last executing test programs: 3m6.393924321s ago: executing program 0 (id=475): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x4e24, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000380)=ANY=[@ANYBLOB="0b000000000000000a00000000000000ff020000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000020000000a00000000000000fe8000000000000000000000000000bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000fe8000000000000000000000000000bb"], 0x190) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x10000, 0x0, 0x0) syz_emit_ethernet(0x241, &(0x7f0000000880)=ANY=[@ANYBLOB="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"/577], 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0x11, 0x5}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000004c0)=@assoc_value={r1, 0x7}, 0x8) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000001c0)="5c00000012006bab9a3ff36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb00"/74, 0x4a}, {&(0x7f0000000380)="1ed68483068e7e7b115365cde0c05b774875", 0x12}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000000c0)=ANY=[@ANYRES64, @ANYRESHEX=r0], 0x10}], 0x1, 0x0, 0x0, 0x4000}, 0x80) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c03000017"], 0x34c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 3m6.219913912s ago: executing program 0 (id=476): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="c60009"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001640)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x0}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000001c0)={0x114, 0x30, 0x1, 0x0, 0x0, "", [@nested={0x104, 0x0, 0x0, 0x1, [@typed={0xc, 0x2, 0x0, 0x0, @u64=0xffffffff}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@empty}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767fc734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8c"]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 3m5.928053763s ago: executing program 2 (id=479): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, 0x0, 0x0) 3m5.890234762s ago: executing program 2 (id=480): r0 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x3, 0x0, 0x3, 0xe, 0x0, 0x70bd2c, 0x25dfdbfb, [@sadb_key={0x2, 0x9, 0x8, 0x0, "1c"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @remote}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc, 0x1}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, @sadb_x_sa2={0x2, 0x13, 0x3, 0x0, 0x0, 0x70bd28, 0x3503}]}, 0x70}, 0x1, 0x7}, 0x0) socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) 3m5.779553636s ago: executing program 2 (id=481): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x13, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000070000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) r2 = syz_usb_connect(0x3, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100007e9eb4104c053800f516010203010902120001000000000904"], 0x0) syz_usb_control_io$sierra_net(r2, 0x0, &(0x7f0000000240)={0x1c, &(0x7f0000000e80)={0x0, 0x30}, 0x0, 0x0}) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f00001cd000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f00000021c0)=[{0x2000000000000009, 0xffffffff, 0x1}], 0x1, 0xc2ff, 0x0, 0x0, 0x0, 0x76}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe, 0x0, &(0x7f00000002c0)="00001a000000002ac7b04b1b980f", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}, 0x50) 3m2.408111921s ago: executing program 2 (id=494): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, &(0x7f0000000080)=0x5a) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x911091, 0x0) chroot(&(0x7f0000000040)='./file0/file0\x00') mount$bind(&(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x2125099, 0x0) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r2) syz_usb_connect$lan78xx(0x0, 0x3f, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) ioctl$EVIOCRMFF(r2, 0x4004550d, 0x0) ioctl$VIDIOC_G_STD(r1, 0x80085617, &(0x7f00000000c0)) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000140)='%pI4 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0)={r3}, 0x4) syz_open_dev$cec(&(0x7f0000000040), 0x0, 0xa0001) 3m2.374696308s ago: executing program 0 (id=495): r0 = socket$netlink(0x10, 0x3, 0xa) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000010000", 0x58}], 0x1) socket$pppoe(0x18, 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) r1 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r1, &(0x7f0000000f40)={0xa, 0x0, 0x0, @mcast2, 0x0, 0xffffffff}, 0x20) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_X86_SET_MCE(r3, 0x4040ae9e, &(0x7f0000000040)={0xa980000000000000, 0x40000, 0xe7, 0xa, 0x12}) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x0, 0x18c, 0x203, 0x348, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@ipv6={@mcast2, @private2={0xfc, 0x2, '\x00', 0x1}, [0x0, 0x0, 0xffffffff, 0xff], [0xff000000, 0xffffff00, 0xff], 'veth1_to_team\x00', 'bond0\x00', {0xff}, {}, 0x2f, 0x4, 0x4}, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x15}, {0x3}, {0x0, 0x2}, {}, {}, {}, {}, {0x5, 0x10}, {}, {0x0, 0x80}, {}, {0x0, 0x2}, {}, {}, {}, {0x0, 0x0, 0x0, 0x7}, {0x0, 0x0, 0x1}, {}, {0x16}, {0xfffc}, {}, {}, {0x8000}, {}, {}, {0x0, 0x0, 0xfe}, {0x0, 0xff}, {}, {0x0, 0x1}, {0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x1000}, {}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x9}, {}, {0x0, 0x80}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x2}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x0, 0xc}]}}, @common=@hl={{0x28}, {0x0, 0xfc}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@ipv6={@local, @mcast1, [0x0, 0xff000000, 0xffff00, 0xffffff00], [0xff000000, 0xffffffff, 0xffffff00, 0xffffffff], 'bridge_slave_1\x00', 'veth0_to_bridge\x00', {0xff}, {0xff}, 0x3a, 0xb, 0x1, 0x2}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) 3m2.298722229s ago: executing program 0 (id=496): mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) umount2(&(0x7f0000000080)='./file0/../file0\x00', 0xc) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x400) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x1, 0x2}) 3m2.067195829s ago: executing program 0 (id=499): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x4e24, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000380)=ANY=[@ANYBLOB="0b000000000000000a00000000000000ff020000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000020000000a00000000000000fe8000000000000000000000000000bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000fe8000000000000000000000000000bb"], 0x190) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x10000, 0x0, 0x0) syz_emit_ethernet(0x241, &(0x7f0000000880)=ANY=[@ANYBLOB="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"/577], 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0x11, 0x5}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000004c0)=@assoc_value={r1, 0x7}, 0x8) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000001c0)="5c00000012006bab9a3ff36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb00"/74, 0x4a}, {&(0x7f0000000380)="1ed68483068e7e7b115365cde0c05b774875", 0x12}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c03000017"], 0x34c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 3m1.239629753s ago: executing program 2 (id=501): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000010140)={0x8, {"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", 0x1000}}, 0x1006) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$sock_buf(r1, 0x1, 0x1c, &(0x7f0000000000)=""/45, &(0x7f0000000040)=0x2d) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x22803) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0xc0a85320, &(0x7f00000003c0)={{0x80, 0xd}, 'port1\x00', 0xf3, 0x1b1c06, 0xfffffffa, 0x4, 0x1000000, 0x0, 0x1, 0x0, 0x0, 0x8}) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x80d02, 0x0) r5 = dup3(r4, r3, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x801a01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) r6 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r7, 0x5319, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6002, &(0x7f0000000000)=0x3, 0xf, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r9 = syz_open_dev$usbmon(&(0x7f0000000280), 0x2c, 0x80001) ioctl$MON_IOCT_RING_SIZE(r9, 0x9204, 0x374c4) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/stat\x00', 0x0, 0x0) fcntl$lock(r10, 0x7, &(0x7f0000000080)={0x0, 0x4, 0x40, 0xa01}) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x16, 0xd, &(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRESHEX=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r11, 0x0, 0x180, 0x0, &(0x7f0000000500)="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", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SNDCTL_SEQ_RESET(r5, 0x5100) close_range(r2, 0xffffffffffffffff, 0x0) 3m0.201374688s ago: executing program 0 (id=507): setns(0xc9, 0x0) r0 = socket$netlink(0x10, 0x3, 0xa) writev(r0, 0x0, 0x0) socket$pppoe(0x18, 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) r1 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r1, &(0x7f0000000f40)={0xa, 0x0, 0x0, @mcast2, 0x0, 0xffffffff}, 0x20) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_X86_SET_MCE(r3, 0x4040ae9e, &(0x7f0000000040)={0xa980000000000000, 0x40000, 0xe7, 0xa, 0x12}) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x0, 0x18c, 0x203, 0x348, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@ipv6={@mcast2, @private2={0xfc, 0x2, '\x00', 0x1}, [0x0, 0x0, 0xffffffff, 0xff], [0xff000000, 0xffffff00, 0xff], 'veth1_to_team\x00', 'bond0\x00', {0xff}, {}, 0x2f, 0x4, 0x4}, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x15}, {0x3}, {0x0, 0x2}, {}, {}, {}, {}, {0x5, 0x10}, {}, {0x0, 0x80}, {}, {0x0, 0x2}, {}, {}, {}, {0x0, 0x0, 0x0, 0x7}, {0x0, 0x0, 0x1}, {}, {0x16}, {0xfffc}, {}, {}, {0x8000}, {}, {}, {0x0, 0x0, 0xfe}, {0x0, 0xff}, {}, {0x0, 0x1}, {0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x1000}, {}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x9}, {}, {0x0, 0x80}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x2}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x0, 0xc}]}}, @common=@hl={{0x28}, {0x0, 0xfc}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@ipv6={@local, @mcast1, [0x0, 0xff000000, 0xffff00, 0xffffff00], [0xff000000, 0xffffffff, 0xffffff00, 0xffffffff], 'bridge_slave_1\x00', 'veth0_to_bridge\x00', {0xff}, {0xff}, 0x3a, 0xb, 0x1, 0x2}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) 3m0.076258958s ago: executing program 32 (id=507): setns(0xc9, 0x0) r0 = socket$netlink(0x10, 0x3, 0xa) writev(r0, 0x0, 0x0) socket$pppoe(0x18, 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) r1 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r1, &(0x7f0000000f40)={0xa, 0x0, 0x0, @mcast2, 0x0, 0xffffffff}, 0x20) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_X86_SET_MCE(r3, 0x4040ae9e, &(0x7f0000000040)={0xa980000000000000, 0x40000, 0xe7, 0xa, 0x12}) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x0, 0x18c, 0x203, 0x348, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@ipv6={@mcast2, @private2={0xfc, 0x2, '\x00', 0x1}, [0x0, 0x0, 0xffffffff, 0xff], [0xff000000, 0xffffff00, 0xff], 'veth1_to_team\x00', 'bond0\x00', {0xff}, {}, 0x2f, 0x4, 0x4}, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x15}, {0x3}, {0x0, 0x2}, {}, {}, {}, {}, {0x5, 0x10}, {}, {0x0, 0x80}, {}, {0x0, 0x2}, {}, {}, {}, {0x0, 0x0, 0x0, 0x7}, {0x0, 0x0, 0x1}, {}, {0x16}, {0xfffc}, {}, {}, {0x8000}, {}, {}, {0x0, 0x0, 0xfe}, {0x0, 0xff}, {}, {0x0, 0x1}, {0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x1000}, {}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x9}, {}, {0x0, 0x80}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x2}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x0, 0xc}]}}, @common=@hl={{0x28}, {0x0, 0xfc}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@ipv6={@local, @mcast1, [0x0, 0xff000000, 0xffff00, 0xffffff00], [0xff000000, 0xffffffff, 0xffffff00, 0xffffffff], 'bridge_slave_1\x00', 'veth0_to_bridge\x00', {0xff}, {0xff}, 0x3a, 0xb, 0x1, 0x2}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) 3m0.031363281s ago: executing program 2 (id=509): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0xa) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$XFS_IOC_BULKSTAT(r2, 0x8040587f, &(0x7f0000000b00)={{0x8, 0x4, 0x5, 0x8001, 0x82}, &(0x7f00000005c0)=[{}, {}, {}, {}, {}, {}, {}]}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff6000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff0000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0x6, &(0x7f0000000040)={0x0, 0x12dc, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000180)={0xfffffc}, 0x10) write(r4, &(0x7f0000000000)="240000001a005f0214f9f407000901000000000000000005000000000800040001000000", 0x24) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x8000017c) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) syz_emit_ethernet(0x15, &(0x7f0000000580)={@broadcast, @dev, @val={@void, {0x8100, 0x1, 0x1, 0x2}}, {@mpls_uc={0x8847, {[], @llc={@llc={0xff, 0x1, '\n'}}}}}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYRES64=r1, @ANYRESHEX=r2, @ANYBLOB="14002c59b46a6b76b7a9661714aff3e9361780ae89a949cb6a34010b4c3bc29057c1a3c57ef1f3964d75f7edf63cc4ab0e03aef065904ffb8cdf3fb531cb756cd36ed4dc4366f6baf43bd15fd426881fcfe1ef39516cbb1179268afcb656f7632005d111de63cd1932dc841b72926b7c47fa1263ccd71a186f42382deed37704f3a6b1f0c83a890223923c9a38f335f48f380e81ad4046eea0a9242aa369c8a29203974b55d251b294d9a607a1184ceb0fab3035024a194627a3c5b4ed7f6256772671c58e88d982004807a04fb900f32ab6cafc1b3eb6a1fadec1a7cf5f6e13172a5d47eb983b0205f6a1cfcb804ffae41f55211a0353f0c00af9121ed8516f7a58d7fa11c7"], 0x30}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='$\x00', &(0x7f00000000c0)='%@&^+\x9d^.--*\x00', 0x0) 2m59.893748994s ago: executing program 33 (id=509): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0xa) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$XFS_IOC_BULKSTAT(r2, 0x8040587f, &(0x7f0000000b00)={{0x8, 0x4, 0x5, 0x8001, 0x82}, &(0x7f00000005c0)=[{}, {}, {}, {}, {}, {}, {}]}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff6000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff0000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0x6, &(0x7f0000000040)={0x0, 0x12dc, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000180)={0xfffffc}, 0x10) write(r4, &(0x7f0000000000)="240000001a005f0214f9f407000901000000000000000005000000000800040001000000", 0x24) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x8000017c) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) syz_emit_ethernet(0x15, &(0x7f0000000580)={@broadcast, @dev, @val={@void, {0x8100, 0x1, 0x1, 0x2}}, {@mpls_uc={0x8847, {[], @llc={@llc={0xff, 0x1, '\n'}}}}}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYRES64=r1, @ANYRESHEX=r2, @ANYBLOB="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"], 0x30}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='$\x00', &(0x7f00000000c0)='%@&^+\x9d^.--*\x00', 0x0) 9.45919324s ago: executing program 4 (id=1197): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000740)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@type_tag={0xa, 0x0, 0x0, 0x12, 0x1}, @union={0xa, 0x0, 0x0, 0x5, 0x1, 0x3}, @volatile={0x0, 0x0, 0x0, 0x9, 0x4}]}}, 0x0, 0x3e, 0x0, 0xa}, 0x28) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f0000000700)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0xffffffffffffff22, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x20048001) socket$alg(0x26, 0x5, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={0x0, &(0x7f0000000600)=""/31, 0x0, 0x1f, 0x0, 0x8001}, 0x28) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004074}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, 0x0, 0x4000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x1, 0x7}, 0x28) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r3) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x4000810) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000000280)) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REQ_SET_REG(r4, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x810}, 0x20000080) syz_usb_connect(0x2, 0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040cd06350100010000000109023c0001010080320904000006ff000000070581024000000705010240000007058402400000070502024000000705880240000007050602400000"], &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='\x00', &(0x7f0000000300)='./dev\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000600)='./dev/ttyUSB0\x00', 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x48}}, 0x0) sendmsg$IPSET_CMD_DEL(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)={0x44, 0xa, 0x6, 0x101, 0xd000000, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_LINENO={0x8}]}, 0x44}}, 0x0) 6.545721528s ago: executing program 4 (id=1216): r0 = syz_open_dev$radio(0x0, 0x0, 0x2) io_setup(0xd, &(0x7f00000003c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f00000000c0)={0xf0f041}) 6.375596967s ago: executing program 4 (id=1217): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = fanotify_init(0x0, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) brk(0xb7) r3 = syz_open_dev$cec(&(0x7f0000000100), 0x0, 0x103000) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r3, 0xc05c6104, &(0x7f00000001c0)={"f2efe21e", 0x9, 0x6, 0xd, 0x0, 0x1ff, "2179d46fd08e3c0ced34c7d0c7e6d7", "7ca24a13", '\x00\x00`\x00', '\x00', ["2408000ce61c0000c6cb00", "bed0f3d6ce7a5f7389827f04", "d409343c60abd64f2fdc9ddf", "fc43009f621000"]}) r4 = syz_open_dev$cec(&(0x7f0000000d00), 0x0, 0xc0b02) ioctl$CEC_TRANSMIT(r4, 0xc0386105, &(0x7f0000000d40)={0x0, 0x1, 0x4, 0x4, 0x0, 0x4063, "57c1169b6664ea61326ac71ae7213059", 0x0, 0xfc, 0x0, 0x10}) ioctl$CEC_TRANSMIT(r3, 0xc0386105, &(0x7f0000000140)={0x8, 0x800, 0xf, 0x0, 0xfe1c, 0x6, "72aba977db089b65fdfdc5bd97abc350", 0x78, 0x4, 0xa7, 0x7, 0xc, 0x7, 0x29}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r1) syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x101000) syz_open_dev$dri(0x0, 0x2, 0xc8d03) r5 = socket(0x1d, 0x2, 0x6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000140)={'vxcan1\x00', 0x0}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/devices.allow\x00', 0x2, 0xc8) open_by_handle_at(r7, &(0x7f0000000480)=ANY=[@ANYBLOB="08000000fe0000000700000000000000b6a7a2b955d9e000253ef86f105dbc1d632e6df99f69ddf2e12e98b991504203c06e4f66eaafd1db03d5ad406308898219acb996dbf97f23979a8169568534fbc12cee6f855139279f760db1fec8be900b80c836a885b4eb098c099d130643af83b925a23ebeeb691015953b9f8352"], 0x2241c2) bind$can_j1939(r5, &(0x7f0000000000)={0x1d, r6, 0x3, {0x2, 0x1}}, 0x18) sendmmsg$inet(r7, &(0x7f0000000400)=[{{&(0x7f0000000240)={0x2, 0x4e23, @remote}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000340)}], 0x1}}], 0x1, 0x4c880) syz_usb_connect(0x4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r5) listen(r7, 0x15) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[], 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, 0x0, 0x5a) close_range(r2, 0xffffffffffffffff, 0x0) 6.375366685s ago: executing program 1 (id=1218): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x0, 0x2, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10122, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, 0x0) socket$netlink(0x10, 0x3, 0x0) madvise(&(0x7f00001a0000/0x4000)=nil, 0x4000, 0x4) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, 0x0, 0x8404) r3 = syz_open_dev$sndctrl(0x0, 0xba, 0x28c102) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r3, 0xc1205531, &(0x7f0000000500)={0x9, 0x80000001, 0xbd, 0x2, '\x00', '\x00', '\x00', 0x9, 0x80000001, 0x7, 0x100, "65a2506851b13540ecd55d6dcb0dd9c6"}) madvise(&(0x7f0000bc0000/0x3000)=nil, 0x3000, 0xc) keyctl$session_to_parent(0x12) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) r4 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000680), 0x1, 0x0) writev(r4, &(0x7f0000000bc0)=[{&(0x7f0000000800)="8933", 0x2}], 0x1) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x2) sendmsg$DEVLINK_CMD_SB_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x8000) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000002300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="5800000002060102000000000000000000000000090002"], 0x58}, 0x1, 0x0, 0x0, 0x20044000}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB="2400000047000701feffffffffffffff01"], 0x24}, 0x1, 0x0, 0x0, 0x4048011}, 0x8080) 4.968069575s ago: executing program 3 (id=1221): prlimit64(0x0, 0xe, &(0x7f0000000340)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) mkdir(&(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000600)='./dev\x00', &(0x7f0000000700)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./dev/md0\x00', 0x2, 0x0) ioctl(r0, 0x40480923, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @mcast2}, 0x1c) listen(r1, 0x10040) syz_emit_ethernet(0x36, &(0x7f00000002c0)=ANY=[@ANYRES16, @ANYRES8=r1, @ANYRES32=0x41424344], 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x3, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xb635773f06ebbeeb, 0x2010, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) socket$nl_route(0x10, 0x3, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x480c5) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x4b301, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000240)=0xd) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) splice(r4, 0x0, r6, 0x0, 0x88000cc, 0x0) fcntl$setpipe(r5, 0x407, 0x100004) write$eventfd(r5, &(0x7f0000000240), 0xffffff14) writev(r3, &(0x7f0000000840)=[{&(0x7f0000000080)="bbe3aeb8947eeb8573ae59b265facf1e74cf6ab289d9eaaf16b053cff788b0f16aea00be4726a7852371f0747d331867283df83e13d64c8d6705bfc76f06acbe9e62d4b663748fa887d62b6c219c8ee32c05838ba1bcc0b89ae57bda7c257290"}, {&(0x7f0000000380)="2ba68ab18eba7a8e8af6de61e81750f750a07abfc06b7e1650fbd5bc2b8a04de3863dda57b300edacfcb541369870661e912e91dac6699506ba23c7e1c139af909effcbb89a9dfa8f14645d9b062b8c4d3ef18d293234d8de5809d4b736c23e3df87820d61d7113efcd9c0d981894c84ad595df30fddb0f0ad80249c1fb23987dd2a07103d3cfa505cd3bc5b719994eda43e2da930b84b46f7ac2101c497ba"}, {&(0x7f0000000440)="0ce917cd332e9d6b02e3d66b786fc2ab1d6042344b324badb6a8550adb3c2f83a5119809b00d59bcb5a1f3a485fc5f895439d881563cbcab18fab88fb3596cec13bcb64fac7a6c975e13c9ebff0e179b78dc09ce09c309f4b9bf84542e04e3f5c8449642b97533444b8a5904b81644a43391635381033a4371a85b80c3082955c2661710f04a3bf474a48c75dd7d3e8d937f1abb72"}, {&(0x7f0000000000)="4a4e79ff79644fc9d342f99a4c3a67a4"}, {&(0x7f0000000540)="f95ab65afa95ed663fa8e1d857d821f2533081e11a81f69563ae13f24ab3d4924203d1514d65cfa98e06730853c491497dc8b792abdbaee0ea43c8f79e8ea0680d2c54877a82cc39a52da0da9bcf"}, {&(0x7f00000005c0)="fbe911417842141767968748755e5a1e590d7233a8e322ea02b2e11a9860b8f5f284283605"}, {&(0x7f0000000640)="58e3aa73adba29354697865238f8286706fd6f8d49f7f7b8f7eb02d0cffcec7437ee58e155"}, {&(0x7f0000000740)="89c3c110d357273b0d73c39f81becfac99b7a39587fe50b828bb2903c4d83454bee08ebde0775b4796896dbbf43df54305775d6a4cb9b5d543f6816e5bd9d09879021bffa14fcd1dcfb8b941a13342ef4a94e1b31c3c06f0e7dfb80c9e2e7b7f8305050b898bdddf1626b78d162482f899855ce4ac24a8e1ce32d7b7b8c039434a81225bda42621479ff0fc707de5f96203c352ef3e1ffb869d53f5c672d194fdfb1c97cc887147a3aaf6a331dabb40307364384350c75194e1ee71f757f4356e9cfd82a140c6661a54c172593e9"}], 0x42) 4.399589074s ago: executing program 1 (id=1224): r0 = socket$inet_tcp(0x2, 0x1, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000ffffff00000000000000008510000002000000850000000f0000009500000000000000"], 0x0, 0xfffefdff, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) (async, rerun: 64) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0xc03, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000140)={{0x0, 0x4, 0x0, 0x9}, 'syz0\x00', 0x13}) ioctl$UI_SET_FFBIT(r1, 0x4004556b, 0x51) (async, rerun: 32) ioctl$UI_DEV_CREATE(r1, 0x5501) (async, rerun: 32) r2 = syz_open_dev$evdev(&(0x7f0000000440), 0x72, 0x0) ioctl$EVIOCSFF(r2, 0x40304580, &(0x7f0000000500)={0x50, 0x6, 0x1d, {0x1000, 0x2}, {0x8000, 0x7}, @period={0x5c, 0x0, 0x1, 0xff80, 0xfff7, {0x3, 0x9, 0xd8c, 0x389}, 0x0, 0x0}}) (async) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x20004000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r3) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000100000008000100"], 0x40}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r6, r5, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x101a, &(0x7f0000001940)=ANY=[], 0x0) 4.291649716s ago: executing program 1 (id=1225): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x41, '\x00', r1, @fallback, 0x0, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x80, 0x0, 0x0, 0x0, 0x2c, '\x00', r1, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r3, r1, 0x25, 0x0, @val=@netkit={@void, @value=r2}}, 0x1c) syz_emit_ethernet(0x6e, &(0x7f0000000200)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, "fbddf0", 0x38, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast2, {[], @dest_unreach={0x1, 0x4, 0x0, 0x6, '\x00', {0x7, 0x6, "3ab0cc", 0x480, 0x2f, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, [@fragment={0x85, 0x0, 0x3, 0x0, 0x0, 0x1a, 0x66}]}}}}}}}, 0x0) 4.265256515s ago: executing program 1 (id=1226): r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000c80), r0) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0xd) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="640000001000370403000000ffffffff00000000", @ANYRES32=r1, @ANYBLOB="0b1b050000000000440012800b00010069703667726500003400028008000100", @ANYRES32, @ANYBLOB="140006"], 0x64}, 0x1, 0x0, 0x0, 0x48810}, 0x4000010) add_key$fscrypt_v1(0x0, 0x0, &(0x7f00000005c0)={0x0, "7c80f794913f488c37c8372afe0335267888cc11eef667ca602b4f85913c827aedd707789d1c79dda6f4cf15d9e91a2922c80c43cde9ebd1553034d2efa4a948", 0x1f}, 0x48, 0xffffffffffffffff) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fffffff, 0x1}}]}}]}, 0x48}}, 0x8d0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newtfilter={0xd8, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xc}, {0xfff2}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0xac, 0x2, [@TCA_BPF_ACT={0x4c}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}]}}]}, 0xd8}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r6, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x204000) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002d00)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x800) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7dff0000}]}) r9 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) move_pages(r9, 0x1, &(0x7f00000000c0)=[&(0x7f0000ffa000/0x4000)=nil], 0x0, &(0x7f0000000340), 0x2) close_range(r8, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000003400), 0x42300, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x42}) mprotect(&(0x7f00003fd000/0xc00000)=nil, 0xc00000, 0x5) r10 = socket$tipc(0x1e, 0x5, 0x0) r11 = accept4$tipc(r10, 0x0, &(0x7f0000000100), 0x80000) setsockopt$TIPC_GROUP_JOIN(r11, 0x10f, 0x87, &(0x7f00000000c0)={0x42, 0x1, 0x2}, 0x10) 4.042916816s ago: executing program 4 (id=1227): r0 = syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2) io_setup(0xd, 0x0) io_submit(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f00000000c0)={0xf0f041}) 3.91330166s ago: executing program 4 (id=1228): r0 = socket$phonet(0x23, 0x2, 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0xe}}, './file0\x00'}) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100000022"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0xca4c) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x15, &(0x7f0000000200)=ANY=[@ANYRES32=r4], &(0x7f0000000100)='GPL\x00', 0x3}, 0x94) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0xe, 0x4, &(0x7f0000000400)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000c40)=ANY=[@ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r7}, &(0x7f00000006c0), &(0x7f0000000700)=r6}, 0x20) sendmsg$inet(r5, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r9, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x10010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2}, 0x50) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, 0xffffffffffffffff, 0x0) socket(0x10, 0x3, 0x0) 3.679472051s ago: executing program 3 (id=1230): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$kcm(0x10, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r2, &(0x7f0000004180)="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", 0x2000, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0xffffffffffffffda, 0x200000000000001, {0x6, 0x2, 0x9, 0x1000, 0x6, 0x0, {0x40, 0x81, 0xb, 0x8, 0x4, 0x400, 0x2000000, 0xffffffff, 0x120, 0x2000, 0x2, r4, r5, 0x503, 0x8}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x50) write$FUSE_INIT(r2, &(0x7f0000000440)={0x50, 0x0, r3, {0x7, 0x29, 0x0, 0xffffffff9046dce8, 0x40, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffef}}, 0x50) r6 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x3002a8d, 0x1) ioctl$TIOCSPTLCK(r6, 0x40045431, 0x0) socket(0x2d, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_setup_io_uring(0x1c, &(0x7f0000000340)={0x0, 0xd40c, 0x1000, 0x40002, 0xf5}, &(0x7f0000000000), 0x0, &(0x7f0000000140)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010200000000000000006700000008000300", @ANYRES32=r9, @ANYBLOB="0800c300741300000800c400010000000400c5"], 0x30}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010003b0c00"/20, @ANYRES32, @ANYBLOB="0000000040000000280012800b00010065727370616e000018000280040012000600100000000000060013"], 0x48}, 0x1, 0x0, 0x0, 0x8054}, 0x0) statx(r6, &(0x7f0000000180)='./file0/file0\x00', 0x4000, 0x10, &(0x7f0000000580)) 2.447438332s ago: executing program 3 (id=1235): socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000010000000000000000000000a5000000a000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xe, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6e, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x3e8, 0xe80, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68886dd87", 0x0, 0x3ff, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 1.980531907s ago: executing program 3 (id=1238): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000540), &(0x7f00000005c0)=0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000380)={&(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], 0x3, r3}) io_setup(0x81, &(0x7f0000000100)=0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r6, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) r7 = eventfd(0x5) io_submit(r5, 0x3, &(0x7f0000000780)=[&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x3, 0x7, r0, &(0x7f0000000240)="9863c92f76f035b8c13000995481a4e9fa0804fdfe60e70699465ea41c9e34fbbec73e46ab63420d23bef1eae7d9439cb3d4920d7e4e2d60fa859b9f09fc05b73f136da91d80f79222126a31878a55cffc13acf49201d629c4", 0x59, 0xffffffffffff8001, 0x0, 0x3, r6}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x5, 0x8, r0, &(0x7f0000000400)="aa43d5f27246e7b42dd0a5c6c76ce5342169d09e2e6800c5dd6782c2ba74bddfc16755cf4d2694727aacb1ae36a57777e59ba74b3db95085aa33c75fc9acb74e00638d8cfa4ba42397138435c40893510f2cca2e965a821204dae1fc987a8cc2d362f7584eb71a0decc3013ec3d44b3bc0a03cac5b3a6b1169c013d3c583cb637027b3f8fe76d545008444f8040053ee29a907b4521f55f201f7d05d", 0x9c, 0x7, 0x0, 0x3}, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x2, 0x7, r0, &(0x7f0000000680)="b73881460ed8201db35e79d5c3fea972111bc9d53d7f10c477c6ec209e9510fb2a52035e70ea7372c0b9e3863349abd08dc78c4f51a87ab2eeb5d51fbf9a687f421b9b4d588882c6085cbf1c6f1aca100db9526bbadb1928174242d1e1b13f813a5d4317ec817f76372c940f8a0e00e5a34d5e84d35e7acb85493d0b549e974b5210f31703316a94909093fbd4e970c6af4125abd9e62158aa90d07d133faf9a39a40651d8363072dc58420b8fa7", 0xae, 0x2, 0x0, 0x4736110c511d3b4d, r7}]) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty}}, 0xffffec47, 0x9, 0xffff1896, 0x100, 0x25, 0x7fff}, 0x9c) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000580)={0x401, 0x1, &(0x7f0000000180)=[r3], &(0x7f00000000c0)=[0x3], &(0x7f0000000640)=[r4], &(0x7f0000000340), 0x0, 0xffffffffffffffff}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/power/wakeup_count', 0x0, 0x0) 1.667711358s ago: executing program 6 (id=1242): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="c60009"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001640)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x0}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) listen(r1, 0x4) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000001c0)={0x114, 0x30, 0x1, 0x0, 0x0, "", [@nested={0x104, 0x0, 0x0, 0x1, [@typed={0xc, 0x2, 0x0, 0x0, @u64=0xffffffff}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@empty}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767fc734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8c"]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 1.471824185s ago: executing program 5 (id=1244): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x402) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ed56b6c5", 0x4) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$inet6(0xa, 0x3, 0x7) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000440)=@mangle={'mangle\x00', 0x2, 0x6, 0x580, 0x390, 0x2a0, 0x390, 0x1c0, 0x0, 0x4b0, 0x4b0, 0x4b0, 0x4b0, 0x4b0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [0xffffffff, 0xff000000], 'pimreg0\x00', 'macvtap0\x00', {}, {}, 0x21, 0x0, 0x0, 0x38}, 0x0, 0xa8, 0xf0, 0x0, {0x7a00000010000000}}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@private=0xa000000, @ipv4=@empty, 0x2f, 0x30, 0x1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @loopback}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x0, 0x0, 0xffffff00, 0xffffffff], [0x0, 0x0, 0xff000000], '\x00', 'bond_slave_0\x00', {}, {}, 0x2f, 0x9, 0x5}, 0x0, 0xa8, 0xe0, 0x48000000}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0x6, 0x5}, {0xffffffffffffffff, 0x6, 0x1}, {0x0, 0x4, 0x2}, 0xfffffffe}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv4=@loopback, 0x38, 0x17}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @common=@eui64={{0x28}}]}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5f9) syz_emit_ethernet(0x4e, &(0x7f00000006c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 1.363372296s ago: executing program 5 (id=1245): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) prlimit64(0x0, 0x5, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x1) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) (async) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x40, &(0x7f0000000200)={0x11, 0xd, 0x0, 0x1, 0x0, 0x6, @random="180008000001"}, 0x14) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async) r1 = socket$xdp(0x2c, 0x3, 0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002080), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r2, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000fddbdf25010000000c000600010000000100000008000300", @ANYRES32=0x0, @ANYBLOB="fa794423c8bc73ef305cbf8bf7246ed9a82fe9a04091340400d75698669b34e1007a2e702b0e98d4a75f8917ad4556cfb177708ec1a9b00370803efbcf0ff9a9e2999f667afe102bddb514dd91a35aa2756cf7abe796ca4d1ba83f66d71946ed3c37e965ce2d4663937c015376e8da4ea2b0c220d932558f3c414897c50af293f0ecb35d085dd3d5c916db6fad24"], 0x28}, 0x1, 0x0, 0x0, 0x20004080}, 0x800) (async) r4 = syz_open_dev$MSR(&(0x7f00000000c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x0) (async) setsockopt$inet_udp_encap(r5, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) (async) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x23a000, 0x1000, 0x0, 0x3}, 0x20) (async) ioctl$XFS_IOC_FSGROWFSRT(r0, 0x40105870, &(0x7f0000000140)={0x5, 0x9}) 1.215692341s ago: executing program 5 (id=1246): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x7, 0x0, 0x1}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x5}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000804}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005e00679a36019b8af9a900004f78ffffffff1cccff"], 0x1c}}, 0x0) recvmmsg$unix(r2, &(0x7f0000002380)=[{{0x0, 0x4000000, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0xecc}], 0x1}}], 0x8, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6}, 0x1c) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b80)=ANY=[@ANYBLOB="1400000027000070e0a5783b2245000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x4c805}, 0x20040080) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) ioctl$BLKPG(r3, 0x1269, &(0x7f0000000180)={0x1, 0x0, 0x98, &(0x7f00000000c0)={0x0, 0x800, 0x100013}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002580)={0x14, r5, 0x1, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20005045}, 0xc0) 1.192478144s ago: executing program 3 (id=1247): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x41, '\x00', r1, @fallback, 0x0, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x80, 0x0, 0x0, 0x0, 0x2c, '\x00', r1, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r3, r1, 0x25, 0x0, @val=@netkit={@void, @value=r2}}, 0x1c) syz_emit_ethernet(0x6e, &(0x7f0000000200)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, "fbddf0", 0x38, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast2, {[], @dest_unreach={0x1, 0x4, 0x0, 0x6, '\x00', {0x7, 0x6, "3ab0cc", 0x480, 0x2f, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, [@fragment={0x85, 0x0, 0x3, 0x0, 0x0, 0x1a, 0x66}]}}}}}}}, 0x0) 1.125019286s ago: executing program 5 (id=1248): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000080)=@ethtool_coalesce={0x1, 0x2, 0x9295, 0xf86, 0x0, 0x5b9b8ab7, 0xbc95, 0x3, 0x1b9, 0x0, 0x1, 0x3, 0x1741, 0x4, 0x6, 0x7, 0xfffffff5, 0xfffffffe, 0xa236, 0x1, 0x1, 0xfb, 0x5}}) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r1, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x10022, 0x0) 1.035791718s ago: executing program 1 (id=1249): syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) inotify_init() pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000, 0x401}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x18c6}, 0x0, 0x0) 1.009850114s ago: executing program 6 (id=1250): r0 = syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2) io_setup(0xd, 0x0) io_submit(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f00000000c0)={0xf0f041}) 929.930828ms ago: executing program 3 (id=1251): syz_open_procfs(0x0, &(0x7f0000000280)='net/route\x00') openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/card0/oss_mixer\x00', 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x28000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x0, 0x1}) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000400)={@local, 0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f00000001c0)={{@local}, 0x1, 0x0, 0x5}) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x1ff, 0x7a, 0x0, 0x8000, 0x6, 0x3}, 0x0, &(0x7f0000000080)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0x12, 0x80000003}, 0x0, 0x0) 884.201618ms ago: executing program 6 (id=1252): msync(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x9) 812.126305ms ago: executing program 6 (id=1253): msync(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x9) (fail_nth: 1) 661.788738ms ago: executing program 4 (id=1254): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@delqdisc={0x28, 0x25, 0x8, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x4, 0x2}, {0x9, 0xfff3}, {0xffff, 0xfff1}}, [@TCA_STAB={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x20040000}, 0x8) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000036000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x56, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) (async) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f7f"], 0x0) socket$inet6_udp(0xa, 0x2, 0x0) (async) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip6_flowlabel\x00') read$FUSE(r4, &(0x7f0000006200)={0x2020}, 0xffe8) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1, 0x3, 0xfffe}, 0x20) read$FUSE(r4, &(0x7f00000000c0)={0x2020}, 0x2020) socket$netlink(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000a0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000000a0)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) futex_waitv(&(0x7f0000005a00)=[{0x7, &(0x7f0000000000)=0x7, 0x2}], 0x1, 0x0, 0x0, 0x0) futex(&(0x7f0000000000)=0x2, 0x1, 0x0, 0x0, 0x0, 0x1) (async) futex(&(0x7f0000000000)=0x2, 0x1, 0x0, 0x0, 0x0, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) (async) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/gser.usb0\x00', 0x1ff) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="180000000000000000000000000000007110cb000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x36, 0x0, 0x0, 0x10, 0x573}, 0x94) rmdir(&(0x7f0000000000)='./config/usb_gadget/g1/functions/gser.usb0\x00') symlink(&(0x7f0000000100)='\x00', &(0x7f0000002100)='./config/usb_gadget/g1/functions/gser.usb0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0x1ff) socket$inet6_tcp(0xa, 0x1, 0x0) 535.955232ms ago: executing program 6 (id=1255): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x80, 0x2, 0x27e}, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0x0, 0x121) fcntl$notify(r3, 0x402, 0x30) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) write$P9_RVERSION(r4, &(0x7f0000000a80)=ANY=[], 0x15) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x20000, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) vmsplice(r5, &(0x7f00000009c0)=[{&(0x7f0000000140)="d0", 0x1}], 0x1, 0x7) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r2, 0x18, 0x0, 0x1) 535.647002ms ago: executing program 5 (id=1256): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x240048e4}, 0x20000010) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) r0 = shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) syz_emit_ethernet(0xffffff78, &(0x7f00000004c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd62bc12fa00002101fe8000000000000000000000000000bb200100000000000000000000000000006700000000000000090007041f79e8c8a1fc8c28b30f015f5b86f74cd63c3e0b0878b9c496cbc28cead92bb943eb6bd89364f9cd56ca2e8e0c2d467079adf779bb909c7b7b85358b9205020215c20400000000a6005e02159586c3dbcd6d08ab7ef22c6728f6f8880dfc428fc54f086ce5dfac330f55018569422a984e6d56f8690b083036aa0211fe6241e2e06e9a29684295a850c30da75a9b270f9485f6cf5ebbf792c34dcc7e9f52a218fa69dbc0349a416835e3069946221f0af5facc487f6dae08541ec90c422891fff20807f01ca61c70b4929bee782b36fb233f6548fcc85b9a453bc681b2555e6dfa26fbbbe3a68f758ff0d50da0db7163f83312dc695508cdc836c1d0aed171e3538ec101569e934d4f2559761ce793b1ca85857a2c713c96c51d1296d7927f5a38f6b08f1b63c43c5290fe32d7b15cba1067adf7141f93d5063b3f2e2808040100010000002e0004000360030020010000000000000000000000000001ff020000000000000000000000000001fe880000000000000000000000000101ff020000000000000000000000000001fe8000000000000000000000000000aaff010000000000000000000000000001b500000000000000050200030502065705020f2507000000000300050400060000000000000000004e214e2300f1907898e7af6610dfab850c2fbe34e2c42b1acb0ffbaf83d8d5da9a124079c228eaf9bb12fe439ba1fa40db3242a9540aefac3cbd229b7e51e3703759786010cfca48792a5bc3140f674c12df479b113afe2b578ee30b4c74d4f8c5a98e68d1e1a90432c04b245e8ee8cbb30100000000000000b7f0d882f7a254a1da5d4b14c35f186691dfcc6440e46396d378e27e352c2819e96abb5bbff799d0366240683fa996105778c60b8e875cdc2c7414e5a60906a2082c5ad9450ca33379cb22fa90ec4659bcdf271c726d1a841c00000000000000"], 0x0) r1 = shmget$private(0x0, 0x2000, 0x100, &(0x7f0000ff9000/0x2000)=nil) shmat(r1, &(0x7f0000ff9000/0x1000)=nil, 0x1000) r2 = socket$netlink(0x10, 0x3, 0x4) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f00000003c0)=0x2, 0x4) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0xfff, 0x6, 0x1000, 0x3a, 0x9, 0x0, 0x8000}, 0x1c) write(r2, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0xfdef) mremap(&(0x7f0000db5000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) r4 = fsopen(&(0x7f00000002c0)='hpfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f00000001c0)='source', &(0x7f0000000100)='%\xff:2\x82|\x9a\xe0\xadA\xde\xd5\x03\x00\x00\x00\xb7\xe5\xee:\xb5\x0e\xec\xe5\xdc\xe5\x8d?\x16BE\x8b\xe8)\xa9H\x99\x10\x02q\xf7\xd3\xc5*\x15\xdf_\xb2_`\x92|\x7f\xff9\xf7o$e&1\xfd\xea\xb0\xb0', 0x300) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') statx(r5, 0x0, 0x0, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000000)='ip6gre0\x00', 0x10) shmdt(r0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r6) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000300)={'batadv0\x00', 0x0}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r6, {0x8001, 0x5}}, './file0\x00'}) sendmsg$BATADV_CMD_SET_MESH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002cbd7000fddbdf250f00000008000300", @ANYRES32=r8, @ANYBLOB="0000000000000000d0e5464605ff626b7df849dfac00d7c75a670f"], 0x24}, 0x1, 0x0, 0x0, 0x8081}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000001c80)={'wg2\x00', 0x0}) sendmsg$inet6(r5, &(0x7f0000001d40)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)="19de69b01333470e9761a5f5a98cf5830f890381bf514965c9f6afaa78d4c8973ba48e50585c1f0e01c0b2b7a0ae36efdef6fbfcfe", 0x35}, {&(0x7f0000000b40)="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", 0x1000}, {&(0x7f0000001b40)="cf7e03cd28f8b4e6af4a2ab54e88d6163a1d3d2802cbd13c2e17b553ee235bbf8d257248bbd8233715ba4ddeb52f5a3429f891837a20c312c416cc48497bd9d4f1391fe064d6e4f12f5e63c7cc2c5e00aa4bab952e27f7821a3b34152542addc80f0807c06760a9fcc41441bec56913544dadaa3ee7e8074f4843daa41863c38b4f299bda3eda660466e81a372cb49714a605231c3d1d2162968ebbfd48e95f25b08fc54cb0f59ac818e6545dbb90a4ec9b664bc7d7e21115834a834e23b32f53758d74dc6561f97c1747a3a97dcf78be237c2c680b47af1fb0797fcb3c5d2d2b4064dcc9c5a1864afab", 0xea}], 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="2400000000000000290000003200000000000000000000000000ffffac14141a", @ANYRES32=r8, @ANYBLOB="0000000024000000000000002900000032000000fc00"/36, @ANYRES32=r9, @ANYBLOB="edffffff97b9b67d598ff75ae2b609a2958d67152a49b2bd808abdffba26f11447ff3074a67d9576c0b07be38a7f6509728b61c5f4945f5694dd07fc4ad779847b2ebfb1c1f976550b3710d8f1"], 0x50}, 0x20000000) mmap$xdp(&(0x7f0000a18000/0x4000)=nil, 0x4000, 0x100000a, 0x2001e, 0xffffffffffffffff, 0x180000000) syz_emit_ethernet(0x7e, 0x0, 0x0) 349.594699ms ago: executing program 6 (id=1257): r0 = socket(0x10, 0x3, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0x20, &(0x7f0000000000)={@in={{0x2, 0x4e24, @rand_addr=0x64010100}}, 0x0, 0x0, 0x3a, 0x0, "a30b3b28af4d2f246a016542daa845f387713f4048ff2ece1e75f1fc0100f41e4de6256109383664417165bba0dd5ace522fa788000000000033035551502f07b4001a00"}, 0xd8) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0) r1 = eventfd(0xfffffff9) ppoll(&(0x7f0000000600)=[{r1, 0x1000}], 0x1, 0x0, 0x0, 0x0) read$eventfd(r1, &(0x7f0000000300), 0x8) syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x60, 0x60, 0x3, [@enum64={0xb, 0x7, 0x0, 0x13, 0x0, 0xe, [{0xd, 0x80000001, 0x3}, {0x5, 0x5, 0x72d5}, {0x6, 0xe6, 0x4}, {0xc, 0x4, 0x6}, {0x9, 0x4, 0x7}, {0xc, 0x5e, 0xd}, {0x2, 0x1, 0x10002}]}]}, {0x0, [0x0]}}, 0x0, 0x7b}, 0x28) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xba7e}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, 0x0, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfdef, 0x0, 0x0) r5 = socket(0x40000000015, 0x5, 0x0) bind$inet(r5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x1e, 0x4, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CHANNEL(0xffffffffffffffff, 0x0, 0x80c4) 288.931529ms ago: executing program 5 (id=1258): r0 = socket$netlink(0x10, 0x3, 0x13) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1ff) open(&(0x7f0000000080)='./file1\x00', 0x1c1882, 0x12) socket$nl_sock_diag(0x10, 0x3, 0x4) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='freezer.self_freezing\x00', 0x275a, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000000)="8ee8c9b8ee088ed8660f3801b2d6352ed9ff660f3882040f01cf0fc72d2626652e0f01ca0fc7386635002000000f22e0", 0xffffffffffffff8b}], 0x1, 0x50, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) pipe(&(0x7f0000000240)) ioctl$KVM_RUN(r4, 0xae80, 0x0) sendmsg$netlink(r0, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000700)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="040007800800a700e0000002"], 0x178}], 0x1}, 0x0) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi0\x00', 0x40400, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYRES8=r5, @ANYRES32=r6, @ANYBLOB="00000000284400001c0012800b00010067656e65766500000c00028005000d0009000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4040000}, 0x8041) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f0000000240)={'pcl812\x00', [0x105, 0x7, 0x1, 0xfffffffe, 0x81, 0xffffffff, 0x80000, 0x20000004, 0x1, 0x1000a, 0x1, 0xb059, 0x40, 0xb6ac, 0x9, 0x7, 0x2000000a, 0x10008, 0xfe9, 0x401, 0x3, 0x9, 0x4, 0x9, 0x7ff, 0x7, 0x180, 0x10, 0x10000081, 0x4000004, 0xff]}) ioctl$COMEDI_INSN(r5, 0x8028640c, &(0x7f0000022a00)={0x4000000, 0x92, 0x0, 0x0, 0x2}) openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r7 = semget$private(0x0, 0x1, 0x429) semop(r7, &(0x7f0000000180)=[{0x1, 0x7, 0x1000}, {0x0, 0x200, 0x1800}, {0x1, 0x4, 0x800}, {0x0, 0x7, 0x1800}, {0x4, 0x0, 0x1000}, {0x4, 0x4}, {0x0, 0xd9b, 0x2800}, {0x0, 0x40, 0x800}, {0x4, 0xfffc, 0x1000}], 0x9) semtimedop(0x0, &(0x7f0000000340)=[{0x0, 0x1, 0x1000}], 0x1, 0x0) 0s ago: executing program 1 (id=1259): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001500)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) ioctl$AUTOFS_IOC_READY(r0, 0x9360, 0x29721930) (async) r1 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=0x10, 0x80000) sendmsg$tipc(r1, &(0x7f00000030c0)={&(0x7f0000000100)=@id={0x1e, 0x3, 0x0, {0x4e23, 0x3}}, 0x10, &(0x7f0000003000)=[{&(0x7f0000000140)="f4cf02c1cfa3caa87e6aa5cc70370472418dc56e71d8d5b2486e65e66175e35f9db58a13ecc433893cb197812ca763210bbc66c1469099140bf1f910156a4eebb5b7266255498777f1895e7a526788984f9d0b470b3587f8b50b08c6e5beee5dae7a4eafd68dca3a0ffdb67018358df6c5002aa4e946562eb118fee9a91c23671f36310d5d806c25e0c3950024df5ee0748cfaec483ae9f533c542103432b2e24692c298a16c2f78c16a07c8441e92deefea7f72e535009a75a5c34eb3", 0xbd}, {&(0x7f00000002c0)="574c8b66401a2383d1ab89358fd9f6ccbd55ad", 0x13}, {&(0x7f0000000380)="e587fa93e76a9b9bed3470c443aff8cd8f995ebe7fd11948e6d380d77229c7e8d0ff7b31d25a4b3438383cca0624c443831888ae206db9a752a803be47f74177667c2cacd12741290c05705be4ef24327b1e7226d7b014", 0x57}, {&(0x7f0000000400)="b30762c458bd377e42958a891cc6ea1bf6a22d207275e4a0b7421249ef3c7d1cdecdee8a10b15da81b346bc32ef2edc40ddcd414e6d4428dacc5b9af943ef6a2e890a0f1dbe9e553228c9c993750bc6598ca8fb6fb46402cf40769a0ad54c79a25480c34cf11e0a11a6c2aed239df52eed2796c44f8c77617dd47ed5c59ce00de32a18eed08c5834388ed0bea09705f005b91770182437ed9229b2a8a95c66bc66751e4e2b24833916ac9d6b283342effc0ef0a8657f2b6ea3b3fab0203db0288fe5a6", 0xc3}, {&(0x7f0000000500)="8d2caeda1b8e55433a63e0e990c80335678feb89f11db6075cad47dafb35264be6839dbab33451ea577a363aefd48cc02a65f38734d93c8a2ae0c77a0a3ed860ad9f86279cd357877c39d81b0b746c2103aadd30a6", 0x55}, {&(0x7f0000001dc0)="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", 0x1000}, {&(0x7f0000002dc0)="d7385530bf87022e340c1543c0eae3f06b6be21433d077a60062860e03277b9a430ca9ae74aa9ea0c2bae4a3dc4d66f1a0b426ebeef9a5abacd708796282f88c01a1548ce688c29d1c0e2f750c2801eb76d44f3a8f5c7e2d1d8c476346a8a9ffa44dab87746f2e2898e1bb867ab78a4d129fffcd75562ee81b85b198d3abfb43c1c92b0e0b2b3fbecf82b788c59169436fb745e6a1f6fb3cc6a2ce5e9e99adfc3bfd1eb333aa66050860cdd19c92", 0xae}, {&(0x7f0000002e80)="dde60bae5223c3d826d4ef5edbcdd5dc42ffb096e3bd3978ae935778ae7188f7017241d818343726976fbfad4dc8525df39e0ef3b93799723be40a0c2bd582d84de3a43f85937e7efaa7270afa736f893e82449d3a0235e725f3a2868af746f51d42bbe9c5df92d7ea1de55df55237c789f37b90670c9cfbc2dc713915ca2308af90ed8bfa5762608052bdbc35aa8089cd7fa607554533abf3991a33070d57ada87ae4110db3795d4375a978cbc67ef81c6452b3", 0xb4}, {&(0x7f0000002f40)="13adbfe9e4cbbf4025e87b1022fde45d71c89882d8c2f7e58b676622175f9248dc338dd716a991fe65f56207975f96fbce0993cdbd8382495041804a0ce29c2ceddca544d100c692c220576ef6a5cff81642e756c1ae045c829706aea1afd3d324a60ed22508ccb5adb20d236025de53562bf4638a4573f6a2665dcd26784945f98aa92b29ee6a263c6e66ab0af023fd4467b56548c9fa4d30e2e6af332d5ddbbcb71faf", 0xa4}], 0x9, 0x0, 0x0, 0x40080c0}, 0x11) kernel console output (not intermixed with test programs): 3911.762:670): avc: denied { name_bind } for pid=8702 comm="syz.1.721" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 262.046726][ T8703] netlink: 224 bytes leftover after parsing attributes in process `syz.1.721'. [ 262.092673][ T24] usbhid 2-1:0.0: can't add hid device: -71 [ 262.098790][ T24] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 262.116020][ T5615] gp8psk: usb in 128 operation failed. [ 262.149452][ T24] usb 2-1: USB disconnect, device number 24 [ 262.339113][ T5615] gp8psk: usb in 146 operation failed. [ 262.344677][ T5615] gp8psk: failed to get FW version [ 262.350312][ T5615] gp8psk: usb in 149 operation failed. [ 262.355817][ T5615] gp8psk: failed to get FPGA version [ 262.398248][ T804] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 262.425478][ T29] audit: type=1400 audit(1785313912.152:671): avc: denied { watch } for pid=8714 comm="syz.3.726" path="/142" dev="tmpfs" ino=779 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 262.448852][ T29] audit: type=1400 audit(1785313912.152:672): avc: denied { watch_reads } for pid=8714 comm="syz.3.726" path="/142" dev="tmpfs" ino=779 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 262.560044][ T804] usb 6-1: config 1 has an invalid interface number: 7 but max is 0 [ 262.568344][ T804] usb 6-1: config 1 has no interface number 0 [ 262.574578][ T804] usb 6-1: config 1 interface 7 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 262.584815][ T5615] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 262.595780][ T804] usb 6-1: config 1 interface 7 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 528 [ 262.606824][ T5615] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 262.615801][ T804] usb 6-1: config 1 interface 7 altsetting 0 has a duplicate endpoint with address 0x6, skipping [ 262.629503][ T804] usb 6-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 262.640698][ T804] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.649530][ T804] usb 6-1: Product: syz [ 262.653843][ T804] usb 6-1: Manufacturer: syz [ 262.659558][ T804] usb 6-1: SerialNumber: syz [ 262.667152][ T8713] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 262.674822][ T8713] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 262.686197][ T804] usb 6-1: Expected 3 endpoints, found: 2 [ 262.870837][ T804] usb 7-1: USB disconnect, device number 8 [ 262.959549][ T5799] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 263.121546][ T5799] usb 2-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice= 0.40 [ 263.133519][ T5799] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.142314][ T5799] usb 2-1: Product: syz [ 263.146755][ T5799] usb 2-1: Manufacturer: syz [ 263.154945][ T5799] usb 2-1: SerialNumber: syz [ 263.344314][ T8727] netlink: 60 bytes leftover after parsing attributes in process `syz.3.730'. [ 263.358622][ T8727] netlink: 60 bytes leftover after parsing attributes in process `syz.3.730'. [ 263.370563][ T8727] netlink: 500 bytes leftover after parsing attributes in process `syz.3.730'. [ 263.384773][ T5623] Bluetooth: hci2: unexpected event for opcode 0x0405 [ 263.394070][ T5799] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 263.412253][ T5799] snd-usb-audio 2-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 263.457327][ T5799] usb 2-1: USB disconnect, device number 25 [ 263.566825][ T29] audit: type=1400 audit(1785313913.292:673): avc: denied { write } for pid=8730 comm="syz.6.732" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 263.748306][ T804] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 263.751556][ T8732] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 263.766950][ T8732] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 263.776146][ T8732] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 263.784044][ T8732] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 263.989458][ T804] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 264.002178][ T804] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 264.020299][ T804] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 264.041496][ T804] usb 4-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 264.059303][ T804] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.077488][ T804] usb 4-1: Product: syz [ 264.082158][ T804] usb 4-1: Manufacturer: syz [ 264.095620][ T804] usb 4-1: SerialNumber: syz [ 264.114774][ T804] usb 4-1: config 0 descriptor?? [ 264.141741][ T8729] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 264.210436][ T804] rc_core: IR keymap rc-streamzap not found [ 264.220986][ T5615] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 264.235691][ T804] Registered IR keymap rc-empty [ 264.243408][ T29] audit: type=1400 audit(1785313913.962:674): avc: denied { unmount } for pid=5610 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 264.264409][ T804] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 264.284483][ T804] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input30 [ 264.408196][ T5615] usb 7-1: Using ep0 maxpacket: 8 [ 264.416750][ T5615] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 264.435548][ T5615] usb 7-1: config 0 has no interface number 0 [ 264.488005][ T8729] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 264.519438][ T8729] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 264.522712][ T5615] usb 7-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 264.575026][ T5615] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.588466][ T5799] usb 4-1: USB disconnect, device number 27 [ 264.593101][ T5615] usb 7-1: Product: syz [ 264.607385][ T5615] usb 7-1: Manufacturer: syz [ 264.621658][ T5615] usb 7-1: SerialNumber: syz [ 264.630452][ T5615] usb 7-1: config 0 descriptor?? [ 264.635762][ T29] audit: type=1400 audit(1785313914.362:675): avc: denied { ioctl } for pid=8744 comm="syz.1.735" path="socket:[23691]" dev="sockfs" ino=23691 ioctlcmd=0x890d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 264.667471][ T5615] usb 7-1: selecting invalid altsetting 1 [ 264.673448][ T5615] dvb_ttusb_budget: ttusb_init_controller: error [ 264.681013][ T5615] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 264.731309][ T5615] DVB: Unable to find symbol stv0299_attach() [ 264.772300][ T5615] DVB: Unable to find symbol tda8083_attach() [ 264.780057][ T5615] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 264.858131][ T804] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 264.909969][ T5615] usb 7-1: USB disconnect, device number 9 [ 265.048120][ T804] usb 5-1: Using ep0 maxpacket: 16 [ 265.055242][ T804] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 265.066750][ T804] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 265.075890][ T804] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.084115][ T804] usb 5-1: Product: syz [ 265.088549][ T804] usb 5-1: Manufacturer: syz [ 265.093162][ T804] usb 5-1: SerialNumber: syz [ 265.102008][ T804] usb 5-1: config 0 descriptor?? [ 265.111775][ T804] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 265.121174][ T804] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 265.165614][ T10] usb 6-1: USB disconnect, device number 9 [ 265.188134][ T5799] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 265.384421][ T5799] usb 2-1: Using ep0 maxpacket: 32 [ 265.398250][ T5799] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 265.425856][ T5799] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 265.759856][ T5799] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 265.782697][ T5799] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.978727][ T5799] usb 2-1: config 0 descriptor?? [ 265.999389][ T804] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 266.000727][ T5799] hub 2-1:0.0: USB hub found [ 266.161489][ T8767] netlink: 60 bytes leftover after parsing attributes in process `syz.5.742'. [ 266.203795][ T5799] hub 2-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 266.233398][ T8770] netlink: 60 bytes leftover after parsing attributes in process `syz.5.742'. [ 266.251005][ T8767] netlink: 500 bytes leftover after parsing attributes in process `syz.5.742'. [ 266.438515][ T5615] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 266.629202][ T5615] usb 7-1: Using ep0 maxpacket: 16 [ 266.639717][ T8752] netlink: 'syz.1.737': attribute type 1 has an invalid length. [ 266.656250][ T5615] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 266.667134][ T8747] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 266.682132][ T8752] netlink: 224 bytes leftover after parsing attributes in process `syz.1.737'. [ 266.694098][ T8747] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 266.699028][ T5615] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 266.732327][ T804] em28xx 5-1:0.0: read from i2c device at 0xa0 failed with unknown error (status=229) [ 266.732498][ T5799] usbhid 2-1:0.0: can't add hid device: -71 [ 266.742098][ T5615] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.742132][ T5615] usb 7-1: Product: syz [ 266.742147][ T5615] usb 7-1: Manufacturer: syz [ 266.742162][ T5615] usb 7-1: SerialNumber: syz [ 266.782045][ T5615] usb 7-1: config 0 descriptor?? [ 266.785139][ T5799] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 266.808276][ T804] em28xx 5-1:0.0: board has no eeprom [ 266.819360][ T5615] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 266.821522][ T5799] usb 2-1: USB disconnect, device number 26 [ 266.857731][ T5615] em28xx 7-1:0.0: DVB interface 0 found: bulk [ 267.088070][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 267.478068][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 267.548073][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 267.588085][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 267.638070][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 267.698072][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 267.948072][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 268.038388][ T5623] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 268.051872][ T5623] Bluetooth: hci2: Injecting HCI hardware error event [ 268.062090][ T5625] Bluetooth: hci2: hardware error 0x00 [ 268.098507][ T804] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 268.109470][ T804] em28xx 5-1:0.0: dvb set to bulk mode. [ 268.115161][ T5800] em28xx 5-1:0.0: Binding DVB extension [ 268.138983][ T5615] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 268.175005][ T5800] em28xx 5-1:0.0: Registering input extension [ 268.201996][ T5800] usb 5-1: USB disconnect, device number 23 [ 268.210889][ T5800] em28xx 5-1:0.0: Disconnecting em28xx [ 268.218451][ T5800] em28xx 5-1:0.0: Closing input extension [ 268.250556][ T5800] em28xx 5-1:0.0: Freeing device [ 268.360695][ T8785] netlink: 12 bytes leftover after parsing attributes in process `syz.4.748'. [ 268.470797][ T29] audit: type=1400 audit(1785313918.202:676): avc: denied { mount } for pid=8786 comm="syz.5.749" name="/" dev="rpc_pipefs" ino=22948 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 268.523245][ T29] audit: type=1400 audit(1785313918.252:677): avc: denied { bind } for pid=8784 comm="syz.4.748" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 268.572768][ T5615] em28xx 7-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 268.581757][ T5615] em28xx 7-1:0.0: board has no eeprom [ 268.612060][ T29] audit: type=1400 audit(1785313918.342:678): avc: denied { unmount } for pid=7697 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 268.798915][ T8769] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 268.829504][ T8769] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 268.888808][ T8796] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8796 comm=syz.1.752 [ 268.932294][ T8796] netlink: 'syz.1.752': attribute type 1 has an invalid length. [ 268.948165][ T5615] em28xx 7-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 269.038083][ T5615] em28xx 7-1:0.0: dvb set to bulk mode. [ 269.045325][ T5800] em28xx 7-1:0.0: Binding DVB extension [ 269.717837][ T8806] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=6 sclass=netlink_route_socket pid=8806 comm=syz.1.752 [ 269.784443][ T8796] 8021q: adding VLAN 0 to HW filter on device bond3 [ 269.934970][ T5800] em28xx 7-1:0.0: Registering input extension [ 270.120687][ T5625] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 270.278299][ T5727] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 270.328463][ T5799] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 270.449738][ T5727] usb 2-1: Using ep0 maxpacket: 32 [ 270.464959][ T5727] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 65, changing to 7 [ 270.478196][ T5800] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 270.488367][ T5727] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 270.510346][ T5727] usb 2-1: New USB device found, idVendor=17cc, idProduct=1021, bcdDevice= 0.40 [ 270.521303][ T5799] usb 5-1: Using ep0 maxpacket: 32 [ 270.533474][ T5799] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 270.546126][ T5727] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.554194][ T5799] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 270.563210][ T5727] usb 2-1: Product: syz [ 270.567397][ T5727] usb 2-1: Manufacturer: syz [ 270.572037][ T5799] usb 5-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 270.581788][ T5727] usb 2-1: SerialNumber: syz [ 270.587176][ T5799] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.605574][ T5799] usb 5-1: config 0 descriptor?? [ 270.638132][ T5800] usb 6-1: Using ep0 maxpacket: 16 [ 270.650773][ T5800] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 270.672433][ T5800] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 270.694916][ T5800] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.711757][ T5800] usb 6-1: Product: syz [ 270.722487][ T5800] usb 6-1: Manufacturer: syz [ 270.730966][ T5800] usb 6-1: SerialNumber: syz [ 270.739691][ T5800] usb 6-1: config 0 descriptor?? [ 270.772890][ T5800] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 270.784546][ T5800] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 270.804283][ T8820] netlink: 'syz.1.756': attribute type 21 has an invalid length. [ 270.864137][ T5799] usb 5-1: USB disconnect, device number 24 [ 270.879549][ T5727] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 270.909325][ T5727] usb 2-1: unable to issue vendor read request (ret = -71) [ 270.927459][ T5727] usb 2-1: unable to issue vendor read request (ret = -71) [ 270.947778][ T5727] usb 2-1: unable to issue vendor read request (ret = -71) [ 270.958992][ T5615] usb 7-1: USB disconnect, device number 10 [ 270.971756][ T5727] usb 2-1: unable to issue vendor read request (ret = -71) [ 270.984068][ T5727] usb 2-1: unable to issue vendor read request (ret = -71) [ 270.995373][ T5727] usb 2-1: unable to issue vendor read request (ret = -71) [ 270.999153][ T5615] em28xx 7-1:0.0: Disconnecting em28xx [ 271.003117][ T5727] usb 2-1: unable to issue vendor read request (ret = -71) [ 271.031620][ T5727] usb 2-1: unable to issue vendor read request (ret = -71) [ 271.044617][ T5615] em28xx 7-1:0.0: Closing input extension [ 272.216224][ T5800] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 272.223674][ T5615] em28xx 7-1:0.0: Freeing device [ 272.257782][ T5727] usb 2-1: USB disconnect, device number 27 [ 273.277928][ T8217] udevd[8217]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 273.557132][ T8824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 273.606846][ T5615] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 273.645869][ T8824] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 273.671606][ T5800] em28xx 6-1:0.0: read from i2c device at 0xa0 failed with unknown error (status=229) [ 273.681369][ T5800] em28xx 6-1:0.0: board has no eeprom [ 273.734304][ T8845] netlink: 'syz.1.762': attribute type 1 has an invalid length. [ 273.742270][ T8845] netlink: 224 bytes leftover after parsing attributes in process `syz.1.762'. [ 273.788174][ T5615] usb 7-1: Using ep0 maxpacket: 16 [ 273.814942][ T5615] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 274.119863][ T5615] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 274.145066][ T5615] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.162593][ T5615] usb 7-1: Product: syz [ 274.169357][ T5615] usb 7-1: Manufacturer: syz [ 274.174485][ T5615] usb 7-1: SerialNumber: syz [ 274.189225][ T5615] usb 7-1: config 0 descriptor?? [ 274.219581][ T5615] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 274.239114][ T5615] em28xx 7-1:0.0: DVB interface 0 found: bulk [ 274.448193][ T5800] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 274.472706][ T5800] em28xx 6-1:0.0: dvb set to bulk mode. [ 274.497780][ T8852] netlink: 'syz.3.764': attribute type 1 has an invalid length. [ 274.505531][ T8852] netlink: 224 bytes leftover after parsing attributes in process `syz.3.764'. [ 274.573413][ T5615] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 274.616637][ T5720] em28xx 6-1:0.0: Binding DVB extension [ 274.935191][ T5615] em28xx 7-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 274.951985][ T5615] em28xx 7-1:0.0: board has no eeprom [ 275.023445][ T5615] em28xx 7-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 275.044982][ T5615] em28xx 7-1:0.0: dvb set to bulk mode. [ 275.066023][ T5615] usb 7-1: USB disconnect, device number 11 [ 275.096546][ T5615] em28xx 7-1:0.0: Disconnecting em28xx [ 275.115025][ T804] usb 6-1: USB disconnect, device number 10 [ 275.137538][ T804] em28xx 6-1:0.0: Disconnecting em28xx [ 275.151648][ T8858] netlink: 60 bytes leftover after parsing attributes in process `syz.1.767'. [ 275.226625][ T8858] netlink: 60 bytes leftover after parsing attributes in process `syz.1.767'. [ 275.247168][ T8858] netlink: 500 bytes leftover after parsing attributes in process `syz.1.767'. [ 275.279740][ T5720] em28xx 6-1:0.0: Registering input extension [ 275.294948][ T5800] em28xx 7-1:0.0: Binding DVB extension [ 275.399407][ T5800] em28xx 7-1:0.0: Registering input extension [ 275.406603][ T804] em28xx 6-1:0.0: Closing input extension [ 275.427136][ T5615] em28xx 7-1:0.0: Closing input extension [ 275.463271][ T804] em28xx 6-1:0.0: Freeing device [ 275.487542][ T5615] em28xx 7-1:0.0: Freeing device [ 275.650105][ T5741] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 275.818342][ T5741] usb 4-1: Using ep0 maxpacket: 16 [ 275.818400][ T5615] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 275.835080][ T5741] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 275.847316][ T5741] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 275.857219][ T5741] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 275.870511][ T5741] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 275.882701][ T5741] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.894610][ T5741] usb 4-1: config 0 descriptor?? [ 275.988281][ T5615] usb 7-1: Using ep0 maxpacket: 8 [ 276.002667][ T5615] usb 7-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 276.013068][ T5615] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.021958][ T5615] usb 7-1: Product: syz [ 276.026950][ T5615] usb 7-1: Manufacturer: syz [ 276.036422][ T5615] usb 7-1: SerialNumber: syz [ 276.045878][ T5615] usb 7-1: config 0 descriptor?? [ 276.057457][ T5615] radio-usb-si4713 7-1:0.0: Si4713 development board discovered: (10C4:8244) [ 276.424376][ T5741] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 277.237116][ T8883] vivid-009: kernel_thread() failed [ 277.448521][ T5741] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 277.790506][ T5741] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 277.808559][ T5741] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 277.828466][ T5615] radio-usb-si4713 7-1:0.0: probe with driver radio-usb-si4713 failed with error -32 [ 277.848176][ T5741] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 277.856915][ T5741] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 277.865364][ T5741] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 277.873971][ T5741] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 277.874692][ T5615] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 277.884089][ T5741] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 278.031641][ T5741] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0006/input/input35 [ 278.122935][ T8892] netlink: 'syz.4.777': attribute type 1 has an invalid length. [ 278.130692][ T8892] netlink: 224 bytes leftover after parsing attributes in process `syz.4.777'. [ 278.697422][ T5741] microsoft 0003:045E:07DA.0006: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 278.742794][ T29] audit: type=1400 audit(1785313928.462:679): avc: denied { listen } for pid=8893 comm="syz.5.778" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 278.896714][ T5799] usb 7-1: USB disconnect, device number 12 [ 278.970921][ T5727] usb 4-1: USB disconnect, device number 28 [ 279.327204][ T8900] fido_id[8900]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 279.592714][ T5615] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 279.602451][ T8912] netlink: 8 bytes leftover after parsing attributes in process `syz.5.782'. [ 279.623378][ T29] audit: type=1400 audit(1785313929.352:680): avc: denied { associate } for pid=8911 comm="syz.5.782" name="3" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 279.725274][ T804] usb 7-1: new full-speed USB device number 13 using dummy_hcd [ 279.798423][ T5615] usb 5-1: Using ep0 maxpacket: 16 [ 279.819584][ T5615] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 279.875447][ T5615] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 279.900212][ T5615] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.917506][ T5615] usb 5-1: Product: syz [ 279.923073][ T804] usb 7-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 279.936858][ T5615] usb 5-1: Manufacturer: syz [ 279.947611][ T804] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.955810][ T5615] usb 5-1: SerialNumber: syz [ 279.976960][ T5615] usb 5-1: config 0 descriptor?? [ 279.984224][ T804] usb 7-1: config 0 descriptor?? [ 279.998914][ T5615] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 280.016479][ T804] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 280.031026][ T5615] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 280.237093][ T804] gp8psk: usb in 128 operation failed. [ 280.478211][ T804] gp8psk: usb in 146 operation failed. [ 280.483872][ T804] gp8psk: failed to get FW version [ 280.490452][ T804] gp8psk: usb in 149 operation failed. [ 280.495921][ T804] gp8psk: failed to get FPGA version [ 280.615052][ T5615] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 280.726627][ T804] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 280.726664][ T804] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 281.359122][ T804] usb 7-1: USB disconnect, device number 13 [ 281.385258][ T8927] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 281.411337][ T8927] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 281.435037][ T5615] em28xx 5-1:0.0: read from i2c device at 0xa0 failed with unknown error (status=229) [ 281.464357][ T5615] em28xx 5-1:0.0: board has no eeprom [ 281.928463][ T5615] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 283.238666][ T5615] em28xx 5-1:0.0: dvb set to bulk mode. [ 283.823719][ T8937] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 283.823987][ T804] em28xx 5-1:0.0: Binding DVB extension [ 283.889322][ T8937] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 283.952489][ T8937] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 283.973114][ T5800] usb 5-1: USB disconnect, device number 25 [ 283.990894][ T5800] em28xx 5-1:0.0: Disconnecting em28xx [ 284.000666][ T8937] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 284.060709][ T8937] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 284.086206][ T804] em28xx 5-1:0.0: Registering input extension [ 284.092461][ T8937] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 284.106892][ T5800] em28xx 5-1:0.0: Closing input extension [ 284.134759][ T5800] em28xx 5-1:0.0: Freeing device [ 284.164927][ T8937] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 284.204960][ T8937] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 284.469814][ T804] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 284.848326][ T804] usb 7-1: device descriptor read/64, error -71 [ 284.854899][ T5800] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 285.008777][ T8972] overlayfs: missing 'lowerdir' [ 285.125551][ T804] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 285.162351][ T5800] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 285.620365][ T5800] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 285.631044][ T5800] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 285.641576][ T5800] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 285.652469][ T5800] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 285.661759][ T5800] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.672126][ T5800] usb 4-1: config 0 descriptor?? [ 285.742380][ T8979] netlink: 72 bytes leftover after parsing attributes in process `syz.4.800'. [ 285.759323][ T804] usb 7-1: device descriptor read/64, error -71 [ 285.878640][ T5625] Bluetooth: hci0: command 0x0c1a tx timeout [ 285.878908][ T804] usb usb7-port1: attempt power cycle [ 285.958743][ T5623] Bluetooth: hci4: command 0x0c1a tx timeout [ 285.966759][ T5625] Bluetooth: hci1: command 0x0c1a tx timeout [ 286.118210][ T5625] Bluetooth: hci3: command 0x0c1a tx timeout [ 286.121767][ T5720] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 286.390878][ T804] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 286.427518][ T5720] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 286.443501][ T804] usb 7-1: device descriptor read/8, error -71 [ 286.454843][ T5720] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 286.467979][ T5720] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 286.477450][ T5720] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.490787][ T5720] usb 6-1: config 0 descriptor?? [ 286.494960][ T29] audit: type=1400 audit(1785313936.222:681): avc: denied { write } for pid=8965 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 286.507127][ T5720] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 286.545937][ T5720] dvb-usb: bulk message failed: -22 (3/0) [ 286.578120][ T24] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 286.587530][ T5720] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 286.590931][ T29] audit: type=1400 audit(1785313936.312:682): avc: denied { write } for pid=8996 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 286.606881][ T5720] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 286.645645][ T5720] usb 6-1: media controller created [ 286.655020][ T5720] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 286.698190][ T804] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 286.711465][ T1238] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 286.728782][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 286.736089][ T24] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 286.747382][ T5720] dvb-usb: bulk message failed: -22 (6/0) [ 286.757154][ T804] usb 7-1: device descriptor read/8, error -71 [ 286.768121][ T24] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 286.781099][ T5720] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 286.798525][ T5720] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input37 [ 286.810008][ T24] usb 5-1: New USB device found, idVendor=18d1, idProduct=2d04, bcdDevice= 0.40 [ 286.826764][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.840834][ T24] usb 5-1: Product: syz [ 286.845594][ T5720] dvb-usb: schedule remote query interval to 150 msecs. [ 286.853783][ T8961] dibusb: i2c wr: len=61 is too big! [ 286.853783][ T8961] [ 286.868653][ T24] usb 5-1: Manufacturer: syz [ 286.870611][ T1238] usb 2-1: Using ep0 maxpacket: 16 [ 286.877650][ T5720] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 286.889841][ T5800] hdpvr 4-1:0.0: firmware version 0x8 dated 5 [ 286.898416][ T804] usb usb7-port1: unable to enumerate USB device [ 286.904803][ T24] usb 5-1: SerialNumber: syz [ 286.912596][ T1238] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 286.941567][ T5720] usb 6-1: USB disconnect, device number 11 [ 286.952172][ T1238] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 286.966974][ T1238] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.975063][ T1238] usb 2-1: Product: syz [ 286.999422][ T5720] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 287.000517][ T1238] usb 2-1: Manufacturer: syz [ 287.043099][ T1238] usb 2-1: SerialNumber: syz [ 287.061763][ T1238] usb 2-1: config 0 descriptor?? [ 287.080073][ T1238] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 287.102952][ T9005] netlink: 'syz.6.804': attribute type 4 has an invalid length. [ 287.132744][ T1238] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 287.242017][ T5800] hdpvr 4-1:0.0: device init failed [ 287.252578][ T5800] hdpvr 4-1:0.0: probe with driver hdpvr failed with error -12 [ 287.286046][ T5800] usb 4-1: USB disconnect, device number 29 [ 287.421345][ T29] audit: type=1400 audit(1785313937.152:683): avc: denied { ioctl } for pid=8985 comm="syz.4.802" path="socket:[24250]" dev="sockfs" ino=24250 ioctlcmd=0x5864 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 287.486283][ T29] audit: type=1400 audit(1785313937.212:684): avc: denied { write } for pid=9000 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 287.590350][ T29] audit: type=1400 audit(1785313937.322:685): avc: denied { write } for pid=9015 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 287.683628][ T1238] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 288.943355][ T5625] Bluetooth: hci1: command 0x0c1a tx timeout [ 288.994658][ T5623] Bluetooth: hci3: command 0x0c1a tx timeout [ 288.998836][ T5800] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 289.334715][ T8993] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 289.370437][ T8993] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 289.404127][ T1238] em28xx 2-1:0.0: read from i2c device at 0xa0 failed with unknown error (status=229) [ 289.435116][ T1238] em28xx 2-1:0.0: board has no eeprom [ 289.442172][ T9027] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 289.519618][ T5800] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 289.551765][ T5800] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 289.581636][ T24] usb 5-1: USB disconnect, device number 26 [ 289.589517][ T5800] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.621535][ T5800] usb 6-1: config 0 descriptor?? [ 289.697118][ T29] audit: type=1400 audit(1785313939.422:686): avc: denied { create } for pid=9033 comm="syz.3.810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 289.848467][ T5800] usbhid 6-1:0.0: can't add hid device: -71 [ 289.896550][ T9046] btrfs: Unknown parameter 'norecoveryp' [ 289.917851][ T5800] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 289.934061][ T5800] usb 6-1: USB disconnect, device number 12 [ 289.948875][ T1238] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 290.134730][ T9050] netlink: 72 bytes leftover after parsing attributes in process `syz.4.811'. [ 290.208209][ T5720] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 290.258072][ T1238] em28xx 2-1:0.0: dvb set to bulk mode. [ 290.271713][ T5799] em28xx 2-1:0.0: Binding DVB extension [ 290.418305][ T5720] usb 4-1: device descriptor read/64, error -71 [ 290.654332][ T1238] usb 2-1: USB disconnect, device number 28 [ 290.672405][ T1238] em28xx 2-1:0.0: Disconnecting em28xx [ 290.694614][ T5799] em28xx 2-1:0.0: Registering input extension [ 290.700956][ T1238] em28xx 2-1:0.0: Closing input extension [ 290.706155][ T9062] fuse: Unknown parameter 'user_i00000000000000000000' [ 290.738408][ T5720] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 290.998139][ T5623] Bluetooth: hci1: command 0x0c1a tx timeout [ 291.081034][ T5623] Bluetooth: hci3: command 0x0c1a tx timeout [ 291.238838][ T1238] em28xx 2-1:0.0: Freeing device [ 291.478565][ T5720] usb 4-1: device descriptor read/64, error -71 [ 291.640765][ T8993] Process accounting paused [ 292.345118][ T9073] netlink: 72 bytes leftover after parsing attributes in process `syz.1.820'. [ 292.588464][ T5720] usb usb4-port1: attempt power cycle [ 293.800177][ T29] audit: type=1400 audit(1785313943.442:687): avc: denied { sys_module } for pid=9083 comm="syz.6.824" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 293.878182][ T5720] usb 4-1: new full-speed USB device number 32 using dummy_hcd [ 293.903105][ T9091] netlink: 28 bytes leftover after parsing attributes in process `syz.1.825'. [ 293.918116][ T5720] usb 4-1: not running at top speed; connect to a high speed hub [ 293.937474][ T5720] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 293.957323][ T9094] netlink: 52 bytes leftover after parsing attributes in process `syz.1.825'. [ 293.979818][ T5720] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.00 [ 294.000823][ T5720] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.040292][ T5720] garmin_gps 4-1:1.0: Garmin GPS usb/tty converter detected [ 294.080125][ T5720] usb 4-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 294.325492][ T9100] ntfs3(nullb0): Primary boot signature is not NTFS. [ 294.346740][ T9100] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 294.632150][ T9102] vlan1: entered allmulticast mode [ 294.706597][ T9102] veth0_vlan: entered allmulticast mode [ 294.838695][ T5720] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 295.947795][ T5800] usb 4-1: USB disconnect, device number 32 [ 295.983011][ T5800] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 296.006931][ T5800] garmin_gps 4-1:1.0: device disconnected [ 296.018919][ T5720] usb 6-1: Using ep0 maxpacket: 16 [ 296.036574][ T5720] usb 6-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb [ 296.054141][ T5720] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.064481][ T5720] usb 6-1: Product: syz [ 296.068869][ T5720] usb 6-1: Manufacturer: syz [ 296.073608][ T5720] usb 6-1: SerialNumber: syz [ 296.096896][ T5720] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 296.199718][ T5615] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 296.361724][ T5615] usb 2-1: Using ep0 maxpacket: 16 [ 296.371173][ T29] audit: type=1400 audit(1785313946.092:688): avc: denied { ioctl } for pid=9099 comm="syz.5.829" path="pid:[4026532781]" dev="nsfs" ino=4026532781 ioctlcmd=0xb702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 296.372808][ T29] audit: type=1400 audit(1785313946.102:689): avc: denied { write } for pid=9099 comm="syz.5.829" name="functions" dev="configfs" ino=11028 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 296.378295][ T5615] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 296.469793][ T29] audit: type=1400 audit(1785313946.192:690): avc: denied { write } for pid=9099 comm="syz.5.829" name="c.1" dev="configfs" ino=15609 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 296.546350][ T29] audit: type=1400 audit(1785313946.222:691): avc: denied { write } for pid=9099 comm="syz.5.829" name="c.1" dev="configfs" ino=15609 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 296.742571][ T5615] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 296.757108][ T5615] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.765223][ T5615] usb 2-1: Product: syz [ 296.769467][ T5615] usb 2-1: Manufacturer: syz [ 296.776088][ T5720] snd-usb-audio 6-1:222.0: probe with driver snd-usb-audio failed with error -71 [ 296.785638][ T5615] usb 2-1: SerialNumber: syz [ 296.788342][ T1238] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 296.792520][ T5720] usb 6-1: USB disconnect, device number 13 [ 296.806700][ T5615] usb 2-1: config 0 descriptor?? [ 296.810116][ T8217] udevd[8217]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:222.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 296.814804][ T5615] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 296.837601][ T5615] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 297.018915][ T1238] usb 5-1: Using ep0 maxpacket: 16 [ 297.024667][ T1238] usb 5-1: too many configurations: 32, using maximum allowed: 8 [ 297.035469][ T1238] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 297.043742][ T1238] usb 5-1: can't read configurations, error -61 [ 297.178134][ T1238] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 298.266970][ T29] audit: type=1400 audit(1785313947.992:692): avc: denied { connect } for pid=9140 comm="syz.3.837" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 298.289581][ T5615] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 298.302262][ T29] audit: type=1400 audit(1785313948.032:693): avc: denied { shutdown } for pid=9140 comm="syz.3.837" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 298.322345][ T1238] usb 5-1: Using ep0 maxpacket: 16 [ 298.328195][ T1238] usb 5-1: too many configurations: 32, using maximum allowed: 8 [ 298.343544][ T1238] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 298.358285][ T1238] usb 5-1: can't read configurations, error -61 [ 298.366405][ T1238] usb usb5-port1: attempt power cycle [ 298.663694][ T9147] netlink: 'syz.6.839': attribute type 1 has an invalid length. [ 298.671593][ T9147] netlink: 224 bytes leftover after parsing attributes in process `syz.6.839'. [ 299.058156][ T1238] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 299.089322][ T1238] usb 5-1: Using ep0 maxpacket: 16 [ 299.102721][ T1238] usb 5-1: too many configurations: 32, using maximum allowed: 8 [ 299.121219][ T9137] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 299.126566][ T1238] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 299.136585][ T9137] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 299.162008][ T1238] usb 5-1: can't read configurations, error -61 [ 299.179828][ T5615] em28xx 2-1:0.0: read from i2c device at 0xa0 failed with unknown error (status=229) [ 299.207141][ T5615] em28xx 2-1:0.0: board has no eeprom [ 299.321114][ T1238] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 299.358789][ T1238] usb 5-1: Using ep0 maxpacket: 16 [ 299.371678][ T1238] usb 5-1: too many configurations: 32, using maximum allowed: 8 [ 299.394400][ T1238] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 299.428896][ T1238] usb 5-1: can't read configurations, error -61 [ 299.489817][ T5799] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 299.586306][ T1238] usb usb5-port1: unable to enumerate USB device [ 299.770707][ T5615] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 299.821326][ T5615] em28xx 2-1:0.0: dvb set to bulk mode. [ 299.833215][ T29] audit: type=1400 audit(1785313949.562:694): avc: denied { write } for pid=9148 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 299.844099][ T5720] em28xx 2-1:0.0: Binding DVB extension [ 299.860279][ T5799] usb 4-1: device descriptor read/64, error -71 [ 300.352986][ T5615] usb 2-1: USB disconnect, device number 29 [ 300.478207][ T5615] em28xx 2-1:0.0: Disconnecting em28xx [ 300.539711][ T5799] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 300.618128][ T29] audit: type=1400 audit(1785313950.342:695): avc: denied { bind } for pid=9178 comm="syz.5.844" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 300.644493][ T5720] em28xx 2-1:0.0: Registering input extension [ 300.668394][ T29] audit: type=1400 audit(1785313950.352:696): avc: denied { name_bind } for pid=9178 comm="syz.5.844" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 300.697181][ T5615] em28xx 2-1:0.0: Closing input extension [ 300.708114][ T5799] usb 4-1: device descriptor read/64, error -71 [ 300.735707][ T29] audit: type=1400 audit(1785313950.352:697): avc: denied { node_bind } for pid=9178 comm="syz.5.844" saddr=::1 src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 300.779591][ T5615] em28xx 2-1:0.0: Freeing device [ 300.843725][ T5799] usb usb4-port1: attempt power cycle [ 300.855688][ T29] audit: type=1400 audit(1785313950.352:698): avc: denied { write } for pid=9171 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 302.007165][ T9196] JFS: discard option not supported on device [ 302.014359][ T9196] Mount JFS Failure: -5 [ 302.018921][ T9196] jfs_mount failed w/return code = -5 [ 302.028115][ T5799] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 302.139002][ T5799] usb 4-1: device descriptor read/8, error -71 [ 302.584008][ T9214] syzkaller0: entered promiscuous mode [ 302.595555][ T9214] syzkaller0: entered allmulticast mode [ 302.626233][ T9218] netlink: 'syz.1.852': attribute type 1 has an invalid length. [ 302.754488][ T9218] 8021q: adding VLAN 0 to HW filter on device bond4 [ 302.841150][ T9223] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 303.110957][ T29] audit: type=1400 audit(1785313952.842:699): avc: denied { create } for pid=9234 comm="syz.6.849" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C6530616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 303.111380][ T29] audit: type=1400 audit(1785313952.842:700): avc: denied { associate } for pid=9234 comm="syz.6.849" name="file0" scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 303.214248][ T9237] binder: BINDER_SET_CONTEXT_MGR already set [ 303.339213][ T29] audit: type=1400 audit(1785313953.072:701): avc: denied { create } for pid=9234 comm="syz.6.849" name="blkio.bfq.io_merged_recursive" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 303.342638][ T29] audit: type=1400 audit(1785313953.072:702): avc: denied { read append open } for pid=9234 comm="syz.6.849" path="/53/blkio.bfq.io_merged_recursive" dev="tmpfs" ino=301 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=2321202E2F6367726F75702F66696C65306161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 303.518111][ T9237] binder: 9226:9237 ioctl 4018620d 200000004a80 returned -16 [ 303.622541][ T29] audit: type=1400 audit(1785313953.072:703): avc: denied { map } for pid=9234 comm="syz.6.849" path="/53/blkio.bfq.io_merged_recursive" dev="tmpfs" ino=301 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 303.818488][ T9245] ip6t_srh: unknown srh match flags FF3F [ 303.958607][ T9237] binder: 9226:9237 ioctl c0306201 200000004a40 returned -22 [ 308.643806][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 308.643820][ T29] audit: type=1326 audit(1785313958.372:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9269 comm="syz.1.864" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0292b9de99 code=0x0 [ 309.822146][ T9281] 8021q: adding VLAN 0 to HW filter on device bond1 [ 310.265868][ T9299] vlan2: entered allmulticast mode [ 310.271131][ T9299] bond0: entered allmulticast mode [ 310.276319][ T9299] bond_slave_0: entered allmulticast mode [ 310.282211][ T9299] bond_slave_1: entered allmulticast mode [ 310.444554][ T9303] Device name not specified. [ 310.444554][ T9303] [ 310.451743][ T9301] binder: BINDER_SET_CONTEXT_MGR already set [ 310.477643][ T9304] binder: BINDER_SET_CONTEXT_MGR already set [ 310.497686][ T9304] binder: 9289:9304 ioctl 4018620d 200000004a80 returned -16 [ 310.506769][ T9301] binder: 9286:9301 ioctl 4018620d 200000004a80 returned -16 [ 310.571137][ T9304] binder: 9289:9304 ioctl c0306201 200000004a40 returned -22 [ 310.620984][ T9301] binder: 9286:9301 ioctl c0306201 200000004a40 returned -22 [ 310.665492][ T9303] syzkaller0: entered promiscuous mode [ 310.687492][ T9303] syzkaller0: entered allmulticast mode [ 310.849826][ T1238] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 310.932410][ T9311] netlink: 'syz.5.869': attribute type 1 has an invalid length. [ 310.964840][ T9311] netlink: 224 bytes leftover after parsing attributes in process `syz.5.869'. [ 311.029861][ T1238] usb 2-1: Using ep0 maxpacket: 16 [ 311.052797][ T1238] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 311.076713][ T1238] usb 2-1: config 0 interface 0 has no altsetting 0 [ 311.085522][ T1238] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 311.104887][ T1238] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.119822][ T1238] usb 2-1: config 0 descriptor?? [ 311.874340][ T1238] nzxt-smart2 0003:1E71:2009.0007: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0 [ 311.987631][ T9322] netlink: 8 bytes leftover after parsing attributes in process `syz.5.877'. [ 312.435558][ T29] audit: type=1400 audit(1785313961.962:709): avc: denied { getopt } for pid=9326 comm="syz.5.879" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 312.669650][ T29] audit: type=1400 audit(1785313962.402:710): avc: denied { setopt } for pid=9328 comm="syz.6.880" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 312.691836][ T29] audit: type=1400 audit(1785313962.422:711): avc: denied { write } for pid=9328 comm="syz.6.880" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 313.144056][ T9339] netlink: 'syz.4.882': attribute type 1 has an invalid length. [ 313.410622][ T9339] 8021q: adding VLAN 0 to HW filter on device bond1 [ 313.486630][ T9344] gretap1: entered promiscuous mode [ 313.532349][ T9344] bond1: (slave gretap1): making interface the new active one [ 313.570989][ T9344] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 313.658495][ T10] usb 2-1: USB disconnect, device number 30 [ 314.264666][ T9356] netlink: 8 bytes leftover after parsing attributes in process `syz.5.886'. [ 315.284502][ T9368] xt_hashlimit: size too large, truncated to 1048576 [ 315.293867][ T9369] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 315.685900][ T9371] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=512 sclass=netlink_route_socket pid=9371 comm=syz.4.889 [ 315.868239][ T5615] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 316.184073][ T5615] usb 2-1: Using ep0 maxpacket: 16 [ 316.202595][ T5615] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 316.287094][ T9387] netlink: 72 bytes leftover after parsing attributes in process `syz.6.893'. [ 316.707327][ T5615] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 316.728140][ T5615] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 316.747649][ T5615] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.767324][ T5615] usb 2-1: Product: syz [ 316.777174][ T5615] usb 2-1: Manufacturer: syz [ 316.791847][ T5615] usb 2-1: SerialNumber: syz [ 316.806142][ T9390] netlink: 'syz.3.895': attribute type 1 has an invalid length. [ 317.060321][ T9395] netlink: 72 bytes leftover after parsing attributes in process `syz.5.894'. [ 317.457016][ T5615] usb 2-1: config 0 descriptor?? [ 317.464877][ T5615] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 317.474567][ T5615] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 317.522728][ T9390] 8021q: adding VLAN 0 to HW filter on device bond2 [ 317.586413][ T9390] gretap1: entered promiscuous mode [ 317.601838][ T9390] bond2: (slave gretap1): making interface the new active one [ 317.621414][ T9390] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 317.861577][ T29] audit: type=1400 audit(1785313967.592:712): avc: denied { read } for pid=9402 comm="syz.5.897" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 318.146404][ T5615] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 318.162464][ T5615] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 318.376117][ T5615] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 318.395004][ T5615] em28xx 2-1:0.0: No AC97 audio processor [ 318.424998][ T5615] usb 2-1: USB disconnect, device number 31 [ 318.444361][ T5615] em28xx 2-1:0.0: Disconnecting em28xx [ 318.470330][ T5615] em28xx 2-1:0.0: Freeing device [ 319.018593][ T29] audit: type=1400 audit(1785313968.752:713): avc: denied { create } for pid=9427 comm="syz.5.905" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 319.438233][ T1238] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 319.713434][ T5615] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 319.728467][ T1238] usb 6-1: Using ep0 maxpacket: 8 [ 319.743421][ T1238] usb 6-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 319.758697][ T1238] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.766942][ T1238] usb 6-1: Product: syz [ 319.773007][ T1238] usb 6-1: Manufacturer: syz [ 319.777827][ T1238] usb 6-1: SerialNumber: syz [ 319.790054][ T1238] usb 6-1: config 0 descriptor?? [ 319.800668][ T1238] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 319.984265][ T5615] usb 4-1: Using ep0 maxpacket: 8 [ 320.015937][ T1238] gspca_sonixj: reg_w1 err -71 [ 320.025788][ T5615] usb 4-1: unable to get BOS descriptor or descriptor too short [ 320.030395][ T1238] sonixj 6-1:0.0: probe with driver sonixj failed with error -71 [ 320.034750][ T5615] usb 4-1: config 0 has an invalid interface number: 49 but max is 0 [ 320.056733][ T1238] usb 6-1: USB disconnect, device number 14 [ 320.058144][ T5615] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 320.095708][ T5615] usb 4-1: config 0 has no interface number 0 [ 320.108618][ T5615] usb 4-1: config 0 interface 49 altsetting 11 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 320.128151][ T5615] usb 4-1: config 0 interface 49 has no altsetting 0 [ 320.148664][ T5615] usb 4-1: New USB device found, idVendor=0bda, idProduct=0140, bcdDevice=f7.67 [ 320.167994][ T5615] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.178409][ T5615] usb 4-1: Product: syz [ 320.187184][ T5615] usb 4-1: Manufacturer: syz [ 320.198133][ T5615] usb 4-1: SerialNumber: syz [ 320.225328][ T9441] netlink: 'syz.1.908': attribute type 1 has an invalid length. [ 320.233139][ T5720] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 320.243646][ T5615] usb 4-1: config 0 descriptor?? [ 320.282807][ T9441] 8021q: adding VLAN 0 to HW filter on device bond5 [ 320.328446][ T9441] 8021q: adding VLAN 0 to HW filter on device bond5 [ 320.337096][ T9441] bond5: (slave vti0): The slave device specified does not support setting the MAC address [ 320.357160][ T9441] bond5: (slave vti0): Error -95 calling set_mac_address [ 320.401520][ T5720] usb 5-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 320.411054][ T5720] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.429378][ T5720] usb 5-1: Product: syz [ 320.435053][ T5720] usb 5-1: Manufacturer: syz [ 320.440600][ T5720] usb 5-1: SerialNumber: syz [ 320.451680][ T5720] usb 5-1: config 0 descriptor?? [ 320.476718][ T5720] i2c-tiny-usb 5-1:0.0: version 6d.cc found at bus 005 address 031 [ 320.485506][ T9424] netlink: 8 bytes leftover after parsing attributes in process `syz.3.904'. [ 320.495041][ T9424] netlink: 4 bytes leftover after parsing attributes in process `syz.3.904'. [ 320.504406][ T9424] netlink: 'syz.3.904': attribute type 7 has an invalid length. [ 320.560345][ T6964] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 320.577399][ T6964] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 320.596251][ T9424] netlink: 32 bytes leftover after parsing attributes in process `syz.3.904'. [ 320.611140][ T6964] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 320.628982][ T6964] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 320.642422][ T29] audit: type=1400 audit(1785313970.362:714): avc: denied { bind } for pid=9423 comm="syz.3.904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 320.782356][ T5615] rtsx_usb 4-1:0.49: probe with driver rtsx_usb failed with error -22 [ 320.806434][ T5615] usb 4-1: USB disconnect, device number 37 [ 320.895825][ T5720] (null): failure reading functionality [ 321.169197][ T5720] i2c i2c-1: connected i2c-tiny-usb device [ 321.324406][ T5720] usb 5-1: USB disconnect, device number 31 [ 321.763699][ T9445] Process accounting resumed [ 322.125685][ T29] audit: type=1400 audit(1785313971.812:715): avc: denied { read } for pid=9453 comm="syz.1.912" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 322.173950][ T9455] netlink: 24 bytes leftover after parsing attributes in process `syz.1.912'. [ 322.348343][ T9459] netlink: 20 bytes leftover after parsing attributes in process `syz.4.913'. [ 322.386930][ T9459] openvswitch: netlink: Missing key (keys=40, expected=100) [ 322.527437][ T9461] gfs2: not a GFS2 filesystem [ 322.553278][ T29] audit: type=1400 audit(1785313972.282:716): avc: denied { nlmsg_read } for pid=9460 comm="syz.3.914" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 322.574878][ T9467] netlink: 548 bytes leftover after parsing attributes in process `syz.4.915'. [ 323.072902][ T9472] netlink: 'syz.5.917': attribute type 2 has an invalid length. [ 323.117429][ T9472] netlink: 'syz.5.917': attribute type 2 has an invalid length. [ 323.132351][ T9474] netlink: 'syz.1.918': attribute type 1 has an invalid length. [ 323.140998][ T9474] netlink: 224 bytes leftover after parsing attributes in process `syz.1.918'. [ 323.373172][ T9480] tc_dump_action: action bad kind [ 323.464792][ T9484] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=30172 sclass=netlink_route_socket pid=9484 comm=syz.3.922 [ 323.509316][ T9421] Set syz1 is full, maxelem 65536 reached [ 323.639626][ T1238] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 323.678106][ T5799] usb 5-1: new full-speed USB device number 32 using dummy_hcd [ 323.790954][ T29] audit: type=1400 audit(1785313973.522:717): avc: denied { search } for pid=9496 comm="syz.3.927" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 323.816198][ T29] audit: type=1400 audit(1785313973.542:718): avc: denied { search } for pid=9496 comm="syz.3.927" name="events" dev="tracefs" ino=32 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 323.818786][ T1238] usb 2-1: Using ep0 maxpacket: 16 [ 323.848885][ T29] audit: type=1400 audit(1785313973.542:719): avc: denied { search } for pid=9496 comm="syz.3.927" name="task" dev="tracefs" ino=25438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 323.872716][ T1238] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 255 [ 323.872910][ T29] audit: type=1400 audit(1785313973.542:720): avc: denied { search } for pid=9496 comm="syz.3.927" name="task_rename" dev="tracefs" ino=25440 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 323.888343][ T1238] usb 2-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 323.907760][ T29] audit: type=1400 audit(1785313973.542:721): avc: denied { write } for pid=9496 comm="syz.3.927" name="filter" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 323.919818][ T1238] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.946953][ T29] audit: type=1400 audit(1785313973.542:722): avc: denied { open } for pid=9496 comm="syz.3.927" path="/179/my_tracefs/events/task/task_rename/filter" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 323.949261][ T1238] usb 2-1: Product: syz [ 323.973721][ T29] audit: type=1400 audit(1785313973.572:723): avc: denied { map } for pid=9496 comm="syz.3.927" path="socket:[25443]" dev="sockfs" ino=25443 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 323.981234][ T1238] usb 2-1: Manufacturer: syz [ 324.004110][ T9498] netlink: 8 bytes leftover after parsing attributes in process `syz.6.925'. [ 324.014349][ T5799] usb 5-1: New USB device found, idVendor=041e, idProduct=3263, bcdDevice= 0.40 [ 324.016689][ T9498] netlink: 24 bytes leftover after parsing attributes in process `syz.6.925'. [ 324.023779][ T5799] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.035697][ T29] audit: type=1400 audit(1785313973.572:724): avc: denied { read } for pid=9496 comm="syz.3.927" path="socket:[25443]" dev="sockfs" ino=25443 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 324.041339][ T10] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 324.071115][ T29] audit: type=1400 audit(1785313973.672:725): avc: denied { getopt } for pid=9489 comm="syz.6.925" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 324.072614][ T1238] usb 2-1: SerialNumber: syz [ 324.095926][ T5799] usb 5-1: Product: syz [ 324.100339][ T5799] usb 5-1: Manufacturer: syz [ 324.105022][ T5799] usb 5-1: SerialNumber: syz [ 324.120466][ T1238] usb 2-1: config 0 descriptor?? [ 324.125982][ T9480] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 324.144595][ T1238] mcba_usb 2-1:0.0: Microchip CAN BUS Analyzer connected [ 324.271368][ T10] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 80, changing to 7 [ 324.284671][ T10] usb 6-1: New USB device found, idVendor=0582, idProduct=00b2, bcdDevice= 0.40 [ 324.294050][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.303968][ T10] usb 6-1: Product: syz [ 324.308226][ T10] usb 6-1: Manufacturer: syz [ 324.312858][ T10] usb 6-1: SerialNumber: syz [ 324.343198][ T5799] usb 5-1: Can't get UAC3 power state for id 10 [ 324.374211][ T5799] usb 5-1: BAAD MICROPHONE c_chmask mismatch [ 324.395926][ C0] mcba_usb 2-1:0.0 can0: Tx URB aborted (-71) [ 324.402109][ C0] mcba_usb 2-1:0.0 can0: Tx URB aborted (-71) [ 324.410352][ T1238] usb 2-1: USB disconnect, device number 32 [ 324.421244][ T1238] mcba_usb 2-1:0.0 can0: device disconnected [ 324.423951][ T29] audit: type=1400 audit(1785313974.152:726): avc: denied { write } for pid=9502 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 324.546289][ T5799] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 324.572230][ T10] usb 6-1: 1:1 : no or invalid class specific endpoint descriptor [ 324.593113][ T10] usb 6-1: found format II with max.bitrate = 32769, frame size=65535 [ 324.602221][ T5799] usb 5-1: USB disconnect, device number 32 [ 324.623181][ T10] usb 6-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 324.640436][ T10] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 324.655877][ T8197] udevd[8197]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 324.703127][ T5623] Bluetooth: hci3: unexpected event for opcode 0x1804 [ 324.780736][ T9516] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.788126][ T9516] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.875520][ T9516] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 324.887463][ T9516] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 324.956224][ T57] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.975579][ T57] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.991356][ T57] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.012506][ T57] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.033943][ T10] usb 6-1: USB disconnect, device number 15 [ 325.267172][ T9532] netlink: 548 bytes leftover after parsing attributes in process `syz.1.931'. [ 325.353400][ T9535] FAULT_INJECTION: forcing a failure. [ 325.353400][ T9535] name failslab, interval 1, probability 0, space 0, times 0 [ 325.390287][ T9535] CPU: 0 UID: 0 PID: 9535 Comm: syz.5.933 Tainted: G L syzkaller #0 PREEMPT(full) [ 325.390316][ T9535] Tainted: [L]=SOFTLOCKUP [ 325.390322][ T9535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 325.390332][ T9535] Call Trace: [ 325.390338][ T9535] [ 325.390344][ T9535] dump_stack_lvl+0x100/0x190 [ 325.390372][ T9535] should_fail_ex.cold+0x5/0xa [ 325.390395][ T9535] should_failslab+0xc2/0x120 [ 325.390419][ T9535] __kmalloc_noprof+0xfc/0x820 [ 325.390439][ T9535] ? rcu_is_watching+0x12/0xc0 [ 325.390466][ T9535] ? tomoyo_realpath_from_path+0xb6/0x690 [ 325.390490][ T9535] tomoyo_realpath_from_path+0xb6/0x690 [ 325.390514][ T9535] tomoyo_path_number_perm+0x23c/0x580 [ 325.390538][ T9535] ? tomoyo_path_number_perm+0x22e/0x580 [ 325.390567][ T9535] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 325.390617][ T9535] ? find_held_lock+0x2b/0x80 [ 325.390644][ T9535] ? __fget_files+0x215/0x3d0 [ 325.390661][ T9535] ? hook_file_ioctl_common+0x140/0x440 [ 325.390681][ T9535] ? __fget_files+0x215/0x3d0 [ 325.390703][ T9535] ? __fget_files+0x21f/0x3d0 [ 325.390725][ T9535] security_file_ioctl+0xd3/0x230 [ 325.390760][ T9535] __x64_sys_ioctl+0xb7/0x210 [ 325.390788][ T9535] do_syscall_64+0x115/0x870 [ 325.390807][ T9535] ? clear_bhb_loop+0x40/0x90 [ 325.390830][ T9535] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.390847][ T9535] RIP: 0033:0x7f2b9d79de99 [ 325.390863][ T9535] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 325.390879][ T9535] RSP: 002b:00007f2b9e6e8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 325.390897][ T9535] RAX: ffffffffffffffda RBX: 00007f2b9da25fa0 RCX: 00007f2b9d79de99 [ 325.390908][ T9535] RDX: 0000000000000000 RSI: 0000000081f8943c RDI: 0000000000000003 [ 325.390918][ T9535] RBP: 00007f2b9e6e8090 R08: 0000000000000000 R09: 0000000000000000 [ 325.390929][ T9535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 325.390939][ T9535] R13: 00007f2b9da26038 R14: 00007f2b9da25fa0 R15: 00007ffc2d4f41a8 [ 325.390963][ T9535] [ 325.391616][ T9535] ERROR: Out of memory at tomoyo_realpath_from_path. [ 325.478987][ T9539] netlink: 12 bytes leftover after parsing attributes in process `syz.4.934'. [ 325.594690][ T9546] netlink: 12 bytes leftover after parsing attributes in process `syz.6.932'. [ 325.607309][ T9539] openvswitch: netlink: Missing key (keys=40, expected=80) [ 326.300533][ T10] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 326.471283][ T10] usb 4-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 326.491500][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.526402][ T10] usb 4-1: Product: syz [ 326.539686][ T10] usb 4-1: Manufacturer: syz [ 326.651946][ T10] usb 4-1: SerialNumber: syz [ 326.670043][ T10] usb 4-1: config 0 descriptor?? [ 327.188106][ T10] usb 4-1: ignoring: probably an ADSL modem [ 327.383054][ T9578] netlink: 12 bytes leftover after parsing attributes in process `syz.5.945'. [ 327.392308][ T9578] netlink: 12 bytes leftover after parsing attributes in process `syz.5.945'. [ 327.402431][ T9578] netlink: 20 bytes leftover after parsing attributes in process `syz.5.945'. [ 327.428481][ T804] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 327.507303][ T10] cxacru 4-1:0.0: usbatm_usb_probe: bind failed: -19! [ 327.529030][ T10] usb 4-1: USB disconnect, device number 38 [ 327.568389][ T804] usb 2-1: device descriptor read/64, error -71 [ 327.576784][ T9585] netlink: 'syz.4.948': attribute type 1 has an invalid length. [ 327.605817][ T9585] 8021q: adding VLAN 0 to HW filter on device bond2 [ 327.759292][ T9589] xt_hashlimit: size too large, truncated to 1048576 [ 327.818162][ T804] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 327.958247][ T804] usb 2-1: device descriptor read/64, error -71 [ 328.071297][ T804] usb usb2-port1: attempt power cycle [ 328.305660][ T9615] netlink: 'syz.5.958': attribute type 1 has an invalid length. [ 328.314748][ T9615] netlink: 224 bytes leftover after parsing attributes in process `syz.5.958'. [ 328.418129][ T804] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 328.488146][ T10] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 328.536365][ T804] usb 2-1: device descriptor read/8, error -71 [ 328.845030][ T1238] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 328.852711][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 328.858948][ T5799] kernel read not supported for file /dsp1 (pid: 5799 comm: kworker/0:8) [ 328.869933][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 328.881774][ T10] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 328.889034][ T804] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 328.893072][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.907335][ T10] usb 4-1: Product: syz [ 328.911687][ T10] usb 4-1: Manufacturer: syz [ 328.916350][ T10] usb 4-1: SerialNumber: syz [ 329.009878][ T1238] usb 6-1: device descriptor read/64, error -71 [ 329.042535][ T10] usb 4-1: config 0 descriptor?? [ 329.228957][ T10] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 329.312851][ T10] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 329.358092][ T1238] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 329.380479][ T804] usb 2-1: device descriptor read/8, error -71 [ 329.418377][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 329.418399][ T29] audit: type=1400 audit(1785313979.152:731): avc: denied { write } for pid=9637 comm="syz.6.965" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 329.445687][ T29] audit: type=1400 audit(1785313979.152:732): avc: denied { setopt } for pid=9637 comm="syz.6.965" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 329.498168][ T1238] usb 6-1: device descriptor read/64, error -71 [ 329.499820][ T804] usb usb2-port1: unable to enumerate USB device [ 329.578700][ T5799] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 329.614864][ T1238] usb usb6-port1: attempt power cycle [ 329.819465][ T10] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 329.827591][ T5799] usb 5-1: config 1 interface 0 altsetting 13 endpoint 0x2 has an invalid bInterval 32, changing to 9 [ 329.839946][ T5799] usb 5-1: config 1 interface 0 has no altsetting 0 [ 329.872195][ T5799] usb 5-1: string descriptor 0 read error: -22 [ 329.879075][ T5799] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 329.888658][ T5799] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.968341][ T1238] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 329.998537][ T1238] usb 6-1: device descriptor read/8, error -71 [ 330.258166][ T1238] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 330.279555][ T1238] usb 6-1: device descriptor read/8, error -71 [ 330.313629][ T5799] usbhid 5-1:1.0: can't add hid device: -71 [ 330.320373][ T5799] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 330.330909][ T5799] usb 5-1: USB disconnect, device number 33 [ 330.388564][ T1238] usb usb6-port1: unable to enumerate USB device [ 330.445343][ T9611] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 330.454594][ T9611] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 330.463892][ T10] em28xx 4-1:0.0: read from i2c device at 0xa0 failed with unknown error (status=229) [ 330.476264][ T10] em28xx 4-1:0.0: board has no eeprom [ 330.675707][ T29] audit: type=1400 audit(1785313980.402:733): avc: denied { ioctl } for pid=9666 comm="syz.1.976" path="/dev/rtc0" dev="devtmpfs" ino=922 ioctlcmd=0x7013 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 331.018147][ T10] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 331.033575][ T10] em28xx 4-1:0.0: dvb set to bulk mode. [ 331.048067][ T5799] em28xx 4-1:0.0: Binding DVB extension [ 331.108688][ T29] audit: type=1326 audit(1785313980.842:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9676 comm="syz.4.979" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f341f79de99 code=0x7ffc0000 [ 331.136922][ T9677] vivid-003: disconnect [ 331.141033][ T10] usb 4-1: USB disconnect, device number 39 [ 331.286943][ T29] audit: type=1326 audit(1785313980.842:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9676 comm="syz.4.979" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f341f79de99 code=0x7ffc0000 [ 331.562810][ T10] em28xx 4-1:0.0: Disconnecting em28xx [ 331.615902][ T29] audit: type=1326 audit(1785313980.842:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9676 comm="syz.4.979" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f341f79de99 code=0x7ffc0000 [ 331.668353][ T5799] em28xx 4-1:0.0: Registering input extension [ 331.683938][ T29] audit: type=1326 audit(1785313980.842:737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9676 comm="syz.4.979" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f341f79de99 code=0x7ffc0000 [ 331.698652][ T10] em28xx 4-1:0.0: Closing input extension [ 331.725337][ T29] audit: type=1326 audit(1785313980.842:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9676 comm="syz.4.979" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f341f79de99 code=0x7ffc0000 [ 331.772117][ T10] em28xx 4-1:0.0: Freeing device [ 331.778607][ T29] audit: type=1326 audit(1785313980.842:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9676 comm="syz.4.979" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f341f79de99 code=0x7ffc0000 [ 331.864172][ T29] audit: type=1326 audit(1785313980.842:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9676 comm="syz.4.979" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f341f79de99 code=0x7ffc0000 [ 332.650458][ T9676] vivid-003: reconnect [ 332.817962][ T9706] netlink: 12 bytes leftover after parsing attributes in process `syz.5.987'. [ 333.228138][ T804] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 333.388083][ T804] usb 6-1: Using ep0 maxpacket: 32 [ 333.403020][ T804] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 333.428306][ T804] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 333.444327][ T9732] binder: BINDER_SET_CONTEXT_MGR already set [ 333.456731][ T804] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 333.476832][ T9732] binder: 9723:9732 ioctl 4018620d 200000004a80 returned -16 [ 333.487269][ T804] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.512324][ T804] usb 6-1: config 0 descriptor?? [ 333.617970][ T9732] binder: 9723:9732 ioctl c0306201 200000004a40 returned -22 [ 334.381955][ T9749] vivid-001: disconnect [ 334.402632][ T9748] vivid-001: reconnect [ 334.831996][ T9776] netlink: 'syz.5.990': attribute type 1 has an invalid length. [ 334.872132][ T9776] netlink: 224 bytes leftover after parsing attributes in process `syz.5.990'. [ 335.017912][ T9787] vivid-002: disconnect [ 335.033576][ T9786] vivid-002: reconnect [ 335.175097][ T9792] netlink: 'syz.6.1017': attribute type 1 has an invalid length. [ 335.307891][ T9792] 8021q: adding VLAN 0 to HW filter on device bond1 [ 335.332865][ T9799] cgroup2: Unknown parameter 'meÅ0¦öëÁ­Æë9ìµmory_vents' [ 335.353315][ T9799] x_tables: duplicate underflow at hook 4 [ 335.363055][ T9799] sctp: [Deprecated]: syz.4.1019 (pid 9799) Use of int in maxseg socket option. [ 335.363055][ T9799] Use struct sctp_assoc_value instead [ 335.382199][ T29] kauditd_printk_skb: 137 callbacks suppressed [ 335.382214][ T29] audit: type=1400 audit(1785313985.112:878): avc: denied { bind } for pid=9798 comm="syz.4.1019" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 335.426968][ T9794] 8021q: adding VLAN 0 to HW filter on device bond1 [ 335.443080][ T9794] bond1: (slave vti0): The slave device specified does not support setting the MAC address [ 335.456564][ T9794] bond1: (slave vti0): Error -95 calling set_mac_address [ 335.564068][ T9797] gretap1: entered promiscuous mode [ 335.573224][ T9797] bond1: (slave gretap1): making interface the new active one [ 335.581398][ T9797] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 335.708236][ T1238] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 335.790322][ T9810] binder: 9800:9810 unknown command 0 [ 335.808828][ T9810] binder: 9800:9810 ioctl c0306201 2000000001c0 returned -22 [ 335.868079][ T1238] usb 5-1: Using ep0 maxpacket: 16 [ 335.879636][ T1238] usb 5-1: unable to get BOS descriptor or descriptor too short [ 335.897429][ T1238] usb 5-1: config 1 has an invalid interface number: 151 but max is 0 [ 335.912860][ T29] audit: type=1400 audit(1785313985.642:879): avc: denied { shutdown } for pid=9813 comm="syz.6.1025" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 335.935711][ T1238] usb 5-1: config 1 has no interface number 0 [ 335.948113][ T1238] usb 5-1: config 1 interface 151 has no altsetting 0 [ 335.965725][ T1238] usb 5-1: New USB device found, idVendor=093a, idProduct=260e, bcdDevice=18.85 [ 335.966943][ T804] usb 6-1: USB disconnect, device number 20 [ 335.980493][ T1238] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.011398][ T1238] usb 5-1: Product: syz [ 336.029263][ T1238] usb 5-1: Manufacturer: syz [ 336.042134][ T1238] usb 5-1: SerialNumber: syz [ 336.271445][ T29] audit: type=1400 audit(1785313986.002:880): avc: denied { lock } for pid=9802 comm="syz.4.1021" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=27901 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 336.305000][ T1238] gspca_main: pac7311-2.14.0 probing 093a:260e [ 336.322251][ T1238] gspca_pac7311: reg_w() failed index 0xff, value 0x01, error -71 [ 336.338477][ T1238] pac7311 5-1:1.151: probe with driver pac7311 failed with error -71 [ 336.363794][ T1238] usb 5-1: USB disconnect, device number 34 [ 336.563262][ T29] audit: type=1400 audit(1785313986.292:881): avc: denied { write } for pid=9828 comm="syz.5.1030" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 337.427393][ T9829] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 337.434128][ T9829] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 337.440215][ T9829] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 337.446310][ T9829] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 337.725553][ T1238] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 337.733508][ T10] usb 4-1: new full-speed USB device number 40 using dummy_hcd [ 337.745104][ T5799] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 337.858751][ T5741] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 337.951420][ T5799] usb 5-1: Using ep0 maxpacket: 32 [ 337.957673][ T1238] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 337.970433][ T1238] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.983663][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 337.986626][ T29] audit: type=1400 audit(1785313987.712:882): avc: denied { mount } for pid=9872 comm="syz.5.1045" name="/" dev="hugetlbfs" ino=27424 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 337.995937][ T5799] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 338.031069][ T1238] usb 2-1: config 0 descriptor?? [ 338.078652][ T5799] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 338.090800][ T1238] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 338.107250][ T10] usb 4-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 338.119064][ T9876] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1045'. [ 338.130971][ T5799] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 338.140324][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.149683][ T5799] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.157928][ T10] usb 4-1: Product: syz [ 338.256380][ T10] usb 4-1: Manufacturer: syz [ 338.279487][ T10] usb 4-1: SerialNumber: syz [ 338.297949][ T5799] usb 5-1: config 0 descriptor?? [ 338.365765][ T10] usb 4-1: config 0 descriptor?? [ 338.455419][ T10] adutux 4-1:0.0: interrupt endpoints not found [ 338.496009][ T1238] cpia1 2-1:0.0: unexpected state after lo power cmd: 00 [ 338.876702][ T10] usb 4-1: USB disconnect, device number 40 [ 339.032425][ T5614] Bluetooth: hci0: command 0x0c1a tx timeout [ 339.106313][ T1238] gspca_cpia1: usb_control_msg 01, error -32 [ 339.421417][ T9883] fuse: Bad value for 'fd' [ 339.478246][ T5623] Bluetooth: hci4: command 0x0c1a tx timeout [ 339.478448][ T5625] Bluetooth: hci1: command 0x0c1a tx timeout [ 339.484329][ T5614] Bluetooth: hci3: command 0x0c1a tx timeout [ 340.417991][ T1238] gspca_cpia1: usb_control_msg 02, error -110 [ 340.516530][ T1238] gspca_cpia1: usb_control_msg 05, error -71 [ 340.541278][ T1238] cpia1 2-1:0.0: unexpected systemstate: 00 [ 340.571904][ T1238] usb 2-1: USB disconnect, device number 37 [ 340.603849][ T24] usb 5-1: USB disconnect, device number 35 [ 340.779412][ T9903] xt_connbytes: Forcing CT accounting to be enabled [ 340.904862][ T29] audit: type=1400 audit(1785313990.622:883): avc: denied { write } for pid=9912 comm="syz.4.1058" name="mouse0" dev="devtmpfs" ino=924 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 341.017169][ T29] audit: type=1400 audit(1785313990.732:884): avc: denied { connect } for pid=9912 comm="syz.4.1058" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 341.241454][ T24] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 341.344179][ T9924] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 341.344179][ T9924] Please contact the netfilter-devel mailing list or update your nftables rules. [ 341.758095][ T24] usb 4-1: device descriptor read/64, error -71 [ 341.929247][ T29] audit: type=1400 audit(1785313991.662:885): avc: denied { mount } for pid=9930 comm="syz.6.1061" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 342.038105][ T24] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 342.243586][ T9939] FAULT_INJECTION: forcing a failure. [ 342.243586][ T9939] name failslab, interval 1, probability 0, space 0, times 0 [ 342.257687][ T9939] CPU: 1 UID: 0 PID: 9939 Comm: syz.5.1062 Tainted: G L syzkaller #0 PREEMPT(full) [ 342.257716][ T9939] Tainted: [L]=SOFTLOCKUP [ 342.257723][ T9939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 342.257733][ T9939] Call Trace: [ 342.257739][ T9939] [ 342.257746][ T9939] dump_stack_lvl+0x100/0x190 [ 342.257774][ T9939] should_fail_ex.cold+0x5/0xa [ 342.257797][ T9939] should_failslab+0xc2/0x120 [ 342.257820][ T9939] __kmalloc_noprof+0xfc/0x820 [ 342.257842][ T9939] ? kernfs_fop_write_iter+0x26a/0x5f0 [ 342.257870][ T9939] kernfs_fop_write_iter+0x26a/0x5f0 [ 342.257895][ T9939] vfs_write+0x6ac/0x1050 [ 342.257923][ T9939] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 342.257948][ T9939] ? __pfx_vfs_write+0x10/0x10 [ 342.257991][ T9939] ksys_write+0x12a/0x250 [ 342.258018][ T9939] ? __pfx_ksys_write+0x10/0x10 [ 342.258050][ T9939] do_syscall_64+0x115/0x870 [ 342.258070][ T9939] ? clear_bhb_loop+0x40/0x90 [ 342.258092][ T9939] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.258110][ T9939] RIP: 0033:0x7f2b9d79de99 [ 342.258126][ T9939] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 342.258142][ T9939] RSP: 002b:00007f2b9e6a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 342.258160][ T9939] RAX: ffffffffffffffda RBX: 00007f2b9da26180 RCX: 00007f2b9d79de99 [ 342.258170][ T9939] RDX: 000000000000000d RSI: 0000200000000200 RDI: 0000000000000006 [ 342.258181][ T9939] RBP: 00007f2b9e6a6090 R08: 0000000000000000 R09: 0000000000000000 [ 342.258191][ T9939] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 342.258201][ T9939] R13: 00007f2b9da26218 R14: 00007f2b9da26180 R15: 00007ffc2d4f41a8 [ 342.258226][ T9939] [ 342.439978][ T24] usb 4-1: device descriptor read/64, error -71 [ 342.548577][ T24] usb usb4-port1: attempt power cycle [ 342.725135][ T9944] lo speed is unknown, defaulting to 1000 [ 343.118110][ T804] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 343.125757][ T24] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 343.159100][ T24] usb 4-1: device descriptor read/8, error -71 [ 343.349983][ T804] usb 5-1: Using ep0 maxpacket: 32 [ 343.359869][ T804] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 343.370207][ T804] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 343.382879][ T804] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 343.392424][ T804] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.423242][ T804] usb 5-1: config 0 descriptor?? [ 343.458105][ T24] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 343.492667][ T24] usb 4-1: device descriptor read/8, error -71 [ 343.619837][ T24] usb usb4-port1: unable to enumerate USB device [ 343.945270][ T29] audit: type=1400 audit(1785313993.672:886): avc: denied { write } for pid=9958 comm="syz.6.1070" path="socket:[27627]" dev="sockfs" ino=27627 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 344.216402][ T29] audit: type=1400 audit(1785313993.942:887): avc: denied { map } for pid=9961 comm="syz.3.1071" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 344.808881][ T9969] netlink: 'syz.4.1063': attribute type 1 has an invalid length. [ 344.837314][ T9969] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1063'. [ 345.913662][ T9994] binder: 9993:9994 unknown command 0 [ 345.929200][ T9994] binder: 9993:9994 ioctl c0306201 200000000140 returned -22 [ 345.974773][ T24] usb 5-1: USB disconnect, device number 36 [ 346.092836][ T9997] sg_write: data in/out 92/120 bytes for SCSI command 0x0-- guessing data in; [ 346.092836][ T9997] program syz.1.1081 not setting count and/or reply_len properly [ 346.334762][T10004] macsec1: entered promiscuous mode [ 346.370246][T10004] dummy0: entered promiscuous mode [ 346.416577][T10004] macsec1: entered allmulticast mode [ 346.500811][T10004] dummy0: entered allmulticast mode [ 346.553772][T10004] dummy0: left allmulticast mode [ 346.721510][ T10] dummy0: left promiscuous mode [ 347.064375][T10017] FAULT_INJECTION: forcing a failure. [ 347.064375][T10017] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 347.079833][T10017] CPU: 0 UID: 0 PID: 10017 Comm: syz.1.1083 Tainted: G L syzkaller #0 PREEMPT(full) [ 347.079862][T10017] Tainted: [L]=SOFTLOCKUP [ 347.079866][T10017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 347.079873][T10017] Call Trace: [ 347.079877][T10017] [ 347.079881][T10017] dump_stack_lvl+0x100/0x190 [ 347.079900][T10017] should_fail_ex.cold+0x5/0xa [ 347.079915][T10017] _copy_from_user+0x2e/0xd0 [ 347.079932][T10017] snd_pcm_oss_write2+0x1c2/0x400 [ 347.079951][T10017] ? __pfx_snd_pcm_oss_write2+0x10/0x10 [ 347.079969][T10017] ? snd_pcm_kernel_ioctl+0x12e/0x280 [ 347.079986][T10017] snd_pcm_oss_write+0x729/0xa30 [ 347.080007][T10017] ? security_file_permission+0x76/0x210 [ 347.080021][T10017] vfs_write+0x2aa/0x1050 [ 347.080039][T10017] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 347.080057][T10017] ? irqentry_exit+0x24d/0xa00 [ 347.080070][T10017] ? __pfx_vfs_write+0x10/0x10 [ 347.080087][T10017] ? irqentry_exit+0x24d/0xa00 [ 347.080105][T10017] ? ksys_write+0xcd/0x250 [ 347.080124][T10017] ksys_write+0x12a/0x250 [ 347.080141][T10017] ? __pfx_ksys_write+0x10/0x10 [ 347.080163][T10017] do_syscall_64+0x115/0x870 [ 347.080174][T10017] ? clear_bhb_loop+0x40/0x90 [ 347.080188][T10017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.080199][T10017] RIP: 0033:0x7f0292b9de99 [ 347.080209][T10017] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 347.080220][T10017] RSP: 002b:00007f0290dd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 347.080231][T10017] RAX: ffffffffffffffda RBX: 00007f0292e26180 RCX: 00007f0292b9de99 [ 347.080238][T10017] RDX: 0000000000004000 RSI: 00002000000012c0 RDI: 0000000000000007 [ 347.080245][T10017] RBP: 00007f0290dd5090 R08: 0000000000000000 R09: 0000000000000000 [ 347.080251][T10017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 347.080258][T10017] R13: 00007f0292e26218 R14: 00007f0292e26180 R15: 00007fff138d07b8 [ 347.080272][T10017] [ 347.573631][ T29] audit: type=1400 audit(1785313997.302:888): avc: denied { write } for pid=10018 comm="syz.3.1084" name="file0" dev="tmpfs" ino=1111 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 347.638100][ T29] audit: type=1400 audit(1785313997.302:889): avc: denied { open } for pid=10018 comm="syz.3.1084" path="/203/file0" dev="tmpfs" ino=1111 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 348.392301][ T29] audit: type=1400 audit(1785313997.832:890): avc: denied { mounton } for pid=10027 comm="syz.3.1087" path="/204/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 349.180022][T10041] netlink: 'syz.3.1091': attribute type 1 has an invalid length. [ 350.004495][T10041] 8021q: adding VLAN 0 to HW filter on device bond3 [ 350.231639][T10047] 8021q: adding VLAN 0 to HW filter on device bond3 [ 350.756399][T10047] bond3: (slave vti0): The slave device specified does not support setting the MAC address [ 350.797987][T10047] bond3: (slave vti0): Error -95 calling set_mac_address [ 350.920059][T10060] lo speed is unknown, defaulting to 1000 [ 351.048502][ T5741] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 351.072052][ T29] audit: type=1400 audit(1785314000.792:891): avc: denied { map } for pid=10064 comm="syz.6.1096" path="socket:[28461]" dev="sockfs" ino=28461 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 351.237302][ T29] audit: type=1400 audit(1785314000.962:892): avc: denied { create } for pid=10064 comm="syz.6.1096" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 351.429190][ T5741] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 351.482501][ T5741] usb 2-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice=7e.00 [ 351.514806][ T5741] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.551806][ T5741] usb 2-1: config 0 descriptor?? [ 351.595314][ T5741] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 351.684721][T10090] team0 (unregistering): Port device team_slave_0 removed [ 351.938081][ T5741] usb 5-1: new full-speed USB device number 37 using dummy_hcd [ 352.085169][T10090] team0 (unregistering): Port device team_slave_1 removed [ 352.238194][ T5741] usb 5-1: device descriptor read/64, error -71 [ 352.594379][ T804] usb 2-1: USB disconnect, device number 38 [ 352.758331][ T5741] usb 5-1: new full-speed USB device number 38 using dummy_hcd [ 352.908196][ T5741] usb 5-1: device descriptor read/64, error -71 [ 353.028713][ T5741] usb usb5-port1: attempt power cycle [ 353.053626][T10109] netlink: 52 bytes leftover after parsing attributes in process `syz.6.1105'. [ 353.137798][T10057] Process accounting paused [ 353.418448][T10117] netlink: 'syz.6.1108': attribute type 1 has an invalid length. [ 353.460049][ T5741] usb 5-1: new full-speed USB device number 39 using dummy_hcd [ 353.489369][ T5741] usb 5-1: device descriptor read/8, error -71 [ 353.500417][T10123] binder: BINDER_SET_CONTEXT_MGR already set [ 353.517587][T10123] binder: 10106:10123 ioctl 4018620d 200000004a80 returned -16 [ 354.056632][T10117] 8021q: adding VLAN 0 to HW filter on device bond2 [ 354.158235][ T5741] usb 5-1: new full-speed USB device number 40 using dummy_hcd [ 354.240612][ T5741] usb 5-1: device descriptor read/8, error -71 [ 354.320383][T10133] netlink: 'syz.6.1112': attribute type 10 has an invalid length. [ 354.341093][T10133] 8021q: adding VLAN 0 to HW filter on device team0 [ 354.374589][T10133] bond0: (slave team0): Enslaving as an active interface with an up link [ 354.392917][T10135] netlink: 'syz.6.1112': attribute type 10 has an invalid length. [ 354.402535][ T5741] usb usb5-port1: unable to enumerate USB device [ 354.466898][T10135] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1112'. [ 354.539899][T10135] team0: entered promiscuous mode [ 354.557499][T10135] team_slave_0: entered promiscuous mode [ 354.600021][T10135] team_slave_1: entered promiscuous mode [ 354.626900][T10135] team0: entered allmulticast mode [ 354.645014][T10135] team_slave_0: entered allmulticast mode [ 354.688654][T10135] team_slave_1: entered allmulticast mode [ 354.740594][T10135] bond0: (slave team0): Releasing backup interface [ 354.772126][T10135] bridge0: port 3(team0) entered blocking state [ 354.792279][T10135] bridge0: port 3(team0) entered disabled state [ 354.826925][T10151] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1117'. [ 354.858998][T10151] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1117'. [ 354.930626][ T10] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 355.632929][T10157] netlink: 'syz.5.1119': attribute type 62 has an invalid length. [ 355.647969][T10159] netlink: 'syz.4.1121': attribute type 1 has an invalid length. [ 355.690971][T10159] 8021q: adding VLAN 0 to HW filter on device bond3 [ 355.728093][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 355.735344][T10159] 8021q: adding VLAN 0 to HW filter on device bond3 [ 355.748836][ T10] usb 2-1: config 9 has an invalid interface number: 189 but max is 0 [ 355.757878][T10159] bond3: (slave vti0): The slave device specified does not support setting the MAC address [ 355.768103][ T10] usb 2-1: config 9 has no interface number 0 [ 355.778951][ T10] usb 2-1: New USB device found, idVendor=19d2, idProduct=fffc, bcdDevice=ac.a6 [ 355.788333][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.797054][T10159] bond3: (slave vti0): Error -95 calling set_mac_address [ 355.804366][ T10] usb 2-1: Product: syz [ 355.808683][ T10] usb 2-1: Manufacturer: syz [ 355.813756][ T10] usb 2-1: SerialNumber: syz [ 356.806479][ T10] usb 2-1: No union descriptors [ 356.839454][ T10] usb 2-1: USB disconnect, device number 39 [ 357.218115][ T5741] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 357.388074][ T5741] usb 4-1: Using ep0 maxpacket: 16 [ 357.397126][ T5741] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 70, changing to 10 [ 357.428988][ T5741] usb 4-1: config 0 interface 0 has no altsetting 0 [ 357.447063][ T5741] usb 4-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 357.457339][ T5741] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.468733][ T5741] usb 4-1: config 0 descriptor?? [ 357.548159][ T5615] usb 5-1: new full-speed USB device number 41 using dummy_hcd [ 357.710591][ T5615] usb 5-1: config 0 interface 0 altsetting 255 endpoint 0x4 has invalid wMaxPacketSize 0 [ 357.730636][ T5615] usb 5-1: config 0 interface 0 has no altsetting 0 [ 357.795298][ T5615] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 357.812618][ T5615] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 357.841147][ T5615] usb 5-1: Product: syz [ 357.894144][ T5615] usb 5-1: Manufacturer: syz [ 357.902608][ T5741] isku 0003:1E7D:319C.0008: hidraw0: USB HID v0.81 Device [HID 1e7d:319c] on usb-dummy_hcd.3-1/input0 [ 357.927193][ T5615] usb 5-1: SerialNumber: syz [ 358.197659][ T5615] usb 5-1: config 0 descriptor?? [ 358.199678][ T5741] usb 4-1: USB disconnect, device number 45 [ 358.209588][ T5615] usb 5-1: selecting invalid altsetting 0 [ 358.322862][T10200] fido_id[10200]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 358.839991][ T29] audit: type=1400 audit(1785314008.572:893): avc: denied { create } for pid=10206 comm="syz.1.1133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 359.689120][T10217] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1136'. [ 360.316875][ T5799] usb 5-1: USB disconnect, device number 41 [ 360.411297][ T5741] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 360.428811][T10228] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 360.448991][ T29] audit: type=1400 audit(1785314010.172:894): avc: denied { open } for pid=10231 comm="syz.3.1142" path="/dev/ptyqa" dev="devtmpfs" ino=129 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 360.475215][T10232] FAULT_INJECTION: forcing a failure. [ 360.475215][T10232] name failslab, interval 1, probability 0, space 0, times 0 [ 360.522649][T10232] CPU: 0 UID: 0 PID: 10232 Comm: syz.3.1142 Tainted: G L syzkaller #0 PREEMPT(full) [ 360.522680][T10232] Tainted: [L]=SOFTLOCKUP [ 360.522686][T10232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 360.522696][T10232] Call Trace: [ 360.522702][T10232] [ 360.522709][T10232] dump_stack_lvl+0x100/0x190 [ 360.522738][T10232] should_fail_ex.cold+0x5/0xa [ 360.522763][T10232] should_failslab+0xc2/0x120 [ 360.522787][T10232] __kmalloc_noprof+0xfc/0x820 [ 360.522807][T10232] ? rcu_is_watching+0x12/0xc0 [ 360.522833][T10232] ? tomoyo_realpath_from_path+0xb6/0x690 [ 360.522857][T10232] tomoyo_realpath_from_path+0xb6/0x690 [ 360.522882][T10232] tomoyo_path_number_perm+0x23c/0x580 [ 360.522912][T10232] ? tomoyo_path_number_perm+0x22e/0x580 [ 360.522939][T10232] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 360.522988][T10232] ? find_held_lock+0x2b/0x80 [ 360.523016][T10232] ? __fget_files+0x215/0x3d0 [ 360.523034][T10232] ? hook_file_ioctl_common+0x140/0x440 [ 360.523053][T10232] ? __fget_files+0x215/0x3d0 [ 360.523076][T10232] ? __fget_files+0x21f/0x3d0 [ 360.523098][T10232] security_file_ioctl+0xd3/0x230 [ 360.523127][T10232] __x64_sys_ioctl+0xb7/0x210 [ 360.523156][T10232] do_syscall_64+0x115/0x870 [ 360.523180][T10232] ? clear_bhb_loop+0x40/0x90 [ 360.523202][T10232] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.523220][T10232] RIP: 0033:0x7f1a1079de99 [ 360.523236][T10232] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 360.523253][T10232] RSP: 002b:00007f1a11665028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 360.523271][T10232] RAX: ffffffffffffffda RBX: 00007f1a10a25fa0 RCX: 00007f1a1079de99 [ 360.523283][T10232] RDX: 000000000000001e RSI: 0000000040045436 RDI: 0000000000000003 [ 360.523294][T10232] RBP: 00007f1a11665090 R08: 0000000000000000 R09: 0000000000000000 [ 360.523304][T10232] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 360.523314][T10232] R13: 00007f1a10a26038 R14: 00007f1a10a25fa0 R15: 00007ffc02a5be58 [ 360.523339][T10232] [ 360.523346][T10232] ERROR: Out of memory at tomoyo_realpath_from_path. [ 360.746172][ T29] audit: type=1400 audit(1785314010.472:895): avc: denied { ioctl } for pid=10231 comm="syz.3.1142" path="/dev/ptyqa" dev="devtmpfs" ino=129 ioctlcmd=0x5436 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 360.758112][ T5741] usb 2-1: Using ep0 maxpacket: 32 [ 360.841749][ T5741] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 360.962847][ T5741] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 361.178832][ T5741] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 361.189999][T10240] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1145'. [ 361.234458][ T5741] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.274683][ T5741] usb 2-1: config 0 descriptor?? [ 361.301779][ T5741] hub 2-1:0.0: bad descriptor, ignoring hub [ 361.326196][ T5741] hub 2-1:0.0: probe with driver hub failed with error -5 [ 361.342367][ T5741] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 361.353345][T10245] binder: Unknown parameter 'fowner>00000000000000000000' [ 361.416112][T10246] netlink: 'syz.6.1146': attribute type 3 has an invalid length. [ 361.434759][T10246] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1146'. [ 361.464534][T10246] netlink: 'syz.6.1146': attribute type 3 has an invalid length. [ 361.507989][T10246] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1146'. [ 361.532030][T10246] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1146'. [ 361.608120][ T10] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 361.768107][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 361.775022][ T10] usb 5-1: config 53 has an invalid interface number: 101 but max is 0 [ 361.787355][ T10] usb 5-1: config 53 has an invalid descriptor of length 0, skipping remainder of the config [ 361.807872][ T10] usb 5-1: config 53 has no interface number 0 [ 361.817882][ T10] usb 5-1: config 53 interface 101 altsetting 0 has an endpoint descriptor with address 0xC2, changing to 0x82 [ 361.831146][ T10] usb 5-1: config 53 interface 101 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 361.850898][ T10] usb 5-1: config 53 interface 101 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 361.852117][T10262] bond3: invalid ARP target 0.0.0.0 specified for addition [ 361.868067][ T10] usb 5-1: config 53 interface 101 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 361.885396][T10262] bond3: option arp_ip_target: invalid value (0) [ 361.899362][T10262] bond3 (unregistering): Released all slaves [ 361.899862][ T10] usb 5-1: New USB device found, idVendor=0bfd, idProduct=011b, bcdDevice=33.a1 [ 361.923562][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.949852][ T10] usb 5-1: Product: syz [ 361.954874][ T10] usb 5-1: Manufacturer: syz [ 361.959855][ T10] usb 5-1: SerialNumber: syz [ 362.241492][T10274] netlink: 'syz.1.1137': attribute type 1 has an invalid length. [ 362.255095][T10274] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1137'. [ 362.291585][T10276] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1157'. [ 362.300754][T10276] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1157'. [ 362.326345][ T142] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 362.341693][ T142] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 362.359333][ T142] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 362.374077][ T142] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 362.414845][T10273] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 362.425257][T10273] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 362.711376][ T10] kvaser_usb 5-1:53.101: error -ENODEV: Cannot get usb endpoint(s) [ 362.776302][ T10] usb 5-1: USB disconnect, device number 42 [ 363.513484][ T10] IPVS: starting estimator thread 0... [ 363.571024][ T5615] usb 2-1: USB disconnect, device number 40 [ 363.725953][T10299] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1165'. [ 363.746745][T10302] IPVS: using max 42 ests per chain, 100800 per kthread [ 364.120403][T10308] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1168'. [ 364.159171][T10299] hsr_slave_1 (unregistering): left promiscuous mode [ 364.438348][ T5615] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 364.578238][T10324] batadv_slave_1: entered allmulticast mode [ 364.719110][ T5615] usb 2-1: Using ep0 maxpacket: 16 [ 364.746648][ T5615] usb 2-1: config 0 has an invalid interface number: 246 but max is 0 [ 364.774439][ T5615] usb 2-1: config 0 has no interface number 0 [ 364.861462][ T5615] usb 2-1: config 0 interface 246 altsetting 255 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 364.950541][ T5615] usb 2-1: config 0 interface 246 has no altsetting 0 [ 365.016681][ T5615] usb 2-1: New USB device found, idVendor=0424, idProduct=cf30, bcdDevice=35.27 [ 365.068075][ T5615] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.086540][ T5615] usb 2-1: Product: syz [ 365.108519][ T5615] usb 2-1: Manufacturer: syz [ 365.119933][ T5615] usb 2-1: SerialNumber: syz [ 365.143636][ T5615] usb 2-1: config 0 descriptor?? [ 365.318393][ T10] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 365.543357][T10343] lo speed is unknown, defaulting to 1000 [ 365.807893][ T5615] usb 2-1: USB disconnect, device number 41 [ 365.870163][T10349] __nla_validate_parse: 2 callbacks suppressed [ 365.870187][T10349] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1176'. [ 365.918186][ T5799] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 365.948083][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 365.954956][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 365.972548][ T10] usb 5-1: New USB device found, idVendor=1235, idProduct=8215, bcdDevice= 0.40 [ 365.981875][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.028100][ T10] usb 5-1: Product: syz [ 366.037226][ T10] usb 5-1: Manufacturer: syz [ 366.046801][ T10] usb 5-1: SerialNumber: syz [ 366.108636][ T5799] usb 6-1: Using ep0 maxpacket: 32 [ 366.126149][ T5799] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 366.145470][ T5799] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 366.160091][ T5799] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 366.170464][ T5799] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.184669][ T5799] usb 6-1: config 0 descriptor?? [ 366.222156][ T5799] hub 6-1:0.0: bad descriptor, ignoring hub [ 366.234934][ T5799] hub 6-1:0.0: probe with driver hub failed with error -5 [ 366.250961][ T5799] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 366.291874][ T29] audit: type=1400 audit(1785314016.012:896): avc: denied { ioctl } for pid=10332 comm="syz.4.1171" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 ioctlcmd=0x662a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 366.293374][T10334] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 366.483411][T10353] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 366.531782][T10334] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 367.453855][T10358] netlink: 'syz.5.1175': attribute type 1 has an invalid length. [ 367.479285][T10358] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1175'. [ 367.494687][T10353] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 367.733413][ T10] usb 5-1: USB disconnect, device number 43 [ 368.333414][T10383] sctp: [Deprecated]: syz.6.1187 (pid 10383) Use of int in maxseg socket option. [ 368.333414][T10383] Use struct sctp_assoc_value instead [ 368.370190][T10383] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1187'. [ 368.678504][ T10] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 368.685605][T10383] bond3: up delay (10) is not a multiple of miimon (7), value rounded to 7 ms [ 368.959728][T10383] bond3 (unregistering): Released all slaves [ 369.014478][ T5615] usb 6-1: USB disconnect, device number 22 [ 369.595066][T10395] netlink: 'syz.5.1190': attribute type 1 has an invalid length. [ 369.603870][T10395] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1190'. [ 369.630711][T10395] binder: BINDER_SET_CONTEXT_MGR already set [ 369.636784][T10395] binder: 10394:10395 ioctl 4018620d 200000004a80 returned -16 [ 369.739573][ T10] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 369.748895][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.759823][ T10] usb 2-1: config 0 descriptor?? [ 369.910936][T10410] FAULT_INJECTION: forcing a failure. [ 369.910936][T10410] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 369.990954][ T29] audit: type=1400 audit(1785314019.712:897): avc: denied { lock } for pid=10377 comm="syz.1.1185" path="socket:[30103]" dev="sockfs" ino=30103 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 370.033996][T10410] CPU: 1 UID: 0 PID: 10410 Comm: syz.5.1195 Tainted: G L syzkaller #0 PREEMPT(full) [ 370.034025][T10410] Tainted: [L]=SOFTLOCKUP [ 370.034030][T10410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 370.034040][T10410] Call Trace: [ 370.034045][T10410] [ 370.034052][T10410] dump_stack_lvl+0x100/0x190 [ 370.034074][T10410] should_fail_ex.cold+0x5/0xa [ 370.034090][T10410] _copy_from_iter+0x1f4/0x1690 [ 370.034109][T10410] ? __asan_memset+0x23/0x50 [ 370.034120][T10410] ? __pfx__copy_from_iter+0x10/0x10 [ 370.034140][T10410] ? __pfx___alloc_skb+0x10/0x10 [ 370.034169][T10410] netlink_sendmsg+0x808/0xda0 [ 370.034190][T10410] ? __pfx_netlink_sendmsg+0x10/0x10 [ 370.034209][T10410] ? selinux_socket_sendmsg+0x198/0x2f0 [ 370.034228][T10410] ____sys_sendmsg+0xa4d/0xbe0 [ 370.034245][T10410] ? __pfx_netlink_sendmsg+0x10/0x10 [ 370.034257][T10410] ? __pfx_____sys_sendmsg+0x10/0x10 [ 370.034295][T10410] ___sys_sendmsg+0x190/0x1e0 [ 370.034322][T10410] ? __pfx____sys_sendmsg+0x10/0x10 [ 370.034345][T10410] ? __lock_acquire+0x49f/0x1a40 [ 370.034363][T10410] ? get_pid_task+0x106/0x250 [ 370.034394][T10410] __sys_sendmsg+0x160/0x210 [ 370.034409][T10410] ? __pfx___sys_sendmsg+0x10/0x10 [ 370.034438][T10410] do_syscall_64+0x115/0x870 [ 370.034457][T10410] ? clear_bhb_loop+0x40/0x90 [ 370.034477][T10410] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.034493][T10410] RIP: 0033:0x7f2b9d79de99 [ 370.034506][T10410] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 370.034517][T10410] RSP: 002b:00007f2b9e6e8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 370.034528][T10410] RAX: ffffffffffffffda RBX: 00007f2b9da25fa0 RCX: 00007f2b9d79de99 [ 370.034535][T10410] RDX: 0000000020044884 RSI: 0000200000000200 RDI: 0000000000000003 [ 370.034542][T10410] RBP: 00007f2b9e6e8090 R08: 0000000000000000 R09: 0000000000000000 [ 370.034548][T10410] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 370.034554][T10410] R13: 00007f2b9da26038 R14: 00007f2b9da25fa0 R15: 00007ffc2d4f41a8 [ 370.034572][T10410] [ 370.284611][T10378] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 370.299562][T10378] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 370.323464][ T10] usb 2-1: Cannot read MAC address [ 370.349809][ T10] MOSCHIP usb-ethernet driver 2-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 370.383239][ T10] usb 2-1: USB disconnect, device number 42 [ 370.444468][T10423] netlink: 'syz.3.1202': attribute type 1 has an invalid length. [ 370.452858][T10423] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1202'. [ 370.638570][ T24] usb 5-1: new full-speed USB device number 44 using dummy_hcd [ 370.662512][ T29] audit: type=1400 audit(1785314020.392:898): avc: denied { write } for pid=10426 comm="syz.3.1203" name="c.1" dev="configfs" ino=15609 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 370.791030][ T24] usb 5-1: not running at top speed; connect to a high speed hub [ 370.811052][ T24] usb 5-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 370.820764][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.835943][ T24] keyspan 5-1:1.0: Keyspan 2 port adapter converter detected [ 370.862151][ T24] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 370.887769][ T24] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 370.938384][ T10] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 372.100378][T10436] bridge: RTM_NEWNEIGH with unconfigured vlan 6 on bridge_slave_0 [ 372.169445][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 372.180624][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 372.190901][ T10] usb 4-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 372.200159][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.210560][ T10] usb 4-1: config 0 descriptor?? [ 372.271574][ T29] audit: type=1400 audit(1785314022.002:899): avc: denied { ioctl } for pid=10447 comm="syz.5.1211" path="socket:[30220]" dev="sockfs" ino=30220 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 372.290961][ T24] usb 5-1: USB disconnect, device number 44 [ 372.302005][ T29] audit: type=1400 audit(1785314022.022:900): avc: denied { write } for pid=10447 comm="syz.5.1211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 372.342952][ T24] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 372.377294][ T24] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 372.400499][ T24] keyspan 5-1:1.0: device disconnected [ 372.633056][ T10] steelseries 0003:1038:12B6.0009: unknown main item tag 0x0 [ 372.641456][ T10] steelseries 0003:1038:12B6.0009: unknown main item tag 0x0 [ 372.649750][ T10] steelseries 0003:1038:12B6.0009: unknown main item tag 0x0 [ 372.657175][ T10] steelseries 0003:1038:12B6.0009: unknown main item tag 0x0 [ 372.664791][ T10] steelseries 0003:1038:12B6.0009: unknown main item tag 0x0 [ 372.674726][ T10] steelseries 0003:1038:12B6.0009: unknown main item tag 0x0 [ 372.682360][ T10] steelseries 0003:1038:12B6.0009: unknown main item tag 0x0 [ 372.699937][ T10] steelseries 0003:1038:12B6.0009: hidraw0: USB HID v0.00 Device [HID 1038:12b6] on usb-dummy_hcd.3-1/input0 [ 373.060574][ T5799] usb 4-1: USB disconnect, device number 46 [ 373.485483][T10482] netlink: 'syz.1.1218': attribute type 2 has an invalid length. [ 373.493971][T10482] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1218'. [ 373.544168][T10480] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 374.103170][T10483] binder: BINDER_SET_CONTEXT_MGR already set [ 374.160922][T10483] binder: 10475:10483 ioctl 4018620d 200000004a80 returned -16 [ 374.221068][T10483] binder: 10475:10483 ioctl c0306201 200000004a40 returned -22 [ 375.176600][T10504] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1226'. [ 375.215774][T10504] ip6gre1: entered promiscuous mode [ 375.230537][T10504] ip6gre1: entered allmulticast mode [ 375.245271][T10506] netlink: 'syz.1.1226': attribute type 6 has an invalid length. [ 375.256723][T10506] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1226'. [ 375.450101][T10508] vivid-003: disconnect [ 375.460058][T10507] vivid-003: reconnect [ 375.551758][ T29] audit: type=1326 audit(1785314025.282:901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10503 comm="syz.1.1226" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0292b9de99 code=0x7dff0000 [ 376.141470][ T5720] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 376.375265][ T5720] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 376.388943][ T5720] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.470633][ T5720] usb 5-1: config 0 descriptor?? [ 376.541236][ T5720] cp210x 5-1:0.0: cp210x converter detected [ 376.779886][T10517] netlink: 'syz.3.1230': attribute type 19 has an invalid length. [ 376.923170][ T5720] cp210x 5-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 377.692022][ T29] audit: type=1400 audit(1785314027.422:902): avc: denied { setopt } for pid=10547 comm="syz.6.1240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 378.237542][ T29] audit: type=1400 audit(1785314027.962:903): avc: denied { ioctl } for pid=10564 comm="syz.5.1246" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 378.582099][ T5720] cp210x 5-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 378.605097][ T5720] cp210x 5-1:0.0: GPIO initialisation failed: -71 [ 378.631117][ T5720] usb 5-1: cp210x converter now attached to ttyUSB0 [ 378.658927][ T5720] usb 5-1: USB disconnect, device number 45 [ 378.738713][ T5720] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 378.846890][ T5720] cp210x 5-1:0.0: device disconnected [ 378.962400][T10585] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1256'. [ 378.988251][ T29] audit: type=1400 audit(1785314028.712:904): avc: denied { mounton } for pid=10579 comm="syz.4.1254" path="/231/config" dev="configfs" ino=1060 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 379.070138][ T29] audit: type=1400 audit(1785314028.762:905): avc: denied { write } for pid=10579 comm="syz.4.1254" name="functions" dev="configfs" ino=11028 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 379.145862][ T29] audit: type=1400 audit(1785314028.862:906): avc: denied { write } for pid=10579 comm="syz.4.1254" name="functions" dev="configfs" ino=11028 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 379.199556][ T29] audit: type=1400 audit(1785314028.892:907): avc: denied { remove_name } for pid=10579 comm="syz.4.1254" name="gser.usb0" dev="configfs" ino=30521 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 379.201304][T10580] printk: legacy console [ttyGS0] disabled [ 379.266131][ T29] audit: type=1400 audit(1785314028.892:908): avc: denied { rmdir } for pid=10579 comm="syz.4.1254" name="gser.usb0" dev="configfs" ino=30521 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 379.299805][ T29] audit: type=1326 audit(1785314028.912:909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10587 comm="syz.6.1257" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb13159de99 code=0x0 [ 379.329935][ T29] audit: type=1400 audit(1785314028.982:910): avc: denied { write } for pid=10589 comm="syz.5.1258" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 379.387857][T10592] [ 379.390185][T10592] ============================================ [ 379.396323][T10592] WARNING: possible recursive locking detected [ 379.402448][T10592] syzkaller #0 Tainted: G L [ 379.408395][T10592] -------------------------------------------- [ 379.414527][T10592] syz.5.1258/10592 is trying to acquire lock: [ 379.420569][T10592] ffff888032c948f0 (&dev->mutex#4){+.+.}-{4:4}, at: comedi_do_insn+0x2e/0x360 [ 379.429418][T10592] [ 379.429418][T10592] but task is already holding lock: [ 379.436768][T10592] ffff888032c970f0 (&dev->mutex#4){+.+.}-{4:4}, at: comedi_unlocked_ioctl+0x180/0x3310 [ 379.446435][T10592] [ 379.446435][T10592] other info that might help us debug this: [ 379.454467][T10592] Possible unsafe locking scenario: [ 379.454467][T10592] [ 379.461886][T10592] CPU0 [ 379.465757][T10592] ---- [ 379.469021][T10592] lock(&dev->mutex#4); [ 379.473241][T10592] lock(&dev->mutex#4); [ 379.477468][T10592] [ 379.477468][T10592] *** DEADLOCK *** [ 379.477468][T10592] [ 379.485582][T10592] May be due to missing lock nesting notation [ 379.485582][T10592] [ 379.493872][T10592] 1 lock held by syz.5.1258/10592: [ 379.498954][T10592] #0: ffff888032c970f0 (&dev->mutex#4){+.+.}-{4:4}, at: comedi_unlocked_ioctl+0x180/0x3310 [ 379.509056][T10592] [ 379.509056][T10592] stack backtrace: [ 379.514929][T10592] CPU: 1 UID: 0 PID: 10592 Comm: syz.5.1258 Tainted: G L syzkaller #0 PREEMPT(full) [ 379.514949][T10592] Tainted: [L]=SOFTLOCKUP [ 379.514954][T10592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 379.514961][T10592] Call Trace: [ 379.514966][T10592] [ 379.514972][T10592] dump_stack_lvl+0x100/0x190 [ 379.514989][T10592] print_deadlock_bug.cold+0xbd/0xca [ 379.515007][T10592] __lock_acquire+0x1256/0x1a40 [ 379.515024][T10592] lock_acquire+0x1b9/0x370 [ 379.515037][T10592] ? comedi_do_insn+0x2e/0x360 [ 379.515050][T10592] ? __pfx___might_resched+0x10/0x10 [ 379.515065][T10592] __mutex_lock+0x1a4/0x1bd0 [ 379.515078][T10592] ? comedi_do_insn+0x2e/0x360 [ 379.515090][T10592] ? comedi_do_insn+0x2e/0x360 [ 379.515103][T10592] ? __pfx___mutex_lock+0x10/0x10 [ 379.515116][T10592] ? __pfx___might_resched+0x10/0x10 [ 379.515130][T10592] ? rcu_is_watching+0x12/0xc0 [ 379.515146][T10592] ? __up_read+0x333/0x980 [ 379.515161][T10592] ? __lock_acquire+0x49f/0x1a40 [ 379.515175][T10592] ? comedi_do_insn+0x2e/0x360 [ 379.515188][T10592] comedi_do_insn+0x2e/0x360 [ 379.515204][T10592] comedi_dio_bitfield2+0x3c0/0x420 [ 379.515222][T10592] ? __pfx_comedi_dio_bitfield2+0x10/0x10 [ 379.515239][T10592] ? find_held_lock+0x2b/0x80 [ 379.515271][T10592] ? lockdep_hardirqs_on+0x78/0x100 [ 379.515285][T10592] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 379.515297][T10592] ? stack_depot_save_flags+0x479/0x9d0 [ 379.515315][T10592] bonding_dio_insn_bits+0x2b9/0x570 [ 379.515331][T10592] ? comedi_unlocked_ioctl+0xf68/0x3310 [ 379.515349][T10592] ? __pfx_bonding_dio_insn_bits+0x10/0x10 [ 379.515365][T10592] insn_rw_emulate_bits+0x2a2/0x5e0 [ 379.515383][T10592] ? __pfx_insn_rw_emulate_bits+0x10/0x10 [ 379.515402][T10592] ? comedi_check_chanlist+0x27e/0x300 [ 379.515419][T10592] parse_insn+0x83f/0x19f0 [ 379.515433][T10592] ? __kasan_kmalloc+0xaa/0xb0 [ 379.515446][T10592] ? __pfx_parse_insn+0x10/0x10 [ 379.515459][T10592] ? do_insn_ioctl+0xda/0x4e0 [ 379.515474][T10592] do_insn_ioctl+0x152/0x4e0 [ 379.515489][T10592] comedi_unlocked_ioctl+0xf68/0x3310 [ 379.515504][T10592] ? tomoyo_path_number_perm+0x188/0x580 [ 379.515521][T10592] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 379.515538][T10592] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 379.515551][T10592] ? do_vfs_ioctl+0x226/0x13e0 [ 379.515567][T10592] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 379.515587][T10592] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 379.515606][T10592] ? __fget_files+0x215/0x3d0 [ 379.515616][T10592] ? hook_file_ioctl_common+0x140/0x440 [ 379.515630][T10592] ? selinux_file_ioctl+0x13b/0x290 [ 379.515646][T10592] ? selinux_file_ioctl+0xb6/0x290 [ 379.515663][T10592] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 379.515679][T10592] __x64_sys_ioctl+0x18e/0x210 [ 379.515695][T10592] do_syscall_64+0x115/0x870 [ 379.515707][T10592] ? clear_bhb_loop+0x40/0x90 [ 379.515719][T10592] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.515730][T10592] RIP: 0033:0x7f2b9d79de99 [ 379.515740][T10592] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 379.515752][T10592] RSP: 002b:00007f2b9e6e8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 379.515765][T10592] RAX: ffffffffffffffda RBX: 00007f2b9da25fa0 RCX: 00007f2b9d79de99 [ 379.515772][T10592] RDX: 0000200000022a00 RSI: 000000008028640c RDI: 0000000000000010 [ 379.515779][T10592] RBP: 00007f2b9d833eaf R08: 0000000000000000 R09: 0000000000000000 [ 379.515785][T10592] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 379.515791][T10592] R13: 00007f2b9da26038 R14: 00007f2b9da25fa0 R15: 00007ffc2d4f41a8 [ 379.515800][T10592]