc: denied { connect } for pid=8570 comm="syz.2.697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 263.068547][ T5894] usb 3-1: USB disconnect, device number 6 [ 263.158292][ T8620] netlink: 16 bytes leftover after parsing attributes in process `syz.4.712'. [ 263.361862][ T8605] netlink: 12 bytes leftover after parsing attributes in process `syz.1.706'. [ 263.801852][ T8628] netlink: 16 bytes leftover after parsing attributes in process `syz.3.714'. [ 265.197242][ T8644] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 265.252124][ T8644] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 265.260173][ T8644] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 265.272966][ T8644] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 266.880244][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 266.947060][ T8679] netlink: 16 bytes leftover after parsing attributes in process `syz.4.727'. [ 267.373807][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 267.373835][ T5828] Bluetooth: hci2: command 0x0406 tx timeout [ 267.440334][ T5835] Bluetooth: hci4: command 0x0406 tx timeout [ 267.475866][ T8684] afs: Unknown parameter 'GPL' [ 267.904821][ T8687] netlink: 108 bytes leftover after parsing attributes in process `syz.1.730'. [ 267.919398][ T8687] netlink: 8 bytes leftover after parsing attributes in process `syz.1.730'. [ 268.319454][ T8691] netlink: 108 bytes leftover after parsing attributes in process `syz.4.731'. [ 268.335387][ T8691] netlink: 8 bytes leftover after parsing attributes in process `syz.4.731'. [ 268.518164][ T8693] afs: Unknown parameter 'GPL' [ 269.741980][ T5894] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 271.244206][ T5894] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 271.256039][ T5894] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 271.267346][ T5894] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 271.290245][ T5894] usb 3-1: New USB device strings: Mfr=0, Product=13, SerialNumber=0 [ 271.310289][ T5894] usb 3-1: Product: syz [ 271.380538][ T8700] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 271.398547][ T5894] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 271.421311][ T30] audit: type=1400 audit(1753682813.028:828): avc: denied { ioctl } for pid=8722 comm="syz.1.739" path="socket:[21723]" dev="sockfs" ino=21723 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 271.466749][ T30] audit: type=1400 audit(1753682813.058:829): avc: denied { write } for pid=8722 comm="syz.1.739" path="socket:[21723]" dev="sockfs" ino=21723 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 272.161475][ T5874] usb 3-1: USB disconnect, device number 7 [ 274.053943][ T8752] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 274.094423][ T8752] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 274.128362][ T5828] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 274.159558][ T30] audit: type=1400 audit(1753682815.768:830): avc: denied { create } for pid=8753 comm="syz.0.748" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 274.240906][ T8759] netlink: 80 bytes leftover after parsing attributes in process `syz.0.748'. [ 274.700744][ T30] audit: type=1400 audit(1753682815.788:831): avc: denied { ioctl } for pid=8753 comm="syz.0.748" path="socket:[21157]" dev="sockfs" ino=21157 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 274.897334][ T30] audit: type=1400 audit(1753682815.848:832): avc: denied { read } for pid=8753 comm="syz.0.748" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 275.438735][ T30] audit: type=1400 audit(1753682815.848:833): avc: denied { open } for pid=8753 comm="syz.0.748" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 275.464294][ T30] audit: type=1400 audit(1753682815.848:834): avc: denied { ioctl } for pid=8753 comm="syz.0.748" path="/dev/rtc0" dev="devtmpfs" ino=921 ioctlcmd=0x7001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 276.258353][ T8782] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 276.346539][ T5874] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 276.643451][ T8788] netlink: 16 bytes leftover after parsing attributes in process `syz.3.757'. [ 277.200896][ T5874] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 277.216610][ T5874] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.235896][ T5874] usb 3-1: Product: syz [ 277.249681][ T5874] usb 3-1: Manufacturer: syz [ 277.254380][ T5874] usb 3-1: SerialNumber: syz [ 277.283843][ T5874] usb 3-1: config 0 descriptor?? [ 277.293544][ T5874] ch341 3-1:0.0: ch341-uart converter detected [ 277.760035][ T8799] netlink: 36 bytes leftover after parsing attributes in process `syz.1.761'. [ 277.790724][ T30] audit: type=1400 audit(1753682819.388:835): avc: denied { create } for pid=8791 comm="syz.3.759" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 277.819276][ T8799] netlink: 16 bytes leftover after parsing attributes in process `syz.1.761'. [ 277.829685][ T30] audit: type=1400 audit(1753682819.388:836): avc: denied { write } for pid=8791 comm="syz.3.759" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 277.915378][ T8778] netlink: 24 bytes leftover after parsing attributes in process `syz.2.754'. [ 278.298424][ T30] audit: type=1400 audit(1753682819.388:837): avc: denied { sqpoll } for pid=8791 comm="syz.3.759" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 278.460969][ T8778] netlink: 4 bytes leftover after parsing attributes in process `syz.2.754'. [ 279.042478][ T5894] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 279.045894][ T5874] usb 3-1: failed to send control message: -110 [ 279.056400][ T5874] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -110 [ 279.400421][ T5894] usb 5-1: Using ep0 maxpacket: 8 [ 279.407051][ T5894] usb 5-1: config 2 has an invalid interface number: 6 but max is 1 [ 279.417241][ T5894] usb 5-1: config 2 has an invalid descriptor of length 1, skipping remainder of the config [ 279.418463][ T30] audit: type=1400 audit(1753682821.038:838): avc: denied { bind } for pid=8818 comm="syz.1.767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 279.481140][ T30] audit: type=1400 audit(1753682821.068:839): avc: denied { write } for pid=8818 comm="syz.1.767" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 279.482295][ T5894] usb 5-1: config 2 has 1 interface, different from the descriptor's value: 2 [ 279.507185][ T30] audit: type=1400 audit(1753682821.068:840): avc: denied { map } for pid=8818 comm="syz.1.767" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 279.550349][ T5894] usb 5-1: config 2 has no interface number 0 [ 279.556679][ T5894] usb 5-1: config 2 interface 6 altsetting 3 endpoint 0x9 has invalid maxpacket 1088, setting to 64 [ 279.568662][ T5894] usb 5-1: config 2 interface 6 altsetting 3 has a duplicate endpoint with address 0xA, skipping [ 279.586821][ T5894] usb 5-1: config 2 interface 6 has no altsetting 0 [ 279.593981][ T5894] usb 5-1: New USB device found, idVendor=19d2, idProduct=1303, bcdDevice=5f.76 [ 279.605279][ T5894] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.701430][ T5874] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 279.833147][ T5894] usb 5-1: string descriptor 0 read error: -71 [ 279.843420][ T5894] option 5-1:2.6: GSM modem (1-port) converter detected [ 279.870194][ T5874] usb 2-1: Using ep0 maxpacket: 8 [ 279.871866][ T5894] usb 5-1: USB disconnect, device number 12 [ 279.877084][ T5874] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 279.895921][ T5894] option 5-1:2.6: device disconnected [ 279.912955][ T8828] netlink: 16 bytes leftover after parsing attributes in process `syz.3.770'. [ 279.929263][ T5874] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 279.939138][ T5874] usb 2-1: config 0 interface 0 has no altsetting 0 [ 279.945868][ T5874] usb 2-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 279.955409][ T5874] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.964928][ T5874] usb 2-1: config 0 descriptor?? [ 280.718065][ T5874] steelseries 0003:1038:1410.0004: missing HID_OUTPUT_REPORT 0 [ 280.821784][ T5874] usb 3-1: USB disconnect, device number 8 [ 280.850281][ T5874] ch341 3-1:0.0: device disconnected [ 281.695570][ T8845] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 282.120242][ T8851] netlink: 108 bytes leftover after parsing attributes in process `syz.2.778'. [ 282.144786][ T8851] netlink: 8 bytes leftover after parsing attributes in process `syz.2.778'. [ 282.465583][ T5935] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 282.752204][ T5935] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 282.857179][ T8861] netlink: 16 bytes leftover after parsing attributes in process `syz.3.782'. [ 282.866343][ T5935] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 282.866372][ T5935] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.868344][ T5935] usb 1-1: config 0 descriptor?? [ 282.904521][ T9] usb 2-1: USB disconnect, device number 13 [ 282.922679][ T5935] pwc: Askey VC010 type 2 USB webcam detected. [ 283.413221][ T5935] pwc: recv_control_msg error -32 req 02 val 2b00 [ 283.426407][ T5935] pwc: recv_control_msg error -32 req 02 val 2700 [ 283.591542][ T5935] pwc: recv_control_msg error -32 req 02 val 2c00 [ 283.599182][ T5935] pwc: recv_control_msg error -32 req 04 val 1000 [ 283.606487][ T5935] pwc: recv_control_msg error -32 req 04 val 1300 [ 283.889328][ T5935] pwc: recv_control_msg error -32 req 04 val 1400 [ 283.896658][ T5935] pwc: recv_control_msg error -32 req 02 val 2000 [ 283.904006][ T5935] pwc: recv_control_msg error -32 req 02 val 2100 [ 283.911201][ T5935] pwc: recv_control_msg error -32 req 04 val 1500 [ 283.919159][ T5935] pwc: recv_control_msg error -32 req 02 val 2500 [ 283.929301][ T5935] pwc: recv_control_msg error -32 req 02 val 2400 [ 283.947415][ T5935] pwc: recv_control_msg error -32 req 02 val 2600 [ 283.963664][ T5935] pwc: recv_control_msg error -32 req 02 val 2900 [ 284.013592][ T8885] 9pnet_fd: Insufficient options for proto=fd [ 284.179317][ T5935] pwc: recv_control_msg error -32 req 04 val 1100 [ 284.218544][ T5935] pwc: Registered as video103. [ 284.242561][ T5935] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input13 [ 284.299183][ T30] audit: type=1400 audit(1753682825.908:841): avc: denied { read } for pid=5187 comm="acpid" name="event4" dev="devtmpfs" ino=3049 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 284.476822][ T30] audit: type=1400 audit(1753682825.908:842): avc: denied { open } for pid=5187 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3049 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 284.491850][ T5935] usb 1-1: USB disconnect, device number 9 [ 285.070178][ T8896] netlink: 'syz.2.792': attribute type 1 has an invalid length. [ 285.090166][ T8896] 8021q: adding VLAN 0 to HW filter on device bond1 [ 285.106144][ T30] audit: type=1400 audit(1753682825.908:843): avc: denied { ioctl } for pid=5187 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3049 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 285.136007][ T8896] bond1: (slave geneve3): making interface the new active one [ 285.144211][ T8896] bond1: (slave geneve3): Enslaving as an active interface with an up link [ 285.195965][ T8896] bond1: entered promiscuous mode [ 285.201977][ T8896] geneve3: entered promiscuous mode [ 285.375027][ T8903] loop2: detected capacity change from 0 to 1 [ 285.401372][ T8903] ldm_validate_privheads(): Disk read failed. [ 285.411858][ T8903] Dev loop2: unable to read RDB block 1 [ 285.417935][ T8903] loop2: unable to read partition table [ 285.424236][ T8903] loop2: partition table beyond EOD, truncated [ 285.431828][ T8903] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 285.631969][ T5874] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 285.814168][ T5874] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 285.839909][ T5874] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 285.863980][ T5874] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.905937][ T5874] usb 1-1: config 0 descriptor?? [ 285.911081][ T48] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 285.929070][ T5874] pwc: Askey VC010 type 2 USB webcam detected. [ 286.060348][ T48] usb 5-1: device descriptor read/64, error -71 [ 286.359152][ T48] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 286.637158][ T5874] pwc: recv_control_msg error -32 req 02 val 2b00 [ 286.653724][ T5874] pwc: recv_control_msg error -32 req 02 val 2700 [ 286.667732][ T5874] pwc: recv_control_msg error -32 req 02 val 2c00 [ 286.676770][ T30] audit: type=1400 audit(1753682828.298:844): avc: denied { read } for pid=8900 comm="syz.0.795" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 287.199388][ T48] usb 5-1: device descriptor read/64, error -71 [ 287.206323][ T30] audit: type=1400 audit(1753682828.298:845): avc: denied { open } for pid=8900 comm="syz.0.795" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 287.333001][ T48] usb usb5-port1: attempt power cycle [ 287.670528][ T48] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 287.723857][ T48] usb 5-1: device descriptor read/8, error -71 [ 287.744484][ T30] audit: type=1400 audit(1753682829.358:846): avc: denied { create } for pid=8921 comm="syz.1.802" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 287.980178][ T48] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 288.033000][ T48] usb 5-1: device descriptor read/8, error -71 [ 288.150666][ T48] usb usb5-port1: unable to enumerate USB device [ 288.512993][ T30] audit: type=1400 audit(1753682830.078:847): avc: denied { mount } for pid=8938 comm="syz.2.807" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 288.576928][ T8941] sd 0:0:1:0: PR command failed: 1026 [ 288.582641][ T8941] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 288.589514][ T8941] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 288.757971][ T30] audit: type=1400 audit(1753682830.178:848): avc: denied { read } for pid=8938 comm="syz.2.807" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 288.779987][ T30] audit: type=1400 audit(1753682830.188:849): avc: denied { open } for pid=8938 comm="syz.2.807" path="/183/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 288.818044][ T8944] netlink: 36 bytes leftover after parsing attributes in process `syz.1.808'. [ 288.855352][ T8944] netlink: 16 bytes leftover after parsing attributes in process `syz.1.808'. [ 288.864302][ T30] audit: type=1400 audit(1753682830.188:850): avc: denied { ioctl } for pid=8938 comm="syz.2.807" path="/183/file0/file0" dev="fuse" ino=0 ioctlcmd=0x70cb scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 288.914260][ T5874] pwc: recv_control_msg error -71 req 04 val 1000 [ 288.933887][ T5874] pwc: recv_control_msg error -71 req 04 val 1300 [ 288.953190][ T5874] pwc: recv_control_msg error -71 req 04 val 1400 [ 288.971674][ T5874] pwc: recv_control_msg error -71 req 02 val 2000 [ 289.164908][ T5874] pwc: recv_control_msg error -71 req 02 val 2100 [ 289.171890][ T5874] pwc: recv_control_msg error -71 req 04 val 1500 [ 289.178681][ T5874] pwc: recv_control_msg error -71 req 02 val 2500 [ 289.185511][ T5874] pwc: recv_control_msg error -71 req 02 val 2400 [ 289.192338][ T5874] pwc: recv_control_msg error -71 req 02 val 2600 [ 289.199105][ T5874] pwc: recv_control_msg error -71 req 02 val 2900 [ 289.206782][ T5874] pwc: recv_control_msg error -71 req 02 val 2800 [ 289.315355][ T5828] Bluetooth: hci3: adv larger than maximum supported [ 289.315493][ T5828] Bluetooth: hci3: Unknown advertising packet type: 0x20 [ 289.322449][ T5828] Bluetooth: hci3: Malformed LE Event: 0x0d [ 289.605894][ T5874] pwc: recv_control_msg error -71 req 04 val 1100 [ 289.612812][ T5874] pwc: recv_control_msg error -71 req 04 val 1200 [ 289.624925][ T5874] pwc: Registered as video103. [ 289.681710][ T5874] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input14 [ 289.728427][ T5874] usb 1-1: USB disconnect, device number 10 [ 290.003867][ T8964] FAULT_INJECTION: forcing a failure. [ 290.003867][ T8964] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 290.047400][ T8964] CPU: 1 UID: 0 PID: 8964 Comm: syz.0.812 Not tainted 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(full) [ 290.047428][ T8964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 290.047439][ T8964] Call Trace: [ 290.047445][ T8964] [ 290.047453][ T8964] dump_stack_lvl+0x16c/0x1f0 [ 290.047488][ T8964] should_fail_ex+0x512/0x640 [ 290.047518][ T8964] _copy_from_user+0x2e/0xd0 [ 290.047536][ T8964] __sys_bpf+0x21d/0x4ea0 [ 290.047562][ T8964] ? __pfx___sys_bpf+0x10/0x10 [ 290.047584][ T8964] ? ksys_write+0x190/0x250 [ 290.047611][ T8964] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 290.047642][ T8964] ? fput+0x70/0xf0 [ 290.047658][ T8964] ? ksys_write+0x1ac/0x250 [ 290.047680][ T8964] ? __pfx_ksys_write+0x10/0x10 [ 290.047707][ T8964] __x64_sys_bpf+0x78/0xc0 [ 290.047729][ T8964] ? lockdep_hardirqs_on+0x7c/0x110 [ 290.047753][ T8964] do_syscall_64+0xcd/0x4c0 [ 290.047770][ T8964] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.047786][ T8964] RIP: 0033:0x7f034918e9a9 [ 290.047799][ T8964] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 290.047814][ T8964] RSP: 002b:00007f034a0a3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 290.047831][ T8964] RAX: ffffffffffffffda RBX: 00007f03493b5fa0 RCX: 00007f034918e9a9 [ 290.047842][ T8964] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005 [ 290.047852][ T8964] RBP: 00007f034a0a3090 R08: 0000000000000000 R09: 0000000000000000 [ 290.047862][ T8964] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 290.047871][ T8964] R13: 0000000000000001 R14: 00007f03493b5fa0 R15: 00007ffcb4c37b08 [ 290.047892][ T8964] [ 290.453325][ T48] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 290.497989][ T8973] netlink: 'syz.0.817': attribute type 20 has an invalid length. [ 290.545176][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 290.545191][ T30] audit: type=1400 audit(1753682832.148:852): avc: denied { setopt } for pid=8969 comm="syz.0.817" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 290.623499][ T8973] dvmrp17: entered allmulticast mode [ 290.760438][ T8973] dvmrp17: left allmulticast mode [ 290.895658][ T8970] netlink: 24 bytes leftover after parsing attributes in process `syz.0.817'. [ 290.912739][ T48] usb 2-1: config 0 has an invalid interface number: 128 but max is 0 [ 290.926994][ T48] usb 2-1: config 0 has no interface number 0 [ 290.935725][ T48] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 290.944970][ T48] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.953291][ T48] usb 2-1: Product: syz [ 290.957506][ T48] usb 2-1: Manufacturer: syz [ 290.962321][ T48] usb 2-1: SerialNumber: syz [ 290.969582][ T48] usb 2-1: config 0 descriptor?? [ 290.974638][ T24] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 291.153205][ T24] usb 3-1: config 3 has an invalid interface number: 61 but max is 0 [ 291.161677][ T24] usb 3-1: config 3 has no interface number 0 [ 291.167786][ T24] usb 3-1: config 3 interface 61 has no altsetting 0 [ 291.178557][ T24] usb 3-1: string descriptor 0 read error: -22 [ 291.184910][ T24] usb 3-1: New USB device found, idVendor=0499, idProduct=101a, bcdDevice=44.26 [ 291.194143][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.214886][ T24] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 291.273742][ T24] snd-usb-audio 3-1:3.61: probe with driver snd-usb-audio failed with error -2 [ 291.425115][ T8972] 9pnet_fd: Insufficient options for proto=fd [ 291.433125][ T5935] usb 3-1: USB disconnect, device number 9 [ 292.292706][ T48] usb 2-1: Firmware version (0.0) predates our first public release. [ 292.391265][ T48] usb 2-1: Please update to version 0.2 or newer [ 293.492528][ T30] audit: type=1400 audit(1753682835.108:853): avc: denied { read } for pid=5497 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 293.859300][ T30] audit: type=1400 audit(1753682835.468:854): avc: denied { search } for pid=5497 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 293.996269][ T30] audit: type=1400 audit(1753682835.498:855): avc: denied { search } for pid=5497 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 294.026590][ T30] audit: type=1400 audit(1753682835.498:856): avc: denied { search } for pid=5497 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 294.321124][ T9010] afs: Unknown parameter 'GPL' [ 294.523255][ T30] audit: type=1400 audit(1753682835.498:857): avc: denied { read } for pid=5497 comm="dhcpcd" name="n113" dev="tmpfs" ino=4801 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 294.547655][ T30] audit: type=1400 audit(1753682835.498:858): avc: denied { open } for pid=5497 comm="dhcpcd" path="/run/udev/data/n113" dev="tmpfs" ino=4801 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 295.008704][ T30] audit: type=1400 audit(1753682835.498:859): avc: denied { getattr } for pid=5497 comm="dhcpcd" path="/run/udev/data/n113" dev="tmpfs" ino=4801 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 295.032090][ T30] audit: type=1400 audit(1753682836.618:860): avc: denied { create } for pid=9018 comm="syz.4.828" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 295.054538][ T5935] usb 2-1: USB disconnect, device number 14 [ 295.063293][ T30] audit: type=1400 audit(1753682836.668:861): avc: denied { write } for pid=9018 comm="syz.4.828" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 295.179963][ T9028] netlink: 108 bytes leftover after parsing attributes in process `syz.2.829'. [ 295.189628][ T9028] netlink: 8 bytes leftover after parsing attributes in process `syz.2.829'. [ 295.410860][ T9036] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 295.506318][ T9039] netlink: 108 bytes leftover after parsing attributes in process `syz.4.835'. [ 295.689454][ T9039] netlink: 8 bytes leftover after parsing attributes in process `syz.4.835'. [ 298.649023][ T9073] 9pnet_fd: Insufficient options for proto=fd [ 298.836115][ T9075] afs: Unknown parameter 'GPL' [ 300.303050][ T9097] afs: Unknown parameter 'GPL' [ 302.012319][ T9117] Bluetooth: MGMT ver 1.23 [ 302.017100][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 302.017114][ T30] audit: type=1400 audit(1753682843.628:864): avc: denied { bind } for pid=9116 comm="syz.1.859" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 302.160199][ T5935] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 302.235613][ T30] audit: type=1400 audit(1753682843.628:865): avc: denied { write } for pid=9116 comm="syz.1.859" path="socket:[23748]" dev="sockfs" ino=23748 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 302.916040][ T9121] netlink: 'syz.1.860': attribute type 4 has an invalid length. [ 303.282537][ T5935] usb 3-1: config 0 interface 0 altsetting 253 endpoint 0x81 has an invalid bInterval 36, changing to 9 [ 303.297675][ T5935] usb 3-1: config 0 interface 0 altsetting 253 endpoint 0x81 has invalid wMaxPacketSize 0 [ 303.307909][ T5935] usb 3-1: config 0 interface 0 has no altsetting 0 [ 303.324524][ T5935] usb 3-1: New USB device found, idVendor=0810, idProduct=0002, bcdDevice= 0.00 [ 303.333782][ T5935] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.349167][ T5935] usb 3-1: config 0 descriptor?? [ 303.912197][ T9138] netlink: 36 bytes leftover after parsing attributes in process `syz.4.865'. [ 303.923927][ T5935] pantherlord 0003:0810:0002.0005: unknown main item tag 0x0 [ 303.997100][ T5935] pantherlord 0003:0810:0002.0005: unknown main item tag 0x0 [ 304.010798][ T9138] netlink: 16 bytes leftover after parsing attributes in process `syz.4.865'. [ 304.029997][ T5935] pantherlord 0003:0810:0002.0005: unknown main item tag 0x0 [ 304.040684][ T5935] pantherlord 0003:0810:0002.0005: unknown main item tag 0x0 [ 304.052274][ T5935] pantherlord 0003:0810:0002.0005: unknown main item tag 0x0 [ 304.059755][ T5935] pantherlord 0003:0810:0002.0005: unknown main item tag 0x0 [ 304.150870][ T9112] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 304.159618][ T9112] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 304.200475][ T5935] pantherlord 0003:0810:0002.0005: unknown main item tag 0x0 [ 304.219126][ T5935] pantherlord 0003:0810:0002.0005: hidraw0: USB HID v0.00 Device [HID 0810:0002] on usb-dummy_hcd.2-1/input0 [ 304.255024][ T5935] pantherlord 0003:0810:0002.0005: no output reports found [ 304.940587][ T5840] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 306.630204][ T5840] usb 2-1: device descriptor read/64, error -71 [ 306.820210][ T5935] usb 3-1: USB disconnect, device number 10 [ 306.880242][ T5840] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 307.148700][ T5840] usb 2-1: device descriptor read/64, error -71 [ 307.250975][ T5840] usb usb2-port1: attempt power cycle [ 307.282562][ T9160] xt_TPROXY: Can be used only with -p tcp or -p udp [ 307.700696][ T30] audit: type=1400 audit(1753682849.318:866): avc: denied { ioctl } for pid=9155 comm="syz.3.872" path="socket:[23242]" dev="sockfs" ino=23242 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 307.741967][ C0] vkms_vblank_simulate: vblank timer overrun [ 307.794723][ T9167] tipc: Started in network mode [ 307.794752][ T9167] tipc: Node identity 42ce62dc414e, cluster identity 4711 [ 307.885916][ T9167] tipc: Enabled bearer , priority 0 [ 307.909487][ T9168] afs: Unknown parameter 'GPL' [ 308.314315][ T9173] Device name cannot be null; rc = [-22] [ 308.850558][ T30] audit: type=1400 audit(1753682850.458:867): avc: denied { write } for pid=9155 comm="syz.3.872" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 309.296068][ T5894] tipc: Node number set to 58745564 [ 309.325202][ T9159] syzkaller0: entered promiscuous mode [ 309.342401][ T9159] syzkaller0: entered allmulticast mode [ 309.360914][ T9159] tipc: Resetting bearer [ 309.492973][ T9155] tipc: Resetting bearer [ 309.610250][ T9185] netlink: 12 bytes leftover after parsing attributes in process `syz.4.877'. [ 309.860259][ T9] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 310.024726][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 310.061620][ T9] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 310.071765][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.088791][ T9] usb 2-1: config 0 descriptor?? [ 310.104050][ T9] pwc: Askey VC010 type 2 USB webcam detected. [ 310.358308][ T9192] 9pnet_fd: Insufficient options for proto=fd [ 311.001025][ T9] pwc: recv_control_msg error -32 req 02 val 2b00 [ 311.021125][ T9] pwc: recv_control_msg error -32 req 02 val 2700 [ 311.028910][ T9] pwc: recv_control_msg error -32 req 02 val 2c00 [ 311.039660][ T9] pwc: recv_control_msg error -32 req 04 val 1000 [ 311.069277][ T9] pwc: recv_control_msg error -32 req 04 val 1300 [ 311.090955][ T9] pwc: recv_control_msg error -32 req 04 val 1400 [ 311.103402][ T9] pwc: recv_control_msg error -32 req 02 val 2000 [ 311.112330][ T9] pwc: recv_control_msg error -32 req 02 val 2100 [ 311.119220][ T9] pwc: recv_control_msg error -32 req 04 val 1500 [ 311.127070][ T30] audit: type=1400 audit(1753682852.738:868): avc: denied { execute } for pid=9196 comm="syz.0.881" path="/dev/snd/pcmC0D0c" dev="devtmpfs" ino=1289 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 311.154500][ T9] pwc: recv_control_msg error -32 req 02 val 2500 [ 311.161591][ T9] pwc: recv_control_msg error -32 req 02 val 2400 [ 311.193133][ T9198] 9pnet_fd: Insufficient options for proto=fd [ 311.249366][ T9] pwc: recv_control_msg error -32 req 02 val 2600 [ 311.674759][ T9] pwc: recv_control_msg error -32 req 02 val 2900 [ 311.760173][ T5935] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 311.914918][ T9] pwc: recv_control_msg error -71 req 04 val 1100 [ 311.921514][ T5935] usb 1-1: Using ep0 maxpacket: 32 [ 311.927587][ T9] pwc: recv_control_msg error -71 req 04 val 1200 [ 311.942796][ T5935] usb 1-1: config 14 has an invalid interface number: 115 but max is 2 [ 311.956569][ T9] pwc: Registered as video103. [ 311.961635][ T5935] usb 1-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 311.978617][ T9] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input15 [ 311.996729][ T5935] usb 1-1: config 14 has 1 interface, different from the descriptor's value: 3 [ 312.021958][ T9] usb 2-1: USB disconnect, device number 18 [ 312.048604][ T5935] usb 1-1: config 14 has no interface number 0 [ 312.065422][ T5935] usb 1-1: config 14 interface 115 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 312.121562][ T5935] usb 1-1: config 14 interface 115 altsetting 8 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 312.138005][ T5935] usb 1-1: config 14 interface 115 altsetting 8 bulk endpoint 0x6 has invalid maxpacket 1023 [ 312.157130][ T5935] usb 1-1: config 14 interface 115 altsetting 8 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 312.169585][ T5935] usb 1-1: config 14 interface 115 altsetting 8 endpoint 0xC has invalid maxpacket 2039, setting to 64 [ 312.180978][ T5935] usb 1-1: config 14 interface 115 altsetting 8 has a duplicate endpoint with address 0xE, skipping [ 312.191896][ T5935] usb 1-1: config 14 interface 115 altsetting 8 has a duplicate endpoint with address 0xC, skipping [ 312.202833][ T5935] usb 1-1: config 14 interface 115 has no altsetting 0 [ 312.212210][ T5935] usb 1-1: New USB device found, idVendor=04e2, idProduct=1420, bcdDevice= 2.73 [ 312.214617][ T5887] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 312.230144][ T5935] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.238298][ T5935] usb 1-1: Product: 淍澮떤䄦爻됨ශ弄潽垳ᳯϲ鏪쉚觜뒞豽哳䒶 [ 312.247412][ T5935] usb 1-1: Manufacturer: 䀊 [ 312.252119][ T5935] usb 1-1: SerialNumber: 檯䧓栘젊⯱➾⵬ặ袗㓉䍧茨ᤫɡ䔟蔰陒볡썵뮉ꪡ斀פּ฾骰㊓3㉧霊툼艹彝쵧꟟翸릐ꀼ鳜ཱ릖鰋麺ࣞﶄ괕뗱聩쀤橳郌烽䳉啀줁鮨㦋䠥ޑ焴侄⼏늤ᵠᓵᷡ믛잸⎝䔱虑ꬖ렁莸䔜띱泾⮉ꘗ袗턠서菶뫈묬딥犴듯귶᠐璯羼莐羉駸䚃픐㨽ﯼ [ 312.284247][ C0] vkms_vblank_simulate: vblank timer overrun [ 312.316847][ T9197] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 312.324777][ T9197] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 312.382125][ T5887] usb 5-1: Using ep0 maxpacket: 32 [ 312.389567][ T5887] usb 5-1: config 14 has an invalid interface number: 115 but max is 2 [ 312.399027][ T5887] usb 5-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 312.409466][ T5887] usb 5-1: config 14 has 1 interface, different from the descriptor's value: 3 [ 312.418864][ T5887] usb 5-1: config 14 has no interface number 0 [ 312.425274][ T5887] usb 5-1: config 14 interface 115 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 312.436979][ T5887] usb 5-1: config 14 interface 115 altsetting 8 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 312.448362][ T5887] usb 5-1: config 14 interface 115 altsetting 8 bulk endpoint 0x6 has invalid maxpacket 1023 [ 312.461440][ T5887] usb 5-1: config 14 interface 115 altsetting 8 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 312.476858][ T5887] usb 5-1: config 14 interface 115 altsetting 8 endpoint 0xC has invalid maxpacket 2039, setting to 64 [ 312.488907][ T5887] usb 5-1: config 14 interface 115 altsetting 8 has a duplicate endpoint with address 0xE, skipping [ 312.502431][ T5887] usb 5-1: config 14 interface 115 altsetting 8 has a duplicate endpoint with address 0xC, skipping [ 312.517810][ T5887] usb 5-1: config 14 interface 115 has no altsetting 0 [ 312.533345][ T5887] usb 5-1: New USB device found, idVendor=04e2, idProduct=1420, bcdDevice= 2.73 [ 312.544931][ T5887] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.563619][ T5887] usb 5-1: Product: 淍澮떤䄦爻됨ශ弄潽垳ᳯϲ鏪쉚觜뒞豽哳䒶 [ 312.590940][ T5887] usb 5-1: Manufacturer: 䀊 [ 312.595585][ T5887] usb 5-1: SerialNumber: 檯䧓栘젊⯱➾⵬ặ袗㓉䍧茨ᤫɡ䔟蔰陒볡썵뮉ꪡ斀פּ฾骰㊓3㉧霊툼艹彝쵧꟟翸릐ꀼ鳜ཱ릖鰋麺ࣞﶄ괕뗱聩쀤橳郌烽䳉啀줁鮨㦋䠥ޑ焴侄⼏늤ᵠᓵᷡ믛잸⎝䔱虑ꬖ렁莸䔜띱泾⮉ꘗ袗턠서菶뫈묬딥犴듯귶᠐璯羼莐羉駸䚃픐㨽ﯼ [ 312.656146][ T9203] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 312.664018][ T9203] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 312.774719][ T5935] xr_serial 1-1:14.115: More than one union descriptor, skipping ... [ 313.006535][ T9226] netlink: 16 bytes leftover after parsing attributes in process `syz.1.886'. [ 313.026041][ T5935] usb 1-1: USB disconnect, device number 11 [ 313.104128][ T5887] xr_serial 5-1:14.115: More than one union descriptor, skipping ... [ 313.365980][ T5887] usb 5-1: USB disconnect, device number 17 [ 313.434325][ T9155] tipc: Disabling bearer [ 314.236098][ T9236] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 315.148641][ T9249] loop2: detected capacity change from 0 to 1 [ 315.586729][ T9256] afs: Unknown parameter 'GPL' [ 315.782194][ T9249] ldm_validate_privheads(): Disk read failed. [ 315.799908][ T9249] Dev loop2: unable to read RDB block 1 [ 315.814550][ T9249] loop2: unable to read partition table [ 315.825518][ T9249] loop2: partition table beyond EOD, truncated [ 315.833960][ T9249] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 316.506695][ T9273] netlink: 8 bytes leftover after parsing attributes in process `syz.0.897'. [ 316.517665][ T9273] netlink: 8 bytes leftover after parsing attributes in process `syz.0.897'. [ 316.526692][ T9273] netlink: 8 bytes leftover after parsing attributes in process `syz.0.897'. [ 316.535962][ T9273] netlink: 8 bytes leftover after parsing attributes in process `syz.0.897'. [ 316.545601][ T9273] netlink: 8 bytes leftover after parsing attributes in process `syz.0.897'. [ 317.345997][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.557032][ T30] audit: type=1400 audit(1753682859.168:869): avc: denied { create } for pid=9285 comm="syz.3.905" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 317.817200][ T9288] afs: Unknown parameter 'GPL' [ 318.175184][ T9290] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 318.566724][ T30] audit: type=1400 audit(1753682860.178:870): avc: denied { write } for pid=9292 comm="syz.2.907" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 318.805218][ T9296] binder: 9292:9296 ioctl c0306201 0 returned -14 [ 318.981137][ T30] audit: type=1400 audit(1753682860.538:871): avc: denied { mount } for pid=9295 comm="syz.0.906" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 319.971019][ T9305] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 320.087838][ T24] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 320.806528][ T24] usb 1-1: New USB device found, idVendor=13d8, idProduct=0011, bcdDevice=30.62 [ 320.893871][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.931781][ T24] usb 1-1: Product: syz [ 320.944046][ T24] usb 1-1: Manufacturer: syz [ 320.954235][ T24] usb 1-1: SerialNumber: syz [ 321.132722][ T24] usb 1-1: config 0 descriptor?? [ 321.160653][ T24] comedi comedi5: This driver needs USB 2.0 to operate. Aborting... [ 321.187208][ T24] usbduxfast 1-1:0.0: driver 'usbduxfast' failed to auto-configure device. [ 321.356794][ T24] usb 1-1: USB disconnect, device number 12 [ 321.467432][ T9321] afs: Unknown parameter 'GPL' [ 321.917002][ T9323] 9pnet_fd: Insufficient options for proto=fd [ 322.078128][ T9326] afs: Unknown parameter 'GPL' [ 322.944286][ T9335] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 323.214943][ T9339] netlink: 12 bytes leftover after parsing attributes in process `syz.4.921'. [ 323.913179][ T30] audit: type=1400 audit(1753682864.828:872): avc: denied { ioctl } for pid=9336 comm="syz.4.921" path="socket:[24301]" dev="sockfs" ino=24301 ioctlcmd=0x48d5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 325.862539][ T9372] afs: Unknown parameter 'GPL' [ 330.196083][ T30] audit: type=1400 audit(1753682871.788:873): avc: denied { write } for pid=9414 comm="syz.4.943" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 330.297647][ T9418] bridge0: port 3(team0) entered blocking state [ 330.305406][ T9418] bridge0: port 3(team0) entered disabled state [ 330.312689][ T9418] team0: entered allmulticast mode [ 330.317929][ T9418] team_slave_0: entered allmulticast mode [ 330.325565][ T9418] team_slave_1: entered allmulticast mode [ 330.332375][ T9418] vlan0: entered allmulticast mode [ 330.338505][ T9418] veth0_vlan: entered allmulticast mode [ 330.379370][ T9418] team0: entered promiscuous mode [ 330.385213][ T9418] team_slave_0: entered promiscuous mode [ 330.395656][ T9418] team_slave_1: entered promiscuous mode [ 330.460840][ T9418] devpts: Bad value for 'max' [ 330.468790][ T30] audit: type=1400 audit(1753682871.798:874): avc: denied { wake_alarm } for pid=9414 comm="syz.4.943" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 330.489766][ C1] vkms_vblank_simulate: vblank timer overrun [ 330.499653][ T30] audit: type=1400 audit(1753682872.058:875): avc: denied { append } for pid=9407 comm="syz.1.941" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 330.770538][ T30] audit: type=1400 audit(1753682872.068:876): avc: denied { mount } for pid=9407 comm="syz.1.941" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 330.792668][ T30] audit: type=1400 audit(1753682872.068:877): avc: denied { remount } for pid=9407 comm="syz.1.941" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 330.813473][ T30] audit: type=1400 audit(1753682872.348:878): avc: denied { unmount } for pid=5832 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 330.927082][ T9422] netlink: 'syz.2.945': attribute type 21 has an invalid length. [ 330.952702][ T9422] netlink: 'syz.2.945': attribute type 6 has an invalid length. [ 331.010460][ T9422] netlink: 132 bytes leftover after parsing attributes in process `syz.2.945'. [ 331.506744][ T9433] Device name cannot be null; rc = [-22] [ 331.620449][ T30] audit: type=1400 audit(1753682873.228:879): avc: denied { write } for pid=9431 comm="syz.4.948" name="001" dev="devtmpfs" ino=724 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 331.796250][ T30] audit: type=1400 audit(1753682873.408:880): avc: denied { map } for pid=9431 comm="syz.4.948" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 331.796310][ T5835] Bluetooth: hci3: unexpected event for opcode 0x2031 [ 332.256234][ T9443] netlink: 'syz.2.950': attribute type 4 has an invalid length. [ 333.116409][ T917] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 333.301284][ T9470] 9pnet_fd: Insufficient options for proto=fd [ 333.427714][ T917] usb 3-1: Using ep0 maxpacket: 32 [ 333.452801][ T917] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 333.474189][ T917] usb 3-1: config 0 interface 0 has no altsetting 0 [ 333.481268][ T917] usb 3-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 333.490702][ T917] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.612515][ T917] usb 3-1: config 0 descriptor?? [ 333.665954][ T9479] 9pnet_fd: Insufficient options for proto=fd [ 333.891895][ T917] usbhid 3-1:0.0: can't add hid device: -71 [ 333.897911][ T917] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 334.238440][ T917] usb 3-1: USB disconnect, device number 11 [ 335.285241][ T9502] netlink: 'syz.2.969': attribute type 21 has an invalid length. [ 335.294167][ T9502] netlink: 'syz.2.969': attribute type 6 has an invalid length. [ 335.301925][ T9502] netlink: 132 bytes leftover after parsing attributes in process `syz.2.969'. [ 335.350185][ T5840] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 335.436623][ T9505] netlink: 108 bytes leftover after parsing attributes in process `syz.2.971'. [ 335.482552][ T9505] netlink: 8 bytes leftover after parsing attributes in process `syz.2.971'. [ 336.134252][ T5840] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 336.147517][ T5840] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 336.158684][ T5840] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 336.168164][ T5840] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.182439][ T5840] usb 1-1: config 0 descriptor?? [ 336.306750][ T30] audit: type=1400 audit(1753682877.918:881): avc: denied { create } for pid=9509 comm="syz.1.972" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 336.343616][ T9512] netlink: 108 bytes leftover after parsing attributes in process `syz.4.973'. [ 336.352795][ T9512] netlink: 8 bytes leftover after parsing attributes in process `syz.4.973'. [ 336.729083][ T5840] cp2112 0003:10C4:EA90.0006: unknown main item tag 0x0 [ 336.764074][ T5840] cp2112 0003:10C4:EA90.0006: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 336.944184][ T5840] cp2112 0003:10C4:EA90.0006: error requesting version [ 336.959692][ T5840] cp2112 0003:10C4:EA90.0006: probe with driver cp2112 failed with error -71 [ 337.441511][ T5840] usb 1-1: USB disconnect, device number 13 [ 337.707334][ T9530] netlink: 16 bytes leftover after parsing attributes in process `syz.3.978'. [ 337.910302][ T117] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 338.731597][ T117] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 338.988654][ T117] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 339.011993][ T117] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 339.026483][ T117] usb 2-1: New USB device strings: Mfr=0, Product=13, SerialNumber=0 [ 339.068428][ T117] usb 2-1: Product: syz [ 339.337370][ T9528] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 339.474114][ T117] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 340.028506][ T30] audit: type=1400 audit(1753682881.638:882): avc: denied { ioctl } for pid=9535 comm="syz.3.981" path="socket:[25762]" dev="sockfs" ino=25762 ioctlcmd=0x8981 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 340.805646][ T9554] netlink: 12 bytes leftover after parsing attributes in process `syz.3.986'. [ 341.395189][ T9557] 9pnet_fd: Insufficient options for proto=fd [ 342.372295][ T9566] afs: Unknown parameter 'GPL' [ 342.434731][ T9568] loop2: detected capacity change from 0 to 1 [ 342.444959][ T5837] ldm_validate_privheads(): Disk read failed. [ 342.451943][ T5837] Dev loop2: unable to read RDB block 1 [ 342.457681][ T5837] loop2: unable to read partition table [ 342.473698][ T5837] loop2: partition table beyond EOD, truncated [ 342.494409][ T9568] ldm_validate_privheads(): Disk read failed. [ 342.518624][ T9568] Dev loop2: unable to read RDB block 1 [ 342.541619][ T9568] loop2: unable to read partition table [ 342.556904][ T9568] loop2: partition table beyond EOD, truncated [ 342.577855][ T9568] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 342.930358][ T9570] afs: Unknown parameter 'GPL' [ 343.152721][ T9577] 9pnet_fd: Insufficient options for proto=fd [ 343.233785][ T24] usb 2-1: USB disconnect, device number 19 [ 344.643138][ T9593] loop2: detected capacity change from 0 to 1 [ 344.670848][ T9593] ldm_validate_privheads(): Disk read failed. [ 344.676970][ T9593] Dev loop2: unable to read RDB block 1 [ 344.683017][ T9593] loop2: unable to read partition table [ 344.688739][ T9593] loop2: partition table beyond EOD, truncated [ 345.151610][ T9593] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 345.387763][ T9606] afs: Unknown parameter 'GPL' [ 345.484142][ T24] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 346.075390][ T9613] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1006'. [ 346.167914][ T9613] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1006'. [ 346.414338][ T24] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 346.504015][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.593880][ T24] usb 1-1: Product: syz [ 346.609705][ T24] usb 1-1: Manufacturer: syz [ 346.660298][ T24] usb 1-1: SerialNumber: syz [ 346.691858][ T24] usb 1-1: config 0 descriptor?? [ 346.726775][ T24] ch341 1-1:0.0: ch341-uart converter detected [ 346.933735][ T24] usb 1-1: failed to receive control message: -121 [ 346.953987][ T30] audit: type=1326 audit(1753682888.538:883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9594 comm="syz.0.1001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f034918e9a9 code=0x7ffc0000 [ 346.978196][ T30] audit: type=1326 audit(1753682888.538:884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9594 comm="syz.0.1001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f034918e9a9 code=0x7ffc0000 [ 347.000549][ T9634] syz.2.1011 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 347.014631][ T24] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -121 [ 347.192050][ T9638] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1010'. [ 347.532286][ T9640] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1014'. [ 347.694507][ T30] audit: type=1326 audit(1753682888.538:885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9594 comm="syz.0.1001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f034918e5ab code=0x7ffc0000 [ 348.113227][ T30] audit: type=1326 audit(1753682888.538:886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9594 comm="syz.0.1001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f034918e5ab code=0x7ffc0000 [ 348.178886][ T30] audit: type=1326 audit(1753682888.548:887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9594 comm="syz.0.1001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f03491c1265 code=0x7ffc0000 [ 348.205878][ T30] audit: type=1326 audit(1753682888.828:888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9594 comm="syz.0.1001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f034918e9a9 code=0x7ffc0000 [ 348.317472][ T30] audit: type=1326 audit(1753682888.828:889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9594 comm="syz.0.1001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f034918e9a9 code=0x7ffc0000 [ 348.349423][ T30] audit: type=1326 audit(1753682889.218:890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9594 comm="syz.0.1001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f034918e9a9 code=0x7ffc0000 [ 348.355813][ T9652] ip6tnl1: entered promiscuous mode [ 348.376774][ T30] audit: type=1326 audit(1753682889.218:891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9594 comm="syz.0.1001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f034918e9a9 code=0x7ffc0000 [ 348.465586][ T9654] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1015'. [ 348.809346][ T30] audit: type=1326 audit(1753682889.228:892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9594 comm="syz.0.1001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f034918e9a9 code=0x7ffc0000 [ 348.837944][ T9652] ip6tnl1: entered allmulticast mode [ 348.858625][ T9652] team0: Device ip6tnl1 is up. Set it down before adding it as a team port [ 349.678033][ T9666] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1020'. [ 349.720199][ T9666] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1020'. [ 349.852768][ T5935] usb 1-1: USB disconnect, device number 14 [ 349.861463][ T5935] ch341 1-1:0.0: device disconnected [ 350.056501][ T9683] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 350.710283][ T24] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 351.661558][ T24] usb 1-1: config 0 has an invalid interface number: 9 but max is 0 [ 351.669655][ T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 351.681977][ T24] usb 1-1: config 0 has no interface number 0 [ 351.691574][ T24] usb 1-1: New USB device found, idVendor=0421, idProduct=0302, bcdDevice=45.e8 [ 351.702193][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.722455][ T24] usb 1-1: config 0 descriptor?? [ 351.743862][ T24] rndis_host 1-1:0.9: More than one union descriptor, skipping ... [ 351.751929][ T24] usb 1-1: bad CDC descriptors [ 351.757917][ T24] cdc_acm 1-1:0.9: More than one union descriptor, skipping ... [ 351.999359][ T24] usb 1-1: USB disconnect, device number 15 [ 353.655368][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 353.655383][ T30] audit: type=1400 audit(1753682895.268:912): avc: denied { map } for pid=9733 comm="syz.3.1041" path="socket:[26037]" dev="sockfs" ino=26037 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 355.462115][ T9752] pim6reg: entered allmulticast mode [ 355.586416][ T30] audit: type=1400 audit(1753682897.188:913): avc: denied { mount } for pid=9753 comm="syz.1.1047" name="/" dev="configfs" ino=1137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 355.609051][ C1] vkms_vblank_simulate: vblank timer overrun [ 355.749789][ T30] audit: type=1400 audit(1753682897.198:914): avc: denied { read } for pid=9753 comm="syz.1.1047" name="/" dev="configfs" ino=1137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 355.771830][ T30] audit: type=1400 audit(1753682897.198:915): avc: denied { open } for pid=9753 comm="syz.1.1047" path="/222/file0" dev="configfs" ino=1137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 355.794481][ C1] vkms_vblank_simulate: vblank timer overrun [ 355.867226][ T9769] FAULT_INJECTION: forcing a failure. [ 355.867226][ T9769] name failslab, interval 1, probability 0, space 0, times 0 [ 355.879949][ T9769] CPU: 1 UID: 0 PID: 9769 Comm: syz.3.1049 Not tainted 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(full) [ 355.879972][ T9769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 355.879982][ T9769] Call Trace: [ 355.879988][ T9769] [ 355.879995][ T9769] dump_stack_lvl+0x16c/0x1f0 [ 355.880035][ T9769] should_fail_ex+0x512/0x640 [ 355.880065][ T9769] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 355.880094][ T9769] should_failslab+0xc2/0x120 [ 355.880111][ T9769] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 355.880136][ T9769] ? __alloc_skb+0x2b2/0x380 [ 355.880166][ T9769] __alloc_skb+0x2b2/0x380 [ 355.880190][ T9769] ? __pfx___alloc_skb+0x10/0x10 [ 355.880218][ T9769] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 355.880243][ T9769] netlink_alloc_large_skb+0x69/0x130 [ 355.880264][ T9769] netlink_sendmsg+0x6a1/0xdd0 [ 355.880288][ T9769] ? __pfx_netlink_sendmsg+0x10/0x10 [ 355.880309][ T9769] ? __pfx_netlink_sendmsg+0x10/0x10 [ 355.880333][ T9769] ____sys_sendmsg+0xa98/0xc70 [ 355.880355][ T9769] ? copy_msghdr_from_user+0x10a/0x160 [ 355.880371][ T9769] ? __pfx_____sys_sendmsg+0x10/0x10 [ 355.880403][ T9769] ___sys_sendmsg+0x134/0x1d0 [ 355.880417][ T9769] ? irqentry_exit+0x3b/0x90 [ 355.880434][ T9769] ? __pfx____sys_sendmsg+0x10/0x10 [ 355.880448][ T9769] ? __lock_acquire+0x622/0x1c90 [ 355.880494][ T9769] __sys_sendmsg+0x16d/0x220 [ 355.880511][ T9769] ? __pfx___sys_sendmsg+0x10/0x10 [ 355.880543][ T9769] do_syscall_64+0xcd/0x4c0 [ 355.880562][ T9769] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.880579][ T9769] RIP: 0033:0x7feae418e9a9 [ 355.880593][ T9769] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 355.880609][ T9769] RSP: 002b:00007feae4f2c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 355.880625][ T9769] RAX: ffffffffffffffda RBX: 00007feae43b6160 RCX: 00007feae418e9a9 [ 355.880636][ T9769] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 000000000000000b [ 355.880646][ T9769] RBP: 00007feae4f2c090 R08: 0000000000000000 R09: 0000000000000000 [ 355.880656][ T9769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 355.880665][ T9769] R13: 0000000000000000 R14: 00007feae43b6160 R15: 00007ffd4941ffb8 [ 355.880688][ T9769] [ 356.104786][ C1] vkms_vblank_simulate: vblank timer overrun [ 356.115930][ T24] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 356.300851][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 356.313968][ T24] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 356.322891][ T24] usb 2-1: config 179 has no interface number 0 [ 356.329772][ T24] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 64, changing to 10 [ 356.341425][ T24] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 1029, setting to 1024 [ 356.352945][ T24] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 356.364456][ T24] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 356.374855][ T24] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 356.388423][ T24] usb 2-1: config 179 interface 65 has no altsetting 0 [ 356.395491][ T24] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 356.424915][ T9776] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1050'. [ 356.451900][ T9775] ./file0: Can't open blockdev [ 356.986804][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.286103][ T30] audit: type=1400 audit(1753682898.058:916): avc: denied { execute } for pid=9774 comm="syz.0.1052" path="/sys/kernel/debug/binder/stats" dev="debugfs" ino=1853 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=file permissive=1 [ 357.306235][ T9764] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 357.361708][ T30] audit: type=1400 audit(1753682898.058:917): avc: denied { create } for pid=9774 comm="syz.0.1052" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 357.394533][ T9776] vlan0: entered promiscuous mode [ 357.407270][ T9776] team0: Port device vlan0 added [ 357.584988][ T5894] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 357.590132][ T30] audit: type=1400 audit(1753682898.068:918): avc: denied { mounton } for pid=9774 comm="syz.0.1052" path="/196/file0" dev="tmpfs" ino=1094 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 357.663483][ T30] audit: type=1400 audit(1753682898.068:919): avc: denied { read write } for pid=9774 comm="syz.0.1052" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 357.692670][ T30] audit: type=1400 audit(1753682898.068:920): avc: denied { open } for pid=9774 comm="syz.0.1052" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 357.854028][ T24] usb 2-1: can't set config #179, error -71 [ 357.869796][ T24] usb 2-1: USB disconnect, device number 20 [ 357.937926][ T5894] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 357.960259][ T30] audit: type=1400 audit(1753682898.898:921): avc: denied { unlink } for pid=5829 comm="syz-executor" name="file0" dev="tmpfs" ino=1094 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 357.964171][ T5894] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.545647][ T9793] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1057'. [ 358.712741][ T5894] usb 4-1: Product: syz [ 358.717016][ T5894] usb 4-1: Manufacturer: syz [ 358.721692][ T5894] usb 4-1: SerialNumber: syz [ 358.768235][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 358.768249][ T30] audit: type=1400 audit(1753682900.378:924): avc: denied { setopt } for pid=9798 comm="syz.0.1058" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 358.810155][ T30] audit: type=1400 audit(1753682900.418:925): avc: denied { write } for pid=9798 comm="syz.0.1058" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 358.819162][ T9802] netlink: 'syz.4.1059': attribute type 4 has an invalid length. [ 358.832610][ T30] audit: type=1400 audit(1753682900.418:926): avc: denied { read } for pid=9798 comm="syz.0.1058" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 358.983152][ T9806] input: syz1 as /devices/virtual/input/input16 [ 359.266313][ T9813] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1063'. [ 359.278134][ T9813] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1063'. [ 359.281974][ T9811] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1061'. [ 359.789054][ T30] audit: type=1400 audit(1753682901.398:927): avc: denied { setopt } for pid=9808 comm="syz.1.1061" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 359.808368][ C1] vkms_vblank_simulate: vblank timer overrun [ 359.823637][ T9811] vlan0 (unregistering): left allmulticast mode [ 359.834774][ T9811] veth0_vlan (unregistering): left allmulticast mode [ 359.835398][ T9818] [U] [ 359.844584][ T9818] [U] [ 359.847261][ T9818] [U] [ 359.849925][ T9818] [U] [ 359.854298][ T9818] [U] [ 359.854369][ T9811] team0: Port device vlan0 removed [ 359.856979][ T9818] [U] [ 359.857007][ T9818] [U] [ 359.867439][ T9818] [U] [ 359.873669][ T5894] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 359.880338][ T5894] cdc_ncm 4-1:1.0: setting tx_max = 184 [ 359.901991][ T9818] [U] [ 359.904729][ T9818] [U] [ 359.907429][ T9818] [U] [ 359.910127][ T9818] [U] [ 359.912949][ T9818] [U] [ 359.915627][ T9818] [U] [ 359.918286][ T9818] [U] [ 359.920968][ T9818] [U] [ 359.923785][ T9818] [U] [ 359.926491][ T9818] [U] [ 359.929180][ T9818] [U] [ 359.931868][ T9818] [U] [ 359.934912][ T9818] [U] [ 359.937608][ T9818] [U] [ 359.940294][ T9818] [U] [ 359.942983][ T9818] [U] [ 359.974676][ T9818] [U] [ 359.977391][ T9818] [U] [ 359.980052][ T9818] [U] [ 359.982722][ T9818] [U] [ 359.989562][ T9818] [U] [ 359.992259][ T9818] [U] [ 359.994922][ T9818] [U] [ 359.997588][ T9818] [U] [ 360.001447][ T9818] [U] [ 360.004136][ T9818] [U] [ 360.006802][ T9818] [U] [ 360.009462][ T9818] [U] [ 360.012249][ T9818] [U] [ 360.014949][ T9818] [U] [ 360.017624][ T9818] [U] [ 360.020302][ T9818] [U] [ 360.023260][ T9818] [U] [ 360.025933][ T9818] [U] [ 360.028610][ T9818] [U] [ 360.031272][ T9818] [U] [ 360.034064][ T9818] [U] [ 360.036737][ T9818] [U] [ 360.039399][ T9818] [U] [ 360.042084][ T9818] [U] [ 360.045724][ T9818] [U] [ 360.048431][ T9818] [U] [ 360.051666][ T9818] [U] [ 360.051693][ T9818] [U] [ 360.057438][ T9818] [U] [ 360.057465][ T9818] [U] [ 360.057490][ T9818] [U] [ 360.057515][ T9818] [U] [ 360.057751][ T9818] [U] [ 360.057775][ T9818] [U] [ 360.057799][ T9818] [U] [ 360.057828][ T9818] [U] [ 360.057880][ T9818] [U] [ 360.057907][ T9818] [U] [ 360.057933][ T9818] [U] [ 360.057960][ T9818] [U] [ 360.058018][ T9818] [U] [ 360.058045][ T9818] [U] [ 360.058073][ T9818] [U] [ 360.058100][ T9818] [U] [ 360.058140][ T9818] [U] [ 360.058167][ T9818] [U] [ 360.058192][ T9818] [U] [ 360.058214][ T9818] [U] [ 360.058263][ T9818] [U] [ 360.058285][ T9818] [U] [ 360.058308][ T9818] [U] [ 360.058331][ T9818] [U] [ 360.058355][ T9818] [U] [ 360.058381][ T9818] [U] [ 360.058403][ T9818] [U] [ 360.058425][ T9818] [U] [ 360.058472][ T9818] [U] [ 360.058495][ T9818] [U] [ 360.058518][ T9818] [U] [ 360.058540][ T9818] [U] [ 360.058564][ T9818] [U] [ 360.058591][ T9818] [U] [ 360.058614][ T9818] [U] [ 360.058637][ T9818] [U] [ 360.058684][ T9818] [U] [ 360.058707][ T9818] [U] [ 360.058729][ T9818] [U] [ 360.058752][ T9818] [U] [ 360.058777][ T9818] [U] [ 360.058804][ T9818] [U] [ 360.058827][ T9818] [U] [ 360.058850][ T9818] [U] [ 360.058897][ T9818] [U] [ 360.058921][ T9818] [U] [ 360.058943][ T9818] [U] [ 360.058966][ T9818] [U] [ 360.058992][ T9818] [U] [ 360.059018][ T9818] [U] [ 360.059040][ T9818] [U] [ 360.059063][ T9818] [U] [ 360.059110][ T9818] [U] [ 360.059138][ T9818] [U] [ 360.059161][ T9818] [U] [ 360.059183][ T9818] [U] [ 360.059208][ T9818] [U] [ 360.059234][ T9818] [U] [ 360.059257][ T9818] [U] [ 360.059280][ T9818] [U] [ 360.059326][ T9818] [U] [ 360.059350][ T9818] [U] [ 360.059373][ T9818] [U] [ 360.059396][ T9818] [U] [ 360.059421][ T9818] [U] [ 360.059447][ T9818] [U] [ 360.059470][ T9818] [U] [ 360.059494][ T9818] [U] [ 360.059542][ T9818] [U] [ 360.059565][ T9818] [U] [ 360.059588][ T9818] [U] [ 360.059611][ T9818] [U] [ 360.059636][ T9818] [U] [ 360.059662][ T9818] [U] [ 360.059685][ T9818] [U] [ 360.329675][ T9808] [U] [ 360.464078][ T5894] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 360.540636][ T9820] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 360.568852][ T9820] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 360.583143][ T9820] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 360.603708][ T9820] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 360.717316][ T917] usb 4-1: USB disconnect, device number 18 [ 360.854953][ T917] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM (NO ZLP) [ 361.368350][ T30] audit: type=1400 audit(1753682902.978:928): avc: denied { read open } for pid=9839 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1844 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 361.393741][ C1] vkms_vblank_simulate: vblank timer overrun [ 361.549643][ T30] audit: type=1400 audit(1753682902.978:929): avc: denied { getattr } for pid=9839 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1844 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 361.574931][ C1] vkms_vblank_simulate: vblank timer overrun [ 361.865005][ T5935] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 362.093430][ T5935] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 362.136150][ T5935] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 362.191006][ T30] audit: type=1400 audit(1753682903.788:930): avc: denied { add_name } for pid=9832 comm="dhcpcd-run-hook" name="resolv.conf.usb0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 362.226706][ T5935] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.591062][ T5935] usb 4-1: config 0 descriptor?? [ 362.596717][ T30] audit: type=1400 audit(1753682903.788:931): avc: denied { create } for pid=9832 comm="dhcpcd-run-hook" name="resolv.conf.usb0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 362.619221][ T5828] Bluetooth: hci3: command 0x0c1a tx timeout [ 362.625362][ T5835] Bluetooth: hci4: command 0x0406 tx timeout [ 362.631029][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 362.633262][ T5935] pwc: Askey VC010 type 2 USB webcam detected. [ 362.639182][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 363.062444][ T30] audit: type=1400 audit(1753682903.788:932): avc: denied { write } for pid=9832 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.usb0.link" dev="tmpfs" ino=5523 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 363.163046][ T30] audit: type=1400 audit(1753682903.788:933): avc: denied { append } for pid=9832 comm="dhcpcd-run-hook" name="resolv.conf.usb0.link" dev="tmpfs" ino=5523 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 363.275376][ T9870] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1077'. [ 363.287113][ T9870] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1077'. [ 363.347496][ T5935] pwc: recv_control_msg error -32 req 02 val 2b00 [ 363.354695][ T5935] pwc: recv_control_msg error -32 req 02 val 2700 [ 363.364307][ T5935] pwc: recv_control_msg error -32 req 02 val 2c00 [ 363.396160][ T5935] pwc: recv_control_msg error -32 req 04 val 1000 [ 363.419173][ T5935] pwc: recv_control_msg error -32 req 04 val 1300 [ 363.443305][ T5935] pwc: recv_control_msg error -32 req 04 val 1400 [ 363.459497][ T5935] pwc: recv_control_msg error -32 req 02 val 2000 [ 363.469758][ T5935] pwc: recv_control_msg error -32 req 02 val 2100 [ 363.490949][ T5935] pwc: recv_control_msg error -32 req 04 val 1500 [ 363.501864][ T5935] pwc: recv_control_msg error -32 req 02 val 2500 [ 363.522590][ T5935] pwc: recv_control_msg error -32 req 02 val 2400 [ 363.549406][ T117] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 363.558428][ T5935] pwc: recv_control_msg error -32 req 02 val 2600 [ 363.714535][ T117] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 363.734721][ T117] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 363.775670][ T5935] pwc: recv_control_msg error -71 req 02 val 2800 [ 363.788103][ T117] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.854083][ T5935] pwc: recv_control_msg error -71 req 04 val 1100 [ 363.946210][ T5935] pwc: recv_control_msg error -71 req 04 val 1200 [ 363.987935][ T117] usb 3-1: config 0 descriptor?? [ 364.101055][ T5935] pwc: Registered as video103. [ 364.143747][ T117] pwc: Askey VC010 type 2 USB webcam detected. [ 364.246282][ T5935] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input17 [ 364.623651][ T5935] usb 4-1: USB disconnect, device number 19 [ 364.636960][ T117] pwc: recv_control_msg error -32 req 02 val 2b00 [ 364.686026][ T117] pwc: recv_control_msg error -32 req 02 val 2700 [ 364.721455][ T117] pwc: recv_control_msg error -32 req 02 val 2c00 [ 364.757002][ T117] pwc: recv_control_msg error -32 req 04 val 1000 [ 364.776846][ T117] pwc: recv_control_msg error -32 req 04 val 1300 [ 364.990139][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 364.990155][ T30] audit: type=1400 audit(1753682906.598:936): avc: denied { write } for pid=9883 comm="syz.0.1080" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 365.025754][ T117] pwc: recv_control_msg error -32 req 04 val 1400 [ 365.210186][ T117] pwc: recv_control_msg error -32 req 02 val 2000 [ 365.238047][ T9895] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1081'. [ 365.264598][ T117] pwc: recv_control_msg error -32 req 02 val 2100 [ 365.287895][ T9895] netlink: 432 bytes leftover after parsing attributes in process `syz.3.1081'. [ 365.298625][ T117] pwc: recv_control_msg error -32 req 04 val 1500 [ 365.314238][ T117] pwc: recv_control_msg error -32 req 02 val 2500 [ 365.314468][ T9895] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1081'. [ 365.325128][ T117] pwc: recv_control_msg error -32 req 02 val 2400 [ 365.382607][ T117] pwc: recv_control_msg error -32 req 02 val 2600 [ 365.398362][ T117] pwc: recv_control_msg error -71 req 02 val 2900 [ 365.432755][ T9895] input: syz1 as /devices/virtual/input/input18 [ 365.444679][ T117] pwc: recv_control_msg error -71 req 02 val 2800 [ 365.475684][ T117] pwc: recv_control_msg error -71 req 04 val 1100 [ 365.490413][ T917] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 365.498460][ T117] pwc: recv_control_msg error -71 req 04 val 1200 [ 365.541668][ T117] pwc: Registered as video103. [ 365.569330][ T117] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input19 [ 365.625183][ T117] usb 3-1: USB disconnect, device number 12 [ 365.679968][ T917] usb 2-1: Using ep0 maxpacket: 16 [ 365.697804][ T917] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 365.760145][ T917] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 365.787022][ T917] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 365.797878][ T9913] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1087'. [ 365.812955][ T917] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 365.827351][ T9913] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1087'. [ 365.850168][ T917] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 365.999679][ T917] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 366.019702][ T917] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 366.042080][ T917] usb 2-1: Manufacturer: syz [ 366.576710][ T917] usb 2-1: config 0 descriptor?? [ 366.599585][ T9922] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1090'. [ 366.609236][ T9922] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1090'. [ 366.942708][ T917] rc_core: IR keymap rc-hauppauge not found [ 366.969482][ T917] Registered IR keymap rc-empty [ 366.997506][ T917] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 367.020468][ T917] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 367.208601][ T117] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 367.208827][ T917] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 367.889473][ T917] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input20 [ 367.915574][ T917] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 367.941957][ T917] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 367.966987][ T917] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 368.572550][ T917] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 368.670281][ T917] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 368.673766][ T117] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 368.690232][ T917] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 368.710629][ T917] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 368.730174][ T917] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 368.808461][ T117] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 368.834634][ T117] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.876531][ T117] usb 4-1: config 0 descriptor?? [ 368.878801][ T917] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 368.920197][ T917] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 368.970379][ T917] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 368.988853][ T117] pwc: Askey VC010 type 2 USB webcam detected. [ 369.029773][ T917] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 369.186986][ T9950] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1097'. [ 369.196504][ T9950] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1097'. [ 369.349640][ T917] usb 2-1: USB disconnect, device number 21 [ 369.457244][ T117] pwc: recv_control_msg error -32 req 02 val 2b00 [ 369.628922][ T117] pwc: recv_control_msg error -32 req 02 val 2700 [ 369.651597][ T9959] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1100'. [ 370.479171][ T117] pwc: recv_control_msg error -32 req 02 val 2c00 [ 370.496595][ T9959] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1100'. [ 370.515116][ T117] pwc: recv_control_msg error -32 req 04 val 1000 [ 370.532174][ T117] pwc: recv_control_msg error -32 req 04 val 1300 [ 370.558539][ T117] pwc: recv_control_msg error -32 req 04 val 1400 [ 370.574807][ T117] pwc: recv_control_msg error -32 req 02 val 2000 [ 370.599000][ T117] pwc: recv_control_msg error -32 req 02 val 2100 [ 370.611118][ T117] pwc: recv_control_msg error -32 req 04 val 1500 [ 370.619990][ T117] pwc: recv_control_msg error -32 req 02 val 2500 [ 370.630671][ T117] pwc: recv_control_msg error -32 req 02 val 2400 [ 370.639162][ T117] pwc: recv_control_msg error -32 req 02 val 2600 [ 370.853430][ T117] pwc: recv_control_msg error -71 req 02 val 2800 [ 370.868947][ T117] pwc: recv_control_msg error -71 req 04 val 1100 [ 370.888277][ T9972] 9pnet_fd: Insufficient options for proto=fd [ 370.895474][ T117] pwc: recv_control_msg error -71 req 04 val 1200 [ 370.903448][ T117] pwc: Registered as video103. [ 370.909810][ T117] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input21 [ 370.948648][ T117] usb 4-1: USB disconnect, device number 20 [ 371.677290][ T9981] 9pnet_fd: Insufficient options for proto=fd [ 372.071438][ T117] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 372.344497][ T30] audit: type=1400 audit(1753682913.938:937): avc: denied { connect } for pid=9988 comm="syz.3.1108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 372.401501][ T117] usb 1-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 372.411969][ T117] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.420249][ T117] usb 1-1: Product: syz [ 372.434353][ T117] usb 1-1: Manufacturer: syz [ 372.576975][ T9935] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 372.626851][ T117] usb 1-1: SerialNumber: syz [ 372.656076][ T117] usb 1-1: config 0 descriptor?? [ 372.682037][ T117] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 372.810259][ T9935] usb 3-1: Using ep0 maxpacket: 16 [ 372.819286][ T9935] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 372.830447][ T9935] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 372.855494][ T9935] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 372.868735][ T9935] usb 3-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 372.885555][ T9935] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.896487][ T9935] usb 3-1: config 0 descriptor?? [ 373.086988][ T9984] Invalid option length (57448) for dns_resolver key [ 373.090672][ T117] gspca_sunplus: reg_r err -32 [ 373.104627][ T117] sunplus 1-1:0.0: probe with driver sunplus failed with error -32 [ 373.118849][ T117] usb 1-1: USB disconnect, device number 16 [ 373.170198][ T5935] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 374.063333][ T30] audit: type=1400 audit(1753682915.678:938): avc: denied { write } for pid=9987 comm="syz.2.1107" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 374.087241][T10007] random: crng reseeded on system resumption [ 374.328312][ T9935] shield 0003:0955:7214.0007: unknown main item tag 0x0 [ 374.835880][ T5935] usb 4-1: Using ep0 maxpacket: 32 [ 375.890013][ T9935] shield 0003:0955:7214.0007: unknown main item tag 0x0 [ 375.987550][ T5935] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 376.193341][ T9935] shield 0003:0955:7214.0007: unknown main item tag 0x0 [ 376.200495][ T5935] usb 4-1: can't read configurations, error -71 [ 376.206964][ T9935] shield 0003:0955:7214.0007: unknown main item tag 0x0 [ 376.214995][ T9935] shield 0003:0955:7214.0007: unknown main item tag 0x0 [ 376.225935][ T9935] input: HID 0955:7214 Haptics as /devices/virtual/input/input22 [ 376.254308][T10012] bridge0: port 4(syz_tun) entered blocking state [ 376.300182][T10012] bridge0: port 4(syz_tun) entered disabled state [ 376.397870][ T9935] shield 0003:0955:7214.0007: Registered Thunderstrike controller [ 376.413794][ T9935] shield 0003:0955:7214.0007: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.2-1/input0 [ 376.417032][T10012] syz_tun: entered allmulticast mode [ 376.626063][T10020] afs: Unknown parameter 'GPL' [ 377.095882][T10012] syz_tun: entered promiscuous mode [ 377.207217][ T30] audit: type=1400 audit(1753682918.818:939): avc: denied { mount } for pid=10010 comm="syz.1.1113" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 377.388019][ T24] usb 3-1: USB disconnect, device number 13 [ 377.389847][ T9] shield 0003:0955:7214.0007: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 377.490808][ T9] shield 0003:0955:7214.0007: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 377.502875][ T9] shield 0003:0955:7214.0007: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 377.514510][ T9] shield 0003:0955:7214.0007: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 377.543634][ T30] audit: type=1400 audit(1753682919.158:940): avc: denied { unmount } for pid=5832 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 377.998753][ T24] ------------[ cut here ]------------ [ 378.004253][ T24] workqueue: work disable count underflowed [ 378.010193][ T24] WARNING: CPU: 1 PID: 24 at kernel/workqueue.c:4328 enable_work+0x2f8/0x340 [ 378.018976][ T24] Modules linked in: [ 378.023382][ T24] CPU: 1 UID: 0 PID: 24 Comm: kworker/1:0 Not tainted 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(full) [ 378.035280][ T24] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 378.045439][ T24] Workqueue: usb_hub_wq hub_event [ 378.050473][ T24] RIP: 0010:enable_work+0x2f8/0x340 [ 378.055681][ T24] Code: 89 ee e8 eb e5 37 00 45 84 ed 0f 85 29 fe ff ff e8 fd ea 37 00 c6 05 cf 92 0d 0f 01 90 48 c7 c7 c0 09 ac 8b e8 69 f2 f6 ff 90 <0f> 0b 90 90 e9 06 fe ff ff 48 89 ef e8 a7 3f 9d 00 e9 aa fe ff ff [ 378.075284][ T24] RSP: 0018:ffffc900001e73c8 EFLAGS: 00010086 [ 378.081342][ T24] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffc90019c00000 [ 378.089298][ T24] RDX: 0000000000100000 RSI: ffffffff817af1b5 RDI: 0000000000000001 [ 378.097255][ T24] RBP: ffff88805bd9d730 R08: 0000000000000001 R09: 0000000000000000 [ 378.105214][ T24] R10: 0000000000000000 R11: 0000000000000001 R12: 1ffff9200003ce7a [ 378.113170][ T24] R13: 0000000000000000 R14: ffff88805bd9d728 R15: ffffffff8fe65240 [ 378.121126][ T24] FS: 0000000000000000(0000) GS:ffff888124820000(0000) knlGS:0000000000000000 [ 378.130052][ T24] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 378.136635][ T24] CR2: 0000200000182000 CR3: 0000000062dcf000 CR4: 00000000003526f0 [ 378.144603][ T24] Call Trace: [ 378.147873][ T24] [ 378.150798][ T24] ? __pfx_enable_work+0x10/0x10 [ 378.155736][ T24] ? __thermal_zone_cdev_unbind+0x6c/0x6a0 [ 378.161537][ T24] __cancel_work_sync+0xe7/0x130 [ 378.166465][ T24] thermal_zone_device_unregister+0x239/0x450 [ 378.172524][ T24] ? __pfx_shield_remove+0x10/0x10 [ 378.177622][ T24] power_supply_unregister+0x10a/0x150 [ 378.183071][ T24] shield_remove+0x75/0x130 [ 378.187559][ T24] ? __pfx_shield_remove+0x10/0x10 [ 378.192654][ T24] hid_device_remove+0xd1/0x260 [ 378.197494][ T24] ? __pfx_hid_device_remove+0x10/0x10 [ 378.202962][ T24] device_remove+0xc8/0x170 [ 378.207464][ T24] device_release_driver_internal+0x44b/0x620 [ 378.213538][ T24] bus_remove_device+0x22f/0x420 [ 378.218484][ T24] device_del+0x396/0x9f0 [ 378.222811][ T24] ? __pfx_device_del+0x10/0x10 [ 378.227655][ T24] ? do_raw_spin_lock+0x12c/0x2b0 [ 378.232693][ T24] hid_destroy_device+0x19c/0x240 [ 378.237730][ T24] usbhid_disconnect+0xa0/0xe0 [ 378.242497][ T24] usb_unbind_interface+0x1dd/0x9a0 [ 378.247699][ T24] ? kernfs_remove_by_name_ns+0xbe/0x110 [ 378.253326][ T24] ? __pfx_usb_unbind_interface+0x10/0x10 [ 378.259040][ T24] device_remove+0x125/0x170 [ 378.263624][ T24] device_release_driver_internal+0x44b/0x620 [ 378.269679][ T24] bus_remove_device+0x22f/0x420 [ 378.274626][ T24] device_del+0x396/0x9f0 [ 378.278952][ T24] ? __pfx_device_del+0x10/0x10 [ 378.283797][ T24] ? kobject_put+0x210/0x5a0 [ 378.288384][ T24] usb_disable_device+0x355/0x7d0 [ 378.293417][ T24] usb_disconnect+0x2e1/0x9c0 [ 378.298096][ T24] hub_event+0x1c81/0x4fe0 [ 378.302526][ T24] ? __lock_acquire+0xb8a/0x1c90 [ 378.307455][ T24] ? __pfx_hub_event+0x10/0x10 [ 378.312233][ T24] ? assoc_array_apply_edit+0x560/0x6c0 [ 378.317771][ T24] ? finish_task_switch.isra.0+0x221/0xc10 [ 378.323580][ T24] ? rcu_is_watching+0x12/0xc0 [ 378.328341][ T24] process_one_work+0x9cc/0x1b70 [ 378.333271][ T24] ? __pfx_process_one_work+0x10/0x10 [ 378.338658][ T24] ? assign_work+0x1a0/0x250 [ 378.343252][ T24] worker_thread+0x6c8/0xf10 [ 378.347858][ T24] ? __pfx_worker_thread+0x10/0x10 [ 378.352963][ T24] kthread+0x3c2/0x780 [ 378.357024][ T24] ? __pfx_kthread+0x10/0x10 [ 378.361602][ T24] ? rcu_is_watching+0x12/0xc0 [ 378.366360][ T24] ? __pfx_kthread+0x10/0x10 [ 378.370936][ T24] ret_from_fork+0x5d4/0x6f0 [ 378.375520][ T24] ? __pfx_kthread+0x10/0x10 [ 378.380098][ T24] ret_from_fork_asm+0x1a/0x30 [ 378.384870][ T24] [ 378.387876][ T24] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 378.395139][ T24] CPU: 1 UID: 0 PID: 24 Comm: kworker/1:0 Not tainted 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(full) [ 378.407025][ T24] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 378.417067][ T24] Workqueue: usb_hub_wq hub_event [ 378.422086][ T24] Call Trace: [ 378.425348][ T24] [ 378.428262][ T24] dump_stack_lvl+0x3d/0x1f0 [ 378.432846][ T24] panic+0x71c/0x800 [ 378.436732][ T24] ? __pfx_panic+0x10/0x10 [ 378.441147][ T24] ? show_trace_log_lvl+0x29b/0x3e0 [ 378.446361][ T24] ? enable_work+0x2f8/0x340 [ 378.450938][ T24] check_panic_on_warn+0xab/0xb0 [ 378.455866][ T24] __warn+0xf6/0x3c0 [ 378.459744][ T24] ? enable_work+0x2f8/0x340 [ 378.464320][ T24] report_bug+0x3c3/0x580 [ 378.468641][ T24] ? enable_work+0x2f8/0x340 [ 378.473217][ T24] handle_bug+0x184/0x210 [ 378.477533][ T24] exc_invalid_op+0x17/0x50 [ 378.482027][ T24] asm_exc_invalid_op+0x1a/0x20 [ 378.486867][ T24] RIP: 0010:enable_work+0x2f8/0x340 [ 378.492051][ T24] Code: 89 ee e8 eb e5 37 00 45 84 ed 0f 85 29 fe ff ff e8 fd ea 37 00 c6 05 cf 92 0d 0f 01 90 48 c7 c7 c0 09 ac 8b e8 69 f2 f6 ff 90 <0f> 0b 90 90 e9 06 fe ff ff 48 89 ef e8 a7 3f 9d 00 e9 aa fe ff ff [ 378.511643][ T24] RSP: 0018:ffffc900001e73c8 EFLAGS: 00010086 [ 378.517697][ T24] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffc90019c00000 [ 378.525651][ T24] RDX: 0000000000100000 RSI: ffffffff817af1b5 RDI: 0000000000000001 [ 378.533605][ T24] RBP: ffff88805bd9d730 R08: 0000000000000001 R09: 0000000000000000 [ 378.541560][ T24] R10: 0000000000000000 R11: 0000000000000001 R12: 1ffff9200003ce7a [ 378.549513][ T24] R13: 0000000000000000 R14: ffff88805bd9d728 R15: ffffffff8fe65240 [ 378.557472][ T24] ? __warn_printk+0x1a5/0x350 [ 378.562229][ T24] ? enable_work+0x2f7/0x340 [ 378.566803][ T24] ? __pfx_enable_work+0x10/0x10 [ 378.571733][ T24] ? __thermal_zone_cdev_unbind+0x6c/0x6a0 [ 378.577530][ T24] __cancel_work_sync+0xe7/0x130 [ 378.582462][ T24] thermal_zone_device_unregister+0x239/0x450 [ 378.588513][ T24] ? __pfx_shield_remove+0x10/0x10 [ 378.593608][ T24] power_supply_unregister+0x10a/0x150 [ 378.599056][ T24] shield_remove+0x75/0x130 [ 378.603543][ T24] ? __pfx_shield_remove+0x10/0x10 [ 378.608637][ T24] hid_device_remove+0xd1/0x260 [ 378.613478][ T24] ? __pfx_hid_device_remove+0x10/0x10 [ 378.618928][ T24] device_remove+0xc8/0x170 [ 378.623424][ T24] device_release_driver_internal+0x44b/0x620 [ 378.629496][ T24] bus_remove_device+0x22f/0x420 [ 378.634429][ T24] device_del+0x396/0x9f0 [ 378.638744][ T24] ? __pfx_device_del+0x10/0x10 [ 378.643578][ T24] ? do_raw_spin_lock+0x12c/0x2b0 [ 378.648595][ T24] hid_destroy_device+0x19c/0x240 [ 378.653611][ T24] usbhid_disconnect+0xa0/0xe0 [ 378.658361][ T24] usb_unbind_interface+0x1dd/0x9a0 [ 378.663554][ T24] ? kernfs_remove_by_name_ns+0xbe/0x110 [ 378.669175][ T24] ? __pfx_usb_unbind_interface+0x10/0x10 [ 378.674886][ T24] device_remove+0x125/0x170 [ 378.679469][ T24] device_release_driver_internal+0x44b/0x620 [ 378.685523][ T24] bus_remove_device+0x22f/0x420 [ 378.690454][ T24] device_del+0x396/0x9f0 [ 378.694769][ T24] ? __pfx_device_del+0x10/0x10 [ 378.699602][ T24] ? kobject_put+0x210/0x5a0 [ 378.704182][ T24] usb_disable_device+0x355/0x7d0 [ 378.709202][ T24] usb_disconnect+0x2e1/0x9c0 [ 378.713882][ T24] hub_event+0x1c81/0x4fe0 [ 378.718304][ T24] ? __lock_acquire+0xb8a/0x1c90 [ 378.723229][ T24] ? __pfx_hub_event+0x10/0x10 [ 378.727981][ T24] ? assoc_array_apply_edit+0x560/0x6c0 [ 378.733511][ T24] ? finish_task_switch.isra.0+0x221/0xc10 [ 378.739314][ T24] ? rcu_is_watching+0x12/0xc0 [ 378.744067][ T24] process_one_work+0x9cc/0x1b70 [ 378.749000][ T24] ? __pfx_process_one_work+0x10/0x10 [ 378.754363][ T24] ? assign_work+0x1a0/0x250 [ 378.758937][ T24] worker_thread+0x6c8/0xf10 [ 378.763521][ T24] ? __pfx_worker_thread+0x10/0x10 [ 378.768614][ T24] kthread+0x3c2/0x780 [ 378.772667][ T24] ? __pfx_kthread+0x10/0x10 [ 378.777252][ T24] ? rcu_is_watching+0x12/0xc0 [ 378.782004][ T24] ? __pfx_kthread+0x10/0x10 [ 378.786580][ T24] ret_from_fork+0x5d4/0x6f0 [ 378.791164][ T24] ? __pfx_kthread+0x10/0x10 [ 378.795740][ T24] ret_from_fork_asm+0x1a/0x30 [ 378.800502][ T24] [ 378.803723][ T24] Kernel Offset: disabled [ 378.808036][ T24] Rebooting in 86400 seconds..