last executing test programs: 9.263063133s ago: executing program 0 (id=1221): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x20040, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_opts(r4, 0x0, 0x9, 0x0, &(0x7f0000000280)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpgrp(0x0) sched_setaffinity(r5, 0xfffffffffffffdbe, &(0x7f00000000c0)=0x20000b) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x2, 0x0) sched_setscheduler(r5, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r6 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000004600)={&(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x3, 0x3}}, 0x10, &(0x7f0000004400)=[{&(0x7f0000000480)="17c1ca741088176365190907b2f0e49dd393429364a25f81cf34a7e043b969d4c7297b811710179d73033db76bb639de679d947cf07db111312f41de51ee2131ba85ab9b98a4e0fe85004621f60f50144f7a8a8bddaa1c80f6e6d935cf317c7dab020982a9fa830d84b8346365e2e3", 0x6f}, {&(0x7f0000000500)="a8d1a8a03065dd5e8b43556ef1261d4c14b181e63d19239af8f7dae696fc7c60073e1845cd8ff1d1a5018a76cc8e45f3d2d0234077811a5317c47eeaf667a0fa206e0e398bc3b478c1f3501deaa764b9bbb56b", 0x53}, {&(0x7f00000005c0)="422834c07822627bbf3344", 0xb}, {&(0x7f0000000600)="2211d5853ddc0da2250759a7739b0e100e9e11a4572f23a132a351309377e0d06936018c2d4e401a59f7b51d5da40358c228ff7b8d7826356bc6ffdf547ae72e9f4be2bd8e9448bb2fc2608bf4b45358cbb5a8dce82003518026416ba8cc1b6b6a0135e8bab876d40420cbc92e688791ae4c33c9c536b506ddaeda4cec6f2db183be21500a4cb7a39f7f4790ef4eddeec7b21e257affb038fd1accc2e45c9c5f21538e64ba441e901c7efb6107921e8df96b51a025a5e3ceec01fc2e2fbf68e19d9197e5cf6164fcc21008d6eb673db18604", 0xd2}, {&(0x7f0000000700)="eea2fd68172390d2fc6c2fed2b1da591d5af7c501d611e1d79d07cc875505cb1891ab534e63e3d736b41d0a5a7", 0x2d}, {&(0x7f0000003180)="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", 0x1000}, {&(0x7f0000004180)="f87ec031c3c56f2b367a04697f157aa07ef250575785107e53f925a249f14c4a1fbcb2e22f9ec8362835384a84fa21218ff51d6b4bed2607b5e385c0f4743806343ee777e100c7192f9a7821154f300a726a44a5fd9d40a0bd95f943b75d0b2d239a80ff669544d7505bb8f450354acc5e45085a607069cc3b311bf6d4a17566cf1591644bb6c1538589fac7e1e0716baa4ddcc478e4defed661498b3dbb70de5800f017ad0668c50d9b39aafadaf5e82b06da48cef4a8d0cea631b91cac9f3bcb000d0e9843cb8abbb37fcda4d57e489eb39a3b96", 0xd5}, {&(0x7f0000004280)="a771b5c79bff617a1f21bb3ce485d590cd1240f1eec825f5b92d079bc23f3530ab41dcb3ed0dc98096cd70a86aec9d8955a90b151bf8614af60602816a0cb2490fc302e990a7dfecf36110edde9e6c9fc97a6bc45711f821e8740cf217baa63eae921dcb6ce56f061320cd99e730bfe54c9d833efd65b22e7519b2c72a095d2c3fab495b9e1f272659f5777697f127969188901c5a8e0ec34b9c14", 0x9b}, {&(0x7f0000004340)="ecc170b03f6f546cc60475c260a6c7ece931f176d33e80c143e645bbe5b4bfa0e84764576a55aee33ae61f72d7be564b3059a65a6986e16d030b8160e12eecd44e4524ea60509916cffb5e11a638716feb8f5fe489551cda4386eb128ee2e0d8422b9f4835956f6fdb7009e94c0b93540c97f521dd93fbbe05d6e508a67f216b34a262e7b6d181d80b81fd2b81b4dd33d78e9299bebd735b090ad7b5", 0x9c}], 0x9, &(0x7f0000004500)="980be0cac4775870370a87d122226b46af37ad8492c890608bc5057fbbc7e3414e3c06bdfa71a2d3ef9b955e807ce519a871fb2b16d103bc8268391a42d2a47d5a508ebb53184a9b3aaaac364b758c9a3494a64414c87119c0a619a94ccffca86f7b90b62ad90ea7d82d7ffd7f431728d315f6a8fbc46a768d55f9932eab94edf49e157737c8b3b8c777242d33c6b486b917e1dd797fa5deedac506418d55c97ebeeefa09e20e4ed9a27a5016047c330ac9fa1dddfb086e4e22d40666c07a8db3c27c17bdb5ef69241139c7d76d998a12cc8b5990f1775e1db85bde5aec4ef7252e2f83fac1b4e6b9d", 0xe9, 0x20020470}, 0x1) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netstat\x00') lseek(r8, 0x3, 0x0) r9 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r9, &(0x7f0000000340)=[{{&(0x7f0000000380)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5, '\x00', 0x0}}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000100)="a0002883781ecc0e", 0x4008}], 0x6}}], 0x1, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) r10 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x400, 0x0) ioctl$SNDCTL_SYNTH_INFO(r10, 0xc08c5102, &(0x7f0000000340)={"f4239d20aa456885bd077fb175cd15c1d97c29bd3908d6acea695e46d6ba", 0x9, 0x2, 0x401, 0x5, 0x9a05, 0x8000, 0xa6ab, 0x6, [0x5, 0xd57e, 0x101, 0x1, 0xffff0000, 0x2, 0x5, 0x5, 0x7ff, 0x7b, 0x9, 0x8, 0x101, 0x4, 0x10, 0x5, 0x1, 0xffffffff, 0x35]}) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002240)={0xc4, r1, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0x90, 0xa8, @random="0752651174ff3ff3ef79be186b3cda098196fb0c8c8ab08526babfe2fdcfb72258dc31da62ebf3d201d35c0ac922dd2d43f24a6d92532c2ac97b73bb21fe084157c5316245faec0bba3cda97dabd336a3da1695d308015a5208b07e3d2a07b21e9e2a42713ab1510fb6491339cd6ab6ccbb82cd2ed584bcee3d14981f5e7f3e0cfd5569d9612c772baa436bb"}]}, 0xc4}, 0x1, 0x0, 0x0, 0x24000090}, 0x8884) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="5000000002060300000000000000000000000000050005000a000000050001000700000105000400000093000900020073797a310000000016000300686173683a10080c60f0496e65742c706f72742c6e65746221e9729a14a9c50000001df7d9a5ff"], 0x50}}, 0x0) 8.232301126s ago: executing program 0 (id=1222): sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x3c) (async) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x358}) (async) r2 = socket$l2tp(0x2, 0x2, 0x73) (async) symlink(0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x14, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000075a60701000000001000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70200000300ebff8500000086000000850000000e000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) (async) sendto$inet(r2, &(0x7f0000000240)="739f444434cd1119cd0b44a0f99dacc214155178ee5fbeb49ef57cd75510115f928e94e29c6cce0a58429414cb67e6158ead8e9cebc6f9cee4eae8f8e6c8175688687c425c00eea0f2a1a8ecfac608c8f48492dc9ca0fc6a73369d00c99bf2b982aea372d610116df7b9413f1c22025fb7f7e19041048740096014981c22b8677ef7b2f61a3acc42cd0bad194b370b56d2abc986095160eedcabbfb20488eea776a7219e6dc51071d86c906306c5349c6bd422f37be5483b15", 0xaa, 0x8081, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x640100fd}, 0xfffffffffffffcd2) (async) syz_usb_connect$cdc_ncm(0x0, 0x98, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902860002010000000904000001020d0000052406000105240000000d240f01000000000000e5ffff05241a"], 0x0) 8.127274484s ago: executing program 2 (id=1223): r0 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffe]}, 0x8) read(r0, &(0x7f0000000740)=""/384, 0x200008c0) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x6, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0xa9525000) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r2, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x80000001, 0x30}, 0xc) r3 = dup(r2) write$cgroup_subtree(r3, &(0x7f00000001c0)=ANY=[], 0x32600) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000000)={0x7, 0x5404, 0x204, 0x5, 0x4, 0x1, 0x1, 0x80000001}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r3, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0xffcc) r4 = socket$inet(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) r5 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0x2, &(0x7f0000000040)=0x9, 0x4) bind$inet(r5, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) fcntl$setsig(r1, 0xa, 0x7) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x20000, 0x0) fchown(r6, 0x0, 0x0) 7.848747584s ago: executing program 0 (id=1224): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xec, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x20}, 0x0, 0x0, 0x2, 0x0, 0xa, 0x0, 0xa0, 0x2e}}, [@migrate={0x9c, 0x11, [{@in=@loopback=0xac1414aa, @in=@broadcast, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@mcast2, 0x3c, 0x4, 0x0, 0x0, 0xa, 0xa}, {@in=@remote, @in6=@rand_addr=' \x01\x00', @in6=@local, @in6=@private2, 0x3c, 0x2, 0x0, 0x0, 0x8, 0x2}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) 7.466020972s ago: executing program 3 (id=1225): socket$nl_route(0x10, 0x3, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000001c0)={0x4000000, 0x1, 0x0, 'queue0\x00', 0x1c52}) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)=ANY=[@ANYBLOB="1400000004000000080000000600008000"], 0x50) r0 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x82) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000000)="26eba9fdb4cbab48929e1af151000000000000000500000000", 0x19}], 0x1) close_range(r0, r0, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'lo\x00'}) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) mknodat$null(0xffffffffffffff9c, 0x0, 0x400, 0x103) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0}, 0x40050) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000080)) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000040)=0xdfe5) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, &(0x7f0000000580), 0x4) syz_emit_ethernet(0x82, 0x0, 0x0) 6.501153008s ago: executing program 3 (id=1228): r0 = socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffffff, &(0x7f0000000280)='./bus\x00', 0x381844, 0x80) (async) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='./bus\x00', 0x381844, 0x80) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) (async) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x0, 0x0, 0x10002, 0xffffffffffffffff, 0x7fffffffffffffff, 0x7, 0x7}, 0x0) pipe2$watch_queue(0x0, 0x80) socket$inet_udp(0x2, 0x2, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$evdev(0x0, 0x2, 0x862b01) socket$nl_audit(0x10, 0x3, 0x9) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYRESHEX=r0, @ANYRES16=r3], 0x28}, 0x1, 0x0, 0x0, 0x6044}, 0x40008d0) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/igmp6\x00') socket$inet6_sctp(0xa, 0x1, 0x84) (async) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = socket(0x2, 0x80805, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000080)={r7}, 0x8) (async) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000080)={r7}, 0x8) preadv(r4, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x40000000, 0x0) ioprio_set$pid(0x0, 0x0, 0x4007) (async) ioprio_set$pid(0x0, 0x0, 0x4007) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x1002, 0x2}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x1, 0x0) (async) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x1, 0x0) 6.318888427s ago: executing program 0 (id=1229): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc01020301090212000100000000090401"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000010000)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) pread64(r1, 0x0, 0xea, 0x2) 6.160865712s ago: executing program 2 (id=1230): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000840)={'batadv_slave_0\x00', 0x0}) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010027bd70000000000000000000", @ANYRES32=r1, @ANYBLOB="004100000000000014002b8008000100", @ANYRES32=r3], 0x34}}, 0x4008000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETVNETBE(r4, 0x400454de, &(0x7f00000001c0)=0x1) write$tun(r4, &(0x7f0000000380)=ANY=[@ANYBLOB="3f2826bd15"], 0xfdef) 5.952772789s ago: executing program 2 (id=1232): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)='\x00\x00\x00', 0x3}, 0x1, 0x0, 0x0, 0x4000054}, 0x20010001) 5.776782724s ago: executing program 2 (id=1234): openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x3) r1 = syz_io_uring_setup(0x53a, &(0x7f0000000080)={0x0, 0x2, 0x3010, 0x3, 0x5}, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000200)=@IORING_OP_OPENAT={0x12, 0x8, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000540)='./file2\x00', 0x8, 0x121100, 0x23456}) r5 = syz_io_uring_setup(0xf04, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x3, 0x2dc}, &(0x7f0000000200)=0x0, &(0x7f0000000000), &(0x7f0000000080)=0x0) r8 = syz_ublk_add_dev(r5, r6, r3, r7, &(0x7f0000000800)={0x2e, 0x35, 0x0, r5, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xd000000000000, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000300)=@any_dev={0x1, 0xdf9, 0x0, 0x0, 0x1000, 0x5, 0x0, 0x0, 0x22}}}, 0x0) io_uring_enter(r1, 0x6516, 0x6d93, 0x8, 0x0, 0x0) r9 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(0xffffffffffffffff) r10 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440)={'syz', 0x0}, &(0x7f0000000200)="13", 0x1, 0xfffffffffffffffd) keyctl$read(0xb, r10, &(0x7f0000000240)=""/112, 0x349b7fa6) r11 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{0x0}], 0x1}, 0x40880) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}) socketpair(0x1, 0x1, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000580)=ANY=[@ANYRESDEC=r6, @ANYRESHEX=r5, @ANYBLOB="01002cbd700000100000010000000c0002000400000000000000100007800c00018008000100", @ANYRESOCT=r8, @ANYRES32=0x0], 0x3c}}, 0x4000004) syz_open_dev$evdev(&(0x7f00000001c0), 0xfffffffffffffff8, 0x10000) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000100)=r9, 0x4) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r9, &(0x7f00000004c0)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0), 0xffffffffffffffff, 0x7ff}}, 0x18) getpeername(0xffffffffffffffff, 0x0, 0x0) 5.703907156s ago: executing program 3 (id=1235): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e13d6a206419010015d4010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2703) syz_usb_connect$uac1(0x1, 0xf9, &(0x7f00000002c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x2b73, 0xa, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe7, 0x3, 0x1, 0xf, 0x40, 0xd8, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x5, 0x1, 0xff, 0x0, "", "ee39"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x8, 0x151, 0x30, 0x5}, @as_header={0x7, 0x24, 0x1, 0x6e, 0x7a}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x5, 0x3, 0x7, 0x7f, "d28fcc"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0xd, 0x1, 0x5, 0x2}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x2, 0x1, 0x1, "8dff0a6fa5b4564e18"}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x3, 0xc, 0x0, {0x7, 0x25, 0x1, 0x0, 0xc, 0x7fff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x4, 0x9, 0x0, 0x5, 0x40}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x508, 0x9, 0x5, "806a1d914b"}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x8, 0x3, 0x8, 0x5, "d4517926b4ace4bb"}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x2, 0x5, 0x6}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x9, 0x2, 0x5, 0x5, "6c8ce041"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0xa, 0x5, 0x1, 0x72, 0x1}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x7, 0xc9, 0x81, {0x7, 0x25, 0x1, 0x0, 0x48, 0x9}}}}}}}}]}}, &(0x7f0000000700)={0xa, &(0x7f00000003c0)={0xa, 0x6, 0x310, 0x1, 0x5, 0x8, 0x40, 0x6}, 0xd1, &(0x7f0000000400)={0x5, 0xf, 0xd1, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x12, 0x7, 0x7, 0x8001}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "67108652578ddc393b712e37a4f65a34"}, @ext_cap={0x7, 0x10, 0x2, 0x12, 0x3, 0xa, 0x3}, @generic={0x96, 0x10, 0xa, "12c51017d9e190c5ef6143e2bd87fb52c094a4dab3198f01f50509c4af77f2b8b036a4025e01d10a1c23e3f19a9bbcec18938dca86ac6cbfee210e9fc3aa3de8aed529fd5977a72a97a44efd8636d864ae0ca9b2b56c12de4c15cf7386ea0baa24169e781268cd6743caaad81510eac70bd9b5117ac7a7b3b82e25f136f10d364b6e663fea1fb4d11de2bcbba7f74fd1587414"}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "8682a8f25cb18aa0cbc7ba04aefca7cf"}]}, 0x5, [{0xce, &(0x7f0000000500)=@string={0xce, 0x3, "46b0033f359a74b94ec21a2f0451e5636f28101619a0be159757157a7e41a9bb4e1bdf770cdb2b7eb6195cc16852405993fd089fe0ac9d7e0c3cff83593f98b138291ab1d8db4a28c5dee614178bc8044173b1b20f119a44399b027073ccb69a9614978d273d5062b56ef3c97aa00c4091e747851be340181663e9693fce761787de5e764876376f0a7e7aa89278ca58ccb2d1bff638eba4fa8837202dc8ce3326943e1bf95b6b0b499e524ac8fd457b4dc7c1bb2982e62fc63c84206ba63f66342b47dc8db88ea8b6c24bce"}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x861}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x3c01}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x480a}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x438}}]}) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000280)={0x1, 0x10, 0x3, &(0x7f0000000080)={0x10, "b3d92cdddf96c2069064264ccf13376ea90238ed4d00"}}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f00000000c0)) 4.693611724s ago: executing program 2 (id=1238): socket$nl_route(0x10, 0x3, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000001c0)={0x4000000, 0x1, 0x0, 'queue0\x00', 0x1c52}) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)=ANY=[@ANYBLOB="1400000004000000080000000600008000"], 0x50) r0 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x82) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000000)="26eba9fdb4cbab48929e1af151000000000000000500000000", 0x19}], 0x1) close_range(r0, r0, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'lo\x00'}) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) mknodat$null(0xffffffffffffff9c, 0x0, 0x400, 0x103) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0}, 0x40050) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000080)) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000040)=0xdfe5) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) pipe2$watch_queue(0x0, 0x80) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, &(0x7f0000000580), 0x4) syz_emit_ethernet(0x82, 0x0, 0x0) 4.45265459s ago: executing program 4 (id=1240): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x5}}, './file0\x00'}) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x2, 0xffffffffffffffff, 0x1}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) mount(0x0, 0x0, &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x1, 0x3, 0xdddd1000, 0x1000, &(0x7f0000fea000/0x1000)=nil}) ioctl$KVM_CREATE_DEVICE(r2, 0xc018aec0, &(0x7f00000000c0)={0x1}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x1b) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe80, 0x6002, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e00806200000000002000aac141417e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) 4.320501173s ago: executing program 4 (id=1241): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000380)='/dev/comedi4\x00', 0x1, 0x0) rename(0x0, &(0x7f0000000240)='./file1\x00') bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000240), 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000000)=ANY=[@ANYRES8=0x0, @ANYRESHEX=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x30}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) r1 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r3 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r3, 0x11e, 0x83, 0x0, &(0x7f0000000400)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="5000000002060102000000000000000000000000050005000300000010000300686173683a69702c6d616300050004000100000005000400000000000900020073797a31000a154fa2a280bd8ff628d1"], 0x50}, 0x1, 0x0, 0x0, 0x30004090}, 0x0) setpriority(0x1, 0x0, 0x3) syz_io_uring_setup(0x45, &(0x7f0000000300)={0x0, 0xf20f, 0x40, 0x2, 0x1b}, &(0x7f0000000100), &(0x7f00000000c0), &(0x7f0000000000)) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x5) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04140601c9"], 0x9) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r1, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) close_range(r1, r2, 0x2) r7 = socket$kcm(0xa, 0xf, 0x106) sendmsg$kcm(r7, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) sendmsg$kcm(r7, &(0x7f0000000480)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r6, 0x7}, 0x80, 0x0, 0x0, 0x0, 0xfffffffffffffefd}, 0x4000011) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc01100, 0x0, 0x0, 0x0, 0x2) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000015c0)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a0878"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) ioctl$COMEDI_BUFCONFIG(r0, 0x8020640d, &(0x7f00000003c0)={0x1, 0x5, 0x7fffffff, 0x9}) 3.477770073s ago: executing program 0 (id=1243): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x6, 0xb}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)={'sit0\x00', 0x0, 0x8, 0x10, 0x7, 0x2, {{0x14, 0x4, 0x3, 0x1b, 0x50, 0x68, 0x0, 0x2, 0x4, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x23}, {[@lsrr={0x83, 0x7, 0xe2, [@local]}, @ssrr={0x89, 0xb, 0xd8, [@dev={0xac, 0x14, 0x14, 0x1e}, @rand_addr=0x64010102]}, @ssrr={0x89, 0x23, 0x3d, [@private=0xa010102, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @multicast2, @broadcast, @private=0xa010102, @broadcast]}, @ra={0x94, 0x4}]}}}}}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r2}, 0xc) 3.42267198s ago: executing program 0 (id=1244): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) ioctl$EXT4_IOC_MIGRATE(r1, 0xff08) getpid() mount$overlay(0x0, &(0x7f0000005100)='./file0\x00', &(0x7f00000054c0), 0xa, &(0x7f0000005500)={[{@index_on}, {@uuid_off}, {@default_permissions}, {@metacopy_on}, {@userxattr}], [{@subj_type}]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r2, &(0x7f0000005280)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000002c0)=""/160, 0xa0}, {&(0x7f0000000380)=""/143, 0x8f}, {0x0}], 0x3}, 0x2}, {{&(0x7f00000006c0)=@nfc_llcp, 0x80, &(0x7f00000070c0)=[{0x0}, {&(0x7f00000008c0)=""/68, 0x44}, {&(0x7f0000000880)=""/44, 0x2c}, {0x0}, {&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000005e00)=""/4096, 0x1000}, {&(0x7f0000006e00)=""/75, 0x4b}, {&(0x7f0000006e80)=""/182, 0xb6}, {&(0x7f0000006f40)=""/102, 0x66}, {&(0x7f0000006fc0)=""/199, 0xc7}], 0xa, &(0x7f00000019c0)=""/200, 0xc8}, 0x4}, {{&(0x7f0000001ac0)=@xdp, 0x80, &(0x7f0000001d00)=[{0x0}, {0x0}], 0x2}, 0x1ff}, {{0x0, 0x0, &(0x7f0000001f80)=[{&(0x7f0000001ec0)=""/5, 0x5}, {&(0x7f0000001f00)=""/2, 0x2}], 0x2, &(0x7f0000001980)=""/27, 0x1b}, 0x9}, {{&(0x7f0000001fc0)=@rc, 0x80, &(0x7f0000002240)=[{&(0x7f0000002040)=""/138, 0x8a}, {&(0x7f0000002100)=""/247, 0xf7}, {&(0x7f0000002200)=""/45, 0x2d}], 0x3}, 0x6}, {{0x0, 0x0, &(0x7f0000003680)=[{&(0x7f0000002300)=""/8, 0x8}, {&(0x7f0000002340)=""/51, 0x33}, {&(0x7f0000002380)=""/113, 0x71}, {&(0x7f0000002400)=""/8, 0x8}, {0x0}, {&(0x7f0000002500)=""/134, 0x86}, {0x0}, {&(0x7f00000035c0)=""/173, 0xad}], 0x8, &(0x7f0000003700)=""/247, 0xf7}, 0x4}, {{0x0, 0x0, &(0x7f0000003980)=[{&(0x7f0000003800)=""/21, 0x15}, {&(0x7f0000003840)=""/28, 0x1c}, {&(0x7f0000003880)=""/254, 0xfe}], 0x3, &(0x7f00000039c0)=""/145, 0x91}, 0x3}, {{&(0x7f0000003a80)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x80, &(0x7f0000003d80)=[{&(0x7f0000003b00)=""/158, 0x9e}, {&(0x7f0000003bc0)=""/249, 0xf9}, {&(0x7f0000003cc0)=""/22, 0x16}, {&(0x7f0000003d00)=""/109, 0x6d}], 0x4, &(0x7f0000003dc0)=""/94, 0x5e}, 0x48}, {{0x0, 0x0, &(0x7f0000005180)=[{&(0x7f0000003f40)=""/45, 0x2d}, {&(0x7f0000003f80)=""/9, 0x9}, {&(0x7f0000003fc0)=""/56, 0x38}, {0xfffffffffffffffe}, {&(0x7f0000004000)=""/235, 0xeb}, {&(0x7f0000004100)=""/4096, 0x1000}, {&(0x7f0000000180)=""/8, 0x8}, {&(0x7f0000005140)=""/23, 0x17}], 0x8}, 0x3ff}], 0x9, 0x2, 0x0) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) shutdown(r3, 0x1) connect$bt_rfcomm(r3, &(0x7f0000005dc0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x15}, 0xa) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r5 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x88002, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000100)=0xd) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_usb_control_io$uac3(0xffffffffffffffff, &(0x7f0000000980)={0x14, 0x0, 0x0}, &(0x7f0000000bc0)={0x44, &(0x7f00000009c0)=ANY=[@ANYBLOB="20e300000000"], 0x0, &(0x7f0000000a40)={0x0, 0x8, 0x1, 0x4e}, &(0x7f0000000a80)=ANY=[@ANYBLOB="2081011fffdd3e"], &(0x7f0000000ac0)={0x20, 0x82, 0x1, 'g'}, &(0x7f0000000b00)={0x20, 0x83, 0x2, "9aa9"}, 0x0, 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000001040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_MGMT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)={0x40, r6, 0x1, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0xfffffffffffffd56, 0x3, r8}, @void}}, [@NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x9}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x40}, @NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x1d}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x9}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x4800) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000004c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x390, 0x240, 0x0, 0x2d8, 0x0, 0x0, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@ip={@remote, @multicast2, 0xffffff00, 0x0, 'bridge_slave_1\x00', 'veth1_to_bond\x00', {}, {0xff}, 0x11, 0x3, 0x4}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x14}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0xff, 'veth1_macvtap\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11, 0x2, 0x71}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@empty, @dev={0xac, 0x14, 0x14, 0x23}, 0x0, 0x0, 'vlan1\x00', 'nr0\x00', {0xff}}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@local, @empty, 0xffffffff, 0xff, 'ip6erspan0\x00', '\x00', {0xff}, {}, 0x8, 0x1, 0x8}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x0, 0xf8}}}, {{@uncond, 0x0, 0x70, 0x98}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0xc, 0x8}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) r9 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r9, 0x0, 0x0) syz_usb_control_io$printer(r9, 0x0, 0x0) r10 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r10, 0xc0105b08, &(0x7f0000000040)) 3.421129473s ago: executing program 2 (id=1245): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x44, &(0x7f0000000140)=ANY=[@ANYBLOB="40274000000005edaeffffffffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)={0x1c, 0x3e, 0x229, 0x0, 0x25dfdbfc, {0xa}, [@typed={0x8, 0x0, 0x0, 0x0, @pid}]}, 0x1c}}, 0x8000) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="285aae9d0e201dbe5eb57cc0e79631257c6d3c76e7f1e95c440d0e1cf07d670233b7401a2ac01db89a8c1699ab39c86d41df733b092d877e6a98817faa8c0be97342eeadf16c9d81d3501911846130599894"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f0000000380)={0x6, @pix={0x2, 0x26, 0x34343459, 0x4, 0x2, 0x2, 0xa, 0x0, 0x1, 0x0, 0x2, 0x5}}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) syz_usb_control_io$lan78xx(r0, &(0x7f0000000300)={0x14, &(0x7f0000000240)={0x40, 0x30, 0x40, {0x40, 0x6, "31e942ebba02c0985e80a619c08f97acb46ff4a1fcc79e271f58c997f737b572346ea826aefa58ce7ad3801ffd38a7cf949b6fbb7a995401c36231d65287"}}, &(0x7f00000002c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x439}}}, &(0x7f0000000780)={0x34, &(0x7f0000000540)={0x40, 0x9, 0xe3, "1771a33b90e24d6986aa04b3ae844036a3f3607e5b6b339dc6239b477898fb187445074b80cb6bffbfaec765f040adec032b08a21e24b69171c12132c19ad65cd18ce688255b10edeb9442e9bcc501aecbee6ce2309680cede05cc857d8d12ef14b250e42f7193695d7cde39986645a76354a6f0e2aca92ef2e27b0082ecc8855d7be54f588f21f8321348d0ef2811849890ff40f5f8dd31dfa6bde5f291196541cc10482b6d5342c259d6805052c07b3d77eacf2c766beb483e2af79aa054a8f1921448dccb402f7164d28742641aa50375c5c47f7712e33b233cda264e0c97888951"}, &(0x7f0000000640)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000680)={0x0, 0x8, 0x1, 0x6}, &(0x7f00000006c0)={0xc0, 0xa1, 0x4, 0x4}, &(0x7f0000000700)={0x40, 0xa0, 0x4, 0xe}, &(0x7f0000000740)={0xc0, 0xa2, 0x2f, "97861113c73610cd5812cc51b6fc0e2d030cca582c223171f412f4992b1fc456ef0841d6ffc29d7bb47115831ab249"}}) prlimit64(r3, 0x3, &(0x7f0000000040)={0x5, 0x9}, &(0x7f0000000080)) 3.364384074s ago: executing program 4 (id=1246): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() getpriority(0x2, r0) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0100000008000000090000000900000001000000", @ANYRES32, @ANYBLOB="00000000000014f968ab1100"/23, @ANYRES32=0x0, @ANYBLOB="1106fdcf1a7e586824f67b24c283828a3ec7bd9338292f4ce488c051d4f6aa63109b3008d60b70c2c2b12865d141f696a225b7cb29faa0d61163f4e4b6878b8132555698beff8057bcd2699ae1cea51a3b5cbb725a5fa75b60fb1ee61beeae2115f01f985927e264b47342dfb2265e6070235bd0fc5745006031f87fb5c39c49454998cc28f55cfc4a2ee7d9575c01eac882184b3ecb5cfa14c61e5c9e958d86dc62ad6fb13c8b67971d97b1b9266e0371ce190adb26e86f7c044b5a5c91", @ANYBLOB='\x00'/28], 0x50) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, r3}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r3, 0xffffffffffffffff}, &(0x7f0000000800), &(0x7f0000000840)}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x19, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b705000008000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0x70000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) setrlimit(0x8, &(0x7f0000000200)={0xfffffffffffffff7, 0x9}) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'ip6erspan0\x00'}) r8 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r8, 0x0, 0x6) fchdir(r9) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x300, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) mount(&(0x7f0000000300), &(0x7f00000001c0)='./file0\x00', &(0x7f0000000080)='ubifs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x14b302, 0x8c) 2.45268836s ago: executing program 4 (id=1247): r0 = socket(0x1e, 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10122, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0xa2) fcntl$setlease(r1, 0x400, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) madvise(&(0x7f000015c000/0x3000)=nil, 0x3000, 0x4) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='\x00', 0x1000) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', r3, 0x0, 0x41) mknodat$null(r4, &(0x7f0000000040)='./file1\x00', 0x8114, 0x103) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f00000000c0)) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000000)={'bridge0\x00', 0x7}) 2.383533565s ago: executing program 3 (id=1248): openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs2/custom1\x00', 0x6, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, 0x0, 0x5c}], 0x1, 0x51, &(0x7f0000000180)=[@efer={0x2, 0x901}], 0x1) r5 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOGETCMAP(r6, 0x4604, &(0x7f0000000600)={0x9, 0x0, 0x0, &(0x7f0000002880), 0x0, 0x0}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) r8 = socket(0x10, 0x2, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000f00)=ANY=[@ANYBLOB="840100001a000100feffffff00010000ac1e01010000000000000000000000000001000107174e2300050a0000203a00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000fc010000000000000000000000000001fe0000000000000092010000000000100800000000000000fcffffffffffffff1c250800000000000500000000000000fcffffffffffffff0400000000000000ffffffffffffffff00000000000000001f00000000000000fefffffffffffffffeffffffef000000000000007e00000000000000020001002000000000000000480003006c7a6a68000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004c0012"], 0x184}}, 0x20000844) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, &(0x7f00000003c0)={'syztnl2\x00', &(0x7f0000000300)={'ip6gre0\x00', 0x0, 0x29, 0xd7, 0x6, 0xa, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x7, 0x20, 0x6, 0x3}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x8, '\x00', r10, r0, 0x0, 0x3, 0x2}, 0x50) write(r8, &(0x7f0000000480)="1c0000001a009b8a140000003b00"/28, 0x1c) recvmmsg(r8, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) ioctl$VHOST_RESET_OWNER(r5, 0xaf02, 0x0) ioctl$FICLONE(r8, 0x40049409, r3) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000200)="66b98605000066b80800000066ba000000000f30297d00650fd38800000f01cb0f070f07dae9f619f20f009200d0ce", 0x2f}], 0x1, 0x43, 0x0, 0xfffffffffffffde3) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) 1.721646876s ago: executing program 1 (id=1250): r0 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) io_setup(0x9, &(0x7f0000000b80)=0x0) io_submit(r1, 0x0, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000021c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000500)=ANY=[@ANYBLOB="b332f91ce1fbbe468dc6240f6bca32c867f8dfa9d592573c64d132277838323c7d53a1aabd3f8180b2f694d434d0a8eaad2a0716f5b4671d9dff1c", @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC=r1, @ANYBLOB='\a\x00']) write$FUSE_INIT(r2, 0x0, 0x0) write$P9_RMKNOD(r0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) 1.466389364s ago: executing program 1 (id=1251): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x480048}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r1, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_MS_ADDR6={0x14, 0xc, @mcast1}]}, 0x28}, 0x1, 0x0, 0x0, 0xd0}, 0x8040000) r2 = syz_open_dev$vivid(&(0x7f0000000140), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, &(0x7f0000000180)={0x0, 0x9f9, 0x2015, 0xa09b3c66f6bed338}) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x0, 0x80000000, {0xffffffffffffffff}, {0xee00}, 0x2, 0x8}) r4 = syz_open_procfs(r3, &(0x7f0000000200)='net/rpc\x00') getsockopt$netlink(r0, 0x10e, 0x1, &(0x7f0000000240)=""/248, &(0x7f0000000340)=0xf8) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r4, 0xc0506617, &(0x7f0000000380)={@id={0x2, 0x0, @a}, 0x40, 0x0, '\x00', @b}) r5 = fcntl$dupfd(r4, 0x406, r4) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, &(0x7f0000000440)={0xff, 0x5, '\x00', [@hao={0xc9, 0x10, @mcast2}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x1, [0x0]}, @ra, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @padn, @ra={0x5, 0x2, 0x6}]}, 0x38) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004) ioctl$NILFS_IOCTL_DELETE_CHECKPOINT(r0, 0x40086e81, &(0x7f0000000480)=0x1) ioctl$DRM_IOCTL_MODE_GETPLANE(r5, 0xc02064b6, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000004c0)=[0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000640)={&(0x7f0000000540)=[0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x3, 0x3, 0x5, 0x6}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r4, 0xc01864b0, &(0x7f0000000680)={r6, r7, 0x19, 0x5, 0x2}) r8 = getpid() r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), r4) sendmsg$IPVS_CMD_GET_CONFIG(r5, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000740)={0xd0, r9, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xb}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x200}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xd8000}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x81}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@remote}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x81}]}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x6}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1bad}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8f}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0xd0}, 0x1, 0x0, 0x0, 0x800}, 0x0) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000008c0)='./binderfs/custom0\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r10, 0xc00c620f, &(0x7f0000000900)={r8}) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r4, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x20, 0x2, 0x7, 0x3, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFACCT_BYTES={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x8c0}, 0x20000000) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000cc0)={0x0, 0xfffffffffffffffc, 0xfa, 0x7, @buffer={0x0, 0xd9, &(0x7f0000000a40)=""/217}, &(0x7f0000000b40)="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", &(0x7f0000000c40), 0x9, 0xaf439761b78f6d12, 0x0, &(0x7f0000000c80)}) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)=@getlink={0x2c, 0x12, 0x10, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x380, 0x10}, [@IFLA_PORT_SELF={0xc, 0x19, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x8, 0x2, 'gtp\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40001}, 0x4000) getsockopt$sock_buf(r4, 0x1, 0x1c, &(0x7f0000000e40)=""/11, &(0x7f0000000e80)=0xb) write(r11, &(0x7f0000000ec0)="095fa4b45d046c61bc2dec35fbbf3b0a06af2c1c3963d8b2a4fc20728aadeaa09745791124f173837300efb7ab788e04fc7659f096156baf6c1eee907a09dc6a181a34de3d9d7b77afd026e551dcd74ee2fbda754702a73c14a690115e8abd66caf4888a23e00fabed50829831b10ff11911f68f14ae0d59ab80c6859579ec6645064ec5f715a09f27906890324f2cb0d76479a34387ec7636300b58fabdd715f10807614a385b", 0xa7) r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000fc0), r5) sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000001140)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001100)={&(0x7f0000001000)={0xc8, r12, 0x400, 0x800, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x28, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}]}, @TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x401}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffff8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_open_dev$audion(&(0x7f0000001180), 0x0, 0x20400) 1.227136327s ago: executing program 1 (id=1252): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x45c, &(0x7f0000000040)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, 0x0, 0x5c}], 0x1, 0x51, &(0x7f0000000180)=[@efer={0x2, 0x901}], 0x1) r5 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOGETCMAP(r6, 0x4604, &(0x7f0000000600)={0x9, 0x0, 0x0, &(0x7f0000002880), 0x0, 0x0}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) r8 = socket(0x10, 0x2, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000f00)=ANY=[@ANYBLOB="840100001a000100feffffff00010000ac1e01010000000000000000000000000001000107174e2300050a0000203a00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000fc010000000000000000000000000001fe0000000000000092010000000000100800000000000000fcffffffffffffff1c250800000000000500000000000000fcffffffffffffff0400000000000000ffffffffffffffff00000000000000001f00000000000000fefffffffffffffffeffffffef000000000000007e00000000000000020001002000000000000000480003006c7a6a68000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004c0012"], 0x184}}, 0x20000844) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, &(0x7f00000003c0)={'syztnl2\x00', &(0x7f0000000300)={'ip6gre0\x00', 0x0, 0x29, 0xd7, 0x6, 0xa, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x7, 0x20, 0x6, 0x3}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x8, '\x00', r10, r1, 0x0, 0x3, 0x2}, 0x50) write(r8, &(0x7f0000000480)="1c0000001a009b8a140000003b00"/28, 0x1c) recvmmsg(r8, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) ioctl$VHOST_RESET_OWNER(r5, 0xaf02, 0x0) ioctl$FICLONE(r8, 0x40049409, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)) 1.224847164s ago: executing program 4 (id=1253): socket$packet(0x11, 0x3, 0x300) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x18, 0x0, 0x0) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, 0x0, 0x8054) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x169140, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r1, &(0x7f0000002f00)=[{{&(0x7f0000000140)={0xa, 0x4e23, 0x9, @loopback, 0xcd89}, 0x1c, &(0x7f0000000280)=[{&(0x7f0000000380)=';', 0x1}], 0x1}}, {{&(0x7f00000002c0)={0xa, 0x4e20, 0x2, @remote, 0x8}, 0x1c, &(0x7f0000000800)=[{&(0x7f0000000540)=';', 0x1}], 0x1}}], 0x2, 0x4004851) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$KDGETKEYCODE(r2, 0x4b4c, &(0x7f0000000200)={0x5, 0x4}) setsockopt(r1, 0x84, 0x14, &(0x7f0000000040)="020000000980ffff", 0x8) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0x1, 0x58, &(0x7f0000000080)}, 0x10) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r4, 0x4008ae8a, &(0x7f00000015c0)={0x1, 0x0, [{0x1, 0x8, 0x7, 0x1, 0x8}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000880)={"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"}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 962.161153ms ago: executing program 1 (id=1254): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x30, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x14, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x9}, {0x8, 0x0, 0x9}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x44}, 0x40) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)={0x14, 0x17, 0x301, 0x270bd24, 0x25dfdbfa, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) syz_open_dev$sndctrl(&(0x7f0000000080), 0xfffffffffffffffa, 0x101000) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='comm\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0xfffffffb, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x5, &(0x7f0000000140)=0xfffffffd, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102384, 0x18ff0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x4000000) socket$pppl2tp(0x18, 0x1, 0x1) r6 = syz_usb_connect$sierra_net(0x0, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x43978451d8f6fedb, 0x2, 0x400, 0x2, 0x1b, 0xfe}, {0x9, 0x5, 0x7, 0x2, 0x200, 0xc, 0x77, 0x3}, {0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0xfd, 0x32}}}}}}]}}, 0x0) syz_usb_control_io(r6, &(0x7f00000002c0)={0x2c, &(0x7f0000000000)={0xc7c9848a49c2020f, 0x21, 0x8, {0x8, 0x3, "baf03bfb43ca"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r6, 0x81, 0x0, 0x0) 684.944179ms ago: executing program 3 (id=1255): r0 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$cgroup_int(r0, 0x0, 0x0) renameat2(r0, &(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x3) ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f0000000300)={0x4, 0x0, [{0x3bd, 0x0, 0x9}, {0x826, 0x0, 0x3b}, {0xbfe, 0x0, 0x1}, {0xa8d, 0x0, 0xc9}]}) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) close$fd_v4l2_buffer(0xffffffffffffffff) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000200), 0x2c01, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000380)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], 0x4}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0], &(0x7f0000000380), 0x2, r3, 0xcccccccc}) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000580)={0x400, 0x1, &(0x7f0000000180)=[r3], &(0x7f00000000c0)=[0x3], &(0x7f0000000640)=[r4], &(0x7f0000000340), 0x0, 0xfffdffffffffffff}) socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x80, &(0x7f0000000040)="000000000980ffff", 0x8) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = syz_clone(0x82020000, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') syz_usb_connect(0x0, 0x24, 0x0, 0x0) fchdir(r8) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_open_procfs(r7, &(0x7f00000000c0)='smaps\x00') close_range(r6, 0xffffffffffffffff, 0x0) syz_open_dev$dvb_dvr(&(0x7f0000000000), 0x9, 0x80) ptrace(0x10, r5) ptrace$ARCH_MAP_VDSO_64(0x1e, r5, 0x3fffff, 0x2003) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x17, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000300000218110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000000107400850000001700000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7020000000000008500000086000000bf91000000000000b7020000010000008500000084000000b70000000000000095", @ANYRES32=0x0], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r10, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) syz_pidfd_open(r5, 0x0) 540.703821ms ago: executing program 4 (id=1256): socket$nl_route(0x10, 0x3, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000001c0)={0x4000000, 0x1, 0x0, 'queue0\x00', 0x1c52}) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)=ANY=[@ANYBLOB="1400000004000000080000000600008000"], 0x50) r0 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x82) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000000)="26eba9fdb4cbab48929e1af151000000000000000500000000", 0x19}], 0x1) close_range(r0, r0, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'lo\x00'}) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) mknodat$null(0xffffffffffffff9c, 0x0, 0x400, 0x103) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0}, 0x40050) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000080)) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000040)=0xdfe5) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) pipe2$watch_queue(0x0, 0x80) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, &(0x7f0000000580), 0x4) syz_emit_ethernet(0x82, 0x0, 0x0) 390.986001ms ago: executing program 1 (id=1257): openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x4c27e, 0x53) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000540)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r4, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) close(r0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000270000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000385000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r6 = io_uring_setup(0x263f, &(0x7f0000000040)={0x0, 0xc8a1, 0x10000, 0x8, 0x29}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r1, 0x3ba0, &(0x7f0000000280)={0x48, 0x1, 0x0, 0x0, 0xe3, 0x6}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40440, 0x3) close(r7) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00010000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca7f8fbc9cdfa146ec56175037958e271f60d25b7937f02c8695e5a1b2cdf41dc10d1e8bf076d83923dd29c0301000000010000003d5d58c07fa1f7e4d5b318e2ec0e0700897a74a0091ff110026e6d2ef831ab7ea0c34f17e3ad6e70af07da5ceb01b7551ef3bb6220030100dfd8e012e79578e51bc53099e90fbdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e060e3670ef0e789f93781965f1328d6704902cbe7bc0476619f28d99cde7a6b73340cc2160a1fe3c184b751c51160fbce841dfebd31a08b32808b80200000000009dd27080e71113610e10d8fb9c2aec61ce63a3462fd50117b89a9ab759b4eeb8cb000066d42b4e54861d0227dbfd2ed8576a3f7f3deadd7130856f756436303767d2e24f29e5dad9796edb697a6ea0180aabc18cae2ed4b4390af9a9ceafd07ed0030000002cab154ad029a119ca3c9727ec84222fff0d7216fdb0d3a0ec4bfae563858dc06e7c337642d3e5a815212f5e16c1b30c3a2a71bc85018e5ff2c910496f0dafc9ffc2cc788bee1b47683db01a46939868d75211bbae0e7313bff5d4c391ddece00fc772dd6b4d4d0a917b239fe12280fc92c88c5b8dcdcc22ee1747790a8992533ac2a9f5a699593f084419cae0b4183fb01c73f99857399537f5cc2acb72c7eae993fc9eb22d130665b6341da114f08cd0509d380578673fffffff7f23877a6b24db0e067345560942fa1c22015e53fd8a46be933ab460d8629fbef2461c96a08707671215c302fae29187d4f5c06a960fd37c10223fdae7ed04935c3c90d3add8eebc8619d73415e6adcda2130f5011e42e50adab988dd8f12baf5cc9398c88607a08009c2977aab37d9a44cfc1c7b4000000000000fa47742f6c5b9c4b11e7d7262a1457c39495c826b956ba859adfe38f77b91bd7d5ca1664fe2f3ced8468911806e8916dc15e21644db60c2499d5d16d7d915836ab26c169482008ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bcc874b2f663ddeef0005b3d96c7aae73835d5a3cda9e90d76c1993e0799d4894ee7f8249dc1e3428d2129369ee1b85afa1a5b6154eb2eea0d0df414b315f65112412392191fa83ee830548f11e1038debd64cbe359454a3f2239cfe35f81b7ade8a5b859968ff0e90500d0b07c0dd00490f167e6d5c1109681739dc33f75b20428d6474a0a91ee90b8de802c6b538622e6bbcb80f87b415263c401e64ed69a2f75409000000000000001d695c4559b82cabac3cccadc1e1c19af4e03020abf5ff0433d660f20898d2a045d009a0ffb20a77c9af2b80c05184a66d30bbea2ca45a4d6d6d1e6e79aef42355a500587b603306a5af8d867d80a07f10d82eafb03062e95196d5e3ffea0000000000000be959096ea948cfa8e7194123e918914a71ad5a8521fb9553bc60f7d9719b55b3abb6bba3d113a680a8d46fe074c83fbe378a3889e8145b2eaceab05ef932c6e4f8ef0ed0d818a7b76d839cf3c63ebb4380b168c38fa32e49563cfee3a7f0fc18bfa32c418cef875fb49e2989177a1bcd1e30280bc586e79a5dd80701018e7d6e97b3ce267dd4e27b6ef206660090bb2164474cef378f97ca33fc03000000000000001547053453d0c9aec91a24079b21d52fb5516bf0c28ef37aa76442f6083dc99cd61afaf6be45d7b00d3639f2f10ac2d5c759c3e5468f0000000011d415b6b085fb73a2c7c3852e0e658ffeb4e863428a792bee94f6cd895424360e0464f9d7ea425f2fa6aac029d15af607ad83532ff181c985f54b39370c06e63055b4d6a36fa98a44e379d28307c9912fb097601f3f88a2ca6fd1f9320cfe7fc8e9f7f15f02e177ce23f43a154b42e26f037e8a01377cbd3f509e6e540c9ba9c2a589c95d8ad67a65e9a44c576dc24452eaa9d819e2b04bdd1c000000070000000000000000000000005333c6199c12dcd926891927a7267c47cf897853d160100b39b613faefe16bed1fc105dddd77ab929b837d4442d13d5a29179a00837918dd7854aa17eb9fbdc2bdc0e98ae2c3f23a6131e2879f04ff01000030b92dd493be66c2242f8184733b80ba28e8ffffff7f00000000bb2f89049c5f6d63d56995747639964217aacfe548bc869098aa8e07e51dbc9e2d4db3c5f79fd355222ec2a00cf7f2ccd6dd6d2dc2a815d8314221a5472f1318a9dfbec5a759579caf3262129b14e99040b5d91398e17df85c25ccae973eecc7d187168d5c9cd848d566cc17587641ed01889c927da38d83314480b15e23138c5b877a72bd4cf74a299df4fbfc8e6ea96939f15d254d9033c5a45706bda78ab60200000000000000000000000000000000000000706f78f0a2ea9667fb5b951808545a46830970c2dfae01adbda7d29bf1f7abdaf52e0de6f9d7150808ed086642e64ebf98762b34338b80e41b704c3eefaf0bb5ff070000000000000ea15ccc0d7a830b6eb33b6b61675511d693ef5e3c44bbf71cabc5f45c879e7499f8baae2a1a09cf38da73297764fbc0e723e1cc3abb12e3076982ed32c94a2ce3e6f37c47e983da4ca5c96187db5a2a2e1742bc93a65d7187126126b3a80f17dd2f7dbbe82d104ede9ba6925afc2ee6cb94f56f1363cad635abf8f983292c49c0ebf5005154c7b58a3a2a2ea86d2fd92b8661264f781e3fb02d05a28f3f17b64d0258853d45cb5ebde10cd3d82eeed2f1ed925b7cf400304932c5ed0a362b235ce37e1f17700f7d1fecf8be8a2c5d25a9c60657560d05441387ff158a018d19a286c58684a1d2f624c3eb59d509ee89cc2df52881d005b2e5c27563ba54e4153c132d0366aa660000000000000009c1aaec93ec0f925921fb2e9eb202a29bef28224dbabe723de5c584bc398a8792e493048c87f60a51a391e95921218149403558fd13c649f90b0911d57eeb298b590581eba1ce383b539ab80fd15445987b1bb4eb512545e1ab65fef3103ce10b1ee362b51c72f82edf2f502ddf52567775e34a56d1be892f1e62b08950d517fa6fb1b0ef2edf1b67f8644786116b037d4a36fdd30b000063e58c856ec44cbbc2d370553f832af9480215e09aaa3843fe360b1c293a14627f2cfbe278f31d0abc0f5aaa10926dbbfe8a4b131c13a73d4e6d065c2c0fed3ab8442520ce0e0ad7d2d177377ab197ace3ef8b1c24ceb0bdee84bd6e6317633938dd19dc42de7f8f860eca6d9c74525fcd3497526df4c13e3ba5f0d75365a4542ae9440d2fede416d61800aaf7e038879c5d177b3876fda4121e00000100000000003edd3d43cc64e0d26b46907b42e08d000000000000903350932d3eef7fdada20c19807066e3c72d0d816eb9fa50be213bf6bbb7ccb9f2e8a153e6ced68f192ebed6e86af0f2cec7335fa8039fd6eb025440bc2a34d071f0a0e6774308a74748b8cd994ed368695aa2c59869c9200a1306ffa5a71ca69e89a69fc858f37c2c398515a910a35e22ab0573c10b85df4c2972a2fb8b9c080fbb41a753791df727fdeaded2930376eda31312256191c620cce34d1e3bf40a4a207ab1575b399eb8155781bfc7cb5920b49c039935a888d77041894f60fbbcafa487ee96b368e8769da90b44190e569fe8b923c32c288baaca5c5558b5a78bb43e5d9e47a1d5809bb178184b5672d08e29aecf1f572ac1e6cab7e820751e95999b7532603494d37a2bff35a9eec46dfc8a52433f605ebf151c837b4966b5f3628a406175a87e32c5e4268d3000933b580415b162e2946446b8f02554c8a1225217d69d049685dd06aa8528673a9673a723ac414af77f523ad730d00e8700c213f95c87a94f39f506b9e000000000000000000000000000000000000000000000000000090668ac41a1c2a4f7831e6c6a3e9c68ca2c449482bb70a994e71a7f24873848fbb128c820c1de19cc003dfa65a2b296caeb1253802080e08eeb724c4c7b7e052afa19b0f2cd7a13bda4b5a8f3b8fa3ca70bb756a3d529718d5c79d9bdb89e5d33793533211d76d00a45079eff797476106bf76f1fed952a7c9162b88911b5b00c3d26fd2fb4d7b29d1ce025e102d458efd5cca3f3835ce760359eaa01cb13cb28d60e8942fdc02b6824c00dac62f8a2d4c680ae284a82f09d6641921536814b444e4188d9b2e97eb3b108e7876f0f3f3863147ab694218c7cecc075d52d590dddbb57fc6fedf5ec69d7894a7b5c8109f303dab998815c80534b0bd34c49eea63997e56728a8185a8bb6988a7197b87f5548f5edfdfb3efc907fe561b33a6f7c707f7828c6adaf3b2a39929b4b65253e787d65c08aff5e4a9b2267bd8f803ea38f10a6e9c4a49bf23525e08c12d229211fe4d88cf1440f29accfa50f327ac1fb20d7f164100111bd21fca713b2475f1c997f3000000000080c426bcec79c6bc83ce4e6cbb17c01be69db342192d0a716cc24710d23321441f475ec485d642b61c6bd907071dbbe37c0b78f60fd2ad0d13ca62d9d9aafb01c3920b64cb5e023810e2de4327f90c389ce36d90ff9f3cb9d8cd2260d05a8126943a3df17157470595c68ac8df7fea6d42ecb2cdb65b4f2aef0dc4b2de949a6d4ec37f2fd693ae44944041a64fe6336aba1c66b1b95d2edbc40364a049616ae962d75eae619548aa86bd5f0bad56e7ad7de2ee5e6f3b42e3a27094b6b5face99456d9af1926b21d37faf7612d9752cf58e6424decd530b5419e117ec086174439af6ee6c7fdb2d19c9280fa9a02e8fa6a38acfff09050d912635fed175fd06f577d40000000000000000000000000000754bffd73c0888ba8834f20b3acea57b7817663e12c1a5503bc4c13af59bda21688d68698c53ce3aa767657774db09ece7ec888d3af290207d36fa433b35e17dc0f3dc728ea1c633a4ef9e7d9bf81b57492e0544800921d1b751c5fbc163"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x55, 0x0, 0xffffffffffffffff, 0x3}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r8, 0x18000000000002a0, 0xe06, 0x1000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r7) bind$unix(r7, &(0x7f0000000200)=@file={0x0, './bus\x00'}, 0x6e) shutdown(0xffffffffffffffff, 0x1) 210.031517ms ago: executing program 1 (id=1258): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e13d6a206419010015d4010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2703) syz_usb_connect$uac1(0x1, 0xf9, &(0x7f00000002c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x2b73, 0xa, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe7, 0x3, 0x1, 0xf, 0x40, 0xd8, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x5, 0x1, 0xff, 0x0, "", "ee39"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x8, 0x151, 0x30, 0x5}, @as_header={0x7, 0x24, 0x1, 0x6e, 0x7a}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x5, 0x3, 0x7, 0x7f, "d28fcc"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0xd, 0x1, 0x5, 0x2}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x2, 0x1, 0x1, "8dff0a6fa5b4564e18"}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x3, 0xc, 0x0, {0x7, 0x25, 0x1, 0x0, 0xc, 0x7fff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x4, 0x9, 0x0, 0x5, 0x40}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x508, 0x9, 0x5, "806a1d914b"}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x8, 0x3, 0x8, 0x5, "d4517926b4ace4bb"}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x2, 0x5, 0x6}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x9, 0x2, 0x5, 0x5, "6c8ce041"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0xa, 0x5, 0x1, 0x72, 0x1}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x7, 0xc9, 0x81, {0x7, 0x25, 0x1, 0x0, 0x48, 0x9}}}}}}}}]}}, &(0x7f0000000700)={0xa, &(0x7f00000003c0)={0xa, 0x6, 0x310, 0x1, 0x5, 0x8, 0x40, 0x6}, 0xd1, &(0x7f0000000400)={0x5, 0xf, 0xd1, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x12, 0x7, 0x7, 0x8001}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "67108652578ddc393b712e37a4f65a34"}, @ext_cap={0x7, 0x10, 0x2, 0x12, 0x3, 0xa, 0x3}, @generic={0x96, 0x10, 0xa, "12c51017d9e190c5ef6143e2bd87fb52c094a4dab3198f01f50509c4af77f2b8b036a4025e01d10a1c23e3f19a9bbcec18938dca86ac6cbfee210e9fc3aa3de8aed529fd5977a72a97a44efd8636d864ae0ca9b2b56c12de4c15cf7386ea0baa24169e781268cd6743caaad81510eac70bd9b5117ac7a7b3b82e25f136f10d364b6e663fea1fb4d11de2bcbba7f74fd1587414"}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "8682a8f25cb18aa0cbc7ba04aefca7cf"}]}, 0x5, [{0xce, &(0x7f0000000500)=@string={0xce, 0x3, "46b0033f359a74b94ec21a2f0451e5636f28101619a0be159757157a7e41a9bb4e1bdf770cdb2b7eb6195cc16852405993fd089fe0ac9d7e0c3cff83593f98b138291ab1d8db4a28c5dee614178bc8044173b1b20f119a44399b027073ccb69a9614978d273d5062b56ef3c97aa00c4091e747851be340181663e9693fce761787de5e764876376f0a7e7aa89278ca58ccb2d1bff638eba4fa8837202dc8ce3326943e1bf95b6b0b499e524ac8fd457b4dc7c1bb2982e62fc63c84206ba63f66342b47dc8db88ea8b6c24bce"}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x861}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x3c01}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x480a}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x438}}]}) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000280)={0x1, 0x10, 0x3, &(0x7f0000000080)={0x10, "b3d92cdddf96c2069064264ccf13376ea90238ed4d00"}}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000b80)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)={0x40, 0x17, 0x6, @random="cac390c7e6c6"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 3 (id=1259): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r2, r1, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)}) ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f0000000200)={0x28, 0x0, r2, r3, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x181c01, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x3) r5 = openat$mice(0xffffffffffffff9c, 0x0, 0x800) syz_genetlink_get_family_id$nl80211(0x0, r5) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='net/sockstat\x00') syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) socket$rds(0x15, 0x5, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, 0x0, &(0x7f0000000480)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x10, 0x1000000, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xacd, 0x20000, 0x10000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x81f70, 0x80, 0x1, 0x12c, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1, 0x1000, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r9 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r9, &(0x7f0000001a40)=""/102392, 0x18ff8) ioctl$TCSBRKP(r4, 0x5425, 0x0) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)) kernel console output (not intermixed with test programs): , bcdDevice=4d.8b [ 268.122047][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.135118][ T24] usb 2-1: config 0 descriptor?? [ 268.220299][ T24] usb 2-1: can't set config #0, error -71 [ 268.248270][ T24] usb 2-1: USB disconnect, device number 20 [ 269.499374][ T8035] syzkaller0: entered promiscuous mode [ 269.509360][ T8035] syzkaller0: entered allmulticast mode [ 269.642557][ T8044] PKCS8: Unsupported PKCS#8 version [ 269.661451][ T8045] Failed to initialize the IGMP autojoin socket (err -2) [ 269.792431][ T8052] netlink: 16 bytes leftover after parsing attributes in process `syz.4.602'. [ 269.819113][ T8052] 9p: Bad value for 'wfdno' [ 269.851904][ T5729] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 270.081069][ T8057] netlink: 'syz.3.604': attribute type 23 has an invalid length. [ 270.335545][ T5729] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 270.459117][ T5729] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 270.479244][ T8059] netlink: 56 bytes leftover after parsing attributes in process `syz.4.603'. [ 270.510667][ T5729] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 270.577896][ T5729] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 270.595226][ T5729] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 270.626909][ T5729] usb 2-1: Product: syz [ 270.639502][ T5729] usb 2-1: Manufacturer: syz [ 270.657969][ T5729] usb 2-1: SerialNumber: syz [ 271.000395][ T5729] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 21 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 272.048603][ T30] audit: type=1400 audit(2000000027.070:560): avc: denied { setopt } for pid=8063 comm="syz.2.606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 272.095075][ T8078] netlink: 72 bytes leftover after parsing attributes in process `syz.4.607'. [ 273.911929][ T5624] Bluetooth: hci5: command 0x1003 tx timeout [ 273.922551][ T5613] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 274.698235][ T8093] netlink: 'syz.0.611': attribute type 23 has an invalid length. [ 275.258871][ T24] usb 2-1: USB disconnect, device number 21 [ 275.287381][ T24] usblp0: removed [ 275.967417][ T30] audit: type=1400 audit(2000000030.810:561): avc: denied { bind } for pid=8102 comm="syz.4.615" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 276.102152][ T30] audit: type=1400 audit(2000000031.040:562): avc: denied { create } for pid=8104 comm="syz.0.616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 276.287005][ T24] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 276.332870][ T30] audit: type=1400 audit(2000000031.320:563): avc: denied { read append } for pid=8100 comm="syz.1.614" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 276.364803][ T30] audit: type=1400 audit(2000000031.320:564): avc: denied { open } for pid=8100 comm="syz.1.614" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 276.430515][ T30] audit: type=1400 audit(2000000031.350:565): avc: denied { ioctl } for pid=8100 comm="syz.1.614" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x937d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 276.483550][ T24] usb 5-1: device descriptor read/64, error -71 [ 276.669303][ T8114] netlink: 56 bytes leftover after parsing attributes in process `syz.0.617'. [ 276.763162][ T24] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 276.870013][ T8098] ALSA: mixer_oss: invalid OSS volume '' [ 276.912131][ T24] usb 5-1: device descriptor read/64, error -71 [ 277.074275][ T24] usb usb5-port1: attempt power cycle [ 277.651808][ T8125] openvswitch: netlink: IP tunnel dst address not specified [ 278.079969][ T24] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 278.114481][ T24] usb 5-1: device descriptor read/8, error -71 [ 278.186399][ T8130] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 278.192924][ T8130] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 278.203179][ T8130] vhci_hcd vhci_hcd.0: Device attached [ 278.352136][ T24] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 278.399210][ T24] usb 5-1: device descriptor read/8, error -71 [ 278.407433][ T804] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 278.462742][ T29] usb 3-1: new low-speed USB device number 9 using dummy_hcd [ 278.476132][ T804] usb 37-1: new full-speed USB device number 4 using vhci_hcd [ 278.493918][ T8136] blktrace: Concurrent blktraces are not allowed on loop0 [ 278.522112][ T24] usb usb5-port1: unable to enumerate USB device [ 278.633409][ T29] usb 3-1: config index 0 descriptor too short (expected 20961, got 49) [ 278.650705][ T29] usb 3-1: config 229 has too many interfaces: 130, using maximum allowed: 32 [ 278.664149][ T29] usb 3-1: config 229 has an invalid descriptor of length 233, skipping remainder of the config [ 278.715201][ T29] usb 3-1: config 229 has 0 interfaces, different from the descriptor's value: 130 [ 278.766405][ T29] usb 3-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=5f.0e [ 278.801029][ T29] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.820813][ T8139] syzkaller0: entered promiscuous mode [ 278.851387][ T8139] syzkaller0: entered allmulticast mode [ 279.146368][ T8131] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 2 [ 279.152455][ T8130] netlink: 56 bytes leftover after parsing attributes in process `syz.2.621'. [ 279.179014][ T1160] vhci_hcd vhci_hcd.2: stop threads [ 279.187844][ T1160] vhci_hcd vhci_hcd.2: release socket [ 279.196188][ T8130] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 279.207079][ T1160] vhci_hcd vhci_hcd.2: disconnect device [ 279.219352][ T8130] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 279.336804][ T8148] netlink: 72 bytes leftover after parsing attributes in process `syz.4.626'. [ 279.637850][ T29] usb 3-1: string descriptor 0 read error: -71 [ 279.658191][ T29] usb 3-1: USB disconnect, device number 9 [ 279.962061][ T5790] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 280.104229][ T5613] Bluetooth: hci4: unexpected event for opcode 0x0c57 [ 280.153393][ T5790] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 280.164943][ T5790] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 280.226845][ T5790] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 280.339336][ T5790] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 280.388803][ T5790] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 280.456587][ T5790] usb 2-1: Product: syz [ 280.486144][ T5790] usb 2-1: Manufacturer: syz [ 280.548065][ T5790] usb 2-1: SerialNumber: syz [ 281.802241][ T5790] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 22 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 281.832361][ T8162] netlink: 56 bytes leftover after parsing attributes in process `syz.0.629'. [ 283.581938][ T804] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 283.617595][ T10] usb 2-1: USB disconnect, device number 22 [ 283.631193][ T10] usblp0: removed [ 283.655647][ T8182] PKCS8: Unsupported PKCS#8 version [ 283.935552][ T8189] comedi comedi0: comedi_bond: 4:2 attached, 32 channels from 1 devices [ 284.692437][ T8195] syzkaller0: entered promiscuous mode [ 284.699216][ T8195] syzkaller0: entered allmulticast mode [ 285.589792][ T5613] Bluetooth: hci3: unexpected event for opcode 0x0c57 [ 286.871973][ T5728] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 287.053335][ T5728] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 287.074421][ T8235] syzkaller0: entered promiscuous mode [ 287.082440][ T5728] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 287.093923][ T8235] syzkaller0: entered allmulticast mode [ 287.107904][ T5728] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 287.141559][ T5728] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 287.163365][ T5728] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 287.180657][ T5728] usb 2-1: Product: syz [ 287.196374][ T5728] usb 2-1: Manufacturer: syz [ 287.206606][ T5728] usb 2-1: SerialNumber: syz [ 287.449055][ T5728] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 23 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 287.508630][ T30] audit: type=1400 audit(2000000042.530:566): avc: denied { connect } for pid=8249 comm="syz.3.651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 287.854943][ T8258] openvswitch: netlink: IP tunnel dst address not specified [ 288.682256][ T9] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 288.956263][ T9] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 288.970683][ T9] usb 3-1: config 0 has no interface number 0 [ 288.987001][ T9] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 289.011761][ T9] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 289.035856][ T9] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 289.059161][ T9] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 64 [ 289.090141][ T9] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 289.118110][ T9] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 289.137737][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.162279][ T9] usb 3-1: config 0 descriptor?? [ 289.182496][ T8262] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 289.208091][ T9] ldusb 3-1:0.55: LD USB Device #1 now attached to major 180 minor 1 [ 289.396539][ T8274] netlink: 40 bytes leftover after parsing attributes in process `syz.3.656'. [ 289.441194][ T8274] Failed to initialize the IGMP autojoin socket (err -2) [ 289.450867][ T30] audit: type=1400 audit(2000000044.440:567): avc: denied { create } for pid=8269 comm="syz.3.656" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 289.757246][ T5611] usb 2-1: USB disconnect, device number 23 [ 289.769604][ T5611] usblp0: removed [ 289.804530][ T9] usb 3-1: USB disconnect, device number 10 [ 289.817690][ T30] audit: type=1400 audit(2000000044.450:568): avc: denied { sys_admin } for pid=8269 comm="syz.3.656" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 289.823353][ T9] ldusb 3-1:0.55: LD USB Device #1 now disconnected [ 289.928548][ T10] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 290.055057][ T8280] syzkaller0: entered promiscuous mode [ 290.072027][ T8280] syzkaller0: entered allmulticast mode [ 290.087211][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 290.110092][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 290.127367][ T10] usb 5-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 290.136619][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.152385][ T10] usb 5-1: config 0 descriptor?? [ 290.166152][ T10] hdpvr 5-1:0.0: Could not find bulk-in endpoint [ 290.173392][ T10] hdpvr 5-1:0.0: probe with driver hdpvr failed with error -12 [ 292.362487][ T24] usb 5-1: USB disconnect, device number 18 [ 292.501994][ T804] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 292.624598][ T8303] ALSA: mixer_oss: invalid OSS volume '' [ 292.676184][ T804] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 292.714083][ T804] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 292.725360][ T804] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 292.743186][ T804] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 292.764390][ T804] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 292.774448][ T804] usb 3-1: Product: syz [ 292.778736][ T804] usb 3-1: Manufacturer: syz [ 292.783402][ T804] usb 3-1: SerialNumber: syz [ 293.161324][ T804] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 11 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 293.282594][ T8327] blktrace: Concurrent blktraces are not allowed on loop8 [ 295.378716][ T5611] usb 3-1: USB disconnect, device number 11 [ 295.727780][ T5611] usblp0: removed [ 295.901113][ T30] audit: type=1400 audit(2000000005.010:569): avc: denied { mount } for pid=8349 comm="syz.3.677" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 296.643197][ T8361] netlink: 'syz.2.681': attribute type 11 has an invalid length. [ 296.764354][ T30] audit: type=1400 audit(2000000005.880:570): avc: denied { bind } for pid=8362 comm="syz.4.682" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 296.918052][ T8366] netlink: 40 bytes leftover after parsing attributes in process `syz.4.682'. [ 298.801193][ T30] audit: type=1400 audit(2000000007.910:571): avc: denied { unmount } for pid=5615 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 298.971461][ T30] audit: type=1400 audit(2000000008.080:572): avc: denied { create } for pid=8386 comm="syz.1.689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 298.994282][ T8368] ALSA: mixer_oss: invalid OSS volume '' [ 299.004642][ T30] audit: type=1400 audit(2000000008.090:573): avc: denied { connect } for pid=8386 comm="syz.1.689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 299.063737][ T8388] Failed to initialize the IGMP autojoin socket (err -2) [ 299.071212][ T30] audit: type=1400 audit(2000000008.150:574): avc: denied { bind } for pid=8386 comm="syz.1.689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 299.124560][ T30] audit: type=1400 audit(2000000008.150:575): avc: denied { write } for pid=8386 comm="syz.1.689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 299.136144][ T8392] 9p: Bad value for 'rfdno' [ 299.155985][ T30] audit: type=1400 audit(2000000008.240:576): avc: denied { read } for pid=8386 comm="syz.1.689" dev="sockfs" ino=22393 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 299.241968][ T5611] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 299.406086][ T5611] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 299.477844][ T8403] blktrace: Concurrent blktraces are not allowed on loop2 [ 299.518543][ T5611] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 299.625655][ T5611] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 300.113786][ T5611] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 300.136129][ T5611] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 300.163440][ T5611] usb 4-1: Product: syz [ 300.176425][ T5611] usb 4-1: Manufacturer: syz [ 300.198582][ T5611] usb 4-1: SerialNumber: syz [ 300.444723][ T5611] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 11 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 301.223866][ T30] audit: type=1400 audit(2000000010.330:577): avc: denied { mmap_zero } for pid=8412 comm="syz.0.697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 302.204959][ T5611] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 302.773883][ T30] audit: type=1400 audit(2000000011.890:578): avc: denied { create } for pid=8426 comm="syz.1.700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 302.889171][ T5611] usb 3-1: config 1 has an invalid interface number: 7 but max is 0 [ 302.927075][ T5611] usb 3-1: config 1 has no interface number 0 [ 302.927194][ T30] audit: type=1400 audit(2000000012.040:579): avc: denied { execute } for pid=8426 comm="syz.1.700" path="/dev/comedi4" dev="devtmpfs" ino=1279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 302.933464][ T5611] usb 3-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 303.199447][ T5611] usb 3-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 303.298175][ T5611] usb 3-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 303.379244][ T5611] usb 3-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 303.396697][ T5611] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.405038][ T5611] usb 3-1: Product: syz [ 303.409397][ T5611] usb 3-1: Manufacturer: syz [ 303.415559][ T5611] usb 3-1: SerialNumber: syz [ 303.432210][ T8421] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 303.967321][ T9] usb 4-1: USB disconnect, device number 11 [ 303.986620][ T8420] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 303.994454][ T9] usblp0: removed [ 304.029224][ T8435] ALSA: mixer_oss: invalid OSS volume '' [ 304.221653][ T5611] usb 3-1: Incompatible driver and firmware versions [ 305.429387][ T8460] PKCS8: Unsupported PKCS#8 version [ 305.629451][ T8466] blktrace: Concurrent blktraces are not allowed on loop6 [ 306.159372][ T30] audit: type=1400 audit(2000000001.810:580): avc: denied { mounton } for pid=8471 comm="syz.4.713" path="/127/file0" dev="tmpfs" ino=714 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 306.561584][ T5611] usb 3-1: USB disconnect, device number 12 [ 306.672188][ T30] audit: type=1400 audit(2000000002.330:581): avc: denied { create } for pid=8479 comm="syz.2.715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 306.875582][ T30] audit: type=1400 audit(2000000002.530:582): avc: denied { append } for pid=8479 comm="syz.2.715" name="001" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 306.939844][ T30] audit: type=1400 audit(2000000002.590:583): avc: denied { setopt } for pid=8479 comm="syz.2.715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 306.959964][ T30] audit: type=1400 audit(2000000002.590:584): avc: denied { write } for pid=8479 comm="syz.2.715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 307.858330][ T8499] syzkaller0: entered promiscuous mode [ 307.867895][ T8499] syzkaller0: entered allmulticast mode [ 307.981345][ T8503] PKCS8: Unsupported PKCS#8 version [ 308.479305][ T8510] netlink: 56 bytes leftover after parsing attributes in process `syz.1.723'. [ 308.544235][ T9] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 308.787625][ T9] usb 1-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 308.802761][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.811562][ T9] usb 1-1: Product: syz [ 308.826364][ T9] usb 1-1: Manufacturer: syz [ 308.831776][ T9] usb 1-1: SerialNumber: syz [ 308.854758][ T9] usb 1-1: config 0 descriptor?? [ 308.902243][ T9] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 309.135016][ T8505] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 309.176787][ T8505] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 309.208584][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 309.221367][ T8505] netlink: 44 bytes leftover after parsing attributes in process `syz.0.722'. [ 309.312759][ T9] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 309.324146][ T8505] netlink: 67 bytes leftover after parsing attributes in process `syz.0.722'. [ 309.334684][ T9] usb 1-1: media controller created [ 309.351397][ T8512] dvb-usb: bulk message failed: -22 (7/0) [ 309.394606][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 309.536635][ T9] DVB: Unable to find symbol mt352_attach() [ 309.574229][ T8516] FAULT_INJECTION: forcing a failure. [ 309.574229][ T8516] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 309.590680][ T9] DVB: Unable to find symbol nxt6000_attach() [ 309.598796][ T9] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 309.609509][ T8516] CPU: 0 UID: 0 PID: 8516 Comm: syz.4.725 Not tainted syzkaller #0 PREEMPT(full) [ 309.609530][ T8516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 309.609539][ T8516] Call Trace: [ 309.609544][ T8516] [ 309.609550][ T8516] dump_stack_lvl+0x100/0x190 [ 309.609574][ T8516] should_fail_ex.cold+0x5/0xa [ 309.609595][ T8516] _copy_from_user+0x2e/0xd0 [ 309.609618][ T8516] copy_msghdr_from_user+0x9f/0x4c0 [ 309.609641][ T8516] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 309.609673][ T8516] ___sys_sendmsg+0x106/0x1e0 [ 309.609696][ T8516] ? __pfx____sys_sendmsg+0x10/0x10 [ 309.609722][ T8516] ? __lock_acquire+0x49f/0x1a40 [ 309.609740][ T8516] ? get_pid_task+0x106/0x250 [ 309.609787][ T8516] __sys_sendmsg+0x160/0x210 [ 309.609804][ T8516] ? __pfx___sys_sendmsg+0x10/0x10 [ 309.609833][ T8516] do_syscall_64+0x115/0x870 [ 309.609847][ T8516] ? clear_bhb_loop+0x40/0x90 [ 309.609866][ T8516] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.609882][ T8516] RIP: 0033:0x7fec1779de99 [ 309.609896][ T8516] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 309.609910][ T8516] RSP: 002b:00007fec159f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 309.609926][ T8516] RAX: ffffffffffffffda RBX: 00007fec17a25fa0 RCX: 00007fec1779de99 [ 309.609936][ T8516] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 309.609945][ T8516] RBP: 00007fec159f6090 R08: 0000000000000000 R09: 0000000000000000 [ 309.609953][ T8516] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 309.609962][ T8516] R13: 00007fec17a26038 R14: 00007fec17a25fa0 R15: 00007ffcec048308 [ 309.609983][ T8516] [ 309.787905][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input10 [ 309.804795][ T9] dvb-usb: schedule remote query interval to 1000 msecs. [ 309.813889][ T9] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 309.828896][ T9] dvb-usb: bulk message failed: -22 (7/0) [ 309.839035][ T9] dvb-usb: bulk message failed: -22 (7/0) [ 309.942799][ T9] usb 1-1: USB disconnect, device number 10 [ 310.009926][ T9] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 310.609023][ T8520] bridge1: entered promiscuous mode [ 310.614300][ T8520] bridge1: entered allmulticast mode [ 311.333850][ T8543] netlink: 8 bytes leftover after parsing attributes in process `syz.3.732'. [ 311.512426][ T8545] siw: device registration error -23 [ 311.518968][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 311.538609][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 312.439804][ T8549] PKCS8: Unsupported PKCS#8 version [ 312.741385][ T30] audit: type=1400 audit(2000000008.390:585): avc: denied { mounton } for pid=8548 comm="syz.0.734" path="/syzcgroup/cpu/syz0/cgroup.procs" dev="cgroup" ino=178 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 312.783971][ T8553] netlink: 8 bytes leftover after parsing attributes in process `syz.3.735'. [ 312.932773][ T8557] siw: device registration error -23 [ 314.031223][ T8559] Can't find ip_set type bitmap:ip,mac [ 315.110258][ T8573] FAULT_INJECTION: forcing a failure. [ 315.110258][ T8573] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 315.452340][ T8573] CPU: 1 UID: 0 PID: 8573 Comm: syz.2.740 Not tainted syzkaller #0 PREEMPT(full) [ 315.452364][ T8573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 315.452374][ T8573] Call Trace: [ 315.452380][ T8573] [ 315.452387][ T8573] dump_stack_lvl+0x100/0x190 [ 315.452413][ T8573] should_fail_ex.cold+0x5/0xa [ 315.452436][ T8573] strncpy_from_user+0x3b/0x2d0 [ 315.452460][ T8573] do_getname+0x78/0x390 [ 315.452483][ T8573] path_getxattrat+0x397/0x430 [ 315.452505][ T8573] ? __pfx_path_getxattrat+0x10/0x10 [ 315.452523][ T8573] ? find_held_lock+0x2b/0x80 [ 315.452548][ T8573] ? ksys_write+0x190/0x250 [ 315.452594][ T8573] ? __pfx_ksys_write+0x10/0x10 [ 315.452619][ T8573] ? trace_hardirqs_off+0x70/0x170 [ 315.452645][ T8573] do_syscall_64+0x115/0x870 [ 315.452662][ T8573] ? clear_bhb_loop+0x40/0x90 [ 315.452684][ T8573] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.452700][ T8573] RIP: 0033:0x7f118e59de99 [ 315.452715][ T8573] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 315.452731][ T8573] RSP: 002b:00007f118f496028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bf [ 315.452749][ T8573] RAX: ffffffffffffffda RBX: 00007f118e826090 RCX: 00007f118e59de99 [ 315.452760][ T8573] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 00002000000000c0 [ 315.452771][ T8573] RBP: 00007f118f496090 R08: 0000000000000000 R09: 0000000000000000 [ 315.452781][ T8573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 315.452791][ T8573] R13: 00007f118e826128 R14: 00007f118e826090 R15: 00007ffc8a0a7498 [ 315.452815][ T8573] [ 316.143369][ T8587] PKCS8: Unsupported PKCS#8 version [ 316.311410][ T30] audit: type=1400 audit(2000000011.960:586): avc: denied { create } for pid=8586 comm="syz.1.745" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 316.368693][ T8592] netlink: 8 bytes leftover after parsing attributes in process `syz.2.744'. [ 316.478330][ T8596] syz.1.745(8596): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 316.498382][ T8598] siw: device registration error -23 [ 317.069909][ T5613] Bluetooth: hci2: unexpected event for opcode 0x0c57 [ 319.198185][ T30] audit: type=1400 audit(2000000014.840:587): avc: denied { mount } for pid=8608 comm="syz.1.751" name="/" dev="configfs" ino=1114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 319.198231][ T30] audit: type=1400 audit(2000000014.840:588): avc: denied { search } for pid=8608 comm="syz.1.751" name="/" dev="configfs" ino=1114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 319.310064][ T8616] blktrace: Concurrent blktraces are not allowed on loop8 [ 319.958992][ T8621] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 319.988655][ T30] audit: type=1400 audit(2000000015.630:589): avc: denied { setopt } for pid=8620 comm="syz.0.742" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 320.036652][ T8627] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 320.281892][ T9] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 320.361894][ T5729] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 320.387785][ T30] audit: type=1400 audit(2000000016.040:590): avc: denied { mounton } for pid=8631 comm="syz.4.756" path="/137/file0" dev="tmpfs" ino=769 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 320.451938][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 320.459326][ T9] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 320.472104][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 320.483449][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 320.497233][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 320.513626][ T9] usb 2-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 320.525029][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.536274][ T5729] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 320.553273][ T5729] usb 4-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 320.576693][ T9] usb 2-1: config 0 descriptor?? [ 320.588303][ T5729] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.716529][ T5729] usb 4-1: Product: syz [ 320.722350][ T5729] usb 4-1: Manufacturer: syz [ 320.735945][ T5729] usb 4-1: SerialNumber: syz [ 320.962906][ T8642] PKCS8: Unsupported PKCS#8 version [ 321.218788][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 321.227698][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 321.268633][ T9] usb 2-1: USB disconnect, device number 24 [ 321.483164][ T8627] usb usb7: usbfs: process 8627 (syz.3.754) did not claim interface 0 before use [ 321.581233][ T8649] ubi0: attaching mtd0 [ 321.596764][ T8649] ubi0: scanning is finished [ 321.601539][ T8649] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 321.888537][ T5729] usb 4-1: USB disconnect, device number 12 [ 322.029706][ T5613] Bluetooth: hci4: unexpected event for opcode 0x0c57 [ 322.065631][ T8649] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 322.557140][ T8668] netlink: 56 bytes leftover after parsing attributes in process `syz.1.765'. [ 322.934082][ T8673] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 323.355940][ T8679] netlink: 56 bytes leftover after parsing attributes in process `syz.3.767'. [ 323.802223][ T8686] netlink: 8 bytes leftover after parsing attributes in process `syz.4.769'. [ 323.812379][ T30] audit: type=1400 audit(2000000019.460:591): avc: denied { ioctl } for pid=8683 comm="syz.4.769" path="socket:[24106]" dev="sockfs" ino=24106 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 324.106354][ T8695] PKCS8: Unsupported PKCS#8 version [ 324.554848][ T5729] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 324.674243][ T5611] libceph: mon0 (1)[c::]:6789 connect error [ 324.691922][ T9] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 324.699617][ T8700] 9pnet: p9_errstr2errno: server reported unknown error 0x000000 [ 324.709086][ T5611] libceph: mon0 (1)[c::]:6789 connect error [ 324.723588][ T5729] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 324.741359][ T5729] usb 5-1: config 0 has no interface number 0 [ 324.758280][ T5611] libceph: mon0 (1)[c::]:6789 connect error [ 324.766558][ T5729] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 324.778143][ T5729] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.780978][ T8712] syzkaller0: entered promiscuous mode [ 324.797862][ T5729] usb 5-1: Product: syz [ 324.802774][ T5729] usb 5-1: Manufacturer: syz [ 324.807714][ T5729] usb 5-1: SerialNumber: syz [ 324.811304][ T8712] syzkaller0: entered allmulticast mode [ 324.819682][ T5729] usb 5-1: config 0 descriptor?? [ 324.877135][ T9] usb 1-1: config 1 has an invalid interface number: 7 but max is 0 [ 324.885637][ T9] usb 1-1: config 1 has no interface number 0 [ 324.893326][ T9] usb 1-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 324.907104][ T9] usb 1-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 324.917264][ T9] usb 1-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 324.929841][ T9] usb 1-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 324.939603][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.947833][ T9] usb 1-1: Product: syz [ 324.952100][ T9] usb 1-1: Manufacturer: syz [ 324.956704][ T9] usb 1-1: SerialNumber: syz [ 324.966734][ T8698] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 325.004009][ T5611] libceph: mon0 (1)[c::]:6789 connect error [ 325.022075][ T5611] libceph: mon0 (1)[c::]:6789 connect error [ 325.040890][ T5729] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 325.051497][ T5729] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 325.062138][ T5729] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 325.070193][ T5729] usb 5-1: media controller created [ 325.080955][ T5729] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 325.121978][ T5790] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 325.203057][ T8696] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 325.273476][ T5790] usb 3-1: unable to get BOS descriptor or descriptor too short [ 325.282272][ T5790] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 325.292508][ T5790] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 50, changing to 7 [ 325.305751][ T5790] usb 3-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40 [ 325.315037][ T5790] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.323175][ T5790] usb 3-1: Product: syz [ 325.327855][ T5790] usb 3-1: Manufacturer: syz [ 325.546882][ T5729] i2c i2c-1: ec100: i2c rd failed=-32 reg=33 [ 325.570174][ T5720] libceph: mon0 (1)[c::]:6789 connect error [ 325.596113][ T9] sierra_net 1-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.0-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:05:07 [ 325.630606][ T5611] libceph: mon0 (1)[c::]:6789 connect error [ 325.807697][ T8702] ceph: No mds server is up or the cluster is laggy [ 325.810349][ T8706] ceph: No mds server is up or the cluster is laggy [ 325.850166][ T9] sierra_net 1-1:1.7 wwan0: Submit SYNC failed -71 [ 325.976247][ T9] sierra_net 1-1:1.7 wwan0: Send SYNC failed, status -71 [ 326.097759][ T9] sierra_net 1-1:1.7 wwan0: Submit SYNC failed -71 [ 326.139362][ T9] sierra_net 1-1:1.7 wwan0: Send SYNC failed, status -71 [ 326.449575][ T9] usb 1-1: USB disconnect, device number 11 [ 326.940755][ T9] sierra_net 1-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.0-1, Sierra Wireless USB-to-WWAN Modem [ 327.458705][ T5790] usb 3-1: SerialNumber: syz [ 327.573666][ T9] sierra_net 1-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19 [ 327.655471][ T5729] usb 5-1: USB disconnect, device number 19 [ 327.721532][ T8723] netlink: 56 bytes leftover after parsing attributes in process `syz.3.778'. [ 327.983577][ T5790] usb 3-1: USB disconnect, device number 13 [ 328.183001][ T5613] Bluetooth: hci1: unexpected event for opcode 0x0c57 [ 328.630408][ T8730] trusted_key: encrypted_key: insufficient parameters specified [ 328.691014][ T5601] udevd[5601]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 328.775571][ T8730] bond0: entered promiscuous mode [ 328.780771][ T8730] bond_slave_0: entered promiscuous mode [ 328.856052][ T8730] bond_slave_1: entered promiscuous mode [ 328.962920][ T30] audit: type=1400 audit(2000000024.620:592): avc: denied { map } for pid=8739 comm="syz.4.783" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 329.055981][ T8743] PKCS8: Unsupported PKCS#8 version [ 329.268038][ T8753] FAULT_INJECTION: forcing a failure. [ 329.268038][ T8753] name failslab, interval 1, probability 0, space 0, times 0 [ 329.305197][ T8753] CPU: 1 UID: 0 PID: 8753 Comm: syz.4.787 Not tainted syzkaller #0 PREEMPT(full) [ 329.305223][ T8753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 329.305233][ T8753] Call Trace: [ 329.305240][ T8753] [ 329.305248][ T8753] dump_stack_lvl+0x100/0x190 [ 329.305274][ T8753] should_fail_ex.cold+0x5/0xa [ 329.305296][ T8753] should_failslab+0xc2/0x120 [ 329.305318][ T8753] __kmalloc_noprof+0xfc/0x820 [ 329.305336][ T8753] ? nft_trans_alloc+0x1d/0x2d0 [ 329.305365][ T8753] nft_trans_alloc+0x1d/0x2d0 [ 329.305388][ T8753] nf_tables_newset+0x3224/0x4250 [ 329.305418][ T8753] ? rcu_is_watching+0x12/0xc0 [ 329.305442][ T8753] ? __pfx_nf_tables_newset+0x10/0x10 [ 329.305465][ T8753] ? reacquire_held_locks+0xce/0x1e0 [ 329.305484][ T8753] ? nf_tables_valid_genid+0x35/0x140 [ 329.305508][ T8753] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 329.305529][ T8753] ? __nla_validate_parse+0x1e7/0x28b0 [ 329.305573][ T8753] ? __nla_parse+0x40/0x60 [ 329.305602][ T8753] nfnetlink_rcv_batch+0x1410/0x2880 [ 329.305636][ T8753] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 329.305655][ T8753] ? find_held_lock+0x2b/0x80 [ 329.305695][ T8753] ? avc_has_perm_noaudit+0x145/0x3b0 [ 329.305740][ T8753] ? __nla_parse+0x40/0x60 [ 329.305769][ T8753] nfnetlink_rcv+0x3bd/0x440 [ 329.305789][ T8753] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 329.305816][ T8753] netlink_unicast+0x585/0x850 [ 329.305847][ T8753] ? __pfx_netlink_unicast+0x10/0x10 [ 329.305871][ T8753] ? __pfx_sock_has_perm+0x10/0x10 [ 329.305897][ T8753] netlink_sendmsg+0x8b0/0xda0 [ 329.305925][ T8753] ? __pfx_netlink_sendmsg+0x10/0x10 [ 329.305952][ T8753] ? selinux_socket_sendmsg+0x198/0x2f0 [ 329.305978][ T8753] ____sys_sendmsg+0xa4d/0xbe0 [ 329.306007][ T8753] ? __pfx_netlink_sendmsg+0x10/0x10 [ 329.306033][ T8753] ? __pfx_____sys_sendmsg+0x10/0x10 [ 329.306067][ T8753] ___sys_sendmsg+0x190/0x1e0 [ 329.306094][ T8753] ? __pfx____sys_sendmsg+0x10/0x10 [ 329.306117][ T8753] ? __lock_acquire+0x49f/0x1a40 [ 329.306137][ T8753] ? get_pid_task+0x106/0x250 [ 329.306190][ T8753] __sys_sendmsg+0x160/0x210 [ 329.306210][ T8753] ? __pfx___sys_sendmsg+0x10/0x10 [ 329.306242][ T8753] do_syscall_64+0x115/0x870 [ 329.306258][ T8753] ? clear_bhb_loop+0x40/0x90 [ 329.306280][ T8753] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.306298][ T8753] RIP: 0033:0x7fec1779de99 [ 329.306314][ T8753] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 329.306331][ T8753] RSP: 002b:00007fec159f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 329.306349][ T8753] RAX: ffffffffffffffda RBX: 00007fec17a25fa0 RCX: 00007fec1779de99 [ 329.306361][ T8753] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000003 [ 329.306372][ T8753] RBP: 00007fec159f6090 R08: 0000000000000000 R09: 0000000000000000 [ 329.306382][ T8753] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 329.306391][ T8753] R13: 00007fec17a26038 R14: 00007fec17a25fa0 R15: 00007ffcec048308 [ 329.306416][ T8753] [ 329.798691][ T8758] netlink: 56 bytes leftover after parsing attributes in process `syz.2.785'. [ 330.950899][ T5613] Bluetooth: hci1: unexpected event for opcode 0x0c57 [ 331.430736][ T30] audit: type=1400 audit(2000000001.530:593): avc: denied { listen } for pid=8778 comm="syz.0.794" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 331.453098][ T30] audit: type=1400 audit(2000000001.560:594): avc: denied { write } for pid=8778 comm="syz.0.794" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 331.553319][ T30] audit: type=1400 audit(2000000001.610:595): avc: denied { accept } for pid=8778 comm="syz.0.794" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 331.876606][ T5790] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 332.116151][ T8801] tmpfs: Group quota inode hardlimit too large. [ 332.171582][ T8806] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 332.179251][ T8806] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 332.870746][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 332.983148][ T5729] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 333.071399][ T8823] batadv_slave_1: entered promiscuous mode [ 333.083196][ T8823] netlink: 28 bytes leftover after parsing attributes in process `syz.2.804'. [ 333.181877][ T5729] usb 4-1: Using ep0 maxpacket: 32 [ 333.194505][ T5729] usb 4-1: config 0 has an invalid interface number: 16 but max is 0 [ 333.211947][ T5729] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 333.223647][ T5729] usb 4-1: config 0 has no interface number 0 [ 333.234177][ T5729] usb 4-1: config 0 interface 16 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 333.268111][ T5729] usb 4-1: New USB device found, idVendor=046d, idProduct=c70e, bcdDevice= 0.00 [ 333.706533][ T5728] libceph: mon0 (1)[c::]:6789 connect error [ 333.717046][ T8798] ceph: No mds server is up or the cluster is laggy [ 333.730954][ T5729] usb 4-1: New USB device strings: Mfr=20, Product=0, SerialNumber=0 [ 333.745659][ T5729] usb 4-1: Manufacturer: syz [ 333.761675][ T5729] usb 4-1: config 0 descriptor?? [ 333.801675][ T5729] usbhid 4-1:0.16: couldn't find an input interrupt endpoint [ 333.829069][ T5729] hsr0: entered promiscuous mode [ 333.841382][ T8806] netlink: 4 bytes leftover after parsing attributes in process `syz.1.800'. [ 333.856263][ T30] audit: type=1400 audit(2000000003.960:596): avc: denied { setopt } for pid=8826 comm="syz.4.805" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 334.112298][ T8832] netlink: 8 bytes leftover after parsing attributes in process `syz.0.807'. [ 334.572642][ T5729] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 334.643687][ T8839] siw: device registration error -23 [ 335.821880][ T5729] usb 5-1: Using ep0 maxpacket: 32 [ 335.828579][ T5729] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 335.848297][ T5729] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.949280][ T5729] usb 5-1: config 0 descriptor?? [ 335.960081][ T5729] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 336.010313][ T5790] usb 4-1: USB disconnect, device number 13 [ 336.060534][ T8853] netlink: 56 bytes leftover after parsing attributes in process `syz.0.811'. [ 336.660936][ T8863] netlink: 148 bytes leftover after parsing attributes in process `syz.3.814'. [ 337.220721][ T5729] gspca_vc032x: reg_w err -71 [ 337.227108][ T5729] gspca_vc032x: I2c Bus Busy Wait 00 [ 337.238204][ T5729] gspca_vc032x: I2c Bus Busy Wait 00 [ 337.243551][ T5729] gspca_vc032x: I2c Bus Busy Wait 00 [ 337.248830][ T5729] gspca_vc032x: I2c Bus Busy Wait 00 [ 337.254692][ T5729] gspca_vc032x: I2c Bus Busy Wait 00 [ 337.260041][ T5729] gspca_vc032x: I2c Bus Busy Wait 00 [ 337.267081][ T5729] gspca_vc032x: I2c Bus Busy Wait 00 [ 337.278392][ T5729] gspca_vc032x: I2c Bus Busy Wait 00 [ 337.287476][ T5729] gspca_vc032x: I2c Bus Busy Wait 00 [ 337.299897][ T5729] gspca_vc032x: I2c Bus Busy Wait 00 [ 337.379983][ T30] audit: type=1400 audit(2000000007.480:597): avc: denied { create } for pid=8866 comm="syz.1.815" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 337.555302][ T30] audit: type=1400 audit(2000000007.480:598): avc: denied { write } for pid=8866 comm="syz.1.815" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 337.615838][ T8872] syzkaller0: entered promiscuous mode [ 337.665705][ T8872] syzkaller0: entered allmulticast mode [ 337.710817][ T5729] gspca_vc032x: I2c Bus Busy Wait 00 [ 337.716359][ T5729] gspca_vc032x: I2c Bus Busy Wait 00 [ 337.721663][ T5729] gspca_vc032x: I2c Bus Busy Wait 00 [ 337.727252][ T5729] gspca_vc032x: I2c Bus Busy Wait 00 [ 337.732739][ T5729] gspca_vc032x: I2c Bus Busy Wait 00 [ 337.738955][ T5729] gspca_vc032x: I2c Bus Busy Wait 00 [ 337.759739][ T5729] gspca_vc032x: I2c Bus Busy Wait 00 [ 337.775203][ T5729] gspca_vc032x: I2c Bus Busy Wait 00 [ 337.794017][ T5729] gspca_vc032x: Unknown sensor... [ 337.815963][ T5729] vc032x 5-1:0.0: probe with driver vc032x failed with error -22 [ 337.963343][ T5729] usb 5-1: USB disconnect, device number 21 [ 338.953784][ T30] audit: type=1400 audit(2000000009.050:599): avc: denied { ioctl } for pid=8883 comm="syz.3.820" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0x943c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 339.642031][ T5790] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 340.038379][ T5790] usb 5-1: config 127 has an invalid interface number: 138 but max is 0 [ 340.061761][ T5790] usb 5-1: config 127 has no interface number 0 [ 340.070349][ T5790] usb 5-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=4e.40 [ 340.082210][ T5790] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.090277][ T5790] usb 5-1: Product: syz [ 340.096399][ T5790] usb 5-1: Manufacturer: syz [ 340.101029][ T5790] usb 5-1: SerialNumber: syz [ 340.375384][ T8908] overlayfs: failed to resolve './file0': -2 [ 341.207021][ T5790] usb 5-1: probing VID:PID(0424:012C) [ 341.225480][ T5790] usb 5-1: vub300 testing BULK OUT EndPoint(0) 0F [ 341.259712][ T5790] usb 5-1: Could not find two sets of bulk-in/out endpoint pairs [ 341.289553][ T5790] vub300 5-1:127.138: probe with driver vub300 failed with error -22 [ 341.301019][ T8913] trusted_key: encrypted_key: insufficient parameters specified [ 341.317866][ T5790] usb 5-1: USB disconnect, device number 22 [ 341.511002][ T8919] syzkaller0: entered promiscuous mode [ 341.519167][ T8919] syzkaller0: entered allmulticast mode [ 341.524991][ T30] audit: type=1400 audit(2000000011.630:600): avc: denied { create } for pid=8920 comm="syz.4.830" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 341.611899][ T29] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 341.664617][ T8927] netlink: 44 bytes leftover after parsing attributes in process `syz.1.831'. [ 341.817901][ T29] usb 3-1: Using ep0 maxpacket: 8 [ 341.850375][ T29] usb 3-1: config 0 has an invalid descriptor of length 196, skipping remainder of the config [ 341.900339][ T29] usb 3-1: config 0 interface 0 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 8 [ 341.922016][ T5728] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 341.983321][ T29] usb 3-1: config 0 interface 0 has no altsetting 0 [ 341.993499][ T8933] efs: cannot read volume header [ 342.016339][ T29] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 342.059698][ T29] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.110001][ T29] usb 3-1: config 0 descriptor?? [ 342.118222][ T8934] SELinux: Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped). [ 342.171685][ T30] audit: type=1400 audit(2000000012.240:601): avc: denied { relabelto } for pid=8930 comm="syz.3.833" name="midiC2D0" dev="devtmpfs" ino=1302 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 342.234786][ T5728] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 342.283818][ T5728] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.306599][ T5728] usb 1-1: Product: syz [ 342.317143][ T5728] usb 1-1: Manufacturer: syz [ 342.423810][ T30] audit: type=1400 audit(2000000012.240:602): avc: denied { associate } for pid=8930 comm="syz.3.833" name="midiC2D0" dev="devtmpfs" ino=1302 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 srawcon="system_u:object_r:crond_var_run_t:s0" [ 342.467892][ T5728] usb 1-1: SerialNumber: syz [ 342.530792][ T8912] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 342.544604][ T5728] usb 1-1: config 0 descriptor?? [ 342.603297][ T8912] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 342.770361][ T8929] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 343.004127][ T29] usb 3-1: string descriptor 0 read error: -71 [ 343.120560][ T29] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 343.143768][ T5728] usb 1-1: Firmware: major: 55, minor: 132, hardware type: UNKNOWN (145) [ 343.217955][ T29] usb 3-1: USB disconnect, device number 14 [ 343.357450][ T5728] usb 1-1: Firmware: build  [ 343.397196][ T8937] netlink: 4 bytes leftover after parsing attributes in process `syz.1.834'. [ 343.491528][ T8937] team0: Port device team_slave_0 removed [ 343.544607][ T30] audit: type=1400 audit(2000000013.650:603): avc: denied { setopt } for pid=8936 comm="syz.1.834" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 343.570933][ T5728] usb 1-1: failed to fetch extended address, random address set [ 343.640937][ T5728] usb 1-1: atusb_probe: initialization failed, error = -524 [ 343.782642][ T5728] atusb 1-1:0.0: probe with driver atusb failed with error -524 [ 343.890282][ T5728] usb 1-1: USB disconnect, device number 12 [ 344.100252][ T8949] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 344.264812][ T30] audit: type=1400 audit(2000000014.370:604): avc: denied { write } for pid=8945 comm="syz.3.837" name="uinput" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 344.265627][ T8958] input input11: cannot allocate more than FF_MAX_EFFECTS effects [ 344.389893][ T8963] syzkaller0: entered promiscuous mode [ 344.415321][ T8963] syzkaller0: entered allmulticast mode [ 344.840276][ T8969] trusted_key: encrypted_key: insufficient parameters specified [ 344.849439][ T5728] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 345.020004][ T5728] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 345.032252][ T5728] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 345.058130][ T5728] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 345.335487][ T5728] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 345.354037][ T5728] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 345.371792][ T5728] usb 1-1: Product: syz [ 345.387228][ T5728] usb 1-1: Manufacturer: syz [ 346.235937][ T30] audit: type=1400 audit(2000000015.630:605): avc: denied { map } for pid=8976 comm="syz.3.848" path="/proc/643/smaps" dev="proc" ino=25969 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 346.270929][ T5728] usb 1-1: SerialNumber: syz [ 346.309106][ T30] audit: type=1400 audit(2000000015.630:606): avc: denied { bind } for pid=8976 comm="syz.3.848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 347.164115][ T5728] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 13 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 347.176310][ T8992] syzkaller0: entered promiscuous mode [ 347.181926][ T8992] syzkaller0: entered allmulticast mode [ 347.272053][ T29] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 347.421889][ T29] usb 4-1: Using ep0 maxpacket: 32 [ 347.515441][ T29] usb 4-1: config 0 has an invalid interface number: 16 but max is 0 [ 347.535163][ T29] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 347.545836][ T29] usb 4-1: config 0 has no interface number 0 [ 347.552366][ T29] usb 4-1: config 0 interface 16 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 348.114862][ T29] usb 4-1: New USB device found, idVendor=046d, idProduct=c70e, bcdDevice= 0.00 [ 348.124071][ T29] usb 4-1: New USB device strings: Mfr=20, Product=0, SerialNumber=0 [ 348.254750][ T29] usb 4-1: Manufacturer: syz [ 348.282767][ T29] usb 4-1: config 0 descriptor?? [ 348.301721][ T29] usbhid 4-1:0.16: couldn't find an input interrupt endpoint [ 349.470319][ T5729] usb 1-1: USB disconnect, device number 13 [ 349.485751][ T5729] usblp0: removed [ 349.891961][ T30] audit: type=1400 audit(2000000019.600:607): avc: denied { read write } for pid=9015 comm="syz.4.859" name="midiC2D0" dev="devtmpfs" ino=1302 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 350.892050][ T30] audit: type=1400 audit(2000000019.600:608): avc: denied { open } for pid=9015 comm="syz.4.859" path="/dev/snd/midiC2D0" dev="devtmpfs" ino=1302 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 350.958060][ T5728] usb 4-1: USB disconnect, device number 14 [ 351.039238][ T9036] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9036 comm=syz.1.861 [ 351.109746][ T9043] netlink: 28 bytes leftover after parsing attributes in process `syz.0.865'. [ 352.103672][ T9062] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9062 comm=syz.0.870 [ 352.691637][ T5729] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 353.114282][ T5729] usb 5-1: config 1 has an invalid interface number: 7 but max is 0 [ 353.124809][ T5729] usb 5-1: config 1 has no interface number 0 [ 353.143916][ T5729] usb 5-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 353.173007][ T5729] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 353.209779][ T5729] usb 5-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 353.223787][ T9082] kAFS: unable to lookup cell 'ßñÏ(,c¾ûL' [ 353.250497][ T5729] usb 5-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 353.267955][ T5729] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.286362][ T5729] usb 5-1: Product: syz [ 353.296062][ T5729] usb 5-1: Manufacturer: syz [ 353.311556][ T5729] usb 5-1: SerialNumber: syz [ 353.326894][ T9073] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 353.334691][ T9091] netlink: 28 bytes leftover after parsing attributes in process `syz.2.878'. [ 353.603977][ T9072] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 353.752378][ T29] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 353.767051][ T9101] netlink: 68 bytes leftover after parsing attributes in process `syz.1.882'. [ 354.217556][ T5729] sierra_net 5-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.4-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:06:07 [ 354.271853][ T29] usb 4-1: Using ep0 maxpacket: 32 [ 354.278186][ T29] usb 4-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 354.288719][ T29] usb 4-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 354.300524][ T29] usb 4-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 354.324824][ T29] usb 4-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 354.359533][ T29] usb 4-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 354.368939][ T29] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.380513][ T29] usb 4-1: Product: syz [ 354.384844][ T29] usb 4-1: Manufacturer: syz [ 354.389718][ T29] usb 4-1: SerialNumber: syz [ 354.403690][ C1] imon 4-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 354.418566][ T29] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/input/input12 [ 354.652053][ T5729] sierra_net 5-1:1.7 wwan0: Submit SYNC failed -71 [ 354.652091][ T29] imon 4-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 354.667018][ T29] (id 0x00) [ 355.139564][ T5729] sierra_net 5-1:1.7 wwan0: Send SYNC failed, status -71 [ 355.151019][ T5729] sierra_net 5-1:1.7 wwan0: Submit SYNC failed -71 [ 355.159917][ T5729] sierra_net 5-1:1.7 wwan0: Send SYNC failed, status -71 [ 355.177028][ T5729] usb 5-1: USB disconnect, device number 23 [ 355.192262][ T5729] sierra_net 5-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.4-1, Sierra Wireless USB-to-WWAN Modem [ 355.251872][ T29] rc_core: IR keymap rc-imon-pad not found [ 355.265042][ T29] Registered IR keymap rc-empty [ 355.270173][ T29] imon 4-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 355.287235][ T29] imon 4-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 355.315067][ T29] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0 [ 355.335279][ T29] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0/input13 [ 355.421141][ T9096] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 355.444130][ T29] imon 4-1:155.0: iMON device (15c2:ffdc, intf0) on usb<4:15> initialized [ 355.444785][ T5729] sierra_net 5-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19 [ 355.458170][ T9096] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 355.540187][ T30] audit: type=1400 audit(2000000025.600:609): avc: denied { ioctl } for pid=9119 comm="syz.0.887" path="/dev/binderfs/binder0" dev="binder" ino=10 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 355.571416][ T30] audit: type=1400 audit(2000000025.610:610): avc: denied { set_context_mgr } for pid=9119 comm="syz.0.887" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 355.580124][ T9123] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9123 comm=syz.1.886 [ 355.605484][ T30] audit: type=1400 audit(2000000025.610:611): avc: denied { write } for pid=9119 comm="syz.0.887" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 355.705218][ T30] audit: type=1400 audit(2000000025.670:612): avc: denied { call } for pid=9119 comm="syz.0.887" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 355.958677][ T9115] imon:vfd_write: invalid payload size [ 356.965839][ T9120] syz.0.887 (9120): drop_caches: 2 [ 357.081902][ T5729] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 357.119144][ T29] usb 4-1: USB disconnect, device number 15 [ 357.726622][ T5729] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 357.800143][ T5729] usb 3-1: config 0 has no interface number 0 [ 358.029820][ T5729] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 358.044562][ T5729] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 358.055477][ T5729] usb 3-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 358.069575][ T5729] usb 3-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 358.079622][ T5729] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.141968][ T9] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 358.301950][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 358.323969][ T9] usb 1-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 358.337447][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.349611][ T9] usb 1-1: Product: syz [ 358.355362][ T9] usb 1-1: Manufacturer: syz [ 358.360422][ T9] usb 1-1: SerialNumber: syz [ 358.570281][ T5729] usb 3-1: config 0 descriptor?? [ 358.590406][ T9] usb 1-1: config 0 descriptor?? [ 358.659123][ T30] audit: type=1400 audit(2000000028.760:613): avc: denied { bind } for pid=9154 comm="syz.3.896" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 358.694213][ T30] audit: type=1400 audit(2000000028.780:614): avc: denied { setopt } for pid=9154 comm="syz.3.896" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 358.774460][ T30] audit: type=1400 audit(2000000028.780:615): avc: denied { listen } for pid=9154 comm="syz.3.896" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 358.839985][ T9] RobotFuzz Open Source InterFace, OSIF 1-1:0.0: version d4.15 found at bus 001 address 014 [ 358.857059][ T30] audit: type=1400 audit(2000000028.800:616): avc: denied { accept } for pid=9154 comm="syz.3.896" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 358.880751][ T30] audit: type=1400 audit(2000000028.800:617): avc: denied { write } for pid=9154 comm="syz.3.896" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 358.903611][ T30] audit: type=1400 audit(2000000028.850:618): avc: denied { read } for pid=9154 comm="syz.3.896" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 359.051578][ T9149] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 359.060124][ T5729] usbhid 3-1:0.1: can't add hid device: -71 [ 359.068055][ T5729] usbhid 3-1:0.1: probe with driver usbhid failed with error -71 [ 359.081278][ T9149] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 359.092660][ T5729] usb 3-1: USB disconnect, device number 15 [ 359.938840][ T5729] usb 1-1: USB disconnect, device number 14 [ 359.984392][ T9176] Failed to initialize the IGMP autojoin socket (err -2) [ 360.167733][ T9181] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9181 comm=syz.1.901 [ 360.982267][ T9] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 361.031713][ T9201] netlink: 'syz.1.909': attribute type 2 has an invalid length. [ 361.044299][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 361.044313][ T30] audit: type=1400 audit(2000000031.150:622): avc: denied { connect } for pid=9200 comm="syz.1.909" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 361.155005][ T9] usb 3-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 361.166766][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.206971][ T9] usb 3-1: Product: syz [ 361.311699][ T9] usb 3-1: Manufacturer: syz [ 361.326421][ T9] usb 3-1: SerialNumber: syz [ 362.236327][ T9213] openvswitch: netlink: IPv4 tun info is not correct [ 362.683844][ T9] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 16 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 362.707751][ T9] usb 3-1: USB disconnect, device number 16 [ 362.772952][ T9] usblp0: removed [ 362.926564][ T9221] Failed to initialize the IGMP autojoin socket (err -2) [ 362.990932][ T9225] netlink: 44 bytes leftover after parsing attributes in process `syz.4.914'. [ 363.001905][ T29] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 363.053365][ T5613] Bluetooth: unknown link type 15 [ 363.058817][ T5613] Bluetooth: hci1: connection err: -111 [ 363.151895][ T29] usb 4-1: Using ep0 maxpacket: 16 [ 363.159709][ T29] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 363.196998][ T29] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 363.226813][ T29] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 363.242423][ T29] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.250803][ T29] usb 4-1: Product: syz [ 363.255689][ T29] usb 4-1: Manufacturer: syz [ 363.268401][ T29] usb 4-1: SerialNumber: syz [ 363.279095][ T5790] usb 5-1: new full-speed USB device number 24 using dummy_hcd [ 363.299036][ T29] usb 4-1: config 0 descriptor?? [ 363.312442][ T29] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 363.321762][ T29] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 363.455120][ T5790] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 363.473495][ T5790] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 363.498335][ T5790] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 363.527925][ T5790] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.725866][ T9237] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9237 comm=syz.0.918 [ 363.926543][ T5790] usb 5-1: usb_control_msg returned -32 [ 363.932240][ T5790] usbtmc 5-1:16.0: can't read capabilities [ 364.175924][ T29] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 364.187962][ T29] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 364.197991][ T29] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 364.205023][ T29] em28xx 4-1:0.0: No AC97 audio processor [ 364.275764][ T9240] vlan2: entered promiscuous mode [ 364.280806][ T9240] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 364.290384][ T30] audit: type=1400 audit(2000000034.370:623): avc: denied { mount } for pid=9239 comm="syz.1.920" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 364.303249][ T29] usb 4-1: USB disconnect, device number 16 [ 364.339637][ T29] em28xx 4-1:0.0: Disconnecting em28xx [ 364.423305][ T29] em28xx 4-1:0.0: Freeing device [ 364.981908][ T5790] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 365.151120][ T5790] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 365.160318][ T5790] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.171406][ T5790] usb 1-1: Product: syz [ 365.176816][ T5790] usb 1-1: Manufacturer: syz [ 365.186229][ T5790] usb 1-1: SerialNumber: syz [ 365.231558][ T5790] usb 1-1: config 0 descriptor?? [ 366.042380][ T30] audit: type=1400 audit(2000000036.140:624): avc: denied { create } for pid=9247 comm="syz.0.923" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 366.096705][ T9] usb 5-1: USB disconnect, device number 24 [ 366.137541][ T30] audit: type=1400 audit(2000000036.180:625): avc: denied { setopt } for pid=9247 comm="syz.0.923" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 366.360502][ T5790] usb 1-1: Firmware: major: 135, minor: 193, hardware type: UNKNOWN (205) [ 366.586119][ T9271] trusted_key: encrypted_key: insufficient parameters specified [ 366.626571][ T5790] usb 1-1: failed to fetch extended address, random address set [ 366.641755][ T5790] usb 1-1: atusb_probe: initialization failed, error = -524 [ 366.657681][ T5790] atusb 1-1:0.0: probe with driver atusb failed with error -524 [ 366.684381][ T5790] usb 1-1: USB disconnect, device number 15 [ 367.756098][ T9291] syzkaller0: entered promiscuous mode [ 367.789865][ T9291] syzkaller0: entered allmulticast mode [ 368.075372][ T9] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 368.298619][ T9300] trusted_key: encrypted_key: insufficient parameters specified [ 368.312003][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 368.338267][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 368.370671][ T9] usb 3-1: config 14 has an invalid interface number: 57 but max is 1 [ 368.421027][ T9] usb 3-1: config 14 has an invalid interface number: 228 but max is 1 [ 368.480675][ T9] usb 3-1: config 14 has no interface number 0 [ 368.543432][ T9] usb 3-1: config 14 has no interface number 1 [ 368.579956][ T9] usb 3-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 368.636165][ T9] usb 3-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 368.685404][ T9] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 368.737207][ T9] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 368.853531][ T9] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 370.034579][ T9] usb 3-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 370.049555][ T9] usb 3-1: config 14 interface 57 has no altsetting 0 [ 370.058087][ T9] usb 3-1: config 14 interface 228 has no altsetting 0 [ 370.068764][ T9] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 370.079886][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.089552][ T9] usb 3-1: Product: syz [ 370.096431][ T9] usb 3-1: Manufacturer: syz [ 370.101169][ T9] usb 3-1: SerialNumber: syz [ 370.282204][ T5790] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 370.456166][ T5790] usb 5-1: config 1 has an invalid interface number: 7 but max is 0 [ 370.476978][ T5790] usb 5-1: config 1 has no interface number 0 [ 370.493593][ T5790] usb 5-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 370.508667][ T5790] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 370.532989][ T5790] usb 5-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 370.541731][ T9] legousbtower 3-1:14.57: interrupt endpoints not found [ 370.571680][ T5790] usb 5-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 371.182752][ T9340] syzkaller0: entered promiscuous mode [ 371.188291][ T9340] syzkaller0: entered allmulticast mode [ 371.282226][ T5790] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.293520][ T5790] usb 5-1: Product: syz [ 371.297703][ T5790] usb 5-1: Manufacturer: syz [ 371.302442][ T5790] usb 5-1: SerialNumber: syz [ 371.317185][ T9317] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 371.875540][ T9313] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 371.901582][ T9343] bond0: left promiscuous mode [ 371.906640][ T9343] bond_slave_0: left promiscuous mode [ 371.912486][ T9343] bond_slave_1: left promiscuous mode [ 371.919443][ T9343] 8021q: adding VLAN 0 to HW filter on device bond0 [ 371.961180][ T9343] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 371.974610][ T9343] bond1: left allmulticast mode [ 371.979723][ T9343] 8021q: adding VLAN 0 to HW filter on device bond1 [ 371.987408][ T9343] bond2: left allmulticast mode [ 371.992688][ T9343] 8021q: adding VLAN 0 to HW filter on device bond2 [ 372.001996][ T9343] 8021q: adding VLAN 0 to HW filter on device bond3 [ 372.167572][ T9347] geneve2: entered promiscuous mode [ 372.261288][ T5790] sierra_net 5-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.4-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:07:07 [ 372.440564][ T9357] fuse: Bad value for 'fd' [ 372.446711][ T9357] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 372.515564][ T9358] trusted_key: encrypted_key: insufficient parameters specified [ 372.634236][ T5790] sierra_net 5-1:1.7 wwan0: Submit SYNC failed -71 [ 372.648679][ T5790] sierra_net 5-1:1.7 wwan0: Send SYNC failed, status -71 [ 372.672744][ T5790] sierra_net 5-1:1.7 wwan0: Submit SYNC failed -71 [ 372.690937][ T5790] sierra_net 5-1:1.7 wwan0: Send SYNC failed, status -71 [ 372.736912][ T5790] usb 5-1: USB disconnect, device number 25 [ 372.805378][ T9] legousbtower 3-1:14.228: get version request failed: -71 [ 372.823679][ T9] legousbtower 3-1:14.228: probe with driver legousbtower failed with error -71 [ 372.827083][ T5790] sierra_net 5-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.4-1, Sierra Wireless USB-to-WWAN Modem [ 372.888328][ T9] usb 3-1: USB disconnect, device number 17 [ 372.964774][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 372.979478][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 373.866674][ T5790] sierra_net 5-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19 [ 374.033052][ T30] audit: type=1400 audit(2000000044.130:626): avc: denied { mount } for pid=9365 comm="syz.0.958" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 374.242177][ T29] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 374.282442][ T5713] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 374.432027][ T5713] usb 3-1: device descriptor read/64, error -71 [ 374.448484][ T29] usb 1-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 374.495761][ T29] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.546997][ T29] usb 1-1: config 0 descriptor?? [ 374.578644][ T29] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 374.668062][ T30] audit: type=1400 audit(2000000044.770:627): avc: denied { write } for pid=9369 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 374.711890][ T5713] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 374.886228][ T5713] usb 3-1: device descriptor read/64, error -71 [ 375.520699][ T5713] usb usb3-port1: attempt power cycle [ 375.558124][ T30] audit: type=1400 audit(2000000045.660:628): avc: denied { write } for pid=9394 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 375.858933][ T9419] netlink: 8 bytes leftover after parsing attributes in process `syz.4.964'. [ 375.918614][ T29] gspca_stv06xx: HDCS-1000/1100 sensor detected [ 375.932243][ T5713] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 375.972377][ T5713] usb 3-1: device descriptor read/8, error -71 [ 376.305625][ T30] audit: type=1400 audit(2000000046.400:629): avc: denied { sqpoll } for pid=9365 comm="syz.0.958" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 376.379139][ T9368] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 376.431974][ T5713] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 376.452512][ T5713] usb 3-1: device descriptor read/8, error -71 [ 376.565764][ T5713] usb usb3-port1: unable to enumerate USB device [ 376.581243][ T30] audit: type=1400 audit(2000000046.680:630): avc: denied { write } for pid=9421 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 376.640492][ T29] STV06xx 1-1:0.0: probe with driver STV06xx failed with error -71 [ 376.974508][ T29] usb 1-1: USB disconnect, device number 16 [ 377.069123][ T30] audit: type=1400 audit(2000000047.170:631): avc: denied { write } for pid=9448 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 377.494628][ T30] audit: type=1400 audit(2000000047.600:632): avc: denied { unmount } for pid=5620 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 377.525944][ T9461] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 377.558147][ T9461] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 377.612552][ T9456] trusted_key: encrypted_key: insufficient parameters specified [ 377.647548][ T9459] cgroup: No subsys list or none specified [ 377.727199][ T9467] syzkaller0: entered promiscuous mode [ 377.740227][ T9467] syzkaller0: entered allmulticast mode [ 377.762239][ T29] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 377.912284][ T29] usb 5-1: device descriptor read/64, error -71 [ 378.244305][ T29] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 378.441884][ T29] usb 5-1: device descriptor read/64, error -71 [ 378.609383][ T9] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 379.090076][ T9] usb 1-1: config 1 has an invalid interface number: 7 but max is 0 [ 379.187870][ T9] usb 1-1: config 1 has no interface number 0 [ 379.232313][ T9] usb 1-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 379.267134][ T9] usb 1-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 379.306458][ T9] usb 1-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 379.332147][ T29] usb usb5-port1: attempt power cycle [ 379.471171][ T9488] siw: device registration error -23 [ 379.690957][ T29] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 379.765379][ T29] usb 5-1: device descriptor read/8, error -71 [ 380.247467][ T29] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 380.344207][ T29] usb 5-1: device descriptor read/8, error -71 [ 380.376370][ T9] usb 1-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 380.387063][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.395969][ T9] usb 1-1: Product: syz [ 380.400153][ T9] usb 1-1: Manufacturer: syz [ 380.404789][ T9] usb 1-1: SerialNumber: syz [ 380.416343][ T9479] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 380.482230][ T29] usb usb5-port1: unable to enumerate USB device [ 380.529972][ T9496] trusted_key: encrypted_key: insufficient parameters specified [ 380.561640][ T9500] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4121 sclass=netlink_route_socket pid=9500 comm=syz.4.983 [ 380.624090][ T30] audit: type=1400 audit(2000000050.730:633): avc: denied { read write } for pid=9499 comm="syz.4.983" name="mouse0" dev="devtmpfs" ino=924 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 380.682294][ T30] audit: type=1400 audit(2000000050.760:634): avc: denied { open } for pid=9499 comm="syz.4.983" path="/dev/input/mouse0" dev="devtmpfs" ino=924 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 380.715068][ T9503] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4121 sclass=netlink_route_socket pid=9503 comm=syz.2.985 [ 380.750354][ T9478] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 380.781877][ T5729] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 380.945167][ T5729] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 380.996641][ T5729] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 381.011312][ T9] sierra_net 1-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.0-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:08:07 [ 381.031045][ T5729] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 381.058086][ T5729] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 381.067616][ T5729] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 381.079302][ T5729] usb 4-1: Product: syz [ 381.117078][ T5729] usb 4-1: Manufacturer: syz [ 381.129521][ T5729] usb 4-1: SerialNumber: syz [ 381.358907][ T5729] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 17 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 381.495086][ T9] sierra_net 1-1:1.7 wwan0: Submit SYNC failed -71 [ 381.515724][ T9] sierra_net 1-1:1.7 wwan0: Send SYNC failed, status -71 [ 381.526392][ T9] sierra_net 1-1:1.7 wwan0: Submit SYNC failed -71 [ 381.534578][ T9] sierra_net 1-1:1.7 wwan0: Send SYNC failed, status -71 [ 382.201888][ T9] usb 1-1: USB disconnect, device number 17 [ 382.226366][ T9] sierra_net 1-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.0-1, Sierra Wireless USB-to-WWAN Modem [ 382.322171][ T9] sierra_net 1-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19 [ 385.743140][ T804] usb 4-1: USB disconnect, device number 17 [ 385.758793][ T804] usblp0: removed [ 386.521060][ T9543] trusted_key: encrypted_key: insufficient parameters specified [ 386.905400][ T30] audit: type=1400 audit(2000000057.010:635): avc: denied { write } for pid=9531 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 386.939964][ T9579] syzkaller0: entered promiscuous mode [ 386.976008][ T9579] syzkaller0: entered allmulticast mode [ 387.182786][ T9588] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4121 sclass=netlink_route_socket pid=9588 comm=syz.3.1001 [ 387.262731][ T30] audit: type=1400 audit(2000000057.360:636): avc: denied { write } for pid=9585 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 387.462029][ T9] usb 3-1: new low-speed USB device number 22 using dummy_hcd [ 387.471864][ T804] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 388.502916][ T804] usb 1-1: Using ep0 maxpacket: 32 [ 389.535579][ T804] usb 1-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 390.494780][ T804] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.506312][ T804] usb 1-1: Product: syz [ 390.521983][ T804] usb 1-1: Manufacturer: syz [ 390.526590][ T804] usb 1-1: SerialNumber: syz [ 390.543434][ T804] usb 1-1: config 0 descriptor?? [ 392.654860][ T804] usb 1-1: can't set config #0, error -71 [ 392.670786][ T9] usb 3-1: unable to read config index 0 descriptor/all [ 392.684897][ T9] usb 3-1: can't read configurations, error -71 [ 392.786624][ T804] usb 1-1: USB disconnect, device number 18 [ 393.576813][ T30] audit: type=1400 audit(2000000063.680:637): avc: denied { write } for pid=9597 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 393.762154][ T9] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 393.793113][ T30] audit: type=1400 audit(2000000063.900:638): avc: denied { write } for pid=9645 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 394.035472][ T9651] genirq: Flags mismatch irq 4. 00200000 (das16m1) vs. 00200080 (ttyS0) [ 394.565684][ T9] usb 3-1: config 1 has an invalid interface number: 7 but max is 0 [ 394.582550][ T9655] trusted_key: encrypted_key: insufficient parameters specified [ 394.590413][ T9] usb 3-1: config 1 has no interface number 0 [ 394.591892][ T804] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 394.598572][ T9] usb 3-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 394.617023][ T9] usb 3-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 394.629755][ T9] usb 3-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 394.647330][ T9] usb 3-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 394.659089][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.672738][ T9] usb 3-1: Product: syz [ 394.679289][ T9] usb 3-1: Manufacturer: syz [ 394.684293][ T9] usb 3-1: SerialNumber: syz [ 394.705202][ T9632] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 394.871935][ T804] usb 1-1: Using ep0 maxpacket: 32 [ 394.882822][ T804] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 394.895107][ T804] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 395.465390][ T804] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 395.484247][ T804] usb 1-1: Product: syz [ 395.496793][ T804] usb 1-1: Manufacturer: syz [ 395.504509][ T804] usb 1-1: SerialNumber: syz [ 395.533347][ T804] usb 1-1: config 0 descriptor?? [ 395.542410][ T9643] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 395.560549][ T9626] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 395.861715][ T9] sierra_net 3-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.2-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:09:07 [ 395.950601][ T9667] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4121 sclass=netlink_route_socket pid=9667 comm=syz.1.1019 [ 396.375336][ T9] sierra_net 3-1:1.7 wwan0: Submit SYNC failed -71 [ 396.382420][ T9] sierra_net 3-1:1.7 wwan0: Send SYNC failed, status -71 [ 396.422709][ T9] sierra_net 3-1:1.7 wwan0: Submit SYNC failed -71 [ 396.443004][ T9] sierra_net 3-1:1.7 wwan0: Send SYNC failed, status -71 [ 396.473969][ T9] usb 3-1: USB disconnect, device number 23 [ 396.535094][ T9] sierra_net 3-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.2-1, Sierra Wireless USB-to-WWAN Modem [ 396.622546][ T9] sierra_net 3-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19 [ 396.831499][ T9684] siw: device registration error -23 [ 397.575554][ T9] usb 1-1: USB disconnect, device number 19 [ 398.440430][ T9724] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4121 sclass=netlink_route_socket pid=9724 comm=syz.1.1030 [ 398.498556][ T30] audit: type=1400 audit(2000000068.600:639): avc: denied { write } for pid=9679 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 398.553199][ T9727] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1029'. [ 398.618923][ T30] audit: type=1400 audit(2000000068.720:640): avc: denied { write } for pid=9731 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 398.833140][ T804] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 398.842507][ T5728] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 399.054166][ T30] audit: type=1400 audit(2000000069.160:641): avc: denied { write } for pid=9734 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 399.092556][ T5728] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 399.246766][ T9759] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1033'. [ 399.401837][ T5728] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 399.419359][ T804] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 399.432901][ T5728] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 399.451656][ T804] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 399.468059][ T804] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 399.483578][ T5728] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 399.494028][ T804] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.505855][ T5728] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 399.521527][ T30] audit: type=1400 audit(2000000069.630:642): avc: denied { write } for pid=9760 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 399.549967][ T5728] usb 1-1: Product: syz [ 399.556708][ T5728] usb 1-1: Manufacturer: syz [ 399.569094][ T5728] usb 1-1: SerialNumber: syz [ 399.621025][ T9763] siw: device registration error -23 [ 399.687090][ T9765] trusted_key: encrypted_key: insufficient parameters specified [ 399.771591][ T804] usb 3-1: usb_control_msg returned -32 [ 399.779626][ T804] usbtmc 3-1:16.0: can't read capabilities [ 399.821565][ T5728] usblp 1-1:1.0: usblp1: USB Unidirectional printer dev 20 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 399.988023][ T9783] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4121 sclass=netlink_route_socket pid=9783 comm=syz.1.1042 [ 400.822018][ T30] audit: type=1400 audit(2000000070.930:643): avc: denied { ioctl } for pid=9791 comm="syz.1.1044" path="socket:[28679]" dev="sockfs" ino=28679 ioctlcmd=0x745a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 401.318701][ T9805] siw: device registration error -23 [ 401.376666][ T9] usb 3-1: USB disconnect, device number 24 [ 401.421709][ T5613] Bluetooth: hci2: unexpected event for opcode 0x080b [ 402.399705][ T30] audit: type=1400 audit(2000000072.060:644): avc: denied { read } for pid=9822 comm="syz.3.1055" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 402.558460][ T9] usb 1-1: USB disconnect, device number 20 [ 402.581537][ T9] usblp1: removed [ 402.824413][ T9837] Invalid source name [ 402.828501][ T9837] UBIFS error (pid: 9837): cannot open "/dev/sequencer", error -22 [ 403.486518][ T30] audit: type=1400 audit(2000000072.930:645): avc: denied { mounton } for pid=9835 comm="syz.4.1057" path="/file0" dev="ramfs" ino=28458 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 404.160233][ T9852] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1060'. [ 404.203141][ T9852] netlink: 'syz.0.1060': attribute type 5 has an invalid length. [ 404.221877][ T9852] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1060'. [ 404.258977][ T9853] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1060'. [ 404.322529][ T9853] netlink: 'syz.0.1060': attribute type 5 has an invalid length. [ 404.366836][ T9858] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1062'. [ 404.401867][ T9853] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1060'. [ 404.444193][ T30] audit: type=1400 audit(2000000074.540:646): avc: denied { getopt } for pid=9857 comm="syz.1.1062" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 405.442011][ T30] audit: type=1400 audit(2000000075.540:647): avc: denied { read } for pid=9867 comm="syz.1.1065" name="/" dev="configfs" ino=1114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 405.478720][ T30] audit: type=1400 audit(2000000075.580:648): avc: denied { read open } for pid=9867 comm="syz.1.1065" path="/" dev="configfs" ino=1114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 406.477276][ T9874] tipc: Started in network mode [ 406.502076][ T9874] tipc: Node identity 0eba095b044e, cluster identity 4711 [ 406.535958][ T9874] tipc: Enabled bearer , priority 0 [ 406.555487][ T30] audit: type=1400 audit(2000000076.650:649): avc: denied { listen } for pid=9879 comm="syz.4.1068" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 406.614800][ T9874] tipc: Disabling bearer [ 406.766331][ T9887] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1070'. [ 406.897208][ T30] audit: type=1400 audit(2000000076.990:650): avc: denied { bind } for pid=9885 comm="syz.3.1070" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 407.043093][ T30] audit: type=1400 audit(2000000077.080:651): avc: denied { listen } for pid=9885 comm="syz.3.1070" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 407.443139][ T9905] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9905 comm=syz.3.1071 [ 407.949531][ T30] audit: type=1400 audit(2000000078.050:652): avc: denied { accept } for pid=9879 comm="syz.4.1068" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 408.225705][ T30] audit: type=1400 audit(2000000078.330:653): avc: denied { read } for pid=9911 comm="syz.1.1075" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 408.411891][ T804] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 408.441918][ T30] audit: type=1400 audit(2000000078.540:654): avc: denied { write } for pid=9903 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 408.642344][ T804] usb 4-1: Using ep0 maxpacket: 8 [ 408.655828][ T804] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 408.666094][ T804] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 408.691585][ T804] usb 4-1: New USB device found, idVendor=0e41, idProduct=4249, bcdDevice= 0.40 [ 408.703483][ T804] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.162462][ T804] usb 4-1: Product: syz [ 409.180733][ T30] audit: type=1400 audit(2000000079.280:655): avc: denied { write } for pid=9926 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 409.187694][ T804] usb 4-1: Manufacturer: syz [ 409.221246][ T804] usb 4-1: SerialNumber: syz [ 409.365490][ T9933] siw: device registration error -23 [ 410.037173][ T804] usb 4-1: unit 0 not found! [ 410.157581][ T9938] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 410.248712][ T30] audit: type=1400 audit(2000000080.350:656): avc: denied { open } for pid=9936 comm="syz.0.1080" path="/dev/ptyq4" dev="devtmpfs" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 410.372138][ T804] usb 4-1: USB disconnect, device number 18 [ 410.603426][ T5598] udevd[5598]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 411.011960][ T804] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 411.152513][ T9962] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9962 comm=syz.0.1085 [ 411.518483][ T804] usb 4-1: config 1 has an invalid interface number: 7 but max is 0 [ 411.533565][ T804] usb 4-1: config 1 has no interface number 0 [ 411.540611][ T804] usb 4-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 411.552914][ T804] usb 4-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 411.564586][ T804] usb 4-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 411.656401][ T9] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 411.696744][ T804] usb 4-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 411.706072][ T804] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.714141][ T804] usb 4-1: Product: syz [ 411.718359][ T804] usb 4-1: Manufacturer: syz [ 411.723001][ T804] usb 4-1: SerialNumber: syz [ 411.738307][ T9941] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 413.388305][ T9] usb 3-1: config 1 has an invalid interface number: 7 but max is 0 [ 413.399481][ T9] usb 3-1: config 1 has no interface number 0 [ 413.405944][ T9] usb 3-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 413.418786][ T9] usb 3-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 413.833447][ T9] usb 3-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 413.911453][ T804] usb 4-1: Error in usbnet_get_endpoints (-71) [ 414.035935][ T804] usb 4-1: USB disconnect, device number 19 [ 414.070841][ T9] usb 3-1: string descriptor 0 read error: -71 [ 414.594607][ T9] usb 3-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 414.604852][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.629229][ T9] usb 3-1: can't set config #1, error -71 [ 414.631940][ T9980] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 414.641510][ T9980] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 414.659575][ T9980] vhci_hcd vhci_hcd.0: Device attached [ 414.666520][ T9] usb 3-1: USB disconnect, device number 25 [ 414.872618][ T5611] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 414.990560][ T5611] usb 39-1: new full-speed USB device number 4 using vhci_hcd [ 415.052019][ T804] usb 4-1: new low-speed USB device number 20 using dummy_hcd [ 415.391638][ T804] usb 4-1: config index 0 descriptor too short (expected 20961, got 49) [ 415.510904][ T804] usb 4-1: config 229 has too many interfaces: 130, using maximum allowed: 32 [ 415.635794][ T804] usb 4-1: config 229 has an invalid descriptor of length 233, skipping remainder of the config [ 415.666612][ T804] usb 4-1: config 229 has 0 interfaces, different from the descriptor's value: 130 [ 415.700523][ T804] usb 4-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=5f.0e [ 415.735382][ T804] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.813216][T10003] syzkaller0: entered promiscuous mode [ 415.831677][T10003] syzkaller0: entered allmulticast mode [ 415.992914][T10013] overlayfs: failed to clone lowerpath [ 416.020547][T10014] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10014 comm=syz.4.1098 [ 416.055411][ T30] audit: type=1400 audit(2000000086.070:657): avc: denied { mount } for pid=10012 comm="syz.1.1101" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 416.413772][ T30] audit: type=1400 audit(2000000086.510:658): avc: denied { bind } for pid=10012 comm="syz.1.1101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 416.429530][ T9980] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1091'. [ 416.441833][ T9981] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 2 [ 416.497007][ T1172] vhci_hcd vhci_hcd.3: stop threads [ 416.513333][ T1172] vhci_hcd vhci_hcd.3: release socket [ 416.527814][ T9980] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 416.530085][ T1172] vhci_hcd vhci_hcd.3: disconnect device [ 416.604543][ T9980] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 416.835287][ T804] usb 4-1: string descriptor 0 read error: -71 [ 416.853411][ T804] usb 4-1: USB disconnect, device number 20 [ 417.571438][T10043] genirq: Flags mismatch irq 4. 00200000 (das16m1) vs. 00200080 (ttyS0) [ 418.363410][T10047] syzkaller0: entered promiscuous mode [ 418.372037][T10047] syzkaller0: entered allmulticast mode [ 418.406084][T10051] netlink: 'syz.3.1114': attribute type 11 has an invalid length. [ 418.443076][T10051] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 419.154923][T10068] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1118'. [ 419.177147][T10068] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1118'. [ 419.259790][T10071] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1119'. [ 419.845185][T10073] genirq: Flags mismatch irq 4. 00200000 (das16m1) vs. 00200080 (ttyS0) [ 420.458393][T10081] FAULT_INJECTION: forcing a failure. [ 420.458393][T10081] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 420.490973][T10081] CPU: 1 UID: 0 PID: 10081 Comm: syz.4.1121 Not tainted syzkaller #0 PREEMPT(full) [ 420.490998][T10081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 420.491009][T10081] Call Trace: [ 420.491015][T10081] [ 420.491021][T10081] dump_stack_lvl+0x100/0x190 [ 420.491048][T10081] should_fail_ex.cold+0x5/0xa [ 420.491070][T10081] _copy_from_user+0x2e/0xd0 [ 420.491098][T10081] copy_msghdr_from_user+0x9f/0x4c0 [ 420.491124][T10081] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 420.491157][T10081] ___sys_sendmsg+0x106/0x1e0 [ 420.491182][T10081] ? __pfx____sys_sendmsg+0x10/0x10 [ 420.491204][T10081] ? __lock_acquire+0x49f/0x1a40 [ 420.491224][T10081] ? get_pid_task+0x106/0x250 [ 420.491275][T10081] __sys_sendmsg+0x160/0x210 [ 420.491295][T10081] ? __pfx___sys_sendmsg+0x10/0x10 [ 420.491327][T10081] do_syscall_64+0x115/0x870 [ 420.491343][T10081] ? clear_bhb_loop+0x40/0x90 [ 420.491364][T10081] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.491381][T10081] RIP: 0033:0x7fec1779de99 [ 420.491397][T10081] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 420.491414][T10081] RSP: 002b:00007fec159f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 420.491430][T10081] RAX: ffffffffffffffda RBX: 00007fec17a25fa0 RCX: 00007fec1779de99 [ 420.491441][T10081] RDX: 0000000000000040 RSI: 0000200000000340 RDI: 0000000000000003 [ 420.491451][T10081] RBP: 00007fec159f6090 R08: 0000000000000000 R09: 0000000000000000 [ 420.491462][T10081] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 420.491471][T10081] R13: 00007fec17a26038 R14: 00007fec17a25fa0 R15: 00007ffcec048308 [ 420.491495][T10081] [ 420.548526][T10082] sit0: entered promiscuous mode [ 420.725033][T10082] netlink: 'syz.2.1122': attribute type 2 has an invalid length. [ 420.742841][T10082] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1122'. [ 420.752468][ T5611] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 421.008103][T10094] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10094 comm=syz.0.1111 [ 421.058998][T10094] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10094 comm=syz.0.1111 [ 422.178238][T10104] syzkaller0: entered promiscuous mode [ 422.185795][T10104] syzkaller0: entered allmulticast mode [ 422.214457][T10110] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 422.502286][T10115] genirq: Flags mismatch irq 4. 00200000 (das16m1) vs. 00200080 (ttyS0) [ 423.218426][T10125] syzkaller0: entered promiscuous mode [ 423.245458][T10125] syzkaller0: entered allmulticast mode [ 423.894060][T10140] Invalid source name [ 423.898070][T10140] UBIFS error (pid: 10140): cannot open "/dev/sequencer", error -22 [ 424.363591][ T5611] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 424.574463][ T5611] usb 1-1: Using ep0 maxpacket: 16 [ 424.794355][ T5611] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 424.806964][ T5611] usb 1-1: config 0 has no interface number 0 [ 424.819795][ T5611] usb 1-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 424.850104][ T5611] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.874096][ T5611] usb 1-1: Product: syz [ 424.889723][ T5611] usb 1-1: Manufacturer: syz [ 424.901962][ T5611] usb 1-1: SerialNumber: syz [ 424.918805][ T5611] usb 1-1: config 0 descriptor?? [ 424.933613][ T5611] hub 1-1:0.132: bad descriptor, ignoring hub [ 424.949916][ T5611] hub 1-1:0.132: probe with driver hub failed with error -5 [ 424.974130][ T5611] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.132/input/input14 [ 425.481447][T10164] genirq: Flags mismatch irq 4. 00200000 (das16m1) vs. 00200080 (ttyS0) [ 425.993583][ T804] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 426.044588][T10168] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1138'. [ 426.533178][ T804] usb 4-1: device descriptor read/64, error -71 [ 427.271969][ T804] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 427.432022][ T804] usb 4-1: device descriptor read/64, error -71 [ 427.535034][T10177] trusted_key: encrypted_key: insufficient parameters specified [ 427.559293][ T804] usb usb4-port1: attempt power cycle [ 427.581662][T10179] FAULT_INJECTION: forcing a failure. [ 427.581662][T10179] name failslab, interval 1, probability 0, space 0, times 0 [ 427.612022][T10179] CPU: 1 UID: 0 PID: 10179 Comm: syz.0.1150 Not tainted syzkaller #0 PREEMPT(full) [ 427.612045][T10179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 427.612056][T10179] Call Trace: [ 427.612062][T10179] [ 427.612068][T10179] dump_stack_lvl+0x100/0x190 [ 427.612096][T10179] should_fail_ex.cold+0x5/0xa [ 427.612119][T10179] should_failslab+0xc2/0x120 [ 427.612141][T10179] __kmalloc_noprof+0xfc/0x820 [ 427.612158][T10179] ? rcu_is_watching+0x12/0xc0 [ 427.612182][T10179] ? tomoyo_realpath_from_path+0xb6/0x690 [ 427.612212][T10179] tomoyo_realpath_from_path+0xb6/0x690 [ 427.612240][T10179] tomoyo_path_number_perm+0x23c/0x580 [ 427.612265][T10179] ? tomoyo_path_number_perm+0x22e/0x580 [ 427.612299][T10179] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 427.612341][T10179] ? find_held_lock+0x2b/0x80 [ 427.612364][T10179] ? __fget_files+0x215/0x3d0 [ 427.612379][T10179] ? hook_file_ioctl_common+0x140/0x440 [ 427.612396][T10179] ? __fget_files+0x215/0x3d0 [ 427.612416][T10179] ? __fget_files+0x21f/0x3d0 [ 427.612435][T10179] security_file_ioctl+0xd3/0x230 [ 427.612459][T10179] __x64_sys_ioctl+0xb7/0x210 [ 427.612481][T10179] do_syscall_64+0x115/0x870 [ 427.612492][T10179] ? clear_bhb_loop+0x40/0x90 [ 427.612505][T10179] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.612517][T10179] RIP: 0033:0x7fd510f9de99 [ 427.612528][T10179] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 427.612538][T10179] RSP: 002b:00007fd511dd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 427.612549][T10179] RAX: ffffffffffffffda RBX: 00007fd511225fa0 RCX: 00007fd510f9de99 [ 427.612556][T10179] RDX: 0000200000001d80 RSI: 00000000000089e4 RDI: 0000000000000004 [ 427.612562][T10179] RBP: 00007fd511dd5090 R08: 0000000000000000 R09: 0000000000000000 [ 427.612569][T10179] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 427.612575][T10179] R13: 00007fd511226038 R14: 00007fd511225fa0 R15: 00007fffc502e038 [ 427.612588][T10179] [ 427.612602][T10179] ERROR: Out of memory at tomoyo_realpath_from_path. [ 427.823092][ T5728] usb 1-1: USB disconnect, device number 21 [ 427.829031][ T30] audit: type=1400 audit(2000000097.900:659): avc: denied { getopt } for pid=10178 comm="syz.0.1150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 428.121826][T10185] Invalid source name [ 428.125952][T10185] UBIFS error (pid: 10185): cannot open "/dev/sequencer", error -22 [ 429.844245][T10203] syzkaller0: entered promiscuous mode [ 430.483797][T10203] syzkaller0: entered allmulticast mode [ 430.814344][ T5611] usb 5-1: new full-speed USB device number 30 using dummy_hcd [ 430.864710][T10212] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1161'. [ 430.986760][ T5611] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 431.001290][ T5611] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 431.044508][ T5611] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 431.072356][ T5624] Bluetooth: hci3: unexpected event for opcode 0x0c57 [ 431.101715][ T5611] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.153977][ T5611] usb 5-1: config 0 descriptor?? [ 431.439661][ T5611] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 431.470659][ T30] audit: type=1400 audit(2000000101.570:660): avc: denied { execute } for pid=10209 comm="syz.4.1160" path=2F6D656D66643A0241BBCC960E202864656C6574656429 dev="hugetlbfs" ino=29535 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 431.480599][ T5611] dvb-usb: bulk message failed: -22 (3/0) [ 431.639214][ T5611] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 431.714491][ T5611] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 431.744630][ T5611] usb 5-1: media controller created [ 431.770550][ T5611] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 432.575509][T10239] PKCS8: Unsupported PKCS#8 version [ 432.842436][ T5611] dvb-usb: bulk message failed: -22 (6/0) [ 432.875325][ T5611] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 432.924655][ T5611] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input16 [ 432.970494][ T5611] dvb-usb: schedule remote query interval to 150 msecs. [ 433.112904][T10246] genirq: Flags mismatch irq 4. 00200000 (das16m1) vs. 00200080 (ttyS0) [ 433.703238][ T5611] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 433.741467][ T5611] usb 5-1: USB disconnect, device number 30 [ 433.987673][ T5611] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 434.228221][T10256] syzkaller0: entered promiscuous mode [ 434.293323][T10256] syzkaller0: entered allmulticast mode [ 434.393900][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 434.406884][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 434.787994][ T30] audit: type=1400 audit(2000000104.890:661): avc: denied { create } for pid=10271 comm="syz.3.1177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 434.864125][T10273] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1176'. [ 435.385999][ T30] audit: type=1400 audit(2000000105.430:662): avc: denied { listen } for pid=10271 comm="syz.3.1177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 435.408730][ T30] audit: type=1400 audit(2000000105.430:663): avc: denied { accept } for pid=10271 comm="syz.3.1177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 435.638880][T10283] PKCS8: Unsupported PKCS#8 version [ 436.027421][T10285] genirq: Flags mismatch irq 4. 00200000 (das16m1) vs. 00200080 (ttyS0) [ 436.786117][T10287] syzkaller0: entered promiscuous mode [ 436.800871][T10287] syzkaller0: entered allmulticast mode [ 439.050392][T10316] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 439.254970][T10318] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1190'. [ 440.545373][T10325] 9p: Bad value for 'rfdno' [ 440.841692][T10332] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1182'. [ 440.865441][T10332] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1182'. [ 440.911864][ T5611] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 441.111901][ T5611] usb 5-1: Using ep0 maxpacket: 16 [ 441.158101][ T5611] usb 5-1: unable to get BOS descriptor or descriptor too short [ 441.211015][ T30] audit: type=1400 audit(2000000111.310:664): avc: denied { watch_reads } for pid=10339 comm="syz.2.1199" path="/219" dev="tmpfs" ino=1189 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 441.380490][ T5611] usb 5-1: config 1 has an invalid descriptor of length 237, skipping remainder of the config [ 441.417425][ T5611] usb 5-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 441.458776][ T5611] usb 5-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 441.476560][ T5611] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.490209][ T5611] usb 5-1: Product: syz [ 441.582914][ T5611] usb 5-1: Manufacturer: syz [ 441.739668][ T5611] usb 5-1: SerialNumber: syz [ 442.030401][ T30] audit: type=1400 audit(2000000112.130:665): avc: denied { load_policy } for pid=10326 comm="syz.4.1194" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 442.057698][T10327] SELinux: policydb version 0 does not match my version range 15-35 [ 442.087254][T10327] SELinux: failed to load policy [ 442.505332][ T5611] usb 5-1: unit 3 not found! [ 442.582426][ T5611] usb 5-1: USB disconnect, device number 31 [ 442.950898][T10362] genirq: Flags mismatch irq 4. 00200000 (das16m1) vs. 00200080 (ttyS0) [ 444.005358][ T5624] Bluetooth: hci1: unexpected event for opcode 0x0c57 [ 445.383100][T10391] FAULT_INJECTION: forcing a failure. [ 445.383100][T10391] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 445.451357][T10391] CPU: 0 UID: 0 PID: 10391 Comm: syz.2.1211 Not tainted syzkaller #0 PREEMPT(full) [ 445.451383][T10391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 445.451393][T10391] Call Trace: [ 445.451399][T10391] [ 445.451406][T10391] dump_stack_lvl+0x100/0x190 [ 445.451434][T10391] should_fail_ex.cold+0x5/0xa [ 445.451458][T10391] _copy_to_user+0x32/0xd0 [ 445.451482][T10391] simple_read_from_buffer+0xcb/0x170 [ 445.451513][T10391] proc_fail_nth_read+0x1af/0x230 [ 445.451539][T10391] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 445.451564][T10391] ? rw_verify_area+0xce/0x6d0 [ 445.451586][T10391] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 445.451610][T10391] vfs_read+0x1e4/0xb40 [ 445.451637][T10391] ? __pfx_vfs_read+0x10/0x10 [ 445.451661][T10391] ? __fget_files+0x215/0x3d0 [ 445.451682][T10391] ? __fget_files+0x21f/0x3d0 [ 445.451706][T10391] ksys_read+0x12a/0x250 [ 445.451729][T10391] ? __pfx_ksys_read+0x10/0x10 [ 445.451761][T10391] do_syscall_64+0x115/0x870 [ 445.451779][T10391] ? clear_bhb_loop+0x40/0x90 [ 445.451799][T10391] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.451814][T10391] RIP: 0033:0x7f118e55e6ce [ 445.451828][T10391] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 445.451845][T10391] RSP: 002b:00007f118f4b6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 445.451862][T10391] RAX: ffffffffffffffda RBX: 00007f118f4b76c0 RCX: 00007f118e55e6ce [ 445.451873][T10391] RDX: 000000000000000f RSI: 00007f118f4b70a0 RDI: 0000000000000004 [ 445.451883][T10391] RBP: 00007f118f4b7090 R08: 0000000000000000 R09: 0000000000000000 [ 445.451898][T10391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 445.451908][T10391] R13: 00007f118e826038 R14: 00007f118e825fa0 R15: 00007ffc8a0a7498 [ 445.451933][T10391] [ 445.707332][ T5611] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 445.972155][ T5729] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 446.015759][ T5611] usb 4-1: config 1 has an invalid interface number: 7 but max is 0 [ 446.031845][ T5611] usb 4-1: config 1 has no interface number 0 [ 446.047661][ T5611] usb 4-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 446.088254][ T5611] usb 4-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 446.126685][ T5611] usb 4-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 446.151627][ T5611] usb 4-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 446.160821][ T5729] usb 1-1: Using ep0 maxpacket: 16 [ 446.166289][ T5611] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.174775][ T5611] usb 4-1: Product: syz [ 446.179588][ T5611] usb 4-1: Manufacturer: syz [ 446.184452][ T5611] usb 4-1: SerialNumber: syz [ 446.189417][ T5729] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 446.197750][ T9541] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 446.205414][ T5729] usb 1-1: config 0 has no interface number 0 [ 446.219421][T10389] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 446.228829][ T5729] usb 1-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 446.238828][ T5729] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.253869][ T5729] usb 1-1: Product: syz [ 446.258110][ T5729] usb 1-1: Manufacturer: syz [ 446.262912][ T5729] usb 1-1: SerialNumber: syz [ 446.292464][ T5729] usb 1-1: config 0 descriptor?? [ 446.304832][ T5729] hub 1-1:0.132: bad descriptor, ignoring hub [ 446.311288][ T5729] hub 1-1:0.132: probe with driver hub failed with error -5 [ 446.327364][ T5729] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.132/input/input18 [ 446.372018][ T9541] usb 3-1: Using ep0 maxpacket: 8 [ 446.399173][ T9541] usb 3-1: too many endpoints for config 0 interface 0 altsetting 2: 254, using maximum allowed: 30 [ 446.435698][ T9541] usb 3-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 446.454529][ T9541] usb 3-1: config 0 interface 0 has no altsetting 0 [ 446.461366][ T9541] usb 3-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 446.470672][ T9541] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.617605][T10384] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 447.203626][ T9541] usb 3-1: config 0 descriptor?? [ 447.361699][T10399] trusted_key: encrypted_key: insufficient parameters specified [ 447.514754][T10403] bond0: left promiscuous mode [ 447.519600][T10403] bond_slave_0: left promiscuous mode [ 447.525615][T10403] bond_slave_1: left promiscuous mode [ 447.535095][T10403] 8021q: adding VLAN 0 to HW filter on device bond0 [ 447.662176][T10403] bond1: left allmulticast mode [ 447.667859][T10403] 8021q: adding VLAN 0 to HW filter on device bond1 [ 447.677470][T10403] bond2: left allmulticast mode [ 447.683200][T10403] 8021q: adding VLAN 0 to HW filter on device bond2 [ 447.696366][T10403] geneve2: left promiscuous mode [ 447.985161][ T5611] usb 4-1: Incompatible driver and firmware versions [ 448.027057][ T5611] usb 4-1: USB disconnect, device number 24 [ 448.186763][ T9541] hid_parser_main: 31 callbacks suppressed [ 448.186777][ T9541] holtek_kbd 0003:04D9:A055.0006: unknown main item tag 0x3 [ 448.214329][ T9541] holtek_kbd 0003:04D9:A055.0006: global environment stack underflow [ 448.235026][ T9541] holtek_kbd 0003:04D9:A055.0006: item 0 1 1 11 parsing failed [ 448.255724][ T9541] holtek_kbd 0003:04D9:A055.0006: probe with driver holtek_kbd failed with error -22 [ 449.592078][ T30] audit: type=1400 audit(2000000119.700:666): avc: denied { mount } for pid=10416 comm="syz.4.1219" name="/" dev="pstore" ino=825 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 449.677055][ T804] usb 1-1: USB disconnect, device number 22 [ 449.700253][ T30] audit: type=1400 audit(2000000119.760:667): avc: denied { unmount } for pid=5616 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 450.905309][ T5611] usb 3-1: USB disconnect, device number 26 [ 452.660214][T10454] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1227'. [ 452.718253][T10454] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 452.744562][T10454] bond_slave_0: left promiscuous mode [ 452.768626][T10454] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 452.804303][T10454] bond_slave_1: left promiscuous mode [ 452.821253][T10454] bond0 (unregistering): Released all slaves [ 452.949186][T10459] erspan0: entered promiscuous mode [ 452.973011][T10459] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1230'. [ 453.071848][ T5720] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 453.150553][ T30] audit: type=1400 audit(2000000123.250:668): avc: denied { write } for pid=10467 comm="syz.2.1232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 453.255065][ T5720] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 453.271638][ T5720] usb 1-1: config 0 has no interface number 0 [ 453.293192][ T5720] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 453.311869][ T5720] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.336371][ T5720] usb 1-1: Product: syz [ 453.362763][ T5720] usb 1-1: Manufacturer: syz [ 453.383448][ T5720] usb 1-1: SerialNumber: syz [ 453.409431][ T5720] usb 1-1: config 0 descriptor?? [ 453.416860][T10474] trusted_key: encrypted_key: insufficient parameters specified [ 453.499714][T10469] ALSA: mixer_oss: invalid OSS volume '' [ 453.626697][ T5720] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 453.641859][ T5790] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 453.651018][ T5720] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 453.665760][ T5720] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 453.678038][ T5720] usb 1-1: media controller created [ 453.714256][ T5720] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 453.833947][ T5790] usb 4-1: Using ep0 maxpacket: 32 [ 453.852930][ T5790] usb 4-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 453.878073][ T5790] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.899644][ T5790] usb 4-1: Product: syz [ 453.910427][ T5790] usb 4-1: Manufacturer: syz [ 453.915324][ T5790] usb 4-1: SerialNumber: syz [ 453.936996][ T5790] usb 4-1: config 0 descriptor?? [ 454.321368][ T5790] RobotFuzz Open Source InterFace, OSIF 4-1:0.0: version d4.15 found at bus 004 address 025 [ 454.525680][T10476] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 454.547874][T10476] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 454.700691][T10493] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1241'. [ 454.872560][ T5720] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 454.929193][T10476] usb 1-1: dvb_usb_ec168: I2C read not implemented [ 455.960729][T10507] Invalid source name [ 455.964936][T10507] UBIFS error (pid: 10507): cannot open "/dev/sequencer", error -22 [ 456.647511][ T5720] usb 1-1: USB disconnect, device number 23 [ 456.669362][ T5611] usb 4-1: USB disconnect, device number 25 [ 456.671837][ T5790] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 456.843662][ T5790] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 456.862084][ T5790] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 456.897418][ T5790] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.926332][ T30] audit: type=1400 audit(2000000127.030:669): avc: denied { setopt } for pid=10497 comm="syz.1.1242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 456.928902][ T5790] usb 3-1: config 0 descriptor?? [ 457.004128][ T5624] Bluetooth: hci4: link tx timeout [ 457.014579][ T5624] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 457.055277][T10509] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1244'. [ 457.332306][ T5720] usb 1-1: new full-speed USB device number 24 using dummy_hcd [ 457.498525][ T5720] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 457.527139][ T5720] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 457.565645][ T5720] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 457.575039][ T5720] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.618096][ T5790] ath6kl: mismatched byte count 0 vs. expected 12 [ 457.631627][ T30] audit: type=1400 audit(2000000127.730:670): avc: denied { ioctl } for pid=10525 comm="syz.4.1247" path="socket:[32142]" dev="sockfs" ino=32142 ioctlcmd=0x8934 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 457.637087][ T5790] ath6kl: Failed to init ath6kl core: -22 [ 457.668732][ T5790] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -22 [ 457.825544][ T5720] usb 1-1: usb_control_msg returned -32 [ 457.841981][ T5720] usbtmc 1-1:16.0: can't read capabilities [ 458.417878][ T30] audit: type=1400 audit(2000000128.520:671): avc: denied { append } for pid=10544 comm="syz.3.1255" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 459.023676][T10557] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 459.032099][ T5613] Bluetooth: hci4: command 0x0406 tx timeout [ 459.080002][ T9894] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN NOPTI [ 459.092083][ T9894] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f] [ 459.100482][ T9894] CPU: 1 UID: 0 PID: 9894 Comm: kbnepd  Not tainted syzkaller #0 PREEMPT(full) [ 459.109584][ T9894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 459.119616][ T9894] RIP: 0010:klist_put+0x4d/0x1d0 [ 459.124540][ T9894] Code: c1 ea 03 80 3c 02 00 0f 85 74 01 00 00 48 b8 00 00 00 00 00 fc ff df 4c 8b 23 49 83 e4 fe 49 8d 7c 24 58 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 43 01 00 00 4c 89 e7 4d 8b 74 24 58 e8 7c 0e 0d [ 459.144126][ T9894] RSP: 0018:ffffc90004e7f970 EFLAGS: 00010202 [ 459.150172][ T9894] RAX: dffffc0000000000 RBX: ffff888078f5f060 RCX: ffffffff82be8361 [ 459.158122][ T9894] RDX: 000000000000000b RSI: ffffffff8bafc3a5 RDI: 0000000000000058 [ 459.166070][ T9894] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 459.174020][ T9894] R10: 0000000000000000 R11: ffffffff81758b4a R12: 0000000000000000 [ 459.181969][ T9894] R13: 0000000000000001 R14: 0000000000000000 R15: ffff88806ee46000 [ 459.189921][ T9894] FS: 0000000000000000(0000) GS:ffff888123ee6000(0000) knlGS:0000000000000000 [ 459.198840][ T9894] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 459.205416][ T9894] CR2: 000000110c365885 CR3: 000000007540e000 CR4: 00000000003526f0 [ 459.213379][ T9894] Call Trace: [ 459.216645][ T9894] [ 459.219561][ T9894] device_del+0x1b8/0x9b0 [ 459.223875][ T9894] ? __pfx_device_del+0x10/0x10 [ 459.228704][ T9894] ? netdev_unregister_kobject+0x2da/0x540 [ 459.234495][ T9894] unregister_netdevice_many_notify+0x14fb/0x2140 [ 459.240893][ T9894] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 459.247635][ T9894] ? __pfx___mutex_lock+0x10/0x10 [ 459.252653][ T9894] unregister_netdevice_queue+0x30b/0x3c0 [ 459.258354][ T9894] ? rtnl_net_dev_lock+0x137/0x360 [ 459.263450][ T9894] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 459.269681][ T9894] ? rtnl_net_dev_lock+0x28/0x360 [ 459.274692][ T9894] ? rtnl_net_dev_lock+0x146/0x360 [ 459.279785][ T9894] ? rtnl_lock+0x9/0x20 [ 459.283935][ T9894] ? rtnl_net_dev_lock+0x1fe/0x360 [ 459.289032][ T9894] unregister_netdev+0x1f/0x60 [ 459.293788][ T9894] bnep_session+0x22e6/0x2f40 [ 459.298451][ T9894] ? find_held_lock+0x2b/0x80 [ 459.303117][ T9894] ? __pfx_bnep_session+0x10/0x10 [ 459.308125][ T9894] ? do_raw_spin_lock+0x128/0x260 [ 459.313130][ T9894] ? __pfx_woken_wake_function+0x10/0x10 [ 459.318756][ T9894] ? rcu_is_watching+0x12/0xc0 [ 459.323522][ T9894] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 459.329338][ T9894] ? lockdep_hardirqs_on+0x78/0x100 [ 459.334537][ T9894] ? __kthread_parkme+0x18c/0x230 [ 459.339547][ T9894] ? kthread+0x13a/0x450 [ 459.343778][ T9894] ? __pfx_bnep_session+0x10/0x10 [ 459.348788][ T9894] kthread+0x370/0x450 [ 459.352848][ T9894] ? __pfx_kthread+0x10/0x10 [ 459.357426][ T9894] ret_from_fork+0x72b/0xd50 [ 459.362003][ T9894] ? __pfx_ret_from_fork+0x10/0x10 [ 459.367097][ T9894] ? __switch_to+0x800/0x10f0 [ 459.371750][ T9894] ? __pfx_kthread+0x10/0x10 [ 459.376330][ T9894] ret_from_fork_asm+0x1a/0x30 [ 459.381082][ T9894] [ 459.384080][ T9894] Modules linked in: [ 459.388789][ T9894] ---[ end trace 0000000000000000 ]--- [ 459.399441][ T9894] RIP: 0010:klist_put+0x4d/0x1d0 [ 459.404904][ T9894] Code: c1 ea 03 80 3c 02 00 0f 85 74 01 00 00 48 b8 00 00 00 00 00 fc ff df 4c 8b 23 49 83 e4 fe 49 8d 7c 24 58 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 43 01 00 00 4c 89 e7 4d 8b 74 24 58 e8 7c 0e 0d [ 459.425982][ T9894] RSP: 0018:ffffc90004e7f970 EFLAGS: 00010202 [ 459.432599][ T9894] RAX: dffffc0000000000 RBX: ffff888078f5f060 RCX: ffffffff82be8361 [ 459.440636][ T9894] RDX: 000000000000000b RSI: ffffffff8bafc3a5 RDI: 0000000000000058 [ 459.442405][ T30] audit: type=1400 audit(2000000129.500:672): avc: denied { read } for pid=4959 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 459.448950][ T9894] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 459.478754][ T9894] R10: 0000000000000000 R11: ffffffff81758b4a R12: 0000000000000000 [ 459.479198][ T30] audit: type=1400 audit(2000000129.500:673): avc: denied { search } for pid=4959 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 459.486748][ T9894] R13: 0000000000000001 R14: 0000000000000000 R15: ffff88806ee46000 [ 459.486761][ T9894] FS: 0000000000000000(0000) GS:ffff888123ee6000(0000) knlGS:0000000000000000 [ 459.486778][ T9894] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 459.532267][ T9894] CR2: 000000110c365885 CR3: 000000003489b000 CR4: 00000000003526f0 [ 459.539420][ T9541] usb 3-1: USB disconnect, device number 27 [ 459.540299][ T9894] Kernel panic - not syncing: Fatal exception [ 459.546328][ T9894] Kernel Offset: disabled