last executing test programs: 12.659753436s ago: executing program 4 (id=1095): getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x90, 0x41, 0x1, 0x5fffc, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x74, 0x1, 0x0, 0x1, [@nested={0x70, 0x10, 0x0, 0x1, [@nested={0x6c, 0x8, 0x0, 0x1, [@generic="ea49be27c94f81707446cd3a7228747518554ea4c5bb4769375ffadf41fd5b1226364837a9ab9aad65ef61d15a", @generic="aaeb72634748edc2e6dda6877ce93b2be59d372db1ba0c0367d63ce5c989970ef090edf5d692e7d63ccb9b29ca0f7eb612e7e623c57a596f22feeb"]}]}]}, @typed={0x4, 0x2, 0x0, 0x0, @binary}]}, 0x90}, 0x1, 0x0, 0x0, 0x400c801}, 0x200080c4) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) socket$phonet_pipe(0x23, 0x5, 0x2) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x90, r1, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x40000}, 0x20048841) syz_usb_connect(0x3, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100009e293610ef171e7206de90f60070090212000100000000090400000002"], 0x0) 10.436933508s ago: executing program 4 (id=1107): r0 = socket$inet(0xa, 0x801, 0x84) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000035ffaa20cd0caf104a380102030109021b0001000010000904590201801e2a00090582"], 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$uac3(r1, 0x0, &(0x7f0000000a40)={0x44, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000000c0)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="2d0d020000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x140, 0x1a2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) lstat(&(0x7f0000002fc0)='./file1\x00', &(0x7f0000003000)) connect$inet(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000100)={0x8000, "676617a4eca5d2a958539a8de82f7d6d9b105ff00a8040cada37fdbec1cb2090"}) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_dev$vcsa(&(0x7f0000000000), 0x1, 0x141c42) ioctl$KVM_SET_ONE_REG(r3, 0x4010aeac, &(0x7f00000000c0)=@arm64_extra={0x603000000013c03d, &(0x7f0000000080)=0x8}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz1\x00', 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000240)='cpuset.mems\x00', 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team_slave_1\x00'}) write$cgroup_subtree(r6, 0x0, 0x31) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000002300)=@raw={'raw\x00', 0xc01, 0x3, 0x2298, 0x1100, 0x5002004a, 0x0, 0x0, 0x0, 0x2200, 0x3c8, 0x3c8, 0x2200, 0x3c8, 0x3, 0x0, {[{{@uncond, 0x60, 0x10a0, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x1, 0x0, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x2, 0x1, 0x7], 0x6, 0x2}, {0x2, [0x0, 0x6, 0x4, 0x9, 0x0, 0x89ce99baffcf6900], 0x1, 0x1}}}}, {{@uncond, 0x0, 0x10a0, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x1, 0x1, './cgroup.net/syz1\x00', 0x2, {0x5}}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@loopback, [0xffffff00, 0xff000000, 0xff, 0xff0000ff], 0x4e22, 0x4c20, 0x4e24, 0x4e23, 0xc9, 0x0, 0x3b, 0x83, 0x25}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x22f8) 9.714388178s ago: executing program 3 (id=1110): mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0x6, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0xe) (async) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000000380)) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, 0x0, 0x0) (async) statx(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x4000, 0x400, &(0x7f0000000140)) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x4, 0x6b35e9d94325c671, 0xffffffffffffffff, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = dup(r2) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_vs_stats_percpu\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x11, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) (async) r5 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0) (async) r6 = syz_open_dev$I2C(&(0x7f00000000c0), 0x1, 0x2643) ioctl$I2C_SMBUS(r6, 0x720, &(0x7f0000000100)={0x0, 0x83, 0x2, &(0x7f0000000000)={0x1a, "e551595944bd993e9f61070b25780e0000dd2a35446df6de515c5a5ae4e1e1b1fb"}}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) (async) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r7, r8, 0x5}, 0x10) (async) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r8, r7, 0x5, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x401, 0x0, 0x1, 0xffffffffffffffff}}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[], 0x10) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000280)={[{@xino_off}, {@redirect_dir_on}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]}) 9.015274701s ago: executing program 1 (id=1113): socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) r0 = socket$kcm(0x29, 0x5, 0x0) syz_open_dev$vcsa(0x0, 0x4, 0xd49100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) close(r0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a6970"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) ioctl$sock_inet_SIOCSIFBRDADDR(r3, 0x891a, &(0x7f00000001c0)={'nr0\x00', {0x2, 0x4e24, @multicast2}}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000000706010300000000000000000100000005000100070000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000040) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0x541b, &(0x7f0000000000)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet(0x2, 0x2, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120101020958b81010140470a206010500010902120001010110040904e85d004210ab02"], 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$vim2m(&(0x7f0000000140), 0x3, 0x2) syz_io_uring_setup(0x10d, &(0x7f0000000980)={0x0, 0xb9d3, 0x80, 0x0, 0x8}, 0x0, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000840), 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 8.762914807s ago: executing program 0 (id=1114): openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_EXPR={0x14, 0x11, 0x0, 0x1, @last={{0x9}, @val={0x4}}}]}, @NFT_MSG_NEWSETELEM={0x38, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xc, 0x3, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb0}, 0x1, 0x0, 0x0, 0x4000854}, 0x40) close_range(r0, 0xffffffffffffffff, 0x0) 8.619745266s ago: executing program 0 (id=1116): syz_clone3(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x8) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002800)=@newtfilter={0x30, 0x28, 0x575ac7824d421509, 0x70bd29, 0x4, {0x0, 0x0, 0x0, r4, {0x9}, {0xffff}, {0x13, 0x5}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x11}, 0x40) 8.340892961s ago: executing program 0 (id=1117): bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x29, 0x5, 0x0) syz_open_dev$vcsa(0x0, 0x4, 0xd49100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) close(r0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, 0x0, 0x20004000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) ioctl$sock_inet_SIOCSIFBRDADDR(r3, 0x891a, &(0x7f00000001c0)={'nr0\x00', {0x2, 0x4e24, @multicast2}}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000000706010300000000000000000100000005000100070000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000040) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0x541b, &(0x7f0000000000)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet(0x2, 0x2, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120101020958b81010140470a206010500010902120001010110040904e85d004210ab02"], 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$vim2m(&(0x7f0000000140), 0x3, 0x2) syz_io_uring_setup(0x10d, &(0x7f0000000980)={0x0, 0xb9d3, 0x80, 0x0, 0x8}, 0x0, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000840), 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 7.620019255s ago: executing program 2 (id=1118): syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004800)=[{{&(0x7f0000000140)=@l2, 0x80, &(0x7f0000002200)=[{&(0x7f0000000240)=""/29, 0x1d}, {&(0x7f0000000280)=""/12, 0xc}, {&(0x7f0000000300)=""/137, 0x89}, {&(0x7f00000003c0)=""/13, 0xd}, {&(0x7f0000000400)=""/129, 0x81}, {&(0x7f00000004c0)=""/167, 0xa7}, {&(0x7f0000001180)=""/4096, 0x1000}, {&(0x7f0000002180)=""/112, 0x70}], 0x8, &(0x7f0000002280)=""/232, 0xe8}}, {{&(0x7f0000002380)=@tipc, 0x80, &(0x7f0000004780)=[{&(0x7f00000024c0)=""/173, 0xad}, {&(0x7f0000002580)=""/126, 0x7e}, {&(0x7f0000002600)=""/4096, 0x1000}, {0x0}, {&(0x7f00000036c0)=""/184, 0xb8}, {&(0x7f0000003780)=""/4096, 0x1000}], 0x6}, 0x83}], 0x2, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x2) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000007c0)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}]}, &(0x7f00000005c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r2, &(0x7f0000000440), &(0x7f0000000040)=@udp=r1}, 0x20) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r1, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000800)=""/4096, 0x1000}], 0x1, 0x0, 0xfffffdee}, 0xb}], 0x1, 0x40000021, 0x0) 7.052735891s ago: executing program 3 (id=1119): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) chdir(&(0x7f0000000000)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x40080) wait4(0x0, 0x0, 0x1000000, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0xc1105511, &(0x7f0000000040)) socket$inet_mptcp(0x2, 0x1, 0x106) syz_open_dev$evdev(0x0, 0xfffffffffffffff8, 0x100) r1 = fsopen(&(0x7f00000003c0)='gfs2\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x28383, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x0, 0xffffffffffffffff}, 0x4}}, @TCA_MPLS_BOS={0x5}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) bind$can_j1939(0xffffffffffffffff, &(0x7f00000001c0)={0x1d, 0x0, 0x2, {0x0, 0x1, 0x1}, 0xff}, 0x18) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000003240)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000003200)={&(0x7f0000001040)=ANY=[@ANYBLOB, @ANYRESOCT=r1, @ANYRESHEX=r2, @ANYRES32=0x0, @ANYBLOB="140004000000000000000000000000000000000114000400fc0200000000000000000000000000010600"], 0xb4}, 0x1, 0x0, 0x0, 0x54}, 0x20000040) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000002c0)={r5, 0x1, 0x6, @broadcast}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010000100c0769c25bd7000ffdbdf25004c395bffbb9d9a", @ANYRES32=0x0, @ANYBLOB="0db20200305b01001400030076657468305f6d61637674617000000010001a800c000a80050008000100000008000400ff010000"], 0x4c}, 0x1, 0x0, 0x0, 0xc1}, 0x4000885) r7 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_MAKE_EQUIV(r7, &(0x7f00000030c0)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000003080)={&(0x7f0000003280)={0x201c, 0x3f7, 0x100, 0x70bd2b, 0x25dfdbfd, {0x1004, 0xffe, './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0/file0', './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0'}, ["", "", "", "", "", "", "", "", ""]}, 0x201c}}, 0x44040) setsockopt$packet_drop_memb(r4, 0x107, 0x2, &(0x7f0000000040)={r5, 0x1, 0x6, @broadcast}, 0x10) socket(0x40000000015, 0x5, 0x0) 6.477594937s ago: executing program 2 (id=1120): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYRES32=r3, @ANYBLOB="05001300840000000a000600080211000001000006001000800500000600120001000000100011"], 0x50}, 0x1, 0x0, 0x0, 0x80c1}, 0x0) 6.241675517s ago: executing program 1 (id=1121): r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/vlan/vlan0\x00') preadv(r0, &(0x7f0000000300), 0x0, 0xa3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f00000000c0)=ANY=[], 0x6a) 6.086531718s ago: executing program 4 (id=1122): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8004, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000640)={0x12}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000300)={{0xfec00001, 0xdddd0000, 0xd, 0x5, 0x3, 0x9, 0x9, 0xc3, 0x3, 0x4, 0x4, 0xe}, {0x50000, 0x0, 0xc, 0x1, 0x5, 0x30, 0x7, 0x3, 0x4, 0xd, 0x0, 0x80}, {0xf000, 0x7000, 0x4, 0xfd, 0x0, 0x11, 0x4, 0x7, 0x8, 0xe1, 0x9, 0x83}, {0x8000000, 0xeeef0000, 0x4, 0x4, 0x1, 0xb, 0x0, 0x14, 0x0, 0x19, 0x6, 0x1}, {0xdddd0000, 0x40000, 0xd, 0x0, 0x2, 0xd4, 0x4, 0x71, 0x0, 0x41, 0x7, 0x8a}, {0xf000, 0x2000, 0x9, 0x10, 0xff, 0xd5, 0x5, 0xf9, 0x6, 0x73, 0x9, 0x7}, {0x4000, 0xb000, 0xe, 0xc, 0x7, 0x9, 0x3, 0x4, 0x2, 0xeb, 0x3, 0xb}, {0x54000, 0x0, 0xe, 0x7, 0x2, 0x5, 0xf9, 0x7, 0x2, 0x0, 0x84, 0xd}, {0xc000, 0xff}, {0x80a0000, 0xfbf9}, 0x40050002, 0x0, 0x30000, 0x26a, 0xc, 0xb900, 0x1000, [0xffffffffffffffff, 0x8, 0xfffffffffffffffb, 0x6]}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000140)=@arm64={0x50, 0xb, 0x49, '\x00', 0x7}) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f00000002c0)={0xed80000000000000, 0x70000, 0xfffffffffffffffd, 0xc, 0x2}) 5.982175645s ago: executing program 2 (id=1123): syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0xff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0xffff, 0x8}, {0x2}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x4, 0x9, 0x2}}]}}]}, 0x44}}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000b00000000000500000014000500200100000000000000000100000000001c00090008"], 0x4c}}, 0x40000) (fail_nth: 11) sendmmsg(r3, 0x0, 0x0, 0xfc) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x7000000) 5.949252111s ago: executing program 1 (id=1124): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100000001000089}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f00000000c0)=0x94a, 0x4) syz_emit_ethernet(0x76, &(0x7f0000000340)=ANY=[@ANYBLOB="bbbbbbbbbbbb0086dd6100000000403a00fc000000000000000000000000000001ff02000000000000003b00000000000101009078000000006d3103000f4e000120010000000000000000000000020001fc0100000000000000000000000000053a000c08650400000d00006a08000000"], 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$unix(0x1, 0x2, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x91}, 0x24044804) sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r6 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r8, &(0x7f000001a480)={&(0x7f000001a040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f000001a440)={&(0x7f000001a080)={0x28c, r5, 0x20, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_TID_CONFIG={0x4}, @NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xaf}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xac}]}]}, @NL80211_ATTR_TID_CONFIG={0x8, 0x11d, 0x0, 0x1, [{0x4}]}, @NL80211_ATTR_TID_CONFIG={0x1b4, 0x11d, 0x0, 0x1, [{0x1ac, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x170, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x5c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4d, 0x2, [{0x0, 0x3}, {0x2, 0xa}, {0x7, 0x2}, {0x5, 0xa}, {0x4, 0xa}, {0x7, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x1, 0x2}, {0x4}, {0x7, 0x6}, {0x4, 0x9}, {0x5, 0x5}, {0x5, 0x7}, {0x7}, {0x1}, {0x1, 0x6}, {0x7, 0x7}, {0x0, 0x1}, {0x7, 0x2}, {0x6, 0x8}, {0x4, 0x5}, {0x1, 0x4}, {0x5, 0x4}, {0x7, 0x2}, {0x0, 0x9}, {0x1, 0x3}, {0x7, 0x7}, {0x3, 0x9}, {0x6, 0x9}, {0x4, 0x8}, {0x3, 0x9}, {0x6, 0xa}, {0x5, 0x4}, {0x5, 0x3}, {0x0, 0x1}, {0x3, 0x7}, {0x2, 0x7}, {0x6, 0x2}, {0x1, 0x3}, {0x2, 0x9}, {0x5, 0x5}, {0x1, 0x1}, {0x0, 0x4}, {0x0, 0x1}, {0x2, 0x3}, {0x2, 0x5}, {0x4, 0x3}, {0x0, 0x4}, {0x1, 0x3}, {0x6, 0x9}, {0x5, 0x7}, {0x0, 0x5}, {0x1, 0x9}, {0x1, 0x5}, {0x6, 0x1}, {0x1, 0x5}, {0x6, 0xa}, {0x5, 0xa}, {0x0, 0x1}, {0x6}, {0x5, 0x2}, {0x5, 0xa}, {0x3}, {0x0, 0x5}, {0x2, 0x1}, {0x0, 0x2}, {0x7, 0x8}, {0x5}, {0x5, 0x4}, {0x2, 0x7}, {0x7, 0x8}, {0x0, 0x4}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x6c, 0x23, 0xc, 0x3, 0xc, 0x6, 0x6c, 0x2, 0x6c, 0x30, 0x4, 0x6c, 0xc, 0x24, 0x12, 0x30, 0x36, 0xc, 0x36, 0x4, 0x3, 0x2, 0x9, 0x26]}]}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0xb, 0x2, [{0x1, 0x3}, {0x6, 0x5}, {0x5, 0x3}, {0x0, 0xa}, {0x4, 0x3}, {0x1, 0x6}, {0x0, 0x3}]}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x100, 0x400, 0x2, 0x1, 0x2, 0xa, 0x4, 0x89c9]}}]}, @NL80211_BAND_60GHZ={0x90, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1f, 0x2, [{0x1, 0x7}, {0x0, 0x6}, {0x5, 0x4}, {0x6, 0x1}, {0x0, 0x5}, {0x0, 0x8}, {0x1, 0xa}, {0x5, 0x4}, {0x5, 0x2}, {0x0, 0x5}, {0x4, 0x5}, {0x5, 0x9}, {0x6, 0x8}, {0x0, 0x1}, {0x7}, {0x1, 0x3}, {0x7, 0x3}, {0x3, 0x9}, {0x4, 0x6}, {0x5, 0xa}, {0x5, 0xa}, {0x1, 0x6}, {0x7, 0x9}, {0x2, 0x4}, {0x1, 0x8}, {0x4, 0x4}, {0x2, 0x3}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfffa, 0xa7af, 0x1, 0x7, 0x4, 0x3, 0xa, 0x9]}}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x24, 0xc, 0xb, 0x30, 0x60, 0xc, 0x6, 0x60, 0x1b, 0x24, 0x1b, 0x6c, 0x0, 0x9, 0x36, 0x36, 0xc, 0x48, 0x16, 0x30, 0x6c, 0x36, 0x5, 0x24, 0xb, 0xc, 0x36, 0x6c, 0x16]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x4, 0x7ff, 0x8, 0x0, 0x9, 0xfc00, 0x7]}}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff3, 0xf, 0x3, 0x7, 0x1, 0x88a6, 0x3ff, 0x2]}}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9493, 0x0, 0x8, 0xffff, 0xffff, 0xff81, 0x9, 0x3]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x2}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7}]}, {0x4}]}, @NL80211_ATTR_TID_CONFIG={0x34, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xe3}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x33}]}]}, @NL80211_ATTR_TID_CONFIG={0x3c, 0x11d, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xff}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x30, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x71}]}]}]}, 0x28c}, 0x1, 0x0, 0x0, 0x840}, 0x4) read$msr(r7, &(0x7f0000001040)=""/102400, 0x19000) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0), 0x0) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000020c0)={0x44, r11, 0x1, 0x300, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_LEVEL={0x24, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8}]}]}, 0x44}}, 0x0) write$UHID_INPUT(r9, &(0x7f0000000000)={0x9, {"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", 0x1000}}, 0x1006) 5.844671194s ago: executing program 4 (id=1125): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000300001030000000000000000460000800c000100070000000000000050bb2d6f67d29d6fabadb107d0def49c88ea04abbf1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e88230000"], 0x58}], 0x1}, 0x4000080) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r1, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffa, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000011c0)=[@in6={0xa, 0x4e24, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, @in={0x2, 0x4e24, @multicast1}], 0x2c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000200)=[@in6={0xa, 0x4e21, 0x8, @private0={0xfc, 0x0, '\x00', 0x3}, 0x7}], 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x24008845, &(0x7f0000000000)={0xa, 0x4e22, 0x8, @ipv4={'\x00', '\xff\xff', @remote}, 0x1}, 0x1c) getsockopt$inet6_buf(r0, 0x29, 0x18, 0x0, &(0x7f00000000c0)) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a01"], 0x40}, 0xfffe) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) mkdir(&(0x7f0000000080)='./file1\x00', 0x8) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f00000000c0)='./file1\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r3, 0xffffffff80000800, 0xffffffffffffffff, &(0x7f0000000340)={0x8000000000000000, 0x4, 0x100000001, 0x3, 0x23, 0x6, 0x6, 0xfffffffffffffffc, 0x100fff}) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000340)={@in={{0x2, 0x4e23, @empty}}, 0x0, 0x0, 0x24, 0x0, "781bcfdf46653c9c5adcabec8c7f50aeff0caf119a5f7c310d6433b69f0c57bc19e5fffffffffa71b1cd8df684c93078c40ac65358686950abe50b13bc0f0b1dd9729b585bfbb0244e199800"}, 0xd8) pipe2$watch_queue(&(0x7f0000000280), 0x80) socket$inet6(0xa, 0x1, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket(0x2000000000000021, 0x2, 0x2) shutdown(r4, 0x2) shutdown(r4, 0x2) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x0, 0x0) syz_extract_tcp_res(&(0x7f0000000080), 0x80000000, 0xd) syz_extract_tcp_res$synack(&(0x7f00000001c0), 0x1, 0x0) 5.73801934s ago: executing program 3 (id=1126): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000010c0), 0xa6242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r0, 0x4000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000000080)={0x8, {"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", 0x102b}}, 0x2000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) io_setup(0x8, 0x0) r3 = eventfd2(0x0, 0x80001) io_submit(0x0, 0x1, &(0x7f00000018c0)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x207f, r3, &(0x7f0000000040)="6f03eb178d8d5909", 0x8, 0x8001, 0x0, 0x0, r3}]) writev(r3, &(0x7f0000000580)=[{&(0x7f0000000640)="1b4fc2f0623b3d9c", 0x8}], 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x40) pwritev2(r4, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0x1800, 0x0, 0xc) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r4, 0x0, 0x25, 0x10, @val=@netfilter={0x1, 0x1, 0x6}}, 0x20) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4) write$UHID_CREATE2(r2, &(0x7f0000001900)={0xb, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0x1000, 0x1, 0x400, 0x7, 0x2, 0x0, "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"}}, 0x1118) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r4) sendmsg$TIPC_CMD_DISABLE_BEARER(r4, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r6, 0x4, 0x70bd2c, 0x25dfdbff, {{}, {}, {0x10, 0x13, @udp='udp:syz0\x00'}}, ["", "", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040050}, 0x4020) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000000)={r5, 0x0, 0x0}, 0x10) io_uring_enter(0xffffffffffffffff, 0x5125, 0xf6d7, 0x3, &(0x7f0000000040)={[0x2]}, 0x8) 4.111237536s ago: executing program 2 (id=1127): write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0xfffffffffffffffe, 0x0, {0x7, 0x1f, 0x2, 0xe9100f4f, 0xd, 0xe000, 0x10, 0x2, 0x0, 0x0, 0x80, 0x5}}, 0x50) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = socket$inet6(0xa, 0x3, 0x38) r5 = socket$inet(0x2, 0x1, 0x7) setsockopt$inet6_int(r4, 0x29, 0x7, &(0x7f0000000440)=0xeffe, 0x4) connect$inet6(r4, &(0x7f0000000280)={0xa, 0xfff6, 0xa1, @empty, 0x9}, 0xffffff08) writev(r4, &(0x7f0000000180)=[{&(0x7f00000002c0)="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", 0xf338}], 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xfffc, @none, 0xfff8}, 0xe) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0xfffffffffffffffc}) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x5}, 0xe) sendmmsg(0xffffffffffffffff, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8000) getsockopt$IP_VS_SO_GET_SERVICE(r5, 0x0, 0x483, &(0x7f0000000040), &(0x7f0000000140)=0x68) 4.093645508s ago: executing program 0 (id=1128): r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0xc, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f0000000300)=0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r5, 0x2) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x3, 0x0, 0x717e387b, 0x40, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x4, 0x2}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80, 0x0) r9 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r9, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$vim2m(0x0, 0x0, 0x2) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) syz_ublk_setup_queues(r8, r7, &(0x7f0000000540)={0x0, 0xc808, 0x0, 0xfffffffe, 0x28e}, &(0x7f0000000b40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb8c3, 0x20, 0x3, 0x197, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3c35, 0x100, 0x0, 0xc8, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7669, 0x4, 0x1, 0x2dd}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5027, 0x2, 0x2, 0x2b7}}], 0x4, &(0x7f0000001f40)={0x2e, 0x4a, 0x0, r8, 0xc0107523, 0x0, 0x0, 0x0, 0x0, {0x10}, 0x0, r6, '\x00', {0x1, 0xb55, 0x100104, 0x0}}, &(0x7f0000000180)) 3.951899971s ago: executing program 1 (id=1129): bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x205, 0x2581) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x842, 0x22) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x4000040, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b00000000000600010007"], 0x48}, 0x1, 0x0, 0x0, 0x40811}, 0x20) r8 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r8, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x32) sendmmsg(r8, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) 3.700539294s ago: executing program 4 (id=1130): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x8000, 0x58, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x70, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @rand_addr=0x64010101}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x401, 0x3d3, 0x3, 0x3ff, 0x9}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, &(0x7f0000001400)={{0x80, 0x8}, 'port0\x00', 0xe3, 0x1a3c47, 0x1, 0x0, 0x7ffffffc, 0x0, 0x0, 0x0, 0x5, 0xfe}) close_range(r1, 0xffffffffffffffff, 0x0) r2 = syz_usb_connect$uac1(0x0, 0xb1, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d0101890f0000030109029f0003010000000904000000010100000a24010000000201020d24060000030800000031ce21c798329740594c137d0000000c24020201010608000010000c24020000000300000000000924060006010000000924030000000005000b2406050001", @ANYRESOCT=0x0], 0x0) syz_usb_control_io(r2, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000200)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x804}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000d40)={0x84, &(0x7f0000000740)={0x0, 0x16, 0x1, "8a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000001180)={0x44, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x82, 0x1, '\x00'}, 0x0, 0x0, 0x0}) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3.468859919s ago: executing program 0 (id=1131): socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) r0 = socket$kcm(0x29, 0x5, 0x0) syz_open_dev$vcsa(0x0, 0x4, 0xd49100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) close(r0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a6970"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) ioctl$sock_inet_SIOCSIFBRDADDR(r3, 0x891a, &(0x7f00000001c0)={'nr0\x00', {0x2, 0x4e24, @multicast2}}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000000706010300000000000000000100000005000100070000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000040) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0x541b, &(0x7f0000000000)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet(0x2, 0x2, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120101020958b81010140470a206010500010902120001010110040904e85d004210ab02"], 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$vim2m(&(0x7f0000000140), 0x3, 0x2) syz_io_uring_setup(0x10d, &(0x7f0000000980)={0x0, 0xb9d3, 0x80, 0x0, 0x8}, 0x0, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000840), 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 3.162203818s ago: executing program 2 (id=1132): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), 0xffffffffffffffff) r2 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000018105704da07000000000001090224000100"], 0x0) r3 = inotify_init() inotify_add_watch(r3, 0x0, 0x100000000) socket$rxrpc(0x21, 0x2, 0xa) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x100, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0022220000009523b31ce93ee907000000002990370900be008300000000"], 0x0}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f00000000c0)={0xffffffffffffffff}) creat(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)='ueb\xdeb\xce') mount(&(0x7f0000000180), &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='ubifs\x00', 0x8000, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r4) sendmsg$DEVLINK_CMD_SB_POOL_GET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x14, r1, 0x329, 0x0, 0x0, {0x4e}}, 0x14}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff0000000000000800450000380000000000019078ac1e0001ac1414aa05009078000000004500000000000000002f01007f000001ac1414bb0000000000000000"], 0x0) 3.091504994s ago: executing program 3 (id=1133): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x0) syz_open_dev$usbmon(0x0, 0x0, 0x0) r5 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r5, 0x114, 0x3f, &(0x7f00000008c0)=0x2, 0x4) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r6, 0x4068aea3, &(0x7f0000000000)={0xc4, 0x0, 0xa}) 2.073337376s ago: executing program 3 (id=1134): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYRES32=r3, @ANYBLOB="05001300840000000a000600080211000001000006001000800500000600120001000000100011"], 0x50}, 0x1, 0x0, 0x0, 0x80c1}, 0x0) 2.071541683s ago: executing program 3 (id=1135): alarm(0x1000007fe) r0 = syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x460, 0x258, 0x268, 0x311, 0x0, 0x268, 0x390, 0x460, 0x460, 0x390, 0x460, 0x9, 0x0, {[{{@uncond, 0x160, 0x230, 0x258, 0x0, {0x9401}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0x9, 0x0, 0x0, 0x0, 0x5, 0x9}}}, @common=@unspec=@time={{0x38}, {0x0, 0x0, 0x1517f, 0xfffffffc}}]}, @common=@unspec=@NFQUEUE2={0x28}}, {{@uncond, 0x0, 0xd0, 0x138, 0xe4030000, {}, [@common=@ipv6header={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4c0) r2 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) ioctl$VIDIOC_S_SELECTION(r2, 0xc040565f, &(0x7f0000000040)={0x9, 0x100, 0x0, {0xffffffff, 0xbde, 0x400, 0x10000}}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000180)={0x20, 0x13}, 0x0, &(0x7f0000000200)={0x0, 0x8, 0x1, 0xff}, 0x0, 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x0, 0x0}) r3 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000010d804dd00000000000001090224000100000000090400000103000000092105000001220500090581030002"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r3, 0x81, 0x2, &(0x7f0000000000)="3be5") alarm(0x7db3) alarm(0x0) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) getrandom(&(0x7f00000001c0)=""/289, 0x121, 0x1) close(0xffffffffffffffff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f00000004c0)) socket$inet6(0xa, 0x1, 0x2c) getrandom(&(0x7f0000000000)=""/121, 0x79, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) 1.652949189s ago: executing program 0 (id=1136): bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x29, 0x5, 0x0) syz_open_dev$vcsa(0x0, 0x4, 0xd49100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) close(r0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, 0x0, 0x20004000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) ioctl$sock_inet_SIOCSIFBRDADDR(r3, 0x891a, &(0x7f00000001c0)={'nr0\x00', {0x2, 0x4e24, @multicast2}}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000000706010300000000000000000100000005000100070000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000040) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0x541b, &(0x7f0000000000)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet(0x2, 0x2, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120101020958b81010140470a206010500010902120001010110040904e85d004210ab02"], 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$vim2m(&(0x7f0000000140), 0x3, 0x2) syz_io_uring_setup(0x10d, &(0x7f0000000980)={0x0, 0xb9d3, 0x80, 0x0, 0x8}, 0x0, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000840), 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 1.090022444s ago: executing program 1 (id=1137): r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/vlan/vlan0\x00') preadv(r0, &(0x7f0000000300)=[{0x0}], 0x1, 0xa3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f00000000c0)=ANY=[], 0x6a) 1.053849252s ago: executing program 1 (id=1138): r0 = mq_open(0x0, 0x6e93ebbbcc0884f2, 0x0, 0x0) mq_timedreceive(r0, 0x0, 0xfffffffffffffee3, 0x1, 0x0) openat$adsp1(0xffffffffffffff9c, 0x0, 0xa0301, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x2, 0xab, &(0x7f0000000140)=""/171, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="1400001f1000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000050c0200000c0a01030000000000000000070000080900020073797a31000000000900010073797a3000000000e0010380dc010080080003400000000273000b802c0001800a0001006c696d69740000001c0002800c00014000000000000000030c000240000000000000000e14000180090001006c"], 0x290}}, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e04f20b20"], 0x7) 993.549247ms ago: executing program 4 (id=1139): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000540)=0xc2, 0x4) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc01020301090212000100000000090401"], 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000010000)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0}) r2 = syz_open_dev$I2C(&(0x7f00000000c0), 0x1, 0x402) writev(r2, &(0x7f0000002900)=[{&(0x7f0000000080)="ec", 0x1}], 0x1) r3 = fcntl$dupfd(r0, 0x0, r0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r3, 0x6, 0x2, 0x0, &(0x7f00000001c0)) madvise(&(0x7f000029a000/0x2000)=nil, 0x2000, 0x14) r4 = open(&(0x7f0000000000)='./bus\x00', 0xe0d41, 0x57) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f00000003c0)={0xd8, 0x0, 0x200}) r5 = socket(0x10, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f00000002c0)=0x9700644398370dff, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) socket$xdp(0x2c, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000580)={'sit0\x00', &(0x7f0000000500)={'syztnl0\x00', r6, 0x40, 0x8, 0x4, 0x9, {{0xa, 0x4, 0x1, 0xd, 0x28, 0x64, 0x0, 0x2, 0x29, 0x0, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@generic={0x44, 0x11, "f47b77adddca447d66d11b942ea877"}]}}}}}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000007c0)={0x14, r8, 0x1, 0x70bd2d, 0xfffffffa, {0x22}}, 0x14}, 0x1, 0x0, 0x0, 0x4008800}, 0x4040010) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000040)={0x0, @in6={{0xa, 0x4e24, 0x4, @remote, 0x9}}, 0x9, 0x6, 0xe, 0x0, 0xc, 0x2, 0x6}, &(0x7f0000000140)=0x9c) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f00000001c0)={r9}, &(0x7f0000000240)=0x8) r10 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r10, 0xc100565c, &(0x7f0000000400)={0x100000, 0x0, 0x1, {0x2, @win={{0x7, 0x7f, 0xffffff7c, 0xe6}, 0x6, 0xc83, 0x0, 0x9, 0x0, 0x5}}, 0x5}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000340)=[@cred={{0x1c}}], 0x20, 0x40081}, 0x10044080) sendmsg(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000280)=@in6={0xa, 0x4e23, 0x41, @mcast2, 0xfff}, 0x80, 0x0, 0x0, &(0x7f00000005c0)=[{0xf8, 0x112, 0x3, "b38ad0fa5344f86392a8a624588a9ebd811192cbcbc48c43148a7cc729a98cdc74f191ae2cd62d2652d78d6acf62b5eb8f161c8b04b3b2b547119b38e2badd726674a4693c080fe5c3492cb155656387a02c999695975d3d6137c986cb152d529c9225c772f2f854bf5ab89e259312dacf6b9debd2bf43be3dc19840f0c35b2d960ac50a9f2bcf98156f76700462166d7eb6416b2a7510be974b3f7a06c8927e28a62f708cce515c9c922c8c0c8daf4646e725d7282571b819097b58963d71992c2938f34c3516c547423d99a2f90f3a146a044cb732f4f4a0305c9d37fcb667e5"}, {0x28, 0x104, 0x1800, "c145622a91872b3730467c92a3a5050f02b82b"}, {0x40, 0x112, 0x3ff, "ae15b1a3e016bb782adb738fa764d4487026530ac6f50e3b31ec875a38f17bac40e87117dbd6ba47cf721b216e"}, {0x30, 0x10a, 0xa63, "fa08ab919987305c8ad63785f4a4bc842436d5cb79f70a5d76"}, {0x20, 0x84, 0x9, "db71718063811f77398f9181310aba"}], 0x1b0}, 0x4000c010) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x82, 0x105}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r11}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, &(0x7f0000000840)=""/121, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r11}, 0x38) ioctl$KVM_GET_TSC_KHZ_vm(r4, 0xaea3) 0s ago: executing program 2 (id=1140): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100000001000089}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f00000000c0)=0x94a, 0x4) syz_emit_ethernet(0x76, &(0x7f0000000340)=ANY=[@ANYBLOB="bbbbbbbbbbbb0086dd6100000000403a00fc000000000000000000000000000001ff02000000000000003b00000000000101009078000000006d3103000f4e000120010000000000000000000000020001fc0100000000000000000000000000053a000c08650400000d00006a08000000"], 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$unix(0x1, 0x2, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x91}, 0x24044804) sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r6 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r8, &(0x7f000001a480)={&(0x7f000001a040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f000001a440)={&(0x7f000001a080)={0x350, r5, 0x20, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_TID_CONFIG={0x4}, @NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xaf}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xac}]}]}, @NL80211_ATTR_TID_CONFIG={0xcc, 0x11d, 0x0, 0x1, [{0xc8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x613}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xa0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x9c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0xa, 0x2, [{0x0, 0x5}, {0x0, 0x8}, {0x7, 0x2}, {0x3, 0x1}, {0x5, 0xa}, {0x6, 0x1}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x0, 0xa, 0x6, 0x2, 0xb9, 0x8, 0xaa7]}}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x12, 0x48, 0x16, 0x30, 0x6c, 0x1b, 0x0, 0x2, 0x5, 0x1, 0x9, 0x2, 0x5, 0x24, 0x28, 0x30, 0x30, 0x18, 0x6, 0xb, 0x1b, 0x60, 0x6c, 0x16, 0x18, 0x9, 0x24, 0x32, 0x1, 0x16, 0x3, 0xb]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0xb, 0x7, 0xc25, 0x1, 0x88a, 0x4, 0x2]}}, @NL80211_TXRATE_HT={0x37, 0x2, [{0x3, 0x9}, {0x2, 0x8}, {0x6, 0x3}, {}, {0x0, 0x6}, {0x2}, {0x1, 0x7}, {0x7, 0x4}, {0x6, 0x7}, {0x2, 0x5}, {0x6, 0x6}, {0x0, 0x8}, {0x5, 0x5}, {0x1, 0xa}, {0x2, 0x2}, {0x7, 0x3}, {0x1, 0x4}, {0x5}, {0x4, 0x2}, {0x1, 0x3}, {0x1, 0x5}, {0x6, 0x3}, {0x7, 0x4}, {0x1, 0x9}, {0x1}, {0x6, 0x7}, {0x3, 0x8}, {0x7}, {0x2}, {0x4, 0x7}, {0x0, 0x7}, {0x7, 0x9}, {0x2, 0x5}, {0x5}, {0x1}, {0x7, 0x4}, {0x0, 0x4}, {0x1, 0x3}, {0x0, 0x5}, {0x1, 0x4}, {0x0, 0x5}, {0x0, 0x6}, {0x1, 0x2}, {0x0, 0x8}, {0x1, 0xa}, {0x3, 0x6}, {0x7, 0x7}, {0x5, 0x4}, {0x0, 0x8}, {0x0, 0x1}, {0x2, 0x2}]}]}]}]}]}, @NL80211_ATTR_TID_CONFIG={0x1b4, 0x11d, 0x0, 0x1, [{0x1ac, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x170, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x5c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4d, 0x2, [{0x0, 0x3}, {0x2, 0xa}, {0x7, 0x2}, {0x5, 0xa}, {0x4, 0xa}, {0x7, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x1, 0x2}, {0x4}, {0x7, 0x6}, {0x4, 0x9}, {0x5, 0x5}, {0x5, 0x7}, {0x7}, {0x1}, {0x1, 0x6}, {0x7, 0x7}, {0x0, 0x1}, {0x7, 0x2}, {0x6, 0x8}, {0x4, 0x5}, {0x1, 0x4}, {0x5, 0x4}, {0x7, 0x2}, {0x0, 0x9}, {0x1, 0x3}, {0x7, 0x7}, {0x3, 0x9}, {0x6, 0x9}, {0x4, 0x8}, {0x3, 0x9}, {0x6, 0xa}, {0x5, 0x4}, {0x5, 0x3}, {0x0, 0x1}, {0x3, 0x7}, {0x2, 0x7}, {0x6, 0x2}, {0x1, 0x3}, {0x2, 0x9}, {0x5, 0x5}, {0x1, 0x1}, {0x0, 0x4}, {0x0, 0x1}, {0x2, 0x3}, {0x2, 0x5}, {0x4, 0x3}, {0x0, 0x4}, {0x1, 0x3}, {0x6, 0x9}, {0x5, 0x7}, {0x0, 0x5}, {0x1, 0x9}, {0x1, 0x5}, {0x6, 0x1}, {0x1, 0x5}, {0x6, 0xa}, {0x5, 0xa}, {0x0, 0x1}, {0x6}, {0x5, 0x2}, {0x5, 0xa}, {0x3}, {0x0, 0x5}, {0x2, 0x1}, {0x0, 0x2}, {0x7, 0x8}, {0x5}, {0x5, 0x4}, {0x2, 0x7}, {0x7, 0x8}, {0x0, 0x4}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x6c, 0x23, 0xc, 0x3, 0xc, 0x6, 0x6c, 0x2, 0x6c, 0x30, 0x4, 0x6c, 0xc, 0x24, 0x12, 0x30, 0x36, 0xc, 0x36, 0x4, 0x3, 0x2, 0x9, 0x26]}]}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0xb, 0x2, [{0x1, 0x3}, {0x6, 0x5}, {0x5, 0x3}, {0x0, 0xa}, {0x4, 0x3}, {0x1, 0x6}, {0x0, 0x3}]}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x100, 0x400, 0x2, 0x1, 0x2, 0xa, 0x4, 0x89c9]}}]}, @NL80211_BAND_60GHZ={0x90, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1f, 0x2, [{0x1, 0x7}, {0x0, 0x6}, {0x5, 0x4}, {0x6, 0x1}, {0x0, 0x5}, {0x0, 0x8}, {0x1, 0xa}, {0x5, 0x4}, {0x5, 0x2}, {0x0, 0x5}, {0x4, 0x5}, {0x5, 0x9}, {0x6, 0x8}, {0x0, 0x1}, {0x7}, {0x1, 0x3}, {0x7, 0x3}, {0x3, 0x9}, {0x4, 0x6}, {0x5, 0xa}, {0x5, 0xa}, {0x1, 0x6}, {0x7, 0x9}, {0x2, 0x4}, {0x1, 0x8}, {0x4, 0x4}, {0x2, 0x3}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfffa, 0xa7af, 0x1, 0x7, 0x4, 0x3, 0xa, 0x9]}}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x24, 0xc, 0xb, 0x30, 0x60, 0xc, 0x6, 0x60, 0x1b, 0x24, 0x1b, 0x6c, 0x0, 0x9, 0x36, 0x36, 0xc, 0x48, 0x16, 0x30, 0x6c, 0x36, 0x5, 0x24, 0xb, 0xc, 0x36, 0x6c, 0x16]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x4, 0x7ff, 0x8, 0x0, 0x9, 0xfc00, 0x7]}}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff3, 0xf, 0x3, 0x7, 0x1, 0x88a6, 0x3ff, 0x2]}}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9493, 0x0, 0x8, 0xffff, 0xffff, 0xff81, 0x9, 0x3]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x2}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7}]}, {0x4}]}, @NL80211_ATTR_TID_CONFIG={0x34, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xe3}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x33}]}]}, @NL80211_ATTR_TID_CONFIG={0x3c, 0x11d, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xff}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x30, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x71}]}]}]}, 0x350}, 0x1, 0x0, 0x0, 0x840}, 0x4) read$msr(r7, &(0x7f0000001040)=""/102400, 0x19000) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0), 0x0) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000020c0)={0x44, r11, 0x1, 0x300, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_LEVEL={0x24, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8}]}]}, 0x44}}, 0x0) write$UHID_INPUT(r9, &(0x7f0000000000)={0x9, {"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", 0x1000}}, 0x1006) kernel console output (not intermixed with test programs): [ 325.073261][ T9] usb 2-1: config 0 interface 89 has no altsetting 0 [ 325.186895][ T9] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 325.196568][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.205389][ T9] usb 2-1: Product: syz [ 325.218099][ T9] usb 2-1: Manufacturer: syz [ 325.223448][ T9] usb 2-1: SerialNumber: syz [ 325.247541][ T9] usb 2-1: config 0 descriptor?? [ 325.453215][ T10] usb 1-1: USB disconnect, device number 35 [ 325.483537][ T9] em28xx 2-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 325.498210][ T9] em28xx 2-1:0.89: Video interface 89 found: [ 325.567093][ T30] audit: type=1400 audit(1783879552.515:1493): avc: denied { cmd } for pid=8812 comm="iou-wrk-8815" path="/dev/ublk-control" dev="devtmpfs" ino=697 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 325.630070][ T30] audit: type=1400 audit(1783879552.585:1494): avc: denied { write } for pid=8812 comm="syz.0.770" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 325.947563][ T30] audit: type=1400 audit(1783879552.895:1495): avc: denied { map } for pid=8812 comm="syz.0.770" path="/dev/ublkc8" dev="devtmpfs" ino=3291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 325.994206][ T9] em28xx 2-1:0.89: unknown em28xx chip ID (0) [ 326.107783][ T187] usb 5-1: USB disconnect, device number 42 [ 326.395775][ T8826] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 326.473349][ T8828] netlink: 20 bytes leftover after parsing attributes in process `syz.0.772'. [ 327.224314][ T30] audit: type=1326 audit(1783879554.165:1496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8794 comm="syz.1.764" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d4b99de59 code=0x7ffc0000 [ 327.278035][ T30] audit: type=1326 audit(1783879554.165:1497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8794 comm="syz.1.764" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d4b99de59 code=0x7ffc0000 [ 327.304399][ T30] audit: type=1326 audit(1783879554.165:1498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8794 comm="syz.1.764" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=6 compat=0 ip=0x7f6d4b99de59 code=0x7ffc0000 [ 327.435595][ T30] audit: type=1326 audit(1783879554.165:1499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8794 comm="syz.1.764" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d4b99de59 code=0x7ffc0000 [ 327.533736][ T8837] netlink: 8 bytes leftover after parsing attributes in process `syz.4.776'. [ 327.543918][ T8837] 9p: Bad value for 'rfdno' [ 327.560160][ T30] audit: type=1326 audit(1783879554.165:1500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8794 comm="syz.1.764" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d4b99de59 code=0x7ffc0000 [ 327.600531][ T8835] xt_cgroup: invalid path, errno=-2 [ 327.686341][ T30] audit: type=1326 audit(1783879554.165:1501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8794 comm="syz.1.764" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f6d4b99de59 code=0x7ffc0000 [ 327.753373][ T30] audit: type=1326 audit(1783879554.165:1502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8794 comm="syz.1.764" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d4b99de59 code=0x7ffc0000 [ 328.097635][ T8839] netlink: 36 bytes leftover after parsing attributes in process `syz.4.776'. [ 328.193772][ T9] em28xx 2-1:0.89: writing to i2c device at 0xa0 failed (error=-5) [ 328.201723][ T9] em28xx 2-1:0.89: failed to read eeprom (err=-5) [ 328.208162][ T9] em28xx 2-1:0.89: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5] [ 328.237595][ T8843] netlink: 68 bytes leftover after parsing attributes in process `syz.3.777'. [ 328.247220][ T8843] syzkaller0: entered promiscuous mode [ 328.252742][ T8843] syzkaller0: entered allmulticast mode [ 328.356974][ T9] em28xx 2-1:0.89: Identified as Terratec Grabby (card=67) [ 328.364617][ T9] em28xx 2-1:0.89: analog set to bulk mode. [ 328.382135][ T187] em28xx 2-1:0.89: Registering V4L2 extension [ 328.445489][ T9] usb 2-1: USB disconnect, device number 34 [ 328.497365][ T9] em28xx 2-1:0.89: Disconnecting em28xx [ 328.556054][ T8848] netlink: 44 bytes leftover after parsing attributes in process `syz.3.779'. [ 328.574407][ T187] em28xx 2-1:0.89: Config register raw data: 0xffffffed [ 328.601435][ T187] em28xx 2-1:0.89: AC97 chip type couldn't be determined [ 328.634664][ T187] em28xx 2-1:0.89: No AC97 audio processor [ 328.662587][ T187] usb 2-1: Decoder not found [ 328.677662][ T187] em28xx 2-1:0.89: failed to create media graph [ 328.707711][ T187] em28xx 2-1:0.89: V4L2 device video103 deregistered [ 328.720549][ T187] em28xx 2-1:0.89: Registering snapshot button... [ 329.058368][ T187] input: em28xx snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.89/input/input36 [ 329.074059][ T187] em28xx 2-1:0.89: Remote control support is not available for this card. [ 329.093293][ T9] em28xx 2-1:0.89: Closing input extension [ 329.104963][ T9] em28xx 2-1:0.89: Deregistering snapshot button [ 329.145043][ T9] em28xx 2-1:0.89: Freeing device [ 329.333156][ T8860] Driver unsupported XDP return value 0 on prog (id 127) dev N/A, expect packet loss! [ 329.537845][ T5720] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 329.556509][ T5713] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 329.766604][ T5720] usb 4-1: Using ep0 maxpacket: 16 [ 329.773439][ T5713] usb 5-1: Using ep0 maxpacket: 16 [ 329.785307][ T5720] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 329.802453][ T5713] usb 5-1: config 0 has an invalid descriptor of length 52, skipping remainder of the config [ 329.816482][ T9] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 329.819942][ T5713] usb 5-1: too many endpoints for config 0 interface 0 altsetting 49: 56, using maximum allowed: 30 [ 329.843245][ T5720] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 329.988280][ T5713] usb 5-1: config 0 interface 0 altsetting 49 has 0 endpoint descriptors, different from the interface descriptor's value: 56 [ 330.002737][ T5720] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.010834][ T5720] usb 4-1: Product: syz [ 330.015370][ T5713] usb 5-1: config 0 interface 0 has no altsetting 0 [ 330.022048][ T5720] usb 4-1: Manufacturer: syz [ 330.026950][ T5720] usb 4-1: SerialNumber: syz [ 330.034663][ T5713] usb 5-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 330.046639][ T5720] usb 4-1: config 0 descriptor?? [ 330.056129][ T5713] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.074780][ T5720] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 330.090489][ T5713] usb 5-1: Product: syz [ 330.100647][ T5713] usb 5-1: Manufacturer: syz [ 330.112190][ T5713] usb 5-1: SerialNumber: syz [ 330.468014][ T5713] usb 5-1: config 0 descriptor?? [ 330.944601][ T8875] netlink: 44 bytes leftover after parsing attributes in process `syz.0.787'. [ 330.957434][ T5720] usb 4-1: USB disconnect, device number 43 [ 331.932001][ T36] usb 4-1: Failed to submit usb control message: -71 [ 331.938924][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 331.958887][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 331.958914][ T30] audit: type=1400 audit(1783879558.915:1526): avc: denied { connect } for pid=8874 comm="syz.0.787" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 331.985261][ T36] usb 4-1: unable to send the bmi data to the device: -71 [ 331.985322][ T36] usb 4-1: unable to get target info from device [ 331.985337][ T36] usb 4-1: could not get target info (-71) [ 331.985352][ T36] usb 4-1: could not probe fw (-71) [ 332.087345][ T30] audit: type=1400 audit(1783879558.915:1527): avc: denied { bind } for pid=8874 comm="syz.0.787" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 332.108168][ T30] audit: type=1400 audit(1783879558.915:1528): avc: denied { write } for pid=8874 comm="syz.0.787" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 332.127380][ T30] audit: type=1400 audit(1783879558.995:1529): avc: denied { bind } for pid=8880 comm="syz.1.788" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 332.146664][ T30] audit: type=1400 audit(1783879558.995:1530): avc: denied { node_bind } for pid=8880 comm="syz.1.788" saddr=224.0.0.1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 332.557462][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 332.790834][ T9] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 332.906925][ T9] usb 3-1: can't read configurations, error -71 [ 333.468734][ T5713] usb 5-1: USB disconnect, device number 43 [ 333.546206][ T8886] netlink: 44 bytes leftover after parsing attributes in process `syz.1.789'. [ 334.046699][ T5713] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 334.247086][ T5713] usb 5-1: Using ep0 maxpacket: 32 [ 334.267372][ T5713] usb 5-1: config 0 has an invalid interface number: 89 but max is 0 [ 334.291780][ T5713] usb 5-1: config 0 has no interface number 0 [ 334.310460][ T5713] usb 5-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 334.346432][ T5713] usb 5-1: config 0 interface 89 has no altsetting 0 [ 334.391688][ T5713] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 334.405748][ T30] audit: type=1400 audit(1783879561.355:1531): avc: denied { write } for pid=8895 comm="syz.0.792" path="socket:[24755]" dev="sockfs" ino=24755 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 334.418142][ T5713] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.492668][ T5713] usb 5-1: Product: syz [ 334.502729][ T5713] usb 5-1: Manufacturer: syz [ 334.516154][ T5713] usb 5-1: SerialNumber: syz [ 334.533064][ T5713] usb 5-1: config 0 descriptor?? [ 334.551823][ T5713] em28xx 5-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 334.579303][ T5713] em28xx 5-1:0.89: Video interface 89 found: [ 334.636594][ T5720] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 334.798022][ T5720] usb 1-1: Using ep0 maxpacket: 32 [ 334.813597][ T5720] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 334.872993][ T5720] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 334.894169][ T5720] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 334.917646][ T5720] usb 1-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 334.926827][ T5720] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.934905][ T5720] usb 1-1: Product: syz [ 334.945257][ T5720] usb 1-1: Manufacturer: syz [ 334.950504][ T5720] usb 1-1: SerialNumber: syz [ 334.974752][ T5720] usb 1-1: config 0 descriptor?? [ 335.166317][ T5713] em28xx 5-1:0.89: unknown em28xx chip ID (0) [ 335.233594][ T30] audit: type=1400 audit(1783879562.185:1532): avc: denied { setopt } for pid=8918 comm="syz.3.798" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 337.577119][ T8889] xt_cgroup: invalid path, errno=-2 [ 337.916279][ T9] usb 1-1: USB disconnect, device number 36 [ 337.977335][ T5713] em28xx 5-1:0.89: writing to i2c device at 0xa0 failed (error=-5) [ 338.007529][ T5713] em28xx 5-1:0.89: failed to read eeprom (err=-5) [ 338.017301][ T5713] em28xx 5-1:0.89: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5] [ 338.087123][ T5713] em28xx 5-1:0.89: Identified as Terratec Grabby (card=67) [ 338.119046][ T5713] em28xx 5-1:0.89: analog set to bulk mode. [ 338.148605][ T5705] em28xx 5-1:0.89: Registering V4L2 extension [ 338.172706][ T5713] usb 5-1: USB disconnect, device number 44 [ 338.201649][ T5713] em28xx 5-1:0.89: Disconnecting em28xx [ 338.209075][ T8936] netlink: 44 bytes leftover after parsing attributes in process `syz.0.802'. [ 338.248804][ T5705] em28xx 5-1:0.89: Config register raw data: 0xffffffed [ 338.257528][ T5705] em28xx 5-1:0.89: AC97 chip type couldn't be determined [ 338.264568][ T5705] em28xx 5-1:0.89: No AC97 audio processor [ 338.282296][ T5705] usb 5-1: Decoder not found [ 338.292655][ T5705] em28xx 5-1:0.89: failed to create media graph [ 338.319021][ T5705] em28xx 5-1:0.89: V4L2 device video103 deregistered [ 338.326218][ T187] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 338.699974][ T5705] em28xx 5-1:0.89: Registering snapshot button... [ 338.711065][ T5705] input: em28xx snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.89/input/input37 [ 339.818503][ T5705] em28xx 5-1:0.89: Remote control support is not available for this card. [ 339.847589][ T5713] em28xx 5-1:0.89: Closing input extension [ 339.871591][ T5713] em28xx 5-1:0.89: Deregistering snapshot button [ 339.922728][ T8944] ip6_vti0: Caught tx_queue_len zero misconfig [ 339.962006][ T8944] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 339.994544][ T8944] cramfs: wrong magic [ 340.246280][ T5713] em28xx 5-1:0.89: Freeing device [ 340.296624][ T187] usb 2-1: Using ep0 maxpacket: 16 [ 340.304300][ T187] usb 2-1: config 0 has an invalid descriptor of length 52, skipping remainder of the config [ 340.326517][ T187] usb 2-1: too many endpoints for config 0 interface 0 altsetting 49: 56, using maximum allowed: 30 [ 340.356730][ T187] usb 2-1: config 0 interface 0 altsetting 49 has 0 endpoint descriptors, different from the interface descriptor's value: 56 [ 340.380192][ T187] usb 2-1: config 0 interface 0 has no altsetting 0 [ 340.500317][ T187] usb 2-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 340.536044][ T187] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.555040][ T187] usb 2-1: Product: syz [ 340.565664][ T187] usb 2-1: Manufacturer: syz [ 340.590664][ T187] usb 2-1: SerialNumber: syz [ 340.706014][ T187] usb 2-1: config 0 descriptor?? [ 341.702790][ T5713] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 342.117714][ T5713] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 342.125876][ T5713] usb 1-1: config 0 has no interface number 0 [ 342.138922][ T5713] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 342.155164][ T5713] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.940394][ T5713] usb 1-1: Product: syz [ 343.153056][ T5713] usb 1-1: Manufacturer: syz [ 343.194543][ T5713] usb 1-1: SerialNumber: syz [ 343.195928][ T187] usb 2-1: USB disconnect, device number 35 [ 343.527936][ T5713] usb 1-1: config 0 descriptor?? [ 344.612225][ T5713] dvb_usb_ec168 1-1:0.1: probe with driver dvb_usb_ec168 failed with error -71 [ 344.786794][ T5713] usb 1-1: USB disconnect, device number 37 [ 345.045759][ T8994] netlink: 24 bytes leftover after parsing attributes in process `syz.0.819'. [ 345.186525][ T5705] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 345.212658][ T9] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 345.433833][ T5705] usb 5-1: Using ep0 maxpacket: 16 [ 345.703612][ T5705] usb 5-1: unable to get BOS descriptor or descriptor too short [ 345.714359][ T5705] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 345.718278][ T9] usb 2-1: config 1 interface 0 has no altsetting 0 [ 345.725655][ T5705] usb 5-1: can't read configurations, error -71 [ 346.195250][ T9] usb 2-1: string descriptor 0 read error: -22 [ 346.201865][ T9] usb 2-1: New USB device found, idVendor=0853, idProduct=0148, bcdDevice= 0.40 [ 346.221067][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.707560][ T9] usbhid 2-1:1.0: can't add hid device: -71 [ 347.719653][ T9] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 347.790966][ T9] usb 2-1: USB disconnect, device number 36 [ 348.417086][ T5705] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 348.677577][ T5705] usb 4-1: Using ep0 maxpacket: 16 [ 348.745789][ T5713] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 348.829885][ T5705] usb 4-1: config 0 has an invalid descriptor of length 52, skipping remainder of the config [ 348.913875][ T5705] usb 4-1: too many endpoints for config 0 interface 0 altsetting 49: 56, using maximum allowed: 30 [ 348.930148][ T5705] usb 4-1: config 0 interface 0 altsetting 49 has 0 endpoint descriptors, different from the interface descriptor's value: 56 [ 348.945763][ T5705] usb 4-1: config 0 interface 0 has no altsetting 0 [ 348.956004][ T5705] usb 4-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 348.966710][ T5705] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.977061][ T5705] usb 4-1: Product: syz [ 348.984764][ T5705] usb 4-1: Manufacturer: syz [ 348.994616][ T5705] usb 4-1: SerialNumber: syz [ 349.010074][ T5705] usb 4-1: config 0 descriptor?? [ 349.056433][ T5713] usb 1-1: Using ep0 maxpacket: 16 [ 349.081148][ T5713] usb 1-1: unable to get BOS descriptor or descriptor too short [ 349.972319][ T5713] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 349.986738][ T5713] usb 1-1: can't read configurations, error -71 [ 350.160974][ T9038] netlink: 16 bytes leftover after parsing attributes in process `syz.4.831'. [ 350.996403][ T890] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 351.066396][ T24] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 351.397702][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 351.630790][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 351.643305][ T24] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 351.652679][ T890] usb 2-1: new full-speed USB device number 38 using dummy_hcd [ 351.660340][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.668703][ T24] usb 3-1: Product: syz [ 351.672932][ T24] usb 3-1: Manufacturer: syz [ 351.677932][ T24] usb 3-1: SerialNumber: syz [ 351.685129][ T24] usb 3-1: config 0 descriptor?? [ 351.697694][ T24] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 351.828005][ T890] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 351.843189][ T890] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 351.867777][ T890] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 255, setting to 64 [ 351.907266][ T890] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 351.920385][ T890] usb 2-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 351.929506][ T890] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.940218][ T890] usb 2-1: config 0 descriptor?? [ 351.946954][ T9046] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 352.096826][ T5705] usb 4-1: USB disconnect, device number 44 [ 352.432579][ T9046] lo speed is unknown, defaulting to 1000 [ 352.691506][ T57] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 352.792185][ T890] hid_parser_main: 30 callbacks suppressed [ 352.792206][ T890] hid-multitouch 0003:1FD2:6007.0010: unknown main item tag 0x0 [ 352.819919][ T890] hid-multitouch 0003:1FD2:6007.0010: unknown main item tag 0x0 [ 352.827683][ T890] hid-multitouch 0003:1FD2:6007.0010: unknown main item tag 0x0 [ 352.833442][ T7758] usb 3-1: Failed to submit usb control message: -110 [ 352.835327][ T890] hid-multitouch 0003:1FD2:6007.0010: unknown main item tag 0x0 [ 352.835352][ T890] hid-multitouch 0003:1FD2:6007.0010: unknown main item tag 0x0 [ 352.835373][ T890] hid-multitouch 0003:1FD2:6007.0010: unknown main item tag 0x0 [ 352.835394][ T890] hid-multitouch 0003:1FD2:6007.0010: unknown main item tag 0x0 [ 352.835415][ T890] hid-multitouch 0003:1FD2:6007.0010: unknown main item tag 0x0 [ 352.835436][ T890] hid-multitouch 0003:1FD2:6007.0010: unknown main item tag 0x0 [ 352.835456][ T890] hid-multitouch 0003:1FD2:6007.0010: unknown main item tag 0x0 [ 352.837512][ T890] hid-multitouch 0003:1FD2:6007.0010: hidraw0: USB HID v0.05 Device [HID 1fd2:6007] on usb-dummy_hcd.1-1/input0 [ 352.957189][ T7758] usb 3-1: unable to send the bmi data to the device: -110 [ 352.983896][ T7758] usb 3-1: unable to get target info from device [ 353.002465][ T7758] usb 3-1: could not get target info (-110) [ 353.026136][ T7758] usb 3-1: could not probe fw (-110) [ 353.091334][ T30] audit: type=1400 audit(1783879580.045:1533): avc: denied { accept } for pid=9071 comm="syz.0.840" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 353.139945][ T30] audit: type=1400 audit(1783879580.085:1534): avc: denied { connect } for pid=9071 comm="syz.0.840" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 353.290551][ T5799] usb 3-1: USB disconnect, device number 45 [ 353.338211][ T890] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 353.447622][ T9078] netlink: 16 bytes leftover after parsing attributes in process `syz.3.844'. [ 353.537733][ T890] usb 5-1: Using ep0 maxpacket: 32 [ 353.555883][ T890] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 353.591923][ T890] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 353.625426][ T890] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 353.660492][ T890] usb 5-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 353.683642][ T890] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.711171][ T890] usb 5-1: Product: syz [ 353.727135][ T890] usb 5-1: Manufacturer: syz [ 353.743730][ T890] usb 5-1: SerialNumber: syz [ 353.766546][ T9] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 353.917951][ T890] usb 5-1: config 0 descriptor?? [ 354.726768][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 354.756568][ T9] usb 1-1: config 3 has an invalid interface number: 45 but max is 0 [ 354.810922][ T9] usb 1-1: config 3 contains an unexpected descriptor of type 0x1, skipping [ 354.822436][ T187] usb 2-1: USB disconnect, device number 38 [ 354.841071][ T9] usb 1-1: config 3 has no interface number 0 [ 354.868044][ T9] usb 1-1: config 3 interface 45 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 354.899492][ T9091] netlink: 32 bytes leftover after parsing attributes in process `syz.3.847'. [ 354.919976][ T9] usb 1-1: config 3 interface 45 has no altsetting 0 [ 354.946729][ T9] usb 1-1: New USB device found, idVendor=0582, idProduct=e6ca, bcdDevice=d3.0b [ 354.968472][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.007644][ T9] usb 1-1: Product: syz [ 355.022542][ T9] usb 1-1: Manufacturer: syz [ 355.038260][ T9] usb 1-1: SerialNumber: syz [ 355.497417][ T30] audit: type=1400 audit(1783879582.445:1535): avc: denied { map } for pid=9079 comm="syz.0.843" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 355.528004][ T9080] binder_alloc: 9079: pid 9079 spamming oneway? 1 buffers allocated for a total size of 4096 [ 355.636976][ T30] audit: type=1400 audit(1783879582.445:1536): avc: denied { call } for pid=9079 comm="syz.0.843" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 355.656703][ T187] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 355.849529][ T9] usb 1-1: USB disconnect, device number 40 [ 356.123135][ T187] usb 2-1: Using ep0 maxpacket: 16 [ 356.132379][ T187] usb 2-1: config 0 has an invalid descriptor of length 52, skipping remainder of the config [ 356.143843][ T187] usb 2-1: too many endpoints for config 0 interface 0 altsetting 49: 56, using maximum allowed: 30 [ 356.231128][ T187] usb 2-1: config 0 interface 0 altsetting 49 has 0 endpoint descriptors, different from the interface descriptor's value: 56 [ 356.270599][ T187] usb 2-1: config 0 interface 0 has no altsetting 0 [ 356.282315][ T6387] udevd[6387]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:3.45/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 356.327881][ T187] usb 2-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 356.354639][ T187] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.393596][ T187] usb 2-1: Product: syz [ 356.410160][ T187] usb 2-1: Manufacturer: syz [ 356.421876][ T187] usb 2-1: SerialNumber: syz [ 356.445838][ T187] usb 2-1: config 0 descriptor?? [ 358.068125][ T9] usb 1-1: new full-speed USB device number 41 using dummy_hcd [ 358.107654][ T5705] usb 5-1: USB disconnect, device number 47 [ 358.145972][ T9121] overlayfs: overlapping lowerdir path [ 358.229943][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 358.244077][ T9] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C [ 358.279750][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 10 [ 358.291151][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid maxpacket 212, setting to 64 [ 358.301967][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 359.019977][ T187] usb 2-1: USB disconnect, device number 39 [ 359.101045][ T9] usb 1-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 359.130437][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.241168][ T9] usb 1-1: Product: syz [ 359.259031][ T9] usb 1-1: Manufacturer: syz [ 359.276170][ T9] usb 1-1: SerialNumber: syz [ 359.307741][ T9] usb 1-1: config 0 descriptor?? [ 359.318925][ T9115] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 359.512786][ T24] kernel write not supported for file /media0 (pid: 24 comm: kworker/1:0) [ 359.583286][ T9] rc_core: IR keymap rc-xbox-dvd not found [ 359.589138][ T9] Registered IR keymap rc-empty [ 359.731477][ T30] audit: type=1400 audit(1783879586.635:1537): avc: denied { read } for pid=9149 comm="syz.2.865" dev="sockfs" ino=24162 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 359.732379][ T9] rc rc0: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 359.756155][ T9150] netlink: 184 bytes leftover after parsing attributes in process `syz.2.865'. [ 359.764234][ T9] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input38 [ 359.953956][ T187] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 360.559086][ T187] usb 4-1: Using ep0 maxpacket: 16 [ 360.633308][ T30] audit: type=1400 audit(1783879587.555:1538): avc: denied { read write } for pid=9162 comm="syz.2.868" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 360.666995][ T9165] 9p: Bad value for 'rfdno' [ 360.695313][ T187] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 360.714665][ T187] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 360.729500][ T30] audit: type=1400 audit(1783879587.615:1539): avc: denied { open } for pid=9162 comm="syz.2.868" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 360.734062][ T187] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 360.772889][ T187] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 360.781992][ T187] usb 4-1: SerialNumber: syz [ 360.805814][ T187] usb 4-1: 0:2 : does not exist [ 360.846427][ T5705] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 361.106605][ T5705] usb 2-1: Using ep0 maxpacket: 16 [ 361.114253][ T5705] usb 2-1: config 0 has an invalid descriptor of length 52, skipping remainder of the config [ 361.124555][ T5705] usb 2-1: too many endpoints for config 0 interface 0 altsetting 49: 56, using maximum allowed: 30 [ 361.135448][ T5705] usb 2-1: config 0 interface 0 altsetting 49 has 0 endpoint descriptors, different from the interface descriptor's value: 56 [ 361.148979][ T5705] usb 2-1: config 0 interface 0 has no altsetting 0 [ 361.160588][ T5705] usb 2-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 361.170597][ T5705] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.178785][ T5705] usb 2-1: Product: syz [ 361.182996][ T5705] usb 2-1: Manufacturer: syz [ 361.187692][ T5705] usb 2-1: SerialNumber: syz [ 361.194683][ T5705] usb 2-1: config 0 descriptor?? [ 361.293355][ T187] usb 4-1: 5:0: cannot get min/max values for control 5 (id 5) [ 361.306429][ T24] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 361.308485][ T187] usb 4-1: 5:0: cannot get min/max values for control 5 (id 5) [ 361.345750][ T187] usb 4-1: 5:0: cannot get min/max values for control 5 (id 5) [ 361.395269][ T187] usb 4-1: USB disconnect, device number 45 [ 361.592764][ T24] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 361.606416][ T24] usb 5-1: config 0 has no interface number 0 [ 361.676751][ C0] xbox_remote 1-1:0.0: xbox_remote_irq_in: usb_submit_urb()=-19 [ 361.676823][ T5713] usb 1-1: USB disconnect, device number 41 [ 361.690702][ T24] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 361.700463][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.709157][ T24] usb 5-1: Product: syz [ 361.713408][ T24] usb 5-1: Manufacturer: syz [ 361.718073][ T24] usb 5-1: SerialNumber: syz [ 362.375438][ T24] usb 5-1: config 0 descriptor?? [ 362.677640][ T24] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 362.731735][ T24] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 362.746198][ T24] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 362.757760][ T24] usb 5-1: media controller created [ 362.845002][ T9189] netlink: 28 bytes leftover after parsing attributes in process `syz.3.874'. [ 363.170336][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 363.517293][ T9197] FAULT_INJECTION: forcing a failure. [ 363.517293][ T9197] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 363.530355][ T9197] CPU: 0 UID: 0 PID: 9197 Comm: syz.3.878 Not tainted syzkaller #0 PREEMPT(full) [ 363.530378][ T9197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 363.530387][ T9197] Call Trace: [ 363.530394][ T9197] [ 363.530400][ T9197] dump_stack_lvl+0x100/0x190 [ 363.530424][ T9197] should_fail_ex.cold+0x5/0xa [ 363.530445][ T9197] _copy_from_iter+0x1f4/0x1690 [ 363.530472][ T9197] ? __pfx__copy_from_iter+0x10/0x10 [ 363.530494][ T9197] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 363.530523][ T9197] copy_page_from_iter+0x238/0x300 [ 363.530546][ T9197] tun_build_skb.constprop.0+0x2ea/0x18f0 [ 363.530586][ T9197] ? __pfx_tun_build_skb.constprop.0+0x10/0x10 [ 363.530610][ T9197] ? unwind_get_return_address+0x59/0xa0 [ 363.530641][ T9197] ? find_held_lock+0x2b/0x80 [ 363.530670][ T9197] ? avc_has_perm_noaudit+0x145/0x3b0 [ 363.530693][ T9197] tun_get_user+0x16d6/0x3c20 [ 363.530727][ T9197] ? __pfx_tun_get_user+0x10/0x10 [ 363.530751][ T9197] ? __file_has_perm+0x336/0x460 [ 363.530771][ T9197] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 363.530801][ T9197] ? find_held_lock+0x2b/0x80 [ 363.530824][ T9197] ? tun_get+0x191/0x370 [ 363.530846][ T9197] ? tun_get+0x191/0x370 [ 363.530873][ T9197] tun_chr_write_iter+0xdc/0x200 [ 363.530898][ T9197] vfs_write+0x6ac/0x1050 [ 363.530923][ T9197] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 363.530950][ T9197] ? __pfx_vfs_write+0x10/0x10 [ 363.530971][ T9197] ? find_held_lock+0x2b/0x80 [ 363.531009][ T9197] ksys_write+0x12a/0x250 [ 363.531034][ T9197] ? __pfx_ksys_write+0x10/0x10 [ 363.531063][ T9197] do_syscall_64+0x115/0x870 [ 363.531088][ T9197] ? clear_bhb_loop+0x40/0x90 [ 363.531110][ T9197] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.531127][ T9197] RIP: 0033:0x7f7998b5e68e [ 363.531142][ T9197] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 363.531158][ T9197] RSP: 002b:00007f7996df5fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 363.531176][ T9197] RAX: ffffffffffffffda RBX: 00007f7996df66c0 RCX: 00007f7998b5e68e [ 363.531187][ T9197] RDX: 0000000000000032 RSI: 0000200000000000 RDI: 00000000000000c8 [ 363.531197][ T9197] RBP: 00007f7996df6090 R08: 0000000000000000 R09: 0000000000000000 [ 363.531207][ T9197] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 363.531217][ T9197] R13: 00007f7998e26038 R14: 00007f7998e25fa0 R15: 00007ffd52620b98 [ 363.531240][ T9197] [ 363.577018][ T9201] 9p: Bad value for 'rfdno' [ 363.656724][ T5799] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 363.915655][ T5705] usb 2-1: USB disconnect, device number 40 [ 364.067399][ T30] audit: type=1400 audit(1783879591.015:1540): avc: denied { read } for pid=9205 comm="syz.1.881" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 364.104275][ T30] audit: type=1400 audit(1783879591.015:1541): avc: denied { open } for pid=9205 comm="syz.1.881" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 364.143696][ T5799] usb 3-1: Using ep0 maxpacket: 16 [ 364.151899][ T5799] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 364.165068][ T5799] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 364.175051][ T5799] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.184494][ T5799] usb 3-1: Product: syz [ 364.189249][ T5799] usb 3-1: Manufacturer: syz [ 364.194166][ T5799] usb 3-1: SerialNumber: syz [ 364.202191][ T5799] usb 3-1: config 0 descriptor?? [ 364.214357][ T5799] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 364.249098][ T24] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 364.286934][ T24] usb 5-1: USB disconnect, device number 48 [ 364.336538][ T9] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 364.376494][ T5705] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 364.495842][ T9] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 364.525322][ T9] usb 4-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 364.547123][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.569891][ T9] usb 4-1: Product: syz [ 364.579760][ T9] usb 4-1: Manufacturer: syz [ 364.584929][ T9] usb 4-1: SerialNumber: syz [ 364.613414][ T9] usb 4-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 364.627240][ T5705] usb 2-1: Using ep0 maxpacket: 8 [ 364.633827][ T5705] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 364.642261][ T5705] usb 2-1: config 179 has no interface number 0 [ 364.648588][ T5705] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 364.659790][ T5705] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 364.671349][ T5705] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 364.682784][ T5705] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 364.695512][ T5705] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 364.709871][ T5705] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 364.719071][ T5705] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.733462][ T9206] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 365.036779][ T9208] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 365.051402][ T9] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 365.067245][ T9208] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 365.086928][ T9] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 365.101973][ T9] usb 4-1: media controller created [ 365.148236][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 365.182552][ T5705] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input39 [ 365.382038][ T7758] usb 3-1: Failed to submit usb control message: -110 [ 365.392509][ T7758] usb 3-1: unable to send the bmi data to the device: -110 [ 365.400190][ T7758] usb 3-1: unable to get target info from device [ 365.407126][ T7758] usb 3-1: could not get target info (-110) [ 365.414313][ T7758] usb 3-1: could not probe fw (-110) [ 365.608958][ T5799] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 365.659394][ T5705] usb 4-1: USB disconnect, device number 46 [ 365.808308][ T9223] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 365.837307][ T5799] usb 5-1: Using ep0 maxpacket: 16 [ 365.872937][ T9223] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 366.436805][ T5809] usb 3-1: USB disconnect, device number 46 [ 367.038685][ T9223] lo speed is unknown, defaulting to 1000 [ 367.692950][ T5799] usb 5-1: unable to get BOS descriptor or descriptor too short [ 367.738820][ T5799] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 367.748349][ T5799] usb 5-1: can't read configurations, error -71 [ 367.756445][ T9] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 367.926454][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 368.018009][ T9248] 9p: Bad value for 'rfdno' [ 368.726714][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 368.743645][ T9] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 368.752071][ T9] usb 4-1: can't read configurations, error -71 [ 368.971804][ T9253] netlink: 4 bytes leftover after parsing attributes in process `syz.2.893'. [ 369.013473][ T30] audit: type=1400 audit(1783879595.965:1542): avc: denied { ioctl } for pid=9252 comm="syz.2.893" path="socket:[24341]" dev="sockfs" ino=24341 ioctlcmd=0x8903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 369.041039][ T9253] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2580 sclass=netlink_route_socket pid=9253 comm=syz.2.893 [ 369.066095][ T9253] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2562 sclass=netlink_route_socket pid=9253 comm=syz.2.893 [ 369.226831][ T187] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 369.264418][ T5809] usb 2-1: USB disconnect, device number 41 [ 369.264463][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 369.278603][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 369.321435][ T9259] netlink: 12 bytes leftover after parsing attributes in process `syz.2.896'. [ 369.417646][ T187] usb 1-1: Using ep0 maxpacket: 32 [ 369.444277][ T187] usb 1-1: config 0 has an invalid interface number: 89 but max is 0 [ 369.465641][ T187] usb 1-1: config 0 has no interface number 0 [ 369.486414][ T187] usb 1-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 369.503042][ T187] usb 1-1: config 0 interface 89 has no altsetting 0 [ 369.504107][ T30] audit: type=1400 audit(1783879596.455:1543): avc: denied { setopt } for pid=9262 comm="syz.4.899" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 369.517293][ T187] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 369.563238][ T187] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.572672][ T187] usb 1-1: Product: syz [ 369.577461][ T187] usb 1-1: Manufacturer: syz [ 369.582600][ T187] usb 1-1: SerialNumber: syz [ 369.623497][ T187] usb 1-1: config 0 descriptor?? [ 369.663105][ T187] em28xx 1-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 369.886788][ T187] em28xx 1-1:0.89: Video interface 89 found: [ 370.328378][ T5733] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 370.498300][ T187] em28xx 1-1:0.89: unknown em28xx chip ID (0) [ 370.569014][ T5733] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 370.588682][ T5733] usb 2-1: config 0 has no interface number 0 [ 370.628041][ T5733] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 370.848840][ T5733] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.861260][ T5733] usb 2-1: Product: syz [ 370.865556][ T5733] usb 2-1: Manufacturer: syz [ 370.872370][ T5733] usb 2-1: SerialNumber: syz [ 370.914394][ T5733] usb 2-1: config 0 descriptor?? [ 371.057203][ T9] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 371.133375][ T5733] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 371.160866][ T5733] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 371.174677][ T5733] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 371.188620][ T5733] usb 2-1: media controller created [ 371.239209][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 371.239250][ T30] audit: type=1400 audit(1783879598.195:1544): avc: denied { bind } for pid=9260 comm="syz.3.897" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 371.274800][ T30] audit: type=1400 audit(1783879598.225:1545): avc: denied { read } for pid=9260 comm="syz.3.897" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 371.304482][ T5733] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 371.479136][ T30] audit: type=1326 audit(1783879598.435:1546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9254 comm="syz.0.894" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f711619de59 code=0x7ffc0000 [ 371.603478][ T9289] xt_cgroup: invalid path, errno=-2 [ 371.618022][ T30] audit: type=1326 audit(1783879598.465:1547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9254 comm="syz.0.894" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f711619de59 code=0x7ffc0000 [ 371.665513][ T30] audit: type=1326 audit(1783879598.465:1548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9254 comm="syz.0.894" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=6 compat=0 ip=0x7f711619de59 code=0x7ffc0000 [ 371.907828][ T30] audit: type=1326 audit(1783879598.465:1549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9254 comm="syz.0.894" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f711619de59 code=0x7ffc0000 [ 371.975817][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 371.985642][ T187] em28xx 1-1:0.89: writing to i2c device at 0xa0 failed (error=-5) [ 371.988739][ T30] audit: type=1326 audit(1783879598.465:1550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9254 comm="syz.0.894" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f711619de59 code=0x7ffc0000 [ 372.009801][ T187] em28xx 1-1:0.89: failed to read eeprom (err=-5) [ 372.025472][ T9277] em28xx 1-1:0.89: writing to i2c device at 0x0 failed (error=-5) [ 372.030596][ T9] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 372.045040][ T30] audit: type=1326 audit(1783879598.465:1551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9254 comm="syz.0.894" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f711619de59 code=0x7ffc0000 [ 372.082638][ T5733] i2c i2c-2: ec100: i2c rd failed=-71 reg=33 [ 372.083234][ T9] usb 3-1: can't read configurations, error -71 [ 372.098278][ T187] em28xx 1-1:0.89: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5] [ 372.142879][ T5733] usb 2-1: USB disconnect, device number 42 [ 372.166403][ T187] em28xx 1-1:0.89: Identified as Terratec Grabby (card=67) [ 372.227473][ T187] em28xx 1-1:0.89: analog set to bulk mode. [ 372.233904][ T5809] em28xx 1-1:0.89: Registering V4L2 extension [ 372.266206][ T187] usb 1-1: USB disconnect, device number 42 [ 372.301318][ T187] em28xx 1-1:0.89: Disconnecting em28xx [ 372.393058][ T5809] em28xx 1-1:0.89: Config register raw data: 0xffffffed [ 372.420188][ T5809] em28xx 1-1:0.89: AC97 chip type couldn't be determined [ 372.446574][ T5809] em28xx 1-1:0.89: No AC97 audio processor [ 372.460398][ T5809] usb 1-1: Decoder not found [ 372.467740][ T5809] em28xx 1-1:0.89: failed to create media graph [ 372.474961][ T5809] em28xx 1-1:0.89: V4L2 device video103 deregistered [ 372.489509][ T5809] em28xx 1-1:0.89: Registering snapshot button... [ 372.504546][ T5809] input: em28xx snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.89/input/input40 [ 373.020506][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 373.027105][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 373.386289][ T5809] em28xx 1-1:0.89: Remote control support is not available for this card. [ 373.395993][ T187] em28xx 1-1:0.89: Closing input extension [ 373.404177][ T187] em28xx 1-1:0.89: Deregistering snapshot button [ 373.491135][ T9306] netlink: 12 bytes leftover after parsing attributes in process `syz.1.909'. [ 373.568515][ T187] em28xx 1-1:0.89: Freeing device [ 373.902048][ T9319] overlayfs: overlapping lowerdir path [ 374.186500][ T5713] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 375.696380][ T5713] usb 4-1: Using ep0 maxpacket: 32 [ 375.719211][ T5713] usb 4-1: config 0 has an invalid interface number: 89 but max is 0 [ 375.775704][ T5713] usb 4-1: config 0 has no interface number 0 [ 375.787780][ T5713] usb 4-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 375.810865][ T5713] usb 4-1: config 0 interface 89 has no altsetting 0 [ 375.837157][ T5713] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 375.861024][ T5713] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.915177][ T5713] usb 4-1: Product: syz [ 375.960910][ T5713] usb 4-1: Manufacturer: syz [ 375.965643][ T5713] usb 4-1: SerialNumber: syz [ 375.973492][ T5713] usb 4-1: config 0 descriptor?? [ 375.990971][ T5713] em28xx 4-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 376.012173][ T5713] em28xx 4-1:0.89: Video interface 89 found: [ 376.219183][ T9336] 9p: Bad value for 'rfdno' [ 376.646665][ T5713] em28xx 4-1:0.89: unknown em28xx chip ID (0) [ 377.366419][ T5733] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 377.541138][ T5733] usb 1-1: config 1 interface 0 has no altsetting 0 [ 377.555374][ T5733] usb 1-1: string descriptor 0 read error: -22 [ 377.570185][ T5733] usb 1-1: New USB device found, idVendor=0853, idProduct=0148, bcdDevice= 0.40 [ 377.713770][ T5733] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.789889][ T9358] netlink: 20 bytes leftover after parsing attributes in process `syz.2.923'. [ 377.841647][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 377.841662][ T30] audit: type=1326 audit(1783879604.795:1571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9318 comm="syz.3.913" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7998b9de59 code=0x7ffc0000 [ 377.882609][ T30] audit: type=1326 audit(1783879604.835:1572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9318 comm="syz.3.913" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=6 compat=0 ip=0x7f7998b9de59 code=0x7ffc0000 [ 377.910015][ T30] audit: type=1326 audit(1783879604.835:1573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9318 comm="syz.3.913" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7998b9de59 code=0x7ffc0000 [ 377.948100][ T9] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 377.999384][ T9359] xt_cgroup: invalid path, errno=-2 [ 378.017862][ T30] audit: type=1326 audit(1783879604.835:1574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9318 comm="syz.3.913" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7998b9de59 code=0x7ffc0000 [ 378.046924][ T30] audit: type=1326 audit(1783879604.835:1575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9318 comm="syz.3.913" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f7998b9de59 code=0x7ffc0000 [ 378.073426][ T30] audit: type=1326 audit(1783879604.835:1576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9318 comm="syz.3.913" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7998b9de59 code=0x7ffc0000 [ 378.099806][ T30] audit: type=1326 audit(1783879604.835:1577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9318 comm="syz.3.913" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f7998b9de59 code=0x7ffc0000 [ 378.126190][ T30] audit: type=1326 audit(1783879604.835:1578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9318 comm="syz.3.913" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7998b9de59 code=0x7ffc0000 [ 378.152579][ T30] audit: type=1326 audit(1783879604.835:1579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9318 comm="syz.3.913" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f7998b9de59 code=0x7ffc0000 [ 378.197786][ T30] audit: type=1326 audit(1783879604.835:1580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9318 comm="syz.3.913" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7998b9de59 code=0x7ffc0000 [ 378.292620][ T5733] topre 0003:0853:0148.0011: unexpected long global item [ 378.305153][ T5733] topre 0003:0853:0148.0011: probe with driver topre failed with error -22 [ 378.536033][ T5713] em28xx 4-1:0.89: writing to i2c device at 0xa0 failed (error=-5) [ 378.551490][ T5713] em28xx 4-1:0.89: failed to read eeprom (err=-5) [ 378.570320][ T5713] em28xx 4-1:0.89: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5] [ 378.589819][ T9] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 378.593134][ T5705] usb 1-1: USB disconnect, device number 43 [ 378.598600][ T9] usb 2-1: config 0 has no interface number 0 [ 378.666396][ T5713] em28xx 4-1:0.89: Identified as Terratec Grabby (card=67) [ 378.673876][ T5713] em28xx 4-1:0.89: analog set to bulk mode. [ 378.681272][ T5733] em28xx 4-1:0.89: Registering V4L2 extension [ 378.690369][ T5713] usb 4-1: USB disconnect, device number 49 [ 378.699783][ T5713] em28xx 4-1:0.89: Disconnecting em28xx [ 378.728205][ T5733] em28xx 4-1:0.89: Config register raw data: 0xffffffed [ 378.735236][ T5733] em28xx 4-1:0.89: AC97 chip type couldn't be determined [ 378.744185][ T5733] em28xx 4-1:0.89: No AC97 audio processor [ 378.751036][ T5733] usb 4-1: Decoder not found [ 378.755628][ T5733] em28xx 4-1:0.89: failed to create media graph [ 378.763421][ T5733] em28xx 4-1:0.89: V4L2 device video103 deregistered [ 378.772467][ T5733] em28xx 4-1:0.89: Registering snapshot button... [ 378.779934][ T5733] input: em28xx snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.89/input/input41 [ 378.792625][ T5733] em28xx 4-1:0.89: Remote control support is not available for this card. [ 378.801839][ T5713] em28xx 4-1:0.89: Closing input extension [ 378.807774][ T5713] em28xx 4-1:0.89: Deregistering snapshot button [ 378.827184][ T5713] em28xx 4-1:0.89: Freeing device [ 379.971115][ T5809] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 379.988742][ T9] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 380.009124][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.066776][ T9380] 9p: Bad value for 'rfdno' [ 380.969857][ T9] usb 2-1: Product: syz [ 380.975663][ T9] usb 2-1: Manufacturer: syz [ 380.982898][ T9] usb 2-1: SerialNumber: syz [ 380.995733][ T9385] netlink: 44 bytes leftover after parsing attributes in process `syz.4.933'. [ 380.999578][ T9] usb 2-1: config 0 descriptor?? [ 381.048270][ T9] usb 2-1: can't set config #0, error -71 [ 381.075041][ T9] usb 2-1: USB disconnect, device number 43 [ 381.367536][ T5809] usb 3-1: Using ep0 maxpacket: 16 [ 381.523817][ T5809] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 381.860581][ T5809] usb 3-1: string descriptor 0 read error: -71 [ 381.866878][ T5809] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 381.875916][ T5809] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.919809][ T5809] usb 3-1: config 0 descriptor?? [ 381.985219][ T5809] usb 3-1: can't set config #0, error -71 [ 382.003745][ T5809] usb 3-1: USB disconnect, device number 49 [ 383.186420][ T9] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 383.336731][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 383.343860][ T9] usb 1-1: config 0 has an invalid interface number: 89 but max is 0 [ 383.356448][ T9] usb 1-1: config 0 has no interface number 0 [ 383.362804][ T9] usb 1-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 383.386446][ T9] usb 1-1: config 0 interface 89 has no altsetting 0 [ 383.397483][ T9] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 383.427326][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.436700][ T9] usb 1-1: Product: syz [ 383.446372][ T9] usb 1-1: Manufacturer: syz [ 383.456367][ T9] usb 1-1: SerialNumber: syz [ 383.471925][ T9] usb 1-1: config 0 descriptor?? [ 383.494043][ T9] em28xx 1-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 383.518524][ T9] em28xx 1-1:0.89: Video interface 89 found: [ 383.645926][ T9415] 9p: Bad value for 'rfdno' [ 383.743204][ T777] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 383.857908][ T9418] netlink: 20 bytes leftover after parsing attributes in process `syz.4.943'. [ 383.988599][ T9420] netlink: 12 bytes leftover after parsing attributes in process `syz.1.944'. [ 384.149642][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 384.149677][ T30] audit: type=1400 audit(1783879611.105:1595): avc: denied { ioctl } for pid=9422 comm="syz.1.945" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x586a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 384.157395][ T9] em28xx 1-1:0.89: unknown em28xx chip ID (0) [ 384.676493][ T5733] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 386.343996][ T30] audit: type=1326 audit(1783879613.295:1596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9410 comm="syz.0.940" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f711619de59 code=0x7ffc0000 [ 386.393019][ T5733] usb 4-1: Using ep0 maxpacket: 16 [ 386.524213][ T5733] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 386.638155][ T9428] xt_cgroup: invalid path, errno=-2 [ 386.705208][ T5733] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 386.754878][ T30] audit: type=1326 audit(1783879613.325:1597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9410 comm="syz.0.940" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=6 compat=0 ip=0x7f711619de59 code=0x7ffc0000 [ 386.793678][ T5733] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.817950][ T5733] usb 4-1: Product: syz [ 386.830608][ T5733] usb 4-1: Manufacturer: syz [ 386.833838][ T9] em28xx 1-1:0.89: writing to i2c device at 0xa0 failed (error=-5) [ 386.837345][ T5733] usb 4-1: SerialNumber: syz [ 386.850858][ T30] audit: type=1326 audit(1783879613.325:1598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9410 comm="syz.0.940" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f711619de59 code=0x7ffc0000 [ 386.853138][ T9] em28xx 1-1:0.89: failed to read eeprom (err=-5) [ 386.906692][ T30] audit: type=1326 audit(1783879613.325:1599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9410 comm="syz.0.940" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f711619de59 code=0x7ffc0000 [ 386.914073][ T9] em28xx 1-1:0.89: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5] [ 386.934678][ T5733] usb 4-1: config 0 descriptor?? [ 386.958744][ T30] audit: type=1326 audit(1783879613.325:1600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9410 comm="syz.0.940" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f711619de59 code=0x7ffc0000 [ 386.985425][ T30] audit: type=1326 audit(1783879613.325:1601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9410 comm="syz.0.940" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f711619de59 code=0x7ffc0000 [ 387.017703][ T5733] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 387.038323][ T30] audit: type=1326 audit(1783879613.325:1602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9410 comm="syz.0.940" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f711619de59 code=0x7ffc0000 [ 387.064992][ T30] audit: type=1326 audit(1783879613.325:1603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9410 comm="syz.0.940" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f711619de59 code=0x7ffc0000 [ 387.092499][ T30] audit: type=1326 audit(1783879613.325:1604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9410 comm="syz.0.940" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f711619de59 code=0x7ffc0000 [ 387.200092][ T5809] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 387.208375][ T9] em28xx 1-1:0.89: Identified as Terratec Grabby (card=67) [ 387.219548][ T9] em28xx 1-1:0.89: analog set to bulk mode. [ 387.235605][ T187] em28xx 1-1:0.89: Registering V4L2 extension [ 387.261179][ T9] usb 1-1: USB disconnect, device number 44 [ 387.278015][ T9] em28xx 1-1:0.89: Disconnecting em28xx [ 387.294458][ T187] em28xx 1-1:0.89: Config register raw data: 0xffffffed [ 387.303862][ T187] em28xx 1-1:0.89: AC97 chip type couldn't be determined [ 387.311563][ T187] em28xx 1-1:0.89: No AC97 audio processor [ 387.319887][ T187] usb 1-1: Decoder not found [ 387.325464][ T187] em28xx 1-1:0.89: failed to create media graph [ 387.332309][ T187] em28xx 1-1:0.89: V4L2 device video103 deregistered [ 387.348362][ T187] em28xx 1-1:0.89: Registering snapshot button... [ 387.357394][ T187] input: em28xx snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.89/input/input42 [ 387.368564][ T5809] usb 5-1: Using ep0 maxpacket: 16 [ 387.382618][ T5809] usb 5-1: unable to get BOS descriptor or descriptor too short [ 387.392875][ T187] em28xx 1-1:0.89: Remote control support is not available for this card. [ 387.403129][ T9] em28xx 1-1:0.89: Closing input extension [ 387.409714][ T9] em28xx 1-1:0.89: Deregistering snapshot button [ 387.416736][ T5809] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 387.424725][ T5809] usb 5-1: can't read configurations, error -71 [ 387.442522][ T9] em28xx 1-1:0.89: Freeing device [ 388.682478][ T7752] usb 4-1: Failed to submit usb control message: -110 [ 388.682526][ T7752] usb 4-1: unable to send the bmi data to the device: -110 [ 388.682541][ T7752] usb 4-1: unable to get target info from device [ 388.682555][ T7752] usb 4-1: could not get target info (-110) [ 388.682569][ T7752] usb 4-1: could not probe fw (-110) [ 389.253958][ T5733] usb 4-1: USB disconnect, device number 50 [ 392.212607][ T9478] syzkaller0: entered promiscuous mode [ 392.218188][ T9478] syzkaller0: entered allmulticast mode [ 392.686607][ T187] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 392.726375][ T5705] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 392.787567][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 392.787583][ T30] audit: type=1400 audit(1783879619.735:1622): avc: denied { mount } for pid=9484 comm="syz.2.964" name="/" dev="ramfs" ino=26128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 392.829470][ T9485] fuse: Unknown parameter 'f' [ 392.834206][ T30] audit: type=1400 audit(1783879619.785:1623): avc: denied { mounton } for pid=9484 comm="syz.2.964" path="/file0" dev="ramfs" ino=26130 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 392.858857][ T5713] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 392.866382][ T187] usb 2-1: Using ep0 maxpacket: 16 [ 392.896418][ T5705] usb 4-1: Using ep0 maxpacket: 32 [ 392.905530][ T5705] usb 4-1: config 0 has an invalid interface number: 89 but max is 0 [ 392.914140][ T5705] usb 4-1: config 0 has no interface number 0 [ 392.916664][ T9485] netlink: 28 bytes leftover after parsing attributes in process `syz.2.964'. [ 392.924268][ T5705] usb 4-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 392.950100][ T5705] usb 4-1: config 0 interface 89 has no altsetting 0 [ 392.978498][ T5705] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 392.988137][ T5705] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.997993][ T5705] usb 4-1: Product: syz [ 393.002479][ T5705] usb 4-1: Manufacturer: syz [ 393.007345][ T5705] usb 4-1: SerialNumber: syz [ 393.029774][ T5713] usb 5-1: Using ep0 maxpacket: 16 [ 393.046191][ T5713] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 393.060667][ T5705] usb 4-1: config 0 descriptor?? [ 393.066188][ T5713] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 393.085448][ T5705] em28xx 4-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 393.103309][ T5713] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 393.120649][ T5705] em28xx 4-1:0.89: Video interface 89 found: [ 393.128114][ T5713] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 393.289902][ T5713] usb 5-1: SerialNumber: syz [ 393.533694][ T5713] usb 5-1: 0:2 : does not exist [ 393.805121][ T5705] em28xx 4-1:0.89: unknown em28xx chip ID (0) [ 394.825476][ T30] audit: type=1326 audit(1783879621.775:1624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9480 comm="syz.3.962" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7998b9de59 code=0x7ffc0000 [ 394.865422][ T30] audit: type=1326 audit(1783879621.805:1625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9480 comm="syz.3.962" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7998b9de59 code=0x7ffc0000 [ 394.896454][ T30] audit: type=1326 audit(1783879621.805:1626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9480 comm="syz.3.962" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=6 compat=0 ip=0x7f7998b9de59 code=0x7ffc0000 [ 395.017955][ T9493] xt_cgroup: invalid path, errno=-2 [ 395.097282][ T10] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 395.174273][ T30] audit: type=1326 audit(1783879621.805:1627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9480 comm="syz.3.962" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7998b9de59 code=0x7ffc0000 [ 395.244483][ T187] usb 2-1: unable to get BOS descriptor or descriptor too short [ 395.245821][ T30] audit: type=1326 audit(1783879621.805:1628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9480 comm="syz.3.962" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7998b9de59 code=0x7ffc0000 [ 395.272699][ T187] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 395.329267][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 395.353963][ T187] usb 2-1: can't read configurations, error -71 [ 395.369018][ T30] audit: type=1326 audit(1783879621.805:1629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9480 comm="syz.3.962" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f7998b9de59 code=0x7ffc0000 [ 395.395840][ T30] audit: type=1326 audit(1783879621.805:1630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9480 comm="syz.3.962" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7998b9de59 code=0x7ffc0000 [ 395.424897][ T30] audit: type=1326 audit(1783879621.805:1631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9480 comm="syz.3.962" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7998b9de59 code=0x7ffc0000 [ 395.461450][ T5705] em28xx 4-1:0.89: writing to i2c device at 0xa0 failed (error=-5) [ 395.469712][ T5705] em28xx 4-1:0.89: failed to read eeprom (err=-5) [ 395.476297][ T5705] em28xx 4-1:0.89: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5] [ 395.485605][ T5713] usb 5-1: 5:0: cannot get min/max values for control 5 (id 5) [ 395.496415][ T5705] em28xx 4-1:0.89: Identified as Terratec Grabby (card=67) [ 395.503610][ T5705] em28xx 4-1:0.89: analog set to bulk mode. [ 395.509807][ T5720] em28xx 4-1:0.89: Registering V4L2 extension [ 395.525320][ T5705] usb 4-1: USB disconnect, device number 51 [ 395.543544][ T5713] usb 5-1: 5:0: cannot get min/max values for control 5 (id 5) [ 395.551491][ T5720] em28xx 4-1:0.89: reading from i2c device at 0x4a failed (error=-19) [ 395.563721][ T5705] em28xx 4-1:0.89: Disconnecting em28xx [ 395.580135][ T5720] em28xx 4-1:0.89: Config register raw data: 0xffffffed [ 395.604581][ T5720] em28xx 4-1:0.89: AC97 chip type couldn't be determined [ 395.625180][ T5720] em28xx 4-1:0.89: No AC97 audio processor [ 395.631370][ T5713] usb 5-1: USB disconnect, device number 53 [ 395.638549][ T5720] usb 4-1: Decoder not found [ 395.646008][ T5720] em28xx 4-1:0.89: failed to create media graph [ 395.661044][ T5720] em28xx 4-1:0.89: V4L2 device video103 deregistered [ 395.689065][ T5720] em28xx 4-1:0.89: Registering snapshot button... [ 395.702195][ T5720] input: em28xx snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.89/input/input43 [ 395.714380][ T5720] em28xx 4-1:0.89: Remote control support is not available for this card. [ 395.724070][ T5705] em28xx 4-1:0.89: Closing input extension [ 395.730740][ T5705] em28xx 4-1:0.89: Deregistering snapshot button [ 395.742823][ T5705] em28xx 4-1:0.89: Freeing device [ 395.779813][ T187] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 395.879750][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 395.895366][ T10] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 395.905763][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.914287][ T10] usb 3-1: Product: syz [ 395.918764][ T10] usb 3-1: Manufacturer: syz [ 395.923646][ T10] usb 3-1: SerialNumber: syz [ 395.931220][ T10] usb 3-1: config 0 descriptor?? [ 395.936768][ T5809] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 395.949936][ T10] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 396.038543][ T187] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 396.047628][ T187] usb 2-1: config 0 has no interface number 0 [ 396.061194][ T187] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 396.078952][ T187] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.090679][ T187] usb 2-1: Product: syz [ 396.095133][ T187] usb 2-1: Manufacturer: syz [ 396.102277][ T187] usb 2-1: SerialNumber: syz [ 396.109525][ T5809] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 396.119703][ T5809] usb 1-1: config 0 has no interface number 0 [ 396.127385][ T187] usb 2-1: config 0 descriptor?? [ 396.143036][ T5809] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 396.157816][ T5809] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.167222][ T5809] usb 1-1: Product: syz [ 396.179090][ T777] usb 3-1: Failed to submit usb control message: -71 [ 396.179216][ T5809] usb 1-1: Manufacturer: syz [ 396.187782][ T5720] usb 3-1: USB disconnect, device number 50 [ 396.203775][ T777] usb 3-1: unable to send the bmi data to the device: -71 [ 396.211231][ T777] usb 3-1: unable to get target info from device [ 396.217642][ T777] usb 3-1: could not get target info (-71) [ 396.219717][ T5809] usb 1-1: SerialNumber: syz [ 396.223521][ T777] usb 3-1: could not probe fw (-71) [ 396.292306][ T5809] usb 1-1: config 0 descriptor?? [ 396.336770][ T5713] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 396.391626][ T187] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 396.471654][ T187] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 396.485644][ T187] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 396.496755][ T187] usb 2-1: media controller created [ 396.516460][ T5713] usb 5-1: Using ep0 maxpacket: 16 [ 396.677835][ T890] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 396.689770][ T5713] usb 5-1: unable to get BOS descriptor or descriptor too short [ 396.705072][ T5809] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 396.708472][ T5713] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 396.721638][ T5713] usb 5-1: can't read configurations, error -71 [ 396.737641][ T187] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 396.754091][ T5809] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 396.799905][ T5809] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 396.809633][ T5809] usb 1-1: media controller created [ 396.834412][ T5809] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 396.848346][ T890] usb 4-1: Using ep0 maxpacket: 16 [ 396.998812][ T890] usb 4-1: unable to get BOS descriptor or descriptor too short [ 397.011051][ T890] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 397.019151][ T890] usb 4-1: can't read configurations, error -71 [ 397.772883][ T187] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 397.846805][ T5809] i2c i2c-2: ec100: i2c rd failed=-71 reg=33 [ 397.936124][ T187] usb 2-1: USB disconnect, device number 45 [ 399.584369][ T5809] usb 1-1: USB disconnect, device number 45 [ 399.836450][ T5713] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 399.881241][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 399.881257][ T30] audit: type=1400 audit(1783879626.835:1650): avc: denied { append } for pid=9542 comm="syz.4.981" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 400.016741][ T5713] usb 3-1: Using ep0 maxpacket: 16 [ 400.183541][ T5713] usb 3-1: unable to get BOS descriptor or descriptor too short [ 400.212215][ T5713] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 400.237794][ T5713] usb 3-1: can't read configurations, error -71 [ 400.426453][ T5809] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 400.547529][ T5705] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 400.606831][ T5809] usb 1-1: Using ep0 maxpacket: 16 [ 400.672202][ T5809] usb 1-1: unable to get BOS descriptor or descriptor too short [ 400.676372][ T890] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 400.717079][ T5705] usb 4-1: Using ep0 maxpacket: 16 [ 400.984587][ T5809] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 400.996769][ T5705] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 401.010152][ T5809] usb 1-1: can't read configurations, error -71 [ 401.032680][ T5705] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 401.056636][ T5705] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 401.065860][ T5705] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 401.074095][ T5705] usb 4-1: SerialNumber: syz [ 401.086249][ T5705] usb 4-1: 0:2 : does not exist [ 401.106380][ T890] usb 5-1: Using ep0 maxpacket: 16 [ 401.120384][ T890] usb 5-1: unable to get BOS descriptor or descriptor too short [ 401.139259][ T890] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 401.146959][ T890] usb 5-1: can't read configurations, error -71 [ 401.222425][ T30] audit: type=1400 audit(1783879628.175:1651): avc: denied { read write } for pid=9557 comm="syz.2.986" name="sg0" dev="devtmpfs" ino=747 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 401.256440][ T5733] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 401.266643][ T30] audit: type=1400 audit(1783879628.175:1652): avc: denied { open } for pid=9557 comm="syz.2.986" path="/dev/sg0" dev="devtmpfs" ino=747 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 401.315984][ T9562] netlink: 12 bytes leftover after parsing attributes in process `syz.2.987'. [ 401.428590][ T5733] usb 2-1: Using ep0 maxpacket: 16 [ 401.442886][ T5733] usb 2-1: unable to get BOS descriptor or descriptor too short [ 401.453454][ T5733] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 401.463062][ T5733] usb 2-1: can't read configurations, error -71 [ 401.978448][ T5705] usb 4-1: 5:0: cannot get min/max values for control 5 (id 5) [ 401.989696][ T9578] 9p: Bad value for 'rfdno' [ 402.010181][ T5705] usb 4-1: 5:0: cannot get min/max values for control 5 (id 5) [ 402.051668][ T5705] usb 4-1: USB disconnect, device number 54 [ 404.259933][ T5705] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 404.423139][ T9607] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1002'. [ 404.756358][ T5705] usb 3-1: Using ep0 maxpacket: 16 [ 404.762859][ T5705] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 404.773151][ T5705] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 404.794424][ T5705] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 404.795000][ T10] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 404.842667][ T5705] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 404.864179][ T5705] usb 3-1: SerialNumber: syz [ 404.899087][ T5705] usb 3-1: 0:2 : does not exist [ 405.066236][ T10] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 405.091556][ T10] usb 1-1: config 0 has no interface number 0 [ 405.131678][ T10] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 405.142252][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.150973][ T10] usb 1-1: Product: syz [ 405.155604][ T10] usb 1-1: Manufacturer: syz [ 405.176571][ T10] usb 1-1: SerialNumber: syz [ 405.190554][ T10] usb 1-1: config 0 descriptor?? [ 405.429840][ T10] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 405.484445][ T10] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 405.517008][ T10] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 405.550848][ T10] usb 1-1: media controller created [ 405.699337][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 405.877808][ T5705] usb 3-1: 5:0: cannot get min/max values for control 5 (id 5) [ 405.908395][ T5733] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 405.930729][ T5705] usb 3-1: 5:0: cannot get min/max values for control 5 (id 5) [ 406.042162][ T5705] usb 3-1: USB disconnect, device number 53 [ 406.066407][ T5733] usb 4-1: Using ep0 maxpacket: 16 [ 406.106213][ T5733] usb 4-1: unable to get BOS descriptor or descriptor too short [ 406.274875][ T5733] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 406.288014][ T5733] usb 4-1: can't read configurations, error -71 [ 406.776195][ T10] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 406.791367][ T30] audit: type=1400 audit(1783879633.745:1653): avc: denied { shutdown } for pid=9622 comm="syz.1.1007" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 406.984335][ T10] usb 1-1: USB disconnect, device number 48 [ 407.087990][ T9630] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1009'. [ 407.322723][ T5705] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 407.507369][ T5705] usb 3-1: Using ep0 maxpacket: 16 [ 407.525705][ T5705] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 407.541383][ T5705] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 407.551244][ T5705] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.566353][ T5705] usb 3-1: Product: syz [ 407.570591][ T5705] usb 3-1: Manufacturer: syz [ 407.575290][ T5705] usb 3-1: SerialNumber: syz [ 407.589980][ T5705] usb 3-1: config 0 descriptor?? [ 407.606254][ T30] audit: type=1400 audit(1783879634.555:1654): avc: denied { create } for pid=9635 comm="syz.1.1012" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 407.628202][ T30] audit: type=1400 audit(1783879634.555:1655): avc: denied { bind } for pid=9635 comm="syz.1.1012" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 407.629568][ T5705] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 407.650468][ T30] audit: type=1400 audit(1783879634.565:1656): avc: denied { listen } for pid=9635 comm="syz.1.1012" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 407.692362][ T30] audit: type=1400 audit(1783879634.565:1657): avc: denied { connect } for pid=9635 comm="syz.1.1012" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 407.712870][ T30] audit: type=1400 audit(1783879634.565:1658): avc: denied { read } for pid=9635 comm="syz.1.1012" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 409.673314][ T6907] usb 3-1: Failed to submit usb control message: -110 [ 409.717315][ T6907] usb 3-1: unable to send the bmi data to the device: -110 [ 409.727949][ T187] usb 3-1: USB disconnect, device number 54 [ 409.779195][ T6907] usb 3-1: unable to get target info from device [ 409.809334][ T6907] usb 3-1: could not get target info (-110) [ 409.828474][ T6907] usb 3-1: could not probe fw (-110) [ 410.008166][ T10] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 410.046824][ T5713] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 410.176484][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 410.190807][ T10] usb 1-1: config 0 has an invalid interface number: 89 but max is 0 [ 410.208243][ T10] usb 1-1: config 0 has no interface number 0 [ 410.227119][ T10] usb 1-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 410.326392][ T5713] usb 4-1: Using ep0 maxpacket: 16 [ 410.334630][ T5713] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 410.344526][ T10] usb 1-1: config 0 interface 89 has no altsetting 0 [ 410.355315][ T5713] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.358063][ T10] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 410.376477][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.385205][ T5713] usb 4-1: Product: syz [ 410.392612][ T5713] usb 4-1: Manufacturer: syz [ 410.398939][ T10] usb 1-1: Product: syz [ 410.427877][ T10] usb 1-1: Manufacturer: syz [ 410.462310][ T9660] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1020'. [ 410.494196][ T10] usb 1-1: SerialNumber: syz [ 410.684348][ T5713] usb 4-1: SerialNumber: syz [ 410.713892][ T5713] r8152-cfgselector 4-1: Unknown version 0x0000 [ 410.730089][ T10] usb 1-1: config 0 descriptor?? [ 410.737807][ T5713] r8152-cfgselector 4-1: config 0 descriptor?? [ 410.744177][ T10] em28xx 1-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 410.757187][ T10] em28xx 1-1:0.89: Video interface 89 found: [ 410.999224][ T9650] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1014'. [ 411.128713][ T5713] r8152-cfgselector 4-1: Unknown version 0x0000 [ 411.138427][ T5713] r8152-cfgselector 4-1: No union descriptors [ 411.162327][ T5713] r8152-cfgselector 4-1: USB disconnect, device number 57 [ 411.247237][ T9664] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1021'. [ 411.318357][ T9666] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1018'. [ 411.350122][ T9666] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1018'. [ 411.350869][ T10] em28xx 1-1:0.89: unknown em28xx chip ID (0) [ 411.476480][ T187] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 411.636543][ T187] usb 5-1: Using ep0 maxpacket: 8 [ 411.651629][ T187] usb 5-1: config 1 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 178, changing to 11 [ 411.683932][ T187] usb 5-1: config 1 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 1024 [ 411.695822][ T187] usb 5-1: config 1 interface 0 has no altsetting 0 [ 411.762769][ T9673] syzkaller0: entered promiscuous mode [ 411.769952][ T9673] syzkaller0: entered allmulticast mode [ 411.810515][ T9673] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=40 sclass=netlink_tcpdiag_socket pid=9673 comm=syz.3.1024 [ 411.914692][ T187] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 411.930324][ T187] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.958235][ T187] usb 5-1: Product: 永綒仢질式䣵붩仸辋ⷞ䚣滐׆拥蚷髻ᷦ電㾣 [ 411.980654][ T187] usb 5-1: Manufacturer: 㝒➓弿轔㗓⫼삈窈와渡帪娬僈蕞翱桢阣繬씴彨點率鬓ᯍ儯萀꛽琛鉔襮મ㝂魉ꓚ娂ⷘᗔ掶묢ꁐ얥蜵 [ 411.998490][ T187] usb 5-1: SerialNumber: syz [ 412.011531][ T9665] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 412.245261][ T9679] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1027'. [ 412.282397][ T187] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -71 [ 412.326791][ T187] usb 5-1: USB disconnect, device number 58 [ 412.343272][ T30] audit: type=1326 audit(1783879639.285:1659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9647 comm="syz.0.1015" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f711619de59 code=0x7ffc0000 [ 412.503861][ T9683] xt_cgroup: invalid path, errno=-2 [ 412.713506][ T30] audit: type=1326 audit(1783879639.295:1660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9647 comm="syz.0.1015" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f711619de59 code=0x7ffc0000 [ 412.751510][ T10] em28xx 1-1:0.89: writing to i2c device at 0xa0 failed (error=-5) [ 412.803941][ T10] em28xx 1-1:0.89: failed to read eeprom (err=-5) [ 412.835008][ T10] em28xx 1-1:0.89: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5] [ 412.839554][ T30] audit: type=1326 audit(1783879639.295:1661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9647 comm="syz.0.1015" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=6 compat=0 ip=0x7f711619de59 code=0x7ffc0000 [ 412.899864][ T10] em28xx 1-1:0.89: Identified as Terratec Grabby (card=67) [ 412.928773][ T10] em28xx 1-1:0.89: analog set to bulk mode. [ 412.945160][ T30] audit: type=1326 audit(1783879639.295:1662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9647 comm="syz.0.1015" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f711619de59 code=0x7ffc0000 [ 412.963879][ T187] em28xx 1-1:0.89: Registering V4L2 extension [ 413.010218][ T10] usb 1-1: USB disconnect, device number 49 [ 413.033004][ T10] em28xx 1-1:0.89: Disconnecting em28xx [ 413.045362][ T30] audit: type=1326 audit(1783879639.295:1663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9647 comm="syz.0.1015" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f711619de59 code=0x7ffc0000 [ 413.345131][ T187] em28xx 1-1:0.89: Config register raw data: 0xffffffed [ 413.354064][ T30] audit: type=1326 audit(1783879639.295:1664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9647 comm="syz.0.1015" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f711619de59 code=0x7ffc0000 [ 413.382702][ T187] em28xx 1-1:0.89: AC97 chip type couldn't be determined [ 413.391040][ T187] em28xx 1-1:0.89: No AC97 audio processor [ 413.398088][ T30] audit: type=1326 audit(1783879639.295:1665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9647 comm="syz.0.1015" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f711619de59 code=0x7ffc0000 [ 413.428951][ T187] usb 1-1: Decoder not found [ 413.434098][ T187] em28xx 1-1:0.89: failed to create media graph [ 413.446412][ T187] em28xx 1-1:0.89: V4L2 device video103 deregistered [ 413.468627][ T187] em28xx 1-1:0.89: Registering snapshot button... [ 413.484065][ T187] input: em28xx snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.89/input/input44 [ 413.495856][ T30] audit: type=1326 audit(1783879639.295:1666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9647 comm="syz.0.1015" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f711619de59 code=0x7ffc0000 [ 413.526453][ T187] em28xx 1-1:0.89: Remote control support is not available for this card. [ 413.535460][ T10] em28xx 1-1:0.89: Closing input extension [ 413.541291][ T10] em28xx 1-1:0.89: Deregistering snapshot button [ 413.547958][ T30] audit: type=1326 audit(1783879639.295:1667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9647 comm="syz.0.1015" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f711619de59 code=0x7ffc0000 [ 413.576581][ T30] audit: type=1326 audit(1783879639.295:1668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9647 comm="syz.0.1015" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f711619de59 code=0x7ffc0000 [ 413.608725][ T10] em28xx 1-1:0.89: Freeing device [ 414.408872][ T9712] syzkaller0: entered promiscuous mode [ 414.414388][ T9712] syzkaller0: entered allmulticast mode [ 415.238681][ T10] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 415.361671][ T9735] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1044'. [ 415.397504][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 415.586457][ T5809] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 415.836513][ T5809] usb 4-1: Using ep0 maxpacket: 32 [ 415.859693][ T5809] usb 4-1: config 0 has an invalid interface number: 89 but max is 0 [ 415.880036][ T5809] usb 4-1: config 0 has no interface number 0 [ 415.893280][ T5809] usb 4-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 415.903139][ T5809] usb 4-1: config 0 interface 89 has no altsetting 0 [ 416.014510][ T12] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 416.027324][ T5809] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 416.053680][ T5809] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.137238][ T9741] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1045'. [ 416.384054][ T5809] usb 4-1: Product: syz [ 416.389490][ T5809] usb 4-1: Manufacturer: syz [ 416.394679][ T5809] usb 4-1: SerialNumber: syz [ 416.411225][ T5809] usb 4-1: config 0 descriptor?? [ 416.428877][ T5809] em28xx 4-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 416.440090][ T5809] em28xx 4-1:0.89: Video interface 89 found: [ 416.796482][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 416.814864][ T10] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 416.825032][ T10] usb 1-1: can't read configurations, error -71 [ 417.034105][ T5809] em28xx 4-1:0.89: unknown em28xx chip ID (0) [ 417.086411][ T5705] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 417.606485][ T5705] usb 3-1: Using ep0 maxpacket: 32 [ 417.612973][ T5705] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 417.623620][ T5705] usb 3-1: config 0 has no interfaces? [ 417.629458][ T5705] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 417.639674][ T5705] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.684601][ T5705] usb 3-1: config 0 descriptor?? [ 418.065744][ T9763] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 418.099262][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 418.099288][ T30] audit: type=1326 audit(1783879645.055:1686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9731 comm="syz.3.1043" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7998b9de59 code=0x7ffc0000 [ 418.106742][ T9763] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 418.134611][ T30] audit: type=1326 audit(1783879645.055:1687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9731 comm="syz.3.1043" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=6 compat=0 ip=0x7f7998b9de59 code=0x7ffc0000 [ 418.229879][ T9766] xt_cgroup: invalid path, errno=-2 [ 418.317428][ T5705] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 418.324036][ T30] audit: type=1326 audit(1783879645.055:1688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9731 comm="syz.3.1043" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7998b9de59 code=0x7ffc0000 [ 418.464336][ T30] audit: type=1326 audit(1783879645.055:1689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9731 comm="syz.3.1043" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f7998b9de59 code=0x7ffc0000 [ 418.477709][ T5705] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 418.490860][ T30] audit: type=1326 audit(1783879645.055:1690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9731 comm="syz.3.1043" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7998b9de59 code=0x7ffc0000 [ 418.490910][ T30] audit: type=1326 audit(1783879645.055:1691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9731 comm="syz.3.1043" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f7998b9de59 code=0x7ffc0000 [ 418.552079][ T9771] syzkaller0: entered promiscuous mode [ 418.557612][ T9771] syzkaller0: entered allmulticast mode [ 418.572866][ T30] audit: type=1326 audit(1783879645.055:1692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9731 comm="syz.3.1043" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7998b9de59 code=0x7ffc0000 [ 418.577328][ T5705] usb 5-1: config 0 has no interface number 0 [ 418.599498][ T30] audit: type=1326 audit(1783879645.055:1693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9731 comm="syz.3.1043" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f7998b9de59 code=0x7ffc0000 [ 418.599549][ T30] audit: type=1326 audit(1783879645.055:1694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9731 comm="syz.3.1043" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7998b9de59 code=0x7ffc0000 [ 418.659002][ T30] audit: type=1326 audit(1783879645.055:1695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9731 comm="syz.3.1043" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7998b9de59 code=0x7ffc0000 [ 418.705595][ T5705] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 418.715776][ T5705] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.738266][ T5705] usb 5-1: Product: syz [ 418.764790][ T5705] usb 5-1: Manufacturer: syz [ 418.797721][ T5705] usb 5-1: SerialNumber: syz [ 418.801355][ T5809] em28xx 4-1:0.89: writing to i2c device at 0xa0 failed (error=-5) [ 418.810538][ T5809] em28xx 4-1:0.89: failed to read eeprom (err=-5) [ 418.816983][ T5809] em28xx 4-1:0.89: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5] [ 418.819630][ T5705] usb 5-1: config 0 descriptor?? [ 418.996309][ T9743] comedi comedi1: reset error (fatal) [ 419.028843][ T10] usb 3-1: USB disconnect, device number 55 [ 419.048427][ T5705] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 419.065005][ T5705] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 419.077576][ T5705] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 419.085661][ T5705] usb 5-1: media controller created [ 419.129055][ T5705] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 419.141364][ T5809] em28xx 4-1:0.89: Identified as Terratec Grabby (card=67) [ 419.151914][ T5809] em28xx 4-1:0.89: analog set to bulk mode. [ 419.182494][ T5799] em28xx 4-1:0.89: Registering V4L2 extension [ 419.210736][ T5809] usb 4-1: USB disconnect, device number 58 [ 419.248059][ T9759] em28xx 4-1:0.89: writing to i2c device at 0x0 failed (error=-19) [ 419.251299][ T5809] em28xx 4-1:0.89: Disconnecting em28xx [ 419.319956][ T5799] em28xx 4-1:0.89: Config register raw data: 0xffffffed [ 419.327865][ T5799] em28xx 4-1:0.89: AC97 chip type couldn't be determined [ 419.335532][ T5799] em28xx 4-1:0.89: No AC97 audio processor [ 419.345648][ T5799] usb 4-1: Decoder not found [ 419.352430][ T5799] em28xx 4-1:0.89: failed to create media graph [ 419.470305][ T5799] em28xx 4-1:0.89: V4L2 device video103 deregistered [ 419.478321][ T5799] em28xx 4-1:0.89: Registering snapshot button... [ 419.488111][ T5799] input: em28xx snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.89/input/input45 [ 419.528343][ T5799] em28xx 4-1:0.89: Remote control support is not available for this card. [ 419.537758][ T5809] em28xx 4-1:0.89: Closing input extension [ 419.543591][ T5809] em28xx 4-1:0.89: Deregistering snapshot button [ 419.557963][ T5705] i2c i2c-2: ec100: i2c rd failed=-71 reg=33 [ 419.605776][ T5809] em28xx 4-1:0.89: Freeing device [ 419.695896][ T9779] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1057'. [ 420.246107][ T5705] usb 5-1: USB disconnect, device number 59 [ 420.537700][ T5733] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 420.701629][ T5733] usb 3-1: Using ep0 maxpacket: 8 [ 420.721764][ T5733] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 420.750701][ T9795] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 420.760554][ T5733] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.799106][ T5733] usb 3-1: Product: syz [ 420.814216][ T5733] usb 3-1: Manufacturer: syz [ 420.851183][ T5733] usb 3-1: SerialNumber: syz [ 420.873468][ T5733] usb 3-1: config 0 descriptor?? [ 420.925073][ T5733] gspca_main: se401-2.14.0 probing 047d:5003 [ 421.853705][ T5733] gspca_se401: Wrong descriptor type [ 422.134252][ T5799] usb 3-1: USB disconnect, device number 56 [ 422.900636][ T9819] Bluetooth: hci1: expected 121 bytes, got 2 bytes [ 423.531991][ T9831] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1072'. [ 423.541990][ T9831] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1072'. [ 423.806883][ T5705] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 423.976442][ T5705] usb 3-1: Using ep0 maxpacket: 16 [ 424.007849][ T5705] usb 3-1: unable to get BOS descriptor or descriptor too short [ 424.047629][ T5705] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 424.073015][ T5705] usb 3-1: can't read configurations, error -71 [ 424.486485][ T10] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 424.807650][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 425.218636][ T5705] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 426.117931][ T5705] usb 3-1: Using ep0 maxpacket: 8 [ 426.146059][ T5705] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 426.182237][ T5705] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 426.219801][ T5705] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 426.238217][ T9854] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1079'. [ 426.254023][ T5705] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 426.295455][ T5705] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 426.320523][ T9854] vlan2: entered allmulticast mode [ 426.340005][ T9854] veth1_macvtap: entered allmulticast mode [ 426.347789][ T5705] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 426.377550][ T5705] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.561613][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 426.584411][ T10] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 426.610435][ T10] usb 2-1: can't read configurations, error -71 [ 426.625595][ T5705] usb 3-1: GET_CAPABILITIES returned 0 [ 426.641602][ T9857] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1080'. [ 426.660547][ T5705] usbtmc 3-1:16.0: can't read capabilities [ 426.710335][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 426.710350][ T30] audit: type=1400 audit(1783879653.665:1711): avc: denied { mount } for pid=9858 comm="syz.3.1081" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 426.840699][ T30] audit: type=1400 audit(1783879653.795:1712): avc: denied { getopt } for pid=9843 comm="syz.2.1076" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 427.199425][ T9871] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1083'. [ 427.945542][ T30] audit: type=1326 audit(1783879654.895:1713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9865 comm="syz.0.1084" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f711619de59 code=0x0 [ 428.581912][ T9886] pim6reg9: entered allmulticast mode [ 428.746836][ T30] audit: type=1400 audit(1783879655.695:1714): avc: denied { map } for pid=9843 comm="syz.2.1076" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 429.167771][ T30] audit: type=1400 audit(1783879655.785:1716): avc: denied { create } for pid=9885 comm="syz.0.1089" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 429.191264][ T30] audit: type=1400 audit(1783879655.705:1715): avc: denied { execute } for pid=9843 comm="syz.2.1076" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 429.251407][ T9893] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1090'. [ 429.470739][ T30] audit: type=1400 audit(1783879656.425:1717): avc: denied { write } for pid=9895 comm="syz.1.1092" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 429.594549][ T9901] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1094'. [ 429.676371][ T30] audit: type=1400 audit(1783879656.625:1718): avc: denied { setattr } for pid=9898 comm="syz.0.1093" name="NETLINK" dev="sockfs" ino=27995 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 429.700948][ T9902] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1093'. [ 429.793976][ T9905] openvswitch: netlink: IP tunnel dst address not specified [ 430.234433][ T9909] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1096'. [ 430.244422][ T9909] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1096'. [ 430.447950][ T5733] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 430.528121][ T5705] usb 3-1: USB disconnect, device number 58 [ 430.618922][ T5733] usb 5-1: Using ep0 maxpacket: 16 [ 430.632458][ T9914] 9p: Bad value for 'rfdno' [ 430.682202][ T5733] usb 5-1: too many configurations: 112, using maximum allowed: 8 [ 430.709373][ T5733] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 430.727758][ T5733] usb 5-1: New USB device strings: Mfr=144, Product=246, SerialNumber=0 [ 430.752612][ T5733] usb 5-1: Product: syz [ 430.764297][ T5733] usb 5-1: Manufacturer: syz [ 430.785483][ T5733] r8152-cfgselector 5-1: Unknown version 0x0000 [ 430.808214][ T5733] r8152-cfgselector 5-1: config 0 descriptor?? [ 430.882655][ T30] audit: type=1326 audit(1783879657.835:1719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9910 comm="syz.1.1097" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6d4b99de59 code=0x0 [ 431.144684][ T10] r8152-cfgselector 5-1: USB disconnect, device number 60 [ 431.230609][ T30] audit: type=1400 audit(1783879658.175:1720): avc: denied { mounton } for pid=9925 comm="syz.0.1102" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 431.385102][ T9928] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1103'. [ 431.648537][ T5733] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 431.806504][ T5733] usb 3-1: Using ep0 maxpacket: 16 [ 431.813579][ T5733] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 431.825344][ T5733] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 431.835181][ T5733] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 431.844322][ T5733] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 431.852963][ T5733] usb 3-1: SerialNumber: syz [ 431.864483][ T5733] usb 3-1: 0:2 : does not exist [ 431.973419][ T5705] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 432.037005][ T5720] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 432.126596][ T5705] usb 2-1: Using ep0 maxpacket: 32 [ 432.133301][ T5705] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 432.144779][ T5705] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 432.155047][ T5705] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 432.168674][ T5705] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.181822][ T5705] usb 2-1: config 0 descriptor?? [ 432.188253][ T5720] usb 1-1: Using ep0 maxpacket: 16 [ 432.195540][ T5720] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 432.207396][ T5705] hub 2-1:0.0: USB hub found [ 432.213020][ T5720] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 432.222937][ T5720] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 432.241095][ T890] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 432.259779][ T5720] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 432.280255][ T5720] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 432.291924][ T5720] usb 1-1: Manufacturer: syz [ 432.301557][ T5720] usb 1-1: config 0 descriptor?? [ 432.406492][ T890] usb 5-1: Using ep0 maxpacket: 32 [ 432.413253][ T890] usb 5-1: config 0 has an invalid interface number: 89 but max is 0 [ 432.422166][ T5705] hub 2-1:0.0: 29 ports detected [ 432.427421][ T890] usb 5-1: config 0 has no interface number 0 [ 432.433703][ T5705] hub 2-1:0.0: insufficient power available to use all downstream ports [ 432.442191][ T890] usb 5-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 432.452243][ T890] usb 5-1: config 0 interface 89 has no altsetting 0 [ 432.465523][ T890] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 432.476095][ T890] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.485600][ T890] usb 5-1: Product: syz [ 432.490023][ T890] usb 5-1: Manufacturer: syz [ 432.494670][ T890] usb 5-1: SerialNumber: syz [ 432.522080][ T890] usb 5-1: config 0 descriptor?? [ 432.532477][ T890] em28xx 5-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 432.544474][ T890] em28xx 5-1:0.89: Video interface 89 found: [ 432.588539][ T10] usb 1-1: USB disconnect, device number 52 [ 432.677740][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 432.677769][ T30] audit: type=1400 audit(1783879659.635:1722): avc: denied { connect } for pid=9946 comm="syz.0.1109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 432.700939][ T5733] usb 3-1: 5:0: cannot get min/max values for control 5 (id 5) [ 432.739499][ T187] kernel read not supported for file /rfkill (pid: 187 comm: kworker/0:2) [ 432.768886][ T5733] usb 3-1: 5:0: cannot get min/max values for control 5 (id 5) [ 432.794910][ T5733] usb 3-1: USB disconnect, device number 59 [ 432.858090][ T5705] usb 2-1: USB disconnect, device number 50 [ 432.986439][ T5799] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 433.143304][ T890] em28xx 5-1:0.89: unknown em28xx chip ID (0) [ 433.166528][ T5799] usb 4-1: Using ep0 maxpacket: 8 [ 433.173537][ T5799] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 433.183898][ T5799] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.202239][ T5799] pvrusb2: Hardware description: Terratec Grabster AV400 [ 433.209775][ T5799] pvrusb2: ********** [ 433.213945][ T5799] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 433.224766][ T5799] pvrusb2: Important functionality might not be entirely working. [ 433.233213][ T5799] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 433.245263][ T5799] pvrusb2: ********** [ 433.287877][ T30] audit: type=1400 audit(1783879660.235:1723): avc: denied { name_connect } for pid=9953 comm="syz.2.1111" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 433.469934][ T2362] pvrusb2: Invalid write control endpoint [ 433.511202][ T2362] pvrusb2: Invalid write control endpoint [ 433.518109][ T2362] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 433.529951][ T2362] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 433.537818][ T2362] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 433.549457][ T2362] pvrusb2: Device being rendered inoperable [ 433.565747][ T2362] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 433.574201][ T2362] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 433.612109][ T2362] pvrusb2: Attached sub-driver cx25840 [ 433.625573][ T2362] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 433.648460][ T2362] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 433.663768][ T5733] usb 4-1: USB disconnect, device number 59 [ 433.706554][ T5799] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 433.955998][ T9967] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1116'. [ 433.978481][ T30] audit: type=1326 audit(1783879660.935:1724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9963 comm="syz.2.1115" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb6f899de59 code=0x0 [ 434.036738][ T5799] usb 2-1: Using ep0 maxpacket: 16 [ 434.172240][ T30] audit: type=1326 audit(1783879661.095:1725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9937 comm="syz.4.1107" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce15b9de59 code=0x7ffc0000 [ 434.422031][ T30] audit: type=1326 audit(1783879661.095:1726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9937 comm="syz.4.1107" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce15b9de59 code=0x7ffc0000 [ 434.459730][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 434.460353][ T30] audit: type=1326 audit(1783879661.095:1727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9937 comm="syz.4.1107" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=6 compat=0 ip=0x7fce15b9de59 code=0x7ffc0000 [ 434.493526][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 434.737349][ T5799] usb 2-1: unable to get BOS descriptor or descriptor too short [ 434.778766][ T30] audit: type=1326 audit(1783879661.115:1728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9937 comm="syz.4.1107" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce15b9de59 code=0x7ffc0000 [ 434.808555][ T9972] xt_cgroup: invalid path, errno=-2 [ 434.875639][ T30] audit: type=1326 audit(1783879661.115:1729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9937 comm="syz.4.1107" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce15b9de59 code=0x7ffc0000 [ 434.902264][ T30] audit: type=1326 audit(1783879661.405:1730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9937 comm="syz.4.1107" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fce15b9de59 code=0x7ffc0000 [ 434.937355][ T890] em28xx 5-1:0.89: writing to i2c device at 0xa0 failed (error=-5) [ 434.937465][ T890] em28xx 5-1:0.89: failed to read eeprom (err=-5) [ 434.937662][ T890] em28xx 5-1:0.89: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5] [ 434.945654][ T5799] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 434.945686][ T5799] usb 2-1: can't read configurations, error -71 [ 434.954751][ T10] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 434.996291][ T30] audit: type=1326 audit(1783879661.405:1731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9937 comm="syz.4.1107" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce15b9de59 code=0x7ffc0000 [ 435.343933][ T890] em28xx 5-1:0.89: Identified as Terratec Grabby (card=67) [ 435.456664][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 435.923523][ T890] em28xx 5-1:0.89: analog set to bulk mode. [ 435.939300][ T5733] em28xx 5-1:0.89: Registering V4L2 extension [ 435.990147][ T9978] batadv_slave_0: entered promiscuous mode [ 436.020800][ T9978] batadv_slave_0: left promiscuous mode [ 436.198822][ T5733] em28xx 5-1:0.89: reading from i2c device at 0x4a failed (error=-5) [ 436.218244][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 436.234038][ T10] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 436.242792][ T10] usb 1-1: can't read configurations, error -71 [ 436.256880][ T5733] em28xx 5-1:0.89: reading from i2c device at 0x48 failed (error=-5) [ 436.304569][ T5705] usb 5-1: USB disconnect, device number 61 [ 436.325150][ T5733] em28xx 5-1:0.89: reading from i2c device at 0x42 failed (error=-5) [ 436.335871][ T5705] em28xx 5-1:0.89: Disconnecting em28xx [ 436.377219][ T5733] em28xx 5-1:0.89: Config register raw data: 0xffffffed [ 436.403233][ T5733] em28xx 5-1:0.89: AC97 chip type couldn't be determined [ 436.441612][ T5733] em28xx 5-1:0.89: No AC97 audio processor [ 436.478517][ T5733] usb 5-1: Decoder not found [ 436.625122][ T5733] em28xx 5-1:0.89: failed to create media graph [ 436.649559][ T5733] em28xx 5-1:0.89: V4L2 device video103 deregistered [ 436.904616][ T9992] FAULT_INJECTION: forcing a failure. [ 436.904616][ T9992] name failslab, interval 1, probability 0, space 0, times 0 [ 436.917691][ T9992] CPU: 0 UID: 0 PID: 9992 Comm: syz.2.1123 Not tainted syzkaller #0 PREEMPT(full) [ 436.917706][ T9992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 436.917713][ T9992] Call Trace: [ 436.917716][ T9992] [ 436.917720][ T9992] dump_stack_lvl+0x100/0x190 [ 436.917737][ T9992] should_fail_ex.cold+0x5/0xa [ 436.917750][ T9992] should_failslab+0xc2/0x120 [ 436.917763][ T9992] __kmalloc_noprof+0xfc/0x820 [ 436.917774][ T9992] ? fib6_info_alloc+0x40/0x160 [ 436.917791][ T9992] fib6_info_alloc+0x40/0x160 [ 436.917810][ T9992] ip6_route_info_create+0x14c/0xad0 [ 436.917825][ T9992] ? nla_find+0x7b/0x130 [ 436.917840][ T9992] ip6_route_multipath_add+0x3cf/0x1ba0 [ 436.917857][ T9992] ? __pfx_ip6_route_multipath_add+0x10/0x10 [ 436.917880][ T9992] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 436.917895][ T9992] ? inet6_rtm_newroute+0xf5/0x160 [ 436.917907][ T9992] inet6_rtm_newroute+0xf5/0x160 [ 436.917920][ T9992] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 436.917940][ T9992] ? find_held_lock+0x2b/0x80 [ 436.917955][ T9992] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 436.917966][ T9992] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 436.917978][ T9992] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 436.917991][ T9992] rtnetlink_rcv_msg+0x95e/0xe90 [ 436.918004][ T9992] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 436.918019][ T9992] ? ref_tracker_free+0x37e/0x6c0 [ 436.918034][ T9992] netlink_rcv_skb+0x159/0x420 [ 436.918050][ T9992] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 436.918062][ T9992] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 436.918081][ T9992] ? netlink_deliver_tap+0x1ae/0xcc0 [ 436.918098][ T9992] netlink_unicast+0x585/0x850 [ 436.918115][ T9992] ? __pfx_netlink_unicast+0x10/0x10 [ 436.918133][ T9992] netlink_sendmsg+0x8b0/0xda0 [ 436.918149][ T9992] ? __pfx_netlink_sendmsg+0x10/0x10 [ 436.918166][ T9992] ? selinux_socket_sendmsg+0x198/0x2f0 [ 436.918181][ T9992] ____sys_sendmsg+0xa4d/0xbe0 [ 436.918194][ T9992] ? __pfx_netlink_sendmsg+0x10/0x10 [ 436.918210][ T9992] ? __pfx_____sys_sendmsg+0x10/0x10 [ 436.918229][ T9992] ___sys_sendmsg+0x190/0x1e0 [ 436.918244][ T9992] ? __pfx____sys_sendmsg+0x10/0x10 [ 436.918257][ T9992] ? __lock_acquire+0x49f/0x1a40 [ 436.918269][ T9992] ? get_pid_task+0x106/0x250 [ 436.918298][ T9992] __sys_sendmsg+0x160/0x210 [ 436.918309][ T9992] ? __pfx___sys_sendmsg+0x10/0x10 [ 436.918327][ T9992] do_syscall_64+0x115/0x870 [ 436.918342][ T9992] ? clear_bhb_loop+0x40/0x90 [ 436.918355][ T9992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.918366][ T9992] RIP: 0033:0x7fb6f899de59 [ 436.918375][ T9992] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 436.918385][ T9992] RSP: 002b:00007fb6f97ca028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 436.918395][ T9992] RAX: ffffffffffffffda RBX: 00007fb6f8c26180 RCX: 00007fb6f899de59 [ 436.918402][ T9992] RDX: 0000000000040000 RSI: 0000200000000000 RDI: 0000000000000005 [ 436.918408][ T9992] RBP: 00007fb6f97ca090 R08: 0000000000000000 R09: 0000000000000000 [ 436.918414][ T9992] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 436.918420][ T9992] R13: 00007fb6f8c26218 R14: 00007fb6f8c26180 R15: 00007ffc89c5acf8 [ 436.918434][ T9992] [ 438.251286][ T5733] em28xx 5-1:0.89: Registering snapshot button... [ 438.303961][ T5733] input: em28xx snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.89/input/input46 [ 438.472102][ T5733] em28xx 5-1:0.89: Remote control support is not available for this card. [ 438.510445][ T5705] em28xx 5-1:0.89: Closing input extension [ 438.546068][ T5705] em28xx 5-1:0.89: Deregistering snapshot button [ 438.633854][ T5705] em28xx 5-1:0.89: Freeing device [ 438.834876][T10001] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 438.951234][T10001] File: /dev/nullb0 PID: 10001 Comm: syz.3.1126 [ 439.256792][ T5705] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 439.376455][ T5799] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 439.546400][ T5705] usb 5-1: Using ep0 maxpacket: 16 [ 439.605954][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 439.605986][ T30] audit: type=1400 audit(1783879666.535:1752): avc: denied { setopt } for pid=10021 comm="syz.3.1133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 439.633388][ T5733] usb 3-1: new full-speed USB device number 60 using dummy_hcd [ 439.679834][ T5705] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 439.691356][ T5705] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 439.725212][ T5705] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 439.760454][ T5705] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 439.794338][ T5705] usb 5-1: SerialNumber: syz [ 439.803999][ T5733] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 439.863000][ T5733] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 439.941748][ T5733] usb 3-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 439.987290][ T5733] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.996010][ T5705] usb 5-1: 0:2 : does not exist [ 440.062492][ T5733] usb 3-1: config 0 descriptor?? [ 440.156410][ T5799] usb 1-1: Using ep0 maxpacket: 16 [ 440.184757][ T5799] usb 1-1: unable to get BOS descriptor or descriptor too short [ 440.198693][ T5799] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 440.214448][ T5799] usb 1-1: can't read configurations, error -71 [ 440.476188][T10031] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1129'. [ 440.586377][ T5720] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 440.687642][ T30] audit: type=1400 audit(1783879667.645:1753): avc: denied { mounton } for pid=10019 comm="syz.2.1132" path="/223/file0" dev="tmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 440.687753][T10032] Invalid source name [ 440.754787][ T5705] usb 5-1: 5:0: cannot get min/max values for control 5 (id 5) [ 440.763869][ T5720] usb 4-1: Using ep0 maxpacket: 16 [ 440.783724][ T5720] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 440.804016][ T5720] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.812826][ T5720] usb 4-1: Product: syz [ 440.829482][ T5705] usb 5-1: 5:0: cannot get min/max values for control 5 (id 5) [ 440.837627][ T5720] usb 4-1: Manufacturer: syz [ 440.856822][ T5720] usb 4-1: SerialNumber: syz [ 440.888690][ T5720] usb 4-1: config 0 descriptor?? [ 441.171076][ T5705] usb 5-1: USB disconnect, device number 62 [ 441.215294][T10030] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 441.253442][ T6387] udevd[6387]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 441.452800][ T5799] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 441.482920][ T5720] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 441.495866][ T5720] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 441.505547][ T5720] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 441.513698][ T5720] usb 4-1: media controller created [ 441.523666][ T5720] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 441.602192][ T5614] Bluetooth: hci0: unexpected event for opcode 0x200b [ 441.717123][ T5720] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 441.725366][ T5720] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 441.826600][ T5705] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 441.883729][ T5799] usb 1-1: Using ep0 maxpacket: 16 [ 441.977866][ T5705] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 441.986387][ T5705] usb 5-1: config 0 has no interface number 0 [ 441.987832][T10030] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 441.997197][ T5705] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 442.014430][T10030] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 442.047945][ T5799] usb 1-1: unable to get BOS descriptor or descriptor too short [ 442.053644][ T5705] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.059374][ T5799] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 442.064277][ T5705] usb 5-1: Product: syz [ 442.076598][ T5705] usb 5-1: Manufacturer: syz [ 442.081330][ T5705] usb 5-1: SerialNumber: syz [ 442.090122][ T5799] usb 1-1: can't read configurations, error -71 [ 442.093898][ T5705] usb 5-1: config 0 descriptor?? [ 442.103129][ T5799] usb usb1-port1: attempt power cycle [ 442.314475][ T5705] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 442.327919][ T5720] usb 3-1: USB disconnect, device number 60 [ 442.366836][ T5705] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 442.388984][ T5705] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 442.397375][ T5705] usb 5-1: media controller created [ 442.427629][ T5705] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 443.577745][T10041] ------------[ cut here ]------------ [ 443.583500][T10041] usb 4-1: BOGUS control dir, pipe 80003c80 doesn't match bRequestType c0 [ 443.592074][T10041] WARNING: drivers/usb/core/urb.c:411 at usb_submit_urb+0x15ff/0x19b0, CPU#1: syz.4.1139/10041 [ 443.602478][T10041] Modules linked in: [ 443.606668][T10041] CPU: 1 UID: 0 PID: 10041 Comm: syz.4.1139 Not tainted syzkaller #0 PREEMPT(full) [ 443.616081][T10041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 443.626182][T10041] RIP: 0010:usb_submit_urb+0x160d/0x19b0 [ 443.631921][T10041] Code: 48 89 54 24 40 e8 33 02 8a fa 4c 89 e7 e8 ab fc db fe 48 89 c6 48 8d 3d 41 b7 af 09 44 8b 44 24 20 8b 4c 24 30 48 8b 54 24 40 <67> 48 0f b9 3a e9 28 ed ff ff e8 04 02 8a fa 89 ee bf ff 00 00 00 [ 443.653013][T10041] RSP: 0018:ffffc90003597760 EFLAGS: 00010287 [ 443.659608][T10041] RAX: ffffffff8ca5e5e0 RBX: ffff888034009e00 RCX: 0000000080003c80 [ 443.667676][T10041] RDX: ffff888033449500 RSI: ffffffff8ca5e5e0 RDI: ffffffff912f9080 [ 443.675651][T10041] RBP: ffff88807ad59058 R08: 00000000000000c0 R09: 0000000000000000 [ 443.683725][T10041] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88807ad590b0 [ 443.691718][T10041] R13: ffff888022ea9160 R14: ffff888022ea9166 R15: ffff888022ea9167 [ 443.699951][T10041] FS: 00007fce16a9d6c0(0000) GS:ffff888123eeb000(0000) knlGS:0000000000000000 [ 443.708918][T10041] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 443.715519][T10041] CR2: 00007f659f0b0447 CR3: 00000000341e3000 CR4: 00000000003526f0 [ 443.723523][T10041] Call Trace: [ 443.726814][T10041] [ 443.729767][T10041] ? __init_swait_queue_head+0xca/0x150 [ 443.735328][T10041] usb_start_wait_urb+0x10e/0x580 [ 443.740428][T10041] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 443.746683][T10041] ? trace_kmalloc+0xeb/0x110 [ 443.751369][T10041] ? __asan_memset+0x23/0x50 [ 443.755960][T10041] usb_control_msg+0x328/0x4b0 [ 443.761135][T10041] ? __pfx_usb_control_msg+0x10/0x10 [ 443.766502][T10041] ? do_writev+0x13e/0x340 [ 443.770938][T10041] ? do_syscall_64+0x115/0x870 [ 443.775720][T10041] dtv5100_i2c_msg+0x1be/0x340 [ 443.780556][T10041] dtv5100_i2c_xfer+0x131/0x3d0 [ 443.785448][T10041] __i2c_transfer+0x5d9/0x1740 [ 443.790253][T10041] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 443.796088][T10041] ? __pfx___i2c_transfer+0x10/0x10 [ 443.802910][T10041] ? rt_mutex_slowtrylock+0x93/0x100 [ 443.808264][T10041] i2c_transfer+0x15f/0x380 [ 443.812800][T10041] i2c_transfer_buffer_flags+0x10c/0x190 [ 443.818507][T10041] ? __pfx_i2c_transfer_buffer_flags+0x10/0x10 [ 443.824676][T10041] ? _copy_from_user+0x59/0xd0 [ 443.829490][T10041] i2cdev_write+0x11e/0x240 [ 443.834003][T10041] ? __pfx_i2cdev_write+0x10/0x10 [ 443.839055][T10041] vfs_writev+0x5ed/0xdd0 [ 443.843403][T10041] ? __pfx_vfs_writev+0x10/0x10 [ 443.848920][T10041] ? __fget_files+0x21f/0x3d0 [ 443.853628][T10041] ? do_writev+0x13e/0x340 [ 443.858401][T10041] do_writev+0x13e/0x340 [ 443.862671][T10041] ? __pfx_do_writev+0x10/0x10 [ 443.867481][T10041] do_syscall_64+0x115/0x870 [ 443.872086][T10041] ? clear_bhb_loop+0x40/0x90 [ 443.876780][T10041] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.882687][T10041] RIP: 0033:0x7fce15b9de59 [ 443.887133][T10041] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 443.906780][T10041] RSP: 002b:00007fce16a9d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 443.915207][T10041] RAX: ffffffffffffffda RBX: 00007fce15e25fa0 RCX: 00007fce15b9de59 [ 443.923207][T10041] RDX: 0000000000000001 RSI: 0000200000002900 RDI: 0000000000000005 [ 443.931205][T10041] RBP: 00007fce15c33e6f R08: 0000000000000000 R09: 0000000000000000 [ 443.939194][T10041] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 443.947200][T10041] R13: 00007fce15e26038 R14: 00007fce15e25fa0 R15: 00007ffddee99f88 [ 443.955797][T10041] [ 443.959164][T10041] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 443.966431][T10041] CPU: 1 UID: 0 PID: 10041 Comm: syz.4.1139 Not tainted syzkaller #0 PREEMPT(full) [ 443.975784][T10041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 443.985825][T10041] Call Trace: [ 443.989088][T10041] [ 443.992004][T10041] dump_stack_lvl+0x100/0x190 [ 443.996677][T10041] vpanic+0x552/0x970 [ 444.000649][T10041] ? __pfx_vpanic+0x10/0x10 [ 444.005148][T10041] panic+0xd1/0xe0 [ 444.008857][T10041] ? __pfx_panic+0x10/0x10 [ 444.013270][T10041] check_panic_on_warn.cold+0x19/0x34 [ 444.018631][T10041] ? usb_submit_urb+0x15ff/0x19b0 [ 444.023649][T10041] __warn.cold+0x191/0x318 [ 444.028059][T10041] __report_bug+0x30f/0x440 [ 444.032558][T10041] ? usb_submit_urb+0x15ff/0x19b0 [ 444.037586][T10041] ? __pfx___report_bug+0x10/0x10 [ 444.042603][T10041] ? lockdep_hardirqs_on+0x78/0x100 [ 444.047805][T10041] ? usb_submit_urb+0x160d/0x19b0 [ 444.052831][T10041] report_bug_entry+0xe1/0x290 [ 444.057591][T10041] ? usb_submit_urb+0x160d/0x19b0 [ 444.062614][T10041] handle_bug+0x1cd/0x2a0 [ 444.066934][T10041] exc_invalid_op+0x17/0x50 [ 444.071447][T10041] asm_exc_invalid_op+0x1a/0x20 [ 444.076287][T10041] RIP: 0010:usb_submit_urb+0x160d/0x19b0 [ 444.081918][T10041] Code: 48 89 54 24 40 e8 33 02 8a fa 4c 89 e7 e8 ab fc db fe 48 89 c6 48 8d 3d 41 b7 af 09 44 8b 44 24 20 8b 4c 24 30 48 8b 54 24 40 <67> 48 0f b9 3a e9 28 ed ff ff e8 04 02 8a fa 89 ee bf ff 00 00 00 [ 444.101513][T10041] RSP: 0018:ffffc90003597760 EFLAGS: 00010287 [ 444.107575][T10041] RAX: ffffffff8ca5e5e0 RBX: ffff888034009e00 RCX: 0000000080003c80 [ 444.115534][T10041] RDX: ffff888033449500 RSI: ffffffff8ca5e5e0 RDI: ffffffff912f9080 [ 444.123496][T10041] RBP: ffff88807ad59058 R08: 00000000000000c0 R09: 0000000000000000 [ 444.131452][T10041] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88807ad590b0 [ 444.139407][T10041] R13: ffff888022ea9160 R14: ffff888022ea9166 R15: ffff888022ea9167 [ 444.147382][T10041] ? __init_swait_queue_head+0xca/0x150 [ 444.152924][T10041] usb_start_wait_urb+0x10e/0x580 [ 444.157949][T10041] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 444.163490][T10041] ? trace_kmalloc+0xeb/0x110 [ 444.168163][T10041] ? __asan_memset+0x23/0x50 [ 444.172752][T10041] usb_control_msg+0x328/0x4b0 [ 444.177512][T10041] ? __pfx_usb_control_msg+0x10/0x10 [ 444.182796][T10041] ? do_writev+0x13e/0x340 [ 444.187204][T10041] ? do_syscall_64+0x115/0x870 [ 444.191967][T10041] dtv5100_i2c_msg+0x1be/0x340 [ 444.196735][T10041] dtv5100_i2c_xfer+0x131/0x3d0 [ 444.201591][T10041] __i2c_transfer+0x5d9/0x1740 [ 444.206350][T10041] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 444.212153][T10041] ? __pfx___i2c_transfer+0x10/0x10 [ 444.217342][T10041] ? rt_mutex_slowtrylock+0x93/0x100 [ 444.222618][T10041] i2c_transfer+0x15f/0x380 [ 444.227113][T10041] i2c_transfer_buffer_flags+0x10c/0x190 [ 444.232739][T10041] ? __pfx_i2c_transfer_buffer_flags+0x10/0x10 [ 444.238888][T10041] ? _copy_from_user+0x59/0xd0 [ 444.243645][T10041] i2cdev_write+0x11e/0x240 [ 444.248146][T10041] ? __pfx_i2cdev_write+0x10/0x10 [ 444.253162][T10041] vfs_writev+0x5ed/0xdd0 [ 444.257493][T10041] ? __pfx_vfs_writev+0x10/0x10 [ 444.262358][T10041] ? __fget_files+0x21f/0x3d0 [ 444.267040][T10041] ? do_writev+0x13e/0x340 [ 444.271449][T10041] do_writev+0x13e/0x340 [ 444.275687][T10041] ? __pfx_do_writev+0x10/0x10 [ 444.280452][T10041] do_syscall_64+0x115/0x870 [ 444.285038][T10041] ? clear_bhb_loop+0x40/0x90 [ 444.289710][T10041] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 444.295593][T10041] RIP: 0033:0x7fce15b9de59 [ 444.299996][T10041] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 444.319591][T10041] RSP: 002b:00007fce16a9d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 444.327997][T10041] RAX: ffffffffffffffda RBX: 00007fce15e25fa0 RCX: 00007fce15b9de59 [ 444.335955][T10041] RDX: 0000000000000001 RSI: 0000200000002900 RDI: 0000000000000005 [ 444.343910][T10041] RBP: 00007fce15c33e6f R08: 0000000000000000 R09: 0000000000000000 [ 444.351867][T10041] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 444.359822][T10041] R13: 00007fce15e26038 R14: 00007fce15e25fa0 R15: 00007ffddee99f88 [ 444.367790][T10041] [ 444.371009][T10041] Kernel Offset: disabled [ 444.375308][T10041] Rebooting in 86400 seconds..