last executing test programs: 7m17.908315763s ago: executing program 1 (id=725): socket(0x1000000000000010, 0x80802, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x141142, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x201, 0xa401) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000000000)={0x2000, 0x0, "ec9fe44d4dbe56a65274d7c727e7e53c1bb714e315eeb406bfdd73835e57efa94b1a0275781c647aa7e3470c6028642b17832b10b386a6f73791011c26a9aa141f406e312295ee620a9a46577b9249b738fe7750bec83bf6ed5b67213fa7d6c0823fd154ed29ed7eff0d26ff199ee1ff379742c3f0b46caa357d70ee438f901d7645c3f87e4b21482b76f2ad8eaac090272081f98fd2e3e5a63e006204df635e731a5bfcf142f4529517454618de595cd179445b4bdbf698b9986356f0ebf7d25a57774ef474f86a3ad24ae9f0bf94b99e6b87de5f79d383d05bb32701daed400785a49788f08caecc9e0c48a3740bbe6e1c1fd400cfdfe756bcb7d08e36655c"}) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) read(r3, &(0x7f00000003c0)=""/84, 0x54) 7m17.669039046s ago: executing program 1 (id=727): socket$inet6(0xa, 0x11, 0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x50) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) chown(&(0x7f00000079c0)='.\x00', 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0x3100, 0x3100, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$nullb(0xffffffffffffff9c, 0x0, 0x84042, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x10, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_TRANSLATE(r7, 0xc018ae85, &(0x7f0000001280)={0x0, 0xdddd0000, 0x2, 0x5, 0x50}) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010300, @local}, @info_reply={0xd, 0x0, 0x0, 0xfffd}}}}}, 0x0) 7m14.905634236s ago: executing program 1 (id=731): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e004300100000000280", 0x2a}], 0x1}, 0x40000) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) r3 = fsopen(&(0x7f0000000000)='devpts\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000280)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\bb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xd7\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) write(r1, 0x0, 0x0) r4 = syz_open_dev$usbmon(&(0x7f0000000240), 0x1ff, 0x2) ioctl$MON_IOCT_RING_SIZE(r4, 0x9204, 0x96fa) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) r5 = gettid() prctl$PR_SCHED_CORE(0x3e, 0x0, r5, 0x2, 0x0) sendto$inet6(r0, &(0x7f0000000080)="b1", 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) write$UHID_SET_REPORT_REPLY(r0, &(0x7f00000007c0)=ANY=[], 0xffe0) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r6, 0xc0105500, 0x0) r7 = syz_open_dev$video(&(0x7f0000000040), 0xa6, 0x80) ioctl$VIDIOC_S_PARM(r7, 0xc0cc5616, &(0x7f0000000080)={0x1, @capture={0x0, 0x0, {0x3, 0x1e}, 0x8001}}) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCDISCONN(r8, 0x7439) 7m11.925185684s ago: executing program 1 (id=737): socket(0x1000000000000010, 0x80802, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x141142, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x201, 0xa401) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000000000)={0x2000, 0x0, "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"}) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) read(r3, &(0x7f00000003c0)=""/84, 0x54) 7m11.142430165s ago: executing program 1 (id=739): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x262) socket$igmp6(0xa, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) pipe(&(0x7f0000000600)) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) openat$selinux_load(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$inet(0x2, 0x3, 0x3ff) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x20008000) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x810}, 0x20000000) 7m6.242108807s ago: executing program 1 (id=744): set_mempolicy(0x1, &(0x7f0000000140)=0x8001, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xffffffffffffffff, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f000001aa40)=""/102400, 0x19000) openat$binfmt_register(0xffffff9c, 0x0, 0x1, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x240, 0x0) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) msync(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x4, 0x800, 0xfffffffffffffff5, 0xfffffffffffff017, 0x3, 0xffffffffffffffff, 0x9, 0x100000001, 0xc, 0x0, 0xa, 0x1, 0x1, 0x27, 0xc09b], 0x1000}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r2 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000001c0), 0x12) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x120) read$FUSE(r3, &(0x7f0000002080)={0x2020}, 0x2020) ioctl$TCFLSH(r0, 0x400455c8, 0x4) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f00000000c0)={0x200, 0x9, {}, {0xee01}, 0x400000, 0x6}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000500)={'bridge0\x00'}) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r6, r5, &(0x7f0000002080)=0x3a, 0x23b) write(r6, 0x0, 0x0) 6m51.030290927s ago: executing program 32 (id=744): set_mempolicy(0x1, &(0x7f0000000140)=0x8001, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xffffffffffffffff, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f000001aa40)=""/102400, 0x19000) openat$binfmt_register(0xffffff9c, 0x0, 0x1, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x240, 0x0) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) msync(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x4, 0x800, 0xfffffffffffffff5, 0xfffffffffffff017, 0x3, 0xffffffffffffffff, 0x9, 0x100000001, 0xc, 0x0, 0xa, 0x1, 0x1, 0x27, 0xc09b], 0x1000}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r2 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000001c0), 0x12) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x120) read$FUSE(r3, &(0x7f0000002080)={0x2020}, 0x2020) ioctl$TCFLSH(r0, 0x400455c8, 0x4) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f00000000c0)={0x200, 0x9, {}, {0xee01}, 0x400000, 0x6}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000500)={'bridge0\x00'}) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r6, r5, &(0x7f0000002080)=0x3a, 0x23b) write(r6, 0x0, 0x0) 15.082159171s ago: executing program 3 (id=2130): symlinkat(&(0x7f0000001040)='./cgroup\x00', 0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00') memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) syz_init_net_socket$x25(0x9, 0x5, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x400, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000040)={0xf0f024}) r2 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r2, 0xc040565f, &(0x7f0000000940)={0xa, 0x0, 0x7, {0x8000, 0x1000, 0x4, 0x86c}}) 13.767728179s ago: executing program 2 (id=2133): bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) fsopen(0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0x8, '\t\x00'}, @local=@item_4={0x3, 0x2, 0x0, "93bf0280"}, @main=@item_4={0x3, 0x0, 0xb, "7488dffc"}]}}, 0x0}, 0x0) r2 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUSAGES(r2, 0xd01c4813, 0x0) ioctl$HIDIOCGUSAGE(r2, 0xc018480b, 0x0) setsockopt$netrom_NETROM_IDLE(0xffffffffffffffff, 0x103, 0x7, 0x0, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x0) 12.623317765s ago: executing program 3 (id=2134): socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) fsopen(0x0, 0x0) openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x2180, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0), 0x60000, 0x0) ioctl$SOUND_MIXER_READ_RECSRC(r2, 0x80044dfe, 0xfffffffffffffffe) 12.622250544s ago: executing program 4 (id=2135): socket$packet(0x11, 0x2, 0x300) socket$inet_mptcp(0x2, 0x1, 0x106) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x707c, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x12a8f, 0xf264, 0x40, 0x0, 0x0) 12.543952945s ago: executing program 0 (id=2136): syz_emit_vhci(&(0x7f0000000500)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x2, 0x1, 0x419}}}, 0x7) readv(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000003c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000024002, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r2, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 11.150513866s ago: executing program 5 (id=2137): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ptrace(0x10, 0x1) 11.147939166s ago: executing program 0 (id=2138): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x0, 0x0, 0x20493859, 0x0, 0x0, 0x0, 0x5, 0xfeedcafe, 0x3, 0x7}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) socket(0x2a, 0x2, 0x0) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xea60}) close(0x3) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x80000) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x54}, 0x1, 0x0, 0x0, 0x4011}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x30, 0x2, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x12, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000390000"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001d0001000000000004086aa42d"], 0x30}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@newlink={0x1b4, 0x10, 0xffffff1f, 0x70bd2e, 0x0, {0x0, 0x0, 0x0, 0x0, 0x821, 0x5}, [@IFLA_AF_SPEC={0x194, 0x1a, 0x0, 0x1, [@AF_MPLS={0x4}, @AF_MPLS={0x4}, @AF_INET={0x20, 0x2, 0x0, 0x1, {0x1c, 0x1, 0x0, 0x1, [{0x8, 0x11}, {0x8, 0x19, 0x0, 0x0, 0x1}, {0x8}]}}, @AF_INET={0x58, 0x2, 0x0, 0x1, {0x54, 0x1, 0x0, 0x1, [{0x8, 0xd, 0x0, 0x0, 0x9}, {0x8, 0x13, 0x0, 0x0, 0x5}, {0x8, 0x1c, 0x0, 0x0, 0x6}, {0x8, 0x6, 0x0, 0x0, 0x5}, {0x8, 0x21, 0x0, 0x0, 0x3}, {0x8, 0x16, 0x0, 0x0, 0x6}, {0x8, 0x20, 0x0, 0x0, 0x3}, {0x8, 0xd, 0x0, 0x0, 0x6}, {0x8, 0x12}, {0x8, 0x1f, 0x0, 0x0, 0x5}]}}, @AF_INET6={0x30, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0xb}, @IFLA_INET6_TOKEN={0x14, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x80}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x4}]}, @AF_INET6={0x38, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0xf3}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x4f}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x8}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x1}, @IFLA_INET6_TOKEN={0x14, 0x7, @dev={0xfe, 0x80, '\x00', 0x43}}]}, @AF_INET={0x50, 0x2, 0x0, 0x1, {0x4c, 0x1, 0x0, 0x1, [{0x8, 0x9, 0x0, 0x0, 0x9}, {0x8, 0x14, 0x0, 0x0, 0x3c62a9d1}, {0x8, 0x4, 0x0, 0x0, 0x8}, {0x8, 0x5, 0x0, 0x0, 0x5}, {0x8, 0x16, 0x0, 0x0, 0x4}, {0x8, 0x13, 0x0, 0x0, 0xf}, {0x8, 0xe, 0x0, 0x0, 0x8001}, {0x8, 0x1e, 0x0, 0x0, 0x2bbab010}, {0x8, 0x1c, 0x0, 0x0, 0x2}]}}, @AF_INET={0x58, 0x2, 0x0, 0x1, {0x54, 0x1, 0x0, 0x1, [{0x8, 0xe, 0x0, 0x0, 0x6}, {0x8, 0x4, 0x0, 0x0, 0xfffffe01}, {0x8, 0x1d, 0x0, 0x0, 0x80}, {0x8, 0x2, 0x0, 0x0, 0x10001}, {0x8, 0x16, 0x0, 0x0, 0xfffffffd}, {0x8, 0x2, 0x0, 0x0, 0x3}, {0x8, 0x4, 0x0, 0x0, 0x8000}, {0x8, 0x21, 0x0, 0x0, 0x8}, {0x8, 0xa, 0x0, 0x0, 0x101}, {0x8, 0x2, 0x0, 0x0, 0x61e}]}}]}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x8041}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, 0x0, 0x200, 0x70bd29, 0x8, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3}, @MPTCP_PM_ATTR_LOC_ID={0x5}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x20040) syz_usb_connect(0x0, 0x43, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000043a5aa40801b96e3b1a7000000010902120001000000000904"], 0x0) 9.96827851s ago: executing program 5 (id=2139): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='net/if_inet6\x00') pread64(r3, &(0x7f0000000180)=""/43, 0xfd8a, 0x3c) 9.112969454s ago: executing program 4 (id=2140): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000100)={0x1d, r4, 0x0, {0x1, 0x0, 0x4}, 0x1}, 0x18) sendmsg$can_j1939(r3, &(0x7f0000002f40)={&(0x7f0000001ec0)={0x1d, r4, 0x1, {0x1, 0xf0, 0x2}, 0xfe}, 0x18, &(0x7f0000002f00)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x80) 9.006852571s ago: executing program 5 (id=2141): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000440)={0x900, 0x0, &(0x7f0000000400)={&(0x7f0000000600)=ANY=[@ANYBLOB="1b815a"], 0x10}}, 0x40408c0) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket(0x25, 0x5, 0x0) connect$bt_l2cap(r3, 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r3, 0x114, 0x7, &(0x7f0000000980)={@ax25={{0x3, @bcast, 0x5}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @null, @bcast, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, {&(0x7f0000000740)=""/195, 0xc3}, 0x0, 0x20}, 0xa0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 8.205220015s ago: executing program 5 (id=2142): socket$nl_route(0x10, 0x3, 0x0) r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r0, 0x0, 0x0) r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) r5 = syz_open_dev$dri(&(0x7f0000000040), 0x1ff, 0x80000) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r4}) ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f0000000080)=0x1) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/cgroup', 0x0, 0x0) fchdir(r6) r7 = open(0x0, 0x0, 0x0) getdents(r7, 0x0, 0x0) r8 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r8, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x9, "c46e9fd1a84b7fefa0bf2cca6beb9363a680b652a86bcf56a1b9f4e6b54cc6beca5462202c484c10ca5386103a5ccbe47b7b9aa6d8d701a3ba6a6c0ce8b978", 0x1}, 0x60) r9 = dup(r8) getpeername$packet(r9, 0x0, 0x0) r10 = openat$cgroup_subtree(r2, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r10, &(0x7f0000000500)=ANY=[@ANYBLOB="3b23d9c18b0d409620db2b72"], 0x6) 8.069707842s ago: executing program 4 (id=2143): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000540)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x24, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000280)={0x0, 0xb}, 0x0, 0x0, 0x0, 0x0}) 8.024588134s ago: executing program 2 (id=2144): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xf, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x7000000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r4, 0x0, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8) 7.091027336s ago: executing program 2 (id=2145): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x0, 0x0, @loopback}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000340)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33cb95d66a1781f31bf07fd2ae874", "62266bd8", "d1b29b99d21d88a2"}, 0x28) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000040c0), 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r3, 0xc004ae02, &(0x7f00000000c0)={0x40000000000000c1}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x5) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000100)=ANY=[]) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x4}]}) msgget$private(0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) 6.907513017s ago: executing program 3 (id=2146): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x262) socket$igmp6(0xa, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) pipe(&(0x7f0000000600)) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) openat$selinux_load(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$selinux_policy(0xffffff9c, 0x0, 0x0, 0x0) socket$inet(0x2, 0x3, 0x3ff) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x20008000) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x810}, 0x20000000) 6.784949702s ago: executing program 0 (id=2147): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r1, 0x6, 0x19, 0x0, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r1, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee3c0cb001829a8681ed391da1a71d8d", 0x63}], 0x1}}], 0x1, 0x20008000) setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "f1a0f9fff9e440b4", "881aae83544dfa6412f91b9057e3f415", "9dca43b6", "9ecb592c6ee49fbd"}, 0x28) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x0, 0x0}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000018c0)={&(0x7f0000001900)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26, 0x0, 0x1, 0xfffffa16}, 0x28) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r2, &(0x7f00000001c0)=ANY=[], 0xff2e) syz_open_pts(r2, 0x0) 6.648866446s ago: executing program 5 (id=2148): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x0, 0x0, 0x20493859, 0x0, 0x0, 0x0, 0x5, 0xfeedcafe, 0x3, 0x7}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) socket(0x2a, 0x2, 0x0) select(0x40, &(0x7f0000000400)={0x9, 0x3, 0x80000000, 0x0, 0x7, 0x201}, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xea60}) close(0x3) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sndpcmc(0x0, 0x0, 0x80000) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x54}, 0x1, 0x0, 0x0, 0x4011}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x30, 0x2, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x12, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000390000"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001d0001000000000004086aa42d"], 0x30}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@newlink={0x1b4, 0x10, 0xffffff1f, 0x70bd2e, 0x0, {0x0, 0x0, 0x0, 0x0, 0x821, 0x5}, [@IFLA_AF_SPEC={0x194, 0x1a, 0x0, 0x1, [@AF_MPLS={0x4}, @AF_MPLS={0x4}, @AF_INET={0x20, 0x2, 0x0, 0x1, {0x1c, 0x1, 0x0, 0x1, [{0x8, 0x11}, {0x8, 0x19, 0x0, 0x0, 0x1}, {0x8}]}}, @AF_INET={0x58, 0x2, 0x0, 0x1, {0x54, 0x1, 0x0, 0x1, [{0x8, 0xd, 0x0, 0x0, 0x9}, {0x8, 0x13, 0x0, 0x0, 0x5}, {0x8, 0x1c, 0x0, 0x0, 0x6}, {0x8, 0x6, 0x0, 0x0, 0x5}, {0x8, 0x21, 0x0, 0x0, 0x3}, {0x8, 0x16, 0x0, 0x0, 0x6}, {0x8, 0x20, 0x0, 0x0, 0x3}, {0x8, 0xd, 0x0, 0x0, 0x6}, {0x8, 0x12}, {0x8, 0x1f, 0x0, 0x0, 0x5}]}}, @AF_INET6={0x30, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0xb}, @IFLA_INET6_TOKEN={0x14, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x80}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x4}]}, @AF_INET6={0x38, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0xf3}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x4f}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x8}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x1}, @IFLA_INET6_TOKEN={0x14, 0x7, @dev={0xfe, 0x80, '\x00', 0x43}}]}, @AF_INET={0x50, 0x2, 0x0, 0x1, {0x4c, 0x1, 0x0, 0x1, [{0x8, 0x9, 0x0, 0x0, 0x9}, {0x8, 0x14, 0x0, 0x0, 0x3c62a9d1}, {0x8, 0x4, 0x0, 0x0, 0x8}, {0x8, 0x5, 0x0, 0x0, 0x5}, {0x8, 0x16, 0x0, 0x0, 0x4}, {0x8, 0x13, 0x0, 0x0, 0xf}, {0x8, 0xe, 0x0, 0x0, 0x8001}, {0x8, 0x1e, 0x0, 0x0, 0x2bbab010}, {0x8, 0x1c, 0x0, 0x0, 0x2}]}}, @AF_INET={0x58, 0x2, 0x0, 0x1, {0x54, 0x1, 0x0, 0x1, [{0x8, 0xe, 0x0, 0x0, 0x6}, {0x8, 0x4, 0x0, 0x0, 0xfffffe01}, {0x8, 0x1d, 0x0, 0x0, 0x80}, {0x8, 0x2, 0x0, 0x0, 0x10001}, {0x8, 0x16, 0x0, 0x0, 0xfffffffd}, {0x8, 0x2, 0x0, 0x0, 0x3}, {0x8, 0x4, 0x0, 0x0, 0x8000}, {0x8, 0x21, 0x0, 0x0, 0x8}, {0x8, 0xa, 0x0, 0x0, 0x101}, {0x8, 0x2, 0x0, 0x0, 0x61e}]}}]}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x8041}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, 0x0, 0x200, 0x70bd29, 0x8, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3}, @MPTCP_PM_ATTR_LOC_ID={0x5}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x20040) syz_usb_connect(0x0, 0x43, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000043a5aa40801b96e3b1a7000000010902120001000000000904"], 0x0) 6.0264462s ago: executing program 2 (id=2149): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000003c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000108500000075000000a40000002300000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='task_rename\x00', r1}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000024002, 0x0) dup(r2) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) 5.398983532s ago: executing program 0 (id=2150): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x7f5f, 0xa6ff, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r4, 0xc0044d08, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) setrlimit(0xb, &(0x7f0000000400)={0xa4, 0x804}) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000100850000008200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xd, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x18}, {0x3, 0x3, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x8, 0xfff8, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPSET_CMD_ADD(r0, 0x0, 0x804) 5.296472602s ago: executing program 3 (id=2151): socket$can_j1939(0x1d, 0x2, 0x7) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040), 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) getdents64(0xffffffffffffffff, &(0x7f0000000300)=""/152, 0x98) r2 = syz_io_uring_setup(0x5c2, &(0x7f00000002c0)={0x0, 0x3594, 0x10, 0x1003, 0x21e}, &(0x7f0000000240)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x10, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x0, 0x3938700}, 0x1, 0x8}) io_uring_enter(r2, 0x6efc, 0x3900, 0xb, 0x0, 0x0) 5.184391497s ago: executing program 2 (id=2152): pipe(&(0x7f00000001c0)) syz_open_procfs$userns(0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) gettid() bind$inet(0xffffffffffffffff, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6e}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) 2.1602021s ago: executing program 4 (id=2153): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1801000000000000000000000000000085000000"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000010000007000000000000"], 0x1c}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000), 0x2801, 0x0) ioctl$SOUND_MIXER_READ_RECMASK(r4, 0x80044dfd, &(0x7f0000000080)) 2.092477419s ago: executing program 0 (id=2154): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20008030) sendmsg$alg(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x28, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_create1(0x80000) connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0xffffec77, @my=0x1}, 0x10) 1.252182402s ago: executing program 4 (id=2155): prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, &(0x7f00000003c0)="61b9f304f0ad23ad31bf3eac2342d85010a91739d26602c076af3a876a93736786c25efd02a071df010f4ceb6cc36dbb349c25126e87b26de16749b267f0af1f33ba7aeeab71c32f35f5740c359a42b9b649bb99a26b43d43ec13d05e344eb3af710d693cf5d220effe78e6af338a5bbe6373effea93fd4a7945e5c3157e4aafa37411b1a45ffd802476684a924c9d2712fcb18461ff", 0x96, 0xffffffffffffffff) r4 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r4, 0x0, 0x0) keyctl$dh_compute(0x17, 0x0, &(0x7f0000000480)=""/181, 0xb5, &(0x7f0000000640)={&(0x7f0000000340)={'blake2s-256-arm\x00'}, &(0x7f0000000540)="a89883442809f5e365644c644a5683365361455b4c530dc1d54c11d2a210ed69def5780109fcd57e7019168b86936c39501e6470e970c765b6e9acbc00144b080d1765464e5b4835c40377e1210a0110d4f1cc89c87fa609bb7db15e38397b497f6c14405115056940eec6c59b893977078bb5c9f9446f7e628072834f03b1a846b8fe198b82d452adf9a9ecf4ca7ccdfbcb0bd5fc0bac7c285260383bdd32e71b22e71715b102cf1c96a3d98e6a1313a25dd6d637a244c6254f996ffbc9273659c0d5bd74727fa056f6b7d9eea6ec4d0c4743ba99a3", 0xd6}) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, 0x0, &(0x7f0000000040)) setsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000040)={0x0, 0x9}, 0x8) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r5, &(0x7f0000000240)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "d9298498abdba7f061bd1ca44c226af5160e961711a07760760beeab11e88509de7f1939e8abff005597c8ef039a5be42200", 0x38}, 0x60) accept4$nfc_llcp(r5, 0x0, 0x0, 0x80000) 1.182128457s ago: executing program 3 (id=2156): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6a) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='rdma.current\x00', 0x275a, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) sendmmsg$sock(r3, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) 261.634531ms ago: executing program 4 (id=2157): socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) 260.862519ms ago: executing program 0 (id=2158): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)=ANY=[], 0x50) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) close_range(r1, r1, 0x2) fsetxattr$security_ima(r1, &(0x7f0000000a40), 0x0, 0x0, 0x3) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x40a700, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r3, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}) socket$inet_udp(0x2, 0x2, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r4, 0xc08c5335, &(0x7f0000000040)={0x3, 0x3, 0x1, 'queue1\x00', 0x4}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x317, 0x1, 0x34, 0x9}, 0x9c) 66.793551ms ago: executing program 3 (id=2159): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x18, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) getpid() r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f0000001640)=0xc, 0x45) sendmmsg$inet(r3, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 38.042173ms ago: executing program 2 (id=2160): openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) accept$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x40042, 0x101) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = syz_io_uring_setup(0x497, &(0x7f0000000180)={0x0, 0x4885, 0x100, 0x4, 0x1d}, &(0x7f0000000340)=0x0, &(0x7f0000000600)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0x0, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r0, 0x0, 0x0, 0x0, 0x40002202, 0x1, {0x1}}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) openat$dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$DMA_BUF_SET_NAME_A(0xffffffffffffffff, 0x40086203, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) 0s ago: executing program 5 (id=2161): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0xfe}]}}}]}, 0x44}}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, 0x0, 0x40054) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) listen(0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[], 0x48) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r6, 0x0, 0x0) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) waitid(0x0, r1, 0x0, 0x8, 0x0) r8 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r7) sendmsg$NLBL_CALIPSO_C_ADD(r7, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000000)={0x24, r8, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0xc840}, 0x20020000) bpf$PROG_LOAD(0x5, 0x0, 0x0) kernel console output (not intermixed with test programs): ig 0 has 1 interface, different from the descriptor's value: 9 [ 705.730732][T12469] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1500'. [ 705.738603][ T9] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 705.755604][ T9] usb 6-1: config 0 interface 0 has no altsetting 0 [ 705.779227][ T2150] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 705.781528][ T9] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 705.802344][ T9] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 705.829358][ T9] usb 6-1: config 0 interface 0 has no altsetting 0 [ 705.845155][ T9] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 705.854385][ T9] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 705.878834][ T9] usb 6-1: config 0 interface 0 has no altsetting 0 [ 705.907173][ T9] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 705.916576][ T5908] usb 4-1: USB disconnect, device number 25 [ 705.923101][ T9] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 705.928820][ T2150] usb 1-1: Using ep0 maxpacket: 16 [ 705.941892][ T9] usb 6-1: config 0 interface 0 has no altsetting 0 [ 705.953412][ T9] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 705.965847][ T9] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 705.966010][ T2150] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 706.003810][ T2150] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 706.014863][ T2150] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 706.033275][ T2150] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 706.033292][ T9] usb 6-1: config 0 interface 0 has no altsetting 0 [ 706.053041][ T2150] usb 1-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 706.063398][ T2150] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 706.097214][ T9] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 706.100974][ T2150] usb 1-1: config 0 descriptor?? [ 706.119482][ T9] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 706.119634][T12462] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 706.135683][ T9] usb 6-1: Product: syz [ 706.141670][ T9] usb 6-1: Manufacturer: syz [ 706.146491][ T9] usb 6-1: SerialNumber: syz [ 706.154321][ T2150] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input32 [ 706.172121][ T9] usb 6-1: config 0 descriptor?? [ 706.216153][ T9] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0 [ 706.228932][ T1206] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 706.392459][ T9] usb 1-1: USB disconnect, device number 23 [ 706.399066][ T1206] usb 3-1: Using ep0 maxpacket: 32 [ 706.450597][ T1206] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 706.481424][ T1206] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 706.518085][ T1206] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 706.533584][ T2150] usb 6-1: USB disconnect, device number 9 [ 706.545606][ T2150] yurex 6-1:0.0: USB YUREX #0 now disconnected [ 706.586132][ T1206] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 706.616200][ T1206] usb 3-1: config 0 descriptor?? [ 706.649992][ T1206] hub 3-1:0.0: USB hub found [ 707.337419][ T1206] hub 3-1:0.0: config failed, hub has too many ports! (err -19) [ 707.649011][T12490] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 707.741800][ T1206] usbhid 3-1:0.0: can't add hid device: -71 [ 707.747861][ T1206] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 707.769450][ T2150] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 707.800496][ T1206] usb 3-1: USB disconnect, device number 33 [ 707.943725][ T2150] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 707.969593][ T2150] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 707.996882][ T2150] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 708.018836][ T5929] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 708.030203][ T2150] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 708.122169][ T2150] usb 1-1: config 0 descriptor?? [ 708.218927][ T5929] usb 4-1: Using ep0 maxpacket: 16 [ 708.226590][ T5929] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 708.252632][ T5929] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 708.270865][ T5929] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 708.282667][T12508] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1517'. [ 708.283162][ T5929] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 708.324793][ T5929] usb 4-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 708.334444][ T5929] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 708.372775][ T5929] usb 4-1: config 0 descriptor?? [ 708.395011][T12498] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 708.424525][ T5929] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input33 [ 708.632750][ T2150] cp2112 0003:10C4:EA90.0009: unknown main item tag 0x0 [ 708.658555][ T2150] cp2112 0003:10C4:EA90.0009: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 708.863859][ T2150] cp2112 0003:10C4:EA90.0009: Part Number: 0x00 Device Version: 0x4D [ 709.082490][ T2150] cp2112 0003:10C4:EA90.0009: error requesting SMBus config [ 709.137088][ T2150] cp2112 0003:10C4:EA90.0009: probe with driver cp2112 failed with error -71 [ 709.138856][ T5929] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 709.150565][ T2150] usb 1-1: USB disconnect, device number 24 [ 709.169320][T11510] usb 4-1: USB disconnect, device number 26 [ 709.187158][T12517] fido_id[12517]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 709.358928][ T6191] wlan1: Trigger new scan to find an IBSS to join [ 709.452556][ T5929] usb 3-1: config 0 has an invalid interface number: 255 but max is 0 [ 709.460770][ T5929] usb 3-1: config 0 has no interface number 0 [ 709.466821][ T5929] usb 3-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 709.478057][ T5929] usb 3-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 709.648951][ T5908] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 709.879046][ T5908] usb 5-1: Using ep0 maxpacket: 8 [ 709.936980][ T5929] usb 3-1: config 0 interface 255 has no altsetting 0 [ 709.944526][ T5908] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 709.949075][ T5929] usb 3-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 709.967006][ T5929] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 709.977602][ T5929] usb 3-1: Product: syz [ 709.982827][ T5929] usb 3-1: Manufacturer: syz [ 709.987619][ T5929] usb 3-1: SerialNumber: syz [ 709.988492][ T5908] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 709.994064][ T5929] usb 3-1: config 0 descriptor?? [ 710.010416][ T5908] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 710.032459][ T5908] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 710.066915][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 710.066928][ T30] audit: type=1400 audit(1737499385.344:1111): avc: denied { ioctl } for pid=12524 comm="syz.3.1524" path="socket:[33886]" dev="sockfs" ino=33886 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 710.098948][ C1] vkms_vblank_simulate: vblank timer overrun [ 710.110682][ T5908] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 710.135142][ T5908] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 710.299223][T12529] ceph: No mds server is up or the cluster is laggy [ 710.585203][ T5908] usb 5-1: GET_CAPABILITIES returned 0 [ 710.679261][ T5908] usbtmc 5-1:16.0: can't read capabilities [ 710.717364][ T5908] usb 3-1: USB disconnect, device number 34 [ 710.775801][ T30] audit: type=1400 audit(1737499386.054:1112): avc: denied { module_request } for pid=12539 comm="syz.3.1529" kmod="netdev-wpan0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 710.797713][ C1] vkms_vblank_simulate: vblank timer overrun [ 710.834876][ T5929] usb 5-1: USB disconnect, device number 32 [ 710.861279][ T30] audit: type=1400 audit(1737499386.144:1113): avc: denied { sys_module } for pid=12539 comm="syz.3.1529" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 710.882387][ C1] vkms_vblank_simulate: vblank timer overrun [ 710.936232][T12547] wg2: entered promiscuous mode [ 710.954812][T12547] wg2: entered allmulticast mode [ 710.993934][ T30] audit: type=1400 audit(1737499386.274:1114): avc: denied { read } for pid=12548 comm="syz.3.1531" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 711.016598][ C1] vkms_vblank_simulate: vblank timer overrun [ 711.037705][ T30] audit: type=1400 audit(1737499386.274:1115): avc: denied { open } for pid=12548 comm="syz.3.1531" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 711.108223][ T30] audit: type=1400 audit(1737499386.314:1116): avc: denied { ioctl } for pid=12548 comm="syz.3.1531" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 711.132833][ C1] vkms_vblank_simulate: vblank timer overrun [ 711.523925][ T30] audit: type=1400 audit(1737499386.794:1117): avc: denied { write } for pid=12570 comm="syz.3.1541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 712.109686][ T1206] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 712.316508][ T1206] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 712.339328][ T30] audit: type=1400 audit(1737499387.614:1118): avc: denied { mounton } for pid=12592 comm="syz.3.1548" path="/302/bus" dev="tmpfs" ino=1637 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 712.350725][T12593] overlayfs: invalid origin (00000000d1d3e81a820eee8a94416592a5356da96db48150eae08457fbc30ece5e7e7e318cb2b4b22122226fe65c239a) [ 712.368879][ T1206] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 712.397396][ T30] audit: type=1400 audit(1737499387.614:1119): avc: denied { unlink } for pid=12592 comm="syz.3.1548" name="#30" dev="tmpfs" ino=1641 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 712.419925][ T1206] usb 3-1: Product: syz [ 712.419944][ T1206] usb 3-1: Manufacturer: syz [ 712.419957][ T1206] usb 3-1: SerialNumber: syz [ 712.434690][ T30] audit: type=1400 audit(1737499387.674:1120): avc: denied { mount } for pid=12592 comm="syz.3.1548" name="/" dev="overlay" ino=1636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 712.485821][ T6188] wlan1: Trigger new scan to find an IBSS to join [ 712.578465][ T1206] usb 3-1: config 0 descriptor?? [ 713.052084][T12590] ceph: No mds server is up or the cluster is laggy [ 713.206448][T12603] loop0: Can't mount, would change RO state [ 713.286893][ T1206] usb 3-1: USB disconnect, device number 35 [ 714.020971][ T9740] wlan1: Creating new IBSS network, BSSID 6a:bf:4f:f5:32:90 [ 714.610394][ T1206] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 714.689301][ T9] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 714.719942][ T5988] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 714.741317][T12640] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1569'. [ 714.823293][ T1206] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 714.838819][ T1206] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 714.859041][ T1206] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 714.899434][ T5988] usb 4-1: Using ep0 maxpacket: 16 [ 714.899486][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 715.101489][ T9] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 715.101893][ T5988] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 715.109951][ T1206] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 715.129682][ T9] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 715.140919][ T1206] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 715.141767][ T5988] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 715.150388][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 715.176872][ T1206] usb 5-1: Product: syz [ 715.194543][ T1206] usb 5-1: Manufacturer: syz [ 715.218947][ T5988] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 715.219860][ T1206] usb 5-1: SerialNumber: syz [ 715.234183][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 715.247177][ T5988] usb 4-1: Product: syz [ 715.257910][ T9] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 715.275804][ T5988] usb 4-1: Manufacturer: syz [ 715.294495][ T5988] usb 4-1: SerialNumber: syz [ 715.295074][ T9] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 715.315206][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 715.365359][ T5988] usb 4-1: config 0 descriptor?? [ 715.390862][ T5988] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 715.405511][ T5988] usb 4-1: Detected FT232R [ 715.494009][ T1206] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 33 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 715.589056][ T9] usb 1-1: usb_control_msg returned -32 [ 715.603411][ T9] usbtmc 1-1:16.0: can't read capabilities [ 715.668936][ T5988] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 716.214965][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 716.214977][ T30] audit: type=1400 audit(1737499391.494:1132): avc: denied { read write } for pid=12625 comm="syz.0.1563" name="lp0" dev="devtmpfs" ino=3205 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 716.281367][ T30] audit: type=1400 audit(1737499391.494:1133): avc: denied { open } for pid=12625 comm="syz.0.1563" path="/dev/usb/lp0" dev="devtmpfs" ino=3205 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 716.309628][ T5988] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 716.329779][ T5988] usb 5-1: USB disconnect, device number 33 [ 716.521737][ T30] audit: type=1400 audit(1737499391.554:1134): avc: denied { ioctl } for pid=12625 comm="syz.0.1563" path="/dev/usb/lp0" dev="devtmpfs" ino=3205 ioctlcmd=0x5b03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 716.567190][ T30] audit: type=1400 audit(1737499391.844:1135): avc: denied { ioctl } for pid=12660 comm="syz.5.1576" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=34207 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 716.728195][ T5908] usb 4-1: USB disconnect, device number 27 [ 716.877362][ T5908] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 716.907667][ T5908] ftdi_sio 4-1:0.0: device disconnected [ 717.168951][T12668] syzkaller1: entered promiscuous mode [ 717.174543][T12668] syzkaller1: entered allmulticast mode [ 717.973942][T12625] usblp0: removed [ 717.981052][ T30] audit: type=1400 audit(1737499393.254:1136): avc: denied { bind } for pid=12672 comm="syz.5.1581" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 718.026087][T11510] usb 1-1: USB disconnect, device number 25 [ 718.928870][ T30] audit: type=1400 audit(1737499393.354:1137): avc: denied { bind } for pid=12674 comm="syz.2.1582" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 718.948332][ T30] audit: type=1400 audit(1737499393.354:1138): avc: denied { name_bind } for pid=12674 comm="syz.2.1582" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 718.970623][ T30] audit: type=1400 audit(1737499393.354:1139): avc: denied { node_bind } for pid=12674 comm="syz.2.1582" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 718.991507][ T30] audit: type=1400 audit(1737499393.354:1140): avc: denied { connect } for pid=12674 comm="syz.2.1582" lport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 719.012250][ T30] audit: type=1400 audit(1737499393.354:1141): avc: denied { name_connect } for pid=12674 comm="syz.2.1582" dest=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 721.846326][ T5988] libceph: connect (1)[c::]:6789 error -101 [ 721.863604][ T5988] libceph: mon0 (1)[c::]:6789 connect error [ 721.869336][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 721.869346][ T30] audit: type=1400 audit(1737499397.154:1150): avc: denied { create } for pid=12726 comm="syz.5.1595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 722.190699][ T5988] libceph: connect (1)[c::]:6789 error -101 [ 722.198059][ T5988] libceph: mon0 (1)[c::]:6789 connect error [ 722.203130][ T30] audit: type=1400 audit(1737499397.154:1151): avc: denied { listen } for pid=12717 comm="syz.4.1596" lport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 722.225381][T12721] ceph: No mds server is up or the cluster is laggy [ 722.609492][ T30] audit: type=1400 audit(1737499397.224:1152): avc: denied { ioctl } for pid=12726 comm="syz.5.1595" path="socket:[34315]" dev="sockfs" ino=34315 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 722.724266][ T30] audit: type=1400 audit(1737499397.224:1153): avc: denied { bind } for pid=12726 comm="syz.5.1595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 723.341376][ T30] audit: type=1400 audit(1737499398.244:1154): avc: denied { mount } for pid=12739 comm="syz.0.1602" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 723.363529][ C1] vkms_vblank_simulate: vblank timer overrun [ 723.392221][ T1206] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 723.419731][T12750] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12750 comm=syz.2.1604 [ 723.548908][ T1206] usb 4-1: Using ep0 maxpacket: 16 [ 723.580227][ T2895] wlan1: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 723.621640][ T1206] usb 4-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice=38.b7 [ 723.635241][ T1206] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 723.646141][ T1206] usb 4-1: Product: syz [ 723.727021][ T2895] wlan1: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 723.750708][ T1206] usb 4-1: Manufacturer: syz [ 723.755312][ T1206] usb 4-1: SerialNumber: syz [ 723.769369][ T5988] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 724.162830][ T1206] usb 4-1: config 0 descriptor?? [ 724.172550][ T1206] hub 4-1:0.0: bad descriptor, ignoring hub [ 724.185834][ T1206] hub 4-1:0.0: probe with driver hub failed with error -5 [ 724.321288][ T5988] usb 3-1: New USB device found, idVendor=1b80, idProduct=e396, bcdDevice=a7.b1 [ 724.330528][ T5988] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 724.340045][ T5988] usb 3-1: config 0 descriptor?? [ 724.348287][ T5988] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 724.355110][ T5988] dvb_usb_af9015 3-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 724.445613][ T2150] usb 1-1: new full-speed USB device number 26 using dummy_hcd [ 724.489858][ T1206] usb 4-1: USB disconnect, device number 28 [ 724.650078][T12767] vxcan1: entered allmulticast mode [ 724.656547][ T1206] usb 3-1: USB disconnect, device number 36 [ 724.659285][ T2150] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 724.688837][ T2150] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 724.704951][ T2150] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 724.727139][ T2150] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 725.143562][ T2150] usb 1-1: usb_control_msg returned -32 [ 725.163517][ T2150] usbtmc 1-1:16.0: can't read capabilities [ 725.488935][ T2150] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 725.639440][ T30] audit: type=1400 audit(1737499400.914:1155): avc: denied { create } for pid=12783 comm="syz.2.1617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 725.701809][ T30] audit: type=1400 audit(1737499400.924:1156): avc: denied { bind } for pid=12783 comm="syz.2.1617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 725.721820][ T30] audit: type=1400 audit(1737499400.924:1157): avc: denied { setopt } for pid=12783 comm="syz.2.1617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 725.823850][ T30] audit: type=1400 audit(1737499400.924:1158): avc: denied { accept } for pid=12783 comm="syz.2.1617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 725.829431][ T2150] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 725.873056][ T2150] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 725.962681][ T1206] usb 5-1: new full-speed USB device number 34 using dummy_hcd [ 726.322324][ T2150] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 726.331567][ T2150] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 726.345780][ T2150] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 726.366414][ T2150] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 726.376406][ T2150] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 726.384696][ T2150] usb 6-1: Product: syz [ 726.389441][ T2150] usb 6-1: Manufacturer: syz [ 726.481478][ T2150] cdc_wdm 6-1:1.0: skipping garbage [ 726.511440][ T2150] cdc_wdm 6-1:1.0: skipping garbage [ 726.528050][ T1206] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 726.530085][ T2150] cdc_wdm 6-1:1.0: cdc-wdm1: USB WDM device [ 726.626474][ T1206] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 726.681977][ T2150] cdc_wdm 6-1:1.0: Unknown control protocol [ 726.725110][ T1206] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 726.734292][ T1206] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 726.744374][ T30] audit: type=1400 audit(1737499402.014:1159): avc: denied { write } for pid=12776 comm="syz.5.1615" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 727.028089][ T1206] usb 5-1: usb_control_msg returned -32 [ 727.036800][ T1206] usbtmc 5-1:16.0: can't read capabilities [ 727.101995][ T2150] usb 1-1: USB disconnect, device number 26 [ 727.296899][ T9] usb 6-1: USB disconnect, device number 10 [ 727.408989][ T1206] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 727.570866][ T1206] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 727.580761][ T1206] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 727.590465][ T1206] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 727.605007][ T1206] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 727.616232][ T1206] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 727.624457][ T1206] usb 3-1: Product: syz [ 727.628649][ T1206] usb 3-1: Manufacturer: syz [ 727.633327][ T5929] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 727.640924][ T1206] usb 3-1: SerialNumber: syz [ 727.788903][ T5929] usb 4-1: Using ep0 maxpacket: 32 [ 727.795429][ T5929] usb 4-1: config 0 interface 0 has no altsetting 0 [ 727.803969][ T5929] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 727.813122][ T5929] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 727.823129][ T5929] usb 4-1: Product: syz [ 727.827356][ T5929] usb 4-1: Manufacturer: syz [ 727.832101][ T5929] usb 4-1: SerialNumber: syz [ 727.843749][ T5929] usb 4-1: config 0 descriptor?? [ 727.878439][ T1206] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 37 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 728.121113][ T1206] usb 3-1: USB disconnect, device number 37 [ 728.134867][ T1206] usblp0: removed [ 728.208861][ T5988] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 728.298585][ T5929] gs_usb 4-1:0.0: Configuring for 1 interfaces [ 728.358884][ T2150] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 728.367765][ T5988] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 728.376411][ T5988] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 728.386538][ T5988] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 728.395606][ T5988] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 728.409484][ T5988] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 728.418525][ T5988] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 728.426780][ T5988] usb 6-1: Product: syz [ 728.432166][ T5988] usb 6-1: Manufacturer: syz [ 728.441430][ T5988] cdc_wdm 6-1:1.0: skipping garbage [ 728.446655][ T5988] cdc_wdm 6-1:1.0: skipping garbage [ 728.453125][ T5988] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 728.459153][ T5988] cdc_wdm 6-1:1.0: Unknown control protocol [ 728.508851][ T2150] usb 1-1: Using ep0 maxpacket: 8 [ 728.515282][ T2150] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 728.524327][ T2150] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 728.534131][ T2150] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 728.543880][ T2150] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 728.553802][ T2150] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 728.566818][ T2150] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 728.575963][ T2150] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 728.622946][ T1206] usb 5-1: USB disconnect, device number 34 [ 728.710472][ T30] audit: type=1400 audit(1737499403.994:1160): avc: denied { read write } for pid=12809 comm="syz.5.1627" name="cdc-wdm0" dev="devtmpfs" ino=3241 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 728.739465][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 728.746214][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 728.753483][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 728.760081][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 728.765068][ T30] audit: type=1400 audit(1737499403.994:1161): avc: denied { open } for pid=12809 comm="syz.5.1627" path="/dev/cdc-wdm0" dev="devtmpfs" ino=3241 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 728.768854][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 728.796540][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 728.802912][ C1] vkms_vblank_simulate: vblank timer overrun [ 728.809111][ T5988] usb 6-1: USB disconnect, device number 11 [ 728.809528][T12810] cdc_wdm 6-1:1.0: Tx URB error: -19 [ 728.815169][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 728.827100][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 728.833145][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 729.011211][ T2150] usb 1-1: GET_CAPABILITIES returned 0 [ 729.036781][T11510] usb 4-1: USB disconnect, device number 29 [ 729.052647][ T2150] usbtmc 1-1:16.0: can't read capabilities [ 729.194454][ T30] audit: type=1400 audit(1737499404.474:1162): avc: denied { read } for pid=5512 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 729.215480][ C1] vkms_vblank_simulate: vblank timer overrun [ 729.304993][ T5988] usb 1-1: USB disconnect, device number 27 [ 729.338337][ T30] audit: type=1400 audit(1737499404.614:1163): avc: denied { name_connect } for pid=12824 comm="syz.2.1634" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 729.406003][ T30] audit: type=1400 audit(1737499404.674:1164): avc: denied { write } for pid=12826 comm="syz.2.1635" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 729.652324][ T5847] Bluetooth: hci2: unexpected cc 0x2003 length: 1 < 9 [ 729.659824][ T5847] Bluetooth: hci2: unexpected event for opcode 0x2003 [ 729.878868][ T5929] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 730.079202][ T5929] usb 4-1: Using ep0 maxpacket: 32 [ 730.131492][ T5929] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 730.186462][ T5929] usb 4-1: config 0 has no interface number 0 [ 730.214671][ T5929] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 730.247087][ T5929] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 730.278784][ T5929] usb 4-1: Product: syz [ 730.287152][ T5929] usb 4-1: Manufacturer: syz [ 730.297297][ T5929] usb 4-1: SerialNumber: syz [ 730.312905][ T5929] usb 4-1: config 0 descriptor?? [ 730.325705][ T5929] smsc95xx v2.0.0 [ 730.546097][ T30] audit: type=1400 audit(1737499405.824:1165): avc: denied { write } for pid=12846 comm="syz.2.1644" name="sg0" dev="devtmpfs" ino=761 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 730.571254][T12850] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1642'. [ 730.604748][T12850] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1642'. [ 730.613685][ T2895] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 730.615517][T12853] sg_write: process 1248 (syz.2.1644) changed security contexts after opening file descriptor, this is not allowed. [ 730.634953][ T30] audit: type=1400 audit(1737499405.824:1166): avc: denied { open } for pid=12846 comm="syz.2.1644" path="/dev/sg0" dev="devtmpfs" ino=761 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 730.634997][ T30] audit: type=1400 audit(1737499405.824:1167): avc: denied { create } for pid=12848 comm="syz.5.1643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 730.635035][ T30] audit: type=1400 audit(1737499405.824:1168): avc: denied { write } for pid=12848 comm="syz.5.1643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 730.635898][ T9740] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 730.636333][ T9740] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 730.679504][ C1] vkms_vblank_simulate: vblank timer overrun [ 730.731526][ T9740] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 731.269127][ T30] audit: type=1400 audit(1737499406.544:1169): avc: denied { read write } for pid=12862 comm="syz.2.1648" name="binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 731.401946][ T5929] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000034: -71 [ 731.419380][ T5929] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 731.439317][ T5929] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 731.499264][ T5929] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 731.513487][ T5929] usb 4-1: USB disconnect, device number 30 [ 731.608940][ T5988] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 731.859168][ T5988] usb 6-1: Using ep0 maxpacket: 8 [ 732.108200][ T5988] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 732.171268][ T5988] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 732.232948][ T5988] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 732.266697][ T5988] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 732.300711][ T5988] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 732.329626][ T5988] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 732.352058][ T5988] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 732.539201][ T5929] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 732.668660][ T5988] usb 6-1: GET_CAPABILITIES returned 0 [ 732.675103][ T5988] usbtmc 6-1:16.0: can't read capabilities [ 732.722804][ T5929] usb 4-1: Using ep0 maxpacket: 8 [ 732.753917][ T5929] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 732.845615][ T5929] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 732.950593][ T5929] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 733.146585][ T5929] usb 4-1: config 0 descriptor?? [ 733.157552][ T5988] usb 6-1: USB disconnect, device number 12 [ 733.199153][ T9] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 733.396842][ T5929] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 733.419329][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 733.427718][ T9] usb 5-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 733.436904][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 733.445224][ T9] usb 5-1: Product: syz [ 733.449690][ T9] usb 5-1: Manufacturer: syz [ 733.454272][ T9] usb 5-1: SerialNumber: syz [ 733.461993][ T9] usb 5-1: config 0 descriptor?? [ 733.471379][ T9] gspca_main: sq930x-2.14.0 probing 2770:930c [ 733.680291][ T5847] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 733.690065][ T5847] Bluetooth: hci2: Injecting HCI hardware error event [ 733.698143][ T51] Bluetooth: hci2: hardware error 0x00 [ 733.735857][T12897] netlink: 'syz.2.1660': attribute type 30 has an invalid length. [ 733.877496][ T5988] usb 4-1: USB disconnect, device number 31 [ 734.139445][ T1206] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 734.332735][ T1206] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 734.344376][ T1206] usb 1-1: config 0 has no interface number 0 [ 734.357717][ T1206] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 734.382155][ T1206] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 734.391617][ T1206] usb 1-1: Product: syz [ 734.395775][ T1206] usb 1-1: Manufacturer: syz [ 734.404143][ T1206] usb 1-1: SerialNumber: syz [ 734.426162][T12912] netlink: 212264 bytes leftover after parsing attributes in process `syz.5.1666'. [ 734.500186][ T1206] usb 1-1: config 0 descriptor?? [ 735.531814][ T1206] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 735.544402][ T1206] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 735.555209][ T1206] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 735.565166][ T9] gspca_sq930x: reg_w 0105 0f00 failed -71 [ 735.769013][ T51] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 735.770047][ T9] sq930x 5-1:0.0: probe with driver sq930x failed with error -71 [ 735.785956][ T1206] usb 1-1: media controller created [ 735.804041][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 735.804054][ T30] audit: type=1400 audit(1737499411.084:1171): avc: denied { mounton } for pid=12923 comm="syz.2.1670" path="mnt:[4026533155]" dev="nsfs" ino=4026533155 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 736.165541][ T9] usb 5-1: USB disconnect, device number 35 [ 736.178255][ T1206] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 736.749255][ T1206] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 736.878985][ T5988] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 737.078956][ T5988] usb 3-1: Using ep0 maxpacket: 8 [ 737.132094][ T5988] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 737.169091][ T9] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 737.181091][ T5988] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 737.192947][ T1206] usb 1-1: USB disconnect, device number 28 [ 737.202750][ T5988] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 737.215192][ T5988] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 737.230339][ T5988] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 737.245851][ T5988] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 737.256151][ T5988] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 737.295015][T12947] netlink: 'syz.5.1678': attribute type 1 has an invalid length. [ 737.303488][T12947] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1678'. [ 737.320290][T12947] netlink: 'syz.5.1678': attribute type 2 has an invalid length. [ 737.335904][T12947] netlink: 'syz.5.1678': attribute type 1 has an invalid length. [ 737.338813][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 737.344813][T12947] netlink: 2 bytes leftover after parsing attributes in process `syz.5.1678'. [ 737.350189][ T9] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 737.369655][ T9] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 737.382241][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 737.392470][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 737.528883][ T5988] usb 3-1: usb_control_msg returned -32 [ 737.534485][ T5988] usbtmc 3-1:16.0: can't read capabilities [ 737.542004][ T9] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 737.594369][ T9] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 737.697631][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 738.047429][T12958] usbtmc 3-1:16.0: usb_control_msg returned -32 [ 738.096622][ T5988] usb 3-1: USB disconnect, device number 38 [ 738.144837][T12960] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12960 comm=syz.5.1681 [ 738.259498][ T9] usb 5-1: GET_CAPABILITIES returned 0 [ 738.265017][ T9] usbtmc 5-1:16.0: can't read capabilities [ 739.045267][T12001] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 739.176414][ T1206] usb 5-1: USB disconnect, device number 36 [ 739.575502][T12001] usb 6-1: New USB device found, idVendor=1b80, idProduct=e396, bcdDevice=a7.b1 [ 739.599132][T12001] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 739.617141][T12001] usb 6-1: config 0 descriptor?? [ 739.657888][T12001] usb 6-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 739.686236][T12001] dvb_usb_af9015 6-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 740.517350][ T30] audit: type=1400 audit(1737499415.794:1172): avc: denied { bind } for pid=12994 comm="syz.0.1691" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 740.538357][ T30] audit: type=1400 audit(1737499415.814:1173): avc: denied { name_bind } for pid=12994 comm="syz.0.1691" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 740.562591][ T30] audit: type=1400 audit(1737499415.814:1174): avc: denied { node_bind } for pid=12994 comm="syz.0.1691" saddr=ff02::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 740.562895][ T1206] usb 6-1: USB disconnect, device number 13 [ 740.599244][ T30] audit: type=1400 audit(1737499415.834:1175): avc: denied { block_suspend } for pid=12994 comm="syz.0.1691" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 740.767594][ T30] audit: type=1400 audit(1737499416.044:1176): avc: denied { mounton } for pid=12980 comm="syz.2.1687" path="/proc/1286/task" dev="proc" ino=35945 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 740.836751][ T30] audit: type=1400 audit(1737499416.044:1177): avc: denied { mount } for pid=12980 comm="syz.2.1687" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 742.782585][ T30] audit: type=1400 audit(1737499418.064:1178): avc: denied { create } for pid=13020 comm="syz.4.1699" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 742.819637][ T30] audit: type=1400 audit(1737499418.094:1179): avc: denied { write } for pid=13020 comm="syz.4.1699" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 743.217717][ T30] audit: type=1400 audit(1737499418.474:1180): avc: denied { create } for pid=13031 comm="syz.5.1701" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 743.280715][ T30] audit: type=1400 audit(1737499418.544:1181): avc: denied { write } for pid=13031 comm="syz.5.1701" path="socket:[36071]" dev="sockfs" ino=36071 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 745.798939][ T2150] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 745.818838][T11510] usb 1-1: new full-speed USB device number 29 using dummy_hcd [ 745.826718][ T5988] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 745.959057][ T2150] usb 5-1: Using ep0 maxpacket: 8 [ 745.970571][ T2150] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 745.985397][ T2150] usb 5-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 746.002603][T11510] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 746.016219][T11510] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 746.029740][ T5988] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 746.048975][ T2150] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 746.057625][ T30] audit: type=1400 audit(1737499421.324:1182): avc: denied { read } for pid=13068 comm="syz.2.1714" name="vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 746.081966][ T5988] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 746.093022][T11510] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 746.102940][ T2150] usb 5-1: config 0 descriptor?? [ 746.108319][ T5988] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 746.129891][T11510] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 746.141749][ T5988] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 746.151375][ T2150] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 746.157684][ T30] audit: type=1400 audit(1737499421.324:1183): avc: denied { open } for pid=13068 comm="syz.2.1714" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 746.271730][ T30] audit: type=1400 audit(1737499421.324:1184): avc: denied { ioctl } for pid=13068 comm="syz.2.1714" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 746.278865][ T24] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 746.310504][T13062] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 746.322105][ T5988] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 746.450011][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 746.457056][ T24] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 9 [ 746.472967][ T24] usb 3-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 746.488645][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 746.498881][T11510] usb 1-1: usb_control_msg returned -32 [ 746.508806][T11510] usbtmc 1-1:16.0: can't read capabilities [ 746.517080][ T24] usb 3-1: Product: syz [ 746.542209][ T24] usb 3-1: Manufacturer: syz [ 746.546829][ T24] usb 3-1: SerialNumber: syz [ 746.574364][ T24] usb 3-1: config 0 descriptor?? [ 746.583947][T13069] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 746.595454][ T24] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input34 [ 746.653900][ T24] usb 4-1: USB disconnect, device number 32 [ 746.724240][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 746.734109][ T6183] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 746.809966][T11510] usb 3-1: USB disconnect, device number 39 [ 746.815873][ C1] usbtouchscreen 3-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 746.861905][T13079] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13079 comm=syz.5.1717 [ 747.108316][ T1206] usb 1-1: USB disconnect, device number 29 [ 747.128871][T12001] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 747.303931][T13083] overlayfs: failed to decode file handle (len=6, type=251, flags=0, err=-22) [ 747.330906][T12001] usb 6-1: New USB device found, idVendor=1b80, idProduct=e396, bcdDevice=a7.b1 [ 747.343076][T12001] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 747.373666][T12001] usb 6-1: config 0 descriptor?? [ 747.415139][T12001] usb 6-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 747.447342][T12001] dvb_usb_af9015 6-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 747.586175][ T2150] usb 5-1: USB disconnect, device number 37 [ 748.301210][T12001] usb 6-1: USB disconnect, device number 14 [ 749.253107][T13109] kvm: MONITOR instruction emulated as NOP! [ 751.209639][T13138] syzkaller1: entered promiscuous mode [ 751.215131][T13138] syzkaller1: entered allmulticast mode [ 751.254528][ T30] audit: type=1400 audit(1737499426.504:1185): avc: denied { create } for pid=13140 comm="syz.2.1736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 751.321831][ T30] audit: type=1400 audit(1737499426.504:1186): avc: denied { ioctl } for pid=13140 comm="syz.2.1736" path="socket:[36388]" dev="sockfs" ino=36388 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 751.357040][ T30] audit: type=1400 audit(1737499426.514:1187): avc: denied { bind } for pid=13140 comm="syz.2.1736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 751.614994][ T5900] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 751.855591][ T5900] usb 3-1: Using ep0 maxpacket: 8 [ 751.883902][ T5900] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 751.913650][ T5900] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 751.948231][ T5900] pvrusb2: Hardware description: Terratec Grabster AV400 [ 751.963298][ T5900] pvrusb2: ********** [ 751.967370][ T5900] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 751.978555][ T5900] pvrusb2: Important functionality might not be entirely working. [ 752.008654][ T5900] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 752.145384][ T5900] pvrusb2: ********** [ 752.200922][ T2336] pvrusb2: Invalid write control endpoint [ 752.389051][T12001] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 752.609017][T12001] usb 1-1: Using ep0 maxpacket: 8 [ 752.660949][T12001] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 752.694385][T13146] pvrusb2: Invalid write control endpoint [ 752.704263][T12001] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 752.727427][ T2336] pvrusb2: Invalid write control endpoint [ 752.738066][T12001] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 752.749695][T12001] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 752.760519][ T2336] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 752.772438][ T5900] usb 3-1: USB disconnect, device number 40 [ 752.783513][T12001] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 752.797653][ T2336] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 752.810153][ T30] audit: type=1400 audit(1737499428.094:1188): avc: denied { write } for pid=13160 comm="syz.4.1743" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 752.812324][ T2336] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 752.839849][T12001] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 752.855718][T12001] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 752.871625][ T2336] pvrusb2: Device being rendered inoperable [ 752.882715][ T2336] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 752.892983][ T2336] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 752.906187][ T2336] pvrusb2: Attached sub-driver cx25840 [ 752.954995][ T2336] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 752.969928][ T2336] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 753.084405][T12001] usb 1-1: usb_control_msg returned -32 [ 753.110514][T12001] usbtmc 1-1:16.0: can't read capabilities [ 753.659303][ T5900] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 753.873523][ T5900] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 753.882859][ T5900] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 753.897907][ T5900] usb 3-1: config 0 descriptor?? [ 754.094814][ T30] audit: type=1400 audit(1737499429.374:1189): avc: denied { create } for pid=13181 comm="syz.5.1749" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 754.136113][ T5988] usb 1-1: USB disconnect, device number 30 [ 754.171754][ T30] audit: type=1400 audit(1737499429.404:1190): avc: denied { read } for pid=13181 comm="syz.5.1749" path="socket:[35725]" dev="sockfs" ino=35725 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 754.548202][ T30] audit: type=1400 audit(1737499429.824:1191): avc: denied { create } for pid=13188 comm="syz.4.1752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 754.690361][ T30] audit: type=1400 audit(1737499429.964:1192): avc: denied { execute_no_trans } for pid=13198 comm="syz.3.1755" path="/346/file1" dev="tmpfs" ino=1875 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 755.810510][ T5900] usb 3-1: Cannot set autoneg [ 755.815293][ T5900] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 755.852419][ T5900] usb 3-1: USB disconnect, device number 41 [ 757.011297][ T30] audit: type=1400 audit(1737499432.284:1193): avc: denied { read } for pid=13228 comm="syz.5.1764" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 757.169685][ T30] audit: type=1400 audit(1737499432.284:1194): avc: denied { open } for pid=13228 comm="syz.5.1764" path="/176/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 757.202330][T12001] libceph: connect (1)[c::]:6789 error -101 [ 757.219002][T12001] libceph: mon0 (1)[c::]:6789 connect error [ 757.308356][T13236] ceph: No mds server is up or the cluster is laggy [ 757.348981][ T5988] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 757.353963][ T30] audit: type=1400 audit(1737499432.284:1195): avc: denied { ioctl } for pid=13228 comm="syz.5.1764" path="/176/file0/file0" dev="fuse" ino=64 ioctlcmd=0x915 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 757.549043][T12001] libceph: connect (1)[c::]:6789 error -101 [ 757.555428][T12001] libceph: mon0 (1)[c::]:6789 connect error [ 757.596537][ T5988] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 758.094976][ T5900] libceph: connect (1)[c::]:6789 error -101 [ 758.101423][ T5988] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 758.112434][ T5988] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 758.129116][ T5988] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 758.129957][ T5900] libceph: mon0 (1)[c::]:6789 connect error [ 758.288425][ T5988] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00 [ 758.344463][ T5988] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 758.390638][ T5988] usb 3-1: config 0 descriptor?? [ 758.518858][ T5900] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 758.598820][T12001] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 758.696214][ T5900] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 758.724114][ T5900] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 758.742089][ T5900] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 758.751436][ T5900] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 758.801170][T12001] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 758.805662][ T5988] keytouch 0003:0926:3333.000A: fixing up Keytouch IEC report descriptor [ 758.818800][T12001] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 758.824167][ T5988] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.000A/input/input35 [ 758.838783][T12001] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 758.860060][T12001] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 758.871253][T12001] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 758.891056][T12001] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 758.913088][T12001] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 758.933307][T12001] usb 1-1: Product: syz [ 758.937491][T12001] usb 1-1: Manufacturer: syz [ 758.965867][ T5900] usb 6-1: usb_control_msg returned -32 [ 758.981519][T12001] cdc_wdm 1-1:1.0: skipping garbage [ 758.988592][ T5900] usbtmc 6-1:16.0: can't read capabilities [ 759.005782][ T5988] keytouch 0003:0926:3333.000A: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 759.007468][T12001] cdc_wdm 1-1:1.0: skipping garbage [ 759.059258][T12001] cdc_wdm 1-1:1.0: cdc-wdm1: USB WDM device [ 759.099592][T12001] cdc_wdm 1-1:1.0: Unknown control protocol [ 759.119124][ T5988] usb 3-1: USB disconnect, device number 42 [ 759.153257][T13264] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13264 comm=syz.3.1774 [ 759.264445][T13263] fido_id[13263]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 759.271535][ T5929] usb 1-1: USB disconnect, device number 31 [ 759.438868][T12001] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 759.697778][T12001] usb 4-1: New USB device found, idVendor=1b80, idProduct=e396, bcdDevice=a7.b1 [ 759.712331][T12001] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 759.727555][T12001] usb 4-1: config 0 descriptor?? [ 759.743632][T12001] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 759.786186][T12001] dvb_usb_af9015 4-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 760.686695][T13282] lo speed is unknown, defaulting to 1000 [ 760.698154][T13282] lo speed is unknown, defaulting to 1000 [ 760.706993][ T30] audit: type=1400 audit(1737499435.984:1196): avc: denied { create } for pid=13281 comm="syz.4.1779" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 760.916555][T12001] usb 4-1: USB disconnect, device number 33 [ 761.301389][T13294] bridge: RTM_NEWNEIGH with invalid ether address [ 761.325933][ T5929] usb 6-1: USB disconnect, device number 15 [ 761.729412][ T5929] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 761.819231][ T5900] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 762.008785][ T5929] usb 6-1: Using ep0 maxpacket: 8 [ 762.017070][ T5929] usb 6-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 762.028806][ T5929] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 762.036837][ T5929] usb 6-1: Product: syz [ 762.041442][ T5929] usb 6-1: Manufacturer: syz [ 762.046026][ T5929] usb 6-1: SerialNumber: syz [ 762.053332][ T5929] usb 6-1: config 0 descriptor?? [ 762.081400][ T5900] usb 5-1: Using ep0 maxpacket: 8 [ 762.092608][ T5900] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 762.101215][ T5900] usb 5-1: config 0 has no interface number 0 [ 762.107840][ T5900] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 762.148586][ T5900] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 762.158364][ T5900] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 762.179849][ T5900] usb 5-1: config 0 descriptor?? [ 762.193074][ T5900] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 762.313415][ T5929] usb 6-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 763.530657][ T2150] usb 5-1: USB disconnect, device number 38 [ 764.184710][ T5929] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 764.775312][ T5929] dvbdev: DVB: registering new adapter (Terratec H7) [ 764.782138][ T5929] usb 6-1: media controller created [ 764.787653][ T5929] usb read operation failed. (-71) [ 764.795639][ T5929] dvb_usb_az6007 6-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 764.808165][ T5929] usb 6-1: USB disconnect, device number 16 [ 765.625596][ T30] audit: type=1400 audit(1737499440.904:1197): avc: denied { setopt } for pid=13373 comm="syz.2.1810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 765.626285][T13374] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1810'. [ 765.702018][ T30] audit: type=1400 audit(1737499440.904:1198): avc: denied { create } for pid=13373 comm="syz.2.1810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 765.755446][ T30] audit: type=1400 audit(1737499440.904:1199): avc: denied { ioctl } for pid=13373 comm="syz.2.1810" path="socket:[37279]" dev="sockfs" ino=37279 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 765.832119][ T30] audit: type=1400 audit(1737499440.904:1200): avc: denied { write } for pid=13373 comm="syz.2.1810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 766.028979][T13381] lo speed is unknown, defaulting to 1000 [ 766.074944][ T30] audit: type=1400 audit(1737499440.944:1201): avc: denied { create } for pid=13375 comm="syz.4.1811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 766.384592][ T30] audit: type=1400 audit(1737499440.944:1202): avc: denied { bind } for pid=13375 comm="syz.4.1811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 766.690582][ T30] audit: type=1400 audit(1737499440.944:1203): avc: denied { listen } for pid=13375 comm="syz.4.1811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 766.781350][ T30] audit: type=1400 audit(1737499440.944:1204): avc: denied { connect } for pid=13375 comm="syz.4.1811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 766.801167][ T30] audit: type=1400 audit(1737499440.954:1205): avc: denied { setopt } for pid=13375 comm="syz.4.1811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 766.820882][ T30] audit: type=1400 audit(1737499440.954:1206): avc: denied { write } for pid=13375 comm="syz.4.1811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 766.997804][T13390] kvm: pic: non byte read [ 767.042807][T13390] kvm: pic: non byte read [ 767.048091][T13390] kvm: pic: level sensitive irq not supported [ 767.048168][T13390] kvm: pic: non byte read [ 767.059063][T13390] kvm: pic: level sensitive irq not supported [ 767.059119][T13390] kvm: pic: non byte read [ 767.070084][T13390] kvm: pic: level sensitive irq not supported [ 767.070139][T13390] kvm: pic: non byte read [ 767.081132][T13390] kvm: pic: level sensitive irq not supported [ 767.081186][T13390] kvm: pic: non byte read [ 767.108247][T13390] kvm: pic: level sensitive irq not supported [ 767.108302][T13390] kvm: pic: non byte read [ 767.253967][T13403] syzkaller1: entered promiscuous mode [ 767.259590][T13403] syzkaller1: entered allmulticast mode [ 767.269858][T13390] kvm: pic: level sensitive irq not supported [ 767.269914][T13390] kvm: pic: non byte read [ 767.432701][T13390] kvm: pic: level sensitive irq not supported [ 767.432761][T13390] kvm: pic: non byte read [ 767.451092][T13390] kvm: pic: level sensitive irq not supported [ 767.451151][T13390] kvm: pic: non byte read [ 767.888115][T13408] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 767.995177][T13413] ceph: No mds server is up or the cluster is laggy [ 770.157886][T13454] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13454 comm=syz.2.1833 [ 770.773984][T13458] vxcan1: left allmulticast mode [ 770.789198][ T5929] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 770.862035][T13458] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 770.874511][T13458] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 770.909088][T13458] vlan1: left promiscuous mode [ 770.913931][T13458] vlan1: left allmulticast mode [ 770.918908][T13458] veth0_vlan: left allmulticast mode [ 770.956614][T13458] ip6erspan0: left promiscuous mode [ 770.964006][T13458] macvlan2: left promiscuous mode [ 770.971453][ T5929] usb 3-1: New USB device found, idVendor=1b80, idProduct=e396, bcdDevice=a7.b1 [ 770.982501][T11510] lo speed is unknown, defaulting to 1000 [ 770.988449][ T9740] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 770.990292][ T5929] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 771.005360][T11510] 3yz0: Port: 1 Link DOWN [ 771.015301][ T5929] usb 3-1: config 0 descriptor?? [ 771.021240][ T9740] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 771.022510][ T5900] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 771.044322][ T5929] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 771.051687][ T9740] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 771.060278][ T5929] dvb_usb_af9015 3-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 771.064839][ T9740] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 771.080563][T12001] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 771.210139][ T5900] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 771.221256][ T5900] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 771.231494][ T5900] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 771.242065][ T5900] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 771.248898][T11510] usb 3-1: USB disconnect, device number 43 [ 771.251445][T12001] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 771.269124][ T5900] usb 1-1: config 0 descriptor?? [ 771.283667][T12001] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 771.296831][T12001] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 771.306249][T12001] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 771.319077][ T6026] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 771.326886][T12001] usb 5-1: config 0 descriptor?? [ 771.334839][T12001] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 771.480425][ T6026] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 771.490639][ T6026] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 771.500333][ T6026] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 771.509538][ T5900] usbhid 1-1:0.0: can't add hid device: -71 [ 771.515453][ T5900] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 771.524710][ T6026] usb 6-1: config 0 descriptor?? [ 771.532368][ T6026] pwc: Askey VC010 type 2 USB webcam detected. [ 771.541062][ T5900] usb 1-1: USB disconnect, device number 32 [ 772.044135][ T6026] pwc: recv_control_msg error -32 req 02 val 2b00 [ 772.573234][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 772.573255][ T30] audit: type=1400 audit(1737499447.844:1216): avc: denied { create } for pid=13486 comm="syz.0.1842" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 772.696382][ T30] audit: type=1400 audit(1737499447.924:1217): avc: denied { read } for pid=13486 comm="syz.0.1842" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 772.794670][ T6026] pwc: recv_control_msg error -32 req 02 val 2700 [ 772.801697][ T6026] pwc: recv_control_msg error -32 req 02 val 2c00 [ 772.808633][ T6026] pwc: recv_control_msg error -32 req 04 val 1000 [ 772.815862][ T6026] pwc: recv_control_msg error -32 req 04 val 1300 [ 772.822813][ T6026] pwc: recv_control_msg error -32 req 04 val 1400 [ 772.836728][ T6026] pwc: recv_control_msg error -32 req 02 val 2000 [ 772.864742][T13491] binder: BINDER_SET_CONTEXT_MGR already set [ 772.870847][T13491] binder: 13490:13491 ioctl 4018620d 200000000040 returned -16 [ 772.872439][ T30] audit: type=1400 audit(1737499448.144:1218): avc: denied { ioctl } for pid=13490 comm="syz.0.1843" path="/dev/binderfs/binder0" dev="binder" ino=10 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 772.904257][ T30] audit: type=1400 audit(1737499448.144:1219): avc: denied { set_context_mgr } for pid=13490 comm="syz.0.1843" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 772.925090][ T30] audit: type=1400 audit(1737499448.144:1220): avc: denied { map } for pid=13490 comm="syz.0.1843" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 772.981864][ T30] audit: type=1400 audit(1737499448.264:1221): avc: denied { write } for pid=13494 comm="syz.0.1845" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 773.005713][ T30] audit: type=1400 audit(1737499448.264:1222): avc: denied { nlmsg_write } for pid=13494 comm="syz.0.1845" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 773.026374][ C1] vkms_vblank_simulate: vblank timer overrun [ 773.045797][ T6026] pwc: recv_control_msg error -71 req 04 val 1500 [ 773.057595][ T6026] pwc: recv_control_msg error -71 req 02 val 2500 [ 773.073673][ T6026] pwc: recv_control_msg error -71 req 02 val 2400 [ 773.080603][ T6026] pwc: recv_control_msg error -71 req 02 val 2600 [ 773.087336][ T6026] pwc: recv_control_msg error -71 req 02 val 2900 [ 773.094694][ T6026] pwc: recv_control_msg error -71 req 02 val 2800 [ 773.102273][ T6026] pwc: recv_control_msg error -71 req 04 val 1100 [ 773.111060][ T6026] pwc: recv_control_msg error -71 req 04 val 1200 [ 773.119726][ T6026] pwc: Registered as video103. [ 773.126049][ T6026] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input36 [ 773.158174][ T6026] usb 6-1: USB disconnect, device number 17 [ 773.280868][ T30] audit: type=1400 audit(1737499448.564:1223): avc: denied { link } for pid=13500 comm="syz.0.1847" name="#3a" dev="tmpfs" ino=2002 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 773.386453][T13504] netlink: 'syz.0.1848': attribute type 6 has an invalid length. [ 773.900470][ T1206] usb 5-1: USB disconnect, device number 39 [ 774.804128][ T30] audit: type=1400 audit(1737499450.084:1224): avc: denied { write } for pid=13523 comm="syz.4.1854" name="event3" dev="devtmpfs" ino=975 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 774.827430][ C1] vkms_vblank_simulate: vblank timer overrun [ 774.924923][ T30] audit: type=1400 audit(1737499450.204:1225): avc: denied { connect } for pid=13527 comm="syz.5.1856" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 774.924977][T13528] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1856'. [ 775.018912][T11510] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 775.101266][ T2150] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 775.168904][T11510] usb 4-1: Using ep0 maxpacket: 16 [ 775.180051][T11510] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 775.261475][T11510] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 775.288921][ T2150] usb 5-1: Using ep0 maxpacket: 16 [ 775.332835][T13537] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1857'. [ 775.333133][ T2150] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 775.341966][T13537] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1857'. [ 775.353202][ T2150] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 775.374219][ T2150] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 775.389878][T11510] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 775.499406][T11510] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 775.588817][T11510] usb 4-1: Product: syz [ 775.593259][ T2150] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 775.603158][T11510] usb 4-1: Manufacturer: syz [ 775.608023][T11510] usb 4-1: SerialNumber: syz [ 775.612928][ T2150] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 775.649955][T11510] usb 4-1: config 0 descriptor?? [ 775.677137][T11510] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 775.689943][T11510] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 775.701895][ T2150] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 775.725858][ T2150] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 775.758102][T13537] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1857'. [ 775.771566][T13537] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1857'. [ 775.800091][ T2150] usb 5-1: Manufacturer: syz [ 775.807005][ T2150] usb 5-1: config 0 descriptor?? [ 775.977725][T13537] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1857'. [ 776.006744][T13537] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1857'. [ 776.118790][ T2150] rc_core: IR keymap rc-hauppauge not found [ 776.128226][ T2150] Registered IR keymap rc-empty [ 776.137459][ T2150] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 776.187444][ T2150] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 776.258628][ T2150] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 776.297312][T11510] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 776.313021][T11510] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 776.323607][ T2150] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input37 [ 776.379403][ T2150] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 776.401686][ T2150] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 776.430500][ T2150] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 776.490827][ T2150] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 776.539589][ T2150] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 776.588887][ T2150] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 776.631240][ T2150] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 776.638614][T13559] kvm: pic: single mode not supported [ 776.638692][T13559] kvm: pic: level sensitive irq not supported [ 776.678862][ T2150] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 776.710617][ T2150] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 776.738898][ T2150] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 776.870179][ T2150] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 776.879734][ T2150] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 776.915911][ T2150] usb 5-1: USB disconnect, device number 40 [ 777.052043][T11510] em28xx 4-1:0.0: Unknown AC97 audio processor detected! [ 777.598985][ T5988] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 777.613707][T11510] em28xx 4-1:0.0: couldn't setup AC97 register 2 [ 777.629501][T11510] em28xx 4-1:0.0: couldn't setup AC97 register 4 [ 777.644804][T11510] em28xx 4-1:0.0: couldn't setup AC97 register 6 [ 777.652913][T11510] em28xx 4-1:0.0: couldn't setup AC97 register 54 [ 777.660703][T11510] em28xx 4-1:0.0: couldn't setup AC97 register 56 [ 777.677676][T11510] usb 4-1: USB disconnect, device number 34 [ 777.761466][ T5988] usb 6-1: Using ep0 maxpacket: 16 [ 777.775023][ T5988] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 777.792426][ T5988] usb 6-1: config 0 has no interface number 0 [ 777.821223][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 777.821241][ T30] audit: type=1400 audit(1737499453.084:1229): avc: denied { create } for pid=13570 comm="syz.4.1867" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 777.851931][ T5988] usb 6-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 777.861118][ T5988] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 777.869449][ T5988] usb 6-1: Product: syz [ 777.873818][ T5988] usb 6-1: Manufacturer: syz [ 777.878470][ T5988] usb 6-1: SerialNumber: syz [ 777.897183][ T5988] usb 6-1: config 0 descriptor?? [ 777.909924][ T5988] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 778.447488][T13578] syzkaller0: entered promiscuous mode [ 778.454601][T13578] syzkaller0: entered allmulticast mode [ 778.488554][ T30] audit: type=1400 audit(1737499453.764:1230): avc: denied { relabelfrom } for pid=13577 comm="syz.3.1869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 778.725187][ T6191] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 778.862793][ T30] audit: type=1400 audit(1737499453.794:1231): avc: denied { relabelto } for pid=13577 comm="syz.3.1869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 778.892124][ T30] audit: type=1400 audit(1737499453.864:1232): avc: denied { getopt } for pid=13579 comm="syz.4.1870" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 779.815775][ T5988] gspca_spca1528: reg_r err -71 [ 779.821079][ T5988] spca1528 6-1:0.1: probe with driver spca1528 failed with error -71 [ 779.838006][ T5988] usb 6-1: USB disconnect, device number 18 [ 780.691286][ T30] audit: type=1400 audit(1737499455.974:1233): avc: denied { ioctl } for pid=13611 comm="syz.5.1880" path="socket:[38869]" dev="sockfs" ino=38869 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 780.762433][ T30] audit: type=1400 audit(1737499456.004:1234): avc: denied { write } for pid=13611 comm="syz.5.1880" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 781.030411][ T1206] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 781.209721][ T1206] usb 6-1: Using ep0 maxpacket: 16 [ 781.217067][ T1206] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 781.228986][ T1206] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 781.238089][ T1206] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 781.246488][ T1206] usb 6-1: Product: syz [ 781.250724][ T1206] usb 6-1: Manufacturer: syz [ 781.255354][ T1206] usb 6-1: SerialNumber: syz [ 781.275185][ T1206] usb 6-1: config 0 descriptor?? [ 781.294755][ T1206] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 781.308231][ T1206] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 781.428646][ T30] audit: type=1400 audit(1737499456.704:1235): avc: denied { read write } for pid=13619 comm="syz.4.1883" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 781.453406][ T30] audit: type=1400 audit(1737499456.704:1236): avc: denied { open } for pid=13619 comm="syz.4.1883" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 781.909216][ T1206] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 782.336976][ T30] audit: type=1400 audit(1737499457.604:1237): avc: denied { mount } for pid=13636 comm="syz.4.1888" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 782.487740][T13645] netlink: 'syz.3.1891': attribute type 6 has an invalid length. [ 782.892976][ T1206] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 782.934862][ T1206] em28xx 6-1:0.0: board has no eeprom [ 783.485880][ T30] audit: type=1400 audit(1737499458.764:1238): avc: denied { unmount } for pid=5845 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 783.671097][T13660] lo speed is unknown, defaulting to 1000 [ 783.682861][T13660] lo speed is unknown, defaulting to 1000 [ 783.805414][T13665] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13665 comm=syz.4.1895 [ 783.818063][ T30] audit: type=1400 audit(1737499459.084:1239): avc: denied { add_name } for pid=13667 comm="syz.0.1898" name=E91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 783.890593][ T30] audit: type=1400 audit(1737499459.084:1240): avc: denied { create } for pid=13667 comm="syz.0.1898" name=E91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 783.941375][ T30] audit: type=1400 audit(1737499459.084:1241): avc: denied { associate } for pid=13667 comm="syz.0.1898" name=E91F7189591E9233614B scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 783.964230][ C0] vkms_vblank_simulate: vblank timer overrun [ 784.105989][T13672] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1899'. [ 784.189486][ T1206] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 784.280254][ T1206] em28xx 6-1:0.0: dvb set to bulk mode. [ 784.288597][T12001] em28xx 6-1:0.0: Binding DVB extension [ 784.299452][ T1206] usb 6-1: USB disconnect, device number 19 [ 784.308605][ T24] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 784.336719][ T1206] em28xx 6-1:0.0: Disconnecting em28xx [ 784.428616][ T30] audit: type=1400 audit(1737499459.694:1242): avc: denied { read write } for pid=13674 comm="syz.2.1900" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 784.449843][ C0] vkms_vblank_simulate: vblank timer overrun [ 784.478211][T12001] em28xx 6-1:0.0: Registering input extension [ 784.485751][ T30] audit: type=1400 audit(1737499459.694:1243): avc: denied { open } for pid=13674 comm="syz.2.1900" path="/387/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 784.509432][ T1206] em28xx 6-1:0.0: Closing input extension [ 784.527328][ T24] usb 5-1: New USB device found, idVendor=1b80, idProduct=e396, bcdDevice=a7.b1 [ 784.536934][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 784.546534][ T1206] em28xx 6-1:0.0: Freeing device [ 784.606555][ T24] usb 5-1: config 0 descriptor?? [ 784.626243][ T24] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 784.984554][ T24] dvb_usb_af9015 5-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 784.994043][ T30] audit: type=1400 audit(1737499460.234:1244): avc: denied { create } for pid=13676 comm="syz.2.1901" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 785.076945][ T30] audit: type=1400 audit(1737499460.244:1245): avc: denied { ioctl } for pid=13676 comm="syz.2.1901" path="socket:[39038]" dev="sockfs" ino=39038 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 785.365989][ T30] audit: type=1326 audit(1737499460.644:1246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13659 comm="syz.3.1896" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1dc9b8eb69 code=0x0 [ 785.469073][ T1206] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 785.660457][ T1206] usb 6-1: Using ep0 maxpacket: 32 [ 785.690977][ T1206] usb 6-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 785.700270][ T1206] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 785.787076][T12001] usb 5-1: USB disconnect, device number 41 [ 785.801087][ T1206] usb 6-1: Product: syz [ 785.809999][ T30] audit: type=1326 audit(1737499461.094:1247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13686 comm="syz.0.1904" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f536758eb69 code=0x0 [ 785.815473][ T1206] usb 6-1: Manufacturer: syz [ 785.889121][ T1206] usb 6-1: SerialNumber: syz [ 785.912841][ T1206] usb 6-1: config 0 descriptor?? [ 785.926121][ T1206] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 786.314122][T13701] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13701 comm=syz.3.1908 [ 786.592346][ T24] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 786.604831][T13714] binder_alloc: 13713: binder_alloc_buf, no vma [ 786.700336][T13715] kvm: pic: non byte write [ 786.775834][ T24] usb 4-1: New USB device found, idVendor=1b80, idProduct=e396, bcdDevice=a7.b1 [ 786.787238][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 786.797931][ T24] usb 4-1: config 0 descriptor?? [ 786.813864][ T24] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 786.824331][ T24] dvb_usb_af9015 4-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 787.035485][ T24] usb 4-1: USB disconnect, device number 35 [ 788.395029][ T1206] gspca_stk1135: reg_w 0xf err -71 [ 788.401225][ T1206] gspca_stk1135: serial bus timeout: status=0x00 [ 788.407525][ T1206] gspca_stk1135: Sensor write failed [ 788.412841][ T1206] gspca_stk1135: serial bus timeout: status=0x00 [ 788.428757][ T1206] gspca_stk1135: Sensor write failed [ 788.448818][ T1206] gspca_stk1135: serial bus timeout: status=0x00 [ 788.619604][ T1206] gspca_stk1135: Sensor read failed [ 788.630145][ T1206] gspca_stk1135: serial bus timeout: status=0x00 [ 788.778774][ T1206] gspca_stk1135: Sensor read failed [ 788.784666][ T1206] gspca_stk1135: Detected sensor type unknown (0x0) [ 788.792060][ T1206] gspca_stk1135: serial bus timeout: status=0x00 [ 788.798429][ T1206] gspca_stk1135: Sensor read failed [ 788.884528][ T1206] gspca_stk1135: serial bus timeout: status=0x00 [ 788.891216][ T1206] gspca_stk1135: Sensor read failed [ 788.896499][ T1206] gspca_stk1135: serial bus timeout: status=0x00 [ 788.928278][ T1206] gspca_stk1135: Sensor write failed [ 788.943138][ T1206] gspca_stk1135: serial bus timeout: status=0x00 [ 789.386106][ T1206] gspca_stk1135: Sensor write failed [ 789.398407][ T1206] stk1135 6-1:0.0: probe with driver stk1135 failed with error -71 [ 789.451130][ T1206] usb 6-1: USB disconnect, device number 20 [ 790.320464][T13755] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13755 comm=syz.5.1923 [ 790.423014][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 790.423027][ T30] audit: type=1400 audit(1737499465.654:1255): avc: denied { create } for pid=13756 comm="syz.0.1924" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 790.454813][ T30] audit: type=1400 audit(1737499465.654:1256): avc: denied { connect } for pid=13756 comm="syz.0.1924" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 790.674358][T13768] kvm: pic: non byte write [ 790.748816][ T24] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 790.974267][ T24] usb 6-1: New USB device found, idVendor=1b80, idProduct=e396, bcdDevice=a7.b1 [ 791.013512][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 791.043733][T12001] libceph: connect (1)[c::]:6789 error -101 [ 791.058613][T12001] libceph: mon0 (1)[c::]:6789 connect error [ 791.072283][ T24] usb 6-1: config 0 descriptor?? [ 791.133793][T13771] ceph: No mds server is up or the cluster is laggy [ 791.327485][T12001] libceph: connect (1)[c::]:6789 error -101 [ 791.333493][T12001] libceph: mon0 (1)[c::]:6789 connect error [ 791.407239][ T24] usb 6-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 791.478609][ T24] dvb_usb_af9015 6-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 791.713658][T13784] hub 2-0:1.0: USB hub found [ 791.730011][T13784] hub 2-0:1.0: 1 port detected [ 791.751596][ T30] audit: type=1400 audit(1737499467.034:1257): avc: denied { create } for pid=13785 comm="syz.2.1932" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 791.821315][T13788] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13788 comm=syz.4.1931 [ 791.923982][ T1206] usb 6-1: USB disconnect, device number 21 [ 792.108856][ T2150] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 792.218766][ T24] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 792.280177][ T2150] usb 5-1: New USB device found, idVendor=1b80, idProduct=e396, bcdDevice=a7.b1 [ 792.290717][ T2150] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 792.320820][ T2150] usb 5-1: config 0 descriptor?? [ 792.345340][ T2150] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 792.358021][ T2150] dvb_usb_af9015 5-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 792.480448][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 792.491813][ T24] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 792.938340][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 792.948398][ T5988] usb 5-1: USB disconnect, device number 42 [ 792.987831][ T24] usb 3-1: config 0 descriptor?? [ 793.248083][ T24] usbhid 3-1:0.0: can't add hid device: -71 [ 793.254282][ T24] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 793.285949][ T24] usb 3-1: USB disconnect, device number 44 [ 793.383367][ T2150] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 793.688799][ T2150] usb 6-1: Using ep0 maxpacket: 32 [ 793.701532][ T2150] usb 6-1: config 0 has an invalid interface number: 89 but max is 0 [ 793.712245][ T2150] usb 6-1: config 0 has no interface number 0 [ 793.718341][ T2150] usb 6-1: config 0 interface 89 has no altsetting 0 [ 793.735279][ T2150] usb 6-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 793.744957][ T2150] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 793.757047][ T2150] usb 6-1: Product: syz [ 793.762449][ T2150] usb 6-1: Manufacturer: syz [ 793.855005][ T24] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 793.855508][ T30] audit: type=1400 audit(1737499469.034:1258): avc: denied { sqpoll } for pid=13814 comm="syz.4.1941" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 793.865561][ T2150] usb 6-1: SerialNumber: syz [ 793.925139][ T2150] usb 6-1: config 0 descriptor?? [ 793.946383][ T30] audit: type=1400 audit(1737499469.054:1259): avc: denied { read } for pid=13811 comm="syz.0.1940" path="socket:[39344]" dev="sockfs" ino=39344 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 793.953372][ T2150] em28xx 6-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 794.141141][ T2150] em28xx 6-1:0.89: Video interface 89 found: bulk [ 794.740622][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 794.789139][ T24] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 795.044149][ T30] audit: type=1400 audit(1737499470.324:1260): avc: denied { mount } for pid=13823 comm="syz.4.1943" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 795.147385][ T24] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 795.193093][ T2150] em28xx 6-1:0.89: unknown em28xx chip ID (0) [ 795.630360][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 796.214320][ T24] usb 3-1: config 0 descriptor?? [ 796.219980][ T24] usb 3-1: can't set config #0, error -71 [ 796.226744][ T24] usb 3-1: USB disconnect, device number 45 [ 796.408854][ T1206] usb 5-1: new full-speed USB device number 43 using dummy_hcd [ 796.430913][ T30] audit: type=1400 audit(1737499471.714:1261): avc: denied { read write } for pid=13844 comm="syz.2.1950" name="mouse0" dev="devtmpfs" ino=974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 796.433782][T12001] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=12001 comm=kworker/0:1 [ 796.454645][ C1] vkms_vblank_simulate: vblank timer overrun [ 796.454904][ T2150] em28xx 6-1:0.89: write to i2c device at 0xa0 failed with unknown error (status=1) [ 796.454946][ T2150] em28xx 6-1:0.89: failed to read eeprom (err=-5) [ 796.493464][ T30] audit: type=1400 audit(1737499471.714:1262): avc: denied { open } for pid=13844 comm="syz.2.1950" path="/dev/input/mouse0" dev="devtmpfs" ino=974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 796.524541][ T2150] em28xx 6-1:0.89: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5] [ 796.537869][T13845] 9pnet: p9_errstr2errno: server reported unknown error 184467440737 [ 796.584335][ T1206] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 796.601582][ T1206] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 796.645239][ T1206] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 796.676274][ T1206] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 796.811531][ T2150] em28xx 6-1:0.89: Identified as Terratec Grabby (card=67) [ 796.822402][ T2150] em28xx 6-1:0.89: analog set to bulk mode. [ 796.828303][T11510] em28xx 6-1:0.89: Registering V4L2 extension [ 797.295111][ T2150] usb 6-1: USB disconnect, device number 22 [ 797.301212][ T1206] usb 5-1: GET_CAPABILITIES returned 0 [ 797.318190][ T1206] usbtmc 5-1:16.0: can't read capabilities [ 797.326228][ T30] audit: type=1400 audit(1737499472.594:1263): avc: denied { create } for pid=13836 comm="syz.4.1947" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 797.327454][T12001] libceph: connect (1)[c::]:6789 error -101 [ 797.412319][ T2150] em28xx 6-1:0.89: Disconnecting em28xx [ 797.413250][T13851] ceph: No mds server is up or the cluster is laggy [ 797.755236][T11510] em28xx 6-1:0.89: Config register raw data: 0xffffffed [ 797.780924][T13848] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 797.782214][T12001] libceph: mon0 (1)[c::]:6789 connect error [ 797.798150][T11510] em28xx 6-1:0.89: AC97 chip type couldn't be determined [ 797.815031][T11510] em28xx 6-1:0.89: No AC97 audio processor [ 797.824573][T12001] usb 5-1: USB disconnect, device number 43 [ 797.873049][T11510] usb 6-1: Decoder not found [ 797.883814][T11510] em28xx 6-1:0.89: failed to create media graph [ 797.906080][T11510] em28xx 6-1:0.89: V4L2 device video103 deregistered [ 797.929579][T11510] em28xx 6-1:0.89: Registering snapshot button... [ 797.943617][T11510] input: em28xx snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.89/input/input39 [ 797.965801][T11510] em28xx 6-1:0.89: Remote control support is not available for this card. [ 797.982025][ T2150] em28xx 6-1:0.89: Closing input extension [ 797.990250][ T2150] em28xx 6-1:0.89: Deregistering snapshot button [ 798.018943][ T30] audit: type=1400 audit(1737499473.254:1264): avc: denied { map } for pid=13862 comm="syz.3.1954" path="socket:[39416]" dev="sockfs" ino=39416 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 798.042321][ C1] vkms_vblank_simulate: vblank timer overrun [ 798.064905][ T30] audit: type=1400 audit(1737499473.254:1265): avc: denied { read } for pid=13862 comm="syz.3.1954" path="socket:[39416]" dev="sockfs" ino=39416 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 798.137483][ T2150] em28xx 6-1:0.89: Freeing device [ 799.096239][ T30] audit: type=1400 audit(1737499474.364:1266): avc: denied { write } for pid=13877 comm="syz.2.1958" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 799.117603][ T30] audit: type=1400 audit(1737499474.374:1267): avc: denied { read } for pid=13877 comm="syz.2.1958" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 799.441867][ T2150] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 799.799097][ T2150] usb 6-1: config 0 has no interfaces? [ 799.806462][ T2150] usb 6-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 799.847411][ T2150] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 799.895153][ T2150] usb 6-1: config 0 descriptor?? [ 800.479191][T13901] ceph: No mds server is up or the cluster is laggy [ 800.960653][ T30] audit: type=1400 audit(1737499476.244:1268): avc: denied { bind } for pid=13883 comm="syz.4.1960" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 801.013296][ T30] audit: type=1400 audit(1737499476.244:1269): avc: denied { listen } for pid=13883 comm="syz.4.1960" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 801.050263][ T30] audit: type=1400 audit(1737499476.244:1270): avc: denied { accept } for pid=13883 comm="syz.4.1960" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 801.337485][T13916] ceph: No mds server is up or the cluster is laggy [ 801.584015][ T5988] usb 6-1: USB disconnect, device number 23 [ 802.279956][ T30] audit: type=1804 audit(1737499477.554:1271): pid=13932 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.4.1974" name="/newroot/421/file1" dev="fuse" ino=1 res=1 errno=0 [ 802.321365][ T30] audit: type=1800 audit(1737499477.564:1272): pid=13932 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.1974" name="/" dev="fuse" ino=1 res=0 errno=0 [ 802.365698][ T30] audit: type=1800 audit(1737499477.564:1273): pid=13932 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.1974" name="/" dev="fuse" ino=1 res=0 errno=0 [ 802.396941][ T30] audit: type=1400 audit(1737499477.624:1274): avc: denied { read } for pid=13936 comm="syz.5.1975" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 802.439351][ T30] audit: type=1400 audit(1737499477.654:1275): avc: denied { map } for pid=13936 comm="syz.5.1975" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 802.785105][ T30] audit: type=1400 audit(1737499478.024:1276): avc: denied { write } for pid=13936 comm="syz.5.1975" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 803.158076][T12001] libceph: connect (1)[c::]:6789 error -101 [ 803.183893][T12001] libceph: mon0 (1)[c::]:6789 connect error [ 803.431982][T13949] ceph: No mds server is up or the cluster is laggy [ 803.688990][T12001] libceph: connect (1)[c::]:6789 error -101 [ 803.695273][T12001] libceph: mon0 (1)[c::]:6789 connect error [ 804.186714][ T30] audit: type=1400 audit(1737499479.064:1277): avc: denied { create } for pid=13956 comm="syz.3.1979" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 804.206281][ C1] vkms_vblank_simulate: vblank timer overrun [ 804.278579][ T30] audit: type=1400 audit(1737499479.074:1278): avc: denied { setopt } for pid=13956 comm="syz.3.1979" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 804.355313][ T30] audit: type=1400 audit(1737499479.634:1279): avc: denied { mounton } for pid=13960 comm="syz.0.1981" path="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 804.413395][T13956] delete_channel: no stack [ 805.804663][ T30] audit: type=1400 audit(1737499480.984:1280): avc: denied { ioctl } for pid=13974 comm="syz.5.1985" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 805.834229][T13978] /dev/nullb0: Can't open blockdev [ 807.438215][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 807.438231][ T30] audit: type=1804 audit(1737499482.714:1283): pid=13992 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.4.1988" name="/newroot/424/file1" dev="fuse" ino=1 res=1 errno=0 [ 808.169370][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.999767][T14024] binder: BINDER_SET_CONTEXT_MGR already set [ 809.005790][T14024] binder: 14021:14024 ioctl 4018620d 200000000040 returned -16 [ 810.348867][T12001] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 810.510406][T12001] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 810.537251][T12001] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 810.574243][T12001] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 810.693388][T12001] usb 4-1: config 0 descriptor?? [ 810.707017][T12001] pwc: Askey VC010 type 2 USB webcam detected. [ 810.725606][ T9740] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 810.887111][T14048] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2005'. [ 810.897747][T14048] bridge_slave_1: left allmulticast mode [ 810.903661][T14048] bridge_slave_1: left promiscuous mode [ 810.913221][T14048] bridge0: port 2(bridge_slave_1) entered disabled state [ 810.961055][ T30] audit: type=1400 audit(1737499486.104:1284): avc: denied { read write } for pid=14046 comm="syz.5.2005" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 811.099720][T14048] bridge_slave_0: left allmulticast mode [ 811.106036][T14048] bridge_slave_0: left promiscuous mode [ 811.115084][ T30] audit: type=1400 audit(1737499486.114:1285): avc: denied { open } for pid=14046 comm="syz.5.2005" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 811.125216][T14048] bridge0: port 1(bridge_slave_0) entered disabled state [ 811.179461][T12001] pwc: recv_control_msg error -32 req 02 val 2b00 [ 811.187402][T12001] pwc: recv_control_msg error -32 req 02 val 2700 [ 811.194893][T12001] pwc: recv_control_msg error -32 req 02 val 2c00 [ 811.210195][T12001] pwc: recv_control_msg error -32 req 04 val 1000 [ 811.221046][T12001] pwc: recv_control_msg error -32 req 04 val 1300 [ 811.242164][T12001] pwc: recv_control_msg error -32 req 04 val 1400 [ 811.243540][ T30] audit: type=1400 audit(1737499486.134:1286): avc: denied { ioctl } for pid=14046 comm="syz.5.2005" path="/dev/rtc0" dev="devtmpfs" ino=921 ioctlcmd=0x7003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 811.274116][T12001] pwc: recv_control_msg error -32 req 02 val 2000 [ 811.281750][T12001] pwc: recv_control_msg error -32 req 02 val 2100 [ 811.289304][T12001] pwc: recv_control_msg error -32 req 04 val 1500 [ 811.512262][T12001] pwc: recv_control_msg error -71 req 02 val 2400 [ 811.528282][T12001] pwc: recv_control_msg error -71 req 02 val 2600 [ 811.596162][T12001] pwc: recv_control_msg error -71 req 02 val 2900 [ 811.626121][T12001] pwc: recv_control_msg error -71 req 02 val 2800 [ 811.658636][T12001] pwc: recv_control_msg error -71 req 04 val 1100 [ 811.677595][T12001] pwc: recv_control_msg error -71 req 04 val 1200 [ 811.739271][T12001] pwc: Registered as video103. [ 811.762668][T12001] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input40 [ 811.799121][T12001] usb 4-1: USB disconnect, device number 36 [ 812.651948][T14071] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 813.121287][T12001] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 813.377297][T12001] usb 5-1: Using ep0 maxpacket: 8 [ 813.386189][T12001] usb 5-1: config 0 has an invalid interface number: 33 but max is 1 [ 813.395244][T12001] usb 5-1: config 0 has no interface number 1 [ 813.412572][T12001] usb 5-1: config 0 interface 33 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 813.426239][T12001] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 247 [ 813.441490][T12001] usb 5-1: New USB device found, idVendor=2040, idProduct=2950, bcdDevice=85.f1 [ 813.912772][T12001] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 813.922820][T12001] usb 5-1: Product: syz [ 813.927018][T12001] usb 5-1: Manufacturer: syz [ 813.932413][T12001] usb 5-1: SerialNumber: syz [ 813.941272][T12001] usb 5-1: config 0 descriptor?? [ 813.953575][T12001] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 814.200991][T14068] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 814.235412][T14068] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 814.360046][T14086] hub 2-0:1.0: USB hub found [ 814.365919][T14086] hub 2-0:1.0: 1 port detected [ 814.622222][ T2336] pvrusb2: Invalid read control endpoint [ 814.635913][T12001] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 814.661325][T12001] usb 5-1: USB disconnect, device number 44 [ 814.694785][ T2336] usb 5-1: Direct firmware load for v4l-pvrusb2-29xxx-01.fw failed with error -2 [ 814.727190][ T30] audit: type=1400 audit(1737499490.004:1287): avc: denied { firmware_load } for pid=2336 comm="pvrusb2-context" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 814.727207][ T2336] usb 5-1: Falling back to sysfs fallback for: v4l-pvrusb2-29xxx-01.fw [ 816.058184][T14111] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14111 comm=syz.0.2022 [ 816.458795][ T6026] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 817.181617][ T6026] usb 1-1: New USB device found, idVendor=1b80, idProduct=e396, bcdDevice=a7.b1 [ 817.253176][ T6026] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 817.283139][ T6026] usb 1-1: config 0 descriptor?? [ 817.291266][ T6026] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 817.297873][ T6026] dvb_usb_af9015 1-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 817.575267][ T6026] usb 1-1: USB disconnect, device number 33 [ 819.896822][ T30] audit: type=1400 audit(1737499495.174:1288): avc: denied { connect } for pid=14141 comm="syz.5.2031" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 820.721324][ T30] audit: type=1400 audit(1737499495.444:1289): avc: denied { bind } for pid=14141 comm="syz.5.2031" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 821.068046][ T30] audit: type=1400 audit(1737499495.444:1290): avc: denied { write } for pid=14141 comm="syz.5.2031" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 821.087974][ T30] audit: type=1400 audit(1737499496.214:1291): avc: denied { read } for pid=14141 comm="syz.5.2031" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 821.655085][ T30] audit: type=1400 audit(1737499496.934:1292): avc: denied { watch watch_reads } for pid=14169 comm="syz.3.2039" path="pipe:[4646]" dev="pipefs" ino=4646 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 821.682601][ C0] vkms_vblank_simulate: vblank timer overrun [ 821.831239][ T2150] libceph: connect (1)[c::]:6789 error -101 [ 821.839139][ T2150] libceph: mon0 (1)[c::]:6789 connect error [ 822.038758][T14174] ceph: No mds server is up or the cluster is laggy [ 822.102268][ T2150] libceph: connect (1)[c::]:6789 error -101 [ 822.110151][ T2150] libceph: mon0 (1)[c::]:6789 connect error [ 823.354427][ T30] audit: type=1400 audit(1737499498.634:1293): avc: denied { create } for pid=14194 comm="syz.2.2046" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 823.728831][ T30] audit: type=1400 audit(1737499498.634:1294): avc: denied { listen } for pid=14194 comm="syz.2.2046" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 824.211528][ T5900] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 824.468763][ T5900] usb 1-1: Using ep0 maxpacket: 16 [ 824.475102][ T5900] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 824.497210][ T5900] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 824.528134][ T5900] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 824.549852][ T5900] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 824.568785][ T5900] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 824.586552][ T5900] usb 1-1: Product: syz [ 824.593121][ T5900] usb 1-1: Manufacturer: syz [ 824.597728][ T5900] usb 1-1: SerialNumber: syz [ 824.723253][T14214] block nbd5: NBD_DISCONNECT [ 824.739840][T14214] block nbd5: Disconnected due to user request. [ 824.763920][T14214] block nbd5: shutting down sockets [ 824.864141][ T30] audit: type=1400 audit(1737499500.134:1295): avc: denied { mounton } for pid=14202 comm="syz.0.2048" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 824.893101][ T5900] usb 1-1: 0:2 : does not exist [ 824.959626][ T30] audit: type=1400 audit(1737499500.234:1296): avc: denied { create } for pid=14212 comm="syz.3.2052" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 824.979108][ C0] vkms_vblank_simulate: vblank timer overrun [ 825.185615][ T5900] usb 1-1: USB disconnect, device number 34 [ 825.308799][ T30] audit: type=1400 audit(1737499500.234:1297): avc: denied { ioctl } for pid=14212 comm="syz.3.2052" path="socket:[41537]" dev="sockfs" ino=41537 ioctlcmd=0x89eb scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 825.489271][ T5853] udevd[5853]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 826.446620][ T30] audit: type=1400 audit(1737499501.724:1298): avc: denied { ioctl } for pid=14226 comm="syz.3.2055" path="socket:[42066]" dev="sockfs" ino=42066 ioctlcmd=0x52c8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 827.323097][ T30] audit: type=1400 audit(1737499502.584:1299): avc: denied { mount } for pid=14230 comm="syz.2.2058" name="/" dev="autofs" ino=41592 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 827.347108][ T30] audit: type=1400 audit(1737499502.584:1300): avc: denied { read } for pid=14230 comm="syz.2.2058" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 827.789410][ T30] audit: type=1400 audit(1737499502.584:1301): avc: denied { open } for pid=14230 comm="syz.2.2058" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 827.813379][ T30] audit: type=1400 audit(1737499502.594:1302): avc: denied { ioctl } for pid=14230 comm="syz.2.2058" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9379 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 827.978555][ T30] audit: type=1400 audit(1737499503.254:1303): avc: denied { read append } for pid=14242 comm="syz.3.2061" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 828.087847][ T30] audit: type=1400 audit(1737499503.254:1304): avc: denied { open } for pid=14242 comm="syz.3.2061" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 828.694165][ T30] audit: type=1400 audit(1737499503.294:1305): avc: denied { map } for pid=14242 comm="syz.3.2061" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 829.556133][T14259] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2064'. [ 831.216928][T14274] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 833.811254][ T2150] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 833.832997][ T2150] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 834.940069][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 834.940084][ T30] audit: type=1400 audit(1737499510.214:1308): avc: denied { map } for pid=14304 comm="syz.3.2077" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 835.243984][ T6026] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 836.121763][ T6026] usb 3-1: Using ep0 maxpacket: 16 [ 836.154931][ T6026] usb 3-1: config 0 has no interfaces? [ 836.174337][ T6026] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 836.183531][ T6026] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 836.201737][ T6026] usb 3-1: Product: syz [ 836.209136][ T6026] usb 3-1: Manufacturer: syz [ 836.218537][ T6026] usb 3-1: SerialNumber: syz [ 836.230424][ T6026] usb 3-1: config 0 descriptor?? [ 836.698769][ T30] audit: type=1400 audit(1737499511.964:1309): avc: denied { setopt } for pid=14330 comm="syz.0.2085" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 836.809241][T14337] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2086'. [ 837.231685][T14342] netlink: 1304 bytes leftover after parsing attributes in process `syz.4.2087'. [ 841.318723][ T30] audit: type=1400 audit(1737499516.154:1310): avc: denied { read } for pid=14365 comm="syz.0.2094" lport=50699 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 841.377616][ T5988] usb 3-1: USB disconnect, device number 46 [ 842.363136][ T30] audit: type=1400 audit(1737499517.544:1311): avc: denied { bind } for pid=14389 comm="syz.0.2100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 842.754652][ T13] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 844.092265][ T30] audit: type=1400 audit(1737499518.974:1312): avc: denied { setopt } for pid=14411 comm="syz.3.2105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 844.204098][ T1206] libceph: connect (1)[c::]:6789 error -101 [ 844.216518][ T1206] libceph: mon0 (1)[c::]:6789 connect error [ 844.394636][T14416] ceph: No mds server is up or the cluster is laggy [ 844.858773][ T1206] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 846.051603][ T1206] usb 4-1: Using ep0 maxpacket: 32 [ 846.053783][T14435] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 846.067622][T14435] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 846.079163][T14435] overlayfs: missing 'lowerdir' [ 846.203962][ T1206] usb 4-1: config 0 has an invalid interface number: 136 but max is 0 [ 846.212188][ T1206] usb 4-1: config 0 has no interface number 0 [ 846.227977][ T1206] usb 4-1: config 0 interface 136 altsetting 0 has an endpoint descriptor with address 0xAD, changing to 0x8D [ 846.278285][ T1206] usb 4-1: config 0 interface 136 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 846.290963][ T1206] usb 4-1: config 0 interface 136 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 0 [ 846.301287][ T1206] usb 4-1: config 0 interface 136 altsetting 0 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 846.315776][ T1206] usb 4-1: config 0 interface 136 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 846.336585][ T1206] usb 4-1: New USB device found, idVendor=0763, idProduct=1021, bcdDevice=8e.c0 [ 846.346752][ T1206] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 846.357589][ T1206] usb 4-1: config 0 descriptor?? [ 846.373368][ T1206] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 846.611419][ T30] audit: type=1400 audit(1737499521.754:1313): avc: denied { execute } for pid=14440 comm="syz.0.2113" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 847.060696][T14425] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 847.068124][T14425] batadv0: mtu less than device minimum [ 847.092465][T14425] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 847.103507][T14425] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 847.114347][T14425] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 847.125155][T14425] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 847.136413][T14425] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 847.147686][T14425] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 847.158498][T14425] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 847.169291][T14425] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 847.180115][T14425] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 847.280540][T14425] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 847.486294][T14425] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 847.575827][T14449] ceph: No mds server is up or the cluster is laggy [ 847.590095][ T9618] udevd[9618]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.136/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 847.611334][ T1206] snd-usb-audio 4-1:0.136: probe with driver snd-usb-audio failed with error -2 [ 847.637714][ T5988] libceph: connect (1)[c::]:6789 error -101 [ 847.651306][T14425] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 847.662297][T14425] batman_adv: batadv0: Interface deactivated: dummy0 [ 847.671698][T14425] batman_adv: batadv0: Removing interface: dummy0 [ 847.681538][ T5988] libceph: mon0 (1)[c::]:6789 connect error [ 847.819459][T14458] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 848.403824][ T1206] usb 4-1: USB disconnect, device number 37 [ 853.441490][ T30] audit: type=1400 audit(1737499528.604:1314): avc: denied { mount } for pid=14507 comm="syz.2.2131" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 853.732639][ T30] audit: type=1400 audit(1737499529.014:1315): avc: denied { unmount } for pid=5840 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 853.752373][ C1] vkms_vblank_simulate: vblank timer overrun [ 854.864693][T14514] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14514 comm=syz.5.2128 [ 855.148808][ T6026] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 855.148882][ T2150] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 855.561068][ T2150] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 855.574599][ T2150] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 855.587239][ T6026] usb 6-1: New USB device found, idVendor=1b80, idProduct=e396, bcdDevice=a7.b1 [ 855.608500][ T6026] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 855.694042][ T2150] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 855.708338][ T2150] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 855.724331][ T2150] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 855.762337][ T2150] usb 3-1: config 0 descriptor?? [ 856.309564][ T6026] usb 6-1: config 0 descriptor?? [ 856.340155][ T6026] usb 6-1: can't set config #0, error -71 [ 856.396499][ T6026] usb 6-1: USB disconnect, device number 24 [ 856.416664][ T2150] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 856.669830][T14534] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14534 comm=syz.0.2138 [ 856.942179][T14539] ptrace attach of "./syz-executor exec"[9522] was attempted by "./syz-executor exec"[14539] [ 857.418810][ T6026] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 857.582108][ T6026] usb 1-1: New USB device found, idVendor=1b80, idProduct=e396, bcdDevice=a7.b1 [ 857.608170][ T6026] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 857.800434][ T6026] usb 1-1: config 0 descriptor?? [ 858.435772][ T6026] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 858.481935][ C0] plantronics 0003:047F:FFFF.000C: usb_submit_urb(ctrl) failed: -1 [ 858.496314][ T1206] usb 3-1: USB disconnect, device number 47 [ 858.544306][ T6026] dvb_usb_af9015 1-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 858.805734][T14549] vcan0: tx drop: invalid da for name 0x0000000000000001 [ 859.256977][ T30] audit: type=1400 audit(1737499534.534:1316): avc: denied { connect } for pid=14550 comm="syz.5.2141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 859.277924][ T30] audit: type=1400 audit(1737499534.534:1317): avc: denied { setopt } for pid=14550 comm="syz.5.2141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 860.660210][ T30] audit: type=1326 audit(1737499535.934:1318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14561 comm="syz.2.2145" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f88c0f8eb69 code=0x0 [ 860.765482][ T5988] usb 1-1: USB disconnect, device number 35 [ 861.242217][T14572] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14572 comm=syz.5.2148 [ 861.548937][ T5988] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 862.039647][ T5988] usb 6-1: New USB device found, idVendor=1b80, idProduct=e396, bcdDevice=a7.b1 [ 862.070107][ T5988] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 862.083783][ T5988] usb 6-1: config 0 descriptor?? [ 862.150004][ T5988] usb 6-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 862.170810][ T5988] dvb_usb_af9015 6-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 867.518314][ T5988] usb 6-1: USB disconnect, device number 25 [ 972.618585][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 972.625551][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P49/1:b..l P9522/1:b..l P14612/1:b..l P5840/1:b..l [ 972.637435][ C1] rcu: (detected by 1, t=10502 jiffies, g=51729, q=537 ncpus=2) [ 972.645136][ C1] task:syz-executor state:R running task stack:23784 pid:5840 tgid:5840 ppid:5837 task_flags:0x400140 flags:0x00004000 [ 972.659518][ C1] Call Trace: [ 972.662791][ C1] [ 972.665711][ C1] __schedule+0x1190/0x5de0 [ 972.670210][ C1] ? __lock_acquire+0x62e/0x1ce0 [ 972.675146][ C1] ? irqentry_exit_to_user_mode+0x251/0x270 [ 972.681044][ C1] ? __pfx___schedule+0x10/0x10 [ 972.685887][ C1] ? page_table_check_set+0x627/0x750 [ 972.691248][ C1] ? page_table_check_set+0x631/0x750 [ 972.696610][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 972.701976][ C1] preempt_schedule_common+0x44/0xc0 [ 972.707254][ C1] preempt_schedule_thunk+0x16/0x30 [ 972.712449][ C1] _raw_spin_unlock+0x3e/0x50 [ 972.717117][ C1] copy_page_range+0x1f7d/0x5c80 [ 972.722082][ C1] ? __pfx_copy_page_range+0x10/0x10 [ 972.727369][ C1] ? __pfx___might_resched+0x10/0x10 [ 972.732642][ C1] ? __pfx_mas_store+0x10/0x10 [ 972.737389][ C1] ? __vma_enter_locked+0x163/0x3f0 [ 972.742583][ C1] ? dup_mmap+0xe38/0x21d0 [ 972.746990][ C1] ? down_write+0x14d/0x200 [ 972.751480][ C1] ? up_write+0x1b2/0x520 [ 972.755801][ C1] dup_mmap+0xe88/0x21d0 [ 972.760044][ C1] ? __pfx_dup_mmap+0x10/0x10 [ 972.764731][ C1] copy_process+0x4081/0x7690 [ 972.769398][ C1] ? do_wp_page+0x1aa7/0x4f20 [ 972.774075][ C1] ? __pfx_copy_process+0x10/0x10 [ 972.779089][ C1] ? do_raw_spin_lock+0x12c/0x2b0 [ 972.784099][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 972.789471][ C1] kernel_clone+0xfc/0x930 [ 972.793879][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 972.798903][ C1] ? __pfx_css_rstat_updated+0x10/0x10 [ 972.804356][ C1] __do_sys_clone+0xce/0x120 [ 972.808952][ C1] ? __pfx___do_sys_clone+0x10/0x10 [ 972.814143][ C1] ? handle_mm_fault+0x2ab/0xd10 [ 972.819092][ C1] ? do_user_addr_fault+0x843/0x1370 [ 972.824381][ C1] do_syscall_64+0xcd/0x4c0 [ 972.828896][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 972.834786][ C1] RIP: 0033:0x7f88c0f853d3 [ 972.839188][ C1] RSP: 002b:00007ffcf522ed38 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 972.847593][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f88c0f853d3 [ 972.855553][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 972.863511][ C1] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000001 [ 972.871471][ C1] R10: 000055555d3f67d0 R11: 0000000000000246 R12: 0000000000000000 [ 972.879431][ C1] R13: 000000000000005a R14: 00000000000d36c6 R15: 00007ffcf522eed0 [ 972.887401][ C1] [ 972.890413][ C1] task:syz.3.2159 state:R running task stack:26920 pid:14612 tgid:14612 ppid:5852 task_flags:0x400040 flags:0x00004000 [ 972.903896][ C1] Call Trace: [ 972.907171][ C1] [ 972.910094][ C1] __schedule+0x1190/0x5de0 [ 972.914593][ C1] ? find_held_lock+0x2b/0x80 [ 972.919266][ C1] ? __lock_acquire+0x581/0x1ce0 [ 972.924210][ C1] ? __pfx___schedule+0x10/0x10 [ 972.929057][ C1] ? lock_acquire+0x179/0x350 [ 972.933738][ C1] ? mark_held_locks+0x49/0x80 [ 972.938504][ C1] preempt_schedule_irq+0x51/0x90 [ 972.943525][ C1] irqentry_exit+0x36/0x90 [ 972.947934][ C1] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 972.953378][ C1] RIP: 0010:its_return_thunk+0x0/0x10 [ 972.958738][ C1] Code: cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 e9 db a3 96 f5 cc [ 972.978334][ C1] RSP: 0018:ffffc900037a7240 EFLAGS: 00000292 [ 972.984392][ C1] RAX: ffffffff914043ba RBX: 0000000000000001 RCX: dffffc0000000000 [ 972.992347][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff90bbd44c [ 973.000308][ C1] RBP: ffffc900037a7350 R08: ffffffff914043c0 R09: 0000000000000000 [ 973.008263][ C1] R10: 0000000000000001 R11: 0000000000006b08 R12: ffffc900037a7358 [ 973.016220][ C1] R13: ffffc900037a7308 R14: ffffc900037a733d R15: ffffffff816b08f3 [ 973.024175][ C1] ? __unwind_start+0x573/0x7f0 [ 973.029028][ C1] unwind_next_frame+0x2ec/0x20a0 [ 973.034039][ C1] ? __unwind_start+0x574/0x7f0 [ 973.038875][ C1] ? get_stack_info_noinstr+0x18/0x120 [ 973.044327][ C1] __unwind_start+0x45f/0x7f0 [ 973.048995][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 973.055140][ C1] arch_stack_walk+0x73/0x100 [ 973.059815][ C1] ? __unwind_start+0x574/0x7f0 [ 973.064659][ C1] stack_trace_save+0x8e/0xc0 [ 973.069329][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 973.074693][ C1] ? __lock_acquire+0xb97/0x1ce0 [ 973.079634][ C1] kasan_save_stack+0x33/0x60 [ 973.084355][ C1] kasan_save_track+0x14/0x30 [ 973.089020][ C1] __kasan_slab_alloc+0x89/0x90 [ 973.093865][ C1] kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 973.099316][ C1] ? mas_alloc_nodes+0x18b/0x8b0 [ 973.104253][ C1] mas_alloc_nodes+0x18b/0x8b0 [ 973.109019][ C1] mas_node_count_gfp+0x105/0x130 [ 973.114042][ C1] mas_preallocate+0x7e0/0xde0 [ 973.118804][ C1] ? __pfx_mas_preallocate+0x10/0x10 [ 973.124081][ C1] ? irqentry_exit+0x3b/0x90 [ 973.128673][ C1] ? __split_vma+0x1ae/0x1070 [ 973.133358][ C1] __split_vma+0x34a/0x1070 [ 973.137874][ C1] ? __pfx___split_vma+0x10/0x10 [ 973.142813][ C1] ? mas_prev_setup.constprop.0+0xb6/0x9d0 [ 973.148619][ C1] ? __pfx_mas_prev_range+0x10/0x10 [ 973.153815][ C1] ? can_vma_merge_right+0xa5/0x530 [ 973.159013][ C1] vma_modify+0x16dc/0x2030 [ 973.163520][ C1] ? __pfx_vma_modify+0x10/0x10 [ 973.168375][ C1] vma_modify_flags+0x212/0x2d0 [ 973.173216][ C1] ? __pfx_vma_modify_flags+0x10/0x10 [ 973.178591][ C1] mprotect_fixup+0x2b3/0xb10 [ 973.183272][ C1] ? __pfx_mprotect_fixup+0x10/0x10 [ 973.188468][ C1] ? selinux_file_mprotect+0x15b/0x600 [ 973.193919][ C1] ? security_file_mprotect+0x18/0x240 [ 973.199374][ C1] do_mprotect_pkey+0x9ca/0xd50 [ 973.204240][ C1] ? __pfx_do_mprotect_pkey+0x10/0x10 [ 973.209730][ C1] ? xfd_validate_state+0x61/0x180 [ 973.214844][ C1] __x64_sys_mprotect+0x78/0xc0 [ 973.219689][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 973.224880][ C1] do_syscall_64+0xcd/0x4c0 [ 973.229385][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 973.235266][ C1] RIP: 0033:0x7f1dc9b8ec27 [ 973.239668][ C1] RSP: 002b:00007fff22ab0888 EFLAGS: 00000206 ORIG_RAX: 000000000000000a [ 973.248069][ C1] RAX: ffffffffffffffda RBX: 00007f1dca9656c0 RCX: 00007f1dc9b8ec27 [ 973.256028][ C1] RDX: 0000000000000003 RSI: 0000000000020000 RDI: 00007f1dca946000 [ 973.263984][ C1] RBP: 0000000000000000 R08: 00000000ffffffff R09: 0000000000000000 [ 973.271942][ C1] R10: 0000000000021000 R11: 0000000000000206 R12: 00007fff22ab09e0 [ 973.279897][ C1] R13: ffffffffffffffc0 R14: 0000000000001000 R15: 0000000000000000 [ 973.287874][ C1] [ 973.290884][ C1] task:syz-executor state:R running task stack:24088 pid:9522 tgid:9522 ppid:9489 task_flags:0x400140 flags:0x00004000 [ 973.304366][ C1] Call Trace: [ 973.307633][ C1] [ 973.310552][ C1] __schedule+0x1190/0x5de0 [ 973.315050][ C1] ? is_bpf_text_address+0x94/0x1a0 [ 973.320249][ C1] ? __pfx___schedule+0x10/0x10 [ 973.325101][ C1] ? mark_held_locks+0x49/0x80 [ 973.329861][ C1] preempt_schedule_irq+0x51/0x90 [ 973.334880][ C1] irqentry_exit+0x36/0x90 [ 973.339297][ C1] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 973.344744][ C1] RIP: 0010:kasan_check_range+0x146/0x1b0 [ 973.350455][ C1] Code: 83 c0 01 49 89 d3 48 39 d0 74 11 80 38 00 74 ef 4d 8d 1c 2c 48 89 c2 48 85 c0 75 ad 48 89 da 4c 89 d8 4c 29 da e9 46 ff ff ff <48> 85 d2 74 18 48 01 ea eb 09 48 83 c0 01 48 39 d0 74 0a 80 38 00 [ 973.370049][ C1] RSP: 0018:ffffc9000c3a70c0 EFLAGS: 00000283 [ 973.376100][ C1] RAX: ffffed1003a41e87 RBX: ffffed1003a41e88 RCX: ffffffff822da559 [ 973.384056][ C1] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff88801d20f43c [ 973.392017][ C1] RBP: ffffed1003a41e87 R08: 0000000000000000 R09: ffffed1003a41e87 [ 973.399973][ C1] R10: ffff88801d20f43f R11: 0000000000000000 R12: ffff88801d20f3f0 [ 973.407928][ C1] R13: ffff88801d20f43c R14: 0000000000000000 R15: dffffc0000000000 [ 973.415890][ C1] ? __page_table_check_zero+0x279/0x5d0 [ 973.421524][ C1] __page_table_check_zero+0x279/0x5d0 [ 973.426974][ C1] ? __pfx___page_table_check_zero+0x10/0x10 [ 973.432944][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 973.438137][ C1] post_alloc_hook+0x1af/0x230 [ 973.442897][ C1] get_page_from_freelist+0x132b/0x38e0 [ 973.448444][ C1] ? prepare_alloc_pages+0x3c2/0x610 [ 973.453723][ C1] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 973.459600][ C1] ? __bpf_trace_sched_switch+0x145/0x190 [ 973.465313][ C1] ? lock_acquire+0x179/0x350 [ 973.469983][ C1] ? find_held_lock+0x2b/0x80 [ 973.474652][ C1] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 973.480961][ C1] ? finish_task_switch.isra.0+0x221/0xc10 [ 973.486756][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 973.491946][ C1] ? finish_task_switch.isra.0+0x221/0xc10 [ 973.497741][ C1] ? rcu_is_watching+0x12/0xc0 [ 973.502495][ C1] ? __schedule+0x11a3/0x5de0 [ 973.507162][ C1] ? __lock_acquire+0x62e/0x1ce0 [ 973.512093][ C1] ? __lock_acquire+0xb97/0x1ce0 [ 973.517020][ C1] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 973.522905][ C1] ? policy_nodemask+0xea/0x4e0 [ 973.527745][ C1] alloc_pages_mpol+0x1fb/0x550 [ 973.532587][ C1] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 973.537953][ C1] alloc_pages_noprof+0x131/0x390 [ 973.542966][ C1] pte_alloc_one+0x1c/0x3a0 [ 973.547462][ C1] __pte_alloc+0x6d/0x3c0 [ 973.551780][ C1] ? __pfx___pte_alloc+0x10/0x10 [ 973.556703][ C1] ? __pfx___might_resched+0x10/0x10 [ 973.561981][ C1] copy_page_range+0x3b83/0x5c80 [ 973.566942][ C1] ? __pfx_copy_page_range+0x10/0x10 [ 973.572222][ C1] ? lock_acquire+0x62/0x350 [ 973.576808][ C1] ? __pfx___might_resched+0x10/0x10 [ 973.582079][ C1] ? __pfx_mas_store+0x10/0x10 [ 973.586825][ C1] ? __vma_enter_locked+0x163/0x3f0 [ 973.592022][ C1] ? dup_mmap+0xe38/0x21d0 [ 973.596428][ C1] ? down_write+0x14d/0x200 [ 973.600923][ C1] ? up_write+0x1b2/0x520 [ 973.605241][ C1] dup_mmap+0xe88/0x21d0 [ 973.609483][ C1] ? __pfx_dup_mmap+0x10/0x10 [ 973.614169][ C1] copy_process+0x4081/0x7690 [ 973.618837][ C1] ? __bpf_trace_sched_switch+0x145/0x190 [ 973.624552][ C1] ? __pfx_copy_process+0x10/0x10 [ 973.629566][ C1] ? finish_task_switch.isra.0+0x221/0xc10 [ 973.635364][ C1] ? finish_task_switch.isra.0+0x2fa/0xc10 [ 973.641158][ C1] ? rcu_is_watching+0x12/0xc0 [ 973.645919][ C1] kernel_clone+0xfc/0x930 [ 973.650327][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 973.655353][ C1] ? __pfx___schedule+0x10/0x10 [ 973.660197][ C1] __do_sys_clone+0xce/0x120 [ 973.664781][ C1] ? __pfx___do_sys_clone+0x10/0x10 [ 973.669974][ C1] ? handle_mm_fault+0x2ab/0xd10 [ 973.674922][ C1] ? trace_irq_enable.constprop.0+0x2f/0x120 [ 973.680894][ C1] do_syscall_64+0xcd/0x4c0 [ 973.685396][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 973.691274][ C1] RIP: 0033:0x7fae54f853d3 [ 973.695672][ C1] RSP: 002b:00007ffc3978c7b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 973.704068][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fae54f853d3 [ 973.712022][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 973.719975][ C1] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000001 [ 973.727930][ C1] R10: 000055558f3967d0 R11: 0000000000000246 R12: 0000000000000000 [ 973.735886][ C1] R13: 000055558f3a9590 R14: 00000000000d28bd R15: 00007ffc3978c950 [ 973.743859][ C1] [ 973.746863][ C1] task:kworker/u8:3 state:R running task stack:22760 pid:49 tgid:49 ppid:2 task_flags:0x4208160 flags:0x00004000 [ 973.760427][ C1] Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet [ 973.768224][ C1] Call Trace: [ 973.771485][ C1] [ 973.774402][ C1] __schedule+0x1190/0x5de0 [ 973.778893][ C1] ? __schedule+0x11a3/0x5de0 [ 973.783583][ C1] ? __pfx___schedule+0x10/0x10 [ 973.788433][ C1] ? mark_held_locks+0x49/0x80 [ 973.793190][ C1] preempt_schedule_irq+0x51/0x90 [ 973.798207][ C1] irqentry_exit+0x36/0x90 [ 973.802613][ C1] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 973.808056][ C1] RIP: 0010:__sanitizer_cov_trace_const_cmp4+0xa/0x20 [ 973.814806][ C1] Code: 00 00 00 e9 58 fe ff ff 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 0c 24 89 f2 <89> fe bf 05 00 00 00 e9 2a fe ff ff 66 2e 0f 1f 84 00 00 00 00 00 [ 973.834395][ C1] RSP: 0018:ffffc90000b97ab0 EFLAGS: 00000246 [ 973.840445][ C1] RAX: 0000000000000001 RBX: ffff888028148aa8 RCX: ffffffff8b5a41a0 [ 973.848403][ C1] RDX: 0000000000000001 RSI: 0000000000000001 RDI: 0000000000000000 [ 973.856359][ C1] RBP: 0000000000000001 R08: ca3e19bf206f8e2e R09: 0000000000000000 [ 973.864314][ C1] R10: 0000000000000003 R11: 0000000000000000 R12: dffffc0000000000 [ 973.872268][ C1] R13: ffff88807811cd80 R14: 0000000000000155 R15: ffff88802bdfde00 [ 973.880228][ C1] ? batadv_iv_ogm_schedule_buff+0x5e0/0x14c0 [ 973.886292][ C1] batadv_iv_ogm_schedule_buff+0x5e0/0x14c0 [ 973.892174][ C1] ? batadv_iv_ogm_schedule_buff+0x5bf/0x14c0 [ 973.898239][ C1] ? __pfx_batadv_iv_ogm_schedule_buff+0x10/0x10 [ 973.904561][ C1] ? batadv_send_skb_packet+0x5dd/0x780 [ 973.910097][ C1] batadv_iv_send_outstanding_bat_ogm_packet+0x329/0x920 [ 973.917128][ C1] process_one_work+0x9cc/0x1b70 [ 973.922073][ C1] ? __pfx_batadv_iv_send_outstanding_bat_ogm_packet+0x10/0x10 [ 973.929609][ C1] ? __pfx_process_one_work+0x10/0x10 [ 973.934980][ C1] ? assign_work+0x1a0/0x250 [ 973.939558][ C1] worker_thread+0x6c8/0xf10 [ 973.944147][ C1] ? __pfx_worker_thread+0x10/0x10 [ 973.949245][ C1] kthread+0x3c5/0x780 [ 973.953301][ C1] ? __pfx_kthread+0x10/0x10 [ 973.957879][ C1] ? rcu_is_watching+0x12/0xc0 [ 973.962638][ C1] ? __pfx_kthread+0x10/0x10 [ 973.967216][ C1] ret_from_fork+0x5d7/0x6f0 [ 973.971791][ C1] ? __pfx_kthread+0x10/0x10 [ 973.976370][ C1] ret_from_fork_asm+0x1a/0x30 [ 973.981135][ C1] [ 973.984139][ C1] rcu: rcu_preempt kthread timer wakeup didn't happen for 10501 jiffies! g51729 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 973.996441][ C1] rcu: Possible timer handling issue on cpu=0 timer-softirq=70424 [ 974.004327][ C1] rcu: rcu_preempt kthread starved for 10502 jiffies! g51729 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0 [ 974.015677][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 974.025629][ C1] rcu: RCU grace-period kthread stack dump: [ 974.031497][ C1] task:rcu_preempt state:I stack:27560 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 974.043405][ C1] Call Trace: [ 974.046674][ C1] [ 974.049595][ C1] __schedule+0x1190/0x5de0 [ 974.054105][ C1] ? __lock_acquire+0x62e/0x1ce0 [ 974.059061][ C1] ? __pfx___schedule+0x10/0x10 [ 974.063909][ C1] ? find_held_lock+0x2b/0x80 [ 974.068578][ C1] ? schedule+0x2d7/0x3a0 [ 974.072906][ C1] schedule+0xe7/0x3a0 [ 974.076966][ C1] schedule_timeout+0x123/0x290 [ 974.081808][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 974.087167][ C1] ? __pfx_process_timeout+0x10/0x10 [ 974.092448][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 974.098243][ C1] ? prepare_to_swait_event+0xf5/0x480 [ 974.103698][ C1] rcu_gp_fqs_loop+0x1ea/0xb00 [ 974.108462][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 974.113746][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 974.118940][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 974.123860][ C1] ? rcu_gp_cleanup+0x7c1/0xd90 [ 974.128709][ C1] rcu_gp_kthread+0x270/0x380 [ 974.133372][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 974.138552][ C1] ? rcu_is_watching+0x12/0xc0 [ 974.143305][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 974.148498][ C1] ? __kthread_parkme+0x19e/0x250 [ 974.153518][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 974.158703][ C1] kthread+0x3c5/0x780 [ 974.162760][ C1] ? __pfx_kthread+0x10/0x10 [ 974.167340][ C1] ? rcu_is_watching+0x12/0xc0 [ 974.172097][ C1] ? __pfx_kthread+0x10/0x10 [ 974.176673][ C1] ret_from_fork+0x5d7/0x6f0 [ 974.181251][ C1] ? __pfx_kthread+0x10/0x10 [ 974.185828][ C1] ret_from_fork_asm+0x1a/0x30 [ 974.190593][ C1] [ 974.193596][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 974.199908][ C1] Sending NMI from CPU 1 to CPUs 0: [ 974.205103][ C0] NMI backtrace for cpu 0 [ 974.205116][ C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted 6.16.0-syzkaller-11364-g3c4a063b1f8a #0 PREEMPT(full) [ 974.205133][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 974.205140][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x66/0x70 [ 974.205164][ C0] Code: 82 18 16 00 00 83 f8 02 75 20 48 8b 8a 20 16 00 00 8b 92 1c 16 00 00 48 8b 01 48 83 c0 01 48 39 d0 73 07 48 89 01 48 89 34 c1 cc cc cc cc 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 [ 974.205175][ C0] RSP: 0018:ffffc90000007e10 EFLAGS: 00000006 [ 974.205187][ C0] RAX: 0000000000010102 RBX: ffff8880b8427d80 RCX: ffffffff81a845bf [ 974.205197][ C0] RDX: ffff88801e2d4880 RSI: ffffffff81a84376 RDI: 0000000000000001 [ 974.205206][ C0] RBP: ffff888063e1b340 R08: 0000000000000001 R09: 0000000000000000 [ 974.205214][ C0] R10: 0000000000000001 R11: ffffffff9b09b970 R12: 0000000000000001 [ 974.205223][ C0] R13: 0000000000000000 R14: ffff888063e1b340 R15: 0000000000000001 [ 974.205231][ C0] FS: 0000000000000000(0000) GS:ffff8881246c8000(0000) knlGS:0000000000000000 [ 974.205246][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 974.205255][ C0] CR2: 0000001b31110ff8 CR3: 0000000050210000 CR4: 00000000003526f0 [ 974.205264][ C0] Call Trace: [ 974.205270][ C0] [ 974.205274][ C0] enqueue_hrtimer+0x96/0x3b0 [ 974.205292][ C0] __hrtimer_run_queues+0x8ff/0xad0 [ 974.205311][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 974.205325][ C0] ? read_tsc+0x9/0x20 [ 974.205346][ C0] hrtimer_interrupt+0x397/0x8e0 [ 974.205368][ C0] __sysvec_apic_timer_interrupt+0x10b/0x3f0 [ 974.205384][ C0] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 974.205402][ C0] [ 974.205407][ C0] [ 974.205412][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 974.205426][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 974.205444][ C0] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 96 a1 02 f6 48 89 df e8 7e f5 02 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 85 f2 f2 f5 65 8b 05 2e 61 40 08 85 c0 74 16 5b [ 974.205456][ C0] RSP: 0018:ffffc90000147a48 EFLAGS: 00000246 [ 974.205466][ C0] RAX: 0000000000000006 RBX: ffffffff9b0eee90 RCX: ffffffff81c36a2f [ 974.205475][ C0] RDX: 0000000000000000 RSI: ffffffff8de4c8bd RDI: ffffffff8c15fb80 [ 974.205483][ C0] RBP: 0000000000000286 R08: 0000000000000001 R09: 0000000000000001 [ 974.205491][ C0] R10: ffffffff90aad397 R11: 0000000000000000 R12: dffffc0000000000 [ 974.205500][ C0] R13: 000000000000001a R14: 000000000000001a R15: ffff888079b57600 [ 974.205513][ C0] ? trace_irq_enable.constprop.0+0x2f/0x120 [ 974.205532][ C0] debug_check_no_obj_freed+0x31f/0x600 [ 974.205555][ C0] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 974.205576][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 974.205595][ C0] kfree+0x28f/0x4d0 [ 974.205614][ C0] ? slab_free_after_rcu_debug+0x60/0x340 [ 974.205637][ C0] slab_free_after_rcu_debug+0x60/0x340 [ 974.205657][ C0] ? rcu_core+0x797/0x1530 [ 974.205672][ C0] rcu_core+0x79c/0x1530 [ 974.205690][ C0] ? __pfx_rcu_core+0x10/0x10 [ 974.205711][ C0] handle_softirqs+0x216/0x8e0 [ 974.205730][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 974.205745][ C0] ? preempt_schedule_thunk+0x16/0x30 [ 974.205765][ C0] ? __pfx_run_ksoftirqd+0x10/0x10 [ 974.205781][ C0] ? smpboot_thread_fn+0x326/0xae0 [ 974.205798][ C0] run_ksoftirqd+0x3a/0x60 [ 974.205813][ C0] smpboot_thread_fn+0x3f7/0xae0 [ 974.205832][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 974.205850][ C0] kthread+0x3c5/0x780 [ 974.205863][ C0] ? __pfx_kthread+0x10/0x10 [ 974.205877][ C0] ? rcu_is_watching+0x12/0xc0 [ 974.205892][ C0] ? __pfx_kthread+0x10/0x10 [ 974.205906][ C0] ret_from_fork+0x5d7/0x6f0 [ 974.205918][ C0] ? __pfx_kthread+0x10/0x10 [ 974.205931][ C0] ret_from_fork_asm+0x1a/0x30 [ 974.205953][ C0]