last executing test programs: 3m23.376826275s ago: executing program 1 (id=1322): timer_settime(0x0, 0x1, &(0x7f000006b000)={{0x0, 0x989680}}, 0x0) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xb0090199) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/machinecheck/machinecheck0/ignore_ce\x00', 0x801, 0x48) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c2", 0x17) r1 = accept4(r0, 0x0, 0x0, 0x80800) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000002c0)={0x10000018}) syz_genetlink_get_family_id$fou(&(0x7f0000000340), r1) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x2}) ioctl(r3, 0x8b32, &(0x7f0000000040)) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000004c0)={'netdevsim0\x00', 0x0}) setsockopt$packet_int(r4, 0x107, 0x14, &(0x7f0000000180)=0x19ca, 0x4) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r4, &(0x7f00000000c0)="3f03fe7feee8140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/machinecheck/machinecheck0/ignore_ce\x00', 0x1, 0x0) write(r6, &(0x7f0000000200)='0', 0x1) socket$nl_sock_diag(0x10, 0x3, 0x4) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="687567653d6ea0a525821fc858ee0f083cc476f9255f7665722c0000"]) r7 = io_uring_setup(0x2a8d, &(0x7f0000000240)={0x0, 0x4017, 0x2, 0x3, 0x1fb, 0x0, r0}) setns(0xc9, 0x0) r8 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r8, 0x114, 0x8, &(0x7f0000000200), 0x4) close_range(r7, 0xffffffffffffffff, 0x0) 3m22.437201847s ago: executing program 1 (id=1325): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0xffff, 0x0, 0x1}, 0x48) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r2, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000002c0)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r3}, &(0x7f00000001c0), &(0x7f00000005c0)=r1}, 0x20) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000180)={0x1}) ioctl$KVM_REINJECT_CONTROL(r4, 0xae71, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xe}, @IFLA_BOND_ARP_IP_TARGET={0x8, 0x8, 0x0, 0x1, [@remote]}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x40004) close(r4) socket$l2tp6(0xa, 0x2, 0x73) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x3, [@datasec={0x1, 0x1, 0x0, 0xf, 0x2, [{0x3, 0x3, 0x3}], '+\x00'}, @datasec={0x0, 0x0, 0x0, 0xf, 0x2, [], "f015"}]}, {0x0, [0x5f]}}, 0x0, 0x43, 0x0, 0x1}, 0x28) socket$key(0xf, 0x3, 0x2) setns(0xc9, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x84}, @NFTA_SET_DATA_TYPE={0x8}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x10, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc, 0x1, '\x00\x00\x00\x00\x00\x00\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xd8}}, 0x0) 3m21.56764803s ago: executing program 1 (id=1328): syz_usb_connect$uac1(0x5, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4988825e09e896392c5b5e5e6b98a4da9496859396ad89866c9e5c9076855046e417c1bbe0c9e1ae7fbaf3b762444e25255da94d06a3d3570a9903653c99e76b815d243fa42226494667bfa5d026a50a93985f967ef8a9359ba4329c7fafac3cbf676db27d0175a1211ac4e519f8d16fd3c5ee7745df7f00775a1a06d6c235e11df1b9133c2f1d39f4d9b3ce60bcf0623eacb73d30dd5f6ba559acfd297da5400831554b6a9f9629c7932e13a9c43cb700a2b9727e1870906cd4193b91c40e8fe56a53aa8a43dcc1d1c205cf1428b2e0b17ed31c9ea3362cd1e4422f4d2088320f11cc122b6b34062365ace35bc767bbb9c658", @ANYRESDEC=r1], 0x3c}}, 0x0) r3 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x78, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @vti={{0x8}, {0x44, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @remote}, @vti_common_policy=[@IFLA_VTI_LINK={0x8}], @IFLA_VTI_REMOTE={0x8, 0x5, @multicast2}, @vti_common_policy=[@IFLA_VTI_IKEY={0x8, 0x2, 0xb330}, @IFLA_VTI_OKEY={0x8, 0x3, 0xe4}, @IFLA_VTI_IKEY={0x8, 0x2, 0x6}, @IFLA_VTI_FWMARK={0x8}], @IFLA_VTI_REMOTE={0x8, 0x5, @private=0xa010102}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x78}, 0x1, 0x0, 0x0, 0x48040}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = dup2(r3, r0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) poll(&(0x7f0000000340)=[{r6, 0x20}, {0xffffffffffffffff, 0xc}], 0x2, 0x10000) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x40, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x1, 0x803, 0x0) mkdir(&(0x7f0000000040)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt/module/block2mtd/parameters/block2mtd\x00', 0x1, 0xc0) write$binfmt_script(r10, &(0x7f0000000b40)={'#! ', './mnt/module/block2mtd/parameters/block2mtd', [], 0xa, "6ecee443dc3dbc844993ba8edff3968123752173d7bbea09e1a00fdecae1d64832"}, 0x50) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r12 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x103401, 0x0) write$dsp(r12, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r12, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETFMT(r12, 0x40045010, &(0x7f0000000040)=0x5f) ioctl$SNDCTL_DSP_RESET(r12, 0x5000, 0x0) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r11}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x4c}}, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r5, 0xc0385868, &(0x7f0000000700)={r3, &(0x7f0000000600)='vti\x00', 0x420000, &(0x7f0000000640)={@_ha_fsid={[0x401]}, {0x5e4b, 0x1ef, 0x7, 0x2}}, 0x7, &(0x7f0000000680), &(0x7f00000006c0)=0x2}) 3m20.477516426s ago: executing program 0 (id=1332): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000240)={0x3, &(0x7f0000000000)=[{0x30, 0x0, 0xfd, 0x5ae9}, {0x28, 0x7f, 0x6, 0xfffff00c}, {0x6, 0x4, 0x3, 0x1000}]}, 0x10) read$FUSE(0xffffffffffffffff, &(0x7f0000002c80)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x101280, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r4) sendmsg$NL80211_CMD_JOIN_OCB(r4, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20024080}, 0x40) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042cbd7000ffdbdf25010000004c000280bc00018008000100040000000800010002000000080001000600000008000100070000000800010006000000080001000700000008000100070000000c0001000000000000000000100002800c0001"], 0x70}, 0x1, 0x0, 0x0, 0x40005}, 0x40) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="1801000030"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$PIO_CMAP(r3, 0x4b71, &(0x7f00000000c0)={0x8, 0xa6, 0x2, 0x9, 0x3, 0xead}) get_robust_list(r2, &(0x7f0000004e00)=&(0x7f0000004dc0)={&(0x7f0000004d00)={&(0x7f0000004cc0)}, 0x0, &(0x7f0000004d80)={&(0x7f0000004d40)}}, &(0x7f0000004e40)=0x18) sendmmsg$inet(r0, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) 3m19.80173555s ago: executing program 0 (id=1334): r0 = socket$inet_smc(0x2b, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0xff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000180), 0xcaf8, 0x40000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000080)={0x8, 0x91, 0x6}) socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0x96b, 0xb, 0x400}) r5 = syz_open_dev$dri(&(0x7f0000000180), 0xcaf8, 0x40000) close_range(r4, r5, 0x0) shmctl$SHM_INFO(0x0, 0xe, 0x0) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x1b8, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, 0xffffffffffffffff, 0x0) ioctl$BLKRRPART(0xffffffffffffffff, 0x125f, 0x0) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000100)={0x8, 0x80000, r2}) io_submit(0x0, 0x0, &(0x7f0000000400)) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f00000002c0)={0x1, 'bridge0\x00', 0x1}, 0x18) 3m18.691905508s ago: executing program 0 (id=1337): r0 = syz_open_dev$video4linux(&(0x7f0000000140), 0x3, 0x88000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000000)={0xb, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0x0, 0x5, 0x46d, 0xb012}}, 0x118) write$UHID_INPUT2(r4, &(0x7f0000000d00), 0x6) write$UHID_INPUT2(r4, &(0x7f00000005c0)=ANY=[], 0x1a) unshare(0x22020600) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x3010, 0x4, 0x0, 0x7b0, 0x3, 0x1}) unshare(0x4000400) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000480), 0xa9d6, 0x2) ioctl$vim2m_VIDIOC_STREAMON(r6, 0x40045612, &(0x7f0000000080)=0x2) 3m18.615515791s ago: executing program 2 (id=1338): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat(0xffffffffffffff9c, 0x0, 0x40, 0x1) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000000040)) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x50000, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x1e1942, 0x0) r3 = syz_io_uring_setup(0x29d7, &(0x7f0000000540)={0x0, 0x8550, 0x3100, 0x8001, 0x1d5}, 0x0, &(0x7f00000001c0)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(0x0, r4, r5, &(0x7f0000000280)=@IORING_OP_WAITID={0x32, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x4}}) io_uring_enter(r3, 0x1, 0x1, 0x61, 0x0, 0x0) r6 = open$dir(0x0, 0x40000, 0x81) getdents64(r6, 0x0, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) sendfile(r7, r7, 0x0, 0x1002000ff) 3m17.395587344s ago: executing program 0 (id=1340): lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000240), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x1001, 0x0) symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r0, &(0x7f0000000180)='1', 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='1', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r2, &(0x7f0000000280)='0', 0x1) syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, 0x0, 0x0, 0x0) io_setup(0x3ff, &(0x7f0000000500)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) 3m17.296985733s ago: executing program 2 (id=1341): r0 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0xf1ba, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) close(0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x2}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="8c00000010001fff28bd70000000800000000000", @ANYRES32=0x0, @ANYBLOB="efb00000800000006c0012800b00010062726964676500005c00028008000500010000000c002e"], 0x8c}, 0x1, 0x0, 0x0, 0x4000084}, 0x14) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x4040080) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000001440)={0x8, r1, 'id1\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001500)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f0000001640)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001600)={&(0x7f0000001540)={0x78, r2, 0x100, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@crypto_settings=[@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x886c}, @NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_WPA_VERSIONS={0x8, 0x4b, 0x7}, @NL80211_ATTR_WPA_VERSIONS={0x8, 0x4b, 0x1}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x88f5}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x14, 0x49, [0xfac04, 0xfac01, 0xfac0c, 0xfac06]}, @NL80211_ATTR_CONTROL_PORT_NO_PREAUTH={0x4}], @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0xc, {0x80, 0x0, 0x6, 0x4}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x20008080}, 0x48000) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r5, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x49, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3a}, 0x60) sendmmsg(r5, &(0x7f0000008000)=[{{&(0x7f0000000100)=@rc={0x1f, @any, 0x9}, 0x80, &(0x7f00000015c0)=[{&(0x7f0000001800)="cd58", 0x2}], 0x1}}, {{&(0x7f0000000780)=@nl=@proc={0x10, 0x0, 0x25dfdbfb}, 0x80, &(0x7f00000037c0)=[{&(0x7f0000000800)="111925cd14a803815165afdc3f2c21b1f94b546ea4629f131110151844368f064efcdb7dd59f900b55a108dfd18039633abaff99b12422b725f529a8b3363837d4776fd925dabbb59ccbbef6d8b988c12aefda3f9491b304f5b735e84677a319ebbd255db7a27d9c01c28d7a5840e62b5e202fcc2fc51333f0811268d62af606141c88173b966a6d6dbd", 0x8a}, {0x0, 0x5f}, {&(0x7f00000027c0)}], 0x3}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000005d80)}}], 0x3, 0x4008000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r7 = dup(r6) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000780)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000005000000003a00000008000300", @ANYRES32=r10, @ANYBLOB="05005b"], 0x24}}, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000001400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000013c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="c4100000", @ANYRES16=r9, @ANYBLOB="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"], 0x10c4}, 0x1, 0x0, 0x0, 0x4}, 0x40) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x100010, r7, 0x103000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) 3m17.139937211s ago: executing program 0 (id=1343): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000280)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="020300030c0000000000040000000000030005000000000002000000e00000020000000000000000030006000000000002000000ac141400000000000000000002000100000000000000000000000000020013"], 0x60}, 0x1, 0x7}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r2) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) recvmmsg(r2, &(0x7f0000004480)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000600)=""/66, 0x42}, {&(0x7f0000000180)=""/92, 0x5c}, {&(0x7f0000000200)=""/224, 0xe0}, {&(0x7f0000001700)=""/4096, 0x1000}], 0x4}, 0x3fffff}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0x40018000}], 0x3, 0x2, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$uac1(0x0, 0xfe, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x499, 0x1044, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xec, 0x3, 0x1, 0x7, 0xb0, 0x9, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xa, 0x1e}, [@extension_unit={0x8, 0x24, 0x8, 0x3, 0x7, 0x5, "a7"}, @input_terminal={0xc, 0x24, 0x2, 0x3, 0x101, 0x2, 0x5, 0xed0, 0x4, 0x4}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x10, 0x9ed, 0x7f, "ca988a04c9"}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0xc, 0x1, 0x4, 0x3, "719251ba"}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x6, 0x3, 0x5d, 0x0, "fb9853ebba2f05"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x3, 0x3, 0x12, 0x40, "", "176a"}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x8001, 0x7ff, 0x7, "575f8e85"}, @as_header={0x7, 0x24, 0x1, 0x1, 0x5, 0x3}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x5, 0xf7, 0x3, {0x7, 0x25, 0x1, 0x4, 0x6, 0xb2a}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x2, 0x7, 0x1, 0x3}, @as_header={0x7, 0x24, 0x1, 0x3}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0xa, 0x1, 0x9, 0x42, "8f81604b"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x762, 0xe8, 0x9}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x100, 0x7, 0xac, 0x42}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x5, 0x4, 0x9, {0x7, 0x25, 0x1, 0x8, 0xc, 0x7}}}}}}}}]}}, &(0x7f0000000480)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x300, 0x83, 0x0, 0x1, 0x20, 0x2}, 0x1d, &(0x7f0000000340)={0x5, 0xf, 0x1d, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x34be30f5c450f927, 0x8, 0xe, 0x9, 0x1}, @wireless={0xb, 0x10, 0x1, 0x12, 0x40, 0x1, 0x7, 0x0, 0xdd}, @ptm_cap={0x3}]}, 0x4, [{0x6, &(0x7f0000000380)=@string={0x6, 0x3, "9508a36c"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x1c0a}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x418}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x429}}]}) syz_usb_control_io$uac1(r0, 0x0, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000100)={0x0, 0x642, &(0x7f0000000240)="235913100000004a3525c373b8be3e8d2672540e4fff5fe7", 0x0, 0x18}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x20000010) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000100)={{0xfec00000, 0x0, 0x0, 0x7, 0x7, 0x10, 0x3, 0x7, 0x0, 0x8, 0x9}, {0x50000, 0x10000, 0xc, 0x0, 0x2, 0x0, 0xfd, 0x0, 0x7, 0xfd, 0x2}, {0xb000, 0xf066ce738b004ad5, 0xc, 0x0, 0x27, 0xc5, 0x0, 0x0, 0x8, 0x3, 0x40, 0x3}, {0xeeef0000, 0x25000, 0xb, 0x9, 0x1, 0x9, 0x9, 0x7, 0x8, 0xf, 0x4}, {0x80a0000, 0x8080000, 0xb, 0x0, 0x0, 0x6, 0x0, 0x0, 0x8, 0x3f, 0x2}, {0xb000, 0x0, 0x9, 0x5, 0x2, 0x1, 0x1, 0x80, 0x10, 0xff, 0x6, 0xc0}, {0x1eeed1001, 0xeeee0000, 0x3, 0x4, 0x3, 0x0, 0xa1, 0x20, 0x0, 0x0, 0x4}, {0x50000, 0x50000, 0x8, 0x3, 0x0, 0x7, 0x9, 0x40, 0x26, 0x0, 0x1, 0x2}, {0x809fffb, 0x8cc}, {0xdddd1000}, 0xddf8ffd3, 0x0, 0x0, 0x110, 0xd, 0xf801, 0x4, [0x80000004, 0x0, 0x10000, 0xfffffffffffdfffb]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000009c0)={0x2c, &(0x7f0000000740)={0x20, 0x16, 0x2, "e6d0"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000b80)={0x44, &(0x7f0000000900)={0x0, 0x30, 0xf, "b13f075e28bff79c4b6c06295c4a28"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3m16.862216136s ago: executing program 1 (id=1345): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) readahead(r0, 0x3, 0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r3, 0x10) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, 0x0) write$dsp(r2, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) r4 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r5 = openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) close(r5) close(0xffffffffffffffff) r6 = socket(0x10, 0x2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f00000000c0), 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r7, 0x6, 0x23, &(0x7f0000000280)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd87}, &(0x7f0000000240)=0x40) close_range(r6, r7, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0x8, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x3, 0x2f, 0x0, @empty, @rand_addr=0x3}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r8, 0x89f2, &(0x7f0000000780)={'syztnl2\x00', &(0x7f00000008c0)={'syztnl2\x00', r9, 0x7800, 0x22b384db60457e3a, 0x9, 0x6, {{0x5, 0x4, 0x1, 0x36, 0x14, 0x65, 0x0, 0xee, 0x2f, 0x0, @broadcast, @rand_addr=0x64010100}}}}) syz_open_procfs(0x0, &(0x7f0000000040)='net/udp6\x00') 3m16.764435017s ago: executing program 2 (id=1347): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x80000001, 0x4) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r2, &(0x7f0000000280), &(0x7f0000000a80)=@udp6=r3}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a40)={r2, &(0x7f0000000080), &(0x7f0000001500)=@udp6=r3, 0x1}, 0x20) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) splice(r1, 0x0, r4, 0x0, 0x200006, 0x0) write(r0, &(0x7f00000001c0)='G', 0x1) 3m15.619194694s ago: executing program 2 (id=1350): r0 = syz_open_dev$video4linux(&(0x7f0000000140), 0x3, 0x88000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000000)={0xb, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0x0, 0x5, 0x46d, 0xb012}}, 0x118) write$UHID_INPUT2(r4, &(0x7f0000000d00)={0xc, {0xa, "11ff0420000000000000"}}, 0x10) write$UHID_INPUT2(r4, &(0x7f00000005c0)=ANY=[], 0x1a) unshare(0x22020600) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x3010, 0x4, 0x0, 0x7b0, 0x3, 0x1}) unshare(0x4000400) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000480), 0xa9d6, 0x2) ioctl$vim2m_VIDIOC_STREAMON(r6, 0x40045612, &(0x7f0000000080)=0x2) 3m14.529824928s ago: executing program 1 (id=1351): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40440, 0x100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x200c8100, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7\x00', 0x4) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r4, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf", 0x66) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000)=0x1, 0xfffa) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r4, &(0x7f0000000240)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x9, &(0x7f0000000280)=[{0xc721, 0x3, 0x3}, {0x7f, 0x5, 0xff, 0x16}, {0x19, 0x6, 0x2, 0xb}, {0x5b, 0x0, 0x1, 0x5}, {0x1000, 0x0, 0xbf, 0x3}, {0x8, 0x80, 0x40, 0x3}, {0x6, 0x25, 0x1, 0x1}, {0x3ff, 0x0, 0x3, 0x6}, {0x101, 0x9, 0xff, 0x3}]}) close_range(r5, 0xffffffffffffffff, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r6, 0x4008af00, &(0x7f0000000140)=0x200000000) preadv2(r6, &(0x7f0000000080)=[{&(0x7f0000000000)=""/72, 0x48}], 0x1, 0x0, 0x0, 0x3) 3m12.714015365s ago: executing program 2 (id=1352): openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) epoll_create1(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$xdp(0x2c, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="280100000000000001000000"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@rights={{0x10}}, @rights={{0x10}}], 0x20}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0x1, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0xa2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0x208}}], 0x1, 0x0, 0x0) 3m12.601680027s ago: executing program 1 (id=1354): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x2eb, @mcast2, 0xa}, 0x1c) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0x7, &(0x7f0000000040)=0x1, 0x4) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688a84c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) rename(0x0, &(0x7f00000000c0)='./file0\x00') connect$pppl2tp(r1, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x1, 0x0, 0x0, 0x0, {0xa, 0x4e21, 0xca33, @remote}}}, 0x32) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x6293a, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40845}, 0x4000000) sendmmsg(r1, &(0x7f00000055c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4004c801) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)={0x9c, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x4}]}, 0x9c}}, 0x0) 3m12.540779454s ago: executing program 0 (id=1355): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) unshare(0x14030080) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3be42000) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="10000000", @ANYRES32=0x0, @ANYRES32], 0x48) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x401, @any, 0x9000, 0x1}, 0xe) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="50000000100001060100000000000000000000006400000000000000000000000c00030076786c616e300000240012800c00010076786c616e00000014000280050019000100000005001e000100"], 0x50}}, 0x0) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r2, 0xf505, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c000000780001040200000000000000070000006400000014000180080001006400000008000200c8003bfe72904a6a4b4879732cd8d345544d41fc138a1bbb21f62c0b8e1009b705716a39c5abf4b7325d0290a13ba984857b7c08000000304b00"/117], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000800) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r8 = dup(r7) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r8, 0x84, 0x6, &(0x7f0000000740)={0x0, @in6={{0xa, 0x4e24, 0x5, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x3}}}, 0x84) 3m10.354875605s ago: executing program 2 (id=1359): timer_settime(0x0, 0x1, &(0x7f000006b000)={{0x0, 0x989680}}, 0x0) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xb0090199) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/machinecheck/machinecheck0/ignore_ce\x00', 0x801, 0x48) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000340), r1) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x2}) ioctl(r3, 0x8b32, &(0x7f0000000040)) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000004c0)={'netdevsim0\x00', 0x0}) setsockopt$packet_int(r4, 0x107, 0x14, &(0x7f0000000180)=0x19ca, 0x4) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r4, &(0x7f00000000c0)="3f03fe7feee8140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/machinecheck/machinecheck0/ignore_ce\x00', 0x1, 0x0) write(r6, &(0x7f0000000200)='0', 0x1) socket$nl_sock_diag(0x10, 0x3, 0x4) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="687567653d6ea0a525821fc858ee0f083cc476f9255f7665722c0000"]) r7 = io_uring_setup(0x2a8d, &(0x7f0000000240)={0x0, 0x4017, 0x2, 0x3, 0x1fb, 0x0, r0}) setns(0xc9, 0x0) r8 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r8, 0x114, 0x8, &(0x7f0000000200), 0x4) close_range(r7, 0xffffffffffffffff, 0x0) 2m57.233088001s ago: executing program 32 (id=1355): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) unshare(0x14030080) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3be42000) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="10000000", @ANYRES32=0x0, @ANYRES32], 0x48) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x401, @any, 0x9000, 0x1}, 0xe) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="50000000100001060100000000000000000000006400000000000000000000000c00030076786c616e300000240012800c00010076786c616e00000014000280050019000100000005001e000100"], 0x50}}, 0x0) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r2, 0xf505, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c000000780001040200000000000000070000006400000014000180080001006400000008000200c8003bfe72904a6a4b4879732cd8d345544d41fc138a1bbb21f62c0b8e1009b705716a39c5abf4b7325d0290a13ba984857b7c08000000304b00"/117], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000800) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r8 = dup(r7) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r8, 0x84, 0x6, &(0x7f0000000740)={0x0, @in6={{0xa, 0x4e24, 0x5, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x3}}}, 0x84) 2m57.178994888s ago: executing program 33 (id=1354): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x2eb, @mcast2, 0xa}, 0x1c) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0x7, &(0x7f0000000040)=0x1, 0x4) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688a84c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) rename(0x0, &(0x7f00000000c0)='./file0\x00') connect$pppl2tp(r1, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x1, 0x0, 0x0, 0x0, {0xa, 0x4e21, 0xca33, @remote}}}, 0x32) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x6293a, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40845}, 0x4000000) sendmmsg(r1, &(0x7f00000055c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4004c801) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)={0x9c, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x4}]}, 0x9c}}, 0x0) 2m55.234967894s ago: executing program 34 (id=1359): timer_settime(0x0, 0x1, &(0x7f000006b000)={{0x0, 0x989680}}, 0x0) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xb0090199) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/machinecheck/machinecheck0/ignore_ce\x00', 0x801, 0x48) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000340), r1) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x2}) ioctl(r3, 0x8b32, &(0x7f0000000040)) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000004c0)={'netdevsim0\x00', 0x0}) setsockopt$packet_int(r4, 0x107, 0x14, &(0x7f0000000180)=0x19ca, 0x4) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r4, &(0x7f00000000c0)="3f03fe7feee8140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/machinecheck/machinecheck0/ignore_ce\x00', 0x1, 0x0) write(r6, &(0x7f0000000200)='0', 0x1) socket$nl_sock_diag(0x10, 0x3, 0x4) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="687567653d6ea0a525821fc858ee0f083cc476f9255f7665722c0000"]) r7 = io_uring_setup(0x2a8d, &(0x7f0000000240)={0x0, 0x4017, 0x2, 0x3, 0x1fb, 0x0, r0}) setns(0xc9, 0x0) r8 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r8, 0x114, 0x8, &(0x7f0000000200), 0x4) close_range(r7, 0xffffffffffffffff, 0x0) 2m54.628466619s ago: executing program 4 (id=1367): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x82a00, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl(r1, 0x89e1, &(0x7f00000000c0)='lapb0') socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$loop(&(0x7f00000014c0), 0x4, 0x2) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r2, &(0x7f0000000080)='syz0\x00', 0x1ff) r3 = openat$cgroup(r2, &(0x7f0000000280)='syz0\x00', 0x200002, 0x0) r4 = openat$cgroup_type(r3, &(0x7f0000000040), 0x2, 0x0) write$cgroup_type(r4, &(0x7f00000000c0), 0x9) openat$cgroup_type(r2, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_VDPA_SET_STATUS(0xffffffffffffffff, 0x4001af72, &(0x7f0000000180)=0x8) mount(0x0, &(0x7f0000000000)='./security\x00', &(0x7f0000000040)='securityfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./security/tomoyo/domain_policy\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f000000ad40)={0x2020}, 0x203b) syz_open_dev$video(&(0x7f0000000000), 0x101, 0xab02) 2m53.232584383s ago: executing program 4 (id=1368): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) mkdir(&(0x7f0000000840)='./file0\x00', 0x145) setxattr$security_ima(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000000c0)=@sha1={0x1, "ca216891e220ecfc0c1d3ae6ce7c38427759547c"}, 0x15, 0x1) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0xb6, @ipv4={'\x00', '\xff\xff', @local}, 0xc4ca}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040), 0x3) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "25fd25990fe381b9", "f511161d94f179ecf85eb61b6a4762eb", "1e59ddbe", "06ed010001809f9b"}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x8) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f00000000c0)=0x2, 0x4) sendto$inet6(r1, &(0x7f0000000300)='S', 0xfffffffffffffe94, 0xc000, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f0000000000)=0x2100e6d4, 0x4) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x20, 0x0) 2m52.628488287s ago: executing program 4 (id=1369): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) readahead(r0, 0x3, 0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$XFS_IOC_GETPARENTS_BY_HANDLE(0xffffffffffffffff, 0xc040583f, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r2, 0x10) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, 0x0) write$dsp(r1, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) r3 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) close(r3) close(0xffffffffffffffff) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000280)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd87}, &(0x7f0000000240)=0x40) close_range(0xffffffffffffffff, r4, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0x8, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x3, 0x2f, 0x0, @empty, @rand_addr=0x3}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000780)={'syztnl2\x00', &(0x7f00000008c0)={'syztnl2\x00', r6, 0x7800, 0x22b384db60457e3a, 0x9, 0x6, {{0x5, 0x4, 0x1, 0x36, 0x14, 0x65, 0x0, 0xee, 0x2f, 0x0, @broadcast, @rand_addr=0x64010100}}}}) syz_open_procfs(0x0, &(0x7f0000000040)='net/udp6\x00') 2m50.447276515s ago: executing program 4 (id=1371): socket$inet6(0xa, 0x3, 0x87) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, 0x0, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00'}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="380000003fae0c60700000000040017c00000400fc000c0001803e0006000000", @ANYRES32=0x0, @ANYBLOB="0c000280050023000000000008000700", @ANYRES32=r1, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) get_mempolicy(0x0, 0x0, 0x2, &(0x7f0000240000/0x1000)=nil, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) r3 = add_key(&(0x7f00000001c0)='big_key\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000002240)="d7", 0x1, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r4, 0x26) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r0, 0x0, 0x25, 0xa, @void}, 0x10) 2m50.008293128s ago: executing program 4 (id=1372): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000240)={0x3, &(0x7f0000000000)=[{0x30, 0x0, 0xfd, 0x5ae9}, {0x28, 0x7f, 0x6, 0xfffff00c}, {0x6, 0x4, 0x3, 0x1000}]}, 0x10) sendmmsg$inet(r0, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) 2m49.970918711s ago: executing program 4 (id=1373): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000280)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="020300030c0000000000040000000000030005000000000002000000e00000020000000000000000030006000000000002000000ac141400000000000000000002000100000000000000000000000000020013"], 0x60}, 0x1, 0x7}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r2) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) recvmmsg(r2, &(0x7f0000004480)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000600)=""/66, 0x42}, {&(0x7f0000000180)=""/92, 0x5c}, {&(0x7f0000000200)=""/224, 0xe0}, {&(0x7f0000001700)=""/4096, 0x1000}], 0x4}, 0x3fffff}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0x40018000}], 0x3, 0x2, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$uac1(0x0, 0xfe, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x499, 0x1044, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xec, 0x3, 0x1, 0x7, 0xb0, 0x9, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xa, 0x1e}, [@extension_unit={0x8, 0x24, 0x8, 0x3, 0x7, 0x5, "a7"}, @input_terminal={0xc, 0x24, 0x2, 0x3, 0x101, 0x2, 0x5, 0xed0, 0x4, 0x4}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x10, 0x9ed, 0x7f, "ca988a04c9"}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0xc, 0x1, 0x4, 0x3, "719251ba"}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x6, 0x3, 0x5d, 0x0, "fb9853ebba2f05"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x3, 0x3, 0x12, 0x40, "", "176a"}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x8001, 0x7ff, 0x7, "575f8e85"}, @as_header={0x7, 0x24, 0x1, 0x1, 0x5, 0x3}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x5, 0xf7, 0x3, {0x7, 0x25, 0x1, 0x4, 0x6, 0xb2a}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x2, 0x7, 0x1, 0x3}, @as_header={0x7, 0x24, 0x1, 0x3}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0xa, 0x1, 0x9, 0x42, "8f81604b"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x762, 0xe8, 0x9}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x100, 0x7, 0xac, 0x42}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x5, 0x4, 0x9, {0x7, 0x25, 0x1, 0x8, 0xc, 0x7}}}}}}}}]}}, &(0x7f0000000480)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x300, 0x83, 0x0, 0x1, 0x20, 0x2}, 0x1d, &(0x7f0000000340)={0x5, 0xf, 0x1d, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x34be30f5c450f927, 0x8, 0xe, 0x9, 0x1}, @wireless={0xb, 0x10, 0x1, 0x12, 0x40, 0x1, 0x7, 0x0, 0xdd}, @ptm_cap={0x3}]}, 0x4, [{0x6, &(0x7f0000000380)=@string={0x6, 0x3, "9508a36c"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x1c0a}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x418}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x429}}]}) syz_usb_control_io$uac1(r0, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000100)={{0xfec00000, 0x0, 0x0, 0x7, 0x7, 0x10, 0x3, 0x7, 0x0, 0x8, 0x9}, {0x50000, 0x10000, 0xc, 0x0, 0x2, 0x0, 0xfd, 0x0, 0x7, 0xfd, 0x2}, {0xb000, 0xf066ce738b004ad5, 0xc, 0x0, 0x27, 0xc5, 0x0, 0x0, 0x8, 0x3, 0x40, 0x3}, {0xeeef0000, 0x25000, 0xb, 0x9, 0x1, 0x9, 0x9, 0x7, 0x8, 0xf, 0x4}, {0x80a0000, 0x8080000, 0xb, 0x0, 0x0, 0x6, 0x0, 0x0, 0x8, 0x3f, 0x2}, {0xb000, 0x0, 0x9, 0x5, 0x2, 0x1, 0x1, 0x80, 0x10, 0xff, 0x6, 0xc0}, {0x1eeed1001, 0xeeee0000, 0x3, 0x4, 0x3, 0x0, 0xa1, 0x20, 0x0, 0x0, 0x4}, {0x50000, 0x50000, 0x8, 0x3, 0x0, 0x7, 0x9, 0x40, 0x26, 0x0, 0x1, 0x2}, {0x809fffb, 0x8cc}, {0xdddd1000}, 0xddf8ffd3, 0x0, 0x0, 0x110, 0xd, 0xf801, 0x4, [0x80000004, 0x0, 0x10000, 0xfffffffffffdfffb]}) 2m34.711468457s ago: executing program 35 (id=1373): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000280)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="020300030c0000000000040000000000030005000000000002000000e00000020000000000000000030006000000000002000000ac141400000000000000000002000100000000000000000000000000020013"], 0x60}, 0x1, 0x7}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r2) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) recvmmsg(r2, &(0x7f0000004480)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000600)=""/66, 0x42}, {&(0x7f0000000180)=""/92, 0x5c}, {&(0x7f0000000200)=""/224, 0xe0}, {&(0x7f0000001700)=""/4096, 0x1000}], 0x4}, 0x3fffff}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0x40018000}], 0x3, 0x2, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$uac1(0x0, 0xfe, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x499, 0x1044, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xec, 0x3, 0x1, 0x7, 0xb0, 0x9, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xa, 0x1e}, [@extension_unit={0x8, 0x24, 0x8, 0x3, 0x7, 0x5, "a7"}, @input_terminal={0xc, 0x24, 0x2, 0x3, 0x101, 0x2, 0x5, 0xed0, 0x4, 0x4}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x10, 0x9ed, 0x7f, "ca988a04c9"}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0xc, 0x1, 0x4, 0x3, "719251ba"}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x6, 0x3, 0x5d, 0x0, "fb9853ebba2f05"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x3, 0x3, 0x12, 0x40, "", "176a"}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x8001, 0x7ff, 0x7, "575f8e85"}, @as_header={0x7, 0x24, 0x1, 0x1, 0x5, 0x3}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x5, 0xf7, 0x3, {0x7, 0x25, 0x1, 0x4, 0x6, 0xb2a}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x2, 0x7, 0x1, 0x3}, @as_header={0x7, 0x24, 0x1, 0x3}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0xa, 0x1, 0x9, 0x42, "8f81604b"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x762, 0xe8, 0x9}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x100, 0x7, 0xac, 0x42}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x5, 0x4, 0x9, {0x7, 0x25, 0x1, 0x8, 0xc, 0x7}}}}}}}}]}}, &(0x7f0000000480)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x300, 0x83, 0x0, 0x1, 0x20, 0x2}, 0x1d, &(0x7f0000000340)={0x5, 0xf, 0x1d, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x34be30f5c450f927, 0x8, 0xe, 0x9, 0x1}, @wireless={0xb, 0x10, 0x1, 0x12, 0x40, 0x1, 0x7, 0x0, 0xdd}, @ptm_cap={0x3}]}, 0x4, [{0x6, &(0x7f0000000380)=@string={0x6, 0x3, "9508a36c"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x1c0a}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x418}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x429}}]}) syz_usb_control_io$uac1(r0, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000100)={{0xfec00000, 0x0, 0x0, 0x7, 0x7, 0x10, 0x3, 0x7, 0x0, 0x8, 0x9}, {0x50000, 0x10000, 0xc, 0x0, 0x2, 0x0, 0xfd, 0x0, 0x7, 0xfd, 0x2}, {0xb000, 0xf066ce738b004ad5, 0xc, 0x0, 0x27, 0xc5, 0x0, 0x0, 0x8, 0x3, 0x40, 0x3}, {0xeeef0000, 0x25000, 0xb, 0x9, 0x1, 0x9, 0x9, 0x7, 0x8, 0xf, 0x4}, {0x80a0000, 0x8080000, 0xb, 0x0, 0x0, 0x6, 0x0, 0x0, 0x8, 0x3f, 0x2}, {0xb000, 0x0, 0x9, 0x5, 0x2, 0x1, 0x1, 0x80, 0x10, 0xff, 0x6, 0xc0}, {0x1eeed1001, 0xeeee0000, 0x3, 0x4, 0x3, 0x0, 0xa1, 0x20, 0x0, 0x0, 0x4}, {0x50000, 0x50000, 0x8, 0x3, 0x0, 0x7, 0x9, 0x40, 0x26, 0x0, 0x1, 0x2}, {0x809fffb, 0x8cc}, {0xdddd1000}, 0xddf8ffd3, 0x0, 0x0, 0x110, 0xd, 0xf801, 0x4, [0x80000004, 0x0, 0x10000, 0xfffffffffffdfffb]}) 8.942763331s ago: executing program 8 (id=1806): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="780000002600010126bd7000fcffffff1a"], 0x78}, 0x1, 0x0, 0x0, 0x1}, 0x0) 8.849016752s ago: executing program 8 (id=1807): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0x5]}, 0x8, 0x0) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xb04, 0x0, 0x2, 0x158}, &(0x7f0000000100), &(0x7f0000000280), &(0x7f0000000140)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, 0x0, &(0x7f0000000180)={0x0, 0xae0c, 0x800, 0x1, 0x253}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1000, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f0, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) ioctl$CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, &(0x7f0000000040)={'\be \x00', 0x0, 0x5, 0x2, 0x0, 0xc, "00000000020000000000002100", '\x00', "0052008f", '\x00', ["fdfeffbf84a438dfc5d5c010", "0000000000000400", "0000efffffffffffbfff00", "000003cefd70f14003556000"]}) bind$rxrpc(0xffffffffffffffff, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x1c, {0x2, 0x0, @multicast2}}, 0x24) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) ioctl$CEC_TRANSMIT(r2, 0xc0386105, &(0x7f0000000100)={0xfffffffffffffff7, 0xffffffffffffffff, 0x2, 0x9, 0x4, 0x7fff, "16b0bc450cfc47961ed5d8167d4f7865", 0x1, 0x52, 0x1, 0x49, 0x9, 0x9, 0xd}) dup3(r1, r0, 0x0) 7.712429061s ago: executing program 8 (id=1813): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) getsockopt$llc_int(r0, 0x10c, 0x5, 0x0, &(0x7f0000000040)) 5.467272587s ago: executing program 8 (id=1821): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}}, {}, [@jmp={0x5, 0x1, 0x2, 0x0, 0x5, 0xfffffffffffffff8, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, 0x0, 0x9, 0x0, 0x0, 0x41000, 0x82}, 0x94) 5.038190521s ago: executing program 7 (id=1823): syz_open_dev$sndctrl(&(0x7f0000000040), 0x1, 0x100) syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x11) 4.872980086s ago: executing program 7 (id=1825): futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x3, 0x802, 0x0, &(0x7f0000000040), 0x0) 4.871468233s ago: executing program 8 (id=1826): mlock2(&(0x7f0000198000/0x3000)=nil, 0x3000, 0x1) r0 = socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000353000/0x2000)=nil, 0x2000, 0x2000000, 0x500, 0x2000) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) r4 = gettid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x6, 0x7fc00100}]}) cachestat(0xffffffffffffffff, 0x0, 0x0, 0x0) tkill(r4, 0x7) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000100)}) clock_gettime(0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 4.792519768s ago: executing program 7 (id=1827): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/nvmet/ports/1/addr_traddr\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)='127.0.0.1', 0x9) 4.48161717s ago: executing program 7 (id=1828): r0 = syz_open_dev$video(0x0, 0x8, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x98f910, 0x1000, '\x00', @p_u32=&(0x7f0000000200)=0x81}}) 4.165944712s ago: executing program 3 (id=1831): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) getsockopt$llc_int(r0, 0x10c, 0x5, 0x0, &(0x7f0000000040)) 4.165683761s ago: executing program 7 (id=1832): r0 = syz_usb_connect(0x2, 0xb3, &(0x7f0000000000)=ANY=[], &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000340)={0x40, 0x18, 0x32, "ca47772c886563859a47111214be7d0905cb70bbe37b0bec244b6ed344567af0c523673c41d2dfc40957674ddb958687e57f"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.678815607s ago: executing program 8 (id=1833): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a000008048002000905811765"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_disconnect(r0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) read$char_usb(r2, 0x0, 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r3, 0x0, 0x0) 3.238481728s ago: executing program 3 (id=1835): syz_open_dev$sndctrl(&(0x7f0000000040), 0x1, 0x100) syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x11) 3.228438809s ago: executing program 6 (id=1837): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) recvfrom$inet(0xffffffffffffffff, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r4, 0x701, 0x10000, 0x0, {0x26}}, 0x14}}, 0x0) 3.105819953s ago: executing program 3 (id=1838): mkdir(&(0x7f0000000180)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./config\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/functions/mass_storage.0/lun.0/file\x00', 0x2, 0x0) write(r0, &(0x7f0000000700)="73cc5e74d9", 0x5) 2.027113782s ago: executing program 6 (id=1839): setns(0xc9, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f0000000580)={0xa, 0x4e23, 0x1, @loopback}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x8020) 1.983091674s ago: executing program 6 (id=1840): mkdir(&(0x7f0000000040)='./file0\x00', 0x80) write(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x3c201, 0x6) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x8, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_sctp(0x2, 0x1, 0x84) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e06000d08"], 0x9) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) 1.916001196s ago: executing program 5 (id=1841): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x4007, 0xffffffff, 0x8003}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001040)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x404c8f0}, 0x4890) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f00000005c0)="bad330fbc93f6d78040000ea0756", 0xe, 0x24044041, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @multicast}, 0x14) 1.858055234s ago: executing program 3 (id=1842): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000380)='100000', 0x6) r1 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r1, &(0x7f0000000200)='1', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r2, &(0x7f0000000280)='0', 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) read$FUSE(r1, &(0x7f0000000680)={0x2020}, 0x2020) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x21, 0x2, 0x10000000000002) sendmmsg(r3, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x18, 0xe000}, 0x5}], 0x1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) unshare(0x42000000) 1.730285355s ago: executing program 5 (id=1843): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x80, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x41, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @val={0x4, 0x6, {0x5, 0xc, 0x1, 0x40}}, @void, @void, @void, @void, @void, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0x1, 0x1, 0x0, 0x2, 0x6, 0x29}}, @void}}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_AUTH_TYPE={0x8}, @crypto_settings=[@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_PREAUTH={0x4}]]}, 0x80}}, 0x0) 1.676409738s ago: executing program 3 (id=1844): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r4 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r4, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r4, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x8a5, 0x96, 0x1, 0x1, 0xd59f80, 0x9, 0x6, 0x19ef, 0x3, 0x4, 0x27ff, 0x2800, 0x2, 0xbb6, 0x0, 0x1c, {0x80008, 0xff7ffbff}, 0xd0, 0x9}}) 1.565662747s ago: executing program 5 (id=1845): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x3}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 1.53841398s ago: executing program 5 (id=1846): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)={0x38, r1, 0x1, 0xfffffffd, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xff8e}]}, 0x38}}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x51}, 0x4000810) 1.430904417s ago: executing program 5 (id=1847): syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000200)={0xa, 0xf3, 0x14, @mcast1, 0x9}, 0x1c) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) migrate_pages(0x0, 0x71, 0x0, 0xffffffffffffffff) syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x8, 0x100, 0x3}, &(0x7f00000000c0), &(0x7f0000000100), 0x0) syz_open_dev$ublk_chdev(&(0x7f0000002000), 0x0, 0x2) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0) read$FUSE(r1, &(0x7f0000002040)={0x2020}, 0x2020) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0}) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) lseek(r3, 0x851, 0x0) 1.333443544s ago: executing program 6 (id=1848): setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) r0 = socket(0xa, 0x3, 0x87) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'dummy0\x00'}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, 0x0) 733.778348ms ago: executing program 7 (id=1849): r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = dup(r0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) splice(r5, 0x0, r7, 0x0, 0x88000cc, 0x0) fcntl$setpipe(r6, 0x407, 0x100004) write$eventfd(r6, &(0x7f0000000240), 0xffffff14) write$UHID_INPUT(r4, &(0x7f0000001040)={0xf, {"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", 0xf8d}}, 0x96d) 707.113082ms ago: executing program 3 (id=1850): sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x20008088) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000009b768405e0483020b9901e40201090227000100000000090400fb015cc7aa00090509"], 0x0) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x3, 0x101000) syz_usb_disconnect(r0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x1, 0x1, 0x107fff, 0x1, 0x4, 0x89, 0x0, 0xffb, 0x7, 0xb6b, 0x0, 0x4, 0x1, 0x3, 0x9, 0xff, 0x1000, 0xc, 0x3, 0x3, 0x80000001, 0xfffffffa, 0x0, 0x1, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x9, 0x3, 0x63c, 0xe, 0x6, 0x2, 0x6, 0x1bfa, 0xb, 0x40, 0x40bed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x3, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xa, 0x1fa0860a, 0x7, 0x100aa, 0x7f, 0x2, 0x180000, 0x4003, 0x8b, 0x5, 0x2af, 0x3, 0x5, 0x2, 0x1, 0x9, 0x4, 0x7, 0x1, 0x0, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10000, 0x3f6, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x0, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x4, 0x20004, 0xc50, 0x2, 0xb, 0x2, 0xd9a, 0xc8, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x5, 0x1fc, 0x9, 0xffffffff]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 169.031796ms ago: executing program 5 (id=1851): r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prlimit64(r0, 0x0, &(0x7f00000000c0)={0x8, 0x7f}, &(0x7f0000000200)) 167.622839ms ago: executing program 6 (id=1852): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000012c0), r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000540)=[@ioring_restriction_register_op={0x0, 0x38fc2f1a6518ef8a}], 0x1) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000400)={'filter\x00', 0x4}, 0x68) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xe, 0x0, &(0x7f00000003c0)="e2ffffffff4df786ffffffd30000", 0x0, 0x400, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x1}, 0x50) timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4}, 0x0) r4 = syz_open_dev$video(&(0x7f0000000000), 0x8, 0x0) ioctl$VIDIOC_G_STD(r4, 0x80085617, &(0x7f0000000080)) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) sysfs$3(0x3) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000500)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) dup(0xffffffffffffffff) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000300)=0x3ff, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r5 = socket(0x2, 0x800, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) r6 = add_key$fscrypt_v1(&(0x7f0000000700), &(0x7f0000000740)={'fscrypt:', @desc3}, &(0x7f0000000780)={0x0, "3215ee5299c6f92fe43dd9c925e421d383d95c7d40a0dc64eb3897e609000000cd1ae9cfd5bb7cd51e2a1550b5699a6fffc50001af1f91341326b8cb0100", 0x12}, 0x24, 0xfffffffffffffffe) keyctl$chown(0x4, r6, 0xee01, 0xffffffffffffffff) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001640)=@newqdisc={0x888, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x85c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x59}, {0x12, 0x2, 0x0, 0x401, 0x7ffd, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_PARMS={0x28, 0x1, {{0x7, 0x1, 0x4, 0x5, 0x9, 0x4}, {0x4, 0x0, 0x1, 0x9, 0x0, 0xba43}, 0x4, 0x80000001, 0xeb9}}, @TCA_TBF_PTAB={0x404, 0x3, [0x3, 0x8, 0x7, 0x7ff, 0x2, 0x1, 0x5, 0x7, 0x400, 0x8000, 0x7, 0x5, 0x4, 0x4, 0x0, 0x6, 0x8, 0xe1, 0x7, 0xa, 0x7, 0x2a, 0xc10, 0x7, 0xc, 0x8, 0x8, 0x9694, 0x3, 0x4, 0x1, 0x9, 0x0, 0x401, 0x1000, 0x3, 0x6, 0x200, 0x5, 0x3, 0x40, 0x1ff, 0xd, 0x6, 0xff, 0x6, 0x7fffffff, 0xfffffff7, 0x8, 0x400, 0x7, 0x10001, 0x3, 0x3ff, 0x3, 0x0, 0x6, 0x100, 0x22, 0xfffffffd, 0xfffffffd, 0xcfbd, 0xc08, 0x3, 0x1, 0x7fff, 0xffffffc4, 0x5, 0x3, 0x4, 0x9, 0xf, 0xa, 0x2, 0x3a8e, 0x2, 0xe, 0x3, 0x2, 0x7, 0x0, 0x8, 0x0, 0x42, 0x1ff, 0x0, 0x3, 0x10000, 0x2, 0x4, 0x401, 0x9, 0x1, 0x4, 0x20400000, 0x8, 0xcc1, 0x4, 0x9, 0x7, 0x4, 0x8, 0xe, 0x7, 0x9, 0x7ff, 0x5, 0x7, 0x6, 0x8, 0x1, 0x5aa, 0x1, 0x7ff, 0x100, 0xfffffffa, 0x81, 0x9, 0xfffffff3, 0x78c, 0x1000, 0x101, 0x8, 0x94, 0x2, 0x3, 0x3, 0x0, 0x7e58, 0x0, 0x800, 0x2, 0x40, 0x2, 0x4, 0x280, 0x22c, 0x101, 0xcdc, 0x7f, 0x7, 0x4, 0xd, 0x3ff3, 0x4, 0x1ff, 0x5, 0x1, 0x1, 0x7, 0x0, 0xfff, 0x8, 0xa86a, 0x7ff, 0xfffffffa, 0x9, 0x50, 0x5, 0x3, 0x0, 0x0, 0x0, 0x4, 0x40, 0xff36, 0xb65, 0x800000, 0x401, 0x3, 0x1, 0x1, 0xe08, 0x1ff, 0x1685, 0x10, 0xc, 0x261, 0x6, 0x8f8, 0xffff, 0x7f, 0x9, 0x2, 0x8001, 0x3ff, 0x5, 0x0, 0x10001, 0x7, 0x49aa, 0x1000, 0x5, 0x8, 0x10001, 0x7, 0xff, 0x74, 0xe, 0x3, 0xa29e, 0xffffffff, 0x41, 0x5, 0x6, 0x800, 0x71, 0x0, 0x3, 0x8, 0x1, 0x9, 0x8000, 0x10001, 0x2, 0x1, 0x80, 0xf, 0xfffffffb, 0x0, 0x7, 0x2, 0x6, 0xeb, 0xc88, 0x6, 0x4, 0xfa, 0x6, 0x9, 0x7, 0x1, 0x101, 0x7, 0xffff62c0, 0x3, 0x7, 0x1d, 0x2, 0x3, 0x0, 0x7f, 0x7fffffff, 0x3, 0x9a1f, 0x2, 0x36, 0x9, 0x5, 0x3, 0xfffffff8, 0x5, 0x9, 0xff, 0x8, 0x7]}, @TCA_TBF_RTAB={0x404, 0x2, [0x3, 0x3, 0x8, 0x6, 0x0, 0x7, 0x6, 0x82, 0x4, 0x8, 0x4, 0x3ff, 0x0, 0x7ff, 0x7, 0x4, 0xb, 0x553, 0x5fb5, 0x4, 0x800, 0x9, 0x3, 0x9, 0x28d756c, 0x101, 0x1, 0x9, 0x0, 0x4, 0x3, 0x6, 0x8000, 0x9, 0x80000001, 0xc0000000, 0x1, 0x80000000, 0x180, 0xaa7, 0x8720, 0xb7e, 0x7, 0x7fff, 0x8, 0x100, 0x6, 0x10000, 0x9, 0x5, 0x2, 0xe, 0x3, 0x1, 0x6, 0xad6, 0xa1, 0x1d9, 0x26, 0xffffa6ef, 0x9, 0xf158, 0x0, 0x0, 0x2, 0x8, 0x6ab7, 0x8, 0xe3, 0x7fffffff, 0x1, 0x227f, 0x6, 0x6, 0x0, 0x8, 0xffffffff, 0x3, 0x0, 0xfff, 0x9, 0x5, 0x10001, 0xf, 0xa, 0xa0, 0xde, 0x8, 0x8, 0x7, 0x2, 0x8001, 0x8, 0x2, 0xff, 0x8b59, 0x6358, 0x80000001, 0x7ff, 0xe, 0x10000, 0x1ff, 0x9, 0x5a, 0x7, 0xb, 0x9, 0xf, 0x6, 0xfffffffa, 0x2, 0xd, 0x391b, 0x0, 0x3, 0x3, 0x8001, 0x2, 0x3ff, 0xfffffffe, 0x80000001, 0x7951d9b2, 0xe3b, 0x7, 0x2, 0xfffffffe, 0x1, 0xb86b, 0x6, 0x7da, 0x1, 0x0, 0xe65, 0x3, 0x8, 0x44, 0x1, 0x10001, 0x7, 0x9, 0x1, 0x1, 0x6, 0xfffff069, 0x7fff, 0x44, 0x8, 0xfffff001, 0x7, 0x56, 0xd, 0x100, 0x10, 0x703cc9c7, 0x7, 0x7, 0xd86, 0x5, 0x6, 0x4, 0x4, 0x9, 0x3, 0x0, 0x5, 0xfffffffd, 0xaac, 0xa, 0x6, 0x5, 0x7, 0x8, 0x2, 0x2, 0xb0d, 0xecad, 0x0, 0x9, 0x8, 0xe8a1, 0x0, 0x3, 0x0, 0x0, 0x6, 0x2, 0x7fffffff, 0xfffffff7, 0x3, 0x8, 0xd83, 0x9, 0x5, 0x9, 0xb457, 0x6, 0x6, 0x5, 0xc, 0x0, 0x4, 0xb72, 0x5, 0x8, 0x0, 0xe, 0x2, 0x0, 0x9, 0x7, 0x1, 0x5, 0x1000, 0x100, 0x2, 0x5, 0x3, 0x8, 0x80000001, 0x1000, 0x3, 0x0, 0x8, 0x74, 0xfffffffe, 0x6, 0xfff, 0x10000, 0x0, 0x9, 0xabf5, 0x8, 0x7fffffff, 0x6, 0x6, 0x5, 0x200, 0x5, 0xff, 0x9, 0x3, 0x6, 0x4, 0xffffffff, 0xb2, 0x7, 0x5, 0x8, 0x9, 0x8, 0x7fffffff, 0x2, 0x8, 0x8, 0x0, 0x7fffffff]}]}}]}, 0x888}}, 0x44080) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f0000000140)={'ip6_vti0\x00', 0x0, 0x0, 0x78, 0x2, 0x8, 0x10, @mcast1, @rand_addr=' \x01\x00', 0x1, 0x700, 0xc9, 0x9}}) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x55}, 0xc010) syz_open_dev$sndctrl(0x0, 0xaa, 0x80000) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) 0s ago: executing program 6 (id=1853): syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_trie\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000dc0)={0x38, 0x5, 0x8, 0x9, 0x0, 0x9, 0x0, 0xaa, 0xfa11, 0xffffffff}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="640000000206010100000000000000000000000005000400000000000900020073797a30000000000500010007000000050005000a000000140007800800114000000000080012400000ffff16000300686173683a6e6574"], 0x64}}, 0x4008000) kernel console output (not intermixed with test programs): b 8-1: Using ep0 maxpacket: 32 [ 635.797532][ T9977] usb 8-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 635.917274][ T9977] usb 8-1: config 0 has an invalid interface number: 12 but max is 0 [ 636.021168][ T9977] usb 8-1: config 0 has no interface number 0 [ 636.080471][ T9977] usb 8-1: config 0 interface 12 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 636.153767][ T9977] usb 8-1: config 0 interface 12 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 636.216985][ T9977] usb 8-1: config 0 interface 12 has no altsetting 0 [ 636.279624][ T9977] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 636.358010][ T9977] usb 8-1: Product: syz [ 636.392627][ T9977] usb 8-1: Manufacturer: syz [ 636.447740][ T9977] usb 8-1: SerialNumber: syz [ 636.828225][ T10] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 636.873840][ C0] raw-gadget.1 gadget.8: ignoring, device is not running [ 636.933461][ T9977] usb 8-1: config 0 descriptor?? [ 636.986371][ T9977] f81534 8-1:0.12: unsupported endpoint max packet size [ 637.007063][ T10] usb 9-1: device descriptor read/64, error -32 [ 637.169149][ T30] audit: type=1400 audit(1787136584.364:1139): avc: denied { write } for pid=11752 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 637.286759][ T10] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 637.294346][ T30] audit: type=1400 audit(1787136584.484:1140): avc: denied { write } for pid=11791 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 637.331330][ T5710] IPVS: starting estimator thread 0... [ 637.333001][T11772] bridge0: entered promiscuous mode [ 637.342677][T11772] bridge0: entered allmulticast mode [ 637.376511][ T9977] usb 8-1: USB disconnect, device number 2 [ 637.382432][ T5260] 8021q: adding VLAN 0 to HW filter on device eth12 [ 637.409253][ T30] audit: type=1400 audit(1787136584.604:1141): avc: denied { mount } for pid=11797 comm="syz.3.1436" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 637.448873][T11796] IPVS: using max 45 ests per chain, 108000 per kthread [ 637.487557][ T10] usb 9-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 637.503272][ T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 637.524505][ T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 637.552397][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 637.578666][ T10] usb 9-1: config 0 descriptor?? [ 637.605365][T11805] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 637.643476][ T1212] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01) [ 637.662624][ T1212] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 637.682567][ T30] audit: type=1400 audit(1787136584.874:1142): avc: denied { unmount } for pid=5597 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 637.704510][T11806] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 637.714692][T10201] wlan1: authenticated [ 637.732046][ T30] audit: type=1400 audit(1787136584.914:1143): avc: denied { setattr } for pid=11810 comm="syz.3.1438" name="midiC2D0" dev="devtmpfs" ino=1300 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 637.756260][ T5831] wlan1: associate with 08:02:11:00:00:00 (try 1/3) [ 637.767293][ T30] audit: type=1400 audit(1787136584.964:1144): avc: denied { bind } for pid=11810 comm="syz.3.1438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 637.811061][ T3309] wlan1: RX AssocResp from 08:02:11:00:00:00 (capab=0x1 status=0 aid=1) [ 637.811306][T11805] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 637.828628][ T3309] wlan1: associated [ 637.836547][ T30] audit: type=1400 audit(1787136584.964:1145): avc: denied { node_bind } for pid=11810 comm="syz.3.1438" saddr=224.0.0.1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 637.849912][T11815] futex_wake_op: syz.3.1439 tries to shift op by 144; fix this program [ 637.903594][ T30] audit: type=1400 audit(1787136585.094:1146): avc: denied { write } for pid=11799 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 637.905397][T11815] tmpfs: Bad value for 'huge' [ 638.022784][ T30] audit: type=1400 audit(1787136585.214:1147): avc: denied { write } for pid=11818 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 638.155171][T11824] loop2: detected capacity change from 0 to 2640 [ 638.211977][T11824] buffer_io_error: 320 callbacks suppressed [ 638.212001][T11824] Buffer I/O error on dev loop2, logical block 0, lost async page write [ 638.229444][T11824] Buffer I/O error on dev loop2, logical block 1, lost async page write [ 638.240051][T11824] Buffer I/O error on dev loop2, logical block 2, lost async page write [ 638.249372][T11824] Buffer I/O error on dev loop2, logical block 3, lost async page write [ 638.259011][T11824] Buffer I/O error on dev loop2, logical block 4, lost async page write [ 638.269044][T11824] Buffer I/O error on dev loop2, logical block 5, lost async page write [ 638.278587][T11824] Buffer I/O error on dev loop2, logical block 6, lost async page write [ 638.288383][T11824] Buffer I/O error on dev loop2, logical block 7, lost async page write [ 638.300277][T11824] Buffer I/O error on dev loop2, logical block 8, lost async page write [ 638.309099][T11824] Buffer I/O error on dev loop2, logical block 9, lost async page write [ 638.590797][ T10] usb 9-1: language id specifier not provided by device, defaulting to English [ 639.187894][ T10] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:256C:006D.0026/input/input18 [ 639.841975][ T30] audit: type=1400 audit(1787136586.624:1148): avc: denied { block_suspend } for pid=11832 comm="syz.3.1444" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 639.871135][T11836] bridge0: port 3(syz_tun) entered blocking state [ 639.890382][T11836] bridge0: port 3(syz_tun) entered disabled state [ 639.903389][T11836] syz_tun: entered allmulticast mode [ 639.906758][ T9979] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 640.030230][ T10] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:256C:006D.0026/input/input19 [ 640.046159][T11836] syz_tun: entered promiscuous mode [ 640.128140][T11836] bridge0: port 3(syz_tun) entered blocking state [ 640.134664][T11836] bridge0: port 3(syz_tun) entered forwarding state [ 640.220422][ T9979] usb 7-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 640.233153][ T10] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:256C:006D.0026/input/input20 [ 640.356182][ T9979] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 640.386235][ T9979] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 640.396252][ T9979] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 640.439264][ T10] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:256C:006D.0026/input/input21 [ 640.485433][ T9979] usb 7-1: config 0 descriptor?? [ 640.552131][ T10] uclogic 0003:256C:006D.0026: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.8-1/input0 [ 640.641540][ T10] usb 9-1: USB disconnect, device number 3 [ 640.838202][ T5605] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 640.917129][T11863] loop2: detected capacity change from 0 to 2640 [ 640.932689][T11858] fido_id[11858]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/9-1/report_descriptor': No such file or directory [ 641.096384][ T5605] usb 4-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 641.214473][ T5605] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 641.320486][ T5605] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 641.383010][ T9979] usb 7-1: language id specifier not provided by device, defaulting to English [ 641.511130][ T5605] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 641.816848][ T5605] cxacru 4-1:1.0: usbatm_usb_probe: bind failed: -19! [ 641.926576][ T9979] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:256C:006D.0027/input/input22 [ 641.980377][ T1212] usb 4-1: USB disconnect, device number 30 [ 642.183639][ T9979] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:256C:006D.0027/input/input23 [ 642.276504][ T30] audit: type=1400 audit(1787136589.464:1149): avc: denied { write } for pid=11850 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 642.321336][ T9979] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:256C:006D.0027/input/input24 [ 642.378914][ T5710] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 642.415256][ T9979] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:256C:006D.0027/input/input25 [ 642.531030][ T9979] uclogic 0003:256C:006D.0027: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.6-1/input0 [ 642.650106][ T9979] usb 7-1: USB disconnect, device number 4 [ 642.673214][ T5710] usb 8-1: unable to get BOS descriptor or descriptor too short [ 642.696976][ T1212] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 642.721760][ T5710] usb 8-1: New USB device found, idVendor=061c, idProduct=c0a4, bcdDevice=ed.f2 [ 642.746258][ T30] audit: type=1400 audit(1787136589.934:1150): avc: denied { write } for pid=11880 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 642.805517][ T5710] usb 8-1: config 16 has an invalid interface number: 80 but max is 0 [ 642.822947][ T5710] usb 8-1: config 16 has no interface number 0 [ 642.831267][T11882] fido_id[11882]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/report_descriptor': No such file or directory [ 642.853133][ T5710] usb 8-1: config 16 interface 80 altsetting 129 has an endpoint descriptor with address 0xEA, changing to 0x8A [ 642.883710][ T5710] usb 8-1: config 16 interface 80 altsetting 129 endpoint 0x8A has invalid maxpacket 1024, setting to 64 [ 642.927210][ T1212] usb 9-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 643.020965][ T5710] usb 8-1: config 16 interface 80 altsetting 129 endpoint 0xC has invalid maxpacket 512, setting to 64 [ 643.032610][ T1212] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 643.043662][ T5710] usb 8-1: config 16 interface 80 has no altsetting 0 [ 643.050507][ T1212] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 643.060653][ T1212] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 643.070501][ T5710] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 643.078714][ T5710] usb 8-1: Product: syz [ 643.082962][ T5710] usb 8-1: Manufacturer: syz [ 643.094443][ T5710] usb 8-1: SerialNumber: syz [ 643.112718][ T1212] usb 9-1: config 0 descriptor?? [ 643.128747][ T5260] 8021q: adding VLAN 0 to HW filter on device eth13 [ 643.381264][ T5710] usb 8-1: USB disconnect, device number 3 [ 643.596738][T10628] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 643.606843][ T9979] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 643.606962][ T30] audit: type=1400 audit(1787136590.804:1151): avc: denied { write } for pid=11901 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 643.697547][ T30] audit: type=1400 audit(1787136590.884:1152): avc: denied { write } for pid=11913 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 643.757617][T10628] usb 6-1: New USB device found, idVendor=0c70, idProduct=f00b, bcdDevice= 0.00 [ 643.758575][ T9979] usb 7-1: New USB device found, idVendor=0c70, idProduct=f00b, bcdDevice= 0.00 [ 643.767095][ T1212] usb 9-1: language id specifier not provided by device, defaulting to English [ 643.778105][ T9979] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 643.794502][T10628] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 643.800584][ T9979] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 643.810393][T10628] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 643.820210][ T9979] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 643.822743][ T9979] usb 7-1: config 0 descriptor?? [ 643.842812][ T5260] 8021q: adding VLAN 0 to HW filter on device eth14 [ 643.854336][T10628] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 643.904201][T10628] usb 6-1: config 0 descriptor?? [ 644.217476][ T1212] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:256C:006D.0028/input/input26 [ 644.690583][T10628] hid_parser_main: 104 callbacks suppressed [ 644.690606][T10628] aquacomputer_d5next 0003:0C70:F00B.002A: unknown main item tag 0x0 [ 644.706100][T10628] aquacomputer_d5next 0003:0C70:F00B.002A: unknown main item tag 0x0 [ 644.714994][T10628] aquacomputer_d5next 0003:0C70:F00B.002A: unknown main item tag 0x0 [ 644.723336][T10628] aquacomputer_d5next 0003:0C70:F00B.002A: unknown main item tag 0x0 [ 644.725715][T11896] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 644.731518][T10628] aquacomputer_d5next 0003:0C70:F00B.002A: unknown main item tag 0x0 [ 644.731550][T10628] aquacomputer_d5next 0003:0C70:F00B.002A: unknown main item tag 0x0 [ 644.731574][T10628] aquacomputer_d5next 0003:0C70:F00B.002A: unknown main item tag 0x0 [ 644.731596][T10628] aquacomputer_d5next 0003:0C70:F00B.002A: unknown main item tag 0x0 [ 644.731619][T10628] aquacomputer_d5next 0003:0C70:F00B.002A: unknown main item tag 0x0 [ 644.731641][T10628] aquacomputer_d5next 0003:0C70:F00B.002A: unknown main item tag 0x0 [ 644.734090][T10628] aquacomputer_d5next 0003:0C70:F00B.002A: hidraw0: USB HID v0.20 Device [HID 0c70:f00b] on usb-dummy_hcd.5-1/input0 [ 644.767392][ T9979] aquacomputer_d5next 0003:0C70:F00B.0029: hidraw1: USB HID v0.20 Device [HID 0c70:f00b] on usb-dummy_hcd.6-1/input0 [ 644.829440][T11896] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 644.850369][T11900] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 645.009720][T11900] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 645.030426][ T1212] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:256C:006D.0028/input/input27 [ 645.064639][ T1212] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:256C:006D.0028/input/input28 [ 645.423481][T11896] netlink: 'syz.6.1455': attribute type 12 has an invalid length. [ 645.450546][T11896] netlink: 'syz.6.1455': attribute type 29 has an invalid length. [ 645.499627][T11896] netlink: 148 bytes leftover after parsing attributes in process `syz.6.1455'. [ 645.534032][T11896] netlink: 'syz.6.1455': attribute type 3 has an invalid length. [ 645.541875][T11896] netlink: 35 bytes leftover after parsing attributes in process `syz.6.1455'. [ 645.570456][ T1212] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:256C:006D.0028/input/input29 [ 645.598145][T11944] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 645.899214][T11944] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 646.760728][ T30] audit: type=1400 audit(1787136593.734:1153): avc: denied { write } for pid=11917 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 648.267823][ T9979] usb 7-1: USB disconnect, device number 5 [ 648.277122][ T5710] usb 6-1: USB disconnect, device number 3 [ 648.784528][ T1212] uclogic 0003:256C:006D.0028: input,hidraw2: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.8-1/input0 [ 648.825825][ T1212] usb 9-1: USB disconnect, device number 4 [ 648.899602][ T30] audit: type=1400 audit(1787136596.094:1154): avc: denied { write } for pid=11957 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 649.257795][ T5260] 8021q: adding VLAN 0 to HW filter on device eth15 [ 650.731989][ T9979] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 650.761547][T11960] fido_id[11960]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/9-1/report_descriptor': No such file or directory [ 650.918125][ T9979] usb 7-1: Using ep0 maxpacket: 32 [ 650.947526][ T9979] usb 7-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 650.995648][ T9979] usb 7-1: config 0 has an invalid interface number: 12 but max is 0 [ 651.023323][ T9979] usb 7-1: config 0 has no interface number 0 [ 651.070441][ T9979] usb 7-1: config 0 interface 12 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 651.100142][ T9979] usb 7-1: config 0 interface 12 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 651.110757][ T9979] usb 7-1: config 0 interface 12 has no altsetting 0 [ 651.120061][ T9979] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 651.128209][ T9979] usb 7-1: Product: syz [ 651.132436][ T9979] usb 7-1: Manufacturer: syz [ 651.139556][ T9979] usb 7-1: SerialNumber: syz [ 651.160615][ T9979] usb 7-1: config 0 descriptor?? [ 651.184118][ T9979] f81534 7-1:0.12: unsupported endpoint max packet size [ 651.200766][T11976] jffs2: notice: (11976) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 651.238374][ T30] audit: type=1400 audit(1787136598.434:1155): avc: denied { write } for pid=11977 comm="syz.3.1470" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 651.501185][ T30] audit: type=1400 audit(1787136598.694:1156): avc: denied { write } for pid=11969 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 651.517063][T11985] bond10: Removing last arp target with arp_interval on [ 651.602679][T11985] bond10: entered promiscuous mode [ 651.613366][ T30] audit: type=1400 audit(1787136598.804:1157): avc: denied { write } for pid=11994 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 651.628415][T11985] bond10: entered allmulticast mode [ 651.686378][T11985] 8021q: adding VLAN 0 to HW filter on device bond10 [ 651.757960][ T9979] usb 7-1: USB disconnect, device number 6 [ 652.537864][ T9979] IPVS: starting estimator thread 0... [ 652.676951][T12012] IPVS: using max 44 ests per chain, 105600 per kthread [ 657.588172][ T30] audit: type=1400 audit(1787136604.724:1158): avc: denied { write } for pid=12002 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 657.687538][ T30] audit: type=1400 audit(1787136604.874:1159): avc: denied { write } for pid=12060 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 657.778122][T12059] netlink: 'syz.6.1482': attribute type 1 has an invalid length. [ 657.785902][T12059] netlink: 232 bytes leftover after parsing attributes in process `syz.6.1482'. [ 657.794984][T12059] netlink: 'syz.6.1482': attribute type 1 has an invalid length. [ 658.044164][ T5260] 8021q: adding VLAN 0 to HW filter on device eth16 [ 660.649621][ T30] audit: type=1400 audit(1787136607.844:1160): avc: denied { write } for pid=12067 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 660.874363][T12084] NILFS (nullb0): couldn't find nilfs on the device [ 660.990434][ T30] audit: type=1400 audit(1787136608.174:1161): avc: denied { write } for pid=12102 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 662.229934][ T30] audit: type=1400 audit(1787136609.424:1162): avc: denied { write } for pid=12115 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 663.016513][ T30] audit: type=1400 audit(1787136610.204:1163): avc: denied { write } for pid=12134 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 664.861189][T12175] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1501'. [ 665.724567][ T30] audit: type=1400 audit(1787136612.914:1164): avc: denied { write } for pid=12140 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 665.893311][ T30] audit: type=1400 audit(1787136613.074:1165): avc: denied { read } for pid=12184 comm="syz.5.1504" name="id" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 666.555575][ T30] audit: type=1400 audit(1787136613.744:1166): avc: denied { write } for pid=12194 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 666.734912][ T30] audit: type=1400 audit(1787136613.924:1167): avc: denied { unmount } for pid=11148 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 668.422610][ T30] audit: type=1400 audit(1787136615.094:1168): avc: denied { connect } for pid=12210 comm="syz.8.1511" lport=7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 668.484256][ T30] audit: type=1400 audit(1787136615.104:1169): avc: denied { write } for pid=12210 comm="syz.8.1511" laddr=fe80::c86f:76ff:febe:f8ea lport=7 faddr=fe88::9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 668.510023][ T30] audit: type=1326 audit(1787136615.624:1170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12205 comm="syz.5.1509" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6827f9e0d9 code=0x7fc00000 [ 668.593955][T12219] NILFS (nullb0): couldn't find nilfs on the device [ 670.010302][T12230] bond1: Removing last arp target with arp_interval on [ 670.027977][T12230] bond1: entered promiscuous mode [ 670.051682][T12230] bond1: entered allmulticast mode [ 670.074180][T12230] 8021q: adding VLAN 0 to HW filter on device bond1 [ 670.584257][T12243] bond1: Removing last arp target with arp_interval on [ 671.036971][T12243] bond1: entered promiscuous mode [ 671.043648][T12243] bond1: entered allmulticast mode [ 671.049438][T12243] 8021q: adding VLAN 0 to HW filter on device bond1 [ 671.864056][ T30] audit: type=1400 audit(1787136619.054:1171): avc: denied { write } for pid=12209 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 672.032586][ T30] audit: type=1400 audit(1787136619.224:1172): avc: denied { write } for pid=12267 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 672.166807][ T9979] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 672.297651][T12283] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1517'. [ 672.332241][ T9979] usb 7-1: Using ep0 maxpacket: 8 [ 672.342425][ T9979] usb 7-1: unable to get BOS descriptor or descriptor too short [ 672.363352][ T9979] usb 7-1: New USB device found, idVendor=0e41, idProduct=424a, bcdDevice= 0.40 [ 672.398263][ T9979] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 250, changing to 7 [ 672.446131][ T9979] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 672.466782][ T10] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 672.490096][ T9979] usb 7-1: Product: syz [ 672.644027][ T9979] usb 7-1: Manufacturer: syz [ 672.658323][ T9979] usb 7-1: SerialNumber: syz [ 672.716999][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 672.724397][ T10] usb 4-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 672.814710][T12295] loop2: detected capacity change from 0 to 2640 [ 672.957832][ T10] usb 4-1: config 0 has an invalid interface number: 126 but max is 0 [ 672.966459][ T10] usb 4-1: config 0 has an invalid descriptor of length 109, skipping remainder of the config [ 672.978631][ T9979] usb 7-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 672.988277][T12295] buffer_io_error: 650 callbacks suppressed [ 672.988303][T12295] Buffer I/O error on dev loop2, logical block 0, lost async page write [ 672.988747][ T10] usb 4-1: config 0 has no interface number 0 [ 673.011306][ T9979] usb 7-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 673.028201][T12295] Buffer I/O error on dev loop2, logical block 1, lost async page write [ 673.042166][T12295] Buffer I/O error on dev loop2, logical block 2, lost async page write [ 673.052230][T12295] Buffer I/O error on dev loop2, logical block 3, lost async page write [ 673.062398][T12295] Buffer I/O error on dev loop2, logical block 4, lost async page write [ 673.073484][T12295] Buffer I/O error on dev loop2, logical block 5, lost async page write [ 673.082150][T12295] Buffer I/O error on dev loop2, logical block 6, lost async page write [ 673.092613][T12295] Buffer I/O error on dev loop2, logical block 7, lost async page write [ 673.101367][T12295] Buffer I/O error on dev loop2, logical block 8, lost async page write [ 673.110816][T12295] Buffer I/O error on dev loop2, logical block 9, lost async page write [ 673.132444][ T10] usb 4-1: config 0 interface 126 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 673.251819][ T10] usb 4-1: config 0 interface 126 altsetting 0 endpoint 0x87 has invalid maxpacket 34328, setting to 1024 [ 673.367212][ T10] usb 4-1: config 0 interface 126 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 673.404142][ T30] audit: type=1400 audit(1787136620.584:1173): avc: denied { write } for pid=12281 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 673.475343][ T9979] usb 7-1: USB disconnect, device number 7 [ 673.489347][ T10] usb 4-1: config 0 interface 126 altsetting 0 endpoint 0x4 has invalid maxpacket 29487, setting to 1024 [ 673.554416][ T10] usb 4-1: config 0 interface 126 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 673.573604][T11897] udevd[11897]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 674.655302][ T10] usb 4-1: config 0 interface 126 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 674.879269][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 674.913072][ T10] usb 4-1: config 0 descriptor?? [ 674.950533][T12271] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 674.971190][T12271] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 675.002459][ T30] audit: type=1400 audit(1787136622.184:1174): avc: denied { write } for pid=12310 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 675.015985][ T10] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 675.809138][ T10] usb 4-1: USB disconnect, device number 31 [ 675.882770][T12325] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1533'. [ 676.416776][ T10] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 676.887109][ T30] audit: type=1400 audit(1787136624.084:1175): avc: denied { write } for pid=12320 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 676.912863][ T10] usb 4-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice= 0.40 [ 676.995869][T12338] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1536'. [ 677.003310][ T10] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 677.036196][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 677.044526][ T10] usb 4-1: Product: syz [ 677.073625][ T10] usb 4-1: Manufacturer: syz [ 677.088871][ T10] usb 4-1: SerialNumber: syz [ 677.098418][ T30] audit: type=1400 audit(1787136624.294:1176): avc: denied { write } for pid=12352 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 677.313849][T12332] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 677.323061][ T5690] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 677.334247][T12332] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 677.345638][T12332] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 677.355279][T12332] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 677.380090][ T10] usb 4-1: Can't get UAC3 power state for id 10 [ 677.401987][ T10] usb 4-1: 2:0: failed to get current value for ch 0 (-71) [ 677.414145][ T30] audit: type=1400 audit(1787136624.614:1177): avc: denied { write } for pid=12361 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 677.418105][ T10] usb 4-1: 2:0: cannot get min/max values for control 2 (id 2) [ 677.446195][ T10] usb 4-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 677.462131][ T10] usb 4-1: [2] FU [Speaker Playback Volume] ch = 1, val = 0/1/1 [ 677.477550][ T5690] usb 8-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 677.494050][ T5690] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 677.520772][ T5690] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 677.538186][ T10] usb 4-1: 2:0: cannot get min/max values for control 2 (id 2) [ 677.572058][ T30] audit: type=1400 audit(1787136624.764:1178): avc: denied { write } for pid=12375 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 677.577112][ T10] usb 4-1: 2:0: cannot get min/max values for control 2 (id 2) [ 677.615498][ T10] usb 4-1: USB disconnect, device number 32 [ 677.749800][T12356] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 677.768097][T12356] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 678.000294][ T5690] wacom 0003:056A:033B.002B: Unknown device_type for 'HID 056a:033b'. Assuming pen. [ 678.098964][ T5690] wacom 0003:056A:033B.002B: hidraw0: USB HID v1.11 Device [HID 056a:033b] on usb-dummy_hcd.7-1/input0 [ 678.131866][ T30] audit: type=1400 audit(1787136625.314:1179): avc: denied { watch watch_reads } for pid=12387 comm="syz.6.1539" path="/proc/96/map_files" dev="proc" ino=36480 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 678.175149][ T5690] input: Wacom Intuos S 2 Pen as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/0003:056A:033B.002B/input/input30 [ 678.444661][ T30] audit: type=1400 audit(1787136625.634:1180): avc: denied { append } for pid=12355 comm="syz.7.1529" name="mice" dev="devtmpfs" ino=915 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 678.773808][ T5690] usb 8-1: USB disconnect, device number 4 [ 678.820922][ T30] audit: type=1400 audit(1787136626.014:1181): avc: denied { write } for pid=12381 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 678.985255][T12414] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1545'. [ 679.112749][T12412] netlink: 'syz.8.1544': attribute type 1 has an invalid length. [ 679.176816][ T1212] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 679.219061][T12412] netlink: 232 bytes leftover after parsing attributes in process `syz.8.1544'. [ 679.233436][T12412] netlink: 'syz.8.1544': attribute type 1 has an invalid length. [ 679.559891][ T30] audit: type=1400 audit(1787136626.654:1182): avc: denied { write } for pid=12419 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 679.794120][ T1212] usb 7-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 680.341099][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 680.353427][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 680.387078][ T1212] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 680.408826][ T1212] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 680.419328][ T1212] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 680.437182][ T1212] usb 7-1: config 0 descriptor?? [ 681.037076][ T5605] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 681.107483][ T1212] usb 7-1: language id specifier not provided by device, defaulting to English [ 681.207628][ T5605] usb 8-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 681.220946][ T5605] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 681.253865][ T5605] usb 8-1: config 0 descriptor?? [ 681.286211][ T5605] cp210x 8-1:0.0: cp210x converter detected [ 681.371592][T12449] futex_wake_op: syz.3.1553 tries to shift op by 144; fix this program [ 681.432876][T12449] tmpfs: Bad value for 'huge' [ 681.653655][T12427] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 681.842592][T12427] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 682.107353][ T5605] cp210x 8-1:0.0: failed to get vendor val 0x370b size 1: -32 [ 682.213317][ T5605] cp210x 8-1:0.0: querying part number failed [ 682.468093][ T5605] usb 8-1: cp210x converter now attached to ttyUSB0 [ 682.685364][ T1212] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:256C:006D.002C/input/input33 [ 682.820635][ T30] audit: type=1400 audit(1787136630.004:1183): avc: denied { write } for pid=12430 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 683.667144][ T1212] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:256C:006D.002C/input/input34 [ 683.715629][ T1212] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:256C:006D.002C/input/input35 [ 683.790397][ T5605] usb 8-1: USB disconnect, device number 5 [ 684.927548][ T5605] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 684.935879][ T5605] cp210x 8-1:0.0: device disconnected [ 684.981989][ T1212] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:256C:006D.002C/input/input36 [ 685.286742][ T5690] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 686.109157][ T30] audit: type=1400 audit(1787136633.184:1184): avc: denied { write } for pid=12475 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 687.186279][ T5690] usb 6-1: New USB device found, idVendor=0499, idProduct=1044, bcdDevice= 0.40 [ 687.281470][ T1212] uclogic 0003:256C:006D.002C: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.6-1/input0 [ 687.370604][ T5690] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 687.397391][ T5690] usb 6-1: Product: И [ 687.431566][ T5690] usb 6-1: Manufacturer: á°Š [ 687.446442][ T1212] usb 7-1: USB disconnect, device number 8 [ 687.464577][ T5690] usb 6-1: SerialNumber: Щ [ 687.863235][ T5690] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 687.898833][ T5690] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 687.957822][ T5690] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 688.022117][ T5690] snd-usb-audio 6-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 688.070675][ T5690] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 688.082289][T12482] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 688.281025][ T5690] snd-usb-audio 6-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 688.287875][ T30] audit: type=1400 audit(1787136635.484:1185): avc: denied { write } for pid=12493 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 688.329310][ T5690] usb 6-1: USB disconnect, device number 4 [ 688.407657][T11897] udevd[11897]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 688.640305][ T30] audit: type=1400 audit(1787136635.834:1186): avc: denied { write } for pid=12513 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 688.960350][T12527] smc: net device ip6_vti0 applied user defined pnetid SYZ2 [ 689.016733][ T10] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 689.087242][ T5690] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 689.195774][ T10] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 689.303521][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 689.435770][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 689.525671][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 689.723400][ T10] usb 6-1: config 0 descriptor?? [ 690.662849][ T10] usb 6-1: language id specifier not provided by device, defaulting to English [ 690.782226][ T5690] usb 8-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 691.087426][ T5690] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 691.097775][ T5690] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 691.118409][ T5690] as10x_usb: device has been detected [ 691.133687][ T5690] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 691.151083][ T10] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.002D/input/input37 [ 691.172544][ T5690] usb 8-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 691.335762][ T10] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.002D/input/input38 [ 691.352078][ T5690] as10x_usb: error during firmware upload part1 [ 691.396294][ T5690] Registered device Abilis Systems DVB-Titan [ 691.439859][ T10] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.002D/input/input39 [ 691.535549][ T30] audit: type=1400 audit(1787136638.724:1187): avc: denied { create } for pid=12546 comm="syz.3.1573" name="file5" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 691.580271][T12521] netlink: 92 bytes leftover after parsing attributes in process `syz.7.1569'. [ 691.601014][ T10] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.002D/input/input40 [ 691.638503][ T30] audit: type=1400 audit(1787136638.764:1188): avc: denied { bind } for pid=12520 comm="syz.7.1569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 691.731260][ T1212] usb 8-1: USB disconnect, device number 6 [ 691.742934][ T10] uclogic 0003:256C:006D.002D: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.5-1/input0 [ 691.755461][ T9979] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 691.766452][ T30] audit: type=1400 audit(1787136638.794:1189): avc: denied { mount } for pid=12546 comm="syz.3.1573" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 691.852194][ T30] audit: type=1400 audit(1787136638.984:1190): avc: denied { unlink } for pid=5597 comm="syz-executor" name="file5" dev="tmpfs" ino=1967 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 691.884947][ T1212] Unregistered device Abilis Systems DVB-Titan [ 691.907109][ T10] usb 6-1: USB disconnect, device number 5 [ 691.907678][ T1212] as10x_usb: device has been disconnected [ 691.948051][ T9979] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 691.973473][ T30] audit: type=1400 audit(1787136639.084:1191): avc: denied { ioctl } for pid=12561 comm="syz.3.1576" path="/dev/input/event3" dev="devtmpfs" ino=937 ioctlcmd=0x4504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 692.007936][ T9979] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 692.038427][ T9979] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 692.065586][ T30] audit: type=1400 audit(1787136639.134:1192): avc: denied { write } for pid=12529 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 692.073577][T12564] fido_id[12564]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 692.090887][ T9979] usb 9-1: config 0 descriptor?? [ 692.107289][T10628] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 692.206312][ T30] audit: type=1400 audit(1787136639.394:1193): avc: denied { write } for pid=12566 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 692.331219][T10628] usb 7-1: not running at top speed; connect to a high speed hub [ 692.514722][ T9979] usbhid 9-1:0.0: can't add hid device: -71 [ 692.522803][ T9979] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 692.534240][ T9979] usb 9-1: USB disconnect, device number 5 [ 692.539870][T10628] usb 7-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 692.556745][ T9982] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 692.584500][T10628] usb 7-1: config 0 has too many interfaces: 223, using maximum allowed: 32 [ 692.609120][T10628] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 692.646575][T10628] usb 7-1: config 0 has 2 interfaces, different from the descriptor's value: 223 [ 692.675959][T10628] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 692.711600][T12575] sctp: [Deprecated]: syz.5.1578 (pid 12575) Use of struct sctp_assoc_value in delayed_ack socket option. [ 692.711600][T12575] Use struct sctp_sack_info instead [ 692.726818][ T9982] usb 4-1: Using ep0 maxpacket: 8 [ 692.735446][T10628] usb 7-1: config 0 descriptor?? [ 692.762152][ T9982] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 692.778138][T10628] uvcvideo 7-1:0.0: Found UVC 9.00 device (046d:0825) [ 692.787825][ T9982] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 692.812812][ T9982] usb 4-1: config 0 has no interface number 0 [ 692.828680][ T9982] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 692.851260][ T9982] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 692.875242][ T9982] usb 4-1: config 0 descriptor?? [ 692.909125][ T9982] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 692.997326][ T9979] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 693.044467][ T30] audit: type=1400 audit(1787136640.234:1194): avc: denied { call } for pid=12585 comm="syz.7.1583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 693.157719][ T9979] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 693.171646][ T9979] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 693.190748][ T9979] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 693.202243][ T9979] usb 9-1: config 0 descriptor?? [ 693.222258][T12594] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 693.238814][T12594] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 693.247972][ T9982] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 693.358617][ T1212] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 693.391568][T10628] uvcvideo 7-1:0.1: Failed to set UVC probe control : -71 (exp. 48). [ 693.411435][ T9982] usb 6-1: unable to get BOS descriptor or descriptor too short [ 693.416167][T10628] uvcvideo 7-1:0.1: Failed to query (GET_CUR) UVC probe control : -71 (exp. 48). [ 693.426263][ T9982] usb 6-1: New USB device found, idVendor=8086, idProduct=0ad2, bcdDevice= 0.00 [ 693.430938][T10628] uvcvideo 7-1:0.1: Failed to initialize the device (-71). [ 693.441242][T12550] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 693.458353][ T9982] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 693.466392][T10628] uvcvideo 7-1:0.0: probe with driver uvcvideo failed with error -71 [ 693.469463][T12550] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 693.485754][T10628] usb 7-1: USB disconnect, device number 9 [ 693.492152][ T9982] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 693.515015][ T9982] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 693.531862][ T9982] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 693.537803][ T1212] usb 8-1: New USB device found, idVendor=0710, idProduct=8001, bcdDevice= 1.00 [ 693.540600][ T9982] usb 6-1: Product: syz [ 693.554104][ T9982] usb 6-1: Manufacturer: syz [ 693.559389][ T1212] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 693.559833][ T9979] usbhid 9-1:0.0: can't add hid device: -71 [ 693.570843][ T1212] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 693.587334][ T9979] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 693.594546][ T1212] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 693.599205][ T9979] usb 9-1: USB disconnect, device number 6 [ 693.611449][ T1212] usb 8-1: Product: syz [ 693.613422][ T9982] uvcvideo 6-1:1.0: Found UVC 1.00 device syz (8086:0ad2) [ 693.624171][ T1212] usb 8-1: Manufacturer: syz [ 693.625836][ T9982] uvcvideo 6-1:1.0: No streaming interface found for terminal 32770. [ 693.635484][ T1212] usb 8-1: SerialNumber: syz [ 693.641140][ T9982] uvcvideo 6-1:1.0: Failed to create links for entity 3 [ 693.653634][ T9982] uvcvideo 6-1:1.0: Failed to register entities (-22). [ 693.662233][ T1212] whiteheat 8-1:1.0: Connect Tech - WhiteHEAT converter detected [ 693.823828][ T9982] usb 6-1: USB disconnect, device number 6 [ 693.866063][ T1212] usb 8-1: Connect Tech - WhiteHEAT: Send command incomplete [0] [ 693.877145][ T1212] usb 8-1: Connect Tech - WhiteHEAT: Unable to retrieve firmware version, try replugging [ 693.890674][ T1212] usb 8-1: Connect Tech - WhiteHEAT: If the firmware is not running (status led not blinking) [ 693.901301][ T1212] usb 8-1: Connect Tech - WhiteHEAT: please contact support@connecttech.com [ 693.920313][ T1212] usb 8-1: USB disconnect, device number 7 [ 694.086779][ T9979] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 694.138462][ T9982] usb 4-1: USB disconnect, device number 33 [ 694.237811][ T9979] usb 9-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice= 0.00 [ 694.248460][ T9979] usb 9-1: config index 0 descriptor too short (expected 53, got 36) [ 694.256556][ T9979] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 694.267290][ T9979] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 897 [ 694.277499][ T9979] usb 9-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 694.290609][ T9979] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 694.307121][ T5690] usb 7-1: new full-speed USB device number 10 using dummy_hcd [ 694.477800][ T5690] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 694.488709][ T5690] usb 7-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x9B, changing to 0x8B [ 694.500447][ T5690] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 694.512613][ T5690] usb 7-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 23 [ 694.526830][ T5690] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 694.534896][ T5690] usb 7-1: SerialNumber: syz [ 694.549866][ T5690] hub 7-1:1.0: bad descriptor, ignoring hub [ 694.555884][ T5690] hub 7-1:1.0: probe with driver hub failed with error -5 [ 694.563773][ T5690] cdc_acm 7-1:1.0: Control and data interfaces are not separated! [ 694.608308][ T9982] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 694.740741][ C1] Bluetooth: hci2: urb ffff888075e93900 failed to resubmit (19) [ 694.748498][ C1] Bluetooth: hci2: urb ffff888075e93600 failed to resubmit (19) [ 694.756373][ T1212] usb 9-1: USB disconnect, device number 7 [ 694.785598][T12605] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 694.795259][T12605] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 694.802009][ T9974] usb 8-1: new full-speed USB device number 8 using dummy_hcd [ 694.808097][T12605] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 694.840089][T12605] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 694.854507][T12605] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 694.863423][T12605] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 694.883338][ T5690] cdc_acm 7-1:1.0: ttyACM0: USB ACM device [ 694.887654][ T9982] usb 6-1: New USB device found, idVendor=0c70, idProduct=f001, bcdDevice= 0.40 [ 694.912319][ T9982] usb 6-1: config 1 interface 0 has no altsetting 0 [ 694.917367][ T5690] usb 7-1: USB disconnect, device number 10 [ 694.922343][ T9982] usb 6-1: string descriptor 0 read error: -22 [ 694.932913][ T9982] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 694.990896][ T4915] Bluetooth: hci7: unknown advertising packet type: 0x32 [ 694.990956][ T4915] Bluetooth: hci7: Malformed LE Event: 0x02 [ 695.006325][ T9974] usb 8-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00 [ 695.025355][ T9974] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 695.033026][ T9974] usb 8-1: can't read configurations, error -71 [ 695.378234][ T9982] hid_parser_main: 66 callbacks suppressed [ 695.378256][ T9982] aquacomputer_d5next 0003:0C70:F001.002E: unknown main item tag 0x0 [ 695.392524][ T9982] aquacomputer_d5next 0003:0C70:F001.002E: unknown main item tag 0x0 [ 695.400869][ T9982] aquacomputer_d5next 0003:0C70:F001.002E: unknown main item tag 0x0 [ 695.409375][ T9982] aquacomputer_d5next 0003:0C70:F001.002E: unknown main item tag 0x0 [ 695.417617][ T9982] aquacomputer_d5next 0003:0C70:F001.002E: unknown main item tag 0x0 [ 695.426027][ T9982] aquacomputer_d5next 0003:0C70:F001.002E: unknown main item tag 0x0 [ 695.434303][ T9982] aquacomputer_d5next 0003:0C70:F001.002E: unknown main item tag 0x0 [ 695.442702][ T9982] aquacomputer_d5next 0003:0C70:F001.002E: unknown main item tag 0x0 [ 695.450984][ T9982] aquacomputer_d5next 0003:0C70:F001.002E: unknown main item tag 0x0 [ 695.459546][ T9982] aquacomputer_d5next 0003:0C70:F001.002E: unknown main item tag 0x0 [ 695.494131][ T9982] aquacomputer_d5next 0003:0C70:F001.002E: hidraw0: USB HID vff.7f Device [HID 0c70:f001] on usb-dummy_hcd.5-1/input0 [ 695.571622][T12609] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 695.620190][T12609] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 695.733022][T12609] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 695.746065][T12609] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 695.766333][T12609] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 695.772547][T12609] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 695.866749][ T10] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 695.883200][T12637] xt_hashlimit: size too large, truncated to 1048576 [ 695.905223][T12638] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 695.927137][T12638] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 696.029546][ T10] usb 7-1: New USB device found, idVendor=9710, idProduct=7720, bcdDevice= 0.00 [ 696.050497][ T10] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 696.060821][ T10] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 696.075350][ T10] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 696.085345][ T10] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 696.095199][ T9974] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 696.102783][ T10] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 696.112689][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 696.124515][T12625] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22 [ 696.131917][T12625] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22 [ 696.139209][T12625] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22 [ 696.149657][ T10] mos7720 7-1:1.0: Moschip 2 port adapter converter detected [ 696.178476][T12609] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 696.188702][T12609] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 696.202524][ T9978] usb 6-1: USB disconnect, device number 7 [ 696.268143][ T9974] usb 8-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 696.280340][ T9974] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 696.288430][ T9974] usb 8-1: Product: syz [ 696.292815][ T9974] usb 8-1: Manufacturer: syz [ 696.297554][ T9974] usb 8-1: SerialNumber: syz [ 696.306826][ T9982] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 696.315394][ T9974] usb 8-1: USB2VGA dongle found at address 9 [ 696.323606][ T9974] usb 8-1: Allocated 8 output buffers [ 696.336103][ T9974] usb 8-1: Failed to early initialize device [ 696.366858][ T4915] Bluetooth: hci2: command 0xfc0e tx timeout [ 696.479316][ T9982] usb 4-1: unable to get BOS descriptor or descriptor too short [ 696.487172][ T9982] usb 4-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40 [ 696.498578][ T9982] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 696.509021][ T9982] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 50, changing to 7 [ 696.520371][ T9982] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 696.530832][ T9982] usb 4-1: config 1 interface 2 has no altsetting 0 [ 696.540812][ T9982] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 696.549219][ T9982] usb 4-1: Product: syz [ 696.553676][ T9982] usb 4-1: Manufacturer: syz [ 696.558640][ T9982] usb 4-1: SerialNumber: syz [ 696.564873][ T10] usb 7-1: mos7720: usb_control_msg() failed: -71 [ 696.584598][ T10] usb 7-1: Moschip 2 port adapter converter now attached to ttyUSB0 [ 696.602113][ T10] usb 7-1: Moschip 2 port adapter converter now attached to ttyUSB1 [ 696.624393][ T10] usb 7-1: USB disconnect, device number 11 [ 696.624470][ C0] usb 7-1: mos7720_interrupt_callback - Error -19 submitting control urb [ 696.643083][ T10] moschip7720 ttyUSB0: Moschip 2 port adapter converter now disconnected from ttyUSB0 [ 696.658367][ T10] moschip7720 ttyUSB1: Moschip 2 port adapter converter now disconnected from ttyUSB1 [ 696.672328][ T10] mos7720 7-1:1.0: device disconnected [ 696.690496][ T1212] usb 9-1: new full-speed USB device number 8 using dummy_hcd [ 696.759415][T12632] usb 8-1: Failed to initialize device [ 696.774262][T12632] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 696.792085][T12632] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 696.796063][ T9982] snd-ua101 4-1:1.1: invalid format type [ 696.808270][ T9982] snd-ua101 4-1:1.0: invalid num_altsetting [ 696.814943][ T9982] usb 4-1: selecting invalid altsetting 0 [ 696.832942][ T9982] usb 4-1: selecting invalid altsetting 0 [ 696.839957][ T9982] usbtest 4-1:1.2: probe with driver usbtest failed with error -22 [ 696.851745][ T9982] usb 4-1: selecting invalid altsetting 0 [ 696.859958][ T1212] usb 9-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 696.866711][ T9982] snd-usb-audio 4-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 696.878680][ T1212] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 696.890073][ T9982] usb 4-1: selecting invalid altsetting 0 [ 696.895851][ T9982] snd-ua101 4-1:1.2: probe with driver snd-ua101 failed with error -22 [ 696.912318][ T1212] usb 9-1: config 0 descriptor?? [ 696.912639][ T9982] usb 4-1: USB disconnect, device number 34 [ 696.927196][T11155] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 696.939300][T11155] Bluetooth: hci5: Injecting HCI hardware error event [ 696.950687][ T4915] Bluetooth: hci5: hardware error 0x00 [ 696.969150][ T1212] pwc: Samsung MPC-C10 USB webcam detected. [ 697.198652][ T1212] pwc: send_video_command error -71 [ 697.204237][ T1212] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 697.221627][T10628] usb 8-1: USB disconnect, device number 9 [ 697.228021][ T1212] Philips webcam 9-1:0.0: probe with driver Philips webcam failed with error -71 [ 697.312561][ T1212] usb 9-1: USB disconnect, device number 8 [ 697.763709][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 697.763727][ T30] audit: type=1400 audit(1787136644.954:1196): avc: denied { name_bind } for pid=12654 comm="syz.3.1602" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 697.794910][ T10] usb 7-1: new full-speed USB device number 12 using dummy_hcd [ 698.338680][T12660] program syz.3.1604 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 698.349057][T12660] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 698.901163][ T10] usb 7-1: not running at top speed; connect to a high speed hub [ 698.937494][ T1212] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 698.945614][ T10] usb 7-1: New USB device found, idVendor=0b48, idProduct=1004, bcdDevice= 1.00 [ 698.997349][ T10] usb 7-1: config 1 has an invalid interface number: 1 but max is 0 [ 699.000394][T10628] hid-generic 0000:0000:0000.002F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 699.035142][ T10] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 699.083927][ T10] usb 7-1: config 1 has no interface number 0 [ 699.091016][ T4915] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 699.113860][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 699.136796][ T10] usb 7-1: Product: syz [ 699.150517][ T10] usb 7-1: Manufacturer: syz [ 699.165418][ T10] usb 7-1: SerialNumber: syz [ 699.178154][ T10] usb 7-1: selecting invalid altsetting 1 [ 699.184008][ T10] dvb_ttusb_budget: ttusb_init_controller: error [ 699.205361][ T10] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 699.263505][ T30] audit: type=1400 audit(1787136646.454:1197): avc: denied { write } for pid=12674 comm="syz.7.1610" name="usb_gadget" dev="configfs" ino=3314 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 699.336780][ T30] audit: type=1400 audit(1787136646.454:1198): avc: denied { write } for pid=12674 comm="syz.7.1610" name="functions" dev="configfs" ino=37020 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 699.433629][ T30] audit: type=1400 audit(1787136646.454:1199): avc: denied { write } for pid=12674 comm="syz.7.1610" name="configs" dev="configfs" ino=37021 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 699.457752][ T10] DVB: Unable to find symbol ves1820_attach() [ 699.465425][T12683] jffs2: notice: (12683) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 699.509586][ T30] audit: type=1400 audit(1787136646.454:1200): avc: denied { write } for pid=12674 comm="syz.7.1610" name="c.1" dev="configfs" ino=37030 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 699.586724][ T10] DVB: Unable to find symbol stv0297_attach() [ 699.604548][ T30] audit: type=1400 audit(1787136646.454:1201): avc: denied { create } for pid=12674 comm="syz.7.1610" name="uac2.usb0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=lnk_file permissive=1 [ 699.627895][ T10] dvb_ttusb_budget: no frontend driver found for device [0b48:1004] [ 699.676977][ T30] audit: type=1400 audit(1787136646.514:1202): avc: denied { write } for pid=12674 comm="syz.7.1610" name="c.1" dev="configfs" ino=37030 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 699.708767][ T10] usb 7-1: USB disconnect, device number 12 [ 701.824990][T12691] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 701.832358][ T30] audit: type=1400 audit(1787136649.014:1203): avc: denied { bind } for pid=12690 comm="syz.5.1612" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 701.976953][T12692] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 702.021020][ T30] audit: type=1400 audit(1787136649.054:1204): avc: denied { read } for pid=12712 comm="syz.8.1617" name="loop-control" dev="devtmpfs" ino=644 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 702.308070][ T30] audit: type=1400 audit(1787136649.054:1205): avc: denied { open } for pid=12712 comm="syz.8.1617" path="/dev/loop-control" dev="devtmpfs" ino=644 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 702.673863][T12725] Mass Storage Function, version: 2009/09/11 [ 702.773472][T11153] Bluetooth: hci6: command 0x0406 tx timeout [ 702.779707][T11154] Bluetooth: hci7: command 0x0406 tx timeout [ 702.795320][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 702.795336][ T30] audit: type=1400 audit(1787136649.984:1211): avc: denied { write } for pid=12723 comm="syz.7.1621" name="c.1" dev="configfs" ino=38021 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 702.831620][ T30] audit: type=1800 audit(1787136649.994:1212): pid=12727 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.7.1621" name="UDC" dev="configfs" ino=38032 res=0 errno=0 [ 702.856815][T12725] LUN: removable file: (no medium) [ 702.929660][ T30] audit: type=1400 audit(1787136650.094:1213): avc: denied { write } for pid=12729 comm="syz.8.1622" name="subsystems" dev="configfs" ino=1397 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 702.958671][ T30] audit: type=1400 audit(1787136650.094:1214): avc: denied { write } for pid=12729 comm="syz.8.1622" name="namespaces" dev="configfs" ino=38039 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 703.003302][T12730] nvmet: adding nsid 1 to subsystem testsubsys [ 703.023644][ T30] audit: type=1400 audit(1787136650.214:1215): avc: denied { write } for pid=12732 comm="syz.5.1623" name="event2" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 703.047704][ T30] audit: type=1400 audit(1787136650.224:1216): avc: denied { write } for pid=12729 comm="syz.8.1622" name="subsystems" dev="configfs" ino=37091 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 703.047747][ T30] audit: type=1400 audit(1787136650.224:1217): avc: denied { write } for pid=12729 comm="syz.8.1622" name="subsystems" dev="configfs" ino=37091 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 703.077888][T12736] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 704.047200][ T30] audit: type=1400 audit(1787136651.234:1218): avc: denied { read } for pid=12755 comm="syz.7.1629" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 704.083050][ T1212] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 704.112100][ T5784] IPVS: starting estimator thread 0... [ 704.192682][T12763] input input41: cannot allocate more than FF_MAX_EFFECTS effects [ 704.242699][T12761] IPVS: using max 43 ests per chain, 103200 per kthread [ 704.385346][ T1212] usb 6-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 704.768540][ T30] audit: type=1400 audit(1787136651.744:1219): avc: denied { connect } for pid=12758 comm="syz.8.1631" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 705.253441][ T1212] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 705.268530][ T1212] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 705.370018][ T30] audit: type=1400 audit(1787136652.564:1220): avc: denied { write } for pid=12726 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 706.040384][ T9982] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 706.042220][ T1212] wacom 0003:056A:033B.0030: Unknown device_type for 'HID 056a:033b'. Assuming pen. [ 706.048929][ T10] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 706.217489][T10628] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 706.325607][ T9982] usb 9-1: New USB device found, idVendor=9710, idProduct=7720, bcdDevice= 0.00 [ 706.337145][ T1212] wacom 0003:056A:033B.0030: hidraw0: USB HID v1.11 Device [HID 056a:033b] on usb-dummy_hcd.5-1/input0 [ 706.368071][ T10] usb 4-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00 [ 706.373935][ T1212] input: Wacom Intuos S 2 Pen as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/0003:056A:033B.0030/input/input42 [ 706.413492][ T9982] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 706.446395][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 706.464523][ T9982] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 706.476727][T10628] usb 7-1: Using ep0 maxpacket: 16 [ 706.485979][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 706.494631][ T9982] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 706.495388][ T1212] usb 6-1: USB disconnect, device number 8 [ 706.506482][ T9982] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 706.521459][T10628] usb 7-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 706.544697][T10628] usb 7-1: config 0 has an invalid interface number: 107 but max is 0 [ 706.552939][ T10] usb 4-1: config 0 descriptor?? [ 706.581251][ T9982] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 706.607386][ T4915] Bluetooth: hci0: command 0x0405 tx timeout [ 706.619229][T10628] usb 7-1: config 0 has no interface number 0 [ 706.626082][ T9982] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 706.671749][T10628] usb 7-1: config 0 interface 107 altsetting 0 endpoint 0x88 has an invalid bInterval 55, changing to 9 [ 706.723141][T10628] usb 7-1: config 0 interface 107 altsetting 0 endpoint 0x88 has invalid maxpacket 8496, setting to 1024 [ 706.736028][T12798] mass_storage.0/lun.0: unable to open backing file: sÌ^tÙ [ 706.763268][T12781] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 706.780976][T12781] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 706.788537][T10628] usb 7-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 706.788813][T12781] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 706.816379][ T9982] mos7720 9-1:1.0: Moschip 2 port adapter converter detected [ 706.829223][T10628] usb 7-1: Product: syz [ 706.850463][T10628] usb 7-1: Manufacturer: syz [ 706.865958][T10628] usb 7-1: SerialNumber: syz [ 706.889620][T10628] usb 7-1: config 0 descriptor?? [ 706.905040][T10628] keyspan 7-1:0.107: Keyspan 4 port adapter converter detected [ 706.920891][T10628] keyspan 7-1:0.107: found no endpoint descriptor for endpoint 81 [ 706.943228][T10628] keyspan 7-1:0.107: found no endpoint descriptor for endpoint 1 [ 706.974133][T10628] usb 7-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 707.005059][ T10] hid_parser_main: 4008 callbacks suppressed [ 707.005080][ T10] asus 0003:0B05:1ABE.0031: unknown main item tag 0x0 [ 707.007606][T10628] keyspan 7-1:0.107: found no endpoint descriptor for endpoint 2 [ 708.415780][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 708.415799][ T30] audit: type=1400 audit(1787136654.794:1223): avc: denied { create } for pid=12806 comm="syz.7.1639" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 708.474259][T10628] usb 7-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 708.504584][T10628] keyspan 7-1:0.107: found no endpoint descriptor for endpoint 4 [ 708.505970][ T10] asus 0003:0B05:1ABE.0031: unknown main item tag 0x0 [ 708.530900][T10628] usb 7-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 708.577932][ T9982] usb 9-1: mos7720: usb_control_msg() failed: -71 [ 708.605773][ T30] audit: type=1400 audit(1787136655.794:1224): avc: denied { write } for pid=12794 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 708.688576][T10628] keyspan 7-1:0.107: found no endpoint descriptor for endpoint 6 [ 708.734074][ T10] asus 0003:0B05:1ABE.0031: unknown main item tag 0x0 [ 708.741966][T10628] usb 7-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 708.767708][ T9982] usb 9-1: Moschip 2 port adapter converter now attached to ttyUSB4 [ 708.815595][ T10] asus 0003:0B05:1ABE.0031: unknown main item tag 0x0 [ 708.837434][T10628] usb 7-1: USB disconnect, device number 13 [ 708.838701][ T9982] usb 9-1: Moschip 2 port adapter converter now attached to ttyUSB5 [ 708.870551][T12819] input input45: cannot allocate more than FF_MAX_EFFECTS effects [ 708.871163][ T10] asus 0003:0B05:1ABE.0031: unknown main item tag 0x0 [ 708.899921][T10628] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 708.993766][ T10] asus 0003:0B05:1ABE.0031: unknown main item tag 0x0 [ 709.071961][ T9982] usb 9-1: USB disconnect, device number 10 [ 709.072034][ C0] usb 9-1: mos7720_interrupt_callback - Error -19 submitting control urb [ 709.102132][ T10] asus 0003:0B05:1ABE.0031: unknown main item tag 0x0 [ 709.114918][ T30] audit: type=1400 audit(1787136656.314:1225): avc: denied { accept } for pid=12820 comm="syz.3.1644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 709.139034][T10628] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 709.195549][ T10] asus 0003:0B05:1ABE.0031: unknown main item tag 0x0 [ 709.202527][ T10] asus 0003:0B05:1ABE.0031: unknown main item tag 0x0 [ 709.209705][ T9982] moschip7720 ttyUSB4: Moschip 2 port adapter converter now disconnected from ttyUSB4 [ 709.221310][ T10] asus 0003:0B05:1ABE.0031: unknown main item tag 0x0 [ 709.245472][ T9982] moschip7720 ttyUSB5: Moschip 2 port adapter converter now disconnected from ttyUSB5 [ 709.258457][ T10] asus 0003:0B05:1ABE.0031: item fetching failed at offset 322/483 [ 709.279461][ T10] asus 0003:0B05:1ABE.0031: Asus hid parse failed: -22 [ 709.310086][ T30] audit: type=1400 audit(1787136656.504:1226): avc: denied { write } for pid=12818 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 709.333421][ T10] asus 0003:0B05:1ABE.0031: probe with driver asus failed with error -22 [ 709.385274][ T9982] mos7720 9-1:1.0: device disconnected [ 709.396348][ T10] usb 4-1: USB disconnect, device number 35 [ 709.417989][T10628] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 709.472085][ T30] audit: type=1400 audit(1787136656.664:1227): avc: denied { getopt } for pid=12822 comm="syz.6.1643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 709.524455][T10628] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 709.596510][T12829] ªªªªªª: renamed from vlan0 (while UP) [ 709.605285][T10628] keyspan 7-1:0.107: device disconnected [ 709.808409][T12836] netlink: 'syz.5.1647': attribute type 4 has an invalid length. [ 710.137047][T10628] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 710.186814][ T1212] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 710.197897][ T30] audit: type=1400 audit(1787136657.394:1228): avc: denied { write } for pid=12837 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 710.226864][T11515] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 710.238845][ T9974] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 710.275737][ T30] audit: type=1400 audit(1787136657.464:1229): avc: denied { write } for pid=12858 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 710.329401][T10628] usb 9-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 710.348211][T10628] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 710.358671][ T1212] usb 4-1: Using ep0 maxpacket: 16 [ 710.366407][T10628] usb 9-1: config 0 has no interfaces? [ 710.372119][ T1212] usb 4-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 710.382997][T10628] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 710.391717][ T1212] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 710.397389][ T9974] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 710.402751][T11515] usb 7-1: Using ep0 maxpacket: 32 [ 710.417136][ T1212] usb 4-1: config 0 interface 0 has no altsetting 0 [ 710.425850][T10628] usb 9-1: config 0 descriptor?? [ 710.426745][ T9982] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 710.431945][T11515] usb 7-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 710.452247][ T9974] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 710.456954][ T1212] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 710.476250][ T9974] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 710.476277][ T1212] usb 4-1: Product: syz [ 710.491756][ T1212] usb 4-1: Manufacturer: syz [ 710.493839][ T9974] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 710.497297][T11515] usb 7-1: config 0 has an invalid interface number: 89 but max is 0 [ 710.506444][ T9974] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 710.518161][ T1212] usb 4-1: SerialNumber: syz [ 710.530261][T11515] usb 7-1: config 0 has no interface number 0 [ 710.536451][T11515] usb 7-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 710.546376][ T9974] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 710.548385][ T1212] usb 4-1: config 0 descriptor?? [ 710.556055][ T9974] usb 6-1: Product: syz [ 710.563312][T11515] usb 7-1: config 0 interface 89 has no altsetting 0 [ 710.573416][T11515] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 710.574374][ T9974] usb 6-1: Manufacturer: syz [ 710.582295][T11515] usb 7-1: Product: syz [ 710.592847][T11515] usb 7-1: Manufacturer: syz [ 710.603096][T11515] usb 7-1: SerialNumber: syz [ 710.610190][ T9974] cdc_wdm 6-1:1.0: skipping garbage [ 710.615802][ T9974] cdc_wdm 6-1:1.0: skipping garbage [ 710.624729][ T9982] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 710.624836][T11515] usb 7-1: config 0 descriptor?? [ 710.645708][T11515] em28xx 7-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 710.646481][ T9974] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 710.665058][ T9974] cdc_wdm 6-1:1.0: Unknown control protocol [ 710.666348][T11515] em28xx 7-1:0.89: Video interface 89 found: [ 710.677110][ T9982] usb 8-1: config index 0 descriptor too short (expected 64998, got 72) [ 710.678842][ T9982] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 710.695409][ T5784] usb 9-1: USB disconnect, device number 11 [ 710.716011][ T9982] usb 8-1: Product: syz [ 710.729794][ T9982] usb 8-1: Manufacturer: syz [ 710.748991][ T9982] usb 8-1: SerialNumber: syz [ 710.779798][ T9974] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 710.797485][ C1] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 710.806340][ T30] audit: type=1400 audit(1787136657.994:1230): avc: denied { write } for pid=12861 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 710.882082][ T1212] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input46 [ 710.903320][ T9982] usb 6-1: USB disconnect, device number 9 [ 710.915578][ T1212] imon:send_packet: packet tx failed (-71) [ 710.937080][ T1212] imon 4-1:0.0: panel buttons/knobs setup failed [ 710.980403][ T30] audit: type=1400 audit(1787136658.174:1231): avc: denied { write } for pid=12872 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 711.036854][ T1212] rc_core: IR keymap rc-imon-pad not found [ 711.045227][ T1212] Registered IR keymap rc-empty [ 711.059795][ T1212] imon 4-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 711.078774][ T1212] imon 4-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 711.091620][ T1212] imon:send_packet: packet tx failed (-71) [ 711.126745][ T1212] imon 4-1:0.0: remote input dev register failed [ 711.134844][ T1212] imon 4-1:0.0: imon_init_intf0: rc device setup failed [ 711.171347][ T1212] imon 4-1:0.0: unable to initialize intf0, err 0 [ 711.179654][ T1212] imon:imon_probe: failed to initialize context! [ 711.186040][ T1212] imon 4-1:0.0: unable to register, err -19 [ 711.215131][ T1212] usb 4-1: USB disconnect, device number 36 [ 711.282594][T10628] usb 8-1: USB disconnect, device number 10 [ 711.292295][T11515] em28xx 7-1:0.89: unknown em28xx chip ID (0) [ 711.357993][ T30] audit: type=1400 audit(1787136658.554:1232): avc: denied { write } for pid=12876 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 711.381524][ T5784] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 711.552236][ T5784] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 711.898849][ T1212] usb 4-1: new full-speed USB device number 37 using dummy_hcd [ 711.927221][ T5784] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 711.955728][ T5784] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 711.972865][ T5784] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 711.982314][ T5784] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 711.996274][ T5784] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 712.009783][ T5784] usb 6-1: Product: syz [ 712.027006][ T5784] usb 6-1: Manufacturer: syz [ 712.066966][ T5784] cdc_wdm 6-1:1.0: skipping garbage [ 712.078727][ T5784] cdc_wdm 6-1:1.0: skipping garbage [ 712.096163][ T5784] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 712.107065][ T1212] usb 4-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 712.123096][ T5784] cdc_wdm 6-1:1.0: Unknown control protocol [ 712.142162][ T1212] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 712.189529][ T1212] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid maxpacket 198, setting to 64 [ 712.233786][ T1212] usb 4-1: config 0 interface 0 has no altsetting 0 [ 712.250635][ T1212] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 712.266674][ T1212] usb 4-1: Product: syz [ 712.287472][ T1212] usb 4-1: Manufacturer: syz [ 712.296262][ T1212] usb 4-1: SerialNumber: syz [ 712.317216][ T1212] usb 4-1: config 0 descriptor?? [ 712.339639][T12842] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 712.442491][ T9974] ath9k_htc 8-1:1.0: ath9k_htc: Target is unresponsive [ 712.445436][T11515] em28xx 7-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 712.461671][ T9974] ath9k_htc: Failed to initialize the device [ 712.491265][T10628] usb 8-1: ath9k_htc: USB layer deinitialized [ 712.584743][T11515] em28xx 7-1:0.89: board has no eeprom [ 712.736644][ C1] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 712.749084][T12908] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 712.766985][T12908] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 712.789884][ T1212] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input48 [ 712.917960][T11515] em28xx 7-1:0.89: Identified as Terratec Grabby (card=67) [ 713.603251][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 713.603270][ T30] audit: type=1400 audit(1787136660.794:1238): avc: denied { write } for pid=12917 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 713.769652][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 713.776408][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 713.782877][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 713.789451][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 713.795696][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 713.802262][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 713.808982][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 713.815557][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 713.822570][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 713.829143][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 713.836200][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 713.842768][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 713.849212][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 713.855817][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 713.862630][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 713.869211][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 713.875584][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 713.882176][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 713.888473][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 713.895058][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 713.941994][ T9974] usb 6-1: USB disconnect, device number 10 [ 713.942050][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 713.994068][ T30] audit: type=1400 audit(1787136661.184:1239): avc: denied { ioctl } for pid=12845 comm="syz.5.1652" path="/dev/cdc-wdm0" dev="devtmpfs" ino=3857 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 714.466969][ T1212] rc_core: IR keymap rc-imon-pad not found [ 714.612585][T11515] em28xx 7-1:0.89: analog set to bulk mode. [ 714.846005][ T1212] Registered IR keymap rc-empty [ 714.851501][ T1212] imon 4-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 714.861631][ T1212] imon 4-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 714.870953][T10628] em28xx 7-1:0.89: Registering V4L2 extension [ 714.885433][ T1212] imon:send_packet: packet tx failed (-71) [ 714.910852][ T1212] imon 4-1:0.0: remote input dev register failed [ 714.917640][T11515] usb 7-1: USB disconnect, device number 14 [ 714.923704][ T1212] imon 4-1:0.0: imon_init_intf0: rc device setup failed [ 714.931844][T11515] em28xx 7-1:0.89: Disconnecting em28xx [ 714.965383][T10628] em28xx 7-1:0.89: Config register raw data: 0xffffffed [ 714.972639][T10628] em28xx 7-1:0.89: AC97 chip type couldn't be determined [ 715.003329][T10628] em28xx 7-1:0.89: No AC97 audio processor [ 715.042375][ T1212] imon 4-1:0.0: unable to initialize intf0, err 0 [ 715.096092][ T1212] imon:imon_probe: failed to initialize context! [ 715.220585][ T1212] imon 4-1:0.0: unable to register, err -19 [ 715.249781][T10628] usb 7-1: Decoder not found [ 715.282394][ T1212] usb 4-1: USB disconnect, device number 37 [ 715.293527][T10628] em28xx 7-1:0.89: failed to create media graph [ 715.311270][T10628] em28xx 7-1:0.89: V4L2 device video103 deregistered [ 715.369259][T10628] em28xx 7-1:0.89: Registering snapshot button... [ 715.451471][ T30] audit: type=1400 audit(1787136662.644:1240): avc: denied { read write } for pid=12942 comm="syz.7.1662" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 715.480469][T12949] CacheFiles: No cache directory specified [ 715.945165][ T30] audit: type=1400 audit(1787136662.674:1241): avc: denied { open } for pid=12942 comm="syz.7.1662" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 716.225350][T10628] input: em28xx snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.89/input/input50 [ 716.306513][T10628] em28xx 7-1:0.89: Remote control support is not available for this card. [ 716.334119][T11515] em28xx 7-1:0.89: Closing input extension [ 716.426675][T11515] em28xx 7-1:0.89: Deregistering snapshot button [ 719.480818][ T30] audit: type=1400 audit(1787136666.584:1242): avc: denied { write } for pid=12926 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 719.483306][T11515] em28xx 7-1:0.89: Freeing device [ 719.905223][ T30] audit: type=1400 audit(1787136667.094:1243): avc: denied { write } for pid=13011 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 720.126881][ T5784] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 720.309327][ T5784] usb 4-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 720.335983][ T5784] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 720.351832][ T5784] usb 4-1: Product: syz [ 720.364762][ T5784] usb 4-1: Manufacturer: syz [ 720.379427][ T5784] usb 4-1: SerialNumber: syz [ 720.422682][ T5784] usb 4-1: USB2VGA dongle found at address 38 [ 720.451497][ T5784] usb 4-1: Allocated 8 output buffers [ 720.479640][ T5784] usb 4-1: Failed to early initialize device [ 720.497977][ T10] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 720.667187][ T10] usb 7-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice= 0.01 [ 720.700196][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 720.782668][ T30] audit: type=1400 audit(1787136667.974:1244): avc: denied { write } for pid=13036 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 720.921249][T13021] usb 4-1: Failed to initialize device [ 720.945956][T11515] usb 4-1: USB disconnect, device number 38 [ 720.961447][ T10] dln2 7-1:1.0: USB write failed: -110 [ 720.974066][ C0] dln2 7-1:1.0: size mismatch: handle 1 cmd 31 echo 0 size 14 actual 8 [ 720.989627][ T10] dln2 7-1:1.0: failed to initialize hardware [ 720.999043][ T30] audit: type=1400 audit(1787136668.194:1245): avc: denied { write } for pid=13052 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 721.010061][ T10] dln2 7-1:1.0: probe with driver dln2 failed with error -110 [ 722.020349][ T10] usb 7-1: USB disconnect, device number 15 [ 722.472891][T11515] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 722.676915][T11515] usb 8-1: Using ep0 maxpacket: 32 [ 722.744190][T11515] usb 8-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 723.026534][ T30] audit: type=1400 audit(1787136670.094:1246): avc: denied { connect } for pid=13073 comm="syz.3.1694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 723.737104][T11515] usb 8-1: config 0 has an invalid interface number: 132 but max is 0 [ 723.758206][T11515] usb 8-1: config 0 has no interface number 0 [ 723.766124][T11515] usb 8-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 723.776169][ T30] audit: type=1400 audit(1787136670.184:1247): avc: denied { write } for pid=13073 comm="syz.3.1694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 723.797155][ T30] audit: type=1400 audit(1787136670.454:1248): avc: denied { getopt } for pid=13073 comm="syz.3.1694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 723.818737][T11515] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 723.826796][T11515] usb 8-1: Product: syz [ 723.831094][T11515] usb 8-1: Manufacturer: syz [ 723.835721][T11515] usb 8-1: SerialNumber: syz [ 723.847978][T11515] usb 8-1: config 0 descriptor?? [ 723.872613][T11515] em28xx 8-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 723.896410][T11515] em28xx 8-1:0.132: Video interface 132 found: [ 723.960600][ T30] audit: type=1400 audit(1787136671.144:1249): avc: denied { write } for pid=13063 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 724.046820][T11155] Bluetooth: hci0: command 0x0405 tx timeout [ 724.240823][ T30] audit: type=1400 audit(1787136671.434:1250): avc: denied { write } for pid=13090 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 724.333786][T11515] em28xx 8-1:0.132: unknown em28xx chip ID (0) [ 724.443742][T13098] input input51: cannot allocate more than FF_MAX_EFFECTS effects [ 724.737438][ T5784] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 725.208482][ T5784] usb 6-1: Using ep0 maxpacket: 8 [ 725.267812][ T5784] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 725.332723][ T5784] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 725.375436][T11515] em28xx 8-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 725.390915][ T5784] usb 6-1: config 0 has no interface number 0 [ 725.437472][ T5784] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 725.462015][T11515] em28xx 8-1:0.132: board has no eeprom [ 725.484053][ T5784] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 725.497024][ T4915] Bluetooth: hci1: unexpected event for opcode 0x1004 [ 725.509486][ T5784] usb 6-1: config 0 descriptor?? [ 725.585881][ T5784] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 725.606777][T11515] em28xx 8-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 725.632617][T11515] em28xx 8-1:0.132: analog set to bulk mode. [ 725.666239][ T5784] em28xx 8-1:0.132: Registering V4L2 extension [ 725.709162][T11515] usb 8-1: USB disconnect, device number 11 [ 725.794931][T11515] em28xx 8-1:0.132: Disconnecting em28xx [ 726.039994][ T30] audit: type=1400 audit(1787136673.194:1251): avc: denied { unmount } for pid=13123 comm="syz.8.1706" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 726.294639][ T9982] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 726.333218][ T5784] em28xx 8-1:0.132: Config register raw data: 0xffffffed [ 726.342667][ T5784] em28xx 8-1:0.132: AC97 chip type couldn't be determined [ 726.365002][ T5784] em28xx 8-1:0.132: No AC97 audio processor [ 726.375662][ T5784] usb 8-1: Decoder not found [ 726.383152][ T5784] em28xx 8-1:0.132: failed to create media graph [ 726.390360][ T5784] em28xx 8-1:0.132: V4L2 device video103 deregistered [ 726.404703][ T5784] em28xx 8-1:0.132: Remote control support is not available for this card. [ 726.560119][ T30] audit: type=1400 audit(1787136673.754:1252): avc: denied { write } for pid=13105 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 726.610632][ T9982] usb 7-1: Using ep0 maxpacket: 16 [ 726.635647][T13140] ip_tables: iptables: counters copy to user failed while replacing table [ 726.692723][ T9982] usb 7-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 726.754662][ T9982] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 726.868255][ T9982] usb 7-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 726.966976][ T9974] usb 6-1: USB disconnect, device number 11 [ 727.034033][T11515] em28xx 8-1:0.132: Closing input extension [ 727.050778][T11515] em28xx 8-1:0.132: Freeing device [ 727.074025][ T9982] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 727.098754][ T9982] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 727.106791][ T30] audit: type=1400 audit(1787136674.284:1253): avc: denied { write } for pid=13141 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 727.154188][ T9982] usb 7-1: config 0 descriptor?? [ 728.410795][ T9982] nintendo 0003:057E:2019.0032: hidraw0: USB HID v80.05 Device [HID 057e:2019] on usb-dummy_hcd.6-1/input0 [ 728.796478][ T9982] nintendo 0003:057E:2019.0032: Failed to get joycon info; ret=-38 [ 728.831255][ T30] audit: type=1800 audit(1787136676.024:1254): pid=13166 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.7.1715" name="addr_trtype" dev="configfs" ino=37698 res=0 errno=0 [ 728.866993][T13166] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 728.881938][ T9982] nintendo 0003:057E:2019.0032: Failed to retrieve controller info; ret=-38 [ 728.909493][ T30] audit: type=1800 audit(1787136676.054:1255): pid=13166 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.7.1715" name="addr_traddr" dev="configfs" ino=37699 res=0 errno=0 [ 728.917999][ T9982] nintendo 0003:057E:2019.0032: Failed to initialize controller; ret=-38 [ 729.071738][ T9974] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 729.091816][ T9982] nintendo 0003:057E:2019.0032: probe - fail = -38 [ 729.100321][ T9982] nintendo 0003:057E:2019.0032: probe with driver nintendo failed with error -38 [ 729.113438][ T9982] usb 7-1: USB disconnect, device number 16 [ 729.129255][ T30] audit: type=1800 audit(1787136676.324:1256): pid=13177 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.7.1719" name="addr_trtype" dev="configfs" ino=37722 res=0 errno=0 [ 729.221788][T13177] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 729.275982][ T30] audit: type=1800 audit(1787136676.384:1257): pid=13177 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.7.1719" name="addr_traddr" dev="configfs" ino=37723 res=0 errno=0 [ 729.493862][ T30] audit: type=1800 audit(1787136676.544:1258): pid=13181 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.7.1719" name="addr_trsvcid" dev="configfs" ino=37725 res=0 errno=0 [ 729.527276][ T9974] usb 9-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 729.537067][ T30] audit: type=1800 audit(1787136676.564:1259): pid=13177 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.7.1719" name="addr_adrfam" dev="configfs" ino=37726 res=0 errno=0 [ 729.562222][ T9974] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 729.577882][ T4915] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 729.579506][ T9974] usb 9-1: Product: syz [ 729.592367][ T4915] Bluetooth: hci1: Injecting HCI hardware error event [ 729.601879][T11155] Bluetooth: hci1: hardware error 0x00 [ 729.611124][ T9974] usb 9-1: Manufacturer: syz [ 729.622097][ T9974] usb 9-1: SerialNumber: syz [ 729.682572][ T9974] usb 9-1: USB2VGA dongle found at address 12 [ 729.714561][ T9974] usb 9-1: Allocated 8 output buffers [ 729.736650][ T9974] usb 9-1: Failed to early initialize device [ 729.924045][ T30] audit: type=1400 audit(1787136677.114:1260): avc: denied { write } for pid=13163 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 729.937103][T13161] usb 9-1: Failed to initialize device [ 730.016775][ T9974] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 730.024444][T11515] usb 9-1: USB disconnect, device number 12 [ 730.222727][ T9974] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 730.247089][ T9974] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 730.328060][T13216] Invalid ELF header magic: != ELF [ 730.700169][ T9974] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 730.710069][ T9974] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 730.721235][ T9974] usb 8-1: config 0 descriptor?? [ 731.038954][ T9974] usbhid 8-1:0.0: can't add hid device: -71 [ 731.089093][ T9974] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 731.142374][ T9974] usb 8-1: USB disconnect, device number 12 [ 731.617172][ T9974] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 731.727024][T11155] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 731.951152][ T9974] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 732.024953][ T9974] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 732.060344][ T9974] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 732.125367][ T9974] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 732.132927][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 732.132942][ T30] audit: type=1400 audit(1787136679.314:1263): avc: denied { write } for pid=13219 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 732.216166][ T9974] usb 8-1: config 0 descriptor?? [ 732.271777][ T30] audit: type=1400 audit(1787136679.464:1264): avc: denied { write } for pid=13247 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 732.325485][T13252] capability: warning: `syz.6.1737' uses deprecated v2 capabilities in a way that may be insecure [ 732.813882][ T5605] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 733.387465][ T9974] keytouch 0003:0926:3333.0033: fixing up Keytouch IEC report descriptor [ 733.424372][ T9974] input: HID 0926:3333 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:0926:3333.0033/input/input55 [ 733.550621][ T5605] usb 9-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 733.592958][ T5605] usb 9-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 733.629474][ T5605] usb 9-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 733.639875][ T9974] keytouch 0003:0926:3333.0033: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.7-1/input0 [ 733.663570][ T5605] usb 9-1: config 220 interface 0 has no altsetting 0 [ 733.680831][ T9974] usb 8-1: USB disconnect, device number 13 [ 733.695042][ T5605] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 733.738922][ T5605] usb 9-1: Product: syz [ 733.754658][ T5605] usb 9-1: Manufacturer: syz [ 733.772858][ T5605] usb 9-1: SerialNumber: syz [ 734.036028][T13270] fido_id[13270]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/8-1/report_descriptor': No such file or directory [ 734.684865][T13277] vlan2: entered promiscuous mode [ 734.691360][T13277] hsr0: entered promiscuous mode [ 734.697288][T13277] vlan2: entered allmulticast mode [ 734.702531][T13277] hsr0: entered allmulticast mode [ 734.707793][T13277] hsr_slave_0: entered allmulticast mode [ 734.714688][T13277] hsr_slave_1: entered allmulticast mode [ 734.731189][T13277] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1745'. [ 734.768299][T13277] hsr_slave_0: left promiscuous mode [ 734.810009][T13277] hsr_slave_1: left promiscuous mode [ 735.576902][T13249] nvme nvme0: failed to connect socket: -512 [ 736.098549][ T5605] uvcvideo 9-1:220.0: Found UVC 0.00 device syz (8086:0b07) [ 736.116907][ T5605] uvcvideo 9-1:220.0: No valid video chain found. [ 736.138067][ T5605] usb 9-1: USB disconnect, device number 13 [ 736.173077][ T30] audit: type=1800 audit(1787136683.354:1265): pid=13297 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.8.1752" name="addr_traddr" dev="configfs" ino=39254 res=0 errno=0 [ 736.255640][T13297] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 736.465325][ T30] audit: type=1400 audit(1787136683.504:1266): avc: denied { bind } for pid=13293 comm="syz.7.1751" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 736.486169][T13298] nbd0: detected capacity change from 0 to 127 [ 736.886429][ T30] audit: type=1400 audit(1787136683.514:1267): avc: denied { connect } for pid=13293 comm="syz.7.1751" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 737.108071][T11155] block nbd0: Receive control failed (result -32) [ 737.175429][ T9610] block nbd0: Dead connection, failed to find a fallback [ 737.188197][ T9610] block nbd0: shutting down sockets [ 737.193695][ T9610] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 737.211098][ T9610] buffer_io_error: 320 callbacks suppressed [ 737.211163][ T9610] Buffer I/O error on dev nbd0, logical block 0, async page read [ 737.227286][ T9610] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 3 prio class 2 [ 737.236980][ T9610] Buffer I/O error on dev nbd0, logical block 1, async page read [ 737.244964][ T9610] Buffer I/O error on dev nbd0, logical block 2, async page read [ 737.253253][ T9610] Buffer I/O error on dev nbd0, logical block 3, async page read [ 737.273596][ T9610] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 737.284183][ T9610] Buffer I/O error on dev nbd0, logical block 0, async page read [ 737.295917][ T9610] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 3 prio class 2 [ 737.308334][ T9610] Buffer I/O error on dev nbd0, logical block 1, async page read [ 737.323912][ T9610] Buffer I/O error on dev nbd0, logical block 2, async page read [ 737.333303][ T9610] Buffer I/O error on dev nbd0, logical block 3, async page read [ 737.352269][ T9610] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 2 prio class 2 [ 737.367677][ T9610] Buffer I/O error on dev nbd0, logical block 0, async page read [ 737.376953][ T9610] Buffer I/O error on dev nbd0, logical block 1, async page read [ 737.385435][ T9610] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 2 prio class 2 [ 737.397902][ T9610] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 737.416953][ T9610] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 737.427398][ T9610] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 3 prio class 2 [ 737.458037][ T9610] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 737.471011][T11382] ldm_validate_partition_table(): Disk read failed. [ 737.479184][T11382] Dev nbd0: unable to read RDB block 0 [ 737.485922][T11382] nbd0: unable to read partition table [ 737.503190][ T30] audit: type=1400 audit(1787136684.694:1268): avc: denied { write } for pid=13302 comm="syz.5.1753" name="functions" dev="configfs" ino=23313 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 737.651496][T11382] ldm_validate_partition_table(): Disk read failed. [ 737.726838][T11382] Dev nbd0: unable to read RDB block 0 [ 737.911715][T11382] nbd0: unable to read partition table [ 737.993698][ T30] audit: type=1800 audit(1787136685.184:1269): pid=13312 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.1753" name="iface_name" dev="configfs" ino=39304 res=0 errno=0 [ 738.093610][T13319] IPVS: rr: FWM 3 0x00000003 - no destination available [ 738.144831][ T30] audit: type=1400 audit(1787136685.334:1270): avc: denied { setopt } for pid=13322 comm="syz.5.1761" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 738.400166][ T30] audit: type=1800 audit(1787136685.594:1271): pid=13334 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.1766" name="addr_traddr" dev="configfs" ino=39988 res=0 errno=0 [ 738.423592][T13334] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 738.538249][T13339] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 738.634100][ T30] audit: type=1400 audit(1787136685.724:1272): avc: denied { bind } for pid=13324 comm="syz.7.1762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 738.908661][ T30] audit: type=1400 audit(1787136685.724:1273): avc: denied { write } for pid=13324 comm="syz.7.1762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 738.932481][ T30] audit: type=1400 audit(1787136685.734:1274): avc: denied { setopt } for pid=13324 comm="syz.7.1762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 738.955850][ T30] audit: type=1400 audit(1787136685.744:1275): avc: denied { ioctl } for pid=13324 comm="syz.7.1762" path="socket:[39369]" dev="sockfs" ino=39369 ioctlcmd=0x9361 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 738.988827][T13340] input input56: cannot allocate more than FF_MAX_EFFECTS effects [ 739.495493][ T30] audit: type=1800 audit(1787136686.684:1276): pid=13351 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.1773" name="addr_trtype" dev="configfs" ino=39393 res=0 errno=0 [ 739.527914][ T30] audit: type=1800 audit(1787136686.724:1277): pid=13351 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.1773" name="addr_traddr" dev="configfs" ino=40014 res=0 errno=0 [ 739.550025][T13351] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 739.561547][T13351] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 740.506679][ T5605] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 741.006744][ T5605] usb 6-1: device descriptor read/64, error -71 [ 741.168336][T13368] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 741.171210][T13366] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 741.268142][ T5605] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 741.408595][ T5605] usb 6-1: device descriptor read/64, error -71 [ 741.445142][T13381] loop5: detected capacity change from 0 to 7 [ 741.459485][T13381] Dev loop5: unable to read RDB block 7 [ 741.465526][T13381] loop5: AHDI p1 p3 p4 [ 741.470016][T13381] loop5: partition table partially beyond EOD, truncated [ 741.477729][T13381] loop5: p1 size 100663296 extends beyond EOD, truncated [ 741.486409][T13381] loop5: p3 size 4261412863 extends beyond EOD, truncated [ 741.527456][ T5605] usb usb6-port1: attempt power cycle [ 741.541415][T12896] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 741.559017][T13383] Dev loop5: unable to read RDB block 7 [ 741.564701][T13383] loop5: AHDI p1 p3 p4 [ 741.569654][T13383] loop5: partition table partially beyond EOD, truncated [ 741.577303][T13383] loop5: p1 size 100663296 extends beyond EOD, truncated [ 741.586318][T13383] loop5: p3 size 4261412863 extends beyond EOD, truncated [ 741.632445][T11382] udevd[11382]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 741.643353][T11897] udevd[11897]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 741.661460][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 741.667949][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 741.687265][T13387] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 741.698256][T12896] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 741.707559][T13387] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 741.708344][T12896] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 741.724477][T11897] udevd[11897]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 741.729965][T11382] udevd[11382]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 741.747675][T12896] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 741.767435][T12896] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 741.793088][T12896] usb 7-1: config 0 interface 0 has no altsetting 0 [ 741.823787][T12896] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 741.837302][T12896] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 741.854344][T12896] usb 7-1: config 0 interface 0 has no altsetting 0 [ 741.863539][T12896] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 741.873346][T12896] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 741.884498][T12896] usb 7-1: config 0 interface 0 has no altsetting 0 [ 741.888713][ T5605] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 741.909498][T12896] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 741.929721][ T5605] usb 6-1: device descriptor read/8, error -71 [ 741.935310][T12896] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 741.941144][T13397] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store [ 741.963384][T12896] usb 7-1: config 0 interface 0 has no altsetting 0 [ 741.972290][T12896] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 741.984442][T12896] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 741.995977][T12896] usb 7-1: config 0 interface 0 has no altsetting 0 [ 741.996905][ T9974] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 742.008604][T12896] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 742.022287][T12896] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 742.049328][T12896] usb 7-1: config 0 interface 0 has no altsetting 0 [ 742.066400][T12896] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 742.077956][T12896] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 742.089965][T12896] usb 7-1: config 0 interface 0 has no altsetting 0 [ 742.098575][T12896] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 742.107636][T12896] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 742.120142][T12896] usb 7-1: config 0 interface 0 has no altsetting 0 [ 742.128651][T12896] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 742.137210][T12896] usb 7-1: Product: syz [ 742.141386][T12896] usb 7-1: Manufacturer: syz [ 742.145963][T12896] usb 7-1: SerialNumber: syz [ 742.188855][T12896] usb 7-1: config 0 descriptor?? [ 742.296942][ T5784] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 742.330280][T12896] yurex 7-1:0.0: USB YUREX device now attached to Yurex #0 [ 742.460057][ T5784] usb 4-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00 [ 742.556882][ T5605] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 742.577229][ T9974] usb 9-1: New USB device found, idVendor=0710, idProduct=8001, bcdDevice= 1.00 [ 742.583295][ T5784] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 742.599714][ T9974] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 742.625628][ T5605] usb 6-1: device descriptor read/8, error -71 [ 742.634311][ T9974] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 742.650186][ T5784] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 742.657759][ T9974] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 742.677822][ T9974] usb 9-1: Product: syz [ 742.683109][ T9974] usb 9-1: Manufacturer: syz [ 742.691452][ T5784] usb 4-1: config 0 descriptor?? [ 742.696163][ T9974] usb 9-1: SerialNumber: syz [ 742.734540][ T9974] whiteheat 9-1:1.0: Connect Tech - WhiteHEAT converter detected [ 742.744521][ T5605] usb usb6-port1: unable to enumerate USB device [ 742.782838][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 742.782856][ T30] audit: type=1800 audit(1787136689.974:1289): pid=13414 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.1798" name="addr_trtype" dev="configfs" ino=39472 res=0 errno=0 [ 742.813400][ C1] usb 7-1: yurex_control_callback - control failed: -71 [ 742.820905][ T30] audit: type=1800 audit(1787136690.014:1290): pid=13414 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.1798" name="addr_traddr" dev="configfs" ino=39473 res=0 errno=0 [ 742.823566][T12896] usb 7-1: USB disconnect, device number 17 [ 742.848144][ T30] audit: type=1800 audit(1787136690.044:1291): pid=13414 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.1798" name="addr_trsvcid" dev="configfs" ino=39474 res=0 errno=0 [ 742.860532][T12896] yurex 7-1:0.0: USB YUREX #0 now disconnected [ 742.871753][T13414] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store [ 742.894068][T13414] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 742.933269][ T9974] usb 9-1: Connect Tech - WhiteHEAT: Couldn't send command [-71] [ 742.952856][ T9974] usb 9-1: Connect Tech - WhiteHEAT: Unable to retrieve firmware version, try replugging [ 742.985964][ T9974] usb 9-1: Connect Tech - WhiteHEAT: If the firmware is not running (status led not blinking) [ 744.139184][ T30] audit: type=1400 audit(1787136690.724:1292): avc: denied { mount } for pid=13416 comm="syz.5.1799" name="/" dev="ramfs" ino=39489 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 744.207514][ T9974] usb 9-1: Connect Tech - WhiteHEAT: please contact support@connecttech.com [ 744.215270][ T5784] usbhid 4-1:0.0: can't add hid device: -71 [ 744.232989][ T5784] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 744.240837][ T9974] usb 9-1: USB disconnect, device number 14 [ 744.274277][ T5784] usb 4-1: USB disconnect, device number 39 [ 744.618673][ T30] audit: type=1800 audit(1787136691.814:1293): pid=13429 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.8.1804" name="addr_trsvcid" dev="configfs" ino=40128 res=0 errno=0 [ 744.619146][T13429] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store [ 744.700275][T13432] netlink: 100 bytes leftover after parsing attributes in process `syz.8.1806'. [ 744.740870][ T30] audit: type=1400 audit(1787136691.934:1294): avc: denied { append } for pid=13434 comm="syz.8.1807" name="cec0" dev="devtmpfs" ino=949 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 745.095109][ T30] audit: type=1800 audit(1787136692.284:1295): pid=13441 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.7.1809" name="addr_trtype" dev="configfs" ino=39513 res=0 errno=0 [ 745.146508][T13441] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store [ 745.160449][T13441] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 745.191823][ T30] audit: type=1800 audit(1787136692.324:1296): pid=13441 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.7.1809" name="addr_traddr" dev="configfs" ino=39514 res=0 errno=0 [ 745.335669][ T30] audit: type=1800 audit(1787136692.334:1297): pid=13441 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.7.1809" name="addr_trsvcid" dev="configfs" ino=39515 res=0 errno=0 [ 745.908912][T13448] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 746.116780][T13450] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x42474752, 8, 0, 0, 0) [ 746.300339][ T30] audit: type=1800 audit(1787136693.104:1298): pid=13448 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.1812" name="addr_trtype" dev="configfs" ino=39535 res=0 errno=0 [ 746.360279][T13452] jffs2: notice: (13452) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 748.103323][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 748.103344][ T30] audit: type=1800 audit(1787136695.284:1308): pid=13477 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.1820" name="addr_trtype" dev="configfs" ino=40207 res=0 errno=0 [ 748.248677][T13478] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store [ 748.285841][T13477] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 748.400419][ T30] audit: type=1800 audit(1787136695.404:1309): pid=13478 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.1820" name="addr_trsvcid" dev="configfs" ino=40210 res=0 errno=0 [ 748.662387][ T30] audit: type=1800 audit(1787136695.414:1310): pid=13477 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.1820" name="addr_traddr" dev="configfs" ino=40211 res=0 errno=0 [ 749.064266][ T30] audit: type=1326 audit(1787136696.254:1311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13491 comm="syz.8.1826" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c1b59e0d9 code=0x7fc00000 [ 749.883012][ T30] audit: type=1326 audit(1787136696.944:1312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13491 comm="syz.8.1826" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f7c1b59e0d9 code=0x7fc00000 [ 749.977400][ T9979] usb 8-1: new full-speed USB device number 14 using dummy_hcd [ 750.187375][ T9979] usb 8-1: device descriptor read/64, error -71 [ 750.307927][T13516] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store [ 750.310973][ T30] audit: type=1800 audit(1787136697.504:1313): pid=13516 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.1834" name="addr_trtype" dev="configfs" ino=40272 res=0 errno=0 [ 750.320170][T13516] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 750.438895][ T30] audit: type=1800 audit(1787136697.504:1314): pid=13516 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.1834" name="addr_trsvcid" dev="configfs" ino=40273 res=0 errno=0 [ 751.423389][ T9979] usb 8-1: new full-speed USB device number 15 using dummy_hcd [ 751.693222][T11155] Bluetooth: hci6: unexpected event for opcode 0x080d [ 751.700608][ T5605] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 751.745354][T13535] syzkaller0: entered promiscuous mode [ 751.751779][T13535] syzkaller0: entered allmulticast mode [ 751.777737][ T9979] usb 8-1: device descriptor read/64, error -71 [ 751.793294][T13537] socket: no more sockets [ 751.805151][T13537] Failed to initialize the IGMP autojoin socket (err -23) [ 751.857871][ T5605] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 751.869751][ T5605] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 751.882500][ T5605] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 751.906447][ T9979] usb usb8-port1: attempt power cycle [ 751.912106][ T5605] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 751.939965][ T5605] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 751.968087][ T5605] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 751.983300][ T5605] usb 9-1: Product: syz [ 751.995221][ T5605] usb 9-1: Manufacturer: syz [ 752.149690][ T5605] cdc_wdm 9-1:1.0: skipping garbage [ 752.156362][ T5605] cdc_wdm 9-1:1.0: skipping garbage [ 752.173382][ T5605] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 752.198072][ T5605] cdc_wdm 9-1:1.0: Unknown control protocol [ 752.641430][ T9979] usb 8-1: new full-speed USB device number 16 using dummy_hcd [ 752.651928][ T5605] usb 9-1: USB disconnect, device number 15 [ 752.723360][ T9979] usb 8-1: device descriptor read/8, error -71 [ 753.736997][ T10] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 753.785988][T13569] [ 753.788382][T13569] ====================================================== [ 753.795388][T13569] WARNING: possible circular locking dependency detected [ 753.802400][T13569] syzkaller #0 Tainted: G L [ 753.808360][T13569] ------------------------------------------------------ [ 753.815371][T13569] syz.7.1849/13569 is trying to acquire lock: [ 753.821422][T13569] ffff888055cc3c60 (&pipe->mutex){+.+.}-{4:4}, at: pipe_lock+0x69/0x80 [ 753.829701][T13569] [ 753.829701][T13569] but task is already holding lock: [ 753.837054][T13569] ffff88802bb80460 (sb_writers#6){.+.+}-{0:0}, at: __do_splice+0x33b/0x370 [ 753.845685][T13569] [ 753.845685][T13569] which lock already depends on the new lock. [ 753.845685][T13569] [ 753.856072][T13569] [ 753.856072][T13569] the existing dependency chain (in reverse order) is: [ 753.865073][T13569] [ 753.865073][T13569] -> #6 (sb_writers#6){.+.+}-{0:0}: [ 753.872459][T13569] lock_acquire+0x1b9/0x370 [ 753.877482][T13569] mnt_want_write+0x6f/0x420 [ 753.882591][T13569] lookup_open+0x150/0x1990 [ 753.887603][T13569] path_openat+0xa2c/0x2440 [ 753.892628][T13569] do_file_open+0x20e/0x430 [ 753.897656][T13569] file_open_name+0x1c3/0x3e0 [ 753.902872][T13569] filp_open+0x2e/0x50 [ 753.907476][T13569] fsg_lun_open+0x6b/0x7b0 [ 753.912514][T13569] fsg_store_file+0x1e7/0x450 [ 753.917698][T13569] configfs_write_iter+0x302/0x4e0 [ 753.923321][T13569] vfs_write+0x6af/0x1050 [ 753.928169][T13569] ksys_write+0x12a/0x250 [ 753.933057][T13569] do_syscall_64+0x123/0x790 [ 753.938690][T13569] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 753.945088][T13569] [ 753.945088][T13569] -> #5 (&common->filesem){++++}-{4:4}: [ 753.952804][T13569] lock_acquire+0x1b9/0x370 [ 753.957819][T13569] down_read+0x99/0x4c0 [ 753.962484][T13569] fsg_show_file+0x20/0x180 [ 753.967503][T13569] configfs_read_iter+0x426/0x6f0 [ 753.973033][T13569] __kernel_read+0x397/0xad0 [ 753.978134][T13569] integrity_kernel_read+0x7e/0xb0 [ 753.983751][T13569] ima_calc_file_hash_tfm+0x25e/0x350 [ 753.989627][T13569] ima_calc_file_hash+0x1e3/0x380 [ 753.995154][T13569] ima_collect_measurement+0x94f/0xb30 [ 754.001117][T13569] process_measurement+0xdfe/0x2350 [ 754.006820][T13569] ima_file_check+0xc3/0x110 [ 754.011934][T13569] security_file_post_open+0xc4/0x210 [ 754.017819][T13569] path_openat+0x5cd/0x2440 [ 754.022826][T13569] do_file_open+0x20e/0x430 [ 754.027842][T13569] do_sys_openat2+0x10f/0x1e0 [ 754.033027][T13569] __x64_sys_openat+0x12d/0x210 [ 754.038381][T13569] do_syscall_64+0x123/0x790 [ 754.043473][T13569] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 754.049867][T13569] [ 754.049867][T13569] -> #4 (&p->frag_sem){.+.+}-{4:4}: [ 754.057235][T13569] lock_acquire+0x1b9/0x370 [ 754.062254][T13569] down_read+0x99/0x4c0 [ 754.066917][T13569] configfs_read_iter+0x346/0x6f0 [ 754.072471][T13569] __kernel_read+0x397/0xad0 [ 754.077569][T13569] integrity_kernel_read+0x7e/0xb0 [ 754.083307][T13569] ima_calc_file_hash_tfm+0x25e/0x350 [ 754.089206][T13569] ima_calc_file_hash+0x1e3/0x380 [ 754.094744][T13569] ima_collect_measurement+0x94f/0xb30 [ 754.100730][T13569] process_measurement+0xdfe/0x2350 [ 754.106431][T13569] ima_file_check+0xc3/0x110 [ 754.111525][T13569] security_file_post_open+0xc4/0x210 [ 754.117407][T13569] path_openat+0x5cd/0x2440 [ 754.122419][T13569] do_file_open+0x20e/0x430 [ 754.127441][T13569] do_sys_openat2+0x10f/0x1e0 [ 754.132622][T13569] __x64_sys_openat+0x12d/0x210 [ 754.137977][T13569] do_syscall_64+0x123/0x790 [ 754.143067][T13569] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 754.149479][T13569] [ 754.149479][T13569] -> #3 (&buffer->mutex){+.+.}-{4:4}: [ 754.157016][T13569] lock_acquire+0x1b9/0x370 [ 754.162034][T13569] __mutex_lock+0x1a4/0x1bc0 [ 754.167125][T13569] configfs_read_iter+0x79/0x6f0 [ 754.172573][T13569] __kernel_read+0x397/0xad0 [ 754.177662][T13569] integrity_kernel_read+0x7e/0xb0 [ 754.183277][T13569] ima_calc_file_hash_tfm+0x25e/0x350 [ 754.189162][T13569] ima_calc_file_hash+0x1e3/0x380 [ 754.194688][T13569] ima_collect_measurement+0x94f/0xb30 [ 754.200647][T13569] process_measurement+0xdfe/0x2350 [ 754.206348][T13569] ima_file_check+0xc3/0x110 [ 754.211439][T13569] security_file_post_open+0xc4/0x210 [ 754.217318][T13569] path_openat+0x5cd/0x2440 [ 754.222327][T13569] do_file_open+0x20e/0x430 [ 754.227353][T13569] do_sys_openat2+0x10f/0x1e0 [ 754.232549][T13569] __x64_sys_openat+0x12d/0x210 [ 754.237908][T13569] do_syscall_64+0x123/0x790 [ 754.243004][T13569] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 754.249416][T13569] [ 754.249416][T13569] -> #2 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}: [ 754.258020][T13569] lock_acquire+0x1b9/0x370 [ 754.263206][T13569] __mutex_lock+0x1a4/0x1bc0 [ 754.268304][T13569] process_measurement+0x5ab/0x2350 [ 754.274003][T13569] ima_file_check+0xc3/0x110 [ 754.279096][T13569] security_file_post_open+0xc4/0x210 [ 754.285066][T13569] path_openat+0x5cd/0x2440 [ 754.290075][T13569] do_file_open+0x20e/0x430 [ 754.295359][T13569] file_open_name+0x1c3/0x3e0 [ 754.300557][T13569] filp_open+0x2e/0x50 [ 754.305141][T13569] kernel_read_file_from_path_initns+0xec/0x240 [ 754.311918][T13569] _request_firmware+0x733/0x13c0 [ 754.317456][T13569] request_firmware+0x35/0x50 [ 754.322640][T13569] reg_reload_regdb+0x85/0x460 [ 754.327928][T13569] genl_family_rcv_msg_doit+0x214/0x300 [ 754.333975][T13569] genl_rcv_msg+0x560/0x800 [ 754.338976][T13569] netlink_rcv_skb+0x159/0x420 [ 754.344248][T13569] genl_rcv+0x28/0x40 [ 754.348729][T13569] netlink_unicast+0x585/0x850 [ 754.354019][T13569] netlink_sendmsg+0x8b0/0xda0 [ 754.359289][T13569] ____sys_sendmsg+0xa4d/0xbe0 [ 754.364561][T13569] ___sys_sendmsg+0x190/0x1e0 [ 754.369760][T13569] __sys_sendmsg+0x160/0x210 [ 754.374852][T13569] do_syscall_64+0x123/0x790 [ 754.379954][T13569] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 754.386541][T13569] [ 754.386541][T13569] -> #1 (cb_lock){++++}-{4:4}: [ 754.393649][T13569] lock_acquire+0x1b9/0x370 [ 754.398747][T13569] down_read+0x99/0x4c0 [ 754.403419][T13569] genl_rcv+0x19/0x40 [ 754.407994][T13569] netlink_unicast+0x585/0x850 [ 754.413452][T13569] netlink_sendmsg+0x8b0/0xda0 [ 754.418752][T13569] sock_sendmsg+0x394/0x410 [ 754.423884][T13569] splice_to_socket+0xb3c/0x11a0 [ 754.429455][T13569] do_splice+0x109c/0x1fa0 [ 754.434384][T13569] __do_splice+0x33b/0x370 [ 754.439415][T13569] __x64_sys_splice+0x187/0x250 [ 754.444772][T13569] do_syscall_64+0x123/0x790 [ 754.449863][T13569] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 754.456258][T13569] [ 754.456258][T13569] -> #0 (&pipe->mutex){+.+.}-{4:4}: [ 754.463633][T13569] check_prev_add+0xeb/0xe60 [ 754.468731][T13569] __lock_acquire+0x1492/0x1ec0 [ 754.474087][T13569] lock_acquire+0x1b9/0x370 [ 754.479097][T13569] __mutex_lock+0x1a4/0x1bc0 [ 754.484197][T13569] pipe_lock+0x69/0x80 [ 754.488949][T13569] iter_file_splice_write+0x1fd/0x10b0 [ 754.494921][T13569] do_splice+0x109c/0x1fa0 [ 754.499860][T13569] __do_splice+0x33b/0x370 [ 754.505178][T13569] __x64_sys_splice+0x187/0x250 [ 754.510552][T13569] do_syscall_64+0x123/0x790 [ 754.515645][T13569] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 754.522066][T13569] [ 754.522066][T13569] other info that might help us debug this: [ 754.522066][T13569] [ 754.532272][T13569] Chain exists of: [ 754.532272][T13569] &pipe->mutex --> &common->filesem --> sb_writers#6 [ 754.532272][T13569] [ 754.544854][T13569] Possible unsafe locking scenario: [ 754.544854][T13569] [ 754.552276][T13569] CPU0 CPU1 [ 754.557627][T13569] ---- ---- [ 754.562966][T13569] rlock(sb_writers#6); [ 754.567204][T13569] lock(&common->filesem); [ 754.574211][T13569] lock(sb_writers#6); [ 754.580867][T13569] lock(&pipe->mutex); [ 754.585000][T13569] [ 754.585000][T13569] *** DEADLOCK *** [ 754.585000][T13569] [ 754.593117][T13569] locks held by syz.7.1849/13569: 1, last CPU#0: [ 754.599422][T13569] #0: ffff88802bb80460 (sb_writers#6){.+.+}-{0:0}, at: __do_splice+0x33b/0x370 [ 754.608465][T13569] [ 754.608465][T13569] stack backtrace: [ 754.614333][T13569] CPU: 0 UID: 0 PID: 13569 Comm: syz.7.1849 Tainted: G L syzkaller #0 PREEMPT(full) [ 754.614355][T13569] Tainted: [L]=SOFTLOCKUP [ 754.614361][T13569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 754.614370][T13569] Call Trace: [ 754.614376][T13569] [ 754.614381][T13569] dump_stack_lvl+0x100/0x190 [ 754.614402][T13569] print_circular_bug.cold+0x178/0x1be [ 754.614431][T13569] check_noncircular+0x146/0x160 [ 754.614449][T13569] ? preempt_schedule_common+0x3c/0xb0 [ 754.614474][T13569] check_prev_add+0xeb/0xe60 [ 754.614492][T13569] ? stack_depot_save_flags+0x49a/0x9f0 [ 754.614512][T13569] __lock_acquire+0x1492/0x1ec0 [ 754.614533][T13569] ? __x64_sys_splice+0x187/0x250 [ 754.614553][T13569] ? do_syscall_64+0x123/0x790 [ 754.614568][T13569] lock_acquire+0x1b9/0x370 [ 754.614586][T13569] ? pipe_lock+0x69/0x80 [ 754.614603][T13569] ? __pfx___might_resched+0x10/0x10 [ 754.614623][T13569] __mutex_lock+0x1a4/0x1bc0 [ 754.614637][T13569] ? pipe_lock+0x69/0x80 [ 754.614653][T13569] ? pipe_lock+0x69/0x80 [ 754.614670][T13569] ? __pfx___mutex_lock+0x10/0x10 [ 754.614687][T13569] ? __kasan_kmalloc+0xaa/0xb0 [ 754.614706][T13569] ? __kmalloc_noprof+0x345/0x820 [ 754.614727][T13569] ? pipe_lock+0x69/0x80 [ 754.614742][T13569] pipe_lock+0x69/0x80 [ 754.614758][T13569] iter_file_splice_write+0x1fd/0x10b0 [ 754.614780][T13569] ? __lock_acquire+0x4c5/0x1ec0 [ 754.614800][T13569] ? __pfx___schedule+0x10/0x10 [ 754.614821][T13569] ? __pfx_iter_file_splice_write+0x10/0x10 [ 754.614841][T13569] ? __lock_acquire+0x4c5/0x1ec0 [ 754.614860][T13569] ? irqentry_exit+0x24d/0xa10 [ 754.614872][T13569] ? lockdep_hardirqs_on+0x7d/0x110 [ 754.614894][T13569] ? irqentry_exit+0x24d/0xa10 [ 754.614910][T13569] ? __pfx_iter_file_splice_write+0x10/0x10 [ 754.614932][T13569] do_splice+0x109c/0x1fa0 [ 754.614952][T13569] ? __lock_acquire+0x4c5/0x1ec0 [ 754.614973][T13569] ? __pfx_do_splice+0x10/0x10 [ 754.614993][T13569] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 754.615012][T13569] ? find_held_lock+0x2b/0x80 [ 754.615028][T13569] __do_splice+0x33b/0x370 [ 754.615048][T13569] ? __pfx___do_splice+0x10/0x10 [ 754.615071][T13569] __x64_sys_splice+0x187/0x250 [ 754.615092][T13569] do_syscall_64+0x123/0x790 [ 754.615106][T13569] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 754.615121][T13569] RIP: 0033:0x7fe00a19e0d9 [ 754.615134][T13569] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 754.615149][T13569] RSP: 002b:00007fe00af7e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 754.615163][T13569] RAX: ffffffffffffffda RBX: 00007fe00a426180 RCX: 00007fe00a19e0d9 [ 754.615173][T13569] RDX: 000000000000000a RSI: 0000000000000000 RDI: 0000000000000008 [ 754.615182][T13569] RBP: 00007fe00a235024 R08: 00000000088000cc R09: 0000000000000000 [ 754.615191][T13569] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 754.615200][T13569] R13: 00007fe00a426218 R14: 00007fe00a426180 R15: 00007ffd83b84248 [ 754.615215][T13569] [ 754.925244][ T5605] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 755.087280][ T5605] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 755.097106][ T5605] usb 4-1: config index 0 descriptor too short (expected 39, got 27) [ 755.105197][ T5605] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 755.115072][ T5605] usb 4-1: config 0 interface 0 has no altsetting 0 [ 755.123267][ T5605] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 755.131658][ T5605] usb 4-1: Product: syz [ 755.135854][ T5605] usb 4-1: Manufacturer: syz [ 755.140504][ T5605] usb 4-1: SerialNumber: syz [ 755.146263][ T5605] usb 4-1: config 0 descriptor?? [ 755.153884][ T5605] hub 4-1:0.0: bad descriptor, ignoring hub [ 755.159891][ T5605] hub 4-1:0.0: probe with driver hub failed with error -5 [ 755.168190][ T5605] usb 4-1: selecting invalid altsetting 0 [ 755.526823][T12896] usb 4-1: USB disconnect, device number 40 [ 755.737330][T11155] Bluetooth: hci6: Controller not accepting commands anymore: ncmd = 0 [ 755.745638][T11155] Bluetooth: hci6: Injecting HCI hardware error event [ 755.752662][T11155] Bluetooth: hci6: hardware error 0x00 [ 757.806666][T11155] Bluetooth: hci6: Opcode 0x0c03 failed: -110