last executing test programs: 11.069978056s ago: executing program 3 (id=2224): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ed) mount(&(0x7f0000000140)=@filename='sysfs\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/module/dvb_as102/parameters/fw_upload\x00', 0x1, 0x0) write(r0, &(0x7f0000000380)='0', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/platform/drivers/vidtv/unbind\x00', 0x1, 0x0) syz_usb_connect$uac1(0x3, 0xba, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000200000020630712204000010203010902a80003060000950904000000010100000a2401d4003d000201020a240703060001de3fc509240602060103000407240401f347ec0924030205030205fc09240303060301060807240801810087090401000001020000090401010101020000072401f5f900000e2402010604b1020c47148017f30905010910"], 0x0) write(r1, &(0x7f0000000300)='vidtv.0\x00', 0x7) syz_usb_connect(0x2, 0x2b, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x0) nanosleep(&(0x7f0000000500)={0x1}, 0x0) io_setup(0x0, &(0x7f0000000000)=0x0) io_getevents(r2, 0x9, 0x2, &(0x7f0000000040)=[{}, {}], &(0x7f0000000080)={0x77359400}) 10.809393971s ago: executing program 1 (id=2227): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000001180)=0xe) (async, rerun: 64) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x8, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @local}, @local, {[], @echo_request={0x2}}}}}}, 0x0) (rerun: 64) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000106a053103000000000001090224000100008000090400101c0300010009210000000122f80409058103"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) (async, rerun: 64) syz_emit_ethernet(0x93, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3e0011aaabe3b51eca77891406e8659fff696262ec21e55c8f7147085cb736a13910730cc5884ca091634a259d48a95b0ce8758c07378100000033276be88385cf43fd9f0f641fc62686ed10b94205d22fa9bcc90a594be00fe09956ac5cb7db9f90c1002ea9529988149b63197dfd4fba569a6118f29cafbfb0674f614795772aeb92375340c2e3"], 0x0) (async, rerun: 64) syz_usb_connect$midi(0x5, 0x0, 0x0, &(0x7f0000000d00)={0x0, 0x0, 0x9c, &(0x7f00000004c0)={0x5, 0xf, 0x9c, 0x4, [@generic={0x7d, 0x10, 0x3, "4afea21faee3b310eb2a52737748e13b418883b07e0f88217bdf457ed63f90a9d2c787fc5f7bf41bcf99491742b31a2d482e1704f6268c83ae201440a965076fcd18a4ba11b5f91d49136358a1ebaf3de1b62dcd7dc21ef51e6126a7f9c13357ae44491010350c26af8fe36e7e4798765a41eeeee3e8de97d746"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x88, 0xea, 0x5, 0x60}, @generic={0x3, 0x10, 0xa}, @ssp_cap={0xc, 0x10, 0xa, 0xd, 0x0, 0xc2, 0xf00, 0x7}]}}) syz_usb_control_io$hid(r1, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) (async) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r0, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x5008, 0x0) (async) ioctl$SNDCTL_DSP_GETOSPACE(r0, 0x8010500c, &(0x7f00000000c0)) (async) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) 9.464016775s ago: executing program 1 (id=2232): socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x800, 0x0) syz_usb_connect$uac3(0x0, 0x97, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x644, 0x8047, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x85, 0x3, 0x1, 0x5, 0x20, 0xf, {0x8, 0xb, 0x0, 0x2, 0x1, 0x1, 0x30, 0xc}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x7, 0xa, 0x800}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@as_header={0x17, 0x24, 0x1, 0x0, 0x7, 0x4, 0x3, 0x0, 0x6, 0x9, 0x9}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0xd, 0x9, 0x0, {0xa, 0x25, 0x25, 0x2, 0x7f, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x4, 0x0, 0x8, {0xa, 0x25, 0x25, 0x2, 0x5, 0x56f}}}}}}}}]}}, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000004d00)={0x0, 0x0, &(0x7f0000004c00)=[{&(0x7f00000027c0)="920660e6cd", 0x5}], 0x1}, 0xc0) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$PPPIOCGL2TPSTATS(0xffffffffffffffff, 0x80487436, &(0x7f0000000400)="2be9a2c91a78f1f37037e7fb09d4d4245853fe959886c1b0a056326e4f72c248c953028c7400d70e960eeceacd800cacbabf6b46847af9145aefa86ce489afd30deb28d7fcdeb0f1d1d49dc170bc7774d7afab6e4ddfc4d16d8a24c128950c9f157ae379f5aaa92cf9da55ad7187a1a1d48430f57c18c2967a18be319c20853bf32e614652b4f0d9c9aa61038269affcfbd9a11fbd9c441d56a61ebf84bf3d62c19f3324402200dc1c5c4fcdc18dcd9b5891a8b9ef32ecdec4be027918a85947defc05ed741ae7fb2024187a5d0ce27524dbb63ddb42ee60d353") prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000040)='binder\x00', 0x320081a, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='mounts\x00') pread64(r4, &(0x7f0000002240)=""/237, 0xed, 0x4eb) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) r5 = socket$inet(0x2, 0x5, 0x0) setsockopt$inet_opts(r5, 0x0, 0x4, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000100)='10', 0x2) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x280c1}, 0x8000002) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000007c0)={{0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x10, 0x9}, 0x1000, 0x74, 0x8000000000000001, 0x4, 0x0, 0x0, 0xf1}) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x68}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r7, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x4, 0x1, 0x5, 0x0, 0x0, {0x3, 0x0, 0x2}, ["", ""]}, 0x14}}, 0x41) sendmsg$SMC_PNETID_DEL(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="270e28bd70000000000004"], 0x14}, 0x1, 0x40030000000000}, 0x4000) openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) 9.075572184s ago: executing program 4 (id=2234): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r1, &(0x7f00000001c0)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x10) (async) close(0x3) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="4000000010003b1500000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="41040000015001001800128008000100677470000c00028008000100", @ANYRES32=r2], 0x40}}, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) (async) openat$comedi(0xffffffffffffff9c, 0x0, 0x88000, 0x0) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x5, &(0x7f0000000000)=0x4d3196d1) (async) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) (async) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) (async) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[]) symlink(&(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) r4 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x1e040, 0x0) close(r4) (async) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) (async) r5 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) shmat(r5, &(0x7f0000ffd000/0x1000)=nil, 0x7000) (async) shmctl$SHM_UNLOCK(r5, 0xc) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x41000004, &(0x7f0000000040)) (async) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) (async) bind$inet(r2, 0x0, 0xfffffffffffffd17) (async) socket$inet(0x2, 0x5, 0xc) 8.897919417s ago: executing program 0 (id=2235): r0 = socket(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000002240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MPATH(r2, &(0x7f0000002300)={0x0, 0x0, &(0x7f00000022c0)={&(0x7f0000002280)={0x34, r1, 0x22d, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x40800}, 0x10) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x76dc, 0x0, 0xfffffff7, 0xfffffffc}, 0x10) write(r0, &(0x7f00000001c0)="2000000012005f0214f9f4070000fbe40a8a00000000", 0x16) quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x9, 0x4, 0x4, 0xae, 0x2, 0x3, 0x10000000000001, 0x6, 0x13}) ioctl$EVIOCGVERSION(0xffffffffffffffff, 0x80044501, &(0x7f0000000140)=""/64) syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040991100b00000000000010902200001010080320904000002000000000705810200020007050202"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) open(&(0x7f0000000880)='./dev/gnss0\x00', 0x0, 0xfc559a7289ff8d5e) openat(0xffffffffffffff9c, &(0x7f0000000140)='./dev/gnss0\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff0700000000000000000000850000002a00000018010000646c6c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) flock(r4, 0x9) r6 = syz_open_dev$loop(&(0x7f0000000040), 0x2, 0x200000) ioctl$LOOP_SET_STATUS(r6, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x3, 0x4, 0x0, 0x15, "f3ce62fb729e44e9d25e48305a28e7a7a029b1b4f73f6ba3769d05b5d0b6e0063beb5f4cc57f66c7073555899fcb9cf8658a1aee2331e54b6d29b830b8841721", "1958adc77c1ed53a72eaa5fc0e8fa9594066fc2581c16dfbae7cbe4d8bba4fff", [0x5, 0x2]}) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r5}, 0xc) 8.866080716s ago: executing program 4 (id=2236): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000000)={&(0x7f0000000000), 0x1000, 0x800}, 0x20) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001000)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000001200)=0x10, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000001300)=0x10, 0x4) bind$xdp(r0, &(0x7f0000001400)={0x2c, 0x0, 0x1, 0x0, 0x0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x11, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001500)={r1, &(0x7f0000001600), &(0x7f0000001700)=@udp=r0}, 0x20) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x6, &(0x7f0000002000)=@raw=[@map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0xb7, 0x2}, @generic={0xb7, 0x3}, @generic={0x85, 0x0, 0x0, 0x0, 0x33}, @generic={0x95}], &(0x7f0000003000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000004000)={r2, 0x0, 0xe, 0x300, &(0x7f0000005000)="00112233445566778899aabbccdd", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x50) 8.708031833s ago: executing program 4 (id=2237): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@bloom_filter={0x1e, 0x0, 0x2, 0x7, 0x0, 0x1}, 0x50) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000007"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x83, 0x0) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000340)={r1, 0x0, 0xb4, 0x0, &(0x7f0000000140)="3ea73f150ca54b6b48a3946a2e7d18fc3bf03f7a511fd10227e2a6023896c17983968f02139ae3706f9119a2be5e775ddace088bff10a5959f327904b29504b75610ede6a96bace73ae7e5dcba6e3c6ff0d3c40298a5d23adccc5f7139b08c734046ca84a32db3a9bed62e4e2afe811e88eb2c03f7631f603d4cb2274b16df1292e1743695e663c4e1369daa0eaa5b6fb2a3125f6f19a898474baa3431fe929a6616735e3b741cdbf705ed62602a9285978b7391", 0x0, 0x897, 0x0, 0x73, 0x0, &(0x7f00000002c0)="5eee3f5e3424d1546c9dde5f822bb1027514ead077396f18732c4df2471873491965e622d9f22482ef294d3439b2418ba276cf01e27c6d49248e21b2aeef9af6ff789ca917d5ac2ba45e980dbe511211fbbd7c17e4c88aeba7315425861267a1f391eb5d07bc49f0065d5b1930fe7a08cf0b8b", 0x0, 0x2, 0x0, 0xd}, 0x50) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_CAP_X86_NOTIFY_VMEXIT(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000580)={0xdb, 0x0, 0x2}) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000240)="b805000000090200e1490000320f01d9660ff7e31bf7ecec05000000b90000c0fe0fae41d90100b9800000c00f3209083667dbd20f300f0826f30fc7b205000000660fc775022e0ffa600c980f320f3566b85700", 0x54}], 0x1, 0x17, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0x1, 0x6bb6c4a5b2d35090, 0x0, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r5, 0x4068aea3, &(0x7f00000000c0)={0xbe, 0x0, 0x1}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$sndseq(r6, &(0x7f0000000240)=[{0xd, 0xf, 0x60, 0xd, @tick=0x7, {0x5, 0x6}, {0x3, 0x4}, @control={0x2, 0x7, 0xfffffffa}}], 0x1c) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) 7.181089579s ago: executing program 3 (id=2238): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r0, 0x2000012, 0xeaa, 0x7ffe, &(0x7f00000003c0)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x1100, 0x0, 0x0, 0x0}, 0x50) 6.371824555s ago: executing program 3 (id=2240): r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x181042, 0x0) read$msr(r0, 0x0, 0x0) (async) r1 = semget(0x1, 0x0, 0x10) semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000140)=[0x2, 0x0, 0x200, 0xffff, 0x8, 0x4]) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6) ftruncate(r2, 0x100000) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x1, 0x0) write(r3, &(0x7f0000000200)='1', 0x1) close(r3) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/subsystems/testsubsys/namespaces/1\x00', 0x1ff) (async) r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/nvmet/subsystems/testsubsys/namespaces/1/buffered_io\x00', 0x1, 0x0) write(r4, &(0x7f0000000340)='1', 0x1) (async) close(r4) openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nvmet/subsystems/testsubsys/namespaces/1/device_path\x00', 0x1, 0x0) (async) r5 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/subsystems/testsubsys/namespaces/1/enable\x00', 0x1, 0x0) write(r5, &(0x7f00000004c0)='1\n', 0x2) close(r5) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/nvmet/ports/1\x00', 0x1ff) r6 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0) write(r6, &(0x7f0000000600)='loop\n', 0x5) (async) close(r6) (async) symlinkat(&(0x7f0000000680)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f00000001c0)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00') write(0xffffffffffffffff, &(0x7f0000000800)='transport=loop,nqn=testsubsys\n', 0x1e) (async) nanosleep(0x0, 0x0) (async) r7 = openat$binfmt_register(0xffffff9c, &(0x7f0000000080), 0x1, 0x0) write$binfmt_register(r7, &(0x7f0000000300)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0xc, 0x3a, '\\x0\xba\x00\x00', 0x3a, 'F30d\x14\xe5#\x00\x95\xdd\x96^\xe6z\x04\'\xf9\xf2\xebC', 0x3a, './file0'}, 0x41) mkdirat(0xffffffffffffff9c, &(0x7f0000000880)='./sys\x00', 0x1ff) 6.260744324s ago: executing program 1 (id=2241): bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r0 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000001000/0x3000)=nil, 0x30000, 0x0, 0x11, r0, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r1 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_usbip_server_init(0x3) syz_usbip_server_init(0x3) syz_usbip_server_init(0x3) syz_usbip_server_init(0x3) syz_usbip_server_init(0x3) syz_usbip_server_init(0x3) syz_usbip_server_init(0x3) syz_emit_ethernet(0x51, &(0x7f0000000500)={@link_local, @local, @void, {@ipv4={0x8864, @icmp={{0x5, 0x4, 0x0, 0x0, 0x43, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @echo={0x8, 0x0, 0x0, 0x96, 0xfffb, "f2e7bc4572fbb408c1916e8a21ee98fbac5fe4b8feee34c11ae307fcc7ffda6c24269f97571639"}}}}}, 0x0) syz_usbip_server_init(0x6) syz_fuse_handle_req(r1, &(0x7f000000bb40)="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", 0x2000, 0x0) syz_fuse_handle_req(r1, &(0x7f0000007b40)="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", 0x2000, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2}}, 0x20) setxattr$incfs_metadata(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x3}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) r6 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0xb) ftruncate(r6, 0x1000006) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @private=0xa0100ff}, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x36}}, {0x2, 0x4e24, @rand_addr=0x64010100}, 0x1d7, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x8, 0x8}) 6.139213209s ago: executing program 4 (id=2243): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x6, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$FUSE(r1, 0x0, 0x0) capset(0x0, 0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_int(r2, 0x29, 0x31, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(0x7fffffffb000, 0x7, 0x3000001, 0xbd4c341840b03bf2, 0xffffffffffffffff, 0x8000000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000700)=@newtaction={0x4c, 0x1e, 0x109, 0xfffffffd, 0x0, {}, [{0x38, 0x1, [@m_simple={0x34, 0x18, 0x0, 0x0, {{0xb}, {0x4}, {0x6, 0x6, "05f6"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x4c}, 0x1, 0x2b1e}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20) 5.953811686s ago: executing program 3 (id=2244): syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x7) getsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x7, 0x0, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prlimit64(0x0, 0xa, &(0x7f0000000280)={0xa, 0x1d21e4c0}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) fanotify_init(0x4, 0x8000) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000300)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0xffb, &(0x7f00000002c0)) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYRESDEC=0x0, @ANYRESDEC, @ANYRES16=r3, @ANYRES32=r5], 0x128}, 0x20004885) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYRES64=r0, @ANYBLOB="2cad1b438a5ec102ccc2786b466eae34b3d809c7f547a453d857bfc2f80a42fb5a5c990c2c1c18c53dadf3c9660b32bc4f484318ac9bdbc2f16a4ff078224a4394b9248c8a3e8acd053b7a7225630a23c603ecf669b29f06e391a628462e5e88fdb0c83a67fabdd26b75a710b3d394c26adb7774df18bd3716267c2c71fdc839b52ebf0c02"], 0x128}, 0x0) mount(&(0x7f0000000400)=@rnullb, &(0x7f00000000c0)='./mnt\x00', 0x0, 0x80, 0x0) bind$rds(r4, &(0x7f0000000100)={0x2, 0x4e21, @rand_addr=0x64010102}, 0x10) 5.942892962s ago: executing program 2 (id=2245): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010027bd7000fedbdf25090000000000000000c16feb1e395309000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4004800) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nullb/nullb1/zone_size\x00', 0x1, 0x0) 5.391343439s ago: executing program 2 (id=2246): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000080)={0xfffffffffffffffc, r0, 'id0\x00'}) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SDTEFACILITIES(r4, 0x89eb, &(0x7f0000000100)={0x3, 0x4, 0x7, 0xff, 0x96, 0x5, 0x18, "5f391700dba9e67bfb8eb41e435e2fa2804bd463", "e1e77dbb51b794aac993d69e44afd39158b860c4"}) 5.327568904s ago: executing program 0 (id=2247): syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000200)={0x20, 0x15, 0xa2, "941339e399fb0d5322214275e2487f41868d71455aa0e63fe29305a5eb72b5e914051a41db7b9a1382cfab0100000011ad7b64a18f147e68dea2fbe048e73c578396e08f304687ce29f74da4509a83fc8f0cdca73eb9810591ba4f25b98a18d866a7733384eba09127db1f3785764c69f9943e63c8d1f21af5dc3bab5e1f29b0f302f60cb615ed790b5faf9fef85063dfaf3b21bcec5c914ce06caedd105670f1b1b"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x4d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000298962d08e2041414b9c50102030109023b00027f0130090904ab020002af27cf052406"], 0x0) r0 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="120100015ae4c41096050100f5050100030109021b0001000000000904d60001b5e14500090583"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f00000002c0)=ANY=[@ANYBLOB="200310"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.666894492s ago: executing program 4 (id=2248): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x17) bind$bt_hci(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, 0xffff, 0x3}, 0x6) ptrace(0x10, 0x0) r1 = socket(0x1e, 0x4, 0x0) mount(0x0, &(0x7f0000000180)='.\x00', &(0x7f0000000100)='nfs\x00', 0x0, &(0x7f0000000000)='\x05\x00\x00\x00\x00\x00\x00\x00\x00\xf6 \xe2\xc3\x7f.,\xdc\xab\x83(\xc7\xd3\x98\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\xc77\x8b\x86\xe0\xe3#9b\x1f\x0e\xf8\xcd*qce\x96\xcfJw\x00'/134) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x5, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fd3f00000000000009000000850000007b000000850000001100000095"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0x0, 0xe, 0x0, &(0x7f00000000c0)="00000000000000ce94327fc1a80c", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x0, 0x0) readv(r5, &(0x7f0000001380)=[{&(0x7f0000000100)=""/28, 0x1c}], 0x1) ioctl$SG_SET_FORCE_PACK_ID(r5, 0x227b, &(0x7f00000001c0)) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) r6 = dup3(r4, r1, 0x0) recvmmsg(r6, &(0x7f0000008a80)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000480)=""/250, 0xfa}], 0x1}, 0xffff}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000780)=""/76, 0x4c}], 0x1}, 0x2}, {{0x0, 0x0, 0x0}, 0x6}], 0x3, 0x40000001, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="e50a0000ffffffff61115c0000000000850000007c00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='loginuid\x00') read$FUSE(r7, 0x0, 0x0) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000040)=r0, 0x4) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x17}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r0, @ANYBLOB="0000000000000000890000000000000095"], &(0x7f0000000d40)='syzkaller\x00'}, 0x94) 4.432830519s ago: executing program 2 (id=2249): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ed) mount(&(0x7f0000000140)=@filename='sysfs\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/module/dvb_as102/parameters/fw_upload\x00', 0x1, 0x0) write(r0, &(0x7f0000000380)='0\x00', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/platform/drivers/vidtv/unbind\x00', 0x1, 0x0) syz_usb_connect$uac1(0x3, 0xba, 0x0, 0x0) write(r1, &(0x7f0000000300)='vidtv.0\x00', 0x7) syz_usb_connect(0x2, 0x2b, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x0) nanosleep(&(0x7f0000000500)={0x1}, 0x0) io_setup(0x0, &(0x7f0000000000)=0x0) io_getevents(r2, 0x9, 0x2, &(0x7f0000000040)=[{}, {}], &(0x7f0000000080)={0x77359400}) 3.888196756s ago: executing program 1 (id=2250): dup(0xffffffffffffffff) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0) ioctl$SNAPSHOT_S2RAM(r0, 0x330b) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0xa4e4, 0x14b302) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) mq_open(0x0, 0x42, 0x58, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x4000000053d2) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='mtd0\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100)='jffs2\x00', 0x0, &(0x7f0000000140)='compr=none\x00') write(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) write(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./mnt/fillfile\x00', 0x42, 0x1ff) write(r3, &(0x7f00000005c0)="000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f202122232425262728292a2b2c2d2e2f303132333435363738393a3b3c3d3e3f", 0x8000) 1.155296482s ago: executing program 1 (id=2251): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000004c0)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="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", 0x3b2}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3}, 0x0) sendmsg$key(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) 1.144401476s ago: executing program 0 (id=2252): bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1f, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000400)={r1, 0x0, 0x0}, 0x10) 1.08469293s ago: executing program 2 (id=2253): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_clone3(&(0x7f0000000780)={0x10026400, &(0x7f0000000580), &(0x7f00000005c0), &(0x7f0000000600)=0x0, {0x28}, &(0x7f0000000640)=""/169, 0xa9, &(0x7f0000000700)=""/39, &(0x7f0000000740)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0], 0x8}, 0x58) newfstatat(0xffffffffffffff9c, &(0x7f0000000800)='./file0\x00', &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) stat(&(0x7f00000008c0)='./file0\x00', &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000980)='devices.deny\x00', 0x2, 0x0) r6 = syz_open_dev$vivid(&(0x7f00000009c0), 0x2, 0x2) r7 = syz_open_pts(0xffffffffffffffff, 0x900) r8 = openat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file0\x00', &(0x7f0000000a40)={0x10880, 0x10, 0x26}, 0x18) r9 = inotify_init1(0x80800) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000a80)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r11 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000ac0), 0x101000, 0x0) r12 = syz_open_dev$media(&(0x7f0000000b00), 0x6, 0x10100) r13 = syz_open_dev$ptys(0xc, 0x3, 0x1) r14 = socket$netlink(0x10, 0x3, 0xf) r15 = fsopen(&(0x7f0000000b40)='sysv\x00', 0x0) r16 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000b80), 0x2, 0x0) r17 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000bc0), &(0x7f0000000c00)=0x10) r18 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000c40), 0x2, 0x0) r19 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000c80), 0x2, 0x0) r20 = syz_open_dev$sndpcmp(&(0x7f0000000cc0), 0x4, 0x404680) r21 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000d00)='devices.allow\x00', 0x2, 0x0) r22 = syz_clone(0x1180000, &(0x7f0000000ec0)="bd2ba5071519165a12516a042226a75cfd22a23c14f6112b56ebca2f53c994ad19702cb65833c44c342393b644e47b89f4e57e2cf6705e64a41d40dd58c5001bba4c1c5e19caaa97daced37bb122decb4b386b7f", 0x54, &(0x7f0000000f40), &(0x7f0000000f80), &(0x7f0000000fc0)="e85cdd5e61b4f747ebc13fb7548a93fb59e486fa12377f54bbb32e090fcf5da61ed9c1df201e1e8b86d4d03d676fcfdce8b31164e21f889375d2430d27455d966cee0c1b8117b8e2f8b435003b046b8e512f7c6c") fstat(0xffffffffffffffff, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000010c0)='./file0\x00', &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r0, &(0x7f0000001740)=[{{&(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000500)=[{&(0x7f00000000c0)="45bcb1e4b138b5dffbe3240d2af94d552245c6675747b161f33803778d7dfc9888d6b7d3f3d37f8de426d0c776283d729039a1409c09e2d2d7a7d02b3830a71b49dbbd4b199b7725837b0df8c54308a1c8ac9a5b05bb7af26f02b6b91c5a869a785220c0549361b65c915bcb834417", 0x6f}, {&(0x7f0000000140)="6e76782382507ea3bbe80d7034767795b2da803b158853b505ce204ce9fb43bf9d1e6e2e4dc1993737cfe4ff6f7d002d183f1e6a85de9e398710f2180545de84457b99fca06914c2a59c8313b7ec2f5dba7e07567a6b736ddf5e3cf63a8af7008a99bd0c57281d0c590b50a3efb491aa08b1d28bedcbbf62e9ea61da611da240d24f90654d4f9171cb2bf5dc4326fdfaae28c9f5bbc2791e15dba3cdadb8927d82b32f03f7e37d1ab5e767d7fc46e63cd9328b7c34f2e9c8a899c8859419228ecdd9aac9ce480f2197ff10eaa4b8bb9a3c809f4c92a33c8777168d7cfbffb0f6eafc203652337d52", 0xe8}, {&(0x7f0000000240)="a74ae2897843709004a8c839e7116c848798398b8891fd491c8e07735537fb21e3b8f8a4d69179e8b60467eae1af8d48499afcdf5f3d1a33be5e4ab321d2e40e9a303edd46c9a7884d6b9f25b09b0f01b565189066207528905d9e11c1ecc5b0354a30b157cd4faf1427a40e58cc4fe4191db7bb85e67e3013d35ceebf7ea6ad5122e717668611c7f9781956bd2fd36752c2a76e302f25099f350ce58c2a75dc3ee73228f7b7cb21d6c3c401be06ff90200ee8c4502d2ba1a525f3b35295de9a4f3ac401e2526959ace4cd5fcf577f2b2f9cabbe6733498c2e4fc292ea3060122852184fc4a0ea27460c52ac8dd931721dddb5db99d306a325", 0xf9}, {&(0x7f0000000340)="12d9e3a27bec", 0x6}, {&(0x7f0000000380)="da9b35d6164e17a16046b546fc6c284fdf9bb741659c013d5e9fe980202010425b84d0c8aa722e431dae245e55493245172e82cb89db0fbb0ce8bdf064e3d89dab57b5abe4e1c6c01a9828173bf9eb77a1cf62023fdaa1db69b8698750dd6ab127", 0x61}, {&(0x7f0000000400)="47ba2f6d8c7009c7a3381920cd46723164a647ca40d9bf198f944c6d6066b9459c2611f48d9ff3974c65a7b484f53f14bb11518e8c13d3d6cfc3d5876f4e8f8e7ed4456c9d1d8ee284c6b66e7250c7c240d886a75b8a13480c3d457ece34821b11996192b0d2d5d5d932c58c7c1075b0d502dab8daa7231ae42e55c61905d479f90e247cd4913b7446f5", 0x8a}, {&(0x7f00000004c0)="314f75969ec378b9ce0db543dbb089c29dfc5e", 0x13}], 0x7, &(0x7f0000000d40)=[@cred={{0x1c, 0x1, 0x2, {r2, r3, r4}}}, @rights={{0x1c, 0x1, 0x1, [r5, r6, r7]}}, @rights={{0x2c, 0x1, 0x1, [r8, r9, r10, r11, r12, r13, r14]}}, @rights={{0x30, 0x1, 0x1, [r15, 0xffffffffffffffff, r16, r17, r18, r19, r20, r21]}}], 0xa0, 0xc0}}, {{&(0x7f0000000e00)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000e80), 0x0, &(0x7f0000001180)=[@cred={{0x1c, 0x1, 0x2, {r22, r23, r24}}}], 0x20}}, {{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f00000011c0)="2397bce28aa8870c758c4876af09a4d2af39c8cf1e49f49d86415aae5524baf06054dd5230f14bb62fdc2d44ce699b18b1a66a6e451f6c2d388d76bb74ae3a8ef0888015c9dbfb47070519e509d7f57c57c1c2fc9bb4e1b7c365d0f6ffd43e20d6efa2c7a6ed181ca471f94f106ea3b8d5bcb7b8ced433c36dcd82b850cc990ad5002a83870ca7c2", 0x88}, {&(0x7f0000001280)="e597082bd48dd766b268deb274fd7e85be58a68a06e09a81c6a35e951b1436f7f8bb92c31c1183f95a8cf7531393676833c71a96b6255f232b0ce8b845dd5c7f6156912f4639fd8786290e72102035bff768030559fef951882af37a547ead4b2b2009977d0d32d098931a5f67818b4e8707d87e32c894f97682f6739a7f0f415401433369656da55549386fc0a27f7598ee45f3ab23787c15290f073b0a7df6a524d41764a7d5bdb95acd6723f399504395c71511cd10760c129c1570c261c0d1f753d04fdfba27f44e70a6b168593688462ca9133ed840fb38", 0xda}, {&(0x7f0000001380)="e4d9f2dd9f0bc6cc47ae0b244df99623af838673d54e5daf57b6faf7c2c72a4425eace362d6d8e3a5916be3a050d6164edad60f0ffad633d25f7db89d8103ab096a0ba99b469d2e0f1aacad490380baf8c41ec502c80def83fa4393d3e088147f911945ea3257e3bd3653c7bf10c037392fabb982c00290a140d7938a908d9bd488cb4524b505fe2b860ae49d016b4b90cd338de2779ee1d77206950ec4ecd8d71915aac2d25b14011e8b2170208ca44d7e67f1030e9f745ce478d2de8be0ab3cec9c5d22e5a33ffc7a48f35f721c43d3c45826134750494d1fc47857d6812", 0xdf}, {&(0x7f0000001480)="b4138c657f019d8d0f72674a5bd9fd1ea8a6b916dcf3e69b9cb19dd67d1c3eb0d0e591eafe594c06a85f452c41fb213e87480259fb262124003c1598afc5ffddc754dc71660e56c2253f162ff563d29ca543e567fc7ec2d92b871500546969079369c7f429bafee7f4773dbac7fe166796ba6ef38aa8d0937271c2a854af208690fcbed038b4b5f65c081272cbef157bcae42b3d30543bfee8c48798ce0bcb6cdf52a157d4b6e17bbfe2165c7cd7", 0xae}, {&(0x7f0000001540)="0df9d657407c392651a76531c9ef04ccf371ea9500a1707bf648406160f5d9c522c6c4dbd79f3414bfffba4ea8a15748d5a26030304355ceb73b5bcf2be88dc02dd533b332f9182dba29", 0x4a}, {&(0x7f00000015c0)="ea8871a26bcbf212c6a294da9fdccf94833736bbeb0b98479596049168dbe5dae83e72a9eaed7f41618bf1e5e90c971f9cb348be2b859622d1c91bd16e4c684b7817e3", 0x43}, {&(0x7f0000001640)="bea3fcdede5a0a7cbca35f4f205c1cf183341fccce38dc2c9fb7", 0x1a}], 0x7, &(0x7f0000001700)}}], 0x3, 0x40000) ptrace$peeksig(0x4209, r1, &(0x7f0000001800)={0x7, 0x0, 0x5}, &(0x7f0000001840)=[{}, {}, {}, {}, {}]) dup3(r18, r20, 0x80000) pidfd_send_signal(r10, 0x1b, &(0x7f0000001ac0)={0x0, 0x9, 0x9}, 0x0) ioctl$OCFS2_IOC_MOVE_EXT(r9, 0x40406f06, &(0x7f0000001b40)={0x3, 0x1a, 0x80, 0x9, 0x4}) mq_getsetattr(r8, &(0x7f0000001b80)={0x69f, 0x4, 0xffffffffffffffff, 0x1}, &(0x7f0000001bc0)) 936.169742ms ago: executing program 4 (id=2254): sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4000000) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, 0x0, &(0x7f0000000040)) io_setup(0x7, &(0x7f0000000280)=0x0) io_pgetevents(r1, 0x4, 0x4, &(0x7f0000000200)=[{}, {}, {}, {}], &(0x7f0000000180), 0x0) socket$xdp(0x2c, 0x3, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000080)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) r2 = inotify_init() read(r2, 0x0, 0x0) 857.837759ms ago: executing program 0 (id=2255): r0 = syz_open_dev$video4linux(&(0x7f0000000040), 0x7fff, 0x48b03) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0xeaa19000, &(0x7f0000000080)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x80, &(0x7f0000000100)=0x0) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r1, 0x0}]) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000000)={0x3, 0x9a090a, 0x1}) 656.318435ms ago: executing program 2 (id=2256): syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000), 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000010400)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000a00)="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", 0x14c) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x40800) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) bind$inet(r1, &(0x7f0000000000)={0x2, 0x15, @loopback}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000100)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000140)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x2, 0x1, 0x100}}, 0x44) r3 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r3, &(0x7f0000000300)={0x2, 0x15, @loopback}, 0x10) 483.431288ms ago: executing program 0 (id=2257): r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) readv(r0, &(0x7f0000003140)=[{&(0x7f0000000200)=""/4096, 0x1000}], 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000d80)=ANY=[@ANYBLOB="018000000000000000000000000000000a00000225000300110000000c000480080002400000000e"], 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x80) 423.112603ms ago: executing program 1 (id=2258): r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000018c0), 0x0, 0x0) ioctl$mixer_OSS_GETVERSION(r0, 0x40086602, &(0x7f0000000000)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f0000006200)=ANY=[@ANYBLOB='\x00\x00\x00', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYRESOCT=r1, @ANYRES16=r2, @ANYRESDEC=r2]) read$FUSE(r2, &(0x7f0000008340)={0x2020, 0x0, 0x0, 0x0}, 0x2020) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) quotactl_fd$Q_GETFMT(r1, 0xffffffff80000401, r3, &(0x7f0000000280)) statx(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x900, 0x10, &(0x7f00000000c0)) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r4, &(0x7f0000000240)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_ENTRY(r4, &(0x7f0000000140)={0x90, 0x0, r5, {0x4000000000007, 0x0, 0x8, 0xe, 0x0, 0x1, {0x2000000002, 0x0, 0x6, 0x5, 0x8, 0x7, 0x7, 0x3, 0x7ff, 0x2000, 0x7, r6, r7, 0x5, 0xfff}}}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'netdevsim0\x00', 0x0}) r11 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r8, r10, 0x25, 0x0, @void}, 0x10) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010000000000000000001000000018000180140002006e657464000000006d3000000000000005000b0002000000"], 0x34}}, 0x4044890) close_range(r8, r11, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001900)={0x2020}, 0x2020) newfstatat(0xffffffffffffff9c, &(0x7f0000003940)='./file0\x00', &(0x7f0000003980), 0x1000) getresgid(&(0x7f0000003a00), &(0x7f0000003a40), &(0x7f0000003a80)) r13 = syz_open_procfs(0x0, &(0x7f0000000b00)='net/rpc\x00') r14 = openat(r13, &(0x7f0000000c00)='auth.unix.ip/channel\x00', 0x2, 0x0) write(r14, &(0x7f0000000d00)='n\\ 127.0.0.1 2\\0000000\\0l\\calhost\n', 0x24) r15 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r15, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r15, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r15, &(0x7f0000000040)={0x50, 0x0, r16, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r15, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 355.957119ms ago: executing program 2 (id=2259): syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x2c, 0x5, 0x7f, &(0x7f0000000080)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r4, 0xc013fd03, &(0x7f0000001000)="040000000000000000000000380100003801000000000000000000000000000000000000000000000000000000000000706f6f6c") ioctl(r4, 0xc013fd04, &(0x7f0000003000)="040000000000000000000000380100003801000000000000000000000000000032000000000000000000000000000000706f6f6c") syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=ANY=[@ANYBLOB="98030000", @ANYRESOCT=r5, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r2, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x54, 0x2, 0x6, 0x301, 0x0, 0x0, {0x1, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0, 0x0, 0xffe}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0xc000}, 0x20004040) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 355.013074ms ago: executing program 0 (id=2260): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000004}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r1, 0x3) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000240)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x17d) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r5, 0x5609, &(0x7f0000000040)={0x1, 0x7, 0x3}) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', 0x0, 0x80c019, 0x0) r6 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl(r6, 0x400c4d02, &(0x7f0000000a00)) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x2, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000180)='./file1\x00') r7 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, 0x0, &(0x7f0000000780)='c:::/\x83\xc1\xcfD\xc4AO\x06)\xb03\xfcI\x95w\x96\x9b\xe9\xa6\x1a\x96\xael\x11\xa6\x06\xe3G\xb1\x1d$\xc2;\x8f\xf3\x13\xebB\x93\x94\x01\x8b\x88\xeb\xa3\x01\rx\x86bK&\x13a~\x04/\x18\x14ZM\xcb\xad\x92>\xe5\x01V\xdc\x05#\x13\xe9F\xa0\x1b\xf8\xe12\xe9\x80\x988\xd8?\x86\xe9i\x7f\xa8\xe0c\x94\xc1\xae\x9c\xba\x1c\xfa\xbc\xa8\xbf\xff\xfe\xfe!\x7f2\xf1\xc7P\x80A\x1c2k\xf6}P\x19\xee:i|0\x1c\x13u\xb0I\xaa\xe3\x14\x9a\x1f\x9f(\xd1$\x06\xa8&t&A0\xa7\xef\x9cL\x8e1K', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000700)='source', &(0x7f0000000000)='c:::/\x83\xc1\xcfD\xc4AO\x06)\xb03\xfcI\x95w\x96\x9b\xe9\xa6\x1a\x96\xael\x11\xa6\x06\xe3G\xb1\x1d$\xc2;\x8f\xf3\x13\xebB\x93\x94\x01\x8b\x88\xeb\xa3\x01\rx\x86bK&\x13a~\x04/\x18\x18ZM\xcb\xad\x92>\xe5\x01V\xdc\x05#\x13\xe9F\xa0\x1b\xf8\xe12\xe9\x80\x988\xd8?\x86\xe9i\x7f\xa8\xe04c\x94\xc1\xae\x9c\xba\x1c\xfa\xbc\xa8\xbf\xff\xfe\xfe!\x7f2\xf1\xc7P\x80A\x1c2k\xf6}P\x19\xee:i|0\x1c\x13u\xb0I\xaa\xe3\x14\x9a\x1f\x9f(\xd1$\r\xa8&t&A0\xa7\xef\x9cL\x8e1K\f\xeb|%o\xf4v\xad~\x1a\xf3~\xeeI\tv\xe5\x11\xb7\x8f\xfa\xe0\xa6W#S\xaa-\x93\xcb\xc2\x1d\xff\xe9A,+?H\x91\xeeo\x1f\xd6A\xd1\x95\xe92\x06\x00o\xee\x14\xb9\v8\xa0\x91\'Jb\xb7\x92\xb1\xb3\xb9\x83\x98\x8aB\xf3<\x1b\x98\xa8B\xb1\xf73\x94<]\\\xb1T\x03\x9a%>\xd4\xe7=\\q\xd7\xbd\xb7\x19d\xb7\xd7\xc8\xb0\x84\x85\xbdI\xa6\xb0\x15@\xab\x8d\x8dW\xe2\xc5Yg\xaf&\x1b\xa7\xfd\xfc\xbc\x84\xefK\xfe\v\xd0\xc3Xp!2\n\xd4\xcf/[W\"h\xafC\x992x[\x9b\xfb26\xe48\v\x9bJ<\xee\x8cE\x9f\xa1\xc6\xb9\x93\xa5\x1dp\xfbPJ0\x057\xec\xa5cg2\xfc-\xe24\xf61J-hn\x83\'FVz|\x16\x95 {/\xe3\xef\x91/\xbco\xfe\xb9\xef\x84F\xaaL\xc0\x00\xa5\xa4\x90\a\xb5\xda\v|\xd5\xff\x1a\x0f\xad\xd1+M\x93\x14\x10C\xec\xd9\xcb\x0f\x11S9\x03\xb2\xaaG\"\xd6\a\xefI\xc0\"\xf8\xa42\x17X\t#\x1e0x0}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r2, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x4008840) 0s ago: executing program 3 (id=2262): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x50, 0x10, 0x401, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x5eb, 0x28000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'bond0\x00'}]}, 0x50}, 0x1, 0x400000000000000, 0x0, 0x20000040}, 0x0) kernel console output (not intermixed with test programs): bulk [ 434.442006][T11539] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1754'. [ 434.467364][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 434.473718][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 434.485005][ T5608] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 434.509838][ T5606] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 434.544885][ T8583] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 434.645553][ T5608] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 434.660395][ T5608] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 434.682118][ T5608] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 434.712883][ T5608] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.723450][ T8583] usb 4-1: Using ep0 maxpacket: 16 [ 434.729239][ T8583] usb 4-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 434.739960][ T8583] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 434.748770][ T5608] usb 1-1: config 0 descriptor?? [ 434.753935][ T8583] usb 4-1: config 0 has no interface number 0 [ 435.291876][ T8583] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.310839][ T8583] usb 4-1: Product: syz [ 435.318729][ T8583] usb 4-1: Manufacturer: syz [ 435.323328][ T8583] usb 4-1: SerialNumber: syz [ 435.333187][ T8583] usb 4-1: config 0 descriptor?? [ 435.346059][ T5608] usbhid 1-1:0.0: can't add hid device: -71 [ 435.356880][ T8583] hub 4-1:0.132: bad descriptor, ignoring hub [ 435.363337][ T5608] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 435.374802][ T8583] hub 4-1:0.132: probe with driver hub failed with error -5 [ 435.430067][ T5608] usb 1-1: USB disconnect, device number 65 [ 435.442136][ T8583] usbhid 4-1:0.132: couldn't find an input interrupt endpoint [ 435.493552][T11553] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1759'. [ 435.504543][ T5699] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 435.530899][ T8583] libceph: connect (1)[c::]:6789 error -101 [ 435.537297][ T8583] libceph: mon0 (1)[c::]:6789 connect error [ 435.579575][T11553] ceph: No mds server is up or the cluster is laggy [ 435.591750][ T5699] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 435.601805][ T5699] em28xx 5-1:0.0: board has no eeprom [ 435.680670][ T5699] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 435.691024][T11558] nfs: Bad value for 'source' [ 435.699816][ T29] audit: type=1400 audit(1787231458.106:1119): avc: denied { mounton } for pid=11557 comm="syz.2.1760" path="/syzcgroup/unified/syz2" dev="cgroup2" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 435.723718][ T5699] em28xx 5-1:0.0: dvb set to bulk mode. [ 435.731472][ T8583] usb 4-1: USB disconnect, device number 65 [ 435.747859][ T42] em28xx 5-1:0.0: Binding DVB extension [ 435.760936][ T5699] usb 5-1: USB disconnect, device number 52 [ 435.769142][ T5699] em28xx 5-1:0.0: Disconnecting em28xx [ 435.813559][T11558] x_tables: duplicate underflow at hook 3 [ 435.831480][ T42] em28xx 5-1:0.0: Registering input extension [ 435.840814][ T5699] em28xx 5-1:0.0: Closing input extension [ 435.927828][ T5699] em28xx: Freeing device [ 435.946485][ T5608] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 436.787494][ T29] audit: type=1400 audit(1787231459.206:1120): avc: denied { create } for pid=11567 comm="syz.2.1763" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 436.828517][ T29] audit: type=1400 audit(1787231459.246:1121): avc: denied { sys_admin } for pid=11567 comm="syz.2.1763" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 436.918756][T11574] IPv6: Can't replace route, no match found [ 436.957894][ T5608] usb 1-1: New USB device found, idVendor=0458, idProduct=3303, bcdDevice= 0.40 [ 436.975108][ T5608] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 436.986386][ T5608] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 436.996214][ T5608] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.062758][ T5608] usb 1-1: config 0 descriptor?? [ 437.145126][ T29] audit: type=1400 audit(1787231459.536:1122): avc: denied { mounton } for pid=11567 comm="syz.2.1763" path="/sys" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 437.232261][ T5608] usbhid 1-1:0.0: can't add hid device: -71 [ 437.252242][ T5608] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 437.280985][ T5608] usb 1-1: USB disconnect, device number 66 [ 437.310071][T11582] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1766'. [ 438.234862][ T29] audit: type=1400 audit(1787231460.616:1123): avc: denied { unmount } for pid=5596 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 439.095015][ T5608] usb 1-1: new full-speed USB device number 67 using dummy_hcd [ 439.316384][ T5608] usb 1-1: New USB device found, idVendor=17ef, idProduct=6062, bcdDevice= 0.00 [ 439.344003][ T5608] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 439.368423][ T5608] usb 1-1: config 0 interface 0 has no altsetting 0 [ 439.406488][ T5608] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.427217][ T5608] usb 1-1: config 0 descriptor?? [ 439.446728][T11591] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 439.492527][ T5606] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 439.826300][ T8595] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 439.861235][ T5608] lenovo 0003:17EF:6062.0011: unknown main item tag 0x0 [ 439.868293][ T5608] lenovo 0003:17EF:6062.0011: unknown main item tag 0x0 [ 439.875542][ T5608] lenovo 0003:17EF:6062.0011: unknown main item tag 0x0 [ 439.882516][ T5608] lenovo 0003:17EF:6062.0011: unknown main item tag 0x0 [ 439.889611][ T5608] lenovo 0003:17EF:6062.0011: unknown main item tag 0x0 [ 439.896638][ T5608] lenovo 0003:17EF:6062.0011: unknown main item tag 0x0 [ 439.903611][ T5608] lenovo 0003:17EF:6062.0011: unknown main item tag 0x0 [ 439.910685][ T5608] lenovo 0003:17EF:6062.0011: unknown main item tag 0x0 [ 439.917691][ T5608] lenovo 0003:17EF:6062.0011: unknown main item tag 0x0 [ 439.924631][ T5608] lenovo 0003:17EF:6062.0011: unknown main item tag 0x0 [ 439.933401][ T5608] lenovo 0003:17EF:6062.0011: hidraw0: USB HID v0.01 Device [HID 17ef:6062] on usb-dummy_hcd.0-1/input0 [ 439.984889][ T8595] usb 3-1: Using ep0 maxpacket: 16 [ 439.990591][ T8595] usb 3-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 440.002271][ T8595] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 440.010674][ T8595] usb 3-1: config 0 has no interface number 0 [ 440.019789][ T8595] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.027793][ T8595] usb 3-1: Product: syz [ 440.032152][ T8595] usb 3-1: Manufacturer: syz [ 440.036791][ T8595] usb 3-1: SerialNumber: syz [ 440.043187][ T8595] usb 3-1: config 0 descriptor?? [ 440.050438][ T8595] hub 3-1:0.132: bad descriptor, ignoring hub [ 440.057205][ T8595] hub 3-1:0.132: probe with driver hub failed with error -5 [ 440.146017][ T8595] usbhid 3-1:0.132: couldn't find an input interrupt endpoint [ 440.771449][ T29] audit: type=1400 audit(1787231463.186:1124): avc: denied { execute } for pid=11621 comm="syz.3.1778" name="file1" dev="tmpfs" ino=1720 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 440.808733][ T29] audit: type=1400 audit(1787231463.186:1125): avc: denied { execute_no_trans } for pid=11621 comm="syz.3.1778" path="/320/file1" dev="tmpfs" ino=1720 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 440.846253][ T8595] usb 3-1: USB disconnect, device number 61 [ 440.897365][ T29] audit: type=1400 audit(1787231463.316:1126): avc: denied { connect } for pid=11624 comm="syz.4.1779" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 441.295032][T11628] SET target dimension over the limit! [ 441.344842][ T29] audit: type=1400 audit(1787231463.726:1127): avc: denied { mount } for pid=11624 comm="syz.4.1779" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 441.587916][ T29] audit: type=1400 audit(1787231463.746:1128): avc: denied { read } for pid=11624 comm="syz.4.1779" path="socket:[36855]" dev="sockfs" ino=36855 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 441.688627][ T29] audit: type=1400 audit(1787231464.106:1129): avc: denied { setopt } for pid=11630 comm="syz.1.1780" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 441.764871][ T29] audit: type=1400 audit(1787231464.136:1130): avc: denied { bind } for pid=11630 comm="syz.1.1780" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 441.782141][ T5608] usb 1-1: USB disconnect, device number 67 [ 441.832726][T11633] IPv6: NLM_F_CREATE should be specified when creating new route [ 441.842826][ T29] audit: type=1400 audit(1787231464.136:1131): avc: denied { name_bind } for pid=11630 comm="syz.1.1780" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 441.868422][ T8595] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 441.876439][T11633] IPv6: Can't replace route, no match found [ 441.883971][T11638] ip6gretap1: entered allmulticast mode [ 441.897828][T11638] batman_adv: batadv0: Adding interface: ip6gretap1 [ 441.904959][ T29] audit: type=1400 audit(1787231464.136:1132): avc: denied { node_bind } for pid=11630 comm="syz.1.1780" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 441.919171][T11638] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 441.935349][ T29] audit: type=1400 audit(1787231464.136:1133): avc: denied { write } for pid=11630 comm="syz.1.1780" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 441.976188][T11638] batman_adv: batadv0: Interface activated: ip6gretap1 [ 442.002685][T11641] CUSE: unknown device info "" [ 442.008684][T11641] CUSE: unknown device info "" [ 442.015772][ T8594] libceph: connect (1)[c::]:6789 error -101 [ 442.021987][ T8594] libceph: mon0 (1)[c::]:6789 connect error [ 442.028497][T11641] CUSE: unknown device info "" [ 442.034259][T11641] CUSE: unknown device info "" [ 442.039558][T11641] CUSE: unknown device info "" [ 442.044590][T11641] CUSE: zero length info key specified [ 442.064976][ T8595] usb 5-1: Using ep0 maxpacket: 32 [ 442.071723][ T8595] usb 5-1: unable to get BOS descriptor or descriptor too short [ 442.081595][ T8595] usb 5-1: New USB device found, idVendor=0068, idProduct=0103, bcdDevice=40.ee [ 442.093696][ T8595] usb 5-1: no configurations [ 442.103227][ T8595] usb 5-1: can't read configurations, error -22 [ 442.149542][T11639] ceph: No mds server is up or the cluster is laggy [ 442.210222][T11649] fuse: fd is not a fuse device [ 442.235350][ T8595] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 442.400162][ T5608] usb 4-1: new full-speed USB device number 66 using dummy_hcd [ 442.404828][ T8595] usb 5-1: Using ep0 maxpacket: 32 [ 442.433704][ T8595] usb 5-1: unable to get BOS descriptor or descriptor too short [ 442.446883][ T8595] usb 5-1: New USB device found, idVendor=0068, idProduct=0103, bcdDevice=40.ee [ 442.456099][ T8595] usb 5-1: no configurations [ 442.464483][ T8595] usb 5-1: can't read configurations, error -22 [ 442.471249][ T8595] usb usb5-port1: attempt power cycle [ 442.564545][ T5608] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 442.617258][ T5608] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.676113][ T5608] usb 4-1: Product: syz [ 442.715845][ T5608] usb 4-1: Manufacturer: syz [ 442.753015][ T5608] usb 4-1: SerialNumber: syz [ 442.895115][ T5608] usb 4-1: config 0 descriptor?? [ 442.940533][T11666] gadgetfs: bound to dummy_udc driver [ 443.144902][ T8595] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 443.256543][ T8594] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 443.273859][ C0] gadgetfs: connected [ 443.278372][ T8594] gadgetfs: disconnected [ 443.289526][ T8595] usb 5-1: Using ep0 maxpacket: 32 [ 443.300874][ T8595] usb 5-1: unable to get BOS descriptor or descriptor too short [ 443.325370][ T8595] usb 5-1: New USB device found, idVendor=0068, idProduct=0103, bcdDevice=40.ee [ 443.351679][ T8595] usb 5-1: no configurations [ 443.364606][ T8595] usb 5-1: can't read configurations, error -22 [ 443.571460][ T5608] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 443.714927][ T8595] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 443.746804][ T8595] usb 5-1: Using ep0 maxpacket: 32 [ 443.763052][ T8595] usb 5-1: unable to get BOS descriptor or descriptor too short [ 443.785696][ T8595] usb 5-1: New USB device found, idVendor=0068, idProduct=0103, bcdDevice=40.ee [ 443.810257][ T8595] usb 5-1: no configurations [ 443.819448][ T8595] usb 5-1: can't read configurations, error -22 [ 443.839392][ T8595] usb usb5-port1: unable to enumerate USB device [ 445.024004][ T5608] usb 4-1: dvb_usb_v2: will use the device's hardware PID filter (table count: 32) [ 445.049604][ T5608] dvbdev: DVB: registering new adapter (TerraTec NOXON DAB Stick) [ 445.081173][ T5608] usb 4-1: media controller created [ 445.107793][ T5608] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 445.253417][ T5608] i2c i2c-1: Added multiplexed i2c bus 2 [ 445.272986][ T5608] rtl2832 1-0010: Realtek RTL2832 successfully attached [ 445.293597][ T5608] usb 4-1: DVB: registering adapter 0 frontend 0 (Realtek RTL2832 (DVB-T))... [ 445.304883][ T8595] usb 5-1: new full-speed USB device number 57 using dummy_hcd [ 445.324692][ T5608] dvbdev: dvb_create_media_entity: media entity 'Realtek RTL2832 (DVB-T)' registered. [ 445.424549][ T5608] DVB: Unable to find symbol r820t_attach() [ 445.475959][ T8595] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 445.506128][ T8595] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 445.524626][ T8595] usb 5-1: Product: syz [ 445.537947][ T8595] usb 5-1: SerialNumber: syz [ 445.553929][ T8595] usb 5-1: config 0 descriptor?? [ 445.600434][T11715] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1806'. [ 445.926255][ T8595] hso 5-1:0.0: Failed to find INT IN ep [ 446.166129][ T8595] usb 5-1: USB disconnect, device number 57 [ 447.112315][ T5608] usb 4-1: USB disconnect, device number 66 [ 447.354918][ T5606] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 447.505391][T11745] fuse: fd is not a fuse device [ 448.761616][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 448.761646][ T29] audit: type=1400 audit(1787231471.176:1148): avc: denied { write } for pid=11755 comm="syz.3.1820" path="socket:[35521]" dev="sockfs" ino=35521 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 449.038628][ T29] audit: type=1400 audit(1787231471.456:1149): avc: denied { map } for pid=11755 comm="syz.3.1820" path="socket:[35522]" dev="sockfs" ino=35522 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 449.128101][ T29] audit: type=1400 audit(1787231471.546:1150): avc: denied { getopt } for pid=11761 comm="syz.3.1821" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 449.910614][T11768] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1823'. [ 449.954854][ T8594] usb 4-1: new full-speed USB device number 67 using dummy_hcd [ 450.025305][T11772] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 450.059588][T11772] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 450.070794][ T29] audit: type=1400 audit(1787231472.486:1151): avc: denied { read write } for pid=11773 comm="syz.4.1817" name="rdma_cm" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 450.138568][ T8594] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 450.160821][ T8594] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.161118][ T29] audit: type=1400 audit(1787231472.486:1152): avc: denied { open } for pid=11773 comm="syz.4.1817" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 450.179198][ T8594] usb 4-1: Product: syz [ 450.337987][ T8594] usb 4-1: Manufacturer: syz [ 450.378013][ T8594] usb 4-1: SerialNumber: syz [ 450.518601][ T8594] usb 4-1: config 0 descriptor?? [ 450.612960][T11781] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1825'. [ 450.965341][ T8594] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 451.328104][ T29] audit: type=1400 audit(1787231472.576:1153): avc: denied { checkpoint_restore } for pid=11773 comm="syz.4.1817" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 451.446668][ T29] audit: type=1400 audit(1787231473.866:1154): avc: denied { append } for pid=11785 comm="syz.0.1828" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 451.552340][T11788] kvm: apic: phys broadcast and lowest prio [ 451.655665][ T8593] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 451.817938][ T8593] usb 3-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 451.835995][ T8593] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 451.890165][ T8593] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 451.912438][ T8593] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.941905][ T8593] usb 3-1: Product: syz [ 451.947515][ T8593] usb 3-1: Manufacturer: syz [ 451.952277][ T8593] usb 3-1: SerialNumber: syz [ 452.074435][T11800] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input35 [ 452.257403][ T8593] usb 3-1: config 0 descriptor?? [ 452.566745][T11797] overlayfs: conflicting lowerdir path [ 453.217192][T11783] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 453.224540][T11783] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 453.328666][ T29] audit: type=1400 audit(1787231475.746:1155): avc: denied { setopt } for pid=11808 comm="syz.1.1835" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 453.329629][ T8595] IPVS: starting estimator thread 0... [ 453.361395][T11809] IPVS: wrr: SCTP 172.20.20.187:0 - no destination available [ 453.435363][T11783] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 453.452491][T11814] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 453.475039][T11810] IPVS: using max 49 ests per chain, 117600 per kthread [ 453.486933][T11814] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 453.556257][ T8593] dm9601 3-1:0.0: probe with driver dm9601 failed with error -71 [ 453.559349][ T29] audit: type=1400 audit(1787231475.976:1156): avc: denied { name_connect } for pid=11813 comm="syz.1.1836" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 453.589093][ T8593] usb 3-1: USB disconnect, device number 62 [ 453.710153][ T29] audit: type=1400 audit(1787231476.126:1157): avc: denied { connect } for pid=11820 comm="syz.2.1837" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 453.775027][ T29] audit: type=1400 audit(1787231476.186:1158): avc: denied { setopt } for pid=11820 comm="syz.2.1837" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 454.196352][T11827] tmpfs: Bad value for 'mpol' [ 454.353744][ T29] audit: type=1400 audit(1787231476.726:1159): avc: denied { append } for pid=11824 comm="syz.2.1838" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 454.491545][ T29] audit: type=1400 audit(1787231476.736:1160): avc: denied { open } for pid=11824 comm="syz.2.1838" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 454.545105][ T8594] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 454.590158][ T8594] usb 4-1: USB disconnect, device number 67 [ 454.855805][ T29] audit: type=1400 audit(1787231477.276:1161): avc: denied { create } for pid=11828 comm="syz.4.1833" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 454.889641][T11830] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1833'. [ 454.904393][ T29] audit: type=1400 audit(1787231477.276:1162): avc: denied { write } for pid=11828 comm="syz.4.1833" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 454.904671][T11830] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 454.980998][ T29] audit: type=1400 audit(1787231477.316:1163): avc: denied { read } for pid=11835 comm="syz.2.1841" name="vhost-vsock" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 455.024875][ T29] audit: type=1400 audit(1787231477.316:1164): avc: denied { open } for pid=11835 comm="syz.2.1841" path="/dev/vhost-vsock" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 455.074860][ T29] audit: type=1400 audit(1787231477.356:1165): avc: denied { ioctl } for pid=11835 comm="syz.2.1841" path="/dev/vhost-vsock" dev="devtmpfs" ino=1272 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 455.121046][ T29] audit: type=1400 audit(1787231477.386:1166): avc: denied { read write } for pid=11835 comm="syz.2.1841" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 455.166460][ T29] audit: type=1400 audit(1787231477.386:1167): avc: denied { open } for pid=11835 comm="syz.2.1841" path="/dev/dri/renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 455.201509][T11843] fuse: Bad value for 'fd' [ 455.252672][T11841] configfs: Unknown parameter '/dev/fuse' [ 455.576179][T11852] netlink: 'syz.4.1845': attribute type 7 has an invalid length. [ 455.584932][ T8583] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 455.593759][T11852] netlink: 'syz.4.1845': attribute type 8 has an invalid length. [ 455.735230][ T8583] usb 4-1: Using ep0 maxpacket: 16 [ 455.750444][ T8583] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 455.816502][ T8583] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 455.853440][ T8583] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 455.950812][ T8583] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 456.076594][ T8583] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 456.105706][ T8583] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 456.141830][ T8583] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 456.151581][ T8583] usb 4-1: Manufacturer: syz [ 456.173744][ T8583] usb 4-1: config 0 descriptor?? [ 457.444904][ T8583] rc_core: IR keymap rc-hauppauge not found [ 457.455983][ T8583] Registered IR keymap rc-empty [ 457.466732][ T8583] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 457.494963][ T8583] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 457.545949][ T8583] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 457.571260][ T8583] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input36 [ 457.623275][ T8583] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 457.666769][ T8583] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 457.695829][ T8583] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 457.725261][ T8583] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 457.745329][ T8583] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 457.767470][ T8583] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 457.794907][ T8583] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 457.815813][ T8583] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 457.845025][ T8583] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 457.864867][ T8583] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 457.903909][ T8583] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 457.949074][ T8583] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 458.000975][ T8583] usb 4-1: USB disconnect, device number 68 [ 458.722203][T11881] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1853'. [ 459.269662][T11894] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1855'. [ 459.329166][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 459.329177][ T29] audit: type=1400 audit(1787231481.746:1173): avc: denied { setopt } for pid=11893 comm="syz.0.1856" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 459.904833][ T5606] Bluetooth: hci3: command 0x0c1a tx timeout [ 461.407305][T11920] SET target dimension over the limit! [ 461.584822][T11923] SET target dimension over the limit! [ 462.019951][ T29] audit: type=1400 audit(1787231484.436:1174): avc: denied { getopt } for pid=11893 comm="syz.0.1856" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 462.877089][T11936] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 462.915735][T11936] audit: out of memory in audit_log_start [ 463.132727][T11942] overlayfs: conflicting lowerdir path [ 463.729467][ T8595] IPVS: starting estimator thread 0... [ 464.487534][T11949] IPVS: using max 76 ests per chain, 182400 per kthread [ 464.562593][T11955] CUSE: unknown device info "" [ 464.573235][T11955] CUSE: unknown device info "" [ 464.592083][T11955] CUSE: unknown device info "" [ 464.605803][T11955] CUSE: unknown device info "" [ 464.615976][T11955] CUSE: unknown device info "" [ 464.636474][T11955] CUSE: zero length info key specified [ 464.840721][ T29] audit: type=1400 audit(1787231487.256:1175): avc: denied { mounton } for pid=11959 comm="syz.1.1877" path="/" dev="nullfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 465.651665][T11969] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1879'. [ 465.739062][T11967] ALSA: mixer_oss: invalid OSS volume 'PHl6qӆONEOUT' [ 465.788288][T11967] ALSA: mixer_oss: invalid OSS volume 'Ͳ-Khekfa4/(~g+Ϻ' [ 465.850587][T11967] ALSA: mixer_oss: invalid OSS volume 'htjBiisJ歹e8 >HQ' [ 465.996035][T11976] gadgetfs: bound to dummy_udc driver [ 466.695202][ T8593] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 466.718407][ C0] gadgetfs: connected [ 466.722502][ T8593] gadgetfs: disconnected [ 468.486726][ T8583] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 468.527269][T12012] IPv6: Can't replace route, no match found [ 468.555044][ T5699] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 468.654826][ T8583] usb 5-1: Using ep0 maxpacket: 32 [ 468.667671][ T8583] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 468.690098][ T8583] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.699070][ T5699] usb 4-1: device descriptor read/64, error -71 [ 468.717391][ T8583] usb 5-1: config 0 descriptor?? [ 468.953441][ T8583] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 468.975428][ T8583] usb 5-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 468.985934][ T5699] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 469.015203][ T29] audit: type=1400 audit(1787231491.436:1176): avc: denied { firmware_load } for pid=8583 comm="kworker/1:15" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 469.015213][ T8583] usb 5-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 469.135172][ T5699] usb 4-1: device descriptor read/64, error -71 [ 469.265200][ T5699] usb usb4-port1: attempt power cycle [ 469.435049][ T5608] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 469.583729][ T29] audit: type=1400 audit(1787231491.996:1177): avc: denied { ioctl } for pid=12026 comm="syz.1.1896" path="socket:[37796]" dev="sockfs" ino=37796 ioctlcmd=0x89f3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 469.594838][ T5608] usb 1-1: Using ep0 maxpacket: 32 [ 469.625065][ T5699] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 469.642319][ T5608] usb 1-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 469.658698][ T5699] usb 4-1: device descriptor read/8, error -71 [ 469.672913][ T5608] usb 1-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 469.699794][ T5608] usb 1-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 469.714936][ T5608] usb 1-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 469.726575][ T5608] usb 1-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 469.760980][ T5608] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.769244][ T5608] usb 1-1: Product: syz [ 469.773504][ T5608] usb 1-1: Manufacturer: syz [ 469.778463][ T5608] usb 1-1: SerialNumber: syz [ 469.801920][ C1] imon 1-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 469.880671][ T5608] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/input/input37 [ 469.935323][ T5699] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 469.966393][ T5699] usb 4-1: device descriptor read/8, error -71 [ 470.016586][ T5608] imon 1-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 470.042740][ T5608] (id 0x00) [ 470.086820][ T5699] usb usb4-port1: unable to enumerate USB device [ 470.135493][ T5608] rc_core: IR keymap rc-imon-pad not found [ 470.152869][ T5608] Registered IR keymap rc-empty [ 470.175789][ T5608] imon 1-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 470.194932][ T5608] imon 1-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 470.235865][ T5608] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/rc/rc0 [ 470.291445][ T5608] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/rc/rc0/input38 [ 470.335821][ T5608] imon 1-1:155.0: iMON device (15c2:ffdc, intf0) on usb<1:70> initialized [ 471.462792][T12019] imon:send_packet: task interrupted [ 471.499508][T12019] imon:send_packet: packet tx failed (-512) [ 471.988756][T12019] imon:vfd_write: send packet #1 failed [ 472.010851][T12019] imon:send_packet: packet tx failed (-32) [ 472.045038][T12019] imon:vfd_write: send packet #0 failed [ 472.073505][ T5699] usb 1-1: USB disconnect, device number 70 [ 472.778817][T12066] syzkaller0: entered promiscuous mode [ 472.800263][T12066] syzkaller0: entered allmulticast mode [ 473.168198][T12080] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1911'. [ 473.168822][T12075] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1908'. [ 474.411061][ T29] audit: type=1400 audit(1787231496.046:1178): avc: denied { setopt } for pid=12079 comm="syz.4.1911" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 474.511257][ T29] audit: type=1400 audit(1787231496.196:1179): avc: denied { create } for pid=12079 comm="syz.4.1911" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 474.541158][T12075] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1908'. [ 474.585180][ T29] audit: type=1400 audit(1787231496.226:1180): avc: denied { read } for pid=12079 comm="syz.4.1911" name="mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 474.686369][ T29] audit: type=1400 audit(1787231496.226:1181): avc: denied { open } for pid=12079 comm="syz.4.1911" path="/dev/mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 474.781185][ T29] audit: type=1400 audit(1787231496.516:1182): avc: denied { cmd } for pid=12079 comm="iou-wrk-12080" path="socket:[38397]" dev="sockfs" ino=38397 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 475.784836][ T5699] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 475.925615][ T5699] usb 3-1: device descriptor read/64, error -71 [ 476.116210][T12105] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 476.185834][ T5699] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 476.347814][ T5699] usb 3-1: device descriptor read/64, error -71 [ 476.356928][ T29] audit: type=1400 audit(1787231498.776:1183): avc: denied { bind } for pid=12123 comm="syz.3.1925" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 476.408215][ T29] audit: type=1400 audit(1787231498.796:1184): avc: denied { setopt } for pid=12123 comm="syz.3.1925" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 476.467061][ T5699] usb usb3-port1: attempt power cycle [ 476.491253][ T29] audit: type=1400 audit(1787231498.796:1185): avc: denied { listen } for pid=12123 comm="syz.3.1925" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 476.546512][ T29] audit: type=1400 audit(1787231498.826:1186): avc: denied { accept } for pid=12123 comm="syz.3.1925" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 476.585832][T12137] xt_TPROXY: Can be used only with -p tcp or -p udp [ 476.610406][ T29] audit: type=1400 audit(1787231498.826:1187): avc: denied { write } for pid=12123 comm="syz.3.1925" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 476.824844][ T5699] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 476.845524][ T5699] usb 3-1: device descriptor read/8, error -71 [ 477.084899][ T5699] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 477.116553][ T5699] usb 3-1: device descriptor read/8, error -71 [ 477.255150][ T5699] usb usb3-port1: unable to enumerate USB device [ 477.880450][ T5601] Bluetooth: hci3: command 0x0c1a tx timeout [ 479.555091][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 479.555135][ T29] audit: type=1400 audit(1787231501.876:1190): avc: denied { block_suspend } for pid=12166 comm="syz.3.1935" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 480.101046][ T29] audit: type=1400 audit(1787231502.516:1191): avc: denied { name_bind } for pid=12181 comm="syz.0.1942" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 480.142045][ T29] audit: type=1400 audit(1787231502.516:1192): avc: denied { getopt } for pid=12181 comm="syz.0.1942" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 480.258119][ T29] audit: type=1400 audit(1787231502.676:1193): avc: denied { setopt } for pid=12191 comm="syz.0.1946" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 480.313954][T12196] overlayfs: missing 'workdir' [ 480.357615][ T29] audit: type=1400 audit(1787231502.776:1194): avc: denied { create } for pid=12194 comm="syz.1.1947" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 480.401311][ T29] audit: type=1400 audit(1787231502.776:1195): avc: denied { bind } for pid=12191 comm="syz.0.1946" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 480.439013][ T29] audit: type=1400 audit(1787231502.776:1196): avc: denied { write } for pid=12191 comm="syz.0.1946" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 480.468764][ T29] audit: type=1400 audit(1787231502.796:1197): avc: denied { ioctl } for pid=12194 comm="syz.1.1947" path="socket:[38652]" dev="sockfs" ino=38652 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 481.098743][ T29] audit: type=1400 audit(1787231503.516:1198): avc: denied { connect } for pid=12210 comm="syz.0.1952" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 481.144660][ T29] audit: type=1400 audit(1787231503.556:1199): avc: denied { write } for pid=12210 comm="syz.0.1952" path="socket:[38669]" dev="sockfs" ino=38669 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 481.977141][T12249] kAFS: bad VL server IP address [ 482.938526][T12252] netlink: zone id is out of range [ 482.947679][T12252] netlink: zone id is out of range [ 482.953511][T12252] netlink: zone id is out of range [ 482.958819][T12252] netlink: zone id is out of range [ 482.964829][T12252] netlink: zone id is out of range [ 482.970058][T12252] netlink: zone id is out of range [ 482.976489][T12252] netlink: zone id is out of range [ 482.983261][T12252] netlink: zone id is out of range [ 482.989952][T12252] netlink: zone id is out of range [ 482.995233][T12252] netlink: zone id is out of range [ 484.298334][ T5608] IPVS: starting estimator thread 0... [ 484.406455][T12282] IPVS: using max 56 ests per chain, 134400 per kthread [ 484.469081][T12288] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1976'. [ 484.659507][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 484.659522][ T29] audit: type=1400 audit(1787231507.076:1212): avc: denied { write } for pid=12291 comm="syz.3.1977" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 484.729559][ T29] audit: type=1400 audit(1787231507.126:1213): avc: denied { create } for pid=12291 comm="syz.3.1977" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 484.768130][ T29] audit: type=1400 audit(1787231507.126:1214): avc: denied { getopt } for pid=12291 comm="syz.3.1977" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 485.035766][T12308] netlink: 'syz.3.1981': attribute type 23 has an invalid length. [ 485.064865][ T5706] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 485.202722][T12308] dns_resolver: Unsupported server list version (0) [ 485.255650][ T5706] usb 1-1: Using ep0 maxpacket: 32 [ 485.273147][ T5706] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 486.436273][ T5706] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.457363][ T5706] usb 1-1: config 0 descriptor?? [ 486.792121][ T5706] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 486.876764][ T29] audit: type=1400 audit(1787231509.296:1215): avc: denied { create } for pid=12323 comm="syz.2.1986" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 487.304823][ T5699] usb 4-1: new full-speed USB device number 73 using dummy_hcd [ 487.456336][ T5699] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 487.511124][ T5699] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.544528][ T5699] usb 4-1: Product: syz [ 487.558507][ T5699] usb 4-1: Manufacturer: syz [ 487.572032][ T5699] usb 4-1: SerialNumber: syz [ 487.598862][ T5699] usb 4-1: config 0 descriptor?? [ 487.655668][ T29] audit: type=1400 audit(1787231510.076:1216): avc: denied { listen } for pid=12335 comm="syz.4.1985" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 487.839731][ T5699] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 488.867048][ T8593] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 488.876107][T12363] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0) [ 489.046032][ T8593] usb 3-1: Using ep0 maxpacket: 32 [ 489.151112][ T8593] usb 3-1: unable to get BOS descriptor or descriptor too short [ 489.164354][ T8593] usb 3-1: New USB device found, idVendor=0582, idProduct=0044, bcdDevice= 0.40 [ 489.177561][ T8593] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 489.185914][ T8593] usb 3-1: can't read configurations, error -71 [ 489.312099][T12373] wg2 speed is unknown, defaulting to 1000 [ 489.318312][T12373] wg2 speed is unknown, defaulting to 1000 [ 489.326907][T12373] wg2 speed is unknown, defaulting to 1000 [ 489.333293][T12373] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 489.348028][T12373] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 489.365294][T12373] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 489.387983][T12373] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 489.418896][T12373] wg2 speed is unknown, defaulting to 1000 [ 489.429916][T12373] wg2 speed is unknown, defaulting to 1000 [ 489.442812][T12373] wg2 speed is unknown, defaulting to 1000 [ 489.450964][T12373] wg2 speed is unknown, defaulting to 1000 [ 489.459431][T12373] wg2 speed is unknown, defaulting to 1000 [ 489.663993][T12383] loop2: detected capacity change from 0 to 2640 [ 489.679213][ T5620] buffer_io_error: 13 callbacks suppressed [ 489.679229][ T5620] Buffer I/O error on dev loop2, logical block 0, async page read [ 489.695328][ T5620] Buffer I/O error on dev loop2, logical block 0, async page read [ 489.704619][ T5620] Buffer I/O error on dev loop2, logical block 0, async page read [ 489.724537][ T5620] Buffer I/O error on dev loop2, logical block 0, async page read [ 489.733500][ T5620] Buffer I/O error on dev loop2, logical block 0, async page read [ 489.850138][ T5620] Buffer I/O error on dev loop2, logical block 0, async page read [ 489.858445][ T5620] Buffer I/O error on dev loop2, logical block 0, async page read [ 489.868583][ T5620] Buffer I/O error on dev loop2, logical block 0, async page read [ 489.876678][ T29] audit: type=1400 audit(1787231512.296:1217): avc: denied { ioctl } for pid=12396 comm="syz.2.2010" path="socket:[39859]" dev="sockfs" ino=39859 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 489.877133][ T5620] Buffer I/O error on dev loop2, logical block 0, async page read [ 489.911333][ T5620] Buffer I/O error on dev loop2, logical block 0, async page read [ 489.915224][ T29] audit: type=1400 audit(1787231512.326:1218): avc: denied { connect } for pid=12396 comm="syz.2.2010" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 490.073695][ T5699] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 490.088353][ T5699] usb 4-1: USB disconnect, device number 73 [ 490.847386][T12414] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2015'. [ 490.883213][T12414] 8021q: adding VLAN 0 to HW filter on device bond1 [ 491.057968][ T29] audit: type=1400 audit(1787231513.476:1219): avc: denied { bind } for pid=12413 comm="syz.3.2015" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 491.289872][ T29] audit: type=1400 audit(1787231513.706:1220): avc: denied { execute } for pid=12420 comm="syz.0.2017" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=40067 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 491.330880][ T29] audit: type=1400 audit(1787231513.736:1221): avc: denied { write } for pid=12428 comm="syz.4.2020" name="ptp0" dev="devtmpfs" ino=1264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 491.431235][ T29] audit: type=1400 audit(1787231513.736:1222): avc: denied { open } for pid=12428 comm="syz.4.2020" path="/dev/ptp0" dev="devtmpfs" ino=1264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 491.817412][T12432] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2017'. [ 491.827890][ T29] audit: type=1400 audit(1787231513.846:1223): avc: denied { connect } for pid=12428 comm="syz.4.2020" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 491.914413][ T29] audit: type=1400 audit(1787231513.846:1224): avc: denied { setopt } for pid=12428 comm="syz.4.2020" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 491.955884][ T29] audit: type=1400 audit(1787231513.896:1225): avc: denied { write } for pid=12428 comm="syz.4.2020" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 491.999697][ T29] audit: type=1400 audit(1787231513.906:1226): avc: denied { create } for pid=12428 comm="syz.4.2020" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 492.658797][T12444] netlink: 'syz.0.2023': attribute type 7 has an invalid length. [ 492.666604][T12444] netlink: 'syz.0.2023': attribute type 8 has an invalid length. [ 494.050904][T12473] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2032'. [ 494.351884][T12476] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 494.370516][T12476] block device autoloading is deprecated and will be removed. [ 494.445958][T12477] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 494.478630][T12477] block device autoloading is deprecated and will be removed. [ 495.585852][ T5614] buffer_io_error: 30 callbacks suppressed [ 495.585868][ T5614] Buffer I/O error on dev loop2, logical block 0, async page read [ 495.606301][ T5614] Buffer I/O error on dev loop2, logical block 0, async page read [ 495.614645][ T5614] Buffer I/O error on dev loop2, logical block 0, async page read [ 495.624128][ T5614] Buffer I/O error on dev loop2, logical block 0, async page read [ 495.636632][ T5614] Buffer I/O error on dev loop2, logical block 0, async page read [ 495.908190][ T5606] Bluetooth: hci3: command 0x0c1a tx timeout [ 496.239873][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 496.246237][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 496.314123][T12492] netlink: 'syz.3.2039': attribute type 7 has an invalid length. [ 496.322626][T12492] netlink: 'syz.3.2039': attribute type 8 has an invalid length. [ 496.360784][T12499] jffs2: notice: (12499) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 496.397587][T12499] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 496.581500][ T5614] Buffer I/O error on dev loop2, logical block 0, async page read [ 496.605602][ T5614] Buffer I/O error on dev loop2, logical block 0, async page read [ 496.629253][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 496.629269][ T29] audit: type=1800 audit(1787231519.046:1231): pid=12504 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.2040" name="file0" dev="fuse" ino=18446744073709551613 res=0 errno=0 [ 496.662204][ T5614] Buffer I/O error on dev loop2, logical block 0, async page read [ 496.684057][ T5614] Buffer I/O error on dev loop2, logical block 0, async page read [ 496.693965][ T5614] Buffer I/O error on dev loop2, logical block 0, async page read [ 498.104900][ T8593] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 498.294824][ T8593] usb 4-1: Using ep0 maxpacket: 8 [ 498.305317][ T8593] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 498.325958][ T8593] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 498.344992][ T8593] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 498.364839][ T8593] usb 4-1: config 16 interface 0 altsetting 0 has an endpoint descriptor with address 0xB6, changing to 0x86 [ 498.394645][ T8593] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 55305, setting to 1024 [ 498.404851][ T42] usb 3-1: new full-speed USB device number 69 using dummy_hcd [ 498.425470][ T8593] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 1024 [ 498.449392][ T8593] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 498.473720][ T8593] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.565647][ T42] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 498.591778][ T42] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.610021][ T42] usb 3-1: Product: syz [ 498.618190][ T42] usb 3-1: Manufacturer: syz [ 498.634942][ T42] usb 3-1: SerialNumber: syz [ 498.645472][ T42] usb 3-1: config 0 descriptor?? [ 498.681882][ T29] audit: type=1400 audit(1787231521.096:1232): avc: denied { mount } for pid=12528 comm="syz.1.2052" name="/" dev="cgroup" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 498.721325][T12531] netlink: 'syz.0.2049': attribute type 21 has an invalid length. [ 498.729833][T12531] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2049'. [ 498.737828][T12518] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2047'. [ 498.748113][T12518] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2047'. [ 498.757767][T12518] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2047'. [ 498.767235][T12518] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2047'. [ 499.875728][ T42] dvb_usb_rtl28xxu 3-1:0.0: chip type detection failed -110 [ 499.883168][ T29] audit: type=1400 audit(1787231521.666:1233): avc: denied { create } for pid=12530 comm="syz.0.2049" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 499.906850][T12531] netlink: 'syz.0.2049': attribute type 4 has an invalid length. [ 499.916369][ T42] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 499.934831][T12531] netlink: 'syz.0.2049': attribute type 5 has an invalid length. [ 499.942732][T12531] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2049'. [ 500.859421][T12541] CUSE: unknown device info "" [ 500.889596][T12541] CUSE: unknown device info "" [ 500.922202][T12541] CUSE: unknown device info "" [ 501.029767][T12541] CUSE: unknown device info "" [ 501.074833][T12541] CUSE: unknown device info "" [ 501.091181][T12541] CUSE: zero length info key specified [ 501.109587][ T8593] usb 4-1: usb_control_msg returned -71 [ 501.131296][ T8593] usbtmc 4-1:16.0: can't read capabilities [ 501.191765][ T8593] usb 4-1: USB disconnect, device number 74 [ 501.293587][ T8595] usb 3-1: USB disconnect, device number 69 [ 501.324701][ T5601] Bluetooth: hci1: unexpected event for opcode 0x203e [ 501.480436][ T5614] buffer_io_error: 5 callbacks suppressed [ 501.480452][ T5614] Buffer I/O error on dev loop2, logical block 0, async page read [ 501.531133][ T5614] Buffer I/O error on dev loop2, logical block 0, async page read [ 501.561212][ T5614] Buffer I/O error on dev loop2, logical block 0, async page read [ 501.589599][ T5614] Buffer I/O error on dev loop2, logical block 0, async page read [ 501.620601][ T5614] Buffer I/O error on dev loop2, logical block 0, async page read [ 502.262790][T12573] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2063'. [ 502.305240][ T5614] Buffer I/O error on dev loop2, logical block 0, async page read [ 502.332901][ T5614] Buffer I/O error on dev loop2, logical block 0, async page read [ 502.347988][ T5614] Buffer I/O error on dev loop2, logical block 0, async page read [ 502.364598][ T5614] Buffer I/O error on dev loop2, logical block 0, async page read [ 502.375563][ T5614] Buffer I/O error on dev loop2, logical block 0, async page read [ 502.460159][T12582] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2067'. [ 503.479344][ T5598] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 503.648838][ T5598] usb 4-1: Using ep0 maxpacket: 16 [ 503.671472][ T5598] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 503.696652][ T5598] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 503.718034][ T5598] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 503.743775][ T5598] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 503.772353][ T5598] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 503.782603][ T5598] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 503.798287][ T5598] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 503.807538][ T5598] usb 4-1: Manufacturer: syz [ 503.817027][ T5598] usb 4-1: config 0 descriptor?? [ 504.119031][ T5598] rc_core: IR keymap rc-hauppauge not found [ 504.128853][ T5598] Registered IR keymap rc-empty [ 504.532365][ T5598] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 504.554848][ T5598] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 504.575997][ T5598] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 504.591461][ T5598] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input40 [ 504.607102][ T5598] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 504.625061][ T5598] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 504.645025][ T5598] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 504.664911][ T5598] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 504.685347][ T5598] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 504.714866][ T5598] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 504.735421][ T5598] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 504.754904][ T5598] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 504.774898][ T5598] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 504.806843][ T5598] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 504.840059][ T5598] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 504.870843][ T5598] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 504.883042][T12619] Cannot find del_set index 4 as target [ 505.775491][ T29] audit: type=1400 audit(1787231527.746:1234): avc: denied { bind } for pid=12620 comm="syz.4.2079" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 505.812884][ T5598] usb 4-1: USB disconnect, device number 75 [ 507.003849][ T5614] buffer_io_error: 20 callbacks suppressed [ 507.003864][ T5614] Buffer I/O error on dev loop2, logical block 0, async page read [ 507.024375][ T5614] Buffer I/O error on dev loop2, logical block 0, async page read [ 507.033953][ T5614] Buffer I/O error on dev loop2, logical block 0, async page read [ 507.042648][ T5614] Buffer I/O error on dev loop2, logical block 0, async page read [ 507.063077][ T5614] Buffer I/O error on dev loop2, logical block 0, async page read [ 507.133472][T12636] gadgetfs: bound to dummy_udc driver [ 507.302976][ T29] audit: type=1400 audit(1787231529.716:1235): avc: denied { bind } for pid=12639 comm="syz.1.2085" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 507.366728][ T29] audit: type=1400 audit(1787231529.726:1236): avc: denied { name_bind } for pid=12639 comm="syz.1.2085" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 507.416505][ T29] audit: type=1400 audit(1787231529.726:1237): avc: denied { node_bind } for pid=12639 comm="syz.1.2085" saddr=100.1.1.2 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 507.705159][ T42] usb 4-1: new full-speed USB device number 76 using dummy_hcd [ 507.772572][T12667] tmpfs: Unknown parameter 'usrquota1' [ 508.400732][ T29] audit: type=1400 audit(1787231530.806:1238): avc: denied { append } for pid=12663 comm="syz.4.2090" name="uprobe_events" dev="tracefs" ino=1077 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 508.432969][ T42] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 508.452942][ T42] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.461513][ T42] usb 4-1: Product: syz [ 508.467916][ T42] usb 4-1: Manufacturer: syz [ 508.473026][ T42] usb 4-1: SerialNumber: syz [ 508.503978][ T42] usb 4-1: config 0 descriptor?? [ 508.522596][ T5620] Buffer I/O error on dev loop2, logical block 0, async page read [ 508.558030][ T5620] Buffer I/O error on dev loop2, logical block 0, async page read [ 508.579418][ T5620] Buffer I/O error on dev loop2, logical block 0, async page read [ 508.596531][ T5620] Buffer I/O error on dev loop2, logical block 0, async page read [ 508.612230][ T5620] Buffer I/O error on dev loop2, logical block 0, async page read [ 508.719825][ T42] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 508.775089][ T5608] usb 3-1: new full-speed USB device number 70 using dummy_hcd [ 508.924818][ T5608] usb 3-1: device descriptor read/64, error -71 [ 509.174997][ T5608] usb 3-1: new full-speed USB device number 71 using dummy_hcd [ 509.262530][T12702] tmpfs: Unknown parameter 'usrquota1' [ 509.304852][ T5608] usb 3-1: device descriptor read/64, error -71 [ 509.418398][ T5608] usb usb3-port1: attempt power cycle [ 509.764879][ T5608] usb 3-1: new full-speed USB device number 72 using dummy_hcd [ 509.786615][ T5608] usb 3-1: device descriptor read/8, error -71 [ 510.034890][ T5608] usb 3-1: new full-speed USB device number 73 using dummy_hcd [ 510.055382][ T5608] usb 3-1: device descriptor read/8, error -71 [ 510.165186][ T5608] usb usb3-port1: unable to enumerate USB device [ 510.785237][ T29] audit: type=1400 audit(1787231533.206:1239): avc: denied { ioctl } for pid=12715 comm="syz.0.2111" path="socket:[41466]" dev="sockfs" ino=41466 ioctlcmd=0x61f3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 510.845998][ T8593] IPVS: starting estimator thread 0... [ 510.945000][T12722] IPVS: using max 77 ests per chain, 184800 per kthread [ 511.447661][ T42] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 511.496382][ T42] usb 4-1: USB disconnect, device number 76 [ 511.869342][T12738] trusted_key: syz.1.2117 sent an empty control message without MSG_MORE. [ 512.077818][T12740] tmpfs: Unknown parameter 'usrquota1' [ 512.280676][ T29] audit: type=1400 audit(1787231534.696:1240): avc: denied { write } for pid=12743 comm="syz.4.2120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 512.380337][ T29] audit: type=1400 audit(1787231534.796:1241): avc: denied { lock } for pid=12743 comm="syz.4.2120" path="/dev/dri/renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 512.381167][T12744] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2120'. [ 512.564526][ T29] audit: type=1800 audit(1787231534.976:1242): pid=12737 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.2116" name="file0" dev="fuse" ino=18446744073709551613 res=0 errno=0 [ 512.662544][ T5614] buffer_io_error: 5 callbacks suppressed [ 512.662559][ T5614] Buffer I/O error on dev loop2, logical block 0, async page read [ 512.702283][ T5614] Buffer I/O error on dev loop2, logical block 0, async page read [ 512.730391][ T5614] Buffer I/O error on dev loop2, logical block 0, async page read [ 512.765218][ T5614] Buffer I/O error on dev loop2, logical block 0, async page read [ 512.800134][ T5614] Buffer I/O error on dev loop2, logical block 0, async page read [ 513.260632][T12759] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2125'. [ 513.314608][T12759] 9p: Bad value for 'rfdno' [ 513.576227][ T5614] Buffer I/O error on dev loop2, logical block 0, async page read [ 513.600928][ T5614] Buffer I/O error on dev loop2, logical block 0, async page read [ 513.624201][ T5614] Buffer I/O error on dev loop2, logical block 0, async page read [ 513.646329][ T5614] Buffer I/O error on dev loop2, logical block 0, async page read [ 513.681629][ T5614] Buffer I/O error on dev loop2, logical block 0, async page read [ 513.880374][T12774] gadgetfs: bound to dummy_udc driver [ 514.146279][ T8595] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 514.162272][ T5606] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 514.164844][ T8593] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 514.176310][ T5606] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 514.187193][ T5606] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 514.203194][ T5606] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 514.205417][ C0] gadgetfs: connected [ 514.213395][ T5606] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 514.214443][ T8593] gadgetfs: disconnected [ 514.231558][ T29] audit: type=1400 audit(1787231536.646:1243): avc: denied { mounton } for pid=12778 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 514.315125][ T8595] usb 3-1: Using ep0 maxpacket: 16 [ 514.324153][ T8595] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 514.365942][ T8595] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 514.397852][ T8595] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 514.429920][ T8595] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 514.447208][ T8595] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 514.554848][ T8595] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 514.575196][ T8595] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 514.589298][ T8595] usb 3-1: Manufacturer: syz [ 514.600259][ T8595] usb 3-1: config 0 descriptor?? [ 514.755084][T12793] SET target dimension over the limit! [ 515.058444][ T42] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 515.176036][T12778] wg2 speed is unknown, defaulting to 1000 [ 515.224811][ T8595] rc_core: IR keymap rc-hauppauge not found [ 515.230826][ T8595] Registered IR keymap rc-empty [ 515.242562][ T8595] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 515.268653][ T8595] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 515.305280][ T42] usb 4-1: Using ep0 maxpacket: 32 [ 515.332534][ T8595] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 515.339049][ T42] usb 4-1: unable to get BOS descriptor or descriptor too short [ 515.390002][ T8595] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input41 [ 515.403845][ T42] usb 4-1: New USB device found, idVendor=0068, idProduct=0103, bcdDevice=40.ee [ 515.423892][ T8595] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 515.439285][ T42] usb 4-1: no configurations [ 515.445168][ T8595] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 515.465555][ T42] usb 4-1: can't read configurations, error -22 [ 515.585058][ T8595] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 515.607934][ T42] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 515.628491][ T8595] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 515.657871][ T8595] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 515.695058][ T8595] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 515.715625][ T8595] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 515.764901][ T8595] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 515.784867][ T8595] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 515.805765][ T42] usb 4-1: Using ep0 maxpacket: 32 [ 515.815209][ T8595] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 515.841204][ T42] usb 4-1: unable to get BOS descriptor or descriptor too short [ 515.861669][ T8595] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 515.883910][ T42] usb 4-1: New USB device found, idVendor=0068, idProduct=0103, bcdDevice=40.ee [ 515.906603][ T8595] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 515.920067][ T42] usb 4-1: no configurations [ 515.939372][ T42] usb 4-1: can't read configurations, error -22 [ 515.945673][ T8595] usb 3-1: USB disconnect, device number 74 [ 515.996770][ T42] usb usb4-port1: attempt power cycle [ 516.022233][T12778] bridge0: port 1(bridge_slave_0) entered blocking state [ 516.042937][T12778] bridge0: port 1(bridge_slave_0) entered disabled state [ 516.068061][T12778] bridge_slave_0: entered allmulticast mode [ 516.091315][T12778] bridge_slave_0: entered promiscuous mode [ 516.196020][ T5881] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.305945][ T5606] Bluetooth: hci5: command tx timeout [ 516.365189][ T42] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 516.425902][ T42] usb 4-1: Using ep0 maxpacket: 32 [ 516.439994][T12813] netlink: 'syz.2.2136': attribute type 7 has an invalid length. [ 516.448062][T12813] netlink: 'syz.2.2136': attribute type 8 has an invalid length. [ 516.694545][ T42] usb 4-1: unable to get BOS descriptor or descriptor too short [ 516.702644][ T42] usb 4-1: New USB device found, idVendor=0068, idProduct=0103, bcdDevice=40.ee [ 516.763610][ T42] usb 4-1: no configurations [ 516.783373][T12778] bridge0: port 2(bridge_slave_1) entered blocking state [ 516.798153][ T42] usb 4-1: can't read configurations, error -22 [ 516.812419][T12778] bridge0: port 2(bridge_slave_1) entered disabled state [ 516.830994][T12778] bridge_slave_1: entered allmulticast mode [ 516.841388][T12778] bridge_slave_1: entered promiscuous mode [ 517.307739][T12816] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2137'. [ 517.817201][ T42] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 517.943070][ T5614] buffer_io_error: 10 callbacks suppressed [ 517.943085][ T5614] Buffer I/O error on dev loop2, logical block 0, async page read [ 517.988059][ T5881] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.991037][ T5614] Buffer I/O error on dev loop2, logical block 0, async page read [ 518.014769][ T29] audit: type=1400 audit(1787231540.416:1244): avc: denied { ioctl } for pid=12809 comm="syz.4.2135" path="socket:[40822]" dev="sockfs" ino=40822 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 518.034789][ T42] usb 4-1: device not accepting address 80, error -71 [ 518.153022][T12826] netlink: 'syz.2.2140': attribute type 7 has an invalid length. [ 518.161063][T12826] netlink: 'syz.2.2140': attribute type 8 has an invalid length. [ 518.325084][ T5614] Buffer I/O error on dev loop2, logical block 0, async page read [ 518.345246][ T5614] Buffer I/O error on dev loop2, logical block 0, async page read [ 518.354789][ T29] audit: type=1400 audit(1787231540.436:1245): avc: denied { ioctl } for pid=12819 comm="syz.3.2139" path="socket:[40818]" dev="sockfs" ino=40818 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 518.380117][ T5614] Buffer I/O error on dev loop2, logical block 0, async page read [ 518.388205][ T5606] Bluetooth: hci5: command tx timeout [ 518.393623][T12778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 518.406385][ T42] usb usb4-port1: unable to enumerate USB device [ 518.445344][T12778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 518.510518][ T5881] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.521151][ T29] audit: type=1400 audit(1787231540.936:1246): avc: denied { read } for pid=12819 comm="syz.3.2139" lport=37127 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 518.637998][ T5881] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.683934][T12778] team0: Port device team_slave_0 added [ 518.718182][T12778] team0: Port device team_slave_1 added [ 518.798132][T12778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 518.813350][T12778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 518.927980][T12778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 518.996370][T12778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 519.004638][T12778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 519.032100][T12778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 519.755288][T12778] hsr_slave_0: entered promiscuous mode [ 519.768074][T12778] hsr_slave_1: entered promiscuous mode [ 519.775266][T12778] debugfs: 'hsr0' already exists in 'hsr' [ 519.781019][T12778] Cannot create hsr debugfs directory [ 520.738437][ T5606] Bluetooth: hci5: command tx timeout [ 520.827973][ T5614] Buffer I/O error on dev loop2, logical block 0, async page read [ 520.837012][ T29] audit: type=1400 audit(1787231543.256:1247): avc: denied { mount } for pid=12837 comm="syz.4.2144" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 520.873086][T12840] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 520.887944][ T5614] Buffer I/O error on dev loop2, logical block 0, async page read [ 520.894844][ T29] audit: type=1400 audit(1787231543.306:1248): avc: denied { read } for pid=12837 comm="syz.4.2144" name="trace_pipe" dev="tracefs" ino=3286 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 521.005318][ T5614] Buffer I/O error on dev loop2, logical block 0, async page read [ 521.046708][ T29] audit: type=1400 audit(1787231543.466:1249): avc: denied { unmount } for pid=5596 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 521.067362][ T5614] Buffer I/O error on dev loop2, logical block 0, async page read [ 521.132867][ T5614] Buffer I/O error on dev loop2, logical block 0, async page read [ 521.561606][ T5881] bridge_slave_1: left allmulticast mode [ 521.648049][ T5881] bridge_slave_1: left promiscuous mode [ 521.764439][ T5881] bridge0: port 2(bridge_slave_1) entered disabled state [ 521.966821][ T5881] bridge_slave_0: left allmulticast mode [ 521.973002][ T5881] bridge_slave_0: left promiscuous mode [ 521.979400][ T5881] bridge0: port 1(bridge_slave_0) entered disabled state [ 522.009905][ T5881] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 522.239350][ T5881] batman_adv: batadv0: Removing interface: ip6gretap1 [ 523.126598][ T5606] Bluetooth: hci5: command tx timeout [ 523.346796][ T5881] bond1 (unregistering): (slave gretap1): Releasing active interface [ 523.468398][ T5881] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 523.494622][ T5881] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 523.508478][ T5881] bond0 (unregistering): Released all slaves [ 523.520840][ T5881] bond1 (unregistering): Released all slaves [ 523.787830][ T5699] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 524.163549][ T5699] usb 4-1: Using ep0 maxpacket: 16 [ 524.236750][ T5699] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 524.328438][ T5699] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 524.450020][ T5699] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 524.579182][ T5699] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 524.719605][ T5699] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 524.860039][ T5699] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 524.882552][ T5614] buffer_io_error: 5 callbacks suppressed [ 524.882572][ T5614] Buffer I/O error on dev loop2, logical block 0, async page read [ 525.024045][ T5699] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 525.047009][ T5614] Buffer I/O error on dev loop2, logical block 0, async page read [ 525.099986][ T5699] usb 4-1: Manufacturer: syz [ 525.129587][ T5614] Buffer I/O error on dev loop2, logical block 0, async page read [ 525.210992][ T5699] usb 4-1: config 0 descriptor?? [ 525.239366][ T5614] Buffer I/O error on dev loop2, logical block 0, async page read [ 525.309579][ T5614] Buffer I/O error on dev loop2, logical block 0, async page read [ 526.747388][ T6079] Buffer I/O error on dev loop2, logical block 0, async page read [ 526.754911][ T5699] rc_core: IR keymap rc-hauppauge not found [ 526.786150][ T6079] Buffer I/O error on dev loop2, logical block 0, async page read [ 526.790128][ T5699] Registered IR keymap rc-empty [ 526.863041][ T5699] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 526.908425][ T6079] Buffer I/O error on dev loop2, logical block 0, async page read [ 526.915615][ T5699] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 526.987192][ T5699] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 526.989320][ T6079] Buffer I/O error on dev loop2, logical block 0, async page read [ 527.078406][ T5699] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input42 [ 527.106498][ T29] audit: type=1400 audit(1787231549.526:1250): avc: denied { getopt } for pid=12878 comm="syz.2.2156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 527.130940][ T6079] Buffer I/O error on dev loop2, logical block 0, async page read [ 527.184637][ T5699] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 527.243089][ T5699] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 527.285862][ T5699] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 527.325198][ T5699] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 527.367484][ T5699] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 527.406322][ T5699] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 527.444848][ T5699] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 527.501965][ T5699] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 527.519090][ T29] audit: type=1400 audit(1787231549.926:1251): avc: denied { write } for pid=12877 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 527.546560][ T5699] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 527.699998][ T5699] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 527.709822][ T29] audit: type=1400 audit(1787231550.116:1252): avc: denied { getopt } for pid=12898 comm="syz.2.2160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 527.728038][ T5699] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 527.753689][ T5699] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 527.777150][ T5881] hsr_slave_0: left promiscuous mode [ 527.800231][ T5699] usb 4-1: USB disconnect, device number 81 [ 527.807205][ T5881] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 527.824808][ T5881] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 527.847341][ T5881] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 527.859358][ T29] audit: type=1400 audit(1787231550.276:1253): avc: denied { write } for pid=12902 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 527.901266][ T5881] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 527.940786][T12906] SET target dimension over the limit! [ 528.348449][ T5881] veth1_macvtap: left promiscuous mode [ 528.385795][ T5881] veth0_macvtap: left promiscuous mode [ 528.416264][ T5881] veth0_vlan: left promiscuous mode [ 528.457461][ T5606] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 528.869686][ T5881] team0 (unregistering): Port device team_slave_1 removed [ 528.926048][ T5881] team0 (unregistering): Port device team_slave_0 removed [ 529.178489][ T5261] 8021q: adding VLAN 0 to HW filter on device eth1 [ 529.624088][T12930] net_ratelimit: 343 callbacks suppressed [ 529.624108][T12930] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 529.864665][ T29] audit: type=1400 audit(1787231552.276:1254): avc: denied { create } for pid=12931 comm="syz.2.2165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 529.926089][ T29] audit: type=1400 audit(1787231552.326:1255): avc: denied { write } for pid=12931 comm="syz.2.2165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 530.035436][ T29] audit: type=1400 audit(1787231552.456:1256): avc: denied { write } for pid=12923 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 530.249882][ T29] audit: type=1400 audit(1787231552.666:1257): avc: denied { write } for pid=12946 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 530.502677][ T5881] IPVS: stop unused estimator thread 0... [ 531.302935][T12778] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 531.430064][T12778] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 531.468826][T12778] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 531.600472][T12778] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 531.632830][T12778] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 531.672890][T12778] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 531.701328][ T29] audit: type=1400 audit(1787231554.116:1258): avc: denied { write } for pid=12956 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 531.702005][T12778] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 531.758832][ T5706] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 531.759551][ T8583] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 531.800803][ T8583] dvb_usb_az6027 5-1:0.0: probe with driver dvb_usb_az6027 failed with error -110 [ 531.813472][ T8583] usb 5-1: USB disconnect, device number 58 [ 531.816737][ T5706] dvb_usb_az6027 1-1:0.0: probe with driver dvb_usb_az6027 failed with error -2 [ 531.846878][T12778] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 531.869372][ T29] audit: type=1400 audit(1787231554.286:1259): avc: denied { write } for pid=12976 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 531.909407][ T5620] buffer_io_error: 25 callbacks suppressed [ 531.909423][ T5620] Buffer I/O error on dev loop2, logical block 0, async page read [ 531.934562][ T5706] usb 1-1: USB disconnect, device number 71 [ 531.948630][ T5620] Buffer I/O error on dev loop2, logical block 0, async page read [ 531.967886][ T5620] Buffer I/O error on dev loop2, logical block 0, async page read [ 531.976610][ T5620] Buffer I/O error on dev loop2, logical block 0, async page read [ 531.987631][ T5620] Buffer I/O error on dev loop2, logical block 0, async page read [ 532.097557][T12778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 532.115117][ T5719] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 532.151153][T12778] 8021q: adding VLAN 0 to HW filter on device team0 [ 532.167458][T12989] netlink: 'syz.0.2172': attribute type 29 has an invalid length. [ 532.177285][T12989] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2172'. [ 532.190889][ T6123] bridge0: port 1(bridge_slave_0) entered blocking state [ 532.198052][ T6123] bridge0: port 1(bridge_slave_0) entered forwarding state [ 532.230714][ T6123] bridge0: port 2(bridge_slave_1) entered blocking state [ 532.237895][ T6123] bridge0: port 2(bridge_slave_1) entered forwarding state [ 532.265109][ T5719] usb 3-1: Using ep0 maxpacket: 32 [ 532.271046][ T5719] usb 3-1: New USB device found, idVendor=0763, idProduct=2012, bcdDevice= 0.40 [ 532.291762][ T5719] usb 3-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 532.332288][ T5719] usb 3-1: config 6 has 2 interfaces, different from the descriptor's value: 3 [ 532.376030][ T5719] usb 3-1: config 6 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 532.406730][ T5719] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.418488][ T5719] usb 3-1: Product: syz [ 532.442315][ T5719] usb 3-1: Manufacturer: syz [ 532.449989][ T5719] usb 3-1: SerialNumber: syz [ 532.714179][ T5719] usb 3-1: Fast Track Pro config OK [ 532.843330][T12978] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 532.872372][T12978] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 533.173237][T12778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 533.273839][T12778] veth0_vlan: entered promiscuous mode [ 533.295340][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 533.295355][ T29] audit: type=1400 audit(1787231554.836:1261): avc: denied { ioctl } for pid=12999 comm="syz.3.2174" path="/dev/sg0" dev="devtmpfs" ino=716 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 533.412870][T12778] veth1_vlan: entered promiscuous mode [ 533.512594][ T29] audit: type=1400 audit(1787231555.926:1262): avc: denied { read append } for pid=13024 comm="syz.3.2178" name="usbmon7" dev="devtmpfs" ino=741 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 533.558458][T12778] veth0_macvtap: entered promiscuous mode [ 533.588485][T12778] veth1_macvtap: entered promiscuous mode [ 533.594459][ T29] audit: type=1400 audit(1787231555.926:1263): avc: denied { open } for pid=13024 comm="syz.3.2178" path="/dev/usbmon7" dev="devtmpfs" ino=741 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 533.649094][ T29] audit: type=1400 audit(1787231555.986:1264): avc: denied { ioctl } for pid=13024 comm="syz.3.2178" path="/dev/usbmon7" dev="devtmpfs" ino=741 ioctlcmd=0x9411 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 533.687265][T12778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 533.746651][T12778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 533.760970][ T29] audit: type=1400 audit(1787231555.996:1265): avc: denied { write } for pid=13024 comm="syz.3.2178" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 533.834567][ T29] audit: type=1400 audit(1787231556.046:1266): avc: denied { write } for pid=12986 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 533.885738][ T29] audit: type=1400 audit(1787231556.286:1267): avc: denied { write } for pid=13034 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 533.913696][ T5719] usb 3-1: 1:1 : no or invalid class specific endpoint descriptor [ 533.913720][ T5719] usb 3-1: 1:1 : format type 0 is detected, processed as PCM [ 533.913735][ T5719] usb 3-1: 1:1 : sample bitwidth 177 in over sample bytes 4 [ 533.961287][ T1091] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.961324][ T1091] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.961351][ T1091] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.975399][ T6123] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.999489][ T5719] usb 3-1: 0:2 : does not exist [ 533.999547][ T5719] usb 3-1: unit 5 not found! [ 533.999564][ T5719] usb 3-1: unit 6 not found! [ 534.014916][ T5699] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 534.128184][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 534.128205][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 534.163112][ T5719] usb 3-1: USB disconnect, device number 75 [ 534.167292][ T5699] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 534.168143][ T5699] usb 4-1: config 1 descriptor has 1 excess byte, ignoring [ 534.168184][ T5699] usb 4-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 534.169844][ T5699] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 534.169868][ T5699] usb 4-1: Product: syz [ 534.222093][ T6224] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 534.238512][ T5699] usb 4-1: Manufacturer: syz [ 534.303996][ T5597] udevd[5597]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:6.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 534.318389][ T6224] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 534.326225][ T5699] usb 4-1: SerialNumber: syz [ 534.380389][ T29] audit: type=1400 audit(1787231556.796:1268): avc: denied { mounton } for pid=12778 comm="syz-executor" path="/root/syzkaller.rEi3pi/syz-tmp" dev="sda1" ino=2048 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 534.532723][ T29] audit: type=1400 audit(1787231556.796:1269): avc: denied { mount } for pid=12778 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 534.588951][ T5620] Buffer I/O error on dev loop2, logical block 0, async page read [ 534.622612][ T8587] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 534.624388][ T5620] Buffer I/O error on dev loop2, logical block 0, async page read [ 534.646660][ T29] audit: type=1400 audit(1787231556.846:1270): avc: denied { mounton } for pid=12778 comm="syz-executor" path="/root/syzkaller.rEi3pi/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 534.694079][ T5620] Buffer I/O error on dev loop2, logical block 0, async page read [ 534.721462][ T5620] Buffer I/O error on dev loop2, logical block 0, async page read [ 534.766684][ T5620] Buffer I/O error on dev loop2, logical block 0, async page read [ 534.945113][ T5606] Bluetooth: hci2: SCO packet for unknown connection handle 0 [ 534.986925][ T5719] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 535.134938][ T5719] usb 3-1: device descriptor read/64, error -71 [ 535.412911][ T5719] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 536.066551][ T8587] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 536.074577][ T8587] ath9k_htc: Failed to initialize the device [ 536.184465][ T5719] usb 3-1: device descriptor read/64, error -71 [ 536.205891][T13090] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 536.256179][ T8587] usb 4-1: ath9k_htc: USB layer deinitialized [ 536.298834][ T5719] usb usb3-port1: attempt power cycle [ 536.805268][ T5706] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 537.017136][ T5706] usb 1-1: Using ep0 maxpacket: 32 [ 537.090085][ T5706] usb 1-1: New USB device found, idVendor=0763, idProduct=2012, bcdDevice= 0.40 [ 537.141849][ T5706] usb 1-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 537.172564][ T5706] usb 1-1: config 6 has 2 interfaces, different from the descriptor's value: 3 [ 537.211316][ T5706] usb 1-1: config 6 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 537.217647][ T5719] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 537.266124][ T5719] usb 3-1: device descriptor read/8, error -71 [ 537.283859][ T5706] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 537.315443][ T5706] usb 1-1: Product: syz [ 537.328931][ T5706] usb 1-1: Manufacturer: syz [ 537.344227][ T5706] usb 1-1: SerialNumber: syz [ 537.377662][ T5706] usb 1-1: Fast Track Pro config OK [ 537.393445][ T5598] usb 4-1: USB disconnect, device number 82 [ 537.516675][ T5719] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 537.572846][ T8595] hid_parser_main: 30 callbacks suppressed [ 537.572884][ T8595] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 537.573878][ T5719] usb 3-1: device descriptor read/8, error -71 [ 537.579801][T13102] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 537.617166][ T8595] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 537.653461][ T8595] hid-generic 0000:0000:0000.0012: hidraw0: HID v0.00 Device [syz0] on syz0 [ 537.665061][T13102] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 537.715038][ T5719] usb usb3-port1: unable to enumerate USB device [ 537.781229][ T5620] Buffer I/O error on dev loop2, logical block 0, async page read [ 537.864997][T13131] FAULT_INJECTION: forcing a failure. [ 537.864997][T13131] name failslab, interval 1, probability 0, space 0, times 0 [ 537.877736][T13131] CPU: 0 UID: 0 PID: 13131 Comm: syz.1.2196 Tainted: G L syzkaller #0 PREEMPT(full) [ 537.877764][T13131] Tainted: [L]=SOFTLOCKUP [ 537.877770][T13131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 537.877781][T13131] Call Trace: [ 537.877793][T13131] [ 537.877800][T13131] dump_stack_lvl+0x100/0x190 [ 537.877833][T13131] should_fail_ex.cold+0x5/0xa [ 537.877857][T13131] should_failslab+0xc2/0x120 [ 537.877886][T13131] __kmalloc_noprof+0xfc/0x820 [ 537.877911][T13131] ? __pfx_dynamic_dname+0x10/0x10 [ 537.877933][T13131] ? tomoyo_encode2+0xfb/0x3c0 [ 537.877958][T13131] tomoyo_encode2+0xfb/0x3c0 [ 537.877982][T13131] tomoyo_encode+0x29/0x50 [ 537.878002][T13131] tomoyo_realpath_from_path+0x18c/0x690 [ 537.878029][T13131] tomoyo_path_number_perm+0x23c/0x580 [ 537.878056][T13131] ? tomoyo_path_number_perm+0x22e/0x580 [ 537.878083][T13131] ? __print_lock_name+0x64/0x80 [ 537.878104][T13131] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 537.878133][T13131] ? rcu_is_watching+0x13/0xc0 [ 537.878174][T13131] ? find_held_lock+0x2b/0x80 [ 537.878193][T13131] ? hook_file_ioctl_common+0x140/0x440 [ 537.878223][T13131] ? __fget_files+0x21f/0x3d0 [ 537.878252][T13131] security_file_ioctl+0xd3/0x230 [ 537.878273][T13131] __x64_sys_ioctl+0xb7/0x210 [ 537.878296][T13131] do_syscall_64+0x123/0x790 [ 537.878325][T13131] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.878344][T13131] RIP: 0033:0x7f1e3cf9e0d9 [ 537.878359][T13131] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 537.878376][T13131] RSP: 002b:00007f1e3de8e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 537.878396][T13131] RAX: ffffffffffffffda RBX: 00007f1e3d226090 RCX: 00007f1e3cf9e0d9 [ 537.878408][T13131] RDX: 0000000000000000 RSI: 000000000000ae60 RDI: 0000000000000005 [ 537.878419][T13131] RBP: 00007f1e3de8e090 R08: 0000000000000000 R09: 0000000000000000 [ 537.878431][T13131] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 537.878442][T13131] R13: 00007f1e3d226128 R14: 00007f1e3d226090 R15: 00007ffe8cada838 [ 537.878467][T13131] [ 537.878556][T13131] ERROR: Out of memory at tomoyo_realpath_from_path. [ 538.114008][ T5620] Buffer I/O error on dev loop2, logical block 0, async page read [ 538.267303][ T5620] Buffer I/O error on dev loop2, logical block 0, async page read [ 538.312100][ T5620] Buffer I/O error on dev loop2, logical block 0, async page read [ 538.446697][ T5620] Buffer I/O error on dev loop2, logical block 0, async page read [ 538.516550][T13125] fido_id[13125]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 538.700358][ T5706] usb 1-1: 1:1 : no or invalid class specific endpoint descriptor [ 538.814319][ T5706] usb 1-1: 1:1 : format type 0 is detected, processed as PCM [ 539.735876][T13136] netlink: 'syz.2.2197': attribute type 29 has an invalid length. [ 540.461390][T13135] input: syz1 as /devices/virtual/input/input43 [ 540.468795][ T29] kauditd_printk_skb: 51 callbacks suppressed [ 540.468810][ T29] audit: type=1400 audit(1787231561.886:1322): avc: denied { module_load } for pid=13132 comm="syz.2.2197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 540.472429][ T5706] usb 1-1: 1:1 : sample bitwidth 177 in over sample bytes 4 [ 540.504624][T13135] bpf: Bad value for 'uid' [ 540.535487][ T29] audit: type=1400 audit(1787231562.196:1323): avc: denied { bind } for pid=13132 comm="syz.2.2197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 540.628571][ T5706] usb 1-1: 0:2 : does not exist [ 540.641745][ T5706] usb 1-1: unit 5 not found! [ 540.653601][ T29] audit: type=1400 audit(1787231563.056:1324): avc: denied { write } for pid=13134 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 540.682451][ T5706] usb 1-1: unit 6 not found! [ 540.798802][ T5706] usb 1-1: USB disconnect, device number 72 [ 540.891270][ T5611] udevd[5611]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:6.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 541.385085][ T5706] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 541.400504][ T29] audit: type=1400 audit(1787231563.806:1325): avc: denied { write } for pid=13148 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 541.645417][ T5706] usb 1-1: New USB device found, idVendor=2001, idProduct=3a04, bcdDevice=b0.f1 [ 541.654627][ T5614] Buffer I/O error on dev loop2, logical block 0, async page read [ 541.674642][ T5706] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 541.692715][ T5614] Buffer I/O error on dev loop2, logical block 0, async page read [ 541.728993][ T5614] Buffer I/O error on dev loop2, logical block 0, async page read [ 541.752702][ T5706] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 541.767198][ T5706] usb 1-1: Product: syz [ 541.771764][ T5614] Buffer I/O error on dev loop2, logical block 0, async page read [ 541.788629][ T5706] usb 1-1: Manufacturer: syz [ 542.186862][T13169] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2204'. [ 542.933906][ T5614] Buffer I/O error on dev loop2, logical block 0, async page read [ 542.944898][ T5706] usb 1-1: SerialNumber: syz [ 542.988368][ T29] audit: type=1400 audit(1787231565.396:1326): avc: denied { write } for pid=13168 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 543.189449][ T5620] Buffer I/O error on dev loop2, logical block 0, async page read [ 543.233928][T13147] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 543.246870][ T5620] Buffer I/O error on dev loop2, logical block 0, async page read [ 543.273796][T13147] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 543.284395][ T5620] Buffer I/O error on dev loop2, logical block 0, async page read [ 543.306748][ T5620] Buffer I/O error on dev loop2, logical block 0, async page read [ 543.337216][ T5620] Buffer I/O error on dev loop2, logical block 0, async page read [ 543.562842][ T5601] Bluetooth: hci2: unexpected event for opcode 0x0c0d [ 543.659115][ T5706] usb 1-1: Could not find all expected endpoints [ 543.659230][ T29] audit: type=1400 audit(1787231566.076:1327): avc: denied { write } for pid=13178 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 543.690168][ T5706] usb 1-1: USB disconnect, device number 73 [ 543.761069][ T8594] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 543.795899][ T29] audit: type=1400 audit(1787231566.216:1328): avc: denied { write } for pid=13207 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 543.861443][ T8595] usb 5-1: new full-speed USB device number 59 using dummy_hcd [ 543.885029][ T5598] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 543.945313][ T8594] usb 2-1: Using ep0 maxpacket: 32 [ 543.955492][ T8594] usb 2-1: New USB device found, idVendor=0763, idProduct=2012, bcdDevice= 0.40 [ 543.967758][ T8594] usb 2-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 543.981244][ T8594] usb 2-1: config 6 has 2 interfaces, different from the descriptor's value: 3 [ 543.999859][ T8594] usb 2-1: config 6 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 544.013901][ T29] audit: type=1400 audit(1787231566.426:1329): avc: denied { write } for pid=13209 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 544.039208][ T8595] usb 5-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 544.048576][ T8594] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 544.058081][ T5598] usb 4-1: Using ep0 maxpacket: 8 [ 544.063204][ T8594] usb 2-1: Product: syz [ 544.069832][ T5598] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 544.079323][ T8594] usb 2-1: Manufacturer: syz [ 544.083688][ T29] audit: type=1400 audit(1787231566.496:1330): avc: denied { write } for pid=13220 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 544.084836][ T8595] usb 5-1: config 0 has an invalid interface number: 214 but max is 0 [ 544.114984][ T8594] usb 2-1: SerialNumber: syz [ 544.124110][ T5598] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 544.148082][ T8594] usb 2-1: Fast Track Pro config OK [ 544.154067][ T8595] usb 5-1: config 0 has no interface number 0 [ 544.163542][ T8595] usb 5-1: config 0 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 544.176569][ T8595] usb 5-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 544.190980][ T5598] pvrusb2: Hardware description: Terratec Grabster AV400 [ 544.198338][ T5598] pvrusb2: ********** [ 544.199444][ T6079] Buffer I/O error on dev loop2, logical block 0, async page read [ 544.202437][ T5598] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 544.211356][ T6079] Buffer I/O error on dev loop2, logical block 0, async page read [ 544.220734][ T5598] pvrusb2: Important functionality might not be entirely working. [ 544.220746][ T5598] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 544.220757][ T5598] pvrusb2: ********** [ 544.221892][ T8595] usb 5-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 544.263656][ T6079] Buffer I/O error on dev loop2, logical block 0, async page read [ 544.282393][ T6079] Buffer I/O error on dev loop2, logical block 0, async page read [ 544.295092][ T8595] usb 5-1: Manufacturer: syz [ 544.299749][ T8595] usb 5-1: SerialNumber: syz [ 544.309416][ T8595] usb 5-1: config 0 descriptor?? [ 544.344597][T13226] netlink: 'syz.0.2214': attribute type 4 has an invalid length. [ 544.368783][T13226] netlink: 'syz.0.2214': attribute type 4 has an invalid length. [ 544.416566][T13226] bridge0: port 2(bridge_slave_1) entered disabled state [ 544.423921][T13226] bridge0: port 1(bridge_slave_0) entered disabled state [ 544.497757][T13226] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 544.511552][T13226] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 544.529619][T13194] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 544.557983][ T8595] usbtouchscreen 5-1:0.214: Failed to read FW rev: -32 [ 544.563200][ T2351] pvrusb2: Invalid write control endpoint [ 544.566066][ T8595] usbtouchscreen 5-1:0.214: probe with driver usbtouchscreen failed with error -32 [ 545.009325][T13194] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 545.074045][ T2351] pvrusb2: Invalid write control endpoint [ 545.081814][ T2351] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 545.097070][ T29] audit: type=1400 audit(1787231567.516:1331): avc: denied { mount } for pid=13202 comm="syz.3.2212" name="/" dev="hugetlbfs" ino=43710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 545.101855][ T2351] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 545.129807][ T2351] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 545.139951][ T2351] pvrusb2: Device being rendered inoperable [ 545.149463][ T2351] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 545.157236][ T2351] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 545.180591][ T2351] pvrusb2: Attached sub-driver cx25840 [ 545.237108][ T1091] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.255978][ T2351] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 545.285104][ T2351] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 545.826585][T13248] netlink: 'syz.0.2218': attribute type 7 has an invalid length. [ 545.840321][T13248] netlink: 'syz.0.2218': attribute type 8 has an invalid length. [ 546.062969][ T8594] usb 2-1: 1:1 : no or invalid class specific endpoint descriptor [ 546.078303][ T5881] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.311534][T13250] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 546.370863][ T5719] usb 4-1: USB disconnect, device number 83 [ 546.380145][ T8594] usb 2-1: 1:1 : format type 0 is detected, processed as PCM [ 546.397462][ T8594] usb 2-1: 1:1 : sample bitwidth 177 in over sample bytes 4 [ 546.405321][ T6224] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.415810][ T6224] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.432217][ T8594] usb 2-1: 0:2 : does not exist [ 546.442161][ T8594] usb 2-1: unit 5 not found! [ 546.447839][ T8594] usb 2-1: unit 6 not found! [ 546.544497][ T5699] usb 5-1: USB disconnect, device number 59 [ 546.565497][ T8594] usb 2-1: USB disconnect, device number 26 [ 546.749615][T13254] loop5: detected capacity change from 0 to 7 [ 546.848037][ C1] blk_print_req_error: 10 callbacks suppressed [ 546.848058][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 546.853125][ T5611] udevd[5611]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:6.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 546.869625][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 546.893614][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 546.903562][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 546.915290][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 546.927222][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 546.950316][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 546.960091][T13254] ldm_validate_partition_table(): Disk read failed. [ 546.970526][ T29] audit: type=1400 audit(1787231569.336:1332): avc: denied { write } for pid=13235 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 546.998875][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 547.009239][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 547.021809][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 547.031799][T13254] Dev loop5: unable to read RDB block 0 [ 547.085680][T13254] loop5: unable to read partition table [ 547.111119][T13254] loop5: partition table beyond EOD, truncated [ 547.151123][T13254] loop_reread_partitions: partition scan of loop5 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 547.151284][T13274] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=13072 sclass=netlink_route_socket pid=13274 comm=syz.1.2223 [ 547.185900][ T29] audit: type=1400 audit(1787231569.596:1333): avc: denied { write } for pid=13272 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 547.551091][T13282] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2226'. [ 547.560294][ T5719] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 547.682593][ T8587] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 547.741257][ T5719] usb 4-1: Using ep0 maxpacket: 32 [ 547.754318][ T5719] usb 4-1: New USB device found, idVendor=0763, idProduct=2012, bcdDevice= 0.40 [ 547.801474][ T5719] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 547.813733][ T29] audit: type=1400 audit(1787231570.216:1334): avc: denied { write } for pid=13283 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 547.846369][ T5719] usb 4-1: config 6 has 2 interfaces, different from the descriptor's value: 3 [ 547.865429][ T8587] usb 2-1: Using ep0 maxpacket: 16 [ 547.872253][ T5719] usb 4-1: config 6 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 547.898391][ T8587] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 547.910123][ T29] audit: type=1400 audit(1787231570.326:1335): avc: denied { ioctl } for pid=13293 comm="syz.0.2229" path="socket:[44067]" dev="sockfs" ino=44067 ioctlcmd=0x89eb scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 547.948669][ T8587] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 547.960632][ T5719] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.974843][ T5719] usb 4-1: Product: syz [ 547.979473][ T5719] usb 4-1: Manufacturer: syz [ 547.986136][ T8587] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 548.004847][ T5719] usb 4-1: SerialNumber: syz [ 548.009652][ T29] audit: type=1400 audit(1787231570.426:1336): avc: denied { write } for pid=13307 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 548.034288][ T8587] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 548.047602][ T8587] usb 2-1: config 0 interface 0 has no altsetting 0 [ 548.054368][ T8587] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 548.100078][ T5719] usb 4-1: Fast Track Pro config OK [ 548.105745][ T8587] usb 2-1: config 0 descriptor?? [ 548.447675][T13277] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 548.571569][ T8587] hid (null): nested delimiters [ 548.638404][ T8594] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 548.646861][ T8587] hid (null): nested delimiters [ 548.651763][T13277] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 548.664917][ T8587] hid (null): nested delimiters [ 548.686471][ T8587] hid (null): invalid report_size -402254711 [ 548.717322][ T8587] hid (null): unknown global tag 0xc [ 548.728782][ T8587] hid (null): unknown global tag 0xcf [ 548.742067][ T8587] hid (null): invalid report_size 16730 [ 548.774075][ T8587] usb 2-1: USB disconnect, device number 27 [ 548.814790][ T8594] usb 3-1: Using ep0 maxpacket: 32 [ 548.820835][ T8594] usb 3-1: New USB device found, idVendor=0763, idProduct=2012, bcdDevice= 0.40 [ 548.837949][ T8594] usb 3-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 548.856355][ T8594] usb 3-1: config 6 has 2 interfaces, different from the descriptor's value: 3 [ 548.892937][ T8594] usb 3-1: config 6 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 548.936234][ T8594] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.964660][ T8594] usb 3-1: Product: syz [ 548.971667][ T8594] usb 3-1: Manufacturer: syz [ 548.980167][ T8594] usb 3-1: SerialNumber: syz [ 549.006050][ T8594] usb 3-1: Fast Track Pro config OK [ 549.092253][ T29] audit: type=1400 audit(1787231571.506:1337): avc: denied { write } for pid=13312 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 549.203447][T13310] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 549.244918][ T8587] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 549.280803][ T29] audit: type=1400 audit(1787231571.696:1338): avc: denied { write } for pid=13337 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 549.288915][T13310] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 549.418485][ T8587] usb 2-1: Using ep0 maxpacket: 8 [ 549.595115][ T5598] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 549.609035][ T29] audit: type=1400 audit(1787231572.026:1339): avc: denied { read write } for pid=13343 comm="syz.4.2237" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 549.642310][ T29] audit: type=1400 audit(1787231572.056:1340): avc: denied { open } for pid=13343 comm="syz.4.2237" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 549.712345][ T5719] usb 4-1: 1:1 : no or invalid class specific endpoint descriptor [ 549.731214][ T5719] usb 4-1: 1:1 : format type 0 is detected, processed as PCM [ 549.758950][ T5719] usb 4-1: 1:1 : sample bitwidth 177 in over sample bytes 4 [ 549.792026][ T5719] usb 4-1: 0:2 : does not exist [ 549.797762][ T5719] usb 4-1: unit 5 not found! [ 549.802942][ T5719] usb 4-1: unit 6 not found! [ 549.991403][ T5719] usb 4-1: USB disconnect, device number 84 [ 550.505436][ T8594] usb 3-1: 1:1 : no or invalid class specific endpoint descriptor [ 550.702911][ T5611] udevd[5611]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:6.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 551.276679][ T5598] usb 1-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice= 0.00 [ 551.615170][ T5614] buffer_io_error: 41 callbacks suppressed [ 551.615450][ T5614] Buffer I/O error on dev loop2, logical block 0, async page read [ 551.694901][ T5614] Buffer I/O error on dev loop2, logical block 0, async page read [ 551.732864][ T5614] Buffer I/O error on dev loop2, logical block 0, async page read [ 551.749237][ T8594] usb 3-1: 1:1 : format type 0 is detected, processed as PCM [ 551.759990][ T8594] usb 3-1: 1:1 : sample bitwidth 177 in over sample bytes 4 [ 551.771030][ T8594] usb 3-1: 0:2 : does not exist [ 551.776082][ T5598] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 551.786054][ T8594] usb 3-1: unit 5 not found! [ 551.790837][ T8594] usb 3-1: unit 6 not found! [ 551.795532][ T5598] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 551.801712][ T5614] Buffer I/O error on dev loop2, logical block 0, async page read [ 551.806968][ T5598] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 551.856091][ T8587] usb 2-1: unable to get BOS descriptor or descriptor too short [ 551.866563][ T8594] usb 3-1: USB disconnect, device number 80 [ 551.882807][ T5614] Buffer I/O error on dev loop2, logical block 0, async page read [ 551.893227][ T29] audit: type=1400 audit(1787231574.296:1341): avc: denied { unmount } for pid=12778 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 551.937745][ T8587] usb 2-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 0.40 [ 551.938248][T13358] nvmet: adding nsid 1 to subsystem testsubsys [ 551.952607][ T5611] udevd[5611]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:6.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 551.990547][ T8587] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 552.000297][ T8587] usb 2-1: can't read configurations, error -71 [ 552.009317][ T29] audit: type=1400 audit(1787231574.336:1342): avc: denied { write } for pid=13356 comm="syz.3.2240" name="subsystems" dev="configfs" ino=613 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 552.065728][ T29] audit: type=1400 audit(1787231574.336:1343): avc: denied { add_name } for pid=13356 comm="syz.3.2240" name="testsubsys" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 552.066959][ T6079] Buffer I/O error on dev loop2, logical block 0, async page read [ 552.095006][T13363] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 552.101884][T13363] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 552.134514][ T29] audit: type=1400 audit(1787231574.336:1344): avc: denied { create } for pid=13356 comm="syz.3.2240" name="testsubsys" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 552.142704][ T6079] Buffer I/O error on dev loop2, logical block 0, async page read [ 552.169281][ T6079] Buffer I/O error on dev loop2, logical block 0, async page read [ 552.179003][ T5719] usb 1-1: USB disconnect, device number 74 [ 552.222727][T13363] vhci_hcd vhci_hcd.0: Device attached [ 552.232533][ T6079] Buffer I/O error on dev loop2, logical block 0, async page read [ 552.301240][T13368] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(9) [ 552.307765][T13368] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 552.315303][T13371] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(12) [ 552.320042][ T29] audit: type=1400 audit(1787231574.346:1345): avc: denied { write } for pid=13356 comm="syz.3.2240" name="namespaces" dev="configfs" ino=43894 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 552.321903][T13371] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 552.338559][ T6079] Buffer I/O error on dev loop2, logical block 0, async page read [ 552.363452][T13368] vhci_hcd vhci_hcd.0: Device attached [ 552.421933][T13376] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(8) [ 552.428471][T13376] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 552.474927][ T5699] usb 35-1: new high-speed USB device number 2 using vhci_hcd [ 552.494965][ T29] audit: type=1400 audit(1787231574.536:1346): avc: denied { bind } for pid=13362 comm="syz.2.2242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 552.622082][T13363] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(17) [ 552.628727][T13363] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 552.689622][T13371] vhci_hcd vhci_hcd.0: Device attached [ 552.733722][T13386] vhci_hcd vhci_hcd.0: pdev(1) rhport(5) sockfd(11) [ 552.740342][T13386] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 552.782408][T13368] vhci_hcd vhci_hcd.0: pdev(1) rhport(6) sockfd(21) [ 552.789011][T13368] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 552.800891][T13363] vhci_hcd vhci_hcd.0: Device attached [ 552.821007][T13371] vhci_hcd vhci_hcd.0: pdev(1) rhport(7) sockfd(24) [ 552.827627][T13371] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 552.918679][T13376] vhci_hcd vhci_hcd.0: Device attached [ 552.926129][T13386] vhci_hcd vhci_hcd.0: Device attached [ 553.226176][T13370] vhci_hcd: connection closed [ 553.245079][T13378] vhci_hcd: connection closed [ 553.278850][T13389] vhci_hcd: connection closed [ 553.279265][T13365] vhci_hcd: connection reset by peer [ 553.299166][T13374] vhci_hcd: connection closed [ 553.305485][T12060] vhci_hcd vhci_hcd.1: stop threads [ 553.316651][T13387] vhci_hcd: connection closed [ 553.319749][T13383] vhci_hcd: connection closed [ 553.338778][T12060] vhci_hcd vhci_hcd.1: release socket [ 553.350002][T13368] vhci_hcd vhci_hcd.0: Device attached [ 553.382807][T13392] vhci_hcd: connection closed [ 553.382862][T13371] vhci_hcd vhci_hcd.0: Device attached [ 553.396614][T12060] vhci_hcd vhci_hcd.1: disconnect device [ 553.407467][T12060] vhci_hcd vhci_hcd.1: stop threads [ 553.426276][T12060] vhci_hcd vhci_hcd.1: release socket [ 553.445791][T12060] vhci_hcd vhci_hcd.1: disconnect device [ 553.461298][T12060] vhci_hcd vhci_hcd.1: stop threads [ 553.469460][T12060] vhci_hcd vhci_hcd.1: release socket [ 553.476669][T12060] vhci_hcd vhci_hcd.1: disconnect device [ 553.493442][T12060] vhci_hcd vhci_hcd.1: stop threads [ 553.502994][T12060] vhci_hcd vhci_hcd.1: release socket [ 553.529295][T12060] vhci_hcd vhci_hcd.1: disconnect device [ 553.536245][T12060] vhci_hcd vhci_hcd.1: stop threads [ 553.541478][T12060] vhci_hcd vhci_hcd.1: release socket [ 553.549292][T12060] vhci_hcd vhci_hcd.1: disconnect device [ 553.557762][T12060] vhci_hcd vhci_hcd.1: stop threads [ 553.565149][T12060] vhci_hcd vhci_hcd.1: release socket [ 553.572436][T12060] vhci_hcd vhci_hcd.1: disconnect device [ 553.580045][T12060] vhci_hcd vhci_hcd.1: stop threads [ 553.586292][T12060] vhci_hcd vhci_hcd.1: release socket [ 553.593338][T12060] vhci_hcd vhci_hcd.1: disconnect device [ 553.601004][T12060] vhci_hcd vhci_hcd.1: stop threads [ 553.613876][T12060] vhci_hcd vhci_hcd.1: release socket [ 553.620169][T12060] vhci_hcd vhci_hcd.1: disconnect device [ 553.654865][ T8587] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 554.335232][ T8595] usb 3-1: new full-speed USB device number 81 using dummy_hcd [ 554.586929][ T8587] usb 1-1: Using ep0 maxpacket: 8 [ 554.685523][T13413] random: crng reseeded on system resumption [ 554.691966][ T29] audit: type=1400 audit(1787231577.106:1347): avc: denied { write } for pid=13412 comm="syz.1.2250" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 555.502805][ T8595] usb 3-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.00 [ 555.598242][T13415] jffs2: notice: (13415) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 555.795382][ T8587] usb 1-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c5.b9 [ 555.912819][ T29] audit: type=1400 audit(1787231577.106:1348): avc: denied { open } for pid=13412 comm="syz.1.2250" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 555.985243][ T8587] usb 1-1: config 127 has an invalid interface number: 171 but max is 1 [ 556.008380][ T8587] usb 1-1: config 127 has an invalid descriptor of length 0, skipping remainder of the config [ 556.024619][ T29] audit: type=1400 audit(1787231577.156:1349): avc: denied { ioctl } for pid=13412 comm="syz.1.2250" path="/dev/snapshot" dev="devtmpfs" ino=92 ioctlcmd=0x330b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 556.057509][ T8587] usb 1-1: config 127 has 1 interface, different from the descriptor's value: 2 [ 556.075975][ T8587] usb 1-1: config 127 has no interface number 0 [ 556.089828][ T8587] usb 1-1: config 127 interface 171 has no altsetting 0 [ 556.144405][ T8587] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.164637][ T8587] usb 1-1: Product: syz [ 556.195022][ T8587] usb 1-1: Manufacturer: syz [ 556.199926][ T8587] usb 1-1: SerialNumber: syz [ 556.500151][ T8595] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 556.976775][ T8595] usb 3-1: can't read configurations, error -71 [ 557.003563][ T8587] usb 1-1: USB disconnect, device number 75 [ 557.113572][ T5614] buffer_io_error: 10 callbacks suppressed [ 557.113590][ T5614] Buffer I/O error on dev loop2, logical block 0, async page read [ 557.128826][ T5614] Buffer I/O error on dev loop2, logical block 0, async page read [ 557.137344][ T5614] Buffer I/O error on dev loop2, logical block 0, async page read [ 557.146361][ T5614] Buffer I/O error on dev loop2, logical block 0, async page read [ 557.164483][ T5614] Buffer I/O error on dev loop2, logical block 0, async page read [ 557.347735][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 557.568491][ T5614] Buffer I/O error on dev loop2, logical block 0, async page read [ 557.596104][ T5614] Buffer I/O error on dev loop2, logical block 0, async page read [ 557.625828][ T5614] Buffer I/O error on dev loop2, logical block 0, async page read [ 557.648096][ T5614] Buffer I/O error on dev loop2, logical block 0, async page read [ 557.667238][ T5699] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 557.675828][ T5614] Buffer I/O error on dev loop2, logical block 0, async page read [ 557.855697][T13441] CUSE: unknown device info "" [ 557.871558][T13441] CUSE: unknown device info "" [ 557.886985][T13441] CUSE: unknown device info "" [ 557.894120][T13441] CUSE: unknown device info "" [ 557.907812][T13441] CUSE: unknown device info "" [ 558.052809][T13441] CUSE: zero length info key specified [ 558.461156][T13449] [ 558.463514][T13449] ====================================================== [ 558.470524][T13449] WARNING: possible circular locking dependency detected [ 558.477530][T13449] syzkaller #0 Tainted: G L [ 558.483514][T13449] ------------------------------------------------------ [ 558.490520][T13449] syz.2.2259/13449 is trying to acquire lock: [ 558.496582][T13449] ffffffff90d4fda8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 558.504343][T13449] [ 558.504343][T13449] but task is already holding lock: [ 558.511701][T13449] ffff888056e29860 (&pipe->mutex){+.+.}-{4:4}, at: pipe_lock+0x69/0x80 [ 558.519980][T13449] [ 558.519980][T13449] which lock already depends on the new lock. [ 558.519980][T13449] [ 558.530371][T13449] [ 558.530371][T13449] the existing dependency chain (in reverse order) is: [ 558.539375][T13449] [ 558.539375][T13449] -> #6 (&pipe->mutex){+.+.}-{4:4}: [ 558.546759][T13449] lock_acquire+0x1b9/0x370 [ 558.551781][T13449] __mutex_lock+0x1a4/0x1bc0 [ 558.556882][T13449] pipe_lock+0x69/0x80 [ 558.561474][T13449] iter_file_splice_write+0x1fd/0x10b0 [ 558.567451][T13449] do_splice+0x109c/0x1fa0 [ 558.572381][T13449] __do_splice+0x33b/0x370 [ 558.577308][T13449] __x64_sys_splice+0x187/0x250 [ 558.582665][T13449] do_syscall_64+0x123/0x790 [ 558.587767][T13449] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 558.594177][T13449] [ 558.594177][T13449] -> #5 (sb_writers#6){.+.+}-{0:0}: [ 558.601611][T13449] lock_acquire+0x1b9/0x370 [ 558.606662][T13449] mnt_want_write+0x6f/0x420 [ 558.611777][T13449] lookup_open+0x150/0x1990 [ 558.616801][T13449] path_openat+0xa2c/0x2440 [ 558.621815][T13449] do_file_open+0x20e/0x430 [ 558.626829][T13449] file_open_name+0x1c3/0x3e0 [ 558.632030][T13449] filp_open+0x2e/0x50 [ 558.636623][T13449] fsg_lun_open+0x6b/0x7b0 [ 558.641543][T13449] fsg_store_file+0x1e7/0x450 [ 558.646740][T13449] configfs_write_iter+0x302/0x4e0 [ 558.652355][T13449] vfs_write+0x6af/0x1050 [ 558.657217][T13449] ksys_write+0x12a/0x250 [ 558.662050][T13449] do_syscall_64+0x123/0x790 [ 558.667170][T13449] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 558.673568][T13449] [ 558.673568][T13449] -> #4 (&common->filesem){++++}-{4:4}: [ 558.681301][T13449] lock_acquire+0x1b9/0x370 [ 558.686316][T13449] down_read+0x99/0x4c0 [ 558.690994][T13449] fsg_show_file+0x20/0x180 [ 558.696003][T13449] configfs_read_iter+0x426/0x6f0 [ 558.701539][T13449] __kernel_read+0x397/0xad0 [ 558.706632][T13449] integrity_kernel_read+0x7e/0xb0 [ 558.712338][T13449] ima_calc_file_hash_tfm+0x25e/0x350 [ 558.718227][T13449] ima_calc_file_hash+0x1e3/0x380 [ 558.723771][T13449] ima_collect_measurement+0x94f/0xb30 [ 558.729734][T13449] process_measurement+0xdfe/0x2350 [ 558.735454][T13449] ima_file_check+0xc3/0x110 [ 558.740551][T13449] security_file_post_open+0xc4/0x210 [ 558.746429][T13449] path_openat+0x5cd/0x2440 [ 558.751532][T13449] do_file_open+0x20e/0x430 [ 558.756543][T13449] do_sys_openat2+0x10f/0x1e0 [ 558.761742][T13449] __x64_sys_openat+0x12d/0x210 [ 558.767100][T13449] do_syscall_64+0x123/0x790 [ 558.772200][T13449] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 558.778595][T13449] [ 558.778595][T13449] -> #3 (&p->frag_sem){.+.+}-{4:4}: [ 558.785961][T13449] lock_acquire+0x1b9/0x370 [ 558.790984][T13449] down_read+0x99/0x4c0 [ 558.794997][ T8593] usb 4-1: new full-speed USB device number 85 using dummy_hcd [ 558.795647][T13449] configfs_read_iter+0x346/0x6f0 [ 558.808685][T13449] __kernel_read+0x397/0xad0 [ 558.813785][T13449] integrity_kernel_read+0x7e/0xb0 [ 558.819439][T13449] ima_calc_file_hash_tfm+0x25e/0x350 [ 558.825320][T13449] ima_calc_file_hash+0x1e3/0x380 [ 558.830849][T13449] ima_collect_measurement+0x94f/0xb30 [ 558.836829][T13449] process_measurement+0xdfe/0x2350 [ 558.842530][T13449] ima_file_check+0xc3/0x110 [ 558.847622][T13449] security_file_post_open+0xc4/0x210 [ 558.853494][T13449] path_openat+0x5cd/0x2440 [ 558.858505][T13449] do_file_open+0x20e/0x430 [ 558.863516][T13449] do_sys_openat2+0x10f/0x1e0 [ 558.868700][T13449] __x64_sys_openat+0x12d/0x210 [ 558.874065][T13449] do_syscall_64+0x123/0x790 [ 558.879170][T13449] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 558.885582][T13449] [ 558.885582][T13449] -> #2 (&buffer->mutex){+.+.}-{4:4}: [ 558.893118][T13449] lock_acquire+0x1b9/0x370 [ 558.898125][T13449] __mutex_lock+0x1a4/0x1bc0 [ 558.903223][T13449] configfs_read_iter+0x79/0x6f0 [ 558.908659][T13449] __kernel_read+0x397/0xad0 [ 558.913754][T13449] integrity_kernel_read+0x7e/0xb0 [ 558.919372][T13449] ima_calc_file_hash_tfm+0x25e/0x350 [ 558.925261][T13449] ima_calc_file_hash+0x1e3/0x380 [ 558.930797][T13449] ima_collect_measurement+0x94f/0xb30 [ 558.936774][T13449] process_measurement+0xdfe/0x2350 [ 558.942477][T13449] ima_file_check+0xc3/0x110 [ 558.947568][T13449] security_file_post_open+0xc4/0x210 [ 558.953450][T13449] path_openat+0x5cd/0x2440 [ 558.958460][T13449] do_file_open+0x20e/0x430 [ 558.963491][T13449] do_sys_openat2+0x10f/0x1e0 [ 558.968689][T13449] __x64_sys_openat+0x12d/0x210 [ 558.974046][T13449] do_syscall_64+0x123/0x790 [ 558.979229][T13449] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 558.985627][T13449] [ 558.985627][T13449] -> #1 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}: [ 558.994310][T13449] lock_acquire+0x1b9/0x370 [ 558.999324][T13449] __mutex_lock+0x1a4/0x1bc0 [ 559.004419][T13449] process_measurement+0x5ab/0x2350 [ 559.010123][T13449] ima_file_check+0xc3/0x110 [ 559.015224][T13449] security_file_post_open+0xc4/0x210 [ 559.021099][T13449] path_openat+0x5cd/0x2440 [ 559.026108][T13449] do_file_open+0x20e/0x430 [ 559.031135][T13449] file_open_name+0x1c3/0x3e0 [ 559.036338][T13449] filp_open+0x2e/0x50 [ 559.040922][T13449] kernel_read_file_from_path_initns+0xec/0x240 [ 559.047675][T13449] _request_firmware+0x733/0x13c0 [ 559.053224][T13449] request_firmware+0x35/0x50 [ 559.058420][T13449] reg_reload_regdb+0x85/0x460 [ 559.063714][T13449] genl_family_rcv_msg_doit+0x214/0x300 [ 559.069776][T13449] genl_rcv_msg+0x560/0x800 [ 559.074791][T13449] netlink_rcv_skb+0x159/0x420 [ 559.080061][T13449] genl_rcv+0x28/0x40 [ 559.084551][T13449] netlink_unicast+0x585/0x850 [ 559.089823][T13449] netlink_sendmsg+0x8b0/0xda0 [ 559.095092][T13449] ____sys_sendmsg+0xa4d/0xbe0 [ 559.100370][T13449] ___sys_sendmsg+0x190/0x1e0 [ 559.105549][T13449] __sys_sendmsg+0x160/0x210 [ 559.110650][T13449] do_syscall_64+0x123/0x790 [ 559.115750][T13449] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 559.122151][T13449] [ 559.122151][T13449] -> #0 (cb_lock){++++}-{4:4}: [ 559.129084][T13449] check_prev_add+0xeb/0xe60 [ 559.134196][T13449] __lock_acquire+0x1492/0x1ec0 [ 559.139559][T13449] lock_acquire+0x1b9/0x370 [ 559.144587][T13449] down_read+0x99/0x4c0 [ 559.149265][T13449] genl_rcv+0x19/0x40 [ 559.153757][T13449] netlink_unicast+0x585/0x850 [ 559.159028][T13449] netlink_sendmsg+0x8b0/0xda0 [ 559.164383][T13449] sock_sendmsg+0x394/0x410 [ 559.169391][T13449] splice_to_socket+0xb3c/0x11a0 [ 559.174844][T13449] do_splice+0x109c/0x1fa0 [ 559.179771][T13449] __do_splice+0x33b/0x370 [ 559.184700][T13449] __x64_sys_splice+0x187/0x250 [ 559.190095][T13449] do_syscall_64+0x123/0x790 [ 559.195195][T13449] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 559.201589][T13449] [ 559.201589][T13449] other info that might help us debug this: [ 559.201589][T13449] [ 559.211797][T13449] Chain exists of: [ 559.211797][T13449] cb_lock --> sb_writers#6 --> &pipe->mutex [ 559.211797][T13449] [ 559.223618][T13449] Possible unsafe locking scenario: [ 559.223618][T13449] [ 559.231053][T13449] CPU0 CPU1 [ 559.236398][T13449] ---- ---- [ 559.241744][T13449] lock(&pipe->mutex); [ 559.245890][T13449] lock(sb_writers#6); [ 559.252557][T13449] lock(&pipe->mutex); [ 559.259211][T13449] rlock(cb_lock); [ 559.262996][T13449] [ 559.262996][T13449] *** DEADLOCK *** [ 559.262996][T13449] [ 559.271117][T13449] locks held by syz.2.2259/13449: 1, last CPU#1: [ 559.277437][T13449] #0: ffff888056e29860 (&pipe->mutex){+.+.}-{4:4}, at: pipe_lock+0x69/0x80 [ 559.286908][T13449] [ 559.286908][T13449] stack backtrace: [ 559.292789][T13449] CPU: 1 UID: 0 PID: 13449 Comm: syz.2.2259 Tainted: G L syzkaller #0 PREEMPT(full) [ 559.292810][T13449] Tainted: [L]=SOFTLOCKUP [ 559.292815][T13449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 559.292824][T13449] Call Trace: [ 559.292830][T13449] [ 559.292836][T13449] dump_stack_lvl+0x100/0x190 [ 559.292856][T13449] print_circular_bug.cold+0x178/0x1be [ 559.292879][T13449] check_noncircular+0x146/0x160 [ 559.292903][T13449] check_prev_add+0xeb/0xe60 [ 559.292922][T13449] __lock_acquire+0x1492/0x1ec0 [ 559.292942][T13449] ? __pfx___schedule+0x10/0x10 [ 559.292962][T13449] lock_acquire+0x1b9/0x370 [ 559.292980][T13449] ? genl_rcv+0x19/0x40 [ 559.293000][T13449] ? __pfx___might_resched+0x10/0x10 [ 559.293019][T13449] ? irqentry_exit+0x24d/0xa10 [ 559.293041][T13449] down_read+0x99/0x4c0 [ 559.293061][T13449] ? genl_rcv+0x19/0x40 [ 559.293079][T13449] ? __pfx_down_read+0x10/0x10 [ 559.293100][T13449] ? genl_rcv+0xd/0x40 [ 559.293119][T13449] genl_rcv+0x19/0x40 [ 559.293137][T13449] netlink_unicast+0x585/0x850 [ 559.293156][T13449] ? __pfx_netlink_unicast+0x10/0x10 [ 559.293176][T13449] ? __build_skb_around+0x278/0x390 [ 559.293196][T13449] netlink_sendmsg+0x8b0/0xda0 [ 559.293215][T13449] ? __pfx_netlink_sendmsg+0x10/0x10 [ 559.293234][T13449] ? selinux_socket_sendmsg+0x198/0x2f0 [ 559.293258][T13449] sock_sendmsg+0x394/0x410 [ 559.293273][T13449] ? __pfx_netlink_sendmsg+0x10/0x10 [ 559.293292][T13449] ? __pfx_sock_sendmsg+0x10/0x10 [ 559.293315][T13449] splice_to_socket+0xb3c/0x11a0 [ 559.293340][T13449] ? __pfx_splice_to_socket+0x10/0x10 [ 559.293361][T13449] ? trace_hrtimer_start+0x77/0x220 [ 559.293378][T13449] ? inode_has_perm+0x16d/0x1d0 [ 559.293404][T13449] ? bpf_lsm_file_permission+0x9/0x10 [ 559.293420][T13449] ? security_file_permission+0x76/0x210 [ 559.293437][T13449] ? __pfx_splice_to_socket+0x10/0x10 [ 559.293458][T13449] do_splice+0x109c/0x1fa0 [ 559.293482][T13449] ? __lock_acquire+0x4c5/0x1ec0 [ 559.293503][T13449] ? __pfx___schedule+0x10/0x10 [ 559.293526][T13449] ? __pfx_do_splice+0x10/0x10 [ 559.293545][T13449] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 559.293565][T13449] ? find_held_lock+0x2b/0x80 [ 559.293582][T13449] __do_splice+0x33b/0x370 [ 559.293604][T13449] ? __pfx___do_splice+0x10/0x10 [ 559.293627][T13449] __x64_sys_splice+0x187/0x250 [ 559.293649][T13449] do_syscall_64+0x123/0x790 [ 559.293670][T13449] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 559.293685][T13449] RIP: 0033:0x7f713bf9e0d9 [ 559.293698][T13449] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 559.293714][T13449] RSP: 002b:00007f713cefe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 559.293728][T13449] RAX: ffffffffffffffda RBX: 00007f713c226090 RCX: 00007f713bf9e0d9 [ 559.293738][T13449] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000005 [ 559.293747][T13449] RBP: 00007f713c035024 R08: 000000000004ffe6 R09: 0000000000000000 [ 559.293756][T13449] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 559.293765][T13449] R13: 00007f713c226128 R14: 00007f713c226090 R15: 00007ffe6dc01dc8 [ 559.293779][T13449] [ 559.414788][ T29] audit: type=1400 audit(1787231581.816:1350): avc: denied { accept } for pid=13460 comm="syz.1.2264" lport=38589 faddr=10.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 559.421078][ T42] libceph: connect (1)[c::]:6789 error -101 [ 559.634673][ T42] libceph: mon0 (1)[c::]:6789 connect error [ 559.640663][T13454] ceph: No mds server is up or the cluster is laggy [ 559.956797][ T8593] usb 4-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.00 [ 559.968178][ T8593] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 559.975834][ T8593] usb 4-1: can't read configurations, error -71 [ 560.205488][ T8594] usb usb36-port8: attempt power cycle [ 560.775038][ T8594] usb usb36-port8: unable to enumerate USB device