last executing test programs: 2m30.589855975s ago: executing program 3 (id=353): openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x10a942, 0x9f667fd378a54ed4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) symlinkat(0x0, 0xffffffffffffff9c, 0x0) open$dir(0x0, 0x80, 0x1b2) socket(0x2, 0x80005, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) r0 = getpgrp(0x0) unshare(0x22020600) r1 = userfaultfd(0xb049e814b8979c45) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc3c0000000c0a01010000000f000000000a0000060900020073797a31000000000900010073797a3100000000100003800c000080080003400000000214000000110001"], 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000000300)={0x0, 0x44, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000cb000000000a050000000000000000000a0000050900010073797aafec1ab58d7be7036531000000860000008014000000110001000000000000001dfdb95faf3c"], 0x4c}, 0x1, 0x0, 0x0, 0x8080}, 0x0) ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f0000000280)={{&(0x7f0000ff0000/0xd000)=nil, 0xd000}}) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000002740)=ANY=[@ANYBLOB="140000001300015b993dde440113e90006"], 0x14}], 0x1}, 0x0) (fail_nth: 1) unshare(0x10000) sched_setaffinity(r0, 0xfffffffffffffe3a, &(0x7f0000000280)=0x5) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x6) r5 = syz_open_dev$media(&(0x7f0000000000), 0xffffffffffffe04b, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r5, 0x80047c05, &(0x7f0000000040)=0xffffffffffffffff) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r6, 0x7c80, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r7 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x4, r7, 0x1, 0x0) 2m27.580983541s ago: executing program 3 (id=357): openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x10a942, 0x9f667fd378a54ed4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) symlinkat(0x0, 0xffffffffffffff9c, 0x0) open$dir(0x0, 0x81, 0x10b) socket(0x2, 0xa, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) r0 = getpgrp(0x0) unshare(0x22020600) r1 = userfaultfd(0xb049e814b8979c45) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000566000/0x1000)=nil, 0x1000}, 0x7}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc3c0000000c0a01010000000f000000000a0000060900020073797a31000000000900010073797a3100000000100003800c000080080003400000000214000000110001"], 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYRES32=r1], 0x4c}, 0x1, 0x0, 0x0, 0x400c084}, 0x20008054) ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f0000000280)={{&(0x7f0000ff0000/0xd000)=nil, 0xd000}}) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x20008040}, 0x850) unshare(0x10000) sched_setaffinity(r0, 0xfffffffffffffe3a, &(0x7f0000000280)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r4 = getpid() sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x800) sched_setscheduler(r4, 0x0, &(0x7f0000000040)=0x8005) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) 2m25.825335892s ago: executing program 3 (id=360): mmap(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0, 0x6031, 0xffffffffffffffff, 0x408000) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000200), 0xa2d42, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) syz_open_dev$dri(0x0, 0x1ff, 0x48100) io_uring_setup(0x1f8e, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x93bdb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) lseek(r6, 0x9, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x20000) bind$inet6(r2, 0x0, 0x0) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r1, 0x0, 0x97, 0x8000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r1, 0x0, &(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x1}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0, 0x1}) 2m24.350718884s ago: executing program 3 (id=366): mmap(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0, 0x6031, 0xffffffffffffffff, 0x408000) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000200), 0xa2d42, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) syz_open_dev$dri(0x0, 0x1ff, 0x48100) io_uring_setup(0x1f8e, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x93bdb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) lseek(r5, 0x9, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x20000) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r1, 0x0, 0x97, 0x8000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r1, 0x0, &(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x1}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0, 0x1}) 2m21.782780419s ago: executing program 3 (id=369): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x47, &(0x7f0000000200)=0x7) futex(&(0x7f000000cffc)=0x1, 0xd, 0x2, 0x0, 0x0, 0x400000) add_key$fscrypt_v1(0x0, 0x0, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0xffffffff}, 0x48, 0xffffffffffffffff) bind$inet(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x8000000003c) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing\x00', 0x1ff) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) readv(r5, &(0x7f00000001c0)=[{&(0x7f00000012c0)=""/41, 0x29}], 0x1) write(r0, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) 2m19.144375894s ago: executing program 3 (id=371): r0 = gettid() timer_create(0x7, &(0x7f0000000080)={0x0, 0x21, 0x2, @tid=r0}, &(0x7f0000000000)) clock_gettime(0x0, &(0x7f00000006c0)={0x0, 0x0}) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x77359400}, {r1, r2+10000000}}, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040), 0x208e24b) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1802000000000000030000000000000500"/32], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x4000) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ftruncate(r4, 0x5) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000380)={0x8, 0x4d, 0x2ba8}) getpgid(0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r5 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x4, 0x0, 0x7}) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000000)=0x1) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000900), r6) sendmsg$NL802154_CMD_SET_CHANNEL(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x2c, r7, 0x1, 0x70bd2d, 0x259fdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PAGE={0x5}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0xe}]}, 0x2c}}, 0x64000) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket(0x2c, 0x1, 0x3) socket$inet(0x2, 0x4000000000000001, 0x0) r8 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x6, 0x1000, 0x1, 0x1ba}, &(0x7f0000000880)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r12 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_INSN(r12, 0x8028640c, &(0x7f000001cec0)={0x8000000, 0x0, 0x0, 0x81, 0x3}) syz_ublk_add_dev(r8, r9, r10, r11, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x1, 0xe50, 0x0, 0x0, 0x1000, 0x2000003, 0x0, 0x0, 0x16}}}, &(0x7f0000000280)) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 2m3.476196326s ago: executing program 32 (id=371): r0 = gettid() timer_create(0x7, &(0x7f0000000080)={0x0, 0x21, 0x2, @tid=r0}, &(0x7f0000000000)) clock_gettime(0x0, &(0x7f00000006c0)={0x0, 0x0}) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x77359400}, {r1, r2+10000000}}, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040), 0x208e24b) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1802000000000000030000000000000500"/32], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x4000) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ftruncate(r4, 0x5) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000380)={0x8, 0x4d, 0x2ba8}) getpgid(0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r5 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x4, 0x0, 0x7}) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000000)=0x1) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000900), r6) sendmsg$NL802154_CMD_SET_CHANNEL(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x2c, r7, 0x1, 0x70bd2d, 0x259fdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PAGE={0x5}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0xe}]}, 0x2c}}, 0x64000) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket(0x2c, 0x1, 0x3) socket$inet(0x2, 0x4000000000000001, 0x0) r8 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x6, 0x1000, 0x1, 0x1ba}, &(0x7f0000000880)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r12 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_INSN(r12, 0x8028640c, &(0x7f000001cec0)={0x8000000, 0x0, 0x0, 0x81, 0x3}) syz_ublk_add_dev(r8, r9, r10, r11, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x1, 0xe50, 0x0, 0x0, 0x1000, 0x2000003, 0x0, 0x0, 0x16}}}, &(0x7f0000000280)) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 57.897300175s ago: executing program 0 (id=509): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$XFS_IOC_FSINUMBERS(0xffffffffffffffff, 0xc0205867, &(0x7f0000001cc0)={0x0, 0x5, &(0x7f0000001980), 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x101042, 0x15) pwrite64(r3, &(0x7f0000000140)='2', 0xfdef, 0xe7c) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioprio_get$uid(0x3, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0x20, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000000)={'veth1_virt_wifi\x00', &(0x7f0000000400)=@ethtool_dump={0x32, 0x9, 0x6, 0x2a, "ad53a3712b67940eda0a0159c9030ecbb9013538fc898ae4948b99d24a3703d5de077c92c17fca16650d"}}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r4, 0x404c534a, 0x0) unshare(0x42000000) unshare(0x64000600) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x0) 55.652442904s ago: executing program 0 (id=513): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r3 = fcntl$dupfd(r2, 0x406, r2) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000400)={0x53, 0xfffffffffffffffb, 0x6, 0x8, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000200)="000400001900", 0x0, 0x0, 0x10011, 0xfffbffff, 0x0}) write$tun(r3, &(0x7f0000000400)=ANY=[], 0xa2) read$FUSE(r3, &(0x7f0000002a40)={0x2020}, 0x2020) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @time={0x0, 0x5}, {0xfe}, {}, @quote={{0x7}, 0x2e}}], 0x1c) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004890) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x200000) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d00)=@newtaction={0x814, 0x30, 0x100, 0x2, 0x25dfdbfc, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0xff, 0x4, 0x6, 0x6}, 0x4}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}, {0x7ac, 0x1, [@m_connmark={0x13c, 0x9, 0x0, 0x0, {{0xd}, {0x100, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xc818, 0x80000001, 0x7, 0x0, 0x4}, 0x4}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x8, 0x5, 0x8, 0x4}, 0x200}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x4, 0x10000006, 0x9, 0xfffffe01}, 0x6}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0x8, 0x8, 0x0, 0x7}, 0x4}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3495, 0x80000001, 0xffffffffffffffff, 0x1ff, 0xffffffff}, 0x1}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x10000, 0x5, 0x10, 0x5}, 0xf887}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffffc, 0x1ff, 0x2, 0x4, 0x2}, 0x1000}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0xe4fb, 0x7, 0x3, 0x8}, 0x3}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1256, 0xfffffff7, 0x4, 0xfffffff8, 0xe9d}, 0x2}}]}, {0xd, 0x6, "a947ca9a2469af8338"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_sample={0xa0, 0xe, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8}]}, {0x6a, 0x6, "8c716ded4d3c5cb1016fbe7f01dae2b4327059ed7de022fcacf2a63c9017a4239c04021b5b3df241a4f8bd414fa6c37ff184a4fd4f6be3d7b48fca173d3fb6859b4718f85dc1ba1ba63a113f4be091e2a285b761da4a43c7b65e04b4d49cf7492a503860942d"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}, @m_police={0x4ec, 0xf, 0x0, 0x0, {{0xb}, {0x41c, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xa, 0x1, 0x7, 0x6, 0x2, 0x40, 0xc0000000, 0x8000, 0x4, 0xffff, 0x7f643e6, 0xe, 0x2, 0x6, 0x10, 0x5, 0x80000001, 0x4, 0x2, 0x81, 0x8001, 0x9, 0x4, 0x7, 0x3, 0x8, 0x1, 0x400, 0x14000000, 0x5, 0x8, 0x0, 0x3ff, 0x7ff, 0x6, 0x4, 0x469, 0x7f, 0x0, 0x6, 0x5, 0xca6, 0x100, 0x10001, 0x3, 0x80000001, 0x5e6a, 0x7fffffff, 0xcc2, 0xacb, 0x9, 0x2925, 0x6, 0x4d, 0x6, 0x80, 0x1, 0x81, 0x2e6, 0x1c00000, 0x0, 0x7, 0x5, 0x1, 0x1, 0x3, 0xaea, 0x6, 0x5, 0x3, 0x2000, 0x6, 0xaf69, 0xabab, 0x1, 0x5, 0x2, 0x3170, 0x2, 0xb, 0xffffffff, 0x1, 0x1, 0x10000, 0x5, 0x9, 0x6, 0x3ad7, 0x7, 0x0, 0x4, 0x7, 0x3, 0x800, 0x81, 0x340000, 0x8, 0xfffffc01, 0x200, 0x1, 0x6, 0x9, 0x6, 0x80, 0xe5b, 0x9, 0x1, 0x7fffffff, 0x7fffffff, 0x2, 0xffff, 0x3, 0x356f, 0x5907, 0x4, 0x93, 0x6, 0xa41, 0x3ff, 0x2, 0x4, 0x2e55383e, 0x147a, 0x4, 0x10000, 0x36, 0xfffffffa, 0x5, 0x7f, 0x6da, 0x100, 0x80000000, 0x76, 0x12000, 0xffff, 0x6, 0xba, 0xfffff46a, 0xb, 0x6, 0x0, 0x4, 0x2, 0x4, 0x101, 0x3, 0x81, 0xe, 0xb3, 0x10001, 0xf47, 0x1, 0x8, 0x400, 0x1ff, 0x8, 0x9, 0x3af, 0x10000, 0x1, 0x2de, 0x1, 0x2, 0x0, 0x1, 0x1, 0x4e6f, 0x76, 0x2, 0xb, 0x5, 0x9, 0x1, 0xfffffffd, 0x204, 0x7a, 0x8000, 0x80, 0x5, 0x0, 0xc, 0x1000, 0x9, 0x9, 0x7, 0x7, 0x3, 0xd, 0x0, 0xfffffffb, 0x2, 0x9e4b, 0x401, 0x3ff, 0x7ff, 0x80000000, 0x7, 0x8000, 0x8, 0x40000000, 0xfff, 0x4, 0xdb, 0x7, 0x4, 0x3c84, 0xa58e, 0x5, 0xbd, 0x4f7a, 0x3, 0xdf31, 0xa, 0x1, 0x101, 0x10, 0x0, 0x3, 0x80000000, 0xf, 0x401, 0x8, 0x24e, 0x81, 0xe17, 0x3, 0x6, 0x35, 0x6, 0x2, 0x7f, 0x4, 0xc, 0x7, 0x2, 0x45, 0x6, 0x100, 0xfffffff8, 0x100, 0x9, 0x9, 0x55f4, 0x10000, 0x5c2aaff3, 0x5, 0xfb, 0x5, 0x7fffffff, 0x6, 0x0, 0x0, 0x729, 0x6, 0xa]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x9}, @TCA_POLICE_RESULT={0x8, 0x5, 0x6}]]}, {0xa8, 0x6, "68e47b32cb1f942dec9111ae5f6f0b5c506919f67687dc11ca20a4932e861970bd558aaaf0efd12d3dbf1367bc92538a8fc6a63134bc0e4cf33f3a965b3940a7bfb0ccbfce36b68631b20a4b753cf47a9898e2e2eb3c3366e2eb195e7e30f35b83df5083e4524866fdef786a87d23bc875ac2d70351a23029e04380f7137e2b49a3b4fb13f3514ececa71830643cf01cdd2cd1775f4c95bf2448b764cf6a849bb2614fe7"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_mirred={0xe0, 0x1, 0x0, 0x0, {{0xb}, {0xa4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0xa, 0x3, 0x4, 0x5}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x4, 0x5, 0x0, 0x400}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4b1, 0x0, 0xb, 0x7f, 0x25}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7fffffff, 0x8000, 0x3, 0x80, 0x2}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x162, 0x400, 0x0, 0x1, 0xcdc}, 0x1}}]}, {0x14, 0x6, "464f463735fa6656ed6ed25ad0dfa3a4"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}]}]}, 0x814}}, 0x8000) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f0000000500)="8100dca40704185995cf3ab2f97104ae0480e08ba3fe77bed703ed94bfffa7be5a751dabd5b5d7216ad9d9a57466738e725be872a715547ce60cc623b31aaa8f7e05f88d47bca1273a8db8831af246a7879400ba923e3c80d84ef1fda2357da101585de6727af2a56bf5eb040e40103e513483f8c8be86c0f4f9b218508ee0ccdd857643d0985da78590cf3f885368f4573b893bcc97b9cbfb781aa9e68b2ec3187163db24a64c122bd6238f5a930fef4979ad89f9deac6ae658b56432e0fef545e7d4cd4c1ce6ae4c475a0366a962a74e4d142aef89a308613d58abab", 0xf000}, {0x0, 0x2d}], 0x2) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, 0x0, 0x0) connect$inet(r5, 0x0, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_open_dev$dvb_demux(&(0x7f0000000400), 0x0, 0x700) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01080000000000000000020000000900010073797a300000000064000000090a010400000000000000000200000008000ac0000000010900020073797a31000000000900010073797a300000000008000540000000080800034000000094200009801c0002800c00018008000140000000040c0001800800014000000004440000000c0a01010000000000000000020000000900020073797a31000000000900010073797a30000000001800"], 0xf0}}, 0x0) 53.757487228s ago: executing program 0 (id=515): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) futex(&(0x7f000000cffc)=0x1, 0xd, 0x2, 0x0, 0x0, 0x400000) add_key$fscrypt_v1(0x0, 0x0, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0xffffffff}, 0x48, 0xffffffffffffffff) bind$inet(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x8000000003c) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./tracing\x00', &(0x7f0000000280)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000700)='./tracing/events/enable\x00', 0x1, 0x3f00) readv(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f00000012c0)=""/41, 0x29}], 0x1) 52.786970958s ago: executing program 0 (id=516): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x47, &(0x7f0000000200)=0x7) futex(&(0x7f000000cffc)=0x1, 0xd, 0x2, 0x0, 0x0, 0x400000) add_key$fscrypt_v1(0x0, 0x0, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0xffffffff}, 0x48, 0xffffffffffffffff) bind$inet(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing\x00', 0x1ff) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) readv(r5, &(0x7f00000001c0)=[{&(0x7f00000012c0)=""/41, 0x29}], 0x1) write(r0, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) 48.267371589s ago: executing program 0 (id=529): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r5, {0xffe9, 0xc}, {}, {0x8, 0x4}}}, 0x24}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg(r7, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 36.549430247s ago: executing program 0 (id=551): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) ioctl$SOUND_MIXER_WRITE_RECSRC(r0, 0xc0044dff, &(0x7f0000000180)=0x4) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000003c0)={{{@in=@remote, @in6=@mcast2}}, {{@in6=@mcast1}, 0x0, @in6=@empty}}, &(0x7f0000000040)=0xe8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000005cc0), 0x40, 0x0) preadv(r2, &(0x7f00000061c0)=[{&(0x7f0000000100)=""/222, 0xde}], 0x1, 0x5, 0x4) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, 0x0, 0x1b0) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, 0x0, 0x0) 34.755222357s ago: executing program 33 (id=551): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) ioctl$SOUND_MIXER_WRITE_RECSRC(r0, 0xc0044dff, &(0x7f0000000180)=0x4) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000003c0)={{{@in=@remote, @in6=@mcast2}}, {{@in6=@mcast1}, 0x0, @in6=@empty}}, &(0x7f0000000040)=0xe8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000005cc0), 0x40, 0x0) preadv(r2, &(0x7f00000061c0)=[{&(0x7f0000000100)=""/222, 0xde}], 0x1, 0x5, 0x4) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, 0x0, 0x1b0) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, 0x0, 0x0) 19.846639813s ago: executing program 5 (id=576): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000059d360205f0501d09288000000010902120001030000000904"], 0x0) epoll_create1(0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000080)={0x5, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x100000000000000) syz_usb_control_io$hid(r0, 0x0, 0x0) r3 = inotify_init() r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x111, 0x3}}, 0x5c) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, &(0x7f0000000340)={0x15, 0x110, 0xfa00, {r5, 0x73c, 0x30, 0x30, 0x0, @in6={0x1b, 0x4e20, 0x6, @loopback, 0xbff}, @ib={0x1b, 0xf, 0x6, {"50916300000000000000000700"}, 0x8000000000000001, 0x8, 0x3ff}}}, 0x118) close_range(r3, 0xffffffffffffffff, 0x0) 19.112197634s ago: executing program 1 (id=577): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r3 = fcntl$dupfd(r2, 0x406, r2) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000400)={0x53, 0xfffffffffffffffb, 0x6, 0x8, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000200)="000400001900", 0x0, 0x0, 0x10011, 0xfffbffff, 0x0}) write$tun(r3, &(0x7f0000000400)=ANY=[], 0xa2) read$FUSE(r3, &(0x7f0000002a40)={0x2020}, 0x2020) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @time={0x0, 0x5}, {0xfe}, {}, @quote={{0x7}, 0x2e}}], 0x1c) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004890) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x200000) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d00)=@newtaction={0x814, 0x30, 0x100, 0x2, 0x25dfdbfc, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0xff, 0x4, 0x6, 0x6}, 0x4}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}, {0x7ac, 0x1, [@m_connmark={0x13c, 0x9, 0x0, 0x0, {{0xd}, {0x100, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xc818, 0x80000001, 0x7, 0x0, 0x4}, 0x4}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x8, 0x5, 0x8, 0x4}, 0x200}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x4, 0x10000006, 0x9, 0xfffffe01}, 0x6}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0x8, 0x8, 0x0, 0x7}, 0x4}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3495, 0x80000001, 0xffffffffffffffff, 0x1ff, 0xffffffff}, 0x1}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x10000, 0x5, 0x10, 0x5}, 0xf887}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffffc, 0x1ff, 0x2, 0x4, 0x2}, 0x1000}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0xe4fb, 0x7, 0x3, 0x8}, 0x3}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1256, 0xfffffff7, 0x4, 0xfffffff8, 0xe9d}, 0x2}}]}, {0xd, 0x6, "a947ca9a2469af8338"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_sample={0xa0, 0xe, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8}]}, {0x6a, 0x6, "8c716ded4d3c5cb1016fbe7f01dae2b4327059ed7de022fcacf2a63c9017a4239c04021b5b3df241a4f8bd414fa6c37ff184a4fd4f6be3d7b48fca173d3fb6859b4718f85dc1ba1ba63a113f4be091e2a285b761da4a43c7b65e04b4d49cf7492a503860942d"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}, @m_police={0x4ec, 0xf, 0x0, 0x0, {{0xb}, {0x41c, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xa, 0x1, 0x7, 0x6, 0x2, 0x40, 0xc0000000, 0x8000, 0x4, 0xffff, 0x7f643e6, 0xe, 0x2, 0x6, 0x10, 0x5, 0x80000001, 0x4, 0x2, 0x81, 0x8001, 0x9, 0x4, 0x7, 0x3, 0x8, 0x1, 0x400, 0x14000000, 0x5, 0x8, 0x0, 0x3ff, 0x7ff, 0x6, 0x4, 0x469, 0x7f, 0x0, 0x6, 0x5, 0xca6, 0x100, 0x10001, 0x3, 0x80000001, 0x5e6a, 0x7fffffff, 0xcc2, 0xacb, 0x9, 0x2925, 0x6, 0x4d, 0x6, 0x80, 0x1, 0x81, 0x2e6, 0x1c00000, 0x0, 0x7, 0x5, 0x1, 0x1, 0x3, 0xaea, 0x6, 0x5, 0x3, 0x2000, 0x6, 0xaf69, 0xabab, 0x1, 0x5, 0x2, 0x3170, 0x2, 0xb, 0xffffffff, 0x1, 0x1, 0x10000, 0x5, 0x9, 0x6, 0x3ad7, 0x7, 0x0, 0x4, 0x7, 0x3, 0x800, 0x81, 0x340000, 0x8, 0xfffffc01, 0x200, 0x1, 0x6, 0x9, 0x6, 0x80, 0xe5b, 0x9, 0x1, 0x7fffffff, 0x7fffffff, 0x2, 0xffff, 0x3, 0x356f, 0x5907, 0x4, 0x93, 0x6, 0xa41, 0x3ff, 0x2, 0x4, 0x2e55383e, 0x147a, 0x4, 0x10000, 0x36, 0xfffffffa, 0x5, 0x7f, 0x6da, 0x100, 0x80000000, 0x76, 0x12000, 0xffff, 0x6, 0xba, 0xfffff46a, 0xb, 0x6, 0x0, 0x4, 0x2, 0x4, 0x101, 0x3, 0x81, 0xe, 0xb3, 0x10001, 0xf47, 0x1, 0x8, 0x400, 0x1ff, 0x8, 0x9, 0x3af, 0x10000, 0x1, 0x2de, 0x1, 0x2, 0x0, 0x1, 0x1, 0x4e6f, 0x76, 0x2, 0xb, 0x5, 0x9, 0x1, 0xfffffffd, 0x204, 0x7a, 0x8000, 0x80, 0x5, 0x0, 0xc, 0x1000, 0x9, 0x9, 0x7, 0x7, 0x3, 0xd, 0x0, 0xfffffffb, 0x2, 0x9e4b, 0x401, 0x3ff, 0x7ff, 0x80000000, 0x7, 0x8000, 0x8, 0x40000000, 0xfff, 0x4, 0xdb, 0x7, 0x4, 0x3c84, 0xa58e, 0x5, 0xbd, 0x4f7a, 0x3, 0xdf31, 0xa, 0x1, 0x101, 0x10, 0x0, 0x3, 0x80000000, 0xf, 0x401, 0x8, 0x24e, 0x81, 0xe17, 0x3, 0x6, 0x35, 0x6, 0x2, 0x7f, 0x4, 0xc, 0x7, 0x2, 0x45, 0x6, 0x100, 0xfffffff8, 0x100, 0x9, 0x9, 0x55f4, 0x10000, 0x5c2aaff3, 0x5, 0xfb, 0x5, 0x7fffffff, 0x6, 0x0, 0x0, 0x729, 0x6, 0xa]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x9}, @TCA_POLICE_RESULT={0x8, 0x5, 0x6}]]}, {0xa8, 0x6, "68e47b32cb1f942dec9111ae5f6f0b5c506919f67687dc11ca20a4932e861970bd558aaaf0efd12d3dbf1367bc92538a8fc6a63134bc0e4cf33f3a965b3940a7bfb0ccbfce36b68631b20a4b753cf47a9898e2e2eb3c3366e2eb195e7e30f35b83df5083e4524866fdef786a87d23bc875ac2d70351a23029e04380f7137e2b49a3b4fb13f3514ececa71830643cf01cdd2cd1775f4c95bf2448b764cf6a849bb2614fe7"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_mirred={0xe0, 0x1, 0x0, 0x0, {{0xb}, {0xa4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0xa, 0x3, 0x4, 0x5}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x4, 0x5, 0x0, 0x400}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4b1, 0x0, 0xb, 0x7f, 0x25}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7fffffff, 0x8000, 0x3, 0x80, 0x2}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x162, 0x400, 0x0, 0x1, 0xcdc}, 0x1}}]}, {0x14, 0x6, "464f463735fa6656ed6ed25ad0dfa3a4"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}]}]}, 0x814}}, 0x8000) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f0000000500)="8100dca40704185995cf3ab2f97104ae0480e08ba3fe77bed703ed94bfffa7be5a751dabd5b5d7216ad9d9a57466738e725be872a715547ce60cc623b31aaa8f7e05f88d47bca1273a8db8831af246a7879400ba923e3c80d84ef1fda2357da101585de6727af2a56bf5eb040e40103e513483f8c8be86c0f4f9b218508ee0ccdd857643d0985da78590cf3f885368f4573b893bcc97b9cbfb781aa9e68b2ec3187163db24a64c122bd6238f5a930fef4979ad89f9deac6ae658b56432e0fef545e7d4cd4c1ce6ae4c475a0366a962a74e4d142aef89a308613d58abab", 0xf000}, {0x0, 0x2d}], 0x2) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, 0x0, 0x0) connect$inet(r5, 0x0, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_open_dev$dvb_demux(&(0x7f0000000400), 0x0, 0x700) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01080000000000000000020000000900010073797a300000000064000000090a010400000000000000000200000008000ac0000000010900020073797a31000000000900010073797a300000000008000540000000080800034000000094200009801c0002800c00018008000140000000040c0001800800014000000004440000000c0a01010000000000000000020000000900020073797a31000000000900010073797a3000000000180003801400008010"], 0xf0}}, 0x0) 15.974122316s ago: executing program 1 (id=579): bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="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", @ANYRESDEC=0x0, @ANYBLOB="09e200000000000000000000000000000000e200", @ANYRES32=0x0, @ANYRES32], 0x48) close(0x3) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x1c}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) syz_emit_vhci(0x0, 0x14) r1 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=@newqdisc={0x68, 0x14, 0xf0b, 0x3, 0x0, {0x2, 0x0, 0x0, 0x0, {0x4, 0xa}, {0xffe0, 0xe}, {0x4}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x40, 0xfc, 0x4, 0x400a, 0x2, 0xfffffffd, 0x7e}}, {0x4}}, {{0x1c, 0x1, {0x2, 0x4, 0xc, 0x1, 0x2, 0x8, 0x2}}, {0x4}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x24008814}, 0x20000040) r2 = socket$kcm(0xa, 0x2, 0x0) syz_ublk_setup_io_uring(0x1d, 0x0, 0x0, 0x0, 0x0) r3 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000280)=']', 0x1}], 0x1}, 0x20004040) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r5 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r5, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000040)={r5, r4}) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000000000040c41090ea80000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io(r6, &(0x7f00000000c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="ad5a97"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r6, 0x0, &(0x7f0000000100)={0x2c, &(0x7f0000000240)=ANY=[@ANYBLOB="ac184d", @ANYRESHEX=r1, @ANYRES8=r0, @ANYRESDEC=r2, @ANYRES8=r5], 0x0, 0x0, 0x0, 0x0}) 15.861199699s ago: executing program 5 (id=581): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r5, {0xffe9, 0xc}, {}, {0x8, 0x4}}}, 0x24}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg(r7, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 12.386521289s ago: executing program 1 (id=585): ioctl$USBDEVFS_REAPURB(0xffffffffffffffff, 0x4008550c, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000000240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006e80)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004300)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x840120, 0x0, 0x0, 0x57, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x50) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x280a00, 0x0) file_getattr(r2, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x18, 0x100) read$FUSE(r0, &(0x7f0000004540)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000002200)={0x10, 0xffffffffffffffda, r3}, 0x10) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xf8, 0x19, 0x1, 0x70bd2d, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x7}, {0x0, 0xa00, 0x5, 0x800000000000002}, 0xffffffff, 0x6e6bb9, 0x1, 0x0, 0x6}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x0, 0x3c}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x0, 0x4, 0x3, 0x0, 0x3c}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x4008010}, 0x0) 12.068277186s ago: executing program 1 (id=587): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) io_uring_register$IORING_REGISTER_ZCRX_IFQ(0xffffffffffffffff, 0x20, 0x0, 0x1) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000018c0)={0x14, 0x2f, 0x9, 0x70bd27, 0x25dedbfb, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x42914}, 0x4000014) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) setxattr$system_posix_acl(&(0x7f0000000040)='./mnt\x00', &(0x7f00000002c0)='system.posix_acl_default\x00', 0x0, 0x0, 0x2) sendmsg$tipc(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0xb6}, {&(0x7f0000000300)='V', 0x1}, {&(0x7f0000001600)="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", 0x1000}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0x17}], 0x4, 0x0, 0x0, 0x8000}, 0x0) dup2(r1, r0) sendmmsg$inet(r0, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmmsg(r0, &(0x7f00000038c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x4000851) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x2, 0x2, 0x7fff5ffe}]}) close_range(r7, 0xffffffffffffffff, 0x200000000000000) 10.958467035s ago: executing program 1 (id=588): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x47, &(0x7f0000000200)=0x7) futex(&(0x7f000000cffc)=0x1, 0xd, 0x2, 0x0, 0x0, 0x400000) add_key$fscrypt_v1(0x0, 0x0, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0xffffffff}, 0x48, 0xffffffffffffffff) bind$inet(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x8000000003c) mount(0x0, &(0x7f0000000200)='./tracing\x00', &(0x7f0000000280)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000700)='./tracing/events/enable\x00', 0x1, 0x3f00) readv(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f00000012c0)=""/41, 0x29}], 0x1) write(r0, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) 10.251142348s ago: executing program 5 (id=590): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$XFS_IOC_FSINUMBERS(0xffffffffffffffff, 0xc0205867, &(0x7f0000001cc0)={0x0, 0x5, &(0x7f0000001980), 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x101042, 0x15) pwrite64(r3, &(0x7f0000000140)='2', 0xfdef, 0xe7c) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioprio_get$uid(0x3, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0x20, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000000)={'veth1_virt_wifi\x00', &(0x7f0000000400)=@ethtool_dump={0x32, 0x9, 0x6, 0x2a, "ad53a3712b67940eda0a0159c9030ecbb9013538fc898ae4948b99d24a3703d5de077c92c17fca16650d"}}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r4, 0x404c534a, 0x0) unshare(0x42000000) unshare(0x64000600) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x0) 8.016820918s ago: executing program 4 (id=592): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x10, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file1\x00', 0x0, 0x200c01, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000080) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000004000/0x3000)=nil) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x7e832, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f000000aa00)=ANY=[@ANYBLOB="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", @ANYBLOB], 0x50d8}}, 0xc000) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f00000000c0)=@generic={0x0, 0xffff, 0x5}) r5 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r5, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x3, 0x7, 0x8000000200007, 0x282b, 0x20103, 0x80001, {0x200004, 0x10005c62, 0x203, 0x1000000000, 0x83, 0x9576, 0x10000006, 0x6, 0x0, 0x0, 0x0, 0xee00, 0xee00, 0x8, 0x1}}, {0x0, 0xa}}}, 0xa0) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) 6.695971553s ago: executing program 4 (id=594): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$XFS_IOC_FSINUMBERS(0xffffffffffffffff, 0xc0205867, &(0x7f0000001cc0)={0x0, 0x5, &(0x7f0000001980), 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x101042, 0x15) pwrite64(r3, &(0x7f0000000140)='2', 0xfdef, 0xe7c) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioprio_get$uid(0x3, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0x20, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r4, 0x404c534a, 0x0) unshare(0x42000000) unshare(0x64000600) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x0) 6.632409382s ago: executing program 1 (id=595): bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="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", @ANYRESDEC=0x0, @ANYBLOB="09e200000000000000000000000000000000e200", @ANYRES32=0x0, @ANYRES32], 0x48) close(0x3) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x1c}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) syz_emit_vhci(0x0, 0x14) r1 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=@newqdisc={0x68, 0x14, 0xf0b, 0x3, 0x0, {0x2, 0x0, 0x0, 0x0, {0x4, 0xa}, {0xffe0, 0xe}, {0x4}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x40, 0xfc, 0x4, 0x400a, 0x2, 0xfffffffd, 0x7e}}, {0x4}}, {{0x1c, 0x1, {0x2, 0x4, 0xc, 0x1, 0x2, 0x8, 0x2}}, {0x4}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x24008814}, 0x20000040) r2 = socket$kcm(0xa, 0x2, 0x0) syz_ublk_setup_io_uring(0x1d, 0x0, 0x0, 0x0, 0x0) r3 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000280)=']', 0x1}], 0x1}, 0x20004040) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r5 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r5, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000040)={r5, r4}) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000000000040c41090ea80000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io(r6, &(0x7f00000000c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="ad5a97"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r6, 0x0, &(0x7f0000000100)={0x2c, &(0x7f0000000240)=ANY=[@ANYBLOB="ac184d", @ANYRESHEX=r1, @ANYRES8=r0, @ANYRESDEC=r2, @ANYRES8=r5], 0x0, 0x0, 0x0, 0x0}) 6.613260347s ago: executing program 2 (id=596): ioctl$USBDEVFS_REAPURB(0xffffffffffffffff, 0x4008550c, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000000240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006e80)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004300)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x840120, 0x0, 0x0, 0x57, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x50) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x280a00, 0x0) file_getattr(r2, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x18, 0x100) read$FUSE(r0, &(0x7f0000004540)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000002200)={0x10, 0xffffffffffffffda, r3}, 0x10) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xf8, 0x19, 0x1, 0x70bd2d, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x7}, {0x0, 0xa00, 0x5, 0x800000000000002}, 0xffffffff, 0x6e6bb9, 0x1, 0x0, 0x6}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x0, 0x3c}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x0, 0x4, 0x3, 0x0, 0x3c}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x4008010}, 0x0) 5.730890875s ago: executing program 4 (id=597): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) io_uring_register$IORING_REGISTER_ZCRX_IFQ(0xffffffffffffffff, 0x20, 0x0, 0x1) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000018c0)={0x14, 0x2f, 0x9, 0x70bd27, 0x25dedbfb, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x42914}, 0x4000014) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) setxattr$system_posix_acl(&(0x7f0000000040)='./mnt\x00', &(0x7f00000002c0)='system.posix_acl_default\x00', 0x0, 0x0, 0x2) sendmsg$tipc(r0, 0x0, 0x0) dup2(r1, r0) sendmmsg$inet(r0, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmmsg(r0, &(0x7f00000038c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x4000851) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x2, 0x2, 0x7fff5ffe}]}) close_range(r7, 0xffffffffffffffff, 0x200000000000000) 5.668937219s ago: executing program 2 (id=598): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/split_huge_pages\x00', 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1a, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000400048000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007f00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000092ddee10030410600200050003010902120001000000000904", @ANYRES32], 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='test_file\x00', 0x42, 0x1ff) write(r1, &(0x7f00000001c0)="eec165999f", 0x5) write(r0, &(0x7f0000000180)='/proc/self/cwd/test_file,0x0,0x1', 0x20) 4.635714942s ago: executing program 5 (id=599): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r5, {0xffe9, 0xc}, {}, {0x8, 0x4}}}, 0x24}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg(r7, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 4.465948267s ago: executing program 4 (id=600): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000010340)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001"], 0x48) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000500)={r1}, 0x4) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000030000000200000002"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x19, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000002000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r2}, 0xc) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000640)={{{@in=@private, @in=@private}}, {{@in=@remote}, 0x0, @in6=@mcast1}}, &(0x7f0000000740)=0xe8) syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x2, 0x1, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r5, r6, r7, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0xfbb, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f00000000c0)=0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = dup(r10) syz_ublk_setup_queues(r11, r9, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0xffbffffe, 0x257, 0x0, r4}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x100, 0x1000000, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffff8, 0x1000, 0x0, 0x146, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x4, 0x1, 0x2, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8000, 0x1, 0x2}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r8, '\x00', {0x3, 0x5, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x12, 0x4, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sock_addr=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(0x0, 0x0, 0x6c) openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) r12 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000040), 0x4e2a80, 0x0) ioctl$TIOCL_BLANKSCREEN(r12, 0x560e, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r11, 0xc008561c, &(0x7f0000000300)={0x7, 0x8bf0000}) 3.41459843s ago: executing program 6 (id=553): r0 = socket$netlink(0x10, 0x3, 0x1b) stat(&(0x7f0000001100)='./file1\x00', &(0x7f0000001140)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$UBLK_U_CMD_START_DEV(0xffffffffffffffff, 0xc0207506, &(0x7f00000011c0)={0x0, 0xffff, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000001240)={0x5, 0x693, {0x0}, {}, 0x100000001, 0x99}) sendmsg$netlink(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000014c0)=ANY=[@ANYBLOB="400200007700010600000000000000000c000000000001000000000024021680080034007f00000182008980080019000800000008001d00", @ANYRES32=r0, @ANYBLOB="08046300", @ANYRES32=r1, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB='\b\x00k\x00\x00\x00\x00\x00\x00'], 0x240}], 0x1}, 0x4080) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setresuid(0x0, 0xee00, 0x0) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc1}, &(0x7f00000001c0)={0x0, "26a1173fb9462d3589e67197f90b08e4230300000012a5f6a31854ec98e950cfed21fcad7ffefbcb566a1582f8938caa52dd8d39af080000006ad59300", 0xfff7fffd}, 0x4629, 0xffffffffffffffff) r6 = add_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xffffffffffffffff) keyctl$read(0x2, r6, &(0x7f00000000c0)=""/4096, 0x1000) socket$nl_netfilter(0x10, 0x3, 0xc) close(0xffffffffffffffff) r7 = socket(0x2, 0x80805, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r8 = syz_open_procfs(0x0, &(0x7f0000000280)='net/tcp\x00') preadv(r8, &(0x7f0000000040)=[{&(0x7f00000014c0)=""/223, 0xdf}], 0x1, 0x94, 0x0) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x2e2482, 0x0) write(r9, &(0x7f00000004c0)="306663353a313232373a620afaf6379a248d1d6534518f10951005a34b1c65378b847e43b8b42c", 0x27) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000001080)=0x8) 3.271214136s ago: executing program 2 (id=601): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpgrp(0x0) prlimit64(r0, 0xe, &(0x7f0000000380)={0x8, 0x100008c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000007c0)={'macvlan1\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00'}) sendmsg$nl_route_sched(r4, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000800)={'batadv_slave_1\x00'}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000900)={'tunl0\x00', &(0x7f0000000880)={'ip_vti0\x00', 0x0, 0x700, 0x10, 0x8, 0x3, {{0xd, 0x4, 0x1, 0x14, 0x34, 0x68, 0x0, 0x8, 0x29, 0x0, @remote, @multicast1, {[@timestamp_prespec={0x44, 0x4, 0x88, 0x3, 0x8}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x8, 0x43, 0x0, 0x0, [0x6]}, @generic={0x7, 0xe, "abb73471590e5a4140817210"}, @end]}}}}}) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r5) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000000)) setsockopt$MRT_DEL_MFC_PROXY(r3, 0x0, 0xd3, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) listen(r6, 0x1) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x108) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) 2.128881524s ago: executing program 2 (id=602): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="000000001000010000000000000000000500001f54000000060a010400000000000000000a0000010900010073797a310000000028000480240093ea0b00010065787468647200fd13000280080005400009000008000640000000010900020073797a320000000014000000110001000000000000e1dab39f6aa00000000100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = epoll_create(0x3ba) epoll_wait(r2, &(0x7f0000000080), 0x0, 0xfffffffc) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x10000001}) epoll_pwait2(r2, &(0x7f0000000300)=[{}], 0x1, 0x0, 0x0, 0x0) r3 = socket(0x11, 0x5, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'hsr0\x00'}) userfaultfd(0x80001) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) bind$unix(r3, &(0x7f00000010c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) syz_genetlink_get_family_id$batadv(&(0x7f0000002100), 0xffffffffffffffff) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000001040), 0x9e93b174020e03b3, 0x0) ioctl$UI_END_FF_ERASE(r4, 0x400c55cb, &(0x7f0000001140)={0x2, 0x800, 0x3}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "d607f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f001d34c09f39c3539e4f8d3ee0878ae95bc7f52363c468b257ff3e24852548deb01efd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3b90400000000000000c279f03558083906666827d61dcc3a633bffff250b5a293e3877adc1660edbc9a0307a25720a170e7f5670e419dc44febf7ddc73fd4a5a0b6c28665f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "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"}) rt_sigqueueinfo(0x0, 0x80039, 0x0) rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000a00)='./nfsd\x00', &(0x7f0000000b00)='nfsd\x00', 0x0, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x2, 0x45) write(r5, &(0x7f0000000100)='0\n', 0x2) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000640), 0xc0000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r6, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r7, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r6, 0x3ba0, &(0x7f0000000240)={0x48, 0x7, r8, 0x0, 0x10000, 0x0, 0x8, 0x2ea473, 0x1000000}) 1.397894022s ago: executing program 5 (id=603): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000200)=[{0x6, 0x7f, 0xe, 0x7ffffffe}]}) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) 1.282480902s ago: executing program 5 (id=604): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000059d360205f0501d09288000000010902120001030000000904"], 0x0) epoll_create1(0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000080)={0x5, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f00000001c0)={0x8, 0x0, 0x5, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x20000000009, 0x5, 0x0, 0x1, 0x9}, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x100000000000000) syz_usb_control_io$hid(r0, 0x0, 0x0) r3 = inotify_init() r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x111, 0x3}}, 0x5c) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, &(0x7f0000000340)={0x15, 0x110, 0xfa00, {r5, 0x73c, 0x30, 0x30, 0x0, @in6={0x1b, 0x4e20, 0x6, @loopback, 0xbff}, @ib={0x1b, 0xf, 0x6, {"50916300000000000000000700"}, 0x8000000000000001, 0x8, 0x3ff}}}, 0x118) close_range(r3, 0xffffffffffffffff, 0x0) 1.222047727s ago: executing program 6 (id=605): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000059d360205f0501d09288000000010902120001030000000904"], 0x0) epoll_create1(0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000080)={0x5, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x8, 0x0, 0x5, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x20000000009, 0x5, 0x0, 0x1, 0x9}, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x100000000000000) syz_usb_control_io$hid(r0, 0x0, 0x0) r3 = inotify_init() r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x111, 0x3}}, 0x5c) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, &(0x7f0000000340)={0x15, 0x110, 0xfa00, {r5, 0x73c, 0x30, 0x30, 0x0, @in6={0x1b, 0x4e20, 0x6, @loopback, 0xbff}, @ib={0x1b, 0xf, 0x6, {"50916300000000000000000700"}, 0x8000000000000001, 0x8, 0x3ff}}}, 0x118) close_range(r3, 0xffffffffffffffff, 0x0) 1.137989153s ago: executing program 4 (id=606): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) io_uring_register$IORING_REGISTER_ZCRX_IFQ(0xffffffffffffffff, 0x20, 0x0, 0x1) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000018c0)={0x14, 0x2f, 0x9, 0x70bd27, 0x25dedbfb, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x42914}, 0x4000014) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) setxattr$system_posix_acl(&(0x7f0000000040)='./mnt\x00', &(0x7f00000002c0)='system.posix_acl_default\x00', 0x0, 0x0, 0x2) sendmsg$tipc(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0xb6}, {&(0x7f0000000300)='V', 0x1}, {&(0x7f0000001600)="3eed50d0125719a810f88e3f47186fe4dae74182dfd109a2587c4797410c9b8e39bd3d9aa144d5908647c30c8db69b5c17084c9b1bfbb8680737c4f88abcdbc7d294d72ab1b344270915df9ddf5635644c351c22b29d948ac4106bce7107570beed63077cfbc98ef71699eae65d37724d995b553e7a3ade619b522313ab382caf879feb48942878e605ee3ee2872794e3abe22a3f025068b628a5d92468092a5cc649bbbd978b5772e537939432a502122235ced312dafd108c9ffeb0b38cc16da9418ca01d485a6afb5827da4df6e1121ec307de14bb32b6a977608e4576a998182dd93d592ff43e55bfdbbce23ecd501e43b3e93ef8d9d01711dff54c301e299d3801a3cffe6c9883fbd0e47124dc02569f62d48b878fcb58ce99fcffcd2a5166eff3ad93cf1d137274993d86a3b3730d63ded759f6ca88fa449e5575b15321e5a58a1f888eed7466db4976ce35f6d2efb5ad05d99a66482dc607cb5acb24d326803bd337519cc98103f59c63b5962cd72e4497d1b00817d6e09de70270a09b493c2226617b1c9ef9d506be00d6e07f14633a966f04ecca90fb8d2b963ad6f3817935bd6534fa3da1c5dc468789cbf1192f3c0bff3777f1edd2ada5d35f88f12f29e952c44445ce623509d66811c80a9e0f13ad85aba37d86ff0da4dda601d9e8acb264233bc939fb056316612cff687d5c44157be05bcc88b333ff2a40041d98f1acfe6e2231a84e09bd7a54a0442cf87ce3ee8fd8da39da1862862ae40fc3cb3055c8b70e62f243850707341f51426bb3e71c7a4fffefab060db786000618b05eb087a424a2f30f6a232ff44b605f70ceec0a8f70e37907f6e0bbba21e9d5b7ecb6d287742b75c101ba79525918c3473eae38f3c177249dfa8816661c9921f0b0c858d53ab87c8407b97950c842111002edd1d1e80b801b495da28bcd5409bc971e55dab1857e188ac9728efc8f9a4543945f86ade13b445eacecbbf848a96410ac37c57e3e9e8bc8b8fadd559d225c7468639da2b5d1208558b51e94c14faa7947a7c60e81a96bb5d194cc7289adbc02ebb4b49be1f1efc429db2f9b79b5a22919dba0c35341042c5776942c52365367c4bfc95b42be383cca7107161ded7e851d0126da33d581f1e2b08d0c061e86d31e7a83f9b51c79b4034c7deda7697034e1404c6e8e459f76c2efe64350146c7437ef808e04ca14df5f6f500264fd977272bbf8fc096774e8eb61d0963430751ac1425a073f84346b0eba368cba7fa34adc420800d4f99927280eba199f9695cf88124fafc3a2b1226d2f2ab3ea27c69a127650cf5c725b54c02bd8729033cf699ce7f030f9a3442056244da3cfb61a8126dba11377624f39eb009242152fd7b8b88de7dd86057f29bfcb7b7df0e65e7e9ac9eeaa41afa62743698bff03d5b2d51fb6bca2d92294e8e177cfa3661b26f1c040e9bed983b7bc0aa154eb9c92e4ee25091318c53113a1c23ac62d2d71504cba99041f29a4f332133292cf20abec9222a2acca57cac48fa6c0668ee5eecb494741a64d33b011dcca74696d4614c5b45a5d20983b1708d365ed3ffa60f9161972a611c22642c3c259b41f943f6d7a8b60f284d325e38fe76f0645e069ff70cae38850ccf973193b6232c987df26239a574691f7f07fffa6deae1eb0324fe546573c36f2a2c31cd442517a9b036ae6a2a491e7343864693c107a5dc2585820863c146c1ba6caa4fea9b87d567716f4c8ca1a9d2848055cd750512d3b7415d090019dc8a04a1a1d28931093cd8f00e94c407ca1fa2a5ce903d9df26e008c07cd13afa783220e1bd5e6b60645f3dbb6ecb4156fedafa2dd25498c6a99d94f0b38125ea7741b75109dcac9f80635f79f5c8a0483bb9f05a3a5bf721c7541edb252449f8b13e63c370a6146332f03ca1f1b6fe0bed984f13744bb7fa0fe322e83ddf9ffb2083e94f33604a0a199220c450dad94bf154805e7f9e4350ca2d81adf2978c87dcc8a8a7d56297ec124bfef0d28f35777205e973272c87e01070f14f5b14daa3b5104d9ff6b296c4f16ed49eb42d35e7ba3bccb7a26c33a263df88aadd596e9d9de0abbd4d449df11081f2cd62e1d8962b9b9feb25a3b8e03537d61a61c11ac22b7211d12c84e60a6abcc219e558b2513d8c530b3c7a57cdc47de545aafbb2a13c0e6c75b1b92fa241c713c83a09c92b2b61d565120372a9143415583c9596f27a663d4967cd653b08cebd6cb96c1f0dc80d57267ac9a8281d7149bde880828ee27d69a6818db58320db29d1b044eaf6ab8a5108bc522de406990b5393b1f7e7bab71bf6cf8eed1cd59c7607d662e8b313f5c4fce0f59b1027371381011b63dd5b2b09739082c0d62ffad96e30153a395234937d377c32fe7af82aca3a19d0ebc4a5c5fb5ff190f14d5695c703b571fb4bf03756635cafc6cf6267eab836c347a9d07e8089fc105346934cf3364e5be370b3c42b94bc5ae3d17a817398566a2953251eb91697d67278145df9a4b917bcca1bf211780b22f4caacfcb7604c84f943d05f6fdf8edbd258d7d8dbf84f9d99e57472c5b1c2337d749a1f345e662e2536d23c7a63bbbbf00f8b5b0a2106a0342ab27b9a10b82e82668cd49e0cbb09d7be0217645f1dda3be59c8232fa290d34791cda52aa5b5cec6339ab96a2eb3f5328cc7c0e6717c2824344547a2ed518f6b2b4e4fe5b684596aa6a9d3988fc5d5ff4cb46cec99d951b8386b10949a163af974b7543df97b4882a4ed60e927a1deb67c5f814235bef65fea79a2c712815be7403c93a3707fb90d4604ec3a6a3b0928f253f6ab6bd56c958e026c8c58172c4ac2a3efe2ecd5cea70c8313f9ac2d638bc296ba99e2ca86d2fd06b5402cdcddc3f3c9845d5ae77f6f36963b91e8f6cdccd17abe8d40ed02463af4bb0e496344f350097f1cc13313fa1e172b63556ed2b8a8121c01a5fb343ff7767821626fc49b0d6bd522e1c9bf137d5a5bccb4bc8dbb64c83a82ef6c2894f3896c9f6bf0c3764011d53eeb6db9ea9dae22d3ebcca4942d5828c0bca0d9ea37701d5a06c066ac4fe318e11e9c0d6c658ac810fb5d7836cfffe4ccbb0934e5567d74695980a156d4bf1c18861c5a29ccd349999dc20562d00e1f6c1851ae563541086438d60b975c8ceb466414ff60efa0b2dee790fd0659ffa98b92414c13d5a6825368f56c4984412205041cd8e006c7127d4395ecdffb5addf80ef938ce54a367154c4fc286d5f969325c12b13655a9a956dd3b98281f537e837669fc55d8930676e807aa8cd046e0f4583d59f86cb99f3f7a7ddde1fb39111fdec7677d2fee4b8f4814a5def5ebcc67c653384ce80eaffd880405f7edf8fd3ea049f040595df4a75e2f892e7a85e0ba351fb8d263bfff7168bb85017b360fcd2ba89346682a6ea7ccc46afbdb5ab444e3f477238b2ab503bde914d3cf1789539cde9c0621152cd97bff9f235d88a1ef4ea4309db3a05d401af7fb82784b050ef529dab4f1f003eb29710a962f7538c521e617e2f0efac36182d09985e1d725cc38c3833a53742a02f76fb2854a9e45f0febacf3bda83f11183ef5b9fef02ebcdf56d4104b175bad937d8f61964f97d673577cdcbbb48d8eb62b063ee6563b9ff053719baff871bcd83822d865b2f7ef023076425ac5cd71b1f2309de0c6f14cc9c4d3e8fad945f756a7c8a084ea1bfdf5ac6e740043e7f7bdaca06774b084ae314c2636529d4fdcd965c7f8c07156572620b827d694efdc9d2bfc5aa9391220a83765f2c71fcd48d4acaed60afb53d1013fa3b15e948ec4159f7d130ef85b594018346e99034c18738285223ea53a6b1d5cf11a607de2e19608ba03ec970a915b773824261f3fc931dd6d3b934d89f07baf14776314c3eeb8cd0537ef5736f565fbd14e520d4ab2f77ed9597b76ff91f8d1f99ebd6e473efda7accb273975a06944d1037032129992b994ca791a09b4d83980a1e494b0f97098df5f6fb6bbb02722adb11dc319c565c2c363cbd19d9fb3efb4613b62d6584cd53f7bd80e3e89304f444ce9dd1835661e3bb4de02ccf568a2a5daaf0d56898d4286c3fb62e22af62d7ac318685834467f337561dde2e0c1e2827cdffcf42c17728ee64b3ff4ccc0227590badd0bd7e448b8cca0892d6a5e0130d2ac665f47c6b28daa101c1b319869bdd39fa924d6d9ba7d72feda5f21ac78641c7d4801d41c7879721b3be4dab40d9c4a78552440101f373489cc5240b0144a9ce32691a784b6dfe971a21bb5980ff67da2d1bb90b223c9e192a39c1aeadd1f5c790811079c0b51a97105c99b6f95d71bb3ea47c33d9dcb0a53c929c44499e184a3cd722c908d3b0d157e28ffdeb2ed7192e780d96a7a2f0fd5a87bdc973e049da0caf931f26f5a21813e2e602ceb2259997e0205ce48fd9424bd6d4d75dd4301f429ee30745cd839a40dbeab4c3db2f0f10bbaea071ca41d1392385681730a3678a5f60f604dbe19cb9d7dd234337e327451b8cc65394af399432ef7fc3765d055874ebdca14e5999292d6f72f31e92bacf25db5ef8f5212952c1910de06ddbe1687a0e1837922f2228289916ed3aeb7b9cc24da3ae47139e371930afa6d3573df6732c26c0c7ae06d9cedfa77160711bcb06e6553338deae4c5731cf53cc154113096d02f3036d7d9edfcdc331e4bb860c5208489212e904eab70e7f860b0379895cbdecbf7a0b7a25e5b853c7dbe08a4e296a30afec8cf5a9f6ea4aef32a508655d539a770b21e660c9ee1d7688c56abeb7cf1afccc8d59780cf26312589e0c8e1bc00ad7b1325cd9a5dd69246e0b33407c381ea09265154aec297e4ccdf9785a1042a83e77c13d4ce4360782f2428f9916b5cd123b089eb683d30c1e895b9944aa905a1a5b52301d8cc5e4741834ead6ebdb5dc05c9c49c5e883e99d40b9838037beaf876534d747856103e59caf6266fbbe760b6ef83d004634b74f14f8eb4aef93c4cc9cbbd78d83d532c70feef51ea3f170b25d81a6a9b074bfca7e9b3771bf83517e0dd9d0600f70b86b20f61fe36076f8bada334b2390fa954973bc901619a3cfd039349cb328625f495ab288dbdd6dbfd022c2a83f59e0b998619a12e35891b5ae9e83a71765507b4a571cd2241e5885c705244c1022688bef7c5065fbcf219fc01753adb611b3fbc09403dcb10a4f99d788667eff75fa27074ca8481a633530e26163ccf7dada049d23e717e067b6fa5b2f652bc50abda9e7ccdc5f2f3c35ecc2c4431c819c9691be4422e379750774e9f39dae06f26423c8a4278789c9f3111b43f6dd25b0ad47c4cc5fda3f3ed82079c9366e0adced883488f429c1d7e1b351fd0bb204dd7977ef224c4df6d7a5f7697bc6500a7d03a8a914154779fa7092bf1be6bad4092367ce5d295a5d5d0e7c469f372ca2011d612637025e89f178ae9ada0c5b73bcb7d7c034ff595263cd4216e3c76ba5f3d81932a088a90bf8043e877e299c670ef1622a098d5519d9adc4ee7d4cd00e5934a4375fa83fdb81214b892482b31bdde59a70aaf25cb7f417c3a2a91c4e54b48149f6c41d9d396ee6ff13e3028c64a7c9b1f2e7c6e67184a3d52d6f570db3d225c947423c4c6533f22df57d15c5e5a3183422bd378b06fe4732a9401dcb19840fb8fa5c50a0ff497fef362c507753e46b8881d3e767f3b1d893a3805941c94f2efa05ce34b9ea81d716984af6834230d4707a87089d40779503ee6a9bb245d7d997f14acb80e89731c042bbbbe3dcd05177b0ee0eec23455830ef5b65aca357f2b0b887e0b9821c0", 0x1000}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0x17}], 0x4, 0x0, 0x0, 0x8000}, 0x0) dup2(r1, r0) sendmmsg$inet(r0, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmmsg(r0, &(0x7f00000038c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x4000851) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x2, 0x2, 0x7fff5ffe}]}) close_range(r7, 0xffffffffffffffff, 0x200000000000000) 1.12115964s ago: executing program 2 (id=607): ioctl$USBDEVFS_REAPURB(0xffffffffffffffff, 0x4008550c, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000000240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006e80)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004300)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x840120, 0x0, 0x0, 0x57, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x50) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x280a00, 0x0) file_getattr(r2, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x18, 0x100) read$FUSE(r0, &(0x7f0000004540)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000002200)={0x10, 0xffffffffffffffda, r3}, 0x10) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xf8, 0x19, 0x1, 0x70bd2d, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x7}, {0x0, 0xa00, 0x5, 0x800000000000002}, 0xffffffff, 0x6e6bb9, 0x1, 0x0, 0x6}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x0, 0x3c}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x0, 0x4, 0x3, 0x0, 0x3c}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x4008010}, 0x0) 132.559864ms ago: executing program 4 (id=608): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r1}, 0x0, &(0x7f00000002c0)=r0}, 0x20) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) listen(r3, 0x5) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=ANY=[@ANYBLOB="34000000410007012dbd7000fedb62580315102d94d32d801800"], 0x34}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000001380), &(0x7f0000000000)=""/10, 0x2}, 0x20) ioctl$SIOCSIFHWADDR(r6, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000680)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010102, @local}, {{0x1, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10, 0x0, 0x0, 0x4}}}}}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_clone(0x11100, &(0x7f0000000100)="9aeabcd985f21641b5689d1ed2d163046c", 0x11, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000280)="3d2be7fbb9fd2228feb071a0f46971381763ccda4b10609cedbf67b7cb7d5141b1723e85ada9e4723a562a9af1") write$cgroup_int(r7, &(0x7f0000000380)=0x8, 0x12) socket$inet_sctp(0x2, 0x5, 0x84) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) 0s ago: executing program 2 (id=609): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="4400000010000304000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="2256010000000000240012800b0001006d6163736563000001000000"], 0x44}, 0x1, 0x0, 0x0, 0x24008000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000140)=[@in={0x2, 0x4e23, @private=0xa010102}]}, &(0x7f0000000100)=0x10) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x85, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x85, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}}, 0x90) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0xc0}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) kernel console output (not intermixed with test programs): 47.050542][ T5786] nw80x 5-1:3.0: probe with driver nw80x failed with error -71 [ 147.180739][ T5786] usb 5-1: USB disconnect, device number 6 [ 147.449716][ T6460] netlink: 20 bytes leftover after parsing attributes in process `syz.2.149'. [ 148.532176][ T31] audit: type=1400 audit(1789346308.931:468): avc: denied { write } for pid=6467 comm="syz.3.166" name="sg0" dev="devtmpfs" ino=899 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 148.662226][ T31] audit: type=1400 audit(1789346309.061:469): avc: denied { create } for pid=6467 comm="syz.3.166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 148.672986][ T31] audit: type=1400 audit(1789346309.081:470): avc: denied { append } for pid=6467 comm="syz.3.166" name="demux0" dev="devtmpfs" ino=926 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 150.647555][ T6466] netlink: 4 bytes leftover after parsing attributes in process `syz.2.165'. [ 151.061654][ T6466] team0 (unregistering): Port device team_slave_0 removed [ 151.086354][ T6466] team0 (unregistering): Port device team_slave_1 removed [ 151.103034][ T6494] netlink: 'syz.3.173': attribute type 1 has an invalid length. [ 151.402531][ T6496] netlink: 28 bytes leftover after parsing attributes in process `syz.3.173'. [ 151.706938][ T6494] 8021q: adding VLAN 0 to HW filter on device bond1 [ 151.982367][ T5716] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 152.183906][ T5716] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 152.187409][ T5716] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.276414][ T5716] usb 4-1: config 0 descriptor?? [ 154.101941][ T5716] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 154.177967][ T31] audit: type=1400 audit(1789346314.581:471): avc: denied { write } for pid=6517 comm="syz.1.176" name="ppp" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 154.261307][ T6521] netlink: 20 bytes leftover after parsing attributes in process `syz.0.175'. [ 154.774011][ T5716] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 1 [ 154.774035][ T5716] [drm] Initialized udl on minor 1 [ 154.817679][ T31] audit: type=1400 audit(1789346315.221:472): avc: denied { ioctl } for pid=6492 comm="syz.3.173" path="/dev/input/event2" dev="devtmpfs" ino=921 ioctlcmd=0x4518 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 154.853438][ T10] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 154.854111][ T5716] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 154.878997][ T5716] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 154.896062][ T5699] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 154.899928][ T5699] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 154.900248][ T5699] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 154.983222][ T5716] usb 4-1: USB disconnect, device number 2 [ 155.027639][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 155.048940][ T31] audit: type=1400 audit(1789346315.451:473): avc: denied { read write } for pid=6517 comm="syz.1.176" name="nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 155.049779][ T10] usb 5-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 155.078544][ T6523] netlink: 20 bytes leftover after parsing attributes in process `syz.1.176'. [ 155.079933][ T31] audit: type=1400 audit(1789346315.491:474): avc: denied { open } for pid=6517 comm="syz.1.176" path="/dev/nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 155.175461][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.214048][ T31] audit: type=1400 audit(1789346315.591:475): avc: denied { map } for pid=6517 comm="syz.1.176" path="/dev/nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 155.245157][ T10] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 156.113798][ T10] gspca_nw80x: reg_r err -110 [ 156.113880][ T10] nw80x 5-1:3.0: probe with driver nw80x failed with error -110 [ 156.629069][ T6541] jffs2: notice: (6541) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 156.683106][ T31] audit: type=1400 audit(1789346317.061:476): avc: denied { write } for pid=6540 comm="syz.3.181" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 157.203835][ T9] usb 5-1: USB disconnect, device number 7 [ 157.323690][ T6551] ======================================================= [ 157.323690][ T6551] WARNING: The mand mount option has been deprecated and [ 157.323690][ T6551] and is ignored by this kernel. Remove the mand [ 157.323690][ T6551] option from the mount to silence this warning. [ 157.323690][ T6551] ======================================================= [ 157.542582][ T6554] blktrace: Concurrent blktraces are not allowed on loop6 [ 159.165046][ T10] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 159.165480][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 159.405774][ T10] usb 3-1: device descriptor read/64, error -32 [ 159.650602][ T10] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 159.853114][ T10] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 159.854104][ T10] usb 3-1: config index 0 descriptor too short (expected 21081, got 72) [ 159.875766][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.875782][ T10] usb 3-1: Product: syz [ 159.875790][ T10] usb 3-1: Manufacturer: syz [ 159.875798][ T10] usb 3-1: SerialNumber: syz [ 159.905094][ T31] audit: type=1400 audit(1789346320.311:477): avc: denied { allowed } for pid=6563 comm="syz.1.188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 160.161205][ T6573] netlink: 20 bytes leftover after parsing attributes in process `syz.3.189'. [ 160.680319][ T6575] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 160.928398][ T30] usb 3-1: USB disconnect, device number 16 [ 161.722317][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 162.015846][ T10] usb 3-1: ath9k_htc: Firmware - ath9k_htc/htc_9271-1.4.0.fw download failed [ 162.017736][ T31] audit: type=1400 audit(1789346322.421:478): avc: denied { firmware_load } for pid=10 comm="kworker/0:1" path="/lib/firmware/ath9k_htc/htc_9271-1.4.0.fw" dev="sda1" ino=313 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 162.017813][ T30] usb 3-1: ath9k_htc: USB layer deinitialized [ 162.072517][ T5786] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 162.098805][ T31] audit: type=1400 audit(1789346322.501:479): avc: denied { bind } for pid=6578 comm="syz.2.192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 162.664763][ T5786] usb 1-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice= 0.01 [ 162.666371][ T5786] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.777138][ T6591] jffs2: notice: (6591) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 162.811647][ T31] audit: type=1400 audit(1789346323.211:480): avc: denied { write } for pid=6582 comm="syz.3.194" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 162.965409][ T5786] dln2 1-1:1.0: USB write failed: -110 [ 162.965645][ T5786] dln2 1-1:1.0: failed to initialize hardware [ 162.971233][ T5786] dln2 1-1:1.0: probe with driver dln2 failed with error -110 [ 163.109951][ T5786] usb 1-1: USB disconnect, device number 16 [ 163.742133][ T10] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 164.066734][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 164.082237][ T10] usb 2-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 164.130126][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.274086][ T10] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 164.711509][ T10] gspca_nw80x: reg_r err -71 [ 164.711574][ T10] nw80x 2-1:3.0: probe with driver nw80x failed with error -71 [ 164.726129][ T10] usb 2-1: USB disconnect, device number 11 [ 164.812660][ T5786] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 164.872413][ T5600] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 164.972069][ T5786] usb 1-1: Using ep0 maxpacket: 16 [ 164.972629][ T5786] usb 1-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 164.986845][ T5786] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 164.986884][ T5786] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.253155][ T5600] usb 3-1: Using ep0 maxpacket: 16 [ 165.909100][ T5786] usb 1-1: config 0 descriptor?? [ 166.028511][ T6632] netlink: 20 bytes leftover after parsing attributes in process `syz.3.205'. [ 166.302721][ T6634] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 166.532949][ T5786] pxrc 1-1:0.0: Could not find endpoint [ 167.260734][ T31] audit: type=1400 audit(1789346327.661:481): avc: denied { read write } for pid=6615 comm="syz.2.202" name="mouse0" dev="devtmpfs" ino=986 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 167.261056][ T31] audit: type=1400 audit(1789346327.661:482): avc: denied { open } for pid=6615 comm="syz.2.202" path="/dev/input/mouse0" dev="devtmpfs" ino=986 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 167.444108][ T5600] usb 3-1: unable to get BOS descriptor or descriptor too short [ 167.444149][ T5600] usb 3-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 167.444178][ T5600] usb 3-1: no configurations [ 167.444190][ T5600] usb 3-1: can't read configurations, error -22 [ 167.461775][ T5699] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 167.612079][ T5699] usb 5-1: device descriptor read/64, error -71 [ 167.774805][ T30] usb 1-1: USB disconnect, device number 17 [ 167.829322][ T31] audit: type=1400 audit(1789346328.231:483): avc: denied { ioctl } for pid=6657 comm="syz.0.214" path="ipc:[4026532798]" dev="nsfs" ino=4026532798 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 167.856752][ T5699] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 167.992963][ T5699] usb 5-1: device descriptor read/64, error -71 [ 168.047915][ T6662] jffs2: notice: (6662) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 168.068598][ T31] audit: type=1400 audit(1789346328.461:484): avc: denied { write } for pid=6660 comm="syz.1.215" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 168.104561][ T5699] usb usb5-port1: attempt power cycle [ 168.852103][ T5699] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 168.875287][ T5699] usb 5-1: device descriptor read/8, error -71 [ 169.122114][ T5699] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 169.130967][ T31] audit: type=1400 audit(1789346329.531:485): avc: denied { ioctl } for pid=6678 comm="syz.2.218" path="socket:[12625]" dev="sockfs" ino=12625 ioctlcmd=0x5828 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 169.172056][ T5699] usb 5-1: device descriptor read/8, error -71 [ 169.282302][ T5699] usb usb5-port1: unable to enumerate USB device [ 169.411082][ T6680] could not allocate digest TFM handle sha256-ni [ 169.432992][ T31] audit: type=1400 audit(1789346329.841:486): avc: denied { create } for pid=6683 comm="syz.3.219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 169.435338][ T31] audit: type=1400 audit(1789346329.841:487): avc: denied { ioctl } for pid=6683 comm="syz.3.219" path="socket:[13404]" dev="sockfs" ino=13404 ioctlcmd=0x7453 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 169.618786][ T31] audit: type=1400 audit(1789346330.021:488): avc: denied { write } for pid=6693 comm="syz.0.221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 172.058996][ T31] audit: type=1400 audit(1789346332.451:489): avc: denied { write } for pid=6698 comm="syz.2.223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 173.001962][ T6701] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.135193][ T31] audit: type=1400 audit(1789346333.541:490): avc: denied { create } for pid=6715 comm="syz.1.227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 173.136478][ T6716] FAULT_INJECTION: forcing a failure. [ 173.136478][ T6716] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 173.136505][ T6716] CPU: 1 UID: 0 PID: 6716 Comm: syz.1.227 Tainted: G L syzkaller #0 PREEMPT(full) [ 173.136529][ T6716] Tainted: [L]=SOFTLOCKUP [ 173.136535][ T6716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 173.136545][ T6716] Call Trace: [ 173.136551][ T6716] [ 173.136558][ T6716] dump_stack_lvl+0x100/0x190 [ 173.136590][ T6716] should_fail_ex.cold+0x5/0xa [ 173.136611][ T6716] ? prepare_alloc_pages+0x16d/0x5b0 [ 173.136636][ T6716] should_fail_alloc_page+0xeb/0x140 [ 173.136661][ T6716] prepare_alloc_pages+0x1f0/0x5b0 [ 173.136683][ T6716] ? __memcg_kmem_charge_page+0x373/0x4d0 [ 173.136712][ T6716] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 173.136744][ T6716] ? process_measurement+0x4c8/0x2350 [ 173.136765][ T6716] ? down_write+0x146/0x1f0 [ 173.136795][ T6716] ? up_write+0x2dc/0x5b0 [ 173.136819][ T6716] ? process_measurement+0x1f4/0x2350 [ 173.136841][ T6716] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 173.136869][ T6716] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 173.136900][ T6716] ? __lock_acquire+0x5c0/0x1f40 [ 173.136924][ T6716] ? __lock_acquire+0x5c0/0x1f40 [ 173.136948][ T6716] ? __lock_acquire+0x5c0/0x1f40 [ 173.136966][ T6716] ? __css_rstat_updated+0x1ce/0x590 [ 173.136991][ T6716] ? __lock_acquire+0x5c0/0x1f40 [ 173.137009][ T6716] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 173.137032][ T6716] ? policy_nodemask+0xed/0x4f0 [ 173.137057][ T6716] alloc_pages_mpol+0x201/0x550 [ 173.137082][ T6716] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 173.137105][ T6716] ? find_held_lock+0x2b/0x80 [ 173.137129][ T6716] ? __pud_alloc+0x4f6/0x690 [ 173.137150][ T6716] ? __pud_alloc+0x4f6/0x690 [ 173.137174][ T6716] alloc_pages_noprof+0x1a/0x160 [ 173.137201][ T6716] __pmd_alloc+0x3b/0x950 [ 173.137221][ T6716] ? __pud_alloc+0x4fb/0x690 [ 173.137245][ T6716] __handle_mm_fault+0xa9d/0x2f60 [ 173.137276][ T6716] ? __pfx___handle_mm_fault+0x10/0x10 [ 173.137300][ T6716] ? __pfx_mt_find+0x10/0x10 [ 173.137339][ T6716] ? find_vma+0xbf/0x140 [ 173.137358][ T6716] ? __pfx_find_vma+0x10/0x10 [ 173.137379][ T6716] handle_mm_fault+0x363/0xa20 [ 173.137409][ T6716] do_user_addr_fault+0x745/0x12f0 [ 173.137446][ T6716] exc_page_fault+0x6f/0xd0 [ 173.137470][ T6716] asm_exc_page_fault+0x26/0x30 [ 173.137488][ T6716] RIP: 0010:rep_movs_alternative+0x30/0xa0 [ 173.137507][ T6716] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 173.137523][ T6716] RSP: 0018:ffffc90004c0fd80 EFLAGS: 00050212 [ 173.137539][ T6716] RAX: 0000000000000001 RBX: 0000200000000040 RCX: 0000000000000010 [ 173.137551][ T6716] RDX: 0000000000000001 RSI: 0000200000000040 RDI: ffffc90004c0fdf8 [ 173.137562][ T6716] RBP: 0000000000000010 R08: 0000000000000001 R09: fffff52000981fc0 [ 173.137573][ T6716] R10: ffffc90004c0fe07 R11: 0000000000000000 R12: 0000000000000000 [ 173.137583][ T6716] R13: ffffc90004c0fdf8 R14: 0000000000000010 R15: 0000000000000000 [ 173.137607][ T6716] _copy_from_user+0x98/0xd0 [ 173.137627][ T6716] move_addr_to_kernel+0x65/0x170 [ 173.137657][ T6716] __sys_connect+0xb5/0x170 [ 173.137675][ T6716] ? __pfx___sys_connect+0x10/0x10 [ 173.137692][ T6716] ? __fget_files+0x21f/0x3d0 [ 173.137723][ T6716] ? __pfx_ksys_write+0x10/0x10 [ 173.137747][ T6716] __x64_sys_connect+0x72/0xb0 [ 173.137764][ T6716] ? lockdep_hardirqs_on+0x7d/0x110 [ 173.137786][ T6716] do_syscall_64+0x123/0x790 [ 173.137812][ T6716] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.137831][ T6716] RIP: 0033:0x7f45e699e159 [ 173.137845][ T6716] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 173.137861][ T6716] RSP: 002b:00007f45e4bf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 173.137877][ T6716] RAX: ffffffffffffffda RBX: 00007f45e6c25fa0 RCX: 00007f45e699e159 [ 173.137887][ T6716] RDX: 0000000000000010 RSI: 0000200000000040 RDI: 0000000000000003 [ 173.137897][ T6716] RBP: 00007f45e4bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 173.137908][ T6716] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 173.137917][ T6716] R13: 00007f45e6c26038 R14: 00007f45e6c25fa0 R15: 00007fff240d8cc8 [ 173.137942][ T6716] [ 173.140488][ T31] audit: type=1400 audit(1789346333.541:491): avc: denied { connect } for pid=6715 comm="syz.1.227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 173.209576][ T30] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 173.691224][ T30] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 173.766058][ T30] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 173.766171][ T30] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 173.766288][ T30] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.935081][ T30] usb 4-1: config 0 descriptor?? [ 174.108094][ T6701] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.542552][ T5334] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 174.693847][ T5334] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 174.698115][ T5334] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 174.698148][ T5334] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 174.698371][ T5334] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.740681][ T6726] No source specified [ 174.858258][ T5334] usb 2-1: config 0 descriptor?? [ 175.414794][ T30] ath6kl: Failed to submit usb control message: -110 [ 175.414838][ T30] ath6kl: unable to send the bmi data to the device: -110 [ 175.414850][ T30] ath6kl: Unable to send get target info: -110 [ 175.422420][ T30] ath6kl: Failed to init ath6kl core: -110 [ 175.486416][ T30] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 176.079326][ T6701] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.706954][ T6701] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.104938][ T5699] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 177.203302][ T5334] usbhid 2-1:0.0: can't add hid device: -71 [ 177.203355][ T5334] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 177.211054][ T5334] usb 2-1: USB disconnect, device number 12 [ 177.262087][ T5699] usb 1-1: Using ep0 maxpacket: 16 [ 177.262948][ T5699] usb 1-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice= 0.02 [ 177.263831][ T5699] usb 1-1: config 0 has an invalid interface number: 255 but max is 0 [ 177.263851][ T5699] usb 1-1: config 0 has no interface number 0 [ 177.263883][ T5699] usb 1-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 177.263912][ T5699] usb 1-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 177.263937][ T5699] usb 1-1: config 0 interface 255 has no altsetting 0 [ 177.268302][ T5699] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=3 [ 177.268355][ T5699] usb 1-1: Manufacturer: syz [ 177.268370][ T5699] usb 1-1: SerialNumber: syz [ 177.516524][ T5699] usb 1-1: config 0 descriptor?? [ 178.290610][ T5699] ftdi_sio 1-1:0.255: FTDI USB Serial Device converter detected [ 178.388068][ T5699] usb 1-1: Detected SIO [ 178.674687][ T5699] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 178.707772][ T5699] usb 1-1: USB disconnect, device number 18 [ 178.742473][ T5699] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 178.742933][ T5699] ftdi_sio 1-1:0.255: device disconnected [ 178.842815][ T43] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.842868][ T43] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.884133][ T5811] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.919880][ T10] usb 4-1: USB disconnect, device number 3 [ 178.922350][ T5813] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.018492][ T6755] sctp: [Deprecated]: syz.3.237 (pid 6755) Use of struct sctp_assoc_value in delayed_ack socket option. [ 179.018492][ T6755] Use struct sctp_sack_info instead [ 179.062099][ T5709] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 179.212102][ T5709] usb 2-1: Using ep0 maxpacket: 32 [ 179.212827][ T5709] usb 2-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 179.213694][ T5709] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.287955][ T5709] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 179.338476][ T6764] FAULT_INJECTION: forcing a failure. [ 179.338476][ T6764] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 179.338542][ T6764] CPU: 0 UID: 0 PID: 6764 Comm: syz.2.239 Tainted: G L syzkaller #0 PREEMPT(full) [ 179.338568][ T6764] Tainted: [L]=SOFTLOCKUP [ 179.338575][ T6764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 179.338585][ T6764] Call Trace: [ 179.338592][ T6764] [ 179.338600][ T6764] dump_stack_lvl+0x100/0x190 [ 179.338631][ T6764] should_fail_ex.cold+0x5/0xa [ 179.338658][ T6764] _copy_from_user+0x2e/0xd0 [ 179.338678][ T6764] user_termios_to_kernel_termios_1+0x21/0x30 [ 179.338708][ T6764] set_termios+0x3c0/0x880 [ 179.338738][ T6764] ? __pfx_set_termios+0x10/0x10 [ 179.338763][ T6764] ? __lock_acquire+0x5c0/0x1f40 [ 179.338786][ T6764] ? avc_has_extended_perms+0x484/0x1080 [ 179.338817][ T6764] ? lock_acquire+0x1d1/0x380 [ 179.338840][ T6764] tty_mode_ioctl+0x17e/0xd40 [ 179.338866][ T6764] ? kasan_quarantine_put+0x104/0x240 [ 179.338886][ T6764] ? __pfx_tty_mode_ioctl+0x10/0x10 [ 179.338922][ T6764] ? __pfx___ldsem_down_read_nested+0x10/0x10 [ 179.338953][ T6764] ? __pfx_n_tty_ioctl+0x10/0x10 [ 179.338974][ T6764] n_tty_ioctl_helper+0x47/0x2b0 [ 179.339002][ T6764] n_tty_ioctl+0x53/0x340 [ 179.339029][ T6764] ? __pfx_n_tty_ioctl+0x10/0x10 [ 179.339050][ T6764] tty_ioctl+0x11b4/0x1640 [ 179.339073][ T6764] ? __pfx_tty_ioctl+0x10/0x10 [ 179.339091][ T6764] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 179.339114][ T6764] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 179.339140][ T6764] ? hook_file_ioctl_common+0x145/0x440 [ 179.339173][ T6764] ? selinux_file_ioctl+0x13b/0x290 [ 179.339191][ T6764] ? selinux_file_ioctl+0xb6/0x290 [ 179.339212][ T6764] ? __pfx_tty_ioctl+0x10/0x10 [ 179.339232][ T6764] __x64_sys_ioctl+0x18e/0x210 [ 179.339253][ T6764] do_syscall_64+0x123/0x790 [ 179.339281][ T6764] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.339299][ T6764] RIP: 0033:0x7f9ce759e159 [ 179.339315][ T6764] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 179.339331][ T6764] RSP: 002b:00007f9ce8388028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 179.339351][ T6764] RAX: ffffffffffffffda RBX: 00007f9ce7826090 RCX: 00007f9ce759e159 [ 179.339368][ T6764] RDX: 0000200000000140 RSI: 0000000000005402 RDI: 0000000000000004 [ 179.339378][ T6764] RBP: 00007f9ce8388090 R08: 0000000000000000 R09: 0000000000000000 [ 179.339389][ T6764] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 179.339399][ T6764] R13: 00007f9ce7826128 R14: 00007f9ce7826090 R15: 00007ffd6f10f818 [ 179.339424][ T6764] [ 179.792257][ T5709] gspca_nw80x: reg_w err -110 [ 179.792300][ T5709] nw80x 2-1:3.0: probe with driver nw80x failed with error -110 [ 181.893731][ T5786] usb 2-1: USB disconnect, device number 13 [ 182.137396][ T31] audit: type=1400 audit(1789346342.511:492): avc: denied { read write } for pid=6787 comm="syz.0.245" name="sg0" dev="devtmpfs" ino=899 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 182.137558][ T31] audit: type=1400 audit(1789346342.511:493): avc: denied { open } for pid=6787 comm="syz.0.245" path="/dev/sg0" dev="devtmpfs" ino=899 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 182.252495][ T10] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 182.656903][ T6798] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 183.050981][ T10] usb 5-1: New USB device found, idVendor=041e, idProduct=3042, bcdDevice= 0.40 [ 183.101084][ T10] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 183.613263][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.615381][ T10] usb 5-1: Product: syz [ 183.615528][ T10] usb 5-1: Manufacturer: syz [ 183.615611][ T10] usb 5-1: SerialNumber: syz [ 183.766037][ T31] audit: type=1400 audit(1789346344.171:494): avc: denied { create } for pid=6791 comm="syz.3.247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 183.769133][ T31] audit: type=1400 audit(1789346344.171:495): avc: denied { create } for pid=6791 comm="syz.3.247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 183.821676][ T6792] netlink: 'syz.2.246': attribute type 10 has an invalid length. [ 183.824414][ T6792] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 183.825694][ T6792] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 184.000956][ T31] audit: type=1400 audit(1789346344.401:496): avc: denied { create } for pid=6789 comm="syz.2.246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 184.491302][ T31] audit: type=1400 audit(1789346344.891:497): avc: denied { create } for pid=6799 comm="syz.0.250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 184.940446][ T9] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 185.252225][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 185.339232][ T9] usb 2-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 185.357682][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 185.357697][ T9] usb 2-1: config 0 has no interfaces? [ 185.357713][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.361151][ T9] usb 2-1: config 0 descriptor?? [ 185.443539][ T31] audit: type=1400 audit(1789346345.851:498): avc: denied { bind } for pid=6811 comm="syz.3.252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 185.532742][ T10] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 185.538364][ T10] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 185.685166][ T5607] Bluetooth: hci2: command 0x0406 tx timeout [ 185.685189][ T5601] Bluetooth: hci0: command 0x0406 tx timeout [ 185.685199][ T5607] Bluetooth: hci3: command 0x0406 tx timeout [ 185.685212][ T5601] Bluetooth: hci4: command 0x0406 tx timeout [ 185.688980][ T31] audit: type=1400 audit(1789346346.001:499): avc: denied { mount } for pid=6811 comm="syz.3.252" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 185.689020][ T31] audit: type=1400 audit(1789346346.001:500): avc: denied { search } for pid=6811 comm="syz.3.252" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 185.689053][ T31] audit: type=1400 audit(1789346346.001:501): avc: denied { search } for pid=6811 comm="syz.3.252" name="instances" dev="tracefs" ino=4170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 185.982132][ T10] usb 5-1: USB disconnect, device number 12 [ 186.136267][ T5614] udevd[5614]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 186.292758][ T5786] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 186.442516][ T5786] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 186.443577][ T5786] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 186.443596][ T5786] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 186.443625][ T5786] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.445379][ T5786] usb 3-1: config 0 descriptor?? [ 186.657408][ T5786] usb 3-1: USB disconnect, device number 19 [ 188.030406][ T5786] usb 2-1: USB disconnect, device number 14 [ 188.096233][ T31] kauditd_printk_skb: 9 callbacks suppressed [ 188.096253][ T31] audit: type=1400 audit(1789346348.461:511): avc: denied { setopt } for pid=6842 comm="syz.3.263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 188.702656][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 188.702728][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 190.748724][ T5613] Bluetooth: hci1: command 0x0406 tx timeout [ 191.649382][ T6870] jffs2: notice: (6870) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 191.995001][ T6880] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 192.920197][ T6892] netlink: 20 bytes leftover after parsing attributes in process `syz.2.274'. [ 194.790190][ T31] audit: type=1400 audit(1789346354.871:512): avc: denied { mount } for pid=6898 comm="syz.2.276" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 194.790995][ T6906] No source specified [ 198.834609][ T6938] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 200.107131][ T31] audit: type=1400 audit(1789346360.511:513): avc: denied { cmd } for pid=6941 comm="iou-wrk-6943" path="/dev/ublk-control" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 200.626226][ T6951] netlink: 20 bytes leftover after parsing attributes in process `syz.4.287'. [ 201.190344][ T31] audit: type=1400 audit(1789346361.591:514): avc: denied { name_connect } for pid=6953 comm="syz.0.288" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 201.355543][ T31] audit: type=1400 audit(1789346361.761:515): avc: denied { write } for pid=6953 comm="syz.0.288" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 203.874454][ T6971] blktrace: Concurrent blktraces are not allowed on loop6 [ 204.453528][ T5709] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 205.142151][ T6984] gadgetfs: bound to dummy_udc driver [ 205.242074][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 205.466276][ T31] audit: type=1400 audit(1789346365.481:516): avc: denied { write } for pid=6978 comm="syz.0.295" name="enable" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 205.466322][ T31] audit: type=1400 audit(1789346365.481:517): avc: denied { open } for pid=6978 comm="syz.0.295" path="/56/tracing/events/enable" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 205.552067][ T5709] usb 2-1: Using ep0 maxpacket: 32 [ 205.554092][ T5709] usb 2-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 205.560219][ T5709] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 205.560233][ T5709] usb 2-1: config 0 has no interfaces? [ 205.560247][ T5709] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.604471][ T5709] usb 2-1: config 0 descriptor?? [ 206.304335][ T31] audit: type=1400 audit(1789346366.231:518): avc: denied { ioctl } for pid=6989 comm="syz.4.299" path="/dev/sg0" dev="devtmpfs" ino=899 ioctlcmd=0x227b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 206.304388][ T31] audit: type=1400 audit(1789346366.231:519): avc: denied { map } for pid=6989 comm="syz.4.299" path="socket:[15394]" dev="sockfs" ino=15394 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 206.304424][ T31] audit: type=1400 audit(1789346366.231:520): avc: denied { read } for pid=6989 comm="syz.4.299" path="socket:[15394]" dev="sockfs" ino=15394 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 207.183276][ T7001] netlink: 20 bytes leftover after parsing attributes in process `syz.3.300'. [ 207.951139][ T5334] usb 2-1: USB disconnect, device number 15 [ 210.362108][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 210.578179][ T31] audit: type=1400 audit(1789346370.981:521): avc: denied { unmount } for pid=5598 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 210.872120][ T10] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 211.025317][ T10] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 211.029015][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 211.029048][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 211.029115][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.118069][ T10] usb 2-1: config 0 descriptor?? [ 212.852712][ T10] usbhid 2-1:0.0: can't add hid device: -71 [ 212.853374][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 212.959909][ T10] usb 2-1: USB disconnect, device number 16 [ 213.342177][ T9] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 213.348160][ T31] audit: type=1400 audit(1789346373.751:522): avc: denied { unmount } for pid=5604 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 213.495566][ T9] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 213.517601][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 213.517845][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 213.519702][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.673737][ T9] usb 5-1: config 0 descriptor?? [ 214.852993][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 214.853076][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 214.877041][ T9] usb 5-1: USB disconnect, device number 13 [ 215.512875][ T7033] gadgetfs: bound to dummy_udc driver [ 215.991713][ T31] audit: type=1400 audit(1789346376.391:523): avc: denied { read write } for pid=7034 comm="syz.0.313" name="video36" dev="devtmpfs" ino=1043 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 216.065250][ T31] audit: type=1400 audit(1789346376.391:524): avc: denied { open } for pid=7034 comm="syz.0.313" path="/dev/video36" dev="devtmpfs" ino=1043 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 216.066745][ T7039] netlink: 20 bytes leftover after parsing attributes in process `syz.3.312'. [ 216.686953][ T7043] netlink: 20 bytes leftover after parsing attributes in process `syz.0.314'. [ 217.712444][ T7048] FAULT_INJECTION: forcing a failure. [ 217.712444][ T7048] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 217.712894][ T7048] CPU: 0 UID: 0 PID: 7048 Comm: syz.4.316 Tainted: G L syzkaller #0 PREEMPT(full) [ 217.712921][ T7048] Tainted: [L]=SOFTLOCKUP [ 217.712928][ T7048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 217.712939][ T7048] Call Trace: [ 217.712946][ T7048] [ 217.712953][ T7048] dump_stack_lvl+0x100/0x190 [ 217.712987][ T7048] should_fail_ex.cold+0x5/0xa [ 217.713013][ T7048] _copy_from_user+0x2e/0xd0 [ 217.713033][ T7048] memdup_user+0x6b/0xe0 [ 217.713062][ T7048] strndup_user+0x78/0xe0 [ 217.713080][ T7048] __x64_sys_mount+0x136/0x310 [ 217.713107][ T7048] ? __pfx___x64_sys_mount+0x10/0x10 [ 217.713150][ T7048] do_syscall_64+0x123/0x790 [ 217.713178][ T7048] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.713197][ T7048] RIP: 0033:0x7fd3ca39e159 [ 217.713213][ T7048] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 217.713230][ T7048] RSP: 002b:00007fd3cb348028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 217.713249][ T7048] RAX: ffffffffffffffda RBX: 00007fd3ca625fa0 RCX: 00007fd3ca39e159 [ 217.713262][ T7048] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 0000000000000000 [ 217.713273][ T7048] RBP: 00007fd3cb348090 R08: 0000200000000040 R09: 0000000000000000 [ 217.713284][ T7048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 217.713294][ T7048] R13: 00007fd3ca626038 R14: 00007fd3ca625fa0 R15: 00007ffe6b3e7b58 [ 217.713319][ T7048] [ 219.055766][ T7064] jffs2: notice: (7064) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 220.196449][ T31] audit: type=1400 audit(1789346380.591:525): avc: denied { sqpoll } for pid=7074 comm="syz.4.324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 220.196489][ T31] audit: type=1400 audit(1789346380.601:526): avc: denied { setopt } for pid=7074 comm="syz.4.324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 220.512184][ T5334] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 220.716097][ T7093] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 221.010804][ T5334] usb 2-1: Using ep0 maxpacket: 32 [ 221.153391][ T5334] usb 2-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 221.161760][ T5334] usb 2-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 221.161789][ T5334] usb 2-1: config 3 has 0 interfaces, different from the descriptor's value: 1 [ 221.162022][ T5334] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.572124][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 223.779502][ T10] usb 2-1: USB disconnect, device number 17 [ 224.666472][ T7109] gadgetfs: bound to dummy_udc driver [ 224.778170][ T7112] jffs2: notice: (7112) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 224.783197][ T31] audit: type=1400 audit(1789346385.191:527): avc: denied { write } for pid=7101 comm="syz.4.331" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 226.870366][ T7134] gadgetfs: bound to dummy_udc driver [ 228.113680][ T7139] gadgetfs: bound to dummy_udc driver [ 229.752448][ T31] audit: type=1400 audit(1789346390.161:528): avc: denied { read } for pid=7145 comm="syz.3.341" name="ptp0" dev="devtmpfs" ino=1264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 231.122054][ T9] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 231.208651][ T7175] netlink: 16 bytes leftover after parsing attributes in process `syz.2.334'. [ 231.272053][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 231.273579][ T9] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 231.273614][ T9] usb 1-1: too many configurations: 12, using maximum allowed: 8 [ 231.275116][ T9] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 231.275146][ T9] usb 1-1: can't read configurations, error -61 [ 231.352958][ T7184] FAULT_INJECTION: forcing a failure. [ 231.352958][ T7184] name failslab, interval 1, probability 0, space 0, times 0 [ 231.353002][ T7184] CPU: 0 UID: 0 PID: 7184 Comm: syz.3.343 Tainted: G L syzkaller #0 PREEMPT(full) [ 231.353027][ T7184] Tainted: [L]=SOFTLOCKUP [ 231.353034][ T7184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 231.353045][ T7184] Call Trace: [ 231.353051][ T7184] [ 231.353058][ T7184] dump_stack_lvl+0x100/0x190 [ 231.353090][ T7184] should_fail_ex.cold+0x5/0xa [ 231.353116][ T7184] should_failslab+0xc2/0x120 [ 231.353140][ T7184] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 231.353162][ T7184] ? __alloc_skb+0x5b7/0x710 [ 231.353181][ T7184] ? __alloc_skb+0x140/0x710 [ 231.353206][ T7184] __alloc_skb+0x140/0x710 [ 231.353224][ T7184] ? __alloc_skb+0x5b7/0x710 [ 231.353243][ T7184] ? __pfx___alloc_skb+0x10/0x10 [ 231.353269][ T7184] netlink_alloc_large_skb+0x69/0x150 [ 231.353292][ T7184] netlink_sendmsg+0x680/0xda0 [ 231.353316][ T7184] ? __pfx_netlink_sendmsg+0x10/0x10 [ 231.353339][ T7184] ? selinux_socket_sendmsg+0x198/0x2f0 [ 231.353363][ T7184] ____sys_sendmsg+0xa4d/0xbe0 [ 231.353388][ T7184] ? __pfx_netlink_sendmsg+0x10/0x10 [ 231.353413][ T7184] ? __pfx_____sys_sendmsg+0x10/0x10 [ 231.353445][ T7184] ? lock_acquire+0x1d1/0x380 [ 231.353465][ T7184] ? get_pid_task+0x2a/0x250 [ 231.353492][ T7184] ___sys_sendmsg+0x190/0x1e0 [ 231.353521][ T7184] ? __pfx____sys_sendmsg+0x10/0x10 [ 231.353549][ T7184] ? get_pid_task+0x106/0x250 [ 231.353580][ T7184] ? find_held_lock+0x2b/0x80 [ 231.353620][ T7184] __sys_sendmsg+0x160/0x210 [ 231.353641][ T7184] ? __pfx___sys_sendmsg+0x10/0x10 [ 231.353676][ T7184] do_syscall_64+0x123/0x790 [ 231.353701][ T7184] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.353720][ T7184] RIP: 0033:0x7f859759e159 [ 231.353735][ T7184] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 231.353757][ T7184] RSP: 002b:00007f85984cc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 231.353776][ T7184] RAX: ffffffffffffffda RBX: 00007f8597826090 RCX: 00007f859759e159 [ 231.353788][ T7184] RDX: 0000000000040814 RSI: 0000200000000100 RDI: 0000000000000003 [ 231.353799][ T7184] RBP: 00007f85984cc090 R08: 0000000000000000 R09: 0000000000000000 [ 231.353810][ T7184] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 231.353821][ T7184] R13: 00007f8597826128 R14: 00007f8597826090 R15: 00007fffc5dd2af8 [ 231.353845][ T7184] [ 231.413634][ T9] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 231.656048][ T7191] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 231.841061][ T31] audit: type=1400 audit(1789346392.241:529): avc: denied { write } for pid=7158 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 231.862051][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 231.862732][ T9] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 231.862766][ T9] usb 1-1: too many configurations: 12, using maximum allowed: 8 [ 231.864202][ T9] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 231.864227][ T9] usb 1-1: can't read configurations, error -61 [ 231.864416][ T9] usb usb1-port1: attempt power cycle [ 231.923883][ T5786] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 232.112031][ T31] audit: type=1400 audit(1789346392.491:530): avc: denied { write } for pid=7197 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 232.202696][ T9] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 232.222295][ T5786] usb 2-1: Using ep0 maxpacket: 16 [ 232.225127][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 232.225247][ T5786] usb 2-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice= 0.02 [ 232.225844][ T9] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 232.225874][ T9] usb 1-1: too many configurations: 12, using maximum allowed: 8 [ 232.228116][ T9] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 232.228134][ T9] usb 1-1: can't read configurations, error -61 [ 232.231116][ T5786] usb 2-1: config 0 has an invalid interface number: 255 but max is 0 [ 232.231138][ T5786] usb 2-1: config 0 has no interface number 0 [ 232.231163][ T5786] usb 2-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 232.231194][ T5786] usb 2-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 232.231218][ T5786] usb 2-1: config 0 interface 255 has no altsetting 0 [ 232.234104][ T5786] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=3 [ 232.234122][ T5786] usb 2-1: Manufacturer: syz [ 232.234135][ T5786] usb 2-1: SerialNumber: syz [ 232.240152][ T5786] usb 2-1: config 0 descriptor?? [ 232.246885][ T5786] ftdi_sio 2-1:0.255: FTDI USB Serial Device converter detected [ 232.247688][ T5786] usb 2-1: Detected SIO [ 232.255763][ T5786] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 232.297756][ T5699] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 232.355326][ T9] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 232.385066][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 232.387541][ T9] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 232.387572][ T9] usb 1-1: too many configurations: 12, using maximum allowed: 8 [ 232.398862][ T9] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 232.398890][ T9] usb 1-1: can't read configurations, error -61 [ 232.400738][ T9] usb usb1-port1: unable to enumerate USB device [ 232.471204][ T7208] netlink: 4 bytes leftover after parsing attributes in process `syz.2.348'. [ 232.471224][ T7208] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 232.502050][ T5699] usb 4-1: Using ep0 maxpacket: 32 [ 232.505156][ T5699] usb 4-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 232.507594][ T5699] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.523251][ T7208] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.523617][ T7208] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.524135][ T7208] bridge0: entered allmulticast mode [ 232.548067][ T7208] bridge_slave_1: left allmulticast mode [ 232.548086][ T7208] bridge_slave_1: left promiscuous mode [ 232.548234][ T7208] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.577217][ T9] usb 2-1: USB disconnect, device number 18 [ 232.578787][ T5699] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 232.594307][ T7208] bridge_slave_0: left allmulticast mode [ 232.594329][ T7208] bridge_slave_0: left promiscuous mode [ 232.594470][ T7208] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.617061][ T7214] jffs2: notice: (7214) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 233.054667][ T9] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 233.060784][ T9] ftdi_sio 2-1:0.255: device disconnected [ 233.083247][ T5699] gspca_nw80x: reg_w err -110 [ 233.083306][ T5699] nw80x 4-1:3.0: probe with driver nw80x failed with error -110 [ 235.596663][ T5709] usb 4-1: USB disconnect, device number 4 [ 235.614782][ T30] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 235.783454][ T30] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 235.785009][ T30] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 235.785066][ T30] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 235.785157][ T30] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.983063][ T30] usb 5-1: config 0 descriptor?? [ 236.367313][ T31] audit: type=1400 audit(1789346396.761:531): avc: denied { write } for pid=7201 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 237.744007][ T30] usbhid 5-1:0.0: can't add hid device: -71 [ 237.744092][ T30] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 237.746057][ T30] usb 5-1: USB disconnect, device number 14 [ 237.789963][ T7238] jffs2: notice: (7238) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 237.815999][ T31] audit: type=1400 audit(1789346398.221:532): avc: denied { write } for pid=7232 comm="syz.2.352" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 237.924647][ T7248] FAULT_INJECTION: forcing a failure. [ 237.924647][ T7248] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 237.924678][ T7248] CPU: 0 UID: 0 PID: 7248 Comm: syz.3.353 Tainted: G L syzkaller #0 PREEMPT(full) [ 237.924711][ T7248] Tainted: [L]=SOFTLOCKUP [ 237.924717][ T7248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 237.924728][ T7248] Call Trace: [ 237.924734][ T7248] [ 237.924742][ T7248] dump_stack_lvl+0x100/0x190 [ 237.924773][ T7248] should_fail_ex.cold+0x5/0xa [ 237.924799][ T7248] _copy_from_user+0x2e/0xd0 [ 237.924820][ T7248] copy_msghdr_from_user+0x9f/0x4c0 [ 237.924849][ T7248] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 237.924882][ T7248] ? lock_acquire+0x1d1/0x380 [ 237.924901][ T7248] ? get_pid_task+0x2a/0x250 [ 237.924929][ T7248] ___sys_sendmsg+0x106/0x1e0 [ 237.924958][ T7248] ? __pfx____sys_sendmsg+0x10/0x10 [ 237.924984][ T7248] ? get_pid_task+0x106/0x250 [ 237.925017][ T7248] ? find_held_lock+0x2b/0x80 [ 237.925059][ T7248] __sys_sendmsg+0x160/0x210 [ 237.925081][ T7248] ? __pfx___sys_sendmsg+0x10/0x10 [ 237.925116][ T7248] do_syscall_64+0x123/0x790 [ 237.925145][ T7248] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.925167][ T7248] RIP: 0033:0x7f859759e159 [ 237.925182][ T7248] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 237.925198][ T7248] RSP: 002b:00007f85984ab028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 237.925217][ T7248] RAX: ffffffffffffffda RBX: 00007f8597826180 RCX: 00007f859759e159 [ 237.925229][ T7248] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 237.925240][ T7248] RBP: 00007f85984ab090 R08: 0000000000000000 R09: 0000000000000000 [ 237.925251][ T7248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 237.925261][ T7248] R13: 00007f8597826218 R14: 00007f8597826180 R15: 00007fffc5dd2af8 [ 237.925285][ T7248] [ 238.003698][ T31] audit: type=1400 audit(1789346398.381:533): avc: denied { write } for pid=7249 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 238.346396][ T7254] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 238.347278][ T7254] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 238.448604][ T7260] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 238.448821][ T7260] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 238.512027][ T30] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 238.881918][ T7273] syz.3.357 uses obsolete (PF_INET,SOCK_PACKET) [ 239.871569][ T31] audit: type=1400 audit(1789346400.271:534): avc: denied { connect } for pid=7272 comm="syz.3.357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 240.335405][ T31] audit: type=1400 audit(1789346400.741:535): avc: denied { write } for pid=7258 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 240.653158][ T31] audit: type=1400 audit(1789346401.061:536): avc: denied { write } for pid=7286 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 241.069867][ T7294] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 241.303630][ T7292] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 242.667336][ T7309] gadgetfs: bound to dummy_udc driver [ 243.542226][ T7320] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 244.748077][ T7327] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 245.621899][ T30] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 246.149456][ T7332] jffs2: notice: (7332) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 246.169166][ T31] audit: type=1400 audit(1789346406.571:537): avc: denied { write } for pid=7331 comm="syz.1.370" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 246.202106][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 246.708937][ T7340] gadgetfs: bound to dummy_udc driver [ 247.223242][ T31] audit: type=1400 audit(1789346407.621:538): avc: denied { write } for pid=7297 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 247.502102][ T31] audit: type=1400 audit(1789346407.901:539): avc: denied { write } for pid=7343 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 247.568275][ T7351] fuse: Bad value for 'user_id' [ 247.568296][ T7351] fuse: Bad value for 'user_id' [ 247.698575][ T31] audit: type=1400 audit(1789346408.101:540): avc: denied { setattr } for pid=7345 comm="syz.4.372" name="TIPC" dev="sockfs" ino=16323 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 248.371814][ T30] usb 1-1: device descriptor read/64, error -71 [ 248.811783][ T30] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 249.400201][ T30] usb 1-1: Using ep0 maxpacket: 32 [ 249.643149][ T30] usb 1-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 250.098825][ T30] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.103854][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 250.103895][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 250.163601][ T30] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 250.303841][ T31] audit: type=1400 audit(1789346410.711:541): avc: denied { write } for pid=7353 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 250.754092][ T30] gspca_nw80x: reg_r err -71 [ 250.754159][ T30] nw80x 1-1:3.0: probe with driver nw80x failed with error -71 [ 250.783201][ T30] usb 1-1: USB disconnect, device number 25 [ 250.936271][ T7395] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 251.355598][ T31] audit: type=1400 audit(1789346411.761:542): avc: denied { write } for pid=7393 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 252.762531][ T7406] gadgetfs: bound to dummy_udc driver [ 254.247008][ T7414] syzkaller0: entered promiscuous mode [ 254.247074][ T7414] syzkaller0: entered allmulticast mode [ 256.489408][ T31] audit: type=1400 audit(1789346416.891:543): avc: denied { read } for pid=7429 comm="syz.3.371" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 256.491276][ T31] audit: type=1400 audit(1789346416.891:544): avc: denied { open } for pid=7429 comm="syz.3.371" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 256.680685][ T7431] faux_driver vgem: [drm] Unknown color mode 11176; guessing buffer size. [ 256.685238][ T31] audit: type=1400 audit(1789346417.081:545): avc: denied { ioctl } for pid=7429 comm="syz.3.371" path="/dev/dri/card0" dev="devtmpfs" ino=627 ioctlcmd=0x64b2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 256.692042][ T10] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 256.698998][ T31] audit: type=1400 audit(1789346417.101:546): avc: denied { ioctl } for pid=7429 comm="syz.3.371" path="/dev/video7" dev="devtmpfs" ino=948 ioctlcmd=0x5608 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 256.842111][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 256.842543][ T10] usb 2-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice= 0.02 [ 256.843347][ T10] usb 2-1: config 0 has an invalid interface number: 255 but max is 0 [ 256.843361][ T10] usb 2-1: config 0 has no interface number 0 [ 256.843374][ T10] usb 2-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 256.843394][ T10] usb 2-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 256.843408][ T10] usb 2-1: config 0 interface 255 has no altsetting 0 [ 256.850535][ T10] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=3 [ 256.850554][ T10] usb 2-1: Manufacturer: syz [ 256.850566][ T10] usb 2-1: SerialNumber: syz [ 256.853879][ T10] usb 2-1: config 0 descriptor?? [ 256.856408][ T10] ftdi_sio 2-1:0.255: FTDI USB Serial Device converter detected [ 256.862898][ T10] usb 2-1: Detected SIO [ 256.875300][ T10] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 257.380860][ T5709] usb 2-1: USB disconnect, device number 19 [ 257.445051][ T25] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 257.537533][ T5709] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 257.537972][ T5709] ftdi_sio 2-1:0.255: device disconnected [ 257.598387][ T25] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 257.602570][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 257.602603][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 257.602707][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.692854][ T25] usb 5-1: config 0 descriptor?? [ 259.100400][ T25] usbhid 5-1:0.0: can't add hid device: -71 [ 259.100462][ T25] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 259.125560][ T25] usb 5-1: USB disconnect, device number 15 [ 259.711435][ T7447] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 261.003523][ T7454] gadgetfs: bound to dummy_udc driver [ 261.402051][ T25] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 261.562774][ T25] usb 2-1: Using ep0 maxpacket: 32 [ 261.563609][ T25] usb 2-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 261.564459][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.571531][ T25] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 262.571377][ T25] gspca_nw80x: reg_r err -110 [ 262.571448][ T25] nw80x 2-1:3.0: probe with driver nw80x failed with error -110 [ 263.383701][ T10] usb 2-1: USB disconnect, device number 20 [ 263.466396][ T5613] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 263.469205][ T5613] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 263.470479][ T5613] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 263.471217][ T5613] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 263.479554][ T5613] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 263.954559][ T7482] netlink: 20 bytes leftover after parsing attributes in process `syz.1.398'. [ 264.306285][ T7484] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 265.068255][ T7495] jffs2: notice: (7495) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 265.597825][ T5616] Bluetooth: hci5: command tx timeout [ 268.800306][ T5613] Bluetooth: hci5: command tx timeout [ 268.809395][ T7525] gadgetfs: bound to dummy_udc driver [ 268.811251][ T7520] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 269.003837][ T7527] jffs2: notice: (7527) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 269.011358][ T31] audit: type=1400 audit(1789346429.411:547): avc: denied { write } for pid=7516 comm="syz.2.406" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 269.208649][ T7533] netlink: 20 bytes leftover after parsing attributes in process `syz.4.410'. [ 270.512417][ T10] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 270.662795][ T10] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 270.666276][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 270.666313][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 270.666447][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.706066][ T10] usb 2-1: config 0 descriptor?? [ 270.824192][ T5613] Bluetooth: hci5: command tx timeout [ 271.929529][ T13] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.712636][ T10] usbhid 2-1:0.0: can't add hid device: -71 [ 272.712689][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 272.717829][ T10] usb 2-1: USB disconnect, device number 21 [ 272.850463][ T13] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.890984][ T7541] 9pnet: p9_errstr2errno: server reported unknown error [ 272.900989][ T13] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.902095][ T5613] Bluetooth: hci5: command tx timeout [ 272.921018][ T7541] netlink: 20 bytes leftover after parsing attributes in process `syz.4.411'. [ 272.921090][ T7541] nbd: socks must be embedded in a SOCK_ITEM attr [ 273.076249][ T13] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.203791][ T7464] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.204108][ T7464] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.204481][ T7464] bridge_slave_0: entered allmulticast mode [ 273.211575][ T7464] bridge_slave_0: entered promiscuous mode [ 273.261414][ T7567] netlink: 40 bytes leftover after parsing attributes in process `syz.2.415'. [ 273.275218][ T31] audit: type=1400 audit(1789346433.661:548): avc: denied { append } for pid=7563 comm="syz.2.415" name="demux0" dev="devtmpfs" ino=926 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 273.362034][ T5699] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 273.386865][ T7464] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.387173][ T7464] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.387859][ T7464] bridge_slave_1: entered allmulticast mode [ 273.466657][ T7464] bridge_slave_1: entered promiscuous mode [ 273.742226][ T5699] usb 5-1: Using ep0 maxpacket: 32 [ 273.747923][ T5699] usb 5-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 273.779997][ T5699] usb 5-1: config 3 has 0 interfaces, different from the descriptor's value: 1 [ 273.780036][ T5699] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.494819][ T7464] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 276.620412][ T7464] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 277.215614][ T5699] usb 5-1: USB disconnect, device number 16 [ 277.290672][ T7464] team0: Port device team_slave_0 added [ 277.322880][ T7464] team0: Port device team_slave_1 added [ 279.361035][ T31] audit: type=1400 audit(1789346439.761:549): avc: denied { write } for pid=7594 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 279.446608][ T31] audit: type=1400 audit(1789346439.851:550): avc: denied { write } for pid=7611 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 279.795210][ T7618] netlink: zone id is out of range [ 279.795224][ T7618] netlink: zone id is out of range [ 279.795231][ T7618] netlink: zone id is out of range [ 279.795237][ T7618] netlink: zone id is out of range [ 279.795243][ T7618] netlink: zone id is out of range [ 279.795249][ T7618] netlink: zone id is out of range [ 279.795435][ T7618] netlink: zone id is out of range [ 279.795442][ T7618] netlink: zone id is out of range [ 279.795448][ T7618] netlink: zone id is out of range [ 279.795454][ T7618] netlink: zone id is out of range [ 279.838500][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 279.903609][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 279.907211][ T13] bond0 (unregistering): Released all slaves [ 279.991265][ T13] bond1 (unregistering): Released all slaves [ 280.053299][ T5263] 8021q: adding VLAN 0 to HW filter on device eth1 [ 280.055355][ T7464] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 280.055368][ T7464] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 280.055389][ T7464] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 280.091526][ T7464] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 280.091732][ T7464] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 280.091771][ T7464] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 280.551107][ T7464] hsr_slave_0: entered promiscuous mode [ 280.551813][ T7464] hsr_slave_1: entered promiscuous mode [ 280.606303][ T7635] netlink: 20 bytes leftover after parsing attributes in process `syz.2.420'. [ 280.796550][ T7464] debugfs: 'hsr0' already exists in 'hsr' [ 280.796602][ T7464] Cannot create hsr debugfs directory [ 280.854886][ T25] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 280.935140][ T31] audit: type=1400 audit(1789346441.341:551): avc: denied { ioctl } for pid=7630 comm="syz.0.427" path="socket:[18074]" dev="sockfs" ino=18074 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 280.939248][ T31] audit: type=1400 audit(1789346441.341:552): avc: denied { bind } for pid=7630 comm="syz.0.427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 280.947310][ T31] audit: type=1400 audit(1789346441.351:553): avc: denied { setopt } for pid=7630 comm="syz.0.427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 280.947650][ T31] audit: type=1400 audit(1789346441.351:554): avc: denied { write } for pid=7630 comm="syz.0.427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 280.953769][ T31] audit: type=1400 audit(1789346441.361:555): avc: denied { create } for pid=7630 comm="syz.0.427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 280.956502][ T31] audit: type=1400 audit(1789346441.361:556): avc: denied { setopt } for pid=7630 comm="syz.0.427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 280.959925][ T7639] netlink: 4 bytes leftover after parsing attributes in process `syz.0.427'. [ 281.144968][ T25] usb 2-1: Using ep0 maxpacket: 32 [ 281.159049][ T25] usb 2-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 281.170543][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.200642][ T25] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 281.708802][ T25] gspca_nw80x: reg_w err -110 [ 281.708844][ T25] nw80x 2-1:3.0: probe with driver nw80x failed with error -110 [ 282.788446][ T7660] jffs2: notice: (7660) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 283.606117][ T7660] jffs2: fork failed for JFFS2 garbage collect thread: -EINTR [ 283.783500][ T10] usb 2-1: USB disconnect, device number 22 [ 284.751534][ T31] audit: type=1400 audit(1789346445.151:557): avc: denied { write } for pid=7642 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 285.535140][ T31] audit: type=1400 audit(1789346445.941:558): avc: denied { write } for pid=7688 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 285.704131][ T5709] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 285.713754][ T5263] 8021q: adding VLAN 0 to HW filter on device eth2 [ 285.743753][ T13] hsr_slave_0: left promiscuous mode [ 285.748384][ T13] hsr_slave_1: left promiscuous mode [ 285.749172][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 285.749201][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 285.753774][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 285.753789][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 285.774019][ T13] veth1_macvtap: left promiscuous mode [ 285.774062][ T13] veth0_macvtap: left promiscuous mode [ 285.774172][ T13] veth1_vlan: left promiscuous mode [ 285.774224][ T13] veth0_vlan: left promiscuous mode [ 285.862426][ T5709] usb 3-1: Using ep0 maxpacket: 32 [ 285.863125][ T5709] usb 3-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 285.864289][ T5709] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.888639][ T5709] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 285.970841][ T13] team0 (unregistering): Port device team_slave_1 removed [ 285.979440][ T13] team0 (unregistering): Port device team_slave_0 removed [ 285.982045][ T5600] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 286.162870][ T5600] usb 5-1: Using ep0 maxpacket: 32 [ 286.166428][ T5600] usb 5-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 286.169251][ T5600] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.323209][ T5600] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 286.870943][ T5600] gspca_nw80x: reg_w err -110 [ 286.871396][ T5600] nw80x 5-1:3.0: probe with driver nw80x failed with error -110 [ 286.942721][ T5709] gspca_nw80x: reg_r err -110 [ 286.942787][ T5709] nw80x 3-1:3.0: probe with driver nw80x failed with error -110 [ 290.406731][ T7464] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 290.772048][ T31] audit: type=1400 audit(1789346451.131:559): avc: denied { write } for pid=7707 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 290.867420][ T5600] usb 3-1: USB disconnect, device number 20 [ 290.891927][ T7464] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 290.896494][ T31] audit: type=1400 audit(1789346451.301:560): avc: denied { write } for pid=7719 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 290.899387][ T7464] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 290.963785][ T5709] usb 5-1: USB disconnect, device number 17 [ 290.990722][ T7464] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 291.001640][ T7464] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 291.035085][ T7464] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 291.036524][ T5263] 8021q: adding VLAN 0 to HW filter on device eth3 [ 291.038676][ T7464] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 291.081008][ T7464] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 291.262289][ T9] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 291.382237][ T7729] jffs2: notice: (7729) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 291.433353][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 291.437535][ T9] usb 2-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 291.477476][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.608445][ T9] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 292.415683][ T9] gspca_nw80x: reg_w err -110 [ 292.415767][ T9] nw80x 2-1:3.0: probe with driver nw80x failed with error -110 [ 294.110346][ T30] usb 2-1: USB disconnect, device number 23 [ 294.199172][ T31] audit: type=1400 audit(1789346454.601:561): avc: denied { write } for pid=7747 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 294.275168][ T7464] 8021q: adding VLAN 0 to HW filter on device bond0 [ 294.312757][ T7464] 8021q: adding VLAN 0 to HW filter on device team0 [ 294.378756][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.379552][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 294.897999][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.898089][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 294.935610][ T31] audit: type=1400 audit(1789346455.341:562): avc: denied { write } for pid=7773 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 295.191051][ T5263] 8021q: adding VLAN 0 to HW filter on device eth4 [ 295.481154][ T31] audit: type=1400 audit(1789346455.881:563): avc: denied { map } for pid=7780 comm="syz.1.448" path="/dev/ublkc2" dev="devtmpfs" ino=2940 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 295.540099][ T31] audit: type=1400 audit(1789346455.941:564): avc: denied { write } for pid=7789 comm="syz.0.450" name="001" dev="devtmpfs" ino=735 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 295.572174][ T31] audit: type=1400 audit(1789346455.971:565): avc: denied { map } for pid=7789 comm="syz.0.450" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=735 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 296.972149][ T5709] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 297.144451][ T5709] usb 5-1: Using ep0 maxpacket: 32 [ 297.147502][ T5709] usb 5-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 297.315115][ T5709] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.590445][ T5709] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 298.092406][ T5709] gspca_nw80x: reg_w err -110 [ 298.092637][ T5709] nw80x 5-1:3.0: probe with driver nw80x failed with error -110 [ 299.602270][ T7832] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 300.097681][ T5786] usb 5-1: USB disconnect, device number 18 [ 300.168347][ T7835] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56592 sclass=netlink_route_socket pid=7835 comm=syz.1.457 [ 300.201585][ T7464] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 300.603102][ T30] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 300.753069][ T30] usb 3-1: device descriptor read/64, error -71 [ 300.993846][ T30] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 301.132728][ T30] usb 3-1: device descriptor read/64, error -71 [ 301.220058][ T7855] jffs2: notice: (7855) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 301.241442][ T31] audit: type=1400 audit(1789346461.651:566): avc: denied { write } for pid=7850 comm="syz.4.462" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 301.243304][ T30] usb usb3-port1: attempt power cycle [ 302.142165][ T30] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 302.163809][ T30] usb 3-1: device descriptor read/8, error -71 [ 302.402138][ T30] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 302.423350][ T30] usb 3-1: device descriptor read/8, error -71 [ 302.533729][ T30] usb usb3-port1: unable to enumerate USB device [ 303.581831][ T7880] netlink: 4 bytes leftover after parsing attributes in process `syz.0.465'. [ 303.581851][ T7880] net_ratelimit: 147 callbacks suppressed [ 303.581862][ T7880] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 303.644149][ T7880] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.644584][ T7880] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.650831][ T7880] bridge0: entered allmulticast mode [ 303.765242][ T7880] bridge_slave_1: left allmulticast mode [ 303.765259][ T7880] bridge_slave_1: left promiscuous mode [ 303.765354][ T7880] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.769793][ T7880] bridge_slave_0: left allmulticast mode [ 303.769808][ T7880] bridge_slave_0: left promiscuous mode [ 303.769898][ T7880] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.053532][ T5786] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 304.085063][ T7464] veth0_vlan: entered promiscuous mode [ 304.232394][ T5786] usb 5-1: Using ep0 maxpacket: 32 [ 304.252751][ T5786] usb 5-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 304.339338][ T5786] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.371174][ T7464] veth1_vlan: entered promiscuous mode [ 304.705277][ T5786] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 305.212820][ T5786] gspca_nw80x: reg_w err -110 [ 305.213129][ T5786] nw80x 5-1:3.0: probe with driver nw80x failed with error -110 [ 305.370510][ T7464] veth0_macvtap: entered promiscuous mode [ 305.403397][ T7464] veth1_macvtap: entered promiscuous mode [ 305.536562][ T7464] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 305.554590][ T7464] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 305.803649][ T7907] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 306.428137][ T43] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.428994][ T43] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.429050][ T43] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.429171][ T43] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.682417][ T5786] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 306.763254][ T1536] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 306.763275][ T1536] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 306.881722][ T7912] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 307.292083][ T5786] usb 2-1: Using ep0 maxpacket: 32 [ 307.292626][ T5786] usb 2-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 307.293519][ T5786] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.298249][ T5810] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 307.298266][ T5810] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 307.346567][ T5786] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 307.366501][ T31] audit: type=1400 audit(1789346467.771:567): avc: denied { mounton } for pid=7464 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 307.370892][ T31] audit: type=1400 audit(1789346467.771:568): avc: denied { mount } for pid=7464 comm="syz-executor" name="/" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 307.829786][ T189] usb 5-1: USB disconnect, device number 19 [ 308.062038][ T30] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 308.182553][ T5786] gspca_nw80x: reg_r err -110 [ 308.182916][ T5786] nw80x 2-1:3.0: probe with driver nw80x failed with error -110 [ 308.990364][ T7928] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 309.092005][ T30] usb 3-1: Using ep0 maxpacket: 32 [ 309.112348][ T30] usb 3-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 309.181796][ T30] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.299395][ T30] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 309.317029][ T7933] jffs2: notice: (7933) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 309.362063][ T31] audit: type=1400 audit(1789346469.761:569): avc: denied { write } for pid=7929 comm="syz.4.476" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 310.190378][ T30] gspca_nw80x: reg_w err -110 [ 310.190447][ T30] nw80x 3-1:3.0: probe with driver nw80x failed with error -110 [ 311.521686][ T984] usb 2-1: USB disconnect, device number 24 [ 311.559991][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 311.560806][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 312.287914][ T7957] netlink: zone id is out of range [ 312.287955][ T7957] netlink: zone id is out of range [ 312.287974][ T7957] netlink: zone id is out of range [ 312.287995][ T7957] netlink: zone id is out of range [ 312.288014][ T7957] netlink: zone id is out of range [ 312.288033][ T7957] netlink: zone id is out of range [ 312.288068][ T7957] netlink: zone id is out of range [ 312.288087][ T7957] netlink: zone id is out of range [ 312.288107][ T7957] netlink: zone id is out of range [ 312.288126][ T7957] netlink: zone id is out of range [ 312.499629][ T5786] usb 3-1: USB disconnect, device number 25 [ 312.500768][ T31] audit: type=1400 audit(1789346472.901:570): avc: denied { write } for pid=7913 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 313.282138][ T984] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 313.437716][ T984] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 313.452421][ T984] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 313.452484][ T984] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 313.452574][ T984] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.561483][ T984] usb 3-1: config 0 descriptor?? [ 313.707903][ T31] audit: type=1400 audit(1789346474.101:571): avc: denied { write } for pid=7965 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 315.617275][ T984] usbhid 3-1:0.0: can't add hid device: -71 [ 315.617714][ T984] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 315.815222][ T984] usb 3-1: USB disconnect, device number 26 [ 316.307485][ T7999] jffs2: notice: (7999) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 316.309925][ T31] audit: type=1400 audit(1789346476.711:572): avc: denied { write } for pid=7995 comm="syz.4.485" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 318.500698][ T189] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 318.770532][ T8023] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 319.251521][ T8026] binder: 8025:8026 ioctl c0306201 0 returned -14 [ 319.271810][ T31] audit: type=1400 audit(1789346479.671:573): avc: denied { write } for pid=7997 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 319.375228][ T189] usb 2-1: Using ep0 maxpacket: 32 [ 319.376219][ T189] usb 2-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 319.377048][ T189] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.385580][ T189] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 319.792428][ T8034] net_ratelimit: 147 callbacks suppressed [ 319.792482][ T8034] netlink: zone id is out of range [ 319.792504][ T8034] netlink: zone id is out of range [ 319.792524][ T8034] netlink: zone id is out of range [ 319.792543][ T8034] netlink: zone id is out of range [ 319.792563][ T8034] netlink: zone id is out of range [ 319.792582][ T8034] netlink: zone id is out of range [ 319.792637][ T8034] netlink: zone id is out of range [ 319.792656][ T8034] netlink: zone id is out of range [ 319.792675][ T8034] netlink: zone id is out of range [ 319.792695][ T8034] netlink: zone id is out of range [ 319.897198][ T189] gspca_nw80x: reg_w err -110 [ 319.897238][ T189] nw80x 2-1:3.0: probe with driver nw80x failed with error -110 [ 320.359053][ T31] audit: type=1400 audit(1789346480.761:574): avc: denied { write } for pid=8041 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 320.552065][ T5786] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 320.702337][ T5786] usb 6-1: Using ep0 maxpacket: 32 [ 320.702820][ T5786] usb 6-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 320.703902][ T5786] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.750068][ T5786] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 321.819015][ T5786] gspca_nw80x: reg_w err -110 [ 321.819081][ T5786] nw80x 6-1:3.0: probe with driver nw80x failed with error -110 [ 322.631854][ T5699] usb 2-1: USB disconnect, device number 25 [ 323.524755][ T5699] usb 6-1: USB disconnect, device number 2 [ 323.591355][ T31] audit: type=1400 audit(1789346483.991:575): avc: denied { write } for pid=8044 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 324.541020][ T984] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 324.702016][ T984] usb 5-1: Using ep0 maxpacket: 16 [ 324.702583][ T984] usb 5-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice= 0.02 [ 324.703499][ T984] usb 5-1: config 0 has an invalid interface number: 255 but max is 0 [ 324.703520][ T984] usb 5-1: config 0 has no interface number 0 [ 324.703543][ T984] usb 5-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 324.703574][ T984] usb 5-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 324.703598][ T984] usb 5-1: config 0 interface 255 has no altsetting 0 [ 324.704897][ T984] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=3 [ 324.704916][ T984] usb 5-1: Manufacturer: syz [ 324.704929][ T984] usb 5-1: SerialNumber: syz [ 324.707204][ T984] usb 5-1: config 0 descriptor?? [ 324.710766][ T984] ftdi_sio 5-1:0.255: FTDI USB Serial Device converter detected [ 324.724656][ T984] usb 5-1: Detected SIO [ 324.728951][ T984] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 325.033899][ T8080] capability: warning: `syz.5.502' uses deprecated v2 capabilities in a way that may be insecure [ 325.893167][ T31] audit: type=1400 audit(1789346486.301:576): avc: denied { write } for pid=8077 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 325.981854][ T9] usb 5-1: USB disconnect, device number 20 [ 326.001738][ T9] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 326.009638][ T9] ftdi_sio 5-1:0.255: device disconnected [ 326.722187][ T8096] net_ratelimit: 149 callbacks suppressed [ 326.722221][ T8096] netlink: zone id is out of range [ 326.722241][ T8096] netlink: zone id is out of range [ 326.722262][ T8096] netlink: zone id is out of range [ 326.722282][ T8096] netlink: zone id is out of range [ 326.722301][ T8096] netlink: zone id is out of range [ 326.722320][ T8096] netlink: zone id is out of range [ 326.722355][ T8096] netlink: zone id is out of range [ 326.722375][ T8096] netlink: zone id is out of range [ 326.722394][ T8096] netlink: zone id is out of range [ 326.722413][ T8096] netlink: zone id is out of range [ 326.845398][ T31] audit: type=1400 audit(1789346487.251:577): avc: denied { write } for pid=8084 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 327.088915][ T31] audit: type=1400 audit(1789346487.491:578): avc: denied { write } for pid=8104 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 327.802318][ T8127] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 328.979319][ T8134] gadgetfs: bound to dummy_udc driver [ 329.339869][ T8131] binder: 8129:8131 ioctl c0306201 0 returned -14 [ 329.509323][ T8138] jffs2: notice: (8138) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 329.511768][ T31] audit: type=1400 audit(1789346489.911:579): avc: denied { write } for pid=8136 comm="syz.0.509" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 330.333655][ T8152] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 333.513317][ T31] audit: type=1400 audit(1789346493.551:580): avc: denied { mount } for pid=8165 comm="syz.0.515" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 333.519244][ T31] audit: type=1400 audit(1789346493.921:581): avc: denied { unmount } for pid=5604 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 333.814877][ T31] audit: type=1400 audit(1789346494.221:582): avc: denied { bind } for pid=8170 comm="syz.2.517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 333.815097][ T31] audit: type=1400 audit(1789346494.221:583): avc: denied { name_bind } for pid=8170 comm="syz.2.517" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 333.815268][ T31] audit: type=1400 audit(1789346494.221:584): avc: denied { node_bind } for pid=8170 comm="syz.2.517" saddr=255.255.255.255 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 333.874820][ T31] audit: type=1400 audit(1789346494.271:585): avc: denied { write } for pid=8170 comm="syz.2.517" name="unix" dev="proc" ino=4026533371 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 336.089792][ T8185] gadgetfs: bound to dummy_udc driver [ 336.220896][ T8187] binder: 8186:8187 ioctl c0306201 0 returned -14 [ 336.431332][ T8195] jffs2: notice: (8195) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 336.451403][ T31] audit: type=1400 audit(1789346496.861:586): avc: denied { write } for pid=8190 comm="syz.4.524" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 336.652337][ T9] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 336.802465][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 336.805178][ T9] usb 6-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 336.811845][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.059540][ T9] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 337.928240][ T9] gspca_nw80x: reg_w err -110 [ 337.928662][ T9] nw80x 6-1:3.0: probe with driver nw80x failed with error -110 [ 337.954242][ T8209] gadgetfs: bound to dummy_udc driver [ 338.192669][ T189] usb 1-1: new full-speed USB device number 26 using dummy_hcd [ 338.193074][ C0] gadgetfs: connected [ 338.193677][ T189] gadgetfs: disconnected [ 338.683742][ T31] audit: type=1400 audit(1789346499.091:587): avc: denied { create } for pid=8214 comm="syz.4.527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 338.685714][ T31] audit: type=1400 audit(1789346499.091:588): avc: denied { bind } for pid=8214 comm="syz.4.527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 338.732724][ C0] gadgetfs: connected [ 338.737966][ T189] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 338.739009][ T189] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 338.739043][ T189] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.819081][ C0] gadgetfs: configuration #1 [ 338.889484][ T8217] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 338.890257][ T31] audit: type=1400 audit(1789346499.291:589): avc: denied { read } for pid=8214 comm="syz.4.527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 338.890302][ T31] audit: type=1400 audit(1789346499.291:590): avc: denied { getopt } for pid=8214 comm="syz.4.527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 339.953040][ T31] audit: type=1400 audit(1789346500.361:591): avc: denied { getopt } for pid=8223 comm="syz.2.530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 340.019787][ T984] usb 6-1: USB disconnect, device number 3 [ 341.047332][ T8234] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input5 [ 341.075127][ T31] audit: type=1400 audit(1789346501.401:592): avc: denied { connect } for pid=8228 comm="syz.5.533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 341.194067][ T31] audit: type=1400 audit(1789346501.591:593): avc: denied { read } for pid=4953 comm="acpid" name="mouse1" dev="devtmpfs" ino=2971 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 341.440799][ T8235] syz.5.533 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 341.442066][ T31] audit: type=1400 audit(1789346501.811:594): avc: denied { open } for pid=4953 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=2971 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 341.443039][ T31] audit: type=1400 audit(1789346501.821:595): avc: denied { ioctl } for pid=4953 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=2971 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 345.772005][ T25] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 345.922178][ T25] usb 6-1: Using ep0 maxpacket: 32 [ 345.922743][ T25] usb 6-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 345.924315][ T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.964017][ T30] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 345.971165][ T25] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 346.112230][ T30] usb 2-1: Using ep0 maxpacket: 8 [ 346.112878][ T30] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 346.115604][ T30] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 346.115646][ T30] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 346.115669][ T30] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 346.115712][ T30] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 346.115735][ T30] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 346.115771][ T30] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.456142][ T30] usb 2-1: usb_control_msg returned -32 [ 346.456168][ T30] usbtmc 2-1:16.0: can't read capabilities [ 346.519787][ T8208] gadgetfs: suspended from state 3 [ 346.520331][ T30] usb 1-1: USB disconnect, device number 26 [ 346.533950][ T8208] gadgetfs: disconnected [ 346.629780][ T25] gspca_nw80x: reg_r err -71 [ 346.629839][ T25] nw80x 6-1:3.0: probe with driver nw80x failed with error -71 [ 346.631437][ T25] usb 6-1: USB disconnect, device number 4 [ 347.289227][ T8277] gadgetfs: bound to dummy_udc driver [ 348.782320][ T50] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.147971][ T30] usb 2-1: USB disconnect, device number 26 [ 349.806212][ T50] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.697991][ T8299] gadgetfs: bound to dummy_udc driver [ 351.023695][ T30] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 351.583415][ T30] usb 2-1: unable to get BOS descriptor or descriptor too short [ 351.583465][ T30] usb 2-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 351.613369][ T30] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 351.613394][ T30] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 351.613443][ T30] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 351.671018][ T30] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.671046][ T30] usb 2-1: Product: syz [ 351.671060][ T30] usb 2-1: Manufacturer: syz [ 351.671074][ T30] usb 2-1: SerialNumber: syz [ 351.823004][ T50] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.291803][ T8304] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input6 [ 352.292528][ T50] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.469256][ T5616] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 352.484926][ T5616] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 352.531648][ T5616] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 352.535744][ T5616] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 352.537602][ T5616] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 352.993668][ T31] audit: type=1400 audit(1789346513.391:596): avc: denied { link } for pid=8290 comm="syz.1.549" name="file0" dev="fuse" ino=4503599627370496 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 353.089455][ T30] usb 2-1: Can't get UAC3 power state for id 10 [ 353.109297][ T30] usb 2-1: 2:0: failed to get current value for ch 0 (-71) [ 353.115514][ T30] usb 2-1: 2:0: cannot get min/max values for control 2 (id 2) [ 353.115536][ T30] usb 2-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 353.115551][ T30] usb 2-1: [2] FU [Generic Out Playback Volume] ch = 1, val = 0/1/1 [ 353.419446][ T30] usb 2-1: USB disconnect, device number 27 [ 353.574767][ T8323] scsi_dev_info_list_add_str: bad dev info string 'Q' '' '' [ 353.955155][ T31] audit: type=1400 audit(1789346514.361:597): avc: denied { unmount } for pid=5596 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 353.957300][ T5611] udevd[5611]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 353.999759][ T8329] jffs2: notice: (8329) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 354.021299][ T31] audit: type=1400 audit(1789346514.431:598): avc: denied { write } for pid=8327 comm="syz.5.554" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 354.662037][ T5613] Bluetooth: hci1: command tx timeout [ 354.705415][ T8341] net_ratelimit: 147 callbacks suppressed [ 354.705435][ T8341] netlink: zone id is out of range [ 354.705443][ T8341] netlink: zone id is out of range [ 354.705450][ T8341] netlink: zone id is out of range [ 354.705456][ T8341] netlink: zone id is out of range [ 354.705463][ T8341] netlink: zone id is out of range [ 354.705470][ T8341] netlink: zone id is out of range [ 354.705479][ T8341] netlink: zone id is out of range [ 354.705486][ T8341] netlink: zone id is out of range [ 354.705491][ T8341] netlink: zone id is out of range [ 354.705498][ T8341] netlink: zone id is out of range [ 354.932523][ T189] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 355.445175][ T8353] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 355.536726][ T31] audit: type=1400 audit(1789346515.941:599): avc: denied { read } for pid=8346 comm="syz.2.560" dev="sockfs" ino=20375 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 355.770786][ T189] usb 5-1: Using ep0 maxpacket: 32 [ 355.812952][ T189] usb 5-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 355.838637][ T189] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.031634][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 356.050823][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 356.062253][ T50] bond0 (unregistering): Released all slaves [ 356.068188][ T189] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 356.095061][ T31] audit: type=1400 audit(1789346516.501:600): avc: denied { write } for pid=8331 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 356.752126][ T5613] Bluetooth: hci1: command tx timeout [ 356.933655][ T189] gspca_nw80x: reg_r err -110 [ 356.934063][ T189] nw80x 5-1:3.0: probe with driver nw80x failed with error -110 [ 357.764567][ T31] audit: type=1400 audit(1789346518.171:601): avc: denied { write } for pid=8373 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 357.935636][ T9] usb 5-1: USB disconnect, device number 21 [ 358.278135][ T8386] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 358.603027][ T5263] 8021q: adding VLAN 0 to HW filter on device eth5 [ 358.822099][ T5613] Bluetooth: hci1: command tx timeout [ 359.852944][ T8398] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 360.331456][ T31] audit: type=1400 audit(1789346520.731:602): avc: denied { create } for pid=8387 comm="syz.4.565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 360.374673][ T31] audit: type=1400 audit(1789346520.781:603): avc: denied { setopt } for pid=8387 comm="syz.4.565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 360.414393][ T31] audit: type=1400 audit(1789346520.821:604): avc: denied { write } for pid=8387 comm="syz.4.565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 360.421970][ T31] audit: type=1400 audit(1789346520.821:605): avc: denied { name_bind } for pid=8387 comm="syz.4.565" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 360.422009][ T31] audit: type=1400 audit(1789346520.821:606): avc: denied { node_bind } for pid=8387 comm="syz.4.565" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 361.328617][ T5613] Bluetooth: hci1: command tx timeout [ 362.037837][ T984] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 362.184621][ T50] hsr_slave_0: left promiscuous mode [ 362.187111][ T50] hsr_slave_1: left promiscuous mode [ 362.188692][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 362.189314][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 362.197936][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 362.197952][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 362.226703][ T984] usb 5-1: device descriptor read/64, error -71 [ 362.300000][ T50] veth1_macvtap: left promiscuous mode [ 362.300033][ T50] veth0_macvtap: left promiscuous mode [ 362.300112][ T50] veth1_vlan: left promiscuous mode [ 362.300170][ T50] veth0_vlan: left promiscuous mode [ 363.036434][ T8418] gadgetfs: bound to dummy_udc driver [ 363.354615][ T984] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 363.946492][ T50] team0 (unregistering): Port device team_slave_1 removed [ 363.999859][ T50] team0 (unregistering): Port device team_slave_0 removed [ 364.088218][ T31] audit: type=1400 audit(1789346524.491:607): avc: denied { write } for pid=8412 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 364.122907][ T8430] jffs2: notice: (8430) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 364.125120][ T31] audit: type=1400 audit(1789346524.531:608): avc: denied { write } for pid=8426 comm="syz.1.572" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 364.749820][ T31] audit: type=1400 audit(1789346525.151:609): avc: denied { write } for pid=8439 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 364.947029][ T5263] 8021q: adding VLAN 0 to HW filter on device eth6 [ 365.072357][ T984] usb 5-1: device descriptor read/64, error -71 [ 365.183483][ T984] usb usb5-port1: attempt power cycle [ 365.287935][ T8452] fuse: Unknown parameter 'user_i00000000000000000000' [ 365.448223][ T8454] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input7 [ 365.653276][ T984] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 365.695250][ T984] usb 5-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice= 1.00 [ 365.767983][ T984] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 365.768017][ T984] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 365.883886][ T984] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.883917][ T984] usb 5-1: Product: syz [ 365.883980][ T984] usb 5-1: Manufacturer: syz [ 365.884023][ T984] usb 5-1: SerialNumber: syz [ 366.176115][ T984] kalmia 5-1:1.0 (unnamed net_device) (uninitialized): Error sending init packet. Status -90 [ 366.176502][ T984] kalmia 5-1:1.0: probe with driver kalmia failed with error -90 [ 366.627301][ T8472] net_ratelimit: 147 callbacks suppressed [ 366.627321][ T8472] netlink: zone id is out of range [ 366.627329][ T8472] netlink: zone id is out of range [ 366.627335][ T8472] netlink: zone id is out of range [ 366.627342][ T8472] netlink: zone id is out of range [ 366.627349][ T8472] netlink: zone id is out of range [ 366.627355][ T8472] netlink: zone id is out of range [ 366.627365][ T8472] netlink: zone id is out of range [ 366.627371][ T8472] netlink: zone id is out of range [ 366.627378][ T8472] netlink: zone id is out of range [ 366.627384][ T8472] netlink: zone id is out of range [ 366.776926][ T25] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 366.779192][ C1] raw-gadget.1 gadget.2: ignoring, device is not running [ 366.913904][ T25] usb 3-1: device descriptor read/64, error -32 [ 366.926385][ T5600] usb 5-1: USB disconnect, device number 24 [ 366.959668][ T8305] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.961878][ T8305] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.962082][ T8305] bridge_slave_0: entered allmulticast mode [ 366.966246][ T8305] bridge_slave_0: entered promiscuous mode [ 366.970774][ T8305] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.970867][ T8305] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.970944][ T8305] bridge_slave_1: entered allmulticast mode [ 366.972113][ T8305] bridge_slave_1: entered promiscuous mode [ 367.027890][ T8305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 367.030004][ T8305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 367.077277][ T8305] team0: Port device team_slave_0 added [ 367.079465][ T8305] team0: Port device team_slave_1 added [ 367.093224][ T31] audit: type=1400 audit(1789346527.491:610): avc: denied { write } for pid=8453 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 367.142056][ T9] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 367.170001][ T8305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 367.170016][ T8305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 367.170038][ T8305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 367.171404][ T8305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 367.171415][ T8305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 367.171448][ T8305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 367.172018][ T25] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 367.250749][ T31] audit: type=1400 audit(1789346527.651:611): avc: denied { write } for pid=8481 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 367.302207][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 367.303348][ T9] usb 6-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 367.305486][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.345902][ T9] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 367.353136][ T25] usb 3-1: device descriptor read/64, error -71 [ 367.380278][ T8305] hsr_slave_0: entered promiscuous mode [ 367.388608][ T8305] hsr_slave_1: entered promiscuous mode [ 367.391166][ T8305] debugfs: 'hsr0' already exists in 'hsr' [ 367.391224][ T8305] Cannot create hsr debugfs directory [ 367.462620][ T25] usb usb3-port1: attempt power cycle [ 368.757655][ T25] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 368.990162][ T25] usb 3-1: device descriptor read/8, error -71 [ 369.063227][ T9] gspca_nw80x: reg_r err -110 [ 369.063293][ T9] nw80x 6-1:3.0: probe with driver nw80x failed with error -110 [ 369.374866][ T25] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 369.984986][ T25] usb 3-1: device descriptor read/8, error -71 [ 370.094262][ T25] usb usb3-port1: unable to enumerate USB device [ 370.265953][ T5263] 8021q: adding VLAN 0 to HW filter on device eth7 [ 370.438965][ T5334] usb 6-1: USB disconnect, device number 5 [ 370.782093][ T25] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 371.145542][ T8498] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 371.447117][ T25] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 371.464670][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 371.464713][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 371.464871][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.672499][ T25] usb 2-1: config 0 descriptor?? [ 372.986267][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 372.986457][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 373.197235][ T25] usbhid 2-1:0.0: can't add hid device: -71 [ 373.197287][ T25] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 373.228336][ T25] usb 2-1: USB disconnect, device number 28 [ 373.431391][ T8518] netlink: 4 bytes leftover after parsing attributes in process `syz.2.583'. [ 373.431414][ T8518] net_ratelimit: 147 callbacks suppressed [ 373.431426][ T8518] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 373.513962][ T8305] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 373.533940][ T8305] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 373.538623][ T8305] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 373.568982][ T8305] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 373.569831][ T8305] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 373.594786][ T8305] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 373.595192][ T8305] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 373.621560][ T8305] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 373.783517][ T31] audit: type=1400 audit(1789346534.191:612): avc: denied { read } for pid=8535 comm="syz.2.584" name="control" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 373.787433][ T31] audit: type=1400 audit(1789346534.191:613): avc: denied { open } for pid=8535 comm="syz.2.584" path="/121/dev/mapper/control" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 373.799374][ T8537] device-mapper: ioctl: name not supplied when creating device [ 373.816236][ T31] audit: type=1400 audit(1789346534.201:614): avc: denied { ioctl } for pid=8535 comm="syz.2.584" path="/121/dev/mapper/control" dev="devtmpfs" ino=1266 ioctlcmd=0xfd03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 373.836653][ T8305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 373.906974][ T8305] 8021q: adding VLAN 0 to HW filter on device team0 [ 373.938299][ T5813] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.938350][ T5813] bridge0: port 1(bridge_slave_0) entered forwarding state [ 373.949105][ T5813] bridge0: port 2(bridge_slave_1) entered blocking state [ 373.949180][ T5813] bridge0: port 2(bridge_slave_1) entered forwarding state [ 373.967729][ T31] audit: type=1400 audit(1789346534.361:615): avc: denied { write } for pid=8513 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 374.148632][ T8542] fuse: Unknown parameter 'user_id00000000000000000000' [ 374.294470][ T31] audit: type=1400 audit(1789346534.691:616): avc: denied { write } for pid=8545 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 375.343925][ T5600] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 375.449160][ T5263] 8021q: adding VLAN 0 to HW filter on device eth8 [ 375.493820][ T5600] usb 3-1: Using ep0 maxpacket: 32 [ 375.496083][ T5600] usb 3-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 375.496842][ T5600] usb 3-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 375.496866][ T5600] usb 3-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 375.496880][ T5600] usb 3-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 375.496894][ T5600] usb 3-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 375.498468][ T5600] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.498482][ T5600] usb 3-1: Product: syz [ 375.498490][ T5600] usb 3-1: Manufacturer: syz [ 375.498498][ T5600] usb 3-1: SerialNumber: syz [ 375.519009][ C0] imon 3-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 375.614840][ T5600] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/input/input8 [ 375.935982][ T5600] imon 3-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 375.935996][ T5600] (id 0x00) [ 376.140458][ T8561] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input10 [ 376.332049][ T5600] rc_core: IR keymap rc-imon-pad not found [ 376.332067][ T5600] Registered IR keymap rc-empty [ 376.332129][ T5600] imon 3-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 376.332145][ T5600] imon 3-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 376.673761][ T8570] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 376.711522][ T8570] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 376.771432][ T5600] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0 [ 376.773552][ T5600] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0/input9 [ 376.794002][ T5600] imon 3-1:155.0: iMON device (15c2:ffdc, intf0) on usb<3:31> initialized [ 376.863886][ T8571] jffs2: notice: (8571) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 376.871423][ T31] audit: type=1400 audit(1789346537.271:617): avc: denied { write } for pid=8566 comm="syz.5.590" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 378.403696][ T5699] usb 3-1: USB disconnect, device number 31 [ 378.527266][ T8305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 378.938081][ T8596] netlink: zone id is out of range [ 378.938121][ T8596] netlink: zone id is out of range [ 378.938141][ T8596] netlink: zone id is out of range [ 378.938161][ T8596] netlink: zone id is out of range [ 378.938180][ T8596] netlink: zone id is out of range [ 378.938199][ T8596] netlink: zone id is out of range [ 378.938234][ T8596] netlink: zone id is out of range [ 378.938253][ T8596] netlink: zone id is out of range [ 378.938273][ T8596] netlink: zone id is out of range [ 378.938292][ T8596] netlink: zone id is out of range [ 379.399714][ T8601] gadgetfs: bound to dummy_udc driver [ 379.693618][ T5600] usb 1-1: new full-speed USB device number 27 using dummy_hcd [ 379.693823][ C0] gadgetfs: connected [ 379.693937][ T5600] gadgetfs: disconnected [ 380.290681][ C0] gadgetfs: connected [ 380.291440][ T5600] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 380.291715][ T5600] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 380.291744][ T5600] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.325705][ C0] gadgetfs: configuration #1 [ 380.551120][ T8615] fuse: Unknown parameter 'user_id00000000000000000000' [ 381.913935][ T5600] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 381.990748][ T8305] veth0_vlan: entered promiscuous mode [ 382.056288][ T8305] veth1_vlan: entered promiscuous mode [ 382.062040][ T5600] usb 3-1: Using ep0 maxpacket: 16 [ 382.073268][ T5600] usb 3-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice= 0.02 [ 382.089271][ T5600] usb 3-1: config 0 has an invalid interface number: 255 but max is 0 [ 382.089295][ T5600] usb 3-1: config 0 has no interface number 0 [ 382.089319][ T5600] usb 3-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 382.089351][ T5600] usb 3-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 382.089376][ T5600] usb 3-1: config 0 interface 255 has no altsetting 0 [ 382.090733][ T5600] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=3 [ 382.090755][ T5600] usb 3-1: Manufacturer: syz [ 382.090769][ T5600] usb 3-1: SerialNumber: syz [ 382.166735][ T5600] usb 3-1: config 0 descriptor?? [ 382.192522][ T5600] ftdi_sio 3-1:0.255: FTDI USB Serial Device converter detected [ 382.193052][ T5600] usb 3-1: Detected SIO [ 382.198074][ T5600] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 382.216430][ T8305] veth0_macvtap: entered promiscuous mode [ 382.241304][ T8305] veth1_macvtap: entered promiscuous mode [ 382.309093][ T8305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 382.336333][ T8305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 382.401246][ T5600] usb 3-1: USB disconnect, device number 32 [ 382.417223][ T5600] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 382.417640][ T5600] ftdi_sio 3-1:0.255: device disconnected [ 382.595881][ T7895] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 382.595904][ T7895] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 382.602080][ T97] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.602265][ T97] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.602284][ T97] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.602301][ T97] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.733835][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 382.733856][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 384.495817][ T31] audit: type=1400 audit(1789346544.891:618): avc: denied { mount } for pid=8650 comm="syz.2.602" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 385.189730][ T31] audit: type=1400 audit(1789346545.591:619): avc: denied { unmount } for pid=5598 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 386.173061][ T5786] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 386.248379][ T8670] fuse: Unknown parameter 'user_id00000000000000000000' [ 386.252225][ T5334] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 386.301347][ T8600] gadgetfs: suspended from state 3 [ 386.301381][ T8600] gadgetfs: disconnected [ 386.303927][ T9] usb 1-1: USB disconnect, device number 27 [ 386.317777][ T5596] ================================================================== [ 386.317787][ T5596] BUG: KASAN: slab-use-after-free in __mutex_lock+0x15c5/0x1bd0 [ 386.317816][ T5596] Read of size 8 at addr ffff88801fafc858 by task syz-executor/5596 [ 386.317830][ T5596] [ 386.317840][ T5596] CPU: 1 UID: 0 PID: 5596 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 386.317865][ T5596] Tainted: [L]=SOFTLOCKUP [ 386.317871][ T5596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 386.317882][ T5596] Call Trace: [ 386.317888][ T5596] [ 386.317895][ T5596] dump_stack_lvl+0x100/0x190 [ 386.317921][ T5596] print_report+0x13d/0x4b0 [ 386.317946][ T5596] ? __virt_addr_valid+0x239/0x430 [ 386.317965][ T5596] ? __mutex_lock+0x15c5/0x1bd0 [ 386.317987][ T5596] kasan_report+0xdf/0x1c0 [ 386.318010][ T5596] ? __mutex_lock+0x15c5/0x1bd0 [ 386.318035][ T5596] __mutex_lock+0x15c5/0x1bd0 [ 386.318057][ T5596] ? ep_open+0x4c/0x2c0 [ 386.318081][ T5596] ? __pfx_avc_has_perm+0x10/0x10 [ 386.318103][ T5596] ? hook_file_open+0x248/0x8e0 [ 386.318128][ T5596] ? __pfx___mutex_lock+0x10/0x10 [ 386.318153][ T5596] ? __pfx_selinux_file_open+0x10/0x10 [ 386.318181][ T5596] ? ep_open+0x4c/0x2c0 [ 386.318203][ T5596] ep_open+0x4c/0x2c0 [ 386.318227][ T5596] do_dentry_open+0x6ab/0x14d0 [ 386.318244][ T5596] ? __pfx_ep_open+0x10/0x10 [ 386.318269][ T5596] vfs_open+0x82/0x3f0 [ 386.318292][ T5596] path_openat+0x19fa/0x2440 [ 386.318316][ T5596] ? __pfx_path_openat+0x10/0x10 [ 386.318339][ T5596] do_file_open+0x20e/0x430 [ 386.318359][ T5596] ? __pfx_do_file_open+0x10/0x10 [ 386.318386][ T5596] ? _raw_spin_unlock+0x28/0x50 [ 386.318405][ T5596] ? alloc_fd+0x471/0x7a0 [ 386.318428][ T5596] do_sys_openat2+0x10f/0x1e0 [ 386.318450][ T5596] ? __pfx_do_sys_openat2+0x10/0x10 [ 386.318476][ T5596] __x64_sys_openat+0x12d/0x210 [ 386.318499][ T5596] ? __pfx___x64_sys_openat+0x10/0x10 [ 386.318522][ T5596] ? putname+0xb1/0x110 [ 386.318548][ T5596] do_syscall_64+0x123/0x790 [ 386.318571][ T5596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.318589][ T5596] RIP: 0033:0x7f45e695e98e [ 386.318603][ T5596] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 386.318620][ T5596] RSP: 002b:00007fff240d6d98 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 386.318638][ T5596] RAX: ffffffffffffffda RBX: 00005555915a3500 RCX: 00007f45e695e98e [ 386.318650][ T5596] RDX: 0000000000000000 RSI: 00007fff240d6f00 RDI: ffffffffffffff9c [ 386.318660][ T5596] RBP: 00007fff240d6f00 R08: 0000000000000000 R09: 0000000000000000 [ 386.318671][ T5596] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff240d7ff0 [ 386.318682][ T5596] R13: 00007f45e6a3448b R14: 00005555915a34e8 R15: 0000000000000006 [ 386.318700][ T5596] [ 386.318707][ T5596] [ 386.318711][ T5596] Allocated by task 8601: [ 386.318720][ T5596] kasan_save_stack+0x30/0x50 [ 386.318737][ T5596] kasan_save_track+0x14/0x30 [ 386.318754][ T5596] __kasan_kmalloc+0xaa/0xb0 [ 386.318771][ T5596] __kmalloc_cache_noprof+0x2f8/0x6d0 [ 386.318796][ T5596] gadgetfs_bind+0x582/0x890 [ 386.318818][ T5596] gadget_bind_driver+0x28c/0xbf0 [ 386.318835][ T5596] really_probe+0x241/0xa60 [ 386.318852][ T5596] __driver_probe_device+0x210/0x460 [ 386.318870][ T5596] driver_probe_device+0x4a/0x140 [ 386.318888][ T5596] __driver_attach+0x21f/0x5b0 [ 386.318906][ T5596] bus_for_each_dev+0x13e/0x1d0 [ 386.318929][ T5596] bus_add_driver+0x305/0x5b0 [ 386.318943][ T5596] driver_register+0x1e2/0x360 [ 386.318962][ T5596] usb_gadget_register_driver_owner+0x132/0x210 [ 386.318979][ T5596] dev_config+0xdce/0x1610 [ 386.319004][ T5596] vfs_write+0x2aa/0x1050 [ 386.319019][ T5596] ksys_write+0x12a/0x250 [ 386.319034][ T5596] do_syscall_64+0x123/0x790 [ 386.319054][ T5596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.319070][ T5596] [ 386.319074][ T5596] Freed by task 8600: [ 386.319082][ T5596] kasan_save_stack+0x30/0x50 [ 386.319099][ T5596] kasan_save_track+0x14/0x30 [ 386.319116][ T5596] kasan_save_free_info+0x3b/0x70 [ 386.319139][ T5596] __kasan_slab_free+0x5f/0x80 [ 386.319157][ T5596] kfree+0x22b/0x6d0 [ 386.319182][ T5596] put_ep+0x117/0x150 [ 386.319202][ T5596] destroy_ep_files+0x163/0x420 [ 386.319224][ T5596] gadgetfs_unbind+0x139/0x260 [ 386.319246][ T5596] gadget_unbind_driver+0x20c/0x4f0 [ 386.319263][ T5596] device_remove+0xcb/0x180 [ 386.319279][ T5596] device_release_driver_internal+0x44e/0x620 [ 386.319299][ T5596] driver_detach+0xd8/0x1b0 [ 386.319317][ T5596] bus_remove_driver+0x13b/0x2e0 [ 386.319332][ T5596] driver_unregister+0x76/0xb0 [ 386.319352][ T5596] usb_gadget_unregister_driver+0x49/0x70 [ 386.319369][ T5596] dev_release+0x132/0x1b0 [ 386.319391][ T5596] __fput+0x3ff/0xb50 [ 386.319411][ T5596] task_work_run+0x150/0x240 [ 386.319434][ T5596] do_exit+0x951/0x2ae0 [ 386.319453][ T5596] do_group_exit+0xd5/0x2a0 [ 386.319473][ T5596] get_signal+0x1ec7/0x21e0 [ 386.319490][ T5596] arch_do_signal_or_restart+0x91/0x7e0 [ 386.319514][ T5596] irqentry_exit+0x402/0xa10 [ 386.319534][ T5596] asm_exc_page_fault+0x26/0x30 [ 386.319549][ T5596] [ 386.319553][ T5596] The buggy address belongs to the object at ffff88801fafc800 [ 386.319553][ T5596] which belongs to the cache kmalloc-512 of size 512 [ 386.319566][ T5596] The buggy address is located 88 bytes inside of [ 386.319566][ T5596] freed 512-byte region [ffff88801fafc800, ffff88801fafca00) [ 386.319583][ T5596] [ 386.319587][ T5596] The buggy address belongs to the physical page: [ 386.319595][ T5596] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1fafc [ 386.319611][ T5596] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 386.319624][ T5596] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 386.319639][ T5596] page_type: f5(slab) [ 386.319654][ T5596] raw: 00fff00000000040 ffff88801c02fc80 dead000000000100 dead000000000122 [ 386.319668][ T5596] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 386.319684][ T5596] head: 00fff00000000040 ffff88801c02fc80 dead000000000100 dead000000000122 [ 386.319700][ T5596] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 386.319715][ T5596] head: 00fff00000000002 ffffffffffffff01 00000000ffffffff 00000000ffffffff [ 386.319730][ T5596] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 386.319739][ T5596] page dumped because: kasan: bad access detected [ 386.319747][ T5596] page_owner tracks the page as allocated [ 386.319752][ T5596] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 2, tgid 2 (kthreadd), ts 1782608215 [ 386.319779][ T5596] post_alloc_hook+0xfd/0x120 [ 386.319802][ T5596] get_page_from_freelist+0x110d/0x35d0 [ 386.319826][ T5596] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 386.319850][ T5596] alloc_pages_mpol+0x201/0x550 [ 386.319869][ T5596] new_slab+0x407/0x6e0 [ 386.319890][ T5596] ___slab_alloc+0x2a1/0x810 [ 386.319903][ T5596] __kmalloc_flags_noprof+0x470/0x8e0 [ 386.319924][ T5596] __pcs_replace_empty_main+0x3fa/0x650 [ 386.319947][ T5596] __kmalloc_flags_noprof+0x6a9/0x8e0 [ 386.319969][ T5596] __pcs_replace_empty_main+0x3fa/0x650 [ 386.319989][ T5596] kmem_cache_alloc_node_noprof+0x4f2/0x6e0 [ 386.320005][ T5596] copy_process+0x6a2/0x8370 [ 386.320022][ T5596] kernel_clone+0x176/0x9d0 [ 386.320037][ T5596] kernel_thread+0xdb/0x120 [ 386.320054][ T5596] kthreadd+0x498/0x7a0 [ 386.320074][ T5596] ret_from_fork+0x730/0xd60 [ 386.320091][ T5596] page_owner free stack trace missing [ 386.320097][ T5596] [ 386.320101][ T5596] Memory state around the buggy address: [ 386.320109][ T5596] ffff88801fafc700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 386.320121][ T5596] ffff88801fafc780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 386.320133][ T5596] >ffff88801fafc800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 386.320142][ T5596] ^ [ 386.320151][ T5596] ffff88801fafc880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 386.320168][ T5596] ffff88801fafc900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 386.320177][ T5596] ================================================================== [ 386.320306][ T5596] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 387.115289][ T5596] CPU: 1 UID: 0 PID: 5596 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 387.126296][ T5596] Tainted: [L]=SOFTLOCKUP [ 387.130600][ T5596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 387.140632][ T5596] Call Trace: [ 387.143893][ T5596] [ 387.146808][ T5596] dump_stack_lvl+0x100/0x190 [ 387.151476][ T5596] vpanic+0x553/0x970 [ 387.155442][ T5596] ? __pfx_vpanic+0x10/0x10 [ 387.159923][ T5596] ? __mutex_lock+0x15c5/0x1bd0 [ 387.164764][ T5596] panic+0xd1/0xe0 [ 387.168463][ T5596] ? __pfx_panic+0x10/0x10 [ 387.172858][ T5596] ? __mutex_lock+0x15c5/0x1bd0 [ 387.177693][ T5596] ? preempt_schedule_common+0x3c/0xb0 [ 387.183138][ T5596] check_panic_on_warn.cold+0x19/0x34 [ 387.188490][ T5596] end_report.part.0+0x3a/0x90 [ 387.193241][ T5596] kasan_report.cold+0xe/0x18 [ 387.197906][ T5596] ? __mutex_lock+0x15c5/0x1bd0 [ 387.202742][ T5596] __mutex_lock+0x15c5/0x1bd0 [ 387.207408][ T5596] ? ep_open+0x4c/0x2c0 [ 387.211563][ T5596] ? __pfx_avc_has_perm+0x10/0x10 [ 387.216571][ T5596] ? hook_file_open+0x248/0x8e0 [ 387.221408][ T5596] ? __pfx___mutex_lock+0x10/0x10 [ 387.226418][ T5596] ? __pfx_selinux_file_open+0x10/0x10 [ 387.231860][ T5596] ? ep_open+0x4c/0x2c0 [ 387.236007][ T5596] ep_open+0x4c/0x2c0 [ 387.239976][ T5596] do_dentry_open+0x6ab/0x14d0 [ 387.244721][ T5596] ? __pfx_ep_open+0x10/0x10 [ 387.249298][ T5596] vfs_open+0x82/0x3f0 [ 387.253349][ T5596] path_openat+0x19fa/0x2440 [ 387.257923][ T5596] ? __pfx_path_openat+0x10/0x10 [ 387.262849][ T5596] do_file_open+0x20e/0x430 [ 387.267336][ T5596] ? __pfx_do_file_open+0x10/0x10 [ 387.272401][ T5596] ? _raw_spin_unlock+0x28/0x50 [ 387.277232][ T5596] ? alloc_fd+0x471/0x7a0 [ 387.281551][ T5596] do_sys_openat2+0x10f/0x1e0 [ 387.286211][ T5596] ? __pfx_do_sys_openat2+0x10/0x10 [ 387.291396][ T5596] __x64_sys_openat+0x12d/0x210 [ 387.296234][ T5596] ? __pfx___x64_sys_openat+0x10/0x10 [ 387.301595][ T5596] ? putname+0xb1/0x110 [ 387.305736][ T5596] do_syscall_64+0x123/0x790 [ 387.310311][ T5596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.316187][ T5596] RIP: 0033:0x7f45e695e98e [ 387.320580][ T5596] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 387.340165][ T5596] RSP: 002b:00007fff240d6d98 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 387.348556][ T5596] RAX: ffffffffffffffda RBX: 00005555915a3500 RCX: 00007f45e695e98e [ 387.356507][ T5596] RDX: 0000000000000000 RSI: 00007fff240d6f00 RDI: ffffffffffffff9c [ 387.364456][ T5596] RBP: 00007fff240d6f00 R08: 0000000000000000 R09: 0000000000000000 [ 387.372403][ T5596] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff240d7ff0 [ 387.380351][ T5596] R13: 00007f45e6a3448b R14: 00005555915a34e8 R15: 0000000000000006 [ 387.388304][ T5596] [ 387.391500][ T5596] Kernel Offset: disabled [ 387.395794][ T5596] Rebooting in 86400 seconds..