last executing test programs: 12m0.403815705s ago: executing program 1 (id=143): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0xf1, @loopback, 0x19f49a9}], 0x1c) sendmsg$inet_sctp(r2, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xff, @loopback, 0x5}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000100)="e6", 0xffe0}], 0x1, &(0x7f0000000140)=[@dstaddrv4={0x18, 0x84, 0x7, @local}, @dstaddrv6={0x20, 0x84, 0x8, @rand_addr=' \x01\x00'}, @dstaddrv6={0x20, 0x84, 0x8, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}], 0x58, 0x4855}, 0x24000052) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000040)={&(0x7f0000000300)=[0x0], 0x0, 0x1, r3, 0xcccccccc}) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4e21, 0x9, @mcast1, 0x9}, r5, 0x8001}}, 0x48) writev(r4, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 12m0.21058275s ago: executing program 1 (id=145): syz_open_dev$loop(0x0, 0x1, 0x122c42) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x0, 0x8800) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000580)=ANY=[@ANYRESOCT]) close_range(r0, r1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$video(0x0, 0x101, 0xab02) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000540)={&(0x7f0000000340)="6d5a1ec272dd2b9ff62914fa294ea2112b289521ff58750de5dbaef11d29e71b74193c2ba4af280f02483f33af6c238b2829891467fb586d0264badc7b013be3d998f5c615deb542092e89cb78369840d4d834d4c1ade063e6d79e994c5917a38640e004719157d61286a2650e66fc936cfd609bc9bcd8c25ff49e4b0da5adf8fedbb7ca554a223e21508a28c4ffa7d7e3a8053c763f", &(0x7f0000000400)=""/69, &(0x7f0000000480)="c92a37f04a5a457e89ef667bc2fc5e54563fc08503f3c2e6d0cfac5ab32911a1bf302614942c3da85f41", &(0x7f00000004c0)="3a25002947c989e6d7fc7163d457b35f3e0581513a4090b990287567d6b2f1e88326a546faa881730c1665706ee24ee3514d9216ded8c4409ee2c50f6e5262d04d6beeefd8335986cc4eb96a0433386c5409e318cd10a8d53bfc8ece4dd1c1aaa953531ffe606cc9d0", 0xebb, r1, 0x4}, 0x38) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0], 0x4d6) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000000080)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r3, 0xc04064aa, &(0x7f0000000100)={0x0, 0x0, r4}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000a, 0x204031, r2, 0xffffd000) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x800) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mmap$usbmon(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xc, 0x40010, r1, 0x5c7) 11m59.997929672s ago: executing program 1 (id=146): pipe(0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000000c0)={'gretap0\x00', &(0x7f0000000040)={'gre0\x00', 0x0, 0x20, 0x17, 0x1, 0x0, {{0x5, 0x4, 0x0, 0x29, 0x14, 0x64, 0x0, 0x0, 0x3e, 0x0, @broadcast, @loopback}}}}) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) ioctl$NBD_SET_SIZE(0xffffffffffffffff, 0xab02, 0x2) getrandom(0x0, 0x0, 0x1) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, 0x0) r0 = syz_usb_connect$midi(0x5, 0x24, &(0x7f0000001a00)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x2466, 0x8010, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x3, 0x80, 0x4, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x5}}}}}]}}, &(0x7f0000001f00)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000002200)={0x2c, 0x0, &(0x7f0000002040)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) r1 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$lock(r1, 0x24, 0x0) getrandom(0x0, 0x0, 0x2) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x5, 0x80010, 0xffffffffffffffff, 0x79c3000) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000002a40)={0x14, 0x0, &(0x7f0000002a00)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) 11m57.526192677s ago: executing program 1 (id=154): r0 = socket$rds(0x15, 0x5, 0x0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000200)='./file0/file0\x00', 0x0, 0x115090, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f00000003c0)='./file0\x00', 0xa) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xfffffffffffffea8, &(0x7f0000000140)=ANY=[]) setsockopt$RDS_GET_MR(r0, 0x114, 0x2, 0x0, 0x0) 11m55.312785316s ago: executing program 1 (id=162): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x24, 0x140f, 0x1, 0x70bd27, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x11, 0x45, 'ib_multicast\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fd7000/0x18000)=nil, &(0x7f0000005700)=[@text32={0x20, 0x0}], 0x1, 0xe, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000003680)=@vmx={0x0, 0x0, 0x1f8, {0x0, 0x8000000}}) 11m54.954596633s ago: executing program 1 (id=164): socket$inet(0x2, 0xa, 0x400) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x1f4, 0xe, 0xfff4, &(0x7f00000001c0)="ffffffff7f833e9762a536c801d7", 0x0, 0x304, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x8}, 0x50) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000180)={0x200000, 0x200000, 0x0, 0x0, 0x400d33, 0x7}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, 0x0, 0x0) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) process_madvise(r3, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000000)="7fe2", 0x2}, {&(0x7f00000000c0)="7ee9", 0x2}], 0x3, 0x16, 0x0) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000200)={0xfffa, [0x0, 0xfffffffc], 0x4}, 0x10) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000100)={0x0, 0x0}) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000100), r5) lseek(r5, 0x851, 0x1) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_VLAN(r5, &(0x7f0000000840)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x34, r6, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xfffffff7}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000080}, 0x7c63f179395efde2) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) prlimit64(0x0, 0x1, 0x0, &(0x7f0000000440)) r8 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x2c020400) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x7c}}, 0x0) ioctl$FS_IOC_SETFLAGS(r8, 0x40186f40, &(0x7f0000000440)=0x1f) ptrace$peeksig(0x4209, r7, &(0x7f0000000140)={0x6, 0x0, 0xecf39e89a9c3c817}, &(0x7f0000001500)) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd608137f200142c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa3a0000051e3b6ae927d80180deebb698796ac2294c36a14f2d7b10ffb1b344cfae7ab980c0e554f5036a2bfebbdd5f30257ae2932f1d0f0aceb6e1519ec3c906681b975b0525a16e0f3d82f520b5182ddad1e6", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000ffff90780000"], 0x0) syz_open_procfs(r4, &(0x7f0000000180)='net/ip6_mr_vif\x00') syz_usb_connect(0x2, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000016036c08c5109a8146e40102230109022d0001000000000904000003030000000905483b"], 0x0) 11m54.820031081s ago: executing program 32 (id=164): socket$inet(0x2, 0xa, 0x400) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x1f4, 0xe, 0xfff4, &(0x7f00000001c0)="ffffffff7f833e9762a536c801d7", 0x0, 0x304, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x8}, 0x50) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000180)={0x200000, 0x200000, 0x0, 0x0, 0x400d33, 0x7}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, 0x0, 0x0) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) process_madvise(r3, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000000)="7fe2", 0x2}, {&(0x7f00000000c0)="7ee9", 0x2}], 0x3, 0x16, 0x0) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000200)={0xfffa, [0x0, 0xfffffffc], 0x4}, 0x10) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000100)={0x0, 0x0}) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000100), r5) lseek(r5, 0x851, 0x1) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_VLAN(r5, &(0x7f0000000840)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x34, r6, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xfffffff7}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000080}, 0x7c63f179395efde2) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) prlimit64(0x0, 0x1, 0x0, &(0x7f0000000440)) r8 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x2c020400) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x7c}}, 0x0) ioctl$FS_IOC_SETFLAGS(r8, 0x40186f40, &(0x7f0000000440)=0x1f) ptrace$peeksig(0x4209, r7, &(0x7f0000000140)={0x6, 0x0, 0xecf39e89a9c3c817}, &(0x7f0000001500)) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd608137f200142c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa3a0000051e3b6ae927d80180deebb698796ac2294c36a14f2d7b10ffb1b344cfae7ab980c0e554f5036a2bfebbdd5f30257ae2932f1d0f0aceb6e1519ec3c906681b975b0525a16e0f3d82f520b5182ddad1e6", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000ffff90780000"], 0x0) syz_open_procfs(r4, &(0x7f0000000180)='net/ip6_mr_vif\x00') syz_usb_connect(0x2, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000016036c08c5109a8146e40102230109022d0001000000000904000003030000000905483b"], 0x0) 10.787774649s ago: executing program 5 (id=2705): ioctl$XFS_IOC_GETBMAPX(0xffffffffffffffff, 0xc0205838, &(0x7f0000000000)={0x8000000000000001, 0x1, 0x800, 0xfffffff7, 0x7, 0x8, 0x1}) r0 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000004, 0x1a031, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r1) sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f00000006c0)=ANY=[@ANYBLOB='\t\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000040000000000001000000140005000000000000000000000000000000000005000100000000000800020005000000"], 0x38}, 0x1, 0x0, 0x0, 0x44000}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), r1) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x2842, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r4, 0x5609, &(0x7f00000000c0)={0x9, 0x17, 0x3}) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) ioctl$RTC_SET_TIME(r3, 0x4024700a, &(0x7f0000000140)={0xa, 0x18, 0xe, 0x7, 0x4, 0x2, 0x0, 0x2b, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'lo\x00'}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000040)='dctcp', 0x5) sendto$inet6(r8, 0x0, 0x0, 0x20000045, &(0x7f0000000140)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000180)='scalable', 0x8) write$P9_RMKNOD(r8, &(0x7f00000000c0)={0x14, 0x13, 0x2, {0x80, 0x2}}, 0x14) shutdown(r8, 0x1) io_submit(r6, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r5, 0x0}]) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x88, 0x24, 0x800, 0x70bd29, 0x25dfdbfb, {0x60, 0x0, 0x0, 0x0, {0xb, 0xfff2}, {0x1, 0xc}, {0xfff3, 0xa}}, [@TCA_STAB={0x64, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xff, 0x0, 0x8, 0x2, 0x1, 0xfffffffe, 0x5f5d, 0x8}}, {0x14, 0x2, [0x3, 0x1, 0x4, 0x4, 0x200, 0x6, 0x2, 0x3]}}, {{0x1c, 0x1, {0x3d, 0xf4, 0x57, 0x8, 0x2, 0x8000, 0xe, 0x7}}, {0x12, 0x2, [0x74, 0x8, 0xfff7, 0x1800, 0x5, 0x1000, 0x2]}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x44045}, 0x10) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x240, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f00000000c0)=0xd) readv(r9, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/245, 0xf5}], 0x1) 9.985447315s ago: executing program 5 (id=2711): syz_open_dev$dvb_frontend(&(0x7f00000015c0), 0x0, 0x400) (async) r0 = syz_open_dev$dvb_frontend(&(0x7f00000015c0), 0x0, 0x400) ioctl$FE_GET_PROPERTY(r0, 0x80106f53, &(0x7f0000000000)={0xe, &(0x7f0000000140)=[{0xa, '\x00', @buffer={"ee3ec8530fe64729c1a89aa1da7ff7c70137b422597b31888225dfa4a0cffeba", 0x20}, 0xa}]}) ioctl$FE_SET_FRONTEND(r0, 0x40246f4c, &(0x7f0000000040)={0x3, 0x1, @qam={0x8, 0x1, 0x3}}) 9.532105517s ago: executing program 5 (id=2714): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket(0x2b, 0x1, 0x1) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r1, 0x5) r2 = socket$inet_smc(0x2b, 0x1, 0x0) accept4$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @local}, 0x0, 0x800) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)=',#', 0x2) r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bb", 0x48}], 0x1, 0x0, 0x0, 0x24004050}], 0x1, 0x40800) recvmsg(r3, 0x0, 0x0) r4 = syz_usb_connect(0x0, 0x4a, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r4, 0x82, 0xc38, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="180000001514"], 0x18}}, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000000080), 0x12) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) 7.540118438s ago: executing program 0 (id=2719): r0 = syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x800000000000) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xc, 0x13, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff858500000071000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000001}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, r1}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a30000000000900010073797a30000000000800054000000016500000000c0a010300000000000000000100000008000440000000000900010073797a30000000002800038024000080200001801a0001"], 0xd4}}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6(0xa, 0x1, 0x0) mount(&(0x7f0000000380)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000340)='nilfs2\x00', 0x800000, 0x0) add_key$fscrypt_v1(&(0x7f00000002c0), &(0x7f0000000300)={'fscrypt:', @desc4}, &(0x7f0000000440)={0x0, "8527d2100090af54bfbca283be11c0de7af30e90937920fcba13d90af61beaa44d66a6535daf1bc35fb3af1e9197e31d26589d073c10184095fb00", 0x14}, 0x48, 0xffffffffffffffff) r6 = open_tree(0xffffffffffffffff, &(0x7f0000000640)='\x00', 0x9901) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$IPT_SO_GET_REVISION_MATCH(r6, 0x0, 0x42, &(0x7f00000003c0)={'TPROXY\x00'}, &(0x7f0000000400)=0x1e) sendmsg$IPSET_CMD_LIST(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) recvmsg(r7, &(0x7f000000c1c0)={0x0, 0x0, 0x0}, 0x20) r8 = semget$private(0x0, 0x1, 0x0) semctl$IPC_STAT(r8, 0x0, 0x2, &(0x7f0000000100)=""/29) syz_usb_disconnect(r0) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x1, 0x0, 0x7fff0000}]}) close_range(r9, 0xffffffffffffffff, 0x0) 7.444888745s ago: executing program 4 (id=2721): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r1, &(0x7f0000000540)={0x0, {'syz1\x00', 'syz0\x00', 'syz1\x00', &(0x7f00000000c0)=""/25, 0x19, 0x6, 0x8, 0x1, 0x4, 0xc08}}, 0x120) read$FUSE(r1, &(0x7f0000006b40)={0x2020}, 0x2020) write$UHID_DESTROY(r1, &(0x7f0000000180), 0x4) write$UHID_INPUT(r1, &(0x7f00000011c0)={0x8, {"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", 0x1000}}, 0x1006) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x6d207ee5}, 0x8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback, 0x2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f0000000580)={0xa, 0x4e23, 0x1, @loopback}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x8020) r2 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') lseek(r3, 0x2000, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x40810}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008011}, 0x4004) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000000)={0x0, 0x3}, 0x8) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 6.436899189s ago: executing program 5 (id=2725): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000780)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000002294eb630008000300", @ANYRES32=r2, @ANYBLOB="04005b"], 0x20}}, 0x0) r3 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x2ffe, 0x2) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x400880, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) personality(0xfe47fef9f5ff7379) ppoll(0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="18000000407df04536bd7000fedb7c000004000812c997a06de226f2ac7b5a54b3bf0fddacad7af903fb278c34acb9371b89e4e052e02b00"], 0x18}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) syz_open_dev$dvb_dvr(&(0x7f00000000c0), 0x101, 0x40) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, 0x0, 0xc000) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYRES64, @ANYRES32, @ANYBLOB], 0x50) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000000)=0x1) 6.432901646s ago: executing program 4 (id=2726): syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = signalfd4(0xffffffffffffffff, &(0x7f00000008c0), 0x8, 0x800) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}}) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffff7ffffffd]}, 0x0, 0x8) timer_create(0x3, 0x0, &(0x7f0000044000)) r2 = userfaultfd(0x801) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f00000002c0)={0x0, 0xa9, "b8a3a3915add048cdeabd2fd4607994ed215dd0d37704a56d16d06b6ab448b5c6219024f23ee78330b95b1d604d35856b97357ebc04de6b71203ba1ed9ec2d6963861f46399734ac598f6218e2b285253f1647fdf73fdfb84f4ccf065cf4a4951c96f79a817501f7dc38934f62507ee7ebbd6663b6ff4f64b94ef0d4dfba20c3752ab56468a5dc0ac94f5f1b1b264075c52dbf67f551f5c5b1337db0e1c6fc558ff5fd6ee3132b7a7c"}, &(0x7f0000000380)=0xb1) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000003c0)={r3, 0x5, 0x5, [0x2, 0x1, 0x8, 0x1, 0x0]}, 0x12) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000020c0)={0xaa, 0xbd}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r4, 0x1, &(0x7f0000000800)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f00000011c0)={0x1, 0x1, 0x1, 0xffdff4ea, @vifc_lcl_addr=@multicast2, @multicast2}, 0x10) io_pgetevents(r4, 0x4, 0x2, &(0x7f00000001c0)=[{}, {}], &(0x7f0000000200)={0x77359400}, &(0x7f0000000280)={&(0x7f0000000240)={[0x76]}, 0x8}) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000080)={{}, {0x0, 0x9}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x1405, 0x1, 0x70bd29, 0x25dbdc00, "", [{{0x8}, {0x8, 0x3, 0x2}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20044000}, 0x800) sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x3c}}, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb8, 0xb8, 0x8, [@float={0x2, 0x0, 0x0, 0x10, 0xc}, @enum64={0x10, 0x3, 0x0, 0x13, 0x1, 0xa, [{0xa, 0x1000, 0x8}, {0x3, 0x4, 0x40008}, {0xc, 0x80000001, 0x9c}]}, @const={0x5, 0x0, 0x0, 0xa, 0x3}, @enum={0xd, 0x2, 0x0, 0x6, 0x4, [{0xe, 0x47070029}, {0xd, 0x32}]}, @const={0x10}, @union={0x9, 0x4, 0x0, 0x5, 0x1, 0x81, [{0x10, 0x1, 0x4}, {0xc, 0x5, 0x3}, {0x6, 0x0, 0x8001}, {0xc, 0x5, 0x1}]}, @float={0xf, 0x0, 0x0, 0x10, 0x8}]}, {0x0, [0x0, 0x5f, 0x2e, 0x5f, 0x0, 0x30]}}, &(0x7f0000000500)=""/182, 0xd8, 0xb6, 0x1, 0x98}, 0x28) 5.395960453s ago: executing program 0 (id=2728): socket$nl_route(0x10, 0x3, 0x0) r0 = fsopen(&(0x7f0000000080)='vfat\x00', 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) pipe(&(0x7f0000000040)) r5 = socket$inet6_udp(0xa, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6(0xa, 0x800000000000002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet6(r5, &(0x7f0000002180)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x3, @local, 0x3}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000000280)="cea8004d580cefc63f410a6d46f9431c8182c30108c6f1fb83d08513c14e9f3c8f862d84b66f4472bab3", 0x2a}, {&(0x7f0000000380)="615baee1da1f8807347acc3c53a0ac14478ab6ccbaf7e9bec260316b16039bc4b90e309d9f5a7bef097a56ed5bd256ef37e80ce3ac43dda56e0694de39af3f0d65b0227920bd4e6936aa0b517559ff10bce46c9e66c7d2f046b2b2bf607eec5549326659da070f6c3a5dd808427cef009ff22a029f389818b94d5abca8ea4895c8e429a1683e8fe5ee2a6e8684431d12e7e8f5e5de36045d32fefbbe227573114ac978fb2b686995fb095c48f61ff3f5289b9716b6d389", 0xb7}, {&(0x7f0000000500)}, {&(0x7f0000000580)="202cc177bd38206414975bffc5b19bb979ebe2182a79305541c58f27b49e008baff1cae76d35ed1ca962522d35a91a2728592cafceff6a2b121d0459932fc361a2edcfac71fb0514fdb1af808c917dfc9d2fbdee64f71e7313c26bcd7a2e437d3605b9e201466dda9a77", 0x6a}, {&(0x7f0000000600)="43eab1311c51d4a7645774e3415ebb70b484b02865956d8e761f25b97521f052bdd9a5b028301ef56486e356a3ab06b9562b73b259b2c9c3b9fc82f2ae99992e78f86b2bd7ba793ba82e12dfdf2e87a9bfb1f775d3006f827c23bfbabadcee7723bca291509dd44d968862f87128ffed577e58dc4bae175d068170ec2dac14b7df4eb57b7ede40f76aa4", 0x8a}], 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="3de1a332abcd6f884203e0b91400000000000000290000000b0000000000000200000000"], 0x18}}, {{&(0x7f0000000780)={0xa, 0x4e22, 0xf, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2}, 0x1c, &(0x7f00000019c0)=[{&(0x7f00000008c0)="43605472deae43baf57c45fef1d8844523f927ead695781f13b72545b4a9898ec8beaadce302641210e71c8de03a166dc6d7d6128a31ce1ddc92f74a035f56d86bece8988c703dc0da439ec4834230ceb220281beff44f01cca03b64ed53bbc6daaa33158329aab2842162038666c5d661398a9021", 0x75}, {&(0x7f0000000940)="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", 0x1000}, {&(0x7f0000001940)="86b4dcdd8b60a97565afb2ccd3f96a8359d3ef97e7a16061ba9b83785b3e95aae62e939edf6290fb194ea81dd1125a0d78a2e19b3aa6850dfde9bbd5517fd11a597e9895ac4caa1d66", 0x49}], 0x3}}, {{&(0x7f0000001a00)={0xa, 0x4e20, 0x2, @remote, 0x7}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000001b40)="9cda17e4f0b80b513471ff9a9a297cb7ad55ae8dc4ead58fc4b348f7da6ebf0b329a9b2f55712443f1a790e044701cfbd6ef6e040f670a0dca060ace27559785115b8e5e362e4e2c716a93fc33da450d172a2c9b6c6074fac6a4d485b990e9cbc2cf239d202abd052aa3310a8855b787f6c5dc8480d65ec613ba75459886f1376d687e4b5f80faef8719f1d93c3fc8c2cf16a791ca7b5979eab9e9978f7de5cc8d29940e392361fcd5b3f33b8b3988f607f38121fb3f3834261e0b1f6f3820314e0c4518a96a01e0299ce02b6959ae350ca21e58aa0bd29c6b2093bf5c8ba1e50109a9226375c1a7eeab1f1cbafbeb1326dab93ee986bc65a6ab004f", 0xfc}, {&(0x7f0000001a40)}, {&(0x7f0000000440)="90ddf4fcfca2b44979ce111520c3c983c25d66b0f6e335240e4dac36f1816d201450f9673873731640a35ea8919b42dfa6fb40435b21e8be65f6f3f34f6a33df243ecb238f61e508f0acdaf84d86d05c918fe0fb422dfa703429212635aa8e4dd7419d44402da42bc589c34e949d667c", 0x70}], 0x3, &(0x7f0000001c80)=[@dontfrag={{0x14, 0x29, 0x3e, 0x5}}, @dontfrag={{0x14}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x87, 0x2, 0x1, 0x0, 0x0, [@ipv4={'\x00', '\xff\xff', @multicast1}]}}}], 0x58}}, {{&(0x7f0000001d00)={0xa, 0x4e23, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, 0x1c, &(0x7f0000002040)=[{&(0x7f0000001d40)="198139d33e97e73cfb5bcc17f7c0156db9d6ccf27c66eb3256dff5d8f56901eff2d4b67ec4eaa5980b769c3f5bf498d2a0cdb07e55ae5bd9e5fd1c3a16765a0cbc85d7de9c187929f5bd31c227461b45de7290b9e6f9f378403790f7fb39204417f936f7f814c001842c699409d94f5871ce9e1159a7b91c8492e2e19e0e468e8c1ca9238d8a1b9d4e4e79164be69aa479909a4ba5a2b6cc49557b5322b57d276728c570bf36f376ada0b9d1f92b3706e9430f19a6cb4b5477720f56efc2df78370ccb39e205f875f1b564cdafd7010b72bafa25b9fd7ac93361caf595e27c473574c9aef85d6c2d27b9c028d660", 0xee}, {&(0x7f0000001e80)="a862f2ec59a8886c22cd0fd888e39f5a8ec23655edb41b624ff5453dea891fb7ec8784c8b6b0b13bb2889985cd863567fd395aa87fd218269abfc094061086034968bf9edd6ff40516dbc0b76843344a8843e7c59fb8b8b223aa30a35691299137210cbf19632b20a3b2bcc29bdd58bab50063c37522828caf7f0a86dd09ad3ff3cfec09cdb76625039015229bcff163dc8d95607f6559e8ec4f5a3145e019f570c5d0538e101f1730712f", 0xab}, {&(0x7f0000001f80)="85c69efe847356c540b73dd02867512ec59a0b8446e6", 0x16}, {&(0x7f0000001fc0)="e53b061ccc58e1ef767d40a78bd1d1245251983f53b14e1e978e785f7f72c1fa97f3e75b5fd5f016ee8648760cf455784ca846dc1ade091ca58be1743d3bc8e5e69a202eeb4a", 0x46}], 0x4, &(0x7f00000020c0)=ANY=[@ANYBLOB="1400000000000000290000000800000001ad890000000000480000000000000029000000040000000405000000000000c910fe8000000000000000000000000000bbc204000000010710000000010200bb0c0e00000000000000000000000000480000000000000029000000390000000c06000600000000fc010000000000000000000000000001fe8000000000000000000000000000bbfe8000000000000000000000000000bb"], 0xa8}}], 0x4, 0x4000040) ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000340)=0x1) fsmount(r0, 0x0, 0xa) 5.287371444s ago: executing program 5 (id=2731): r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000a40)='/proc/asound/card1/oss_mixer\x00', 0x242, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a", 0x15}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81ffffffffb9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="563f000019"], 0xfe33) syz_usb_connect$uac1(0x0, 0xb4, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902a20003010070000904008000010100000a24010800000201020d24060000"], 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0xeb, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) r3 = dup(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(r3, 0x8914, 0x0) ioprio_set$pid(0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) syz_emit_ethernet(0x0, 0x0, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x0, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000a80)="a080203e3f764f8a9aefd39cafdb26bffadae8105afd9db7fb281c375787c7506703ffe54f53e430e0d2af6e9f88a1d5d2fdad902cf70b315dce0d0c54c3d41e7907479bef309cd6705a1a41c2b5dbdbd66493db2006692ebf42f2520d453545ab0a", 0x62}, {&(0x7f0000000b00)="3bcab867990dafd48a38aa5c3e5078b40f6939f90b68fb7ea320958d4d64836e07", 0x21}, {&(0x7f0000000c00)}, {0x0}, {&(0x7f0000001cc0)="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", 0xfc0}, {&(0x7f0000002cc0)}, {&(0x7f0000002d80)="ae7699a27663725e496a1d4477a33f7192b4f8e619e529bd414590fedcedebd3a74ae4f3ecb6aa6866c924ab79cfdf3e941ed1ddfdcd66fda02c78f37d6d9b719769616417f76edd2db964ff309cd95275033746f1120afcb4230f790de61e7713e1181c041cebdcdc8fd423a2e88d598e714e94c8a03438fad42ffecf0b8438fcdbdf2621f8fd9fd57ea9971c4e0b099bd2f5e1f5b7f7a716f59d33ac5c4af92c6e84694ffeb550ec8708c4c12638776c342bc5ab188a", 0xb7}, {&(0x7f0000002e40)="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", 0xb32}], 0x8) 5.024195232s ago: executing program 4 (id=2732): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, 0x0, 0x0) 4.875467984s ago: executing program 4 (id=2734): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) setresuid(0x0, 0x0, 0xee01) socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYRES64=r3], 0x10) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r5) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000140)=r5, 0x4) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) ptrace$cont(0x20, r0, 0x6, 0x401) r6 = syz_clone(0x20000400, 0x0, 0x3b54, 0x0, 0x0, 0x0) r7 = syz_open_procfs(r6, &(0x7f0000000040)='stat\x00') pread64(r7, &(0x7f0000000100)=""/31, 0x1f, 0x4) 4.577951346s ago: executing program 3 (id=2735): r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x10000, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x5, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000080)={'\x00', 0x8, 0x9, 0x6, 0x6, 0x7, 0x0}) r3 = socket$inet6(0xa, 0x5, 0x0) fsopen(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r6 = syz_open_dev$dri(&(0x7f00000008c0), 0x1, 0x400) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0), 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f0000000340)={r7, 0x101, 0x3, 0x0, 0x0, [0x0], [0x0, 0x7, 0x0, 0xfffffffc], [0x0, 0x80000006, 0x2], [0x5, 0x0, 0x1, 0x5]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0x806}) r9 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000780)={'ip6_vti0\x00', &(0x7f0000000200)={'syztnl1\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x5a, @dev={0xfe, 0x80, '\x00', 0x24}, @empty, 0x7800, 0x40, 0xfffffff8, 0xdc66}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r9, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl0\x00', r10, 0x0, 0x0, 0x1, 0x0, 0xd, @empty, @empty, 0x700, 0x0, 0xfffffffc}}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc00c642d, &(0x7f0000000080)={r8, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r11}) setsockopt$inet_int(r3, 0x0, 0xf, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r3, 0x84, 0x65, &(0x7f0000000200), 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x12, r0, 0x4e) r12 = syz_open_procfs$namespace(r2, &(0x7f0000000640)='ns/time_for_children\x00') open_by_handle_at(r12, &(0x7f0000000000)=ANY=[@ANYBLOB="20000000f100000006"], 0x4000) 3.766821332s ago: executing program 3 (id=2737): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, 0x0, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) r4 = semget$private(0x0, 0x6, 0x0) semtimedop(r4, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) semop(r4, &(0x7f00000000c0)=[{0x4}, {0x2}], 0x2) semop(r4, &(0x7f0000001240)=[{}, {0x2, 0x0, 0x2000}], 0x2) semctl$GETZCNT(r4, 0x2, 0xf, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x0, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r5, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xb4, 0xa, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x1}, @NFTA_SET_EXPR={0x80, 0x11, 0x0, 0x1, @quota={{0xa}, @val={0x70, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x7}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x6}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0xe04}, @NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_QUOTA_CONSUMED={0xc}, @NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x200}, @NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x6}]}}}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1c0}]}, 0xb4}, 0x1, 0x0, 0x0, 0x14040010}, 0x4000) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) msgctl$IPC_STAT(0x0, 0x2, 0x0) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000240)=ANY=[@ANYBLOB="8e1bcb89ce6d456b3f251a99052d423c23", @ANYRES16=r6, @ANYBLOB="070600000000010000002d0000000c002d000201aaaaaaaaaaaa05002e00050000000a0001007770616e3100000005002b0003000000"], 0x3c}}, 0x40000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r7, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) sendmmsg$inet6(r7, &(0x7f0000000140)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x4db, @local, 0x3}, 0x1c, &(0x7f0000000900)=[{&(0x7f0000000400)="ec", 0x1}], 0x1}}], 0x1, 0x4c040) 3.238913869s ago: executing program 0 (id=2738): r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000840)=ANY=[@ANYBLOB="1c0000000203030000000000000000000000ffff0800010001"], 0x1c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000020303000000000000000000000000000800010001"], 0x1c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x14b0}}, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x169a82, 0x109) sendfile(r4, r4, 0x0, 0xb) close_range(r0, 0xffffffffffffffff, 0x0) r5 = socket(0x1e, 0x1, 0x0) listen(r5, 0x7f) shutdown(r5, 0x2) recvmsg(r5, &(0x7f00000023c0)={0x0, 0x0, &(0x7f0000002300)=[{&(0x7f0000000000)=""/101, 0x65}], 0x1}, 0x2) syz_usb_connect$uac1(0x2, 0x72, &(0x7f00000003c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x2a39, 0x3fb0, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0x2, 0x90, 0x13, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x1, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x3d, 0x8, 0x7, {0x7, 0x25, 0x1, 0xc, 0x8, 0x200}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x9, 0x7, 0x7, {0x7, 0x25, 0x1, 0x8, 0x5, 0xa1a8}}}}}}}}]}}, 0x0) 3.181178138s ago: executing program 2 (id=2739): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) socket$kcm(0x11, 0x3, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000000)=@bridge_getlink={0x28, 0x12, 0x101, 0x0, 0xffffffe0, {0x7, 0x0, 0x0, 0x0, 0x8448, 0xc000}, [@IFLA_EXT_MASK={0x8, 0x1d, 0xc3}]}, 0x1f}, 0x1, 0x0, 0x0, 0x4050}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8810}, 0x8000) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x20000, 0x0) close(r6) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth1_to_bridge\x00'}) 3.180878287s ago: executing program 4 (id=2740): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={&(0x7f0000000080)="0329d4bc68f3bdaedd8865bdfd9efcfcf0e8e08932ce29e920f20e610b92e26aecd831cae6880002caa58faabe1148644db661c3109d131c40da7a931e0b13b50fdd1ffb92262f911805af1529cbc0dcb82d059a5a2579717ff0d5", &(0x7f0000000340)="f92e7c30aa7b70899e481b0e797efc8f3d35e943976edb7d201dedfd9924e984ec1e118e3c5125c2f1fc8008fb0fe729da973e90c83699a02714e10d29d920cbc0e9d83f8ae9596dc01bef6ee6a8c1d3571294463498ac82c0d96ac74239c580a1d77fc65a35ef67c4e9732b9bbd37d3d686bb80fc3b257dda356c2e07aeb435b0ac67e18e358bce8150c5f721d70f7a14799078b5f4e895397b38b3740b7153b4dbb0938882250a9c27b4435ffcede5d2eb1925746191909ccb3334bea013990f8e5b943ee1c074ecd18e09330cbf2f87"}}, &(0x7f0000000100)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4000844) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000f1d566201e043c40d7cc000000010902120001000000000904"], 0x0) write$UHID_CREATE(r1, &(0x7f0000000540)={0x0, {'syz1\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000240)=""/17, 0x11, 0x6, 0x8, 0x1, 0x4, 0xc08}}, 0xfffffdf0) write$UHID_DESTROY(r1, &(0x7f0000000180), 0x4) write$UHID_INPUT(r1, &(0x7f00000011c0)={0x8, {"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", 0x1000}}, 0x1006) 2.97204682s ago: executing program 2 (id=2741): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000780)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000002294eb630008000300", @ANYRES32=r2, @ANYBLOB="04005b"], 0x20}}, 0x0) r3 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x2ffe, 0x2) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x400880, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) personality(0xfe47fef9f5ff7379) ppoll(0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{0x0}], 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="18000000407df04536bd7000fedb7c000004000812c997a06de226f2ac7b5a54b3bf0fddacad7af903fb278c34acb9371b89e4e052e02b00"], 0x18}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) syz_open_dev$dvb_dvr(&(0x7f00000000c0), 0x101, 0x40) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, 0x0, 0xc000) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYRES64, @ANYRES32, @ANYBLOB], 0x50) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000000)=0x1) 2.726301371s ago: executing program 3 (id=2742): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d40)=@newqdisc={0x3a8, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0xfff1, r2, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x378, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x1c}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x65, 0x2, 0x3, 0x17, 0xd, 0x8, 0x2}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x2}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "dc542b4e237011fb38ddb228806571a8633206e26df63a43bbc516382325dedd79c1cf0a26379dfaf72cb5ab9ab7efe16f312ee9ab598d1ac0d7903ac69c51f1b6842ebecf00dec5deff737b59f0c1f0b57cc6c2b7b8c5b2c527aafa57222f4bd2355ccab39fa20d4033b6b687491532080101805feb9c6fa8a56a77186efcb394ce1a1cd7f2130835e3bf9e3ac25d0a102a808be13beb51f37da6d10046f131834545ee5013f43e41e91eb18a12c28540ab4106286e0f7568f6a9cd0c0da51df08e42848096b25d455ebec9adfd6e493d8c9725bc2d49bbbae0a5375b359f91d9dad20ed109ffbc52469cd2cf5df7773f7a4c72ae167485315c326281efc400"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x20}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x3a8}}, 0x0) 2.612410622s ago: executing program 2 (id=2743): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b0000000000000000000017fcff035255f0fd00", @ANYRES32=0x0, @ANYBLOB="042d00"/20, @ANYRES32=r1, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) sendmsg$unix(0xffffffffffffffff, 0x0, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0e0000000400000004"], 0x48) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='sched\x00') write$P9_RGETLOCK(r2, 0x0, 0x24) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) 2.526942646s ago: executing program 3 (id=2744): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, 0x0, 0x0) 2.493692116s ago: executing program 4 (id=2745): r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000100), 0x2, 0x862b01) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read(r1, &(0x7f0000000080)=""/1, 0x1) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x1, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) r5 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804dd00000000000001090224000100000000090400400103000000092101000001220500090581030002"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00221200000083"], 0x0}, 0x0) syz_usb_ep_write(r5, 0x81, 0x1, &(0x7f0000000080)='P') read$FUSE(r1, &(0x7f0000000340)={0x2020}, 0x2020) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000040), 0x208e24b) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r6, 0x6628) bpf$PROG_LOAD(0x5, 0x0, 0x0) 2.385843067s ago: executing program 3 (id=2746): prctl$PR_SET_IO_FLUSHER(0x39, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e00000000000000ff"], 0x48) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e23, 0x997, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x40}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x68000000}, 0x4040010) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000100), 0x120) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000400)=""/102400, 0x19000) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f0000003200)={&(0x7f0000003040)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40040080}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_xfrm(0x10, 0x3, 0x6) 2.329031468s ago: executing program 5 (id=2747): bind$alg(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141102) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x80000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r4 = open(&(0x7f0000000040)='./file0\x00', 0x84242, 0x1df2a23c5997fad6) write$FUSE_CREATE_OPEN(r4, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x0, 0x5, 0x7, 0x3, 0xfffffffd, {0x400000080001, 0xfd, 0x20ff, 0x8, 0xe, 0xd615, 0x9, 0x3, 0xfffffffc, 0x6000, 0x0, 0x0, 0x0, 0x5, 0x7}}, {0x0, 0x13}}}, 0xa0) sendfile(r4, r4, &(0x7f0000000080), 0x7f03) syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000200)=ANY=[@ANYRES16=r0], 0x0) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) r5 = syz_usb_connect$uac1(0x1, 0xad, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011003000000086b1d010140000102030109029b0003010800fd0904000000010100000a240101001100020102072408040000040904010000010200000904010101010200000a240202030084000607072401097701000724010e0101000bb2020204004000062e7a0905010908000506060725010c0606000904020000010200000904020101010200000a240202d10f040007080724010bd201100905820910000207060725010c070200"], &(0x7f0000000300)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x310, 0x1, 0xb, 0x6, 0x0, 0x8}, 0x10, &(0x7f00000001c0)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0xc, 0x80, 0x7, 0xed, 0x1, 0x7}]}, 0x1, [{0xf9, &(0x7f0000000400)=@string={0xf9, 0x3, "7c601979368716bfff8c88edbb3fd1dd7776f20d5129c392724cfd97619d0fd327a6191e0d9c24f432fdc717e6bded39e95ea4a577adf91ff87795a0a051ab354f11594eb63a37d29c83a9da6ec6fc662668317f5be6ba10154b64247e74d74f1acabb25b3b7df34db620f00410891f242156e6a5bf3248f9bdf32cd34eed8aecf232bf37f0cd89309d98968cbe63be9355c55822e1a14c54dd0484cb58862103536d7627cb54436ecfdadc54412dda5f0dfab051c596810fb25e28c6f97ed71cad33a1615e56a88c46ab2174900db624ea7f5e9a1818c3d87477d71e5dab789526a98281137cf2b4fbc7f9a7f29641e3fe7c10928e9e8"}}]}) syz_usb_ep_write(r5, 0xfe, 0x97, &(0x7f0000000340)="6123ee449d7a3529741a796d02df576f37a6c25fb674b79ab3429d8fc79873ac4ab262737202bd74dc845198e934747257c23869667d330a4aead5a487845880d0c23782c7caab441dae53be0924a10f661598cadf51ee340a8a8417fb98f3b21fd75b54417447aaaa40c043c55ea1a48ec76969c2316837459fdadcf24a45c45fb6b8777597f0530e93491962c947b5853c76b190afca") syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 1.384364589s ago: executing program 3 (id=2748): socket$nl_route(0x10, 0x3, 0x0) r0 = fsopen(&(0x7f0000000080)='vfat\x00', 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) pipe(&(0x7f0000000040)) r5 = socket$inet6_udp(0xa, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6(0xa, 0x800000000000002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet6(r5, &(0x7f0000002180)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x3, @local, 0x3}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000000280)="cea8004d580cefc63f410a6d46f9431c8182c30108c6f1fb83d08513c14e9f3c8f862d84b66f4472bab3", 0x2a}, {&(0x7f0000000380)="615baee1da1f8807347acc3c53a0ac14478ab6ccbaf7e9bec260316b16039bc4b90e309d9f5a7bef097a56ed5bd256ef37e80ce3ac43dda56e0694de39af3f0d65b0227920bd4e6936aa0b517559ff10bce46c9e66c7d2f046b2b2bf607eec5549326659da070f6c3a5dd808427cef009ff22a029f389818b94d5abca8ea4895c8e429a1683e8fe5ee2a6e8684431d12e7e8f5e5de36045d32fefbbe227573114ac978fb2b686995fb095c48f61ff3f5289b9716b6d389", 0xb7}, {&(0x7f0000000500)}, {&(0x7f0000000580)="202cc177bd38206414975bffc5b19bb979ebe2182a79305541c58f27b49e008baff1cae76d35ed1ca962522d35a91a2728592cafceff6a2b121d0459932fc361a2edcfac71fb0514fdb1af808c917dfc9d2fbdee64f71e7313c26bcd7a2e437d3605b9e201466dda9a77", 0x6a}, {&(0x7f0000000600)="43eab1311c51d4a7645774e3415ebb70b484b02865956d8e761f25b97521f052bdd9a5b028301ef56486e356a3ab06b9562b73b259b2c9c3b9fc82f2ae99992e78f86b2bd7ba793ba82e12dfdf2e87a9bfb1f775d3006f827c23bfbabadcee7723bca291509dd44d968862f87128ffed577e58dc4bae175d068170ec2dac14b7df4eb57b7ede40f76aa4", 0x8a}], 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="3de1a332abcd6f884203e0b91400000000000000290000000b0000000000000200000000"], 0x18}}, {{&(0x7f0000000780)={0xa, 0x4e22, 0xf, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2}, 0x1c, &(0x7f00000019c0)=[{&(0x7f00000008c0)="43605472deae43baf57c45fef1d8844523f927ead695781f13b72545b4a9898ec8beaadce302641210e71c8de03a166dc6d7d6128a31ce1ddc92f74a035f56d86bece8988c703dc0da439ec4834230ceb220281beff44f01cca03b64ed53bbc6daaa33158329aab2842162038666c5d661398a9021", 0x75}, {&(0x7f0000000940)="c095a0f24696b99c14b914141a545c123dc8e17e79b20c702beb6c902f5abf6a039847dc374a3e3f9f0596818f13562f70890ab974facaa485f12af700a4ea19610ace09cbca7242b3afe378868dd9902bf59a1518906adefcbd489c10dce4ac7a82b23d736913d8339dab3a926add49fb7f0323386186ec15cb279738262c2d8c6f78691e36eacb0c807d6f89fb5e154b3b7e3f79162b3bd7020ca183f1904a4c8b57887f59fec0f6b4df8225cac157c1c4276265748e228f6bb6be217db2f190b8fd2cfcdffb6f3cae468c42849bef499e0ab48224c36a6fc6ecad4a2729b7acbc5cc93db49872934248dcb9f07ffef29788a999db6f65292cd769bf9e50d30bb1d13103f191d8f366931ec0e52c32798f4212ed4cabb64dc439a1a59851fa41fbb7467598261f3396b9e7bf73d8f56fbc7b4922a425d9b7d01c21c479c5884bc25db11ecb6eaee5e3ac9bac8555137ff6785d7feaf02cb8d5a035355f3389b95c14907a9e73c181a7c401f33c4f97062c4b76f770eb0686cc37d9b38ad50821b6f83fcc667366cc4453d156ea1ea1008cdefae641f5a486e86ff492469df065e910ccd5027924ad0001f9f902496c95fba3b58f01c9eaeea2c8976274803cd6a0041fcd0aebe3ff04c762bcafc33734907122aa70798189dfcac28e8687d0c8f4dd17f33c9907cbc339cb5c8de21e33f1bb4da1c1f9bb6bba2c1e71311092b517dc3c5322693823d309bb6c23b161ba283eb16b1a5e58afc9781d4f8e0208c470d94571432416a3365dc612e3582b3ee0bf3b89a666d8405bb1a8db0e74a495ab20699dde6a0083ebe6a04a6f2b49aaaec5e417e3a1d0e86f74ce653c1215a920e8bff4398705e5cce9bb8a927170529ada8e43870e9fadee38f45bb2a652304e0883c036b08a0b1d4dc6ec09ba46912b6f6d39960bf958f73c537641037faccf96aac55984a8546960f5826bd6c9e500ff285c40e076e2f59d12d6deaec3ef4839161ea2d9fd8799dd5a013fbd7cbbd9c43c8154f601ae279b0088e9dc50a6acf98f58953b8602074e53beed9bd30c4734572e1f78710ad865bdbcecd82eaa8b793aa69f82ef6f4a3d52e93389d156dd7a42b1e144f9a3da912a381e15411ab7543a9167899b06f656baa1eb7d4ca7cf255c6935ae94dd8fe3a7ee3b9a05e79aa9fcef2118fa1a89386b995a0c663b1d54b9440c43942d5b54a53e9b4237fb7bdfc9d5a9bb94367b8d34b4916e8ca5eb32d60b9ff0d5c91f6e8e53db8cb36b0ae1502669a7413666d5f76834a8160fab972b27e60f675b283f123fb1910608efdc8d39a845f0dd0592e9d9cc548376252c1595b5853c7ef49e9654b5f59025fa9179c6d002621da6f7904e2676b5f03abe30870aa860cabe7290e5d747de32b41990a3f5bac24601f8f2eaa78adddc85a6e0d14e39c16e71fbe0995bde01bc1c130959a84325720cd25ebf05596d2a4d41083b708a709237e19fc66a6f5f725bfc474c9cc443fd6b3c4edafb5649d18bdafeaa0ae8137ad0b8e54129bc464184e61998033d7a58165a4035d05acef7a2e74abee9dd83b547a8aa9ca9edc27e185aa7dcae4467673616c0c9f0fcfd5f392c4be334016b5eae99ddc3b79a33fd7e30a41930b5930b27e58072ac06cb932b456af78d42e89de80fb105dcd83ec12f14340a92e6925241c88a826afb3bb4ced4f470db782d6051d4f725ece1fda35ee4214f1cba6a0967b02928c626472a0088d401d56faf50559b5343f579a603f9bd7f673794b47d17845e99a01dd909a2225227aeee13ba82556e33ee2636ac722f6c3956f78e2bcf677e4b7024c302bb446f4a391e251b0f1fa83d6dc948b663645fab146d11096f92e2de84e62b3937977d9b439e726b996bc537b64bfcf6cb1b3393e691eb1ac82476d2dcfdc88d75dc153810744752bdd3162d0dff055971dc8eea40d84ccef29a91dd257b449ff85b0b8920a8e842f9614fdfdf3116b5b374beb26dcf0861b4693bc84003420222da9adac8c49223efcfd4bc0cb1ed653c27348c10875d71d653a80b1243145c16e959414e2713eea6e60725c5a1f7b79498aa9d2c6faea9ee868889937886e9d634f0c03ff1848a78f50304b57991520c50ae3ea817a516264d0387eb0b88519a25e565769ef0dcbd2ac3102ba626c8e62f5bfa6c9ecb194c6b2f3a88729c5bd988c421be927583ca65bc3341014abe93350b3f4c9b3ccc129f6eceb322ba837594eb69547538d07c0077ba256219df52c83a725606e474638b566cc29328829cabec81cda8ff5d16a8bed2b0deb9e4a17e35bd7c36e654251c921c867b29529a7a18ff74b16b84b09161fb4d85ed9f9b40a8a84e64a6537e483b4b352903a28fb21fc99b804ad81a99aa64848744c6e93b739d17421ca97d2f04a417daa8904d87e61e69933da51980ef51f9d4c22db6bec50886b58e4a0567b0f821c20030e3e07cde9f98ce5c42cb493f24c675051a7a4e2176d2fcac70f867af0a800dbd9776483c8090b48e25d752e05f2acdb866cf2f784b09f031a547ad2e0c675bf59cdaa036729aff1ded44911b1c8615fb40fad7e1dc299cdc33f38d8259892c4a476736e1affcec926765e263475926b341f4fb22fe08f35054db9a17d7ff6cbb02a4efe96169c067c9d2bf4593f9409bb208e442795cd3cfc494f42ff774e0752911c96fdba252f573cd5900e6cf328cb7fa252d6c86bbdb16936fe5e278be253619dbec47c1cf3fbe4480f297321fcebdc246055a869b12fd916c87614c15b9a2fe7484125f95da7d945c12a41c34196ddb7127f6b6622f3fab5d15cd3d73bb89c248e6b06ef788ab54478f293878b4a5a292e9aea7f982c67e938a4366c997e0b45416e609f5eb7b44b57460f8e549e5cc0358c3dd028be1cee364247486e4a1c0107d9f5ef79718ad6c72cf031eef8d4778cda62044eda375cd2493a36fec3031bb16d261b314d236f742fcebdb389bf5a5def8551313df6bedce6ecfabc0d8275971c0eee5b07a18ebc6befec753ea5d9f5c872c820dd3f80d47b730551a23772aa3d5eedf9d3481c73630413374ab3450160b176f6495e19c0c23a053a721a2637aa2a45637db8e4d9548fb5810ed718c31f22b3533cb15b14286bfb5bb7aaa4414ad59e3b1bbbb631d661b30b638d8bbf1baf9b3baf610b1e38ecd6fce9385dae6d8623a12c1a1a6aa9abadc0ffb316b964b56c176d0e79f7db82dda0767c46b2d6af880131c70e21711882db3d353526b5902b2731b80e8cc4e098832d1cbea6cec01831b0bd120dd39e6a23ca266c897332ea8fdffc9a58e35d03402d00a251765747d87b8edb5f2eb08a889667e5231e9cf0d230d3ae601c20aa872afe332266fade338eb314b4df83c87128f07a0a57bb1208bf72746f82d19f3642d8b9412f6874a7051641329cdcd2c9514fb5807cd72cb1291c20421bf5c8b7adce2150013f7a9d7ca7845e3664954949b1cc5628295f4ab1275a62594b5b65ab5dc5aed9bb392fe058b5a443bc65a67c45fecbe708128a845b0ea5b91479159c7024796940def2688501098b3c05a26c9b9b3476c943d51a53187892359e01329d61eb2571a9680ba51da36afd8fc97caadcac5b4050b7da488f844632642d0b148d764caeedd2f0877938de98323f50e42f3e1224e30c3c669e7ed1aaca12bffea4d78052bb754514658cfc7ad85d9a462f3d4bf5ef743054b78f858b5a0883ebb95383bdfbb8968c3ae46faa8538d3fb23bf5047138c507cf966fc17f2029d2a0853f0472483938649a16fb4c0981aba5583a323a74eee61f88a7cd3db95cc6cf122b6881869e498804000d9a94277082c10e55260b8842b746b4b3110a2cbcf58e865168466fc3fe3b64235c08a1b75538e21a1ec066f712d2117591e17edeef03c2ac4f1e5d290de61a9cc4bb3d8e181952ae03718408245d343906677bc92d3356ecc3cb18dff3c6d0847b6acd85b50810de8d4e62956b9361f6649476410fc1771f98b6c73908a55e6094dc7aa86d39925e7ea9d43fb95b215a5851b77be929cc435d60f2646d1481a8f7bb9c5d6b8198cfc7a1883cf1c311fca2b5ec9d0f905ecd407214b4e7638980856874dc9027ee3bed52d6095090fd5082db2459291e27f6878d449627accf5663bcc2909a37b86ead704802def3cfe62f4ed98cd1bdbeafb0c12cdc9b1174b076c61fdb1901fcfa76a594d82f8ac70bb50d430aa2a830bb395ff6ba8e043ff03b239a345c9a093772f43e970af7697e17c1362d4b672f69658e11ca0a3ca0dea126f57a36f6d0347862af1f2d2ea677283e971fa4182c4a57da3cfc4d08c37e8d9b03978e8fb6ece16ede8e86185b853bd51faae0a2a4c4718c54edf0b0cf2851cc58d62ecd32f94841fb78236337a6f1eea47df004ce9f4da4312450520ee2b57f1a702e31966081ae0623ebf637db880ae4737b1dd9b366475cd9162873eaf939809968d44563d9bd179dad2cc6b0c3551abdb3f5f2dd181d5a4e9ddd79807377ea674c0b4175274a53ad7d15c67cf78fbbaddd133de42501c18e5baebb7d6c09f23c80a67c1ca7f4c6785494692951ff04db70513cdbb5ff0d57877684705f434cf54698aca1f4fe66c651fec6be1064f53bb99b9f7c80ab2da23221f3b587996ddc85869a6ade53743153b20add98feedc58c625f51bb16ac38242e3c400b4fae19e0b36e5256e01cf44301bbd589b957f82614e11f325132ddcaeb3bb88edd8d74e2c2bdc384d78366c002266109cfaa47d9f17a8118a56a095e3e00fc612e7dbc9643b2d111d2ac5682858b154a304848a3841e592c9a8ef9eabb7bb345568f9a7c8cfb6601c8ddc86d771ed87e707b905bdff4dd19a0f61f430c8c5b8c3dfd87f746537086ed5d14a9be38d2d22af2d491184f9fd61aafc1c2ffbdbe3894ec262f75e20485ad3eb2526dab5d3358a702ccde73bc8fbba8aedbdd15ef92c5db95025f8d2a2e8b095ee885c6074b849c76146d8e342f38948e7220542a7ad3f59072720a4cecc8ad0b960108220361253f9943354a2b0b2f1042c76280a4b7d906c7895cd5f650efdcc3ec39f14e4f5951c2106ea7b14d9aabf982f1f7f923edb3932f4c531370e93dd534695379c40ad9dc122c225196a18ea361e1c787fe4ae13eaa26f2e4c7c5983805b5283bf94e21d4c38d09ab4ecffa5e460418b04dc8d7d75a7000c80a2815114641b68865006f3d20506df255b6ce783d9f6fa4d646aa5d8dd83c1e15181a837ab27e4931bbee8bc5e6a115b812ae66b7a1ed52ed9b21052778d04ddd3e9bb8f9da46c81d0767440929484ce28755dac557a497b3f10fd711414c7aa65856dba28dd844ac828f8af43da64889d9a63c61063a7e36ebe98256e3b67e83e612a3399d4bb93681d3a3b0562f4dad5708ba517f742cf69da5e51660dc3ef28483a5acf1b37fa9934a58046412d504a87652475c99359b459fe96eb263a51813eca9bf41025cef5ea74f32abcdfe41131b5ec8e9f1ede6a1905f767c0b76c6c7f440ad3f79c675c4d6439dfbe1099100e9c77445c177ea132ed44215e4e9c84212fb1a1b8dd10746eeecb879a351fbe8f3004dfed09315dae332fae3d54476bc77d09e9ea83f4f1e209cd80ff0e1891e7758837714adc6ed52313d96f773c20e9434f1cceb1e9b353fa52481a46adcd7295734ac209c58b783f4406f2a112aaaf4cdf99dd51412434defcbef5aed71c69b6268fe1a16423379d6de64c493a59e83657434d865710a7d01d1f5bad12e44a81161f7d5dfa5", 0x1000}, {&(0x7f0000001940)="86b4dcdd8b60a97565afb2ccd3f96a8359d3ef97e7a16061ba9b83785b3e95aae62e939edf6290fb194ea81dd1125a0d78a2e19b3aa6850dfde9bbd5517fd11a597e9895ac4caa1d66", 0x49}], 0x3}}, {{&(0x7f0000001a00)={0xa, 0x4e20, 0x2, @remote, 0x7}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000001b40)="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", 0xfc}, {&(0x7f0000001a40)}, {&(0x7f0000000440)="90ddf4fcfca2b44979ce111520c3c983c25d66b0f6e335240e4dac36f1816d201450f9673873731640a35ea8919b42dfa6fb40435b21e8be65f6f3f34f6a33df243ecb238f61e508f0acdaf84d86d05c918fe0fb422dfa703429212635aa8e4dd7419d44402da42bc589c34e949d667c", 0x70}], 0x3, &(0x7f0000001c80)=[@dontfrag={{0x14, 0x29, 0x3e, 0x5}}, @dontfrag={{0x14}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x87, 0x2, 0x1, 0x0, 0x0, [@ipv4={'\x00', '\xff\xff', @multicast1}]}}}], 0x58}}, {{&(0x7f0000001d00)={0xa, 0x4e23, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, 0x1c, &(0x7f0000002040)=[{&(0x7f0000001d40)="198139d33e97e73cfb5bcc17f7c0156db9d6ccf27c66eb3256dff5d8f56901eff2d4b67ec4eaa5980b769c3f5bf498d2a0cdb07e55ae5bd9e5fd1c3a16765a0cbc85d7de9c187929f5bd31c227461b45de7290b9e6f9f378403790f7fb39204417f936f7f814c001842c699409d94f5871ce9e1159a7b91c8492e2e19e0e468e8c1ca9238d8a1b9d4e4e79164be69aa479909a4ba5a2b6cc49557b5322b57d276728c570bf36f376ada0b9d1f92b3706e9430f19a6cb4b5477720f56efc2df78370ccb39e205f875f1b564cdafd7010b72bafa25b9fd7ac93361caf595e27c473574c9aef85d6c2d27b9c028d660", 0xee}, {&(0x7f0000001e80)="a862f2ec59a8886c22cd0fd888e39f5a8ec23655edb41b624ff5453dea891fb7ec8784c8b6b0b13bb2889985cd863567fd395aa87fd218269abfc094061086034968bf9edd6ff40516dbc0b76843344a8843e7c59fb8b8b223aa30a35691299137210cbf19632b20a3b2bcc29bdd58bab50063c37522828caf7f0a86dd09ad3ff3cfec09cdb76625039015229bcff163dc8d95607f6559e8ec4f5a3145e019f570c5d0538e101f1730712f", 0xab}, {&(0x7f0000001f80)="85c69efe847356c540b73dd02867512ec59a0b8446e6", 0x16}, {&(0x7f0000001fc0)="e53b061ccc58e1ef767d40a78bd1d1245251983f53b14e1e978e785f7f72c1fa97f3e75b5fd5f016ee8648760cf455784ca846dc1ade091ca58be1743d3bc8e5e69a202eeb4a", 0x46}], 0x4, &(0x7f00000020c0)=ANY=[@ANYBLOB="1400000000000000290000000800000001ad890000000000480000000000000029000000040000000405000000000000c910fe8000000000000000000000000000bbc204000000010710000000010200bb0c0e00000000000000000000000000480000000000000029000000390000000c06000600000000fc010000000000000000000000000001fe8000000000000000000000000000bbfe8000000000000000000000000000bb"], 0xa8}}], 0x4, 0x4000040) ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000340)=0x1) fsmount(r0, 0x0, 0xa) 1.250404804s ago: executing program 2 (id=2749): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x2c, r1, 0x5, 0x0, 0x3f, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @crypto_settings=[@NL80211_ATTR_AKM_SUITES={0x4}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000000) 1.016482845s ago: executing program 2 (id=2750): socket$nl_route(0x10, 0x3, 0x0) (async) syz_open_dev$sndpcmc(0x0, 0x1, 0x800) bpf$ITER_CREATE(0x21, 0x0, 0x0) (async) epoll_create1(0x0) (async) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, 0x0, 0x0, 0x60004) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x8031, 0xffffffffffffffff, 0x3000) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async) r4 = io_uring_setup(0x1ddd, &(0x7f0000000440)={0x0, 0x40000000, 0x1000, 0x3, 0x8}) io_uring_register$IORING_REGISTER_PBUF_RING(r4, 0x16, &(0x7f0000000740)={&(0x7f0000001000)={[{0x0}]}, 0x1}, 0x1) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_NEIGHBORS(r5, 0x0, 0x0) (async) io_uring_register$IORING_UNREGISTER_PBUF_RING(r4, 0x17, &(0x7f0000000300)={0x0}, 0x1) (async) socket(0x2, 0x80805, 0x0) (async) sendmsg$unix(0xffffffffffffffff, 0x0, 0xc800) (async) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x1, 0x0) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000002500090122bd7008f9ffffff0200000008003f80000000000800030047"], 0x2c}, 0x1, 0x0, 0x0, 0x4000001}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r6 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) 1.008456892s ago: executing program 0 (id=2751): syz_usb_connect$midi(0x5, 0x40, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) r3 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000380)={0x1d, r4, 0x1, {0x0, 0x0, 0x1}, 0xfd}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x1, 0x6000000, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x8}, {0x7, 0xf}, {0xffff, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x44060}, 0x98) 879.090234ms ago: executing program 2 (id=2752): openat$cuse(0xffffffffffffff9c, &(0x7f0000001f80), 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x4, 0xe4}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000140), 0x1400, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9007}, 0x4) socket$packet(0x11, 0x3, 0x300) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) pselect6(0x40, &(0x7f00000002c0)={0x0, 0x0, 0x3, 0x3, 0x0, 0x80, 0x4, 0x4}, 0x0, &(0x7f00000000c0)={0x3ff, 0x0, 0x7fff, 0x9, 0x0, 0x204, 0x7fffffff}, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) sendto(0xffffffffffffffff, 0x0, 0x0, 0x800, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) 168.325853ms ago: executing program 0 (id=2753): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000780)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000002294eb630008000300", @ANYRES32=r2, @ANYBLOB="04005b"], 0x20}}, 0x0) r3 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x2ffe, 0x2) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x400880, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) personality(0xfe47fef9f5ff7379) ppoll(0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{0x0}], 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="18000000407df04536bd7000fedb7c000004000812c997a06de226f2ac7b5a54b3bf0fddacad7af903fb278c34acb9371b89e4e052e02b00"], 0x18}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) syz_open_dev$dvb_dvr(&(0x7f00000000c0), 0x101, 0x40) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, 0x0, 0xc000) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYRES64, @ANYRES32, @ANYBLOB], 0x50) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000000)=0x1) 0s ago: executing program 0 (id=2754): socket$nl_generic(0x10, 0x3, 0x10) r0 = userfaultfd(0x80801) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000180)={0x0, "f1ffffffffff63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee04200"}) epoll_create1(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000740), 0xffffffffffffffff) io_setup(0x4, 0x0) io_submit(0x0, 0x0, 0x0) socket$kcm(0x2d, 0x2, 0x0) r6 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000000340)={r6}) bind$xdp(0xffffffffffffffff, 0x0, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(r5, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): } for pid=15352 comm="syz.4.2506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 760.761270][ T29] audit: type=1400 audit(2000000614.317:18417): avc: denied { write } for pid=15352 comm="syz.4.2506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 760.797490][ T29] audit: type=1400 audit(2000000614.437:18418): avc: denied { recv } for pid=5657 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.1.78 dest=59398 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 762.210900][T15379] netlink: 'syz.3.2514': attribute type 1 has an invalid length. [ 762.447760][T15385] /dev/nullb0: Can't lookup blockdev [ 763.609699][ T5792] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 763.670808][ T5792] hid-generic 0000:0000:0000.0022: hidraw0: HID v0.00 Device [syz1] on syz0 [ 763.683345][T15413] fuse: Invalid rootmode [ 763.883974][ T5713] usb 6-1: new high-speed USB device number 92 using dummy_hcd [ 764.046290][ T5713] usb 6-1: config 0 has no interfaces? [ 764.058387][ T5713] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 764.069550][ T5713] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 764.079641][ T5713] usb 6-1: SerialNumber: syz [ 764.108393][ T5713] usb 6-1: config 0 descriptor?? [ 764.399993][ T5744] usb 6-1: USB disconnect, device number 92 [ 764.424552][T15423] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2525'. [ 765.404805][ T29] kauditd_printk_skb: 235 callbacks suppressed [ 765.404825][ T29] audit: type=1400 audit(2000000619.197:18654): avc: denied { recv } for pid=1341 comm="kworker/u8:9" saddr=10.128.0.169 src=30006 daddr=10.128.1.78 dest=59398 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 765.581767][ T29] audit: type=1400 audit(2000000619.357:18655): avc: denied { read write } for pid=9640 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 765.629088][ T29] audit: type=1400 audit(2000000619.357:18656): avc: denied { open } for pid=9640 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 765.729890][ T29] audit: type=1400 audit(2000000619.357:18657): avc: denied { ioctl } for pid=9640 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 765.798664][ T29] audit: type=1400 audit(2000000619.397:18658): avc: denied { recv } for pid=6418 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.1.78 dest=59398 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 765.864581][ T29] audit: type=1400 audit(2000000619.457:18659): avc: denied { create } for pid=15434 comm="syz.5.2529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 765.953963][ T29] audit: type=1400 audit(2000000619.487:18660): avc: denied { read } for pid=15434 comm="syz.5.2529" dev="nsfs" ino=4026533223 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 765.964155][ T5713] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 766.003603][ T29] audit: type=1400 audit(2000000619.487:18661): avc: denied { open } for pid=15434 comm="syz.5.2529" path="net:[4026533223]" dev="nsfs" ino=4026533223 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 766.029908][ T29] audit: type=1400 audit(2000000619.487:18662): avc: denied { create } for pid=15434 comm="syz.5.2529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 766.052171][ T29] audit: type=1400 audit(2000000619.507:18663): avc: denied { bind } for pid=15434 comm="syz.5.2529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 766.113955][ T5713] usb 3-1: device descriptor read/64, error -71 [ 766.504187][ T5744] usb 4-1: new full-speed USB device number 118 using dummy_hcd [ 766.574034][ T5713] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 766.581797][ T5792] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 766.688460][ T5744] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 766.699281][ T5744] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 766.710441][ T5744] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 766.719936][ T5744] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 766.733654][ T5744] usb 4-1: config 0 descriptor?? [ 766.744050][ T5713] usb 3-1: device descriptor read/64, error -71 [ 766.749592][ T5744] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 766.750356][ T5792] usb 5-1: device descriptor read/64, error -71 [ 766.765501][ T5744] dvb-usb: bulk message failed: -22 (3/0) [ 766.811147][ T5744] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 766.840783][ T5744] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 766.853966][ T5744] usb 4-1: media controller created [ 766.865054][ T5744] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 766.885163][ T5713] usb usb3-port1: attempt power cycle [ 766.899998][ T5744] dvb-usb: bulk message failed: -22 (6/0) [ 766.927803][ T5744] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 766.943191][ T5744] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input66 [ 767.001263][T15453] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 767.009854][T15453] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 767.034742][ T5744] dvb-usb: schedule remote query interval to 150 msecs. [ 767.042320][ T5744] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 767.076572][ T5792] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 767.125027][ T5793] usb 4-1: USB disconnect, device number 118 [ 767.162062][ T5793] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 767.233921][ T5792] usb 5-1: device descriptor read/64, error -71 [ 767.283994][ T5713] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 767.304583][ T5713] usb 3-1: device descriptor read/8, error -71 [ 767.344395][ T5792] usb usb5-port1: attempt power cycle [ 767.983944][ T5792] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 767.994075][ T5713] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 768.024802][ T5713] usb 3-1: device descriptor read/8, error -71 [ 768.155292][ T5713] usb usb3-port1: unable to enumerate USB device [ 768.184039][T15474] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2538'. [ 768.216314][ T5792] usb 5-1: device not accepting address 121, error -71 [ 768.534087][ T5713] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 768.770519][T15480] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 769.213865][ T5713] usb 4-1: Using ep0 maxpacket: 16 [ 769.236834][ T5713] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 769.245964][ T5713] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 769.256123][ T5713] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 769.269512][ T5713] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 769.281638][ T5713] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 769.289697][ T5713] usb 4-1: Product: syz [ 769.294096][ T5713] usb 4-1: Manufacturer: syz [ 769.309226][ T5713] usb 4-1: SerialNumber: syz [ 769.346274][ T5713] usb 4-1: 0:2 : does not exist [ 769.419917][T11035] tipc: Disabling bearer [ 769.576494][ T9] usb 4-1: USB disconnect, device number 119 [ 769.620251][ T5611] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 769.631667][ T5611] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 769.772647][ T7372] udevd[7372]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 769.789416][ T5611] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 769.800040][ T5611] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 769.821432][ T5611] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 769.933164][ T5614] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 769.940879][ T5614] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 769.948682][ T5614] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 769.960403][ T5614] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 769.969135][ T5614] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 770.567791][ T29] kauditd_printk_skb: 292 callbacks suppressed [ 770.567804][ T29] audit: type=1400 audit(2000000624.387:18956): avc: denied { recv } for pid=5654 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.1.78 dest=59398 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 770.717081][ T29] audit: type=1400 audit(2000000624.417:18957): avc: denied { recv } for pid=29 comm="kauditd" saddr=10.128.0.169 src=30006 daddr=10.128.1.78 dest=59398 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 770.778626][ T29] audit: type=1400 audit(2000000624.427:18958): avc: denied { read write } for pid=5654 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 770.827948][ T29] audit: type=1400 audit(2000000624.427:18959): avc: denied { open } for pid=5654 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 770.882255][ T29] audit: type=1400 audit(2000000624.427:18960): avc: denied { ioctl } for pid=5654 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 770.938569][ T29] audit: type=1400 audit(2000000624.457:18961): avc: denied { sys_module } for pid=15494 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 770.999760][ T29] audit: type=1400 audit(2000000624.457:18962): avc: denied { module_request } for pid=15494 comm="syz-executor" kmod="nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 771.021467][ T9] usb 5-1: new full-speed USB device number 123 using dummy_hcd [ 771.038646][ T29] audit: type=1400 audit(2000000624.587:18963): avc: denied { read write } for pid=15510 comm="syz.4.2549" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 771.083887][ T29] audit: type=1400 audit(2000000624.587:18964): avc: denied { open } for pid=15510 comm="syz.4.2549" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 771.120586][ T29] audit: type=1400 audit(2000000624.587:18965): avc: denied { ioctl } for pid=15510 comm="syz.4.2549" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 771.189928][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 771.200861][ T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 771.221134][ T9] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 771.283328][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 771.342577][ T9] usb 5-1: config 0 descriptor?? [ 771.355734][ T9] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 771.388140][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 771.439160][ T9] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 771.456499][ T9] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 771.463867][ T9] usb 5-1: media controller created [ 771.472151][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 771.494360][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 771.509739][ T9] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 771.527657][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input67 [ 771.575939][ T9] dvb-usb: schedule remote query interval to 150 msecs. [ 771.588025][ T9] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 771.744920][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 771.769774][ T9] dvb-usb: error while querying for an remote control event. [ 771.995046][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 772.016545][T15519] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 772.030421][ T9] dvb-usb: error while querying for an remote control event. [ 772.040218][ T5614] Bluetooth: hci5: command tx timeout [ 772.085684][T15522] netlink: 'syz.2.2550': attribute type 2 has an invalid length. [ 772.104066][T15519] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 772.161572][T15522] netlink: 92 bytes leftover after parsing attributes in process `syz.2.2550'. [ 772.213994][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 772.220658][ T9] dvb-usb: error while querying for an remote control event. [ 772.509098][T15524] netlink: 280 bytes leftover after parsing attributes in process `syz.5.2551'. [ 772.586263][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 772.633757][ T9] dvb-usb: error while querying for an remote control event. [ 772.696702][ T1335] bridge_slave_1: left allmulticast mode [ 772.711363][ T1335] bridge_slave_1: left promiscuous mode [ 772.735495][ T1335] bridge0: port 2(bridge_slave_1) entered disabled state [ 772.775415][ T1335] bridge_slave_0: left allmulticast mode [ 772.808228][ T1335] bridge_slave_0: left promiscuous mode [ 772.833992][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 772.840799][ T9] dvb-usb: error while querying for an remote control event. [ 772.856064][ T1335] bridge0: port 1(bridge_slave_0) entered disabled state [ 773.005072][ T805] dvb-usb: bulk message failed: -22 (1/0) [ 773.019478][ T805] dvb-usb: error while querying for an remote control event. [ 773.035359][T15550] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 773.048385][T15550] vimc vimc.0: first entity in the pipe 'Scaler' is not a source [ 773.184182][ T9] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 773.215032][ T5734] dvb-usb: bulk message failed: -22 (1/0) [ 773.220834][ T5734] dvb-usb: error while querying for an remote control event. [ 773.373889][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 773.389551][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 773.411187][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 773.421387][ T5734] dvb-usb: bulk message failed: -22 (1/0) [ 773.431540][ T5734] dvb-usb: error while querying for an remote control event. [ 773.440086][ T9] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 773.449934][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 773.485457][ T9] usb 3-1: config 0 descriptor?? [ 773.510044][ T5793] usb 5-1: USB disconnect, device number 123 [ 773.557670][ T5793] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 773.839559][ T1335] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 773.849000][ T1335] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 773.858264][ T1335] .` (unregistering): Released all slaves [ 773.889354][ T5275] 8021q: adding VLAN 0 to HW filter on device eth5 [ 773.921005][T15494] bridge0: port 1(bridge_slave_0) entered blocking state [ 773.940634][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 773.952448][T15494] bridge0: port 1(bridge_slave_0) entered disabled state [ 773.965308][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 773.973259][T15494] bridge_slave_0: entered allmulticast mode [ 773.984399][ T9] usb 3-1: USB disconnect, device number 123 [ 773.999067][T15494] bridge_slave_0: entered promiscuous mode [ 774.010225][T15494] bridge0: port 2(bridge_slave_1) entered blocking state [ 774.034110][T15561] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15561 comm=syz.5.2555 [ 774.047959][T15494] bridge0: port 2(bridge_slave_1) entered disabled state [ 774.057119][T15494] bridge_slave_1: entered allmulticast mode [ 774.063977][T15494] bridge_slave_1: entered promiscuous mode [ 774.074418][ T1335] : left promiscuous mode [ 774.124669][ T5614] Bluetooth: hci5: command tx timeout [ 774.551204][T15494] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 774.563086][T15494] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 774.707077][ T1335] tipc: Left network mode [ 774.720954][T15494] team0: Port device team_slave_0 added [ 774.794962][T15494] team0: Port device team_slave_1 added [ 774.921135][T15494] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 774.941621][T15494] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 774.976459][T15494] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 774.989897][T15494] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 774.999929][T15494] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 775.061783][T15494] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 775.386970][ T1335] hsr_slave_0: left promiscuous mode [ 775.651205][ T29] kauditd_printk_skb: 471 callbacks suppressed [ 775.651237][ T29] audit: type=1400 audit(2000000629.467:19437): avc: denied { ioctl } for pid=15590 comm="syz.5.2562" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 775.787891][ T1335] hsr_slave_1: left promiscuous mode [ 775.834428][ T5792] usb 6-1: new high-speed USB device number 93 using dummy_hcd [ 775.912302][ T1335] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 775.958280][ T1335] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 775.997651][ T29] audit: type=1400 audit(2000000629.597:19439): avc: denied { ioctl } for pid=15590 comm="syz.5.2562" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 776.063934][ T29] audit: type=1400 audit(2000000629.587:19438): avc: denied { read write } for pid=5654 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 776.118308][ T5792] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 776.147191][ T29] audit: type=1400 audit(2000000629.617:19440): avc: denied { read write open } for pid=5654 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 776.174091][ T5792] usb 6-1: config 0 interface 0 has no altsetting 0 [ 776.187667][ T5792] usb 6-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 776.203966][ T5614] Bluetooth: hci5: command tx timeout [ 776.206913][ T5792] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 776.219971][ T29] audit: type=1400 audit(2000000629.617:19441): avc: denied { ioctl } for pid=5654 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 776.364642][ T5792] usb 6-1: config 0 descriptor?? [ 776.423888][ T29] audit: type=1400 audit(2000000629.747:19442): avc: denied { recv } for pid=5597 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.1.78 dest=59398 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 776.474802][ T29] audit: type=1400 audit(2000000629.757:19443): avc: denied { recv } for pid=5597 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.1.78 dest=59398 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 776.547103][ T29] audit: type=1400 audit(2000000629.757:19444): avc: denied { recv } for pid=5597 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.1.78 dest=59398 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 776.601844][ T29] audit: type=1400 audit(2000000629.757:19445): avc: denied { recv } for pid=15568 comm="syz.3.2559" saddr=10.128.0.169 src=30006 daddr=10.128.1.78 dest=59398 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 776.635919][ T29] audit: type=1400 audit(2000000629.757:19446): avc: denied { ioctl } for pid=15590 comm="syz.5.2562" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 776.699721][ T1335] team0 (unregistering): Port device team_slave_1 removed [ 776.734893][ T1335] team0 (unregistering): Port device team_slave_0 removed [ 776.981585][T15494] hsr_slave_0: entered promiscuous mode [ 776.988411][T15494] hsr_slave_1: entered promiscuous mode [ 776.996759][T15494] debugfs: 'hsr0' already exists in 'hsr' [ 777.006222][T15494] Cannot create hsr debugfs directory [ 777.012945][ T5275] 8021q: adding VLAN 0 to HW filter on device eth6 [ 777.084683][T15611] kernel profiling enabled (shift: 9) [ 777.144076][ T5744] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 777.203902][ T9] usb 3-1: new full-speed USB device number 124 using dummy_hcd [ 777.308047][ T5744] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 777.347567][ T5744] usb 4-1: config 0 interface 0 has no altsetting 0 [ 777.383271][ T5744] usb 4-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 777.400963][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 777.417972][ T5744] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 777.427758][ T1335] IPVS: stop unused estimator thread 0... [ 777.440634][ T9] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 777.462386][ T5744] usb 4-1: config 0 descriptor?? [ 777.475425][ T9] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 777.494400][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 777.538806][ T9] usb 3-1: config 0 descriptor?? [ 777.589670][ T9] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 777.597194][ T5734] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 777.614923][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 777.631471][ T9] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 777.661038][ T9] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 777.686752][ T9] usb 3-1: media controller created [ 777.708940][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 777.752636][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 777.774726][ T9] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 777.792404][ T5734] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 777.812077][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input68 [ 777.829534][ T5734] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 777.873786][ T9] dvb-usb: schedule remote query interval to 150 msecs. [ 777.906606][ T5734] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 777.927443][ T9] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 777.937218][ T5734] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 777.959714][ T5734] usb 5-1: Manufacturer: syz [ 778.004386][ T5734] usb 5-1: config 0 descriptor?? [ 778.084080][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 778.103373][ T9] dvb-usb: error while querying for an remote control event. [ 778.166859][T15625] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 778.205178][T15625] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 778.254343][ T9] hid-generic 0006:0008:0001.0023: unknown main item tag 0x0 [ 778.275190][ T5614] Bluetooth: hci5: command tx timeout [ 778.287101][ T9] hid-generic 0006:0008:0001.0023: unknown main item tag 0x0 [ 778.294847][ T805] dvb-usb: bulk message failed: -22 (1/0) [ 778.300818][ T805] dvb-usb: error while querying for an remote control event. [ 778.315054][ T9] hid-generic 0006:0008:0001.0023: unknown main item tag 0x0 [ 778.329552][ T9] hid-generic 0006:0008:0001.0023: unknown main item tag 0x0 [ 778.338202][ T9] hid-generic 0006:0008:0001.0023: unknown main item tag 0x0 [ 778.346075][ T9] hid-generic 0006:0008:0001.0023: unknown main item tag 0x0 [ 778.353718][ T9] hid-generic 0006:0008:0001.0023: unknown main item tag 0x0 [ 778.363039][ T9] hid-generic 0006:0008:0001.0023: unknown main item tag 0x0 [ 778.399742][ T9] hid-generic 0006:0008:0001.0023: unknown main item tag 0x0 [ 778.407301][ T5792] usbhid 6-1:0.0: can't add hid device: -71 [ 778.407387][ T5792] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 778.484124][ T5699] dvb-usb: bulk message failed: -22 (1/0) [ 778.491273][ T5699] dvb-usb: error while querying for an remote control event. [ 778.511784][ T5792] usb 6-1: USB disconnect, device number 93 [ 778.535183][ T9] hid-generic 0006:0008:0001.0023: unknown main item tag 0x0 [ 778.586441][ T9] hid-generic 0006:0008:0001.0023: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 778.697296][ T5734] usbhid 5-1:0.0: can't add hid device: -71 [ 778.706438][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 778.732108][ T5734] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 778.746044][ T9] dvb-usb: error while querying for an remote control event. [ 778.796881][ T5734] usb 5-1: USB disconnect, device number 124 [ 778.911528][T15636] fido_id[15636]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 778.934782][ T5699] dvb-usb: bulk message failed: -22 (1/0) [ 778.972575][ T5699] dvb-usb: error while querying for an remote control event. [ 779.113949][ T9] usb 6-1: new high-speed USB device number 94 using dummy_hcd [ 779.164364][ T5734] dvb-usb: bulk message failed: -22 (1/0) [ 779.173288][ T5734] dvb-usb: error while querying for an remote control event. [ 779.284034][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 779.305006][ T9] usb 6-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 779.333104][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 779.354504][ T5734] dvb-usb: bulk message failed: -22 (1/0) [ 779.367363][ T5734] dvb-usb: error while querying for an remote control event. [ 779.384953][ T9] usb 6-1: config 0 descriptor?? [ 779.420527][T15494] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 779.427651][ T9] as10x_usb: device has been detected [ 779.457383][ T9] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 779.457775][T15494] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 779.563927][ T5734] dvb-usb: bulk message failed: -22 (1/0) [ 779.593297][ T5734] dvb-usb: error while querying for an remote control event. [ 779.600708][T15494] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 779.626818][ T9] usb 6-1: DVB: registering adapter 4 frontend 0 (nBox DVB-T Dongle)... [ 780.126196][ T5744] usbhid 4-1:0.0: can't add hid device: -71 [ 780.134526][ T5744] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 780.174375][T15494] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 780.182086][ T5744] usb 4-1: USB disconnect, device number 120 [ 780.205731][T15494] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 780.259203][T15494] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 780.285057][ T5699] dvb-usb: bulk message failed: -22 (1/0) [ 780.302115][ T5699] dvb-usb: error while querying for an remote control event. [ 780.313079][T15494] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 780.326047][ T9] as10x_usb: error during firmware upload part1 [ 780.337017][ T9] Registered device nBox DVB-T Dongle [ 780.430304][T15494] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 780.493970][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 780.642038][ T9] dvb-usb: error while querying for an remote control event. [ 780.706451][ T29] kauditd_printk_skb: 675 callbacks suppressed [ 780.706495][ T29] audit: type=1400 audit(2000000634.527:20122): avc: denied { allowed } for pid=15638 comm="syz.5.2569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 780.789005][ T29] audit: type=1400 audit(2000000634.527:20123): avc: denied { create } for pid=15658 comm="syz.4.2572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 780.810934][ T29] audit: type=1400 audit(2000000634.527:20124): avc: denied { firmware_load } for pid=63 comm="kworker/u8:4" path="/lib/firmware/as102_data1_st.hex" dev="sda1" ino=297 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 780.863920][ T5744] dvb-usb: bulk message failed: -22 (1/0) [ 780.944036][ T29] audit: type=1400 audit(2000000634.607:20125): avc: denied { read } for pid=15494 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 780.969811][ T29] audit: type=1400 audit(2000000634.607:20126): avc: denied { write } for pid=15494 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 780.992201][ T29] audit: type=1400 audit(2000000634.607:20127): avc: denied { create } for pid=15658 comm="syz.4.2572" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 781.055146][ T5744] dvb-usb: error while querying for an remote control event. [ 781.159717][ T29] audit: type=1400 audit(2000000634.667:20128): avc: denied { read } for pid=15494 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 781.215172][ T29] audit: type=1400 audit(2000000634.677:20129): avc: denied { execmem } for pid=15658 comm="syz.4.2572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 781.242991][ T29] audit: type=1400 audit(2000000634.757:20130): avc: denied { search } for pid=15640 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 781.274095][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 781.302733][ T9] dvb-usb: error while querying for an remote control event. [ 781.306151][T15494] 8021q: adding VLAN 0 to HW filter on device bond0 [ 781.356448][ T29] audit: type=1400 audit(2000000634.757:20131): avc: denied { search } for pid=15640 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1772 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 781.387962][ T5792] usb 3-1: USB disconnect, device number 124 [ 781.394820][T15494] 8021q: adding VLAN 0 to HW filter on device team0 [ 781.415964][ T5854] bridge0: port 1(bridge_slave_0) entered blocking state [ 781.423077][ T5854] bridge0: port 1(bridge_slave_0) entered forwarding state [ 781.696091][ T1335] bridge0: port 2(bridge_slave_1) entered blocking state [ 781.703257][ T1335] bridge0: port 2(bridge_slave_1) entered forwarding state [ 781.849298][ T5792] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 782.351149][T15656] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 782.375128][T15656] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 782.412026][T15656] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 782.546380][ T5793] usb 6-1: USB disconnect, device number 94 [ 782.692036][ T5793] Unregistered device nBox DVB-T Dongle [ 782.697243][ T5793] as10x_usb: device has been disconnected [ 782.708763][ T5792] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 782.714089][ T9] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 782.855043][ T5792] usb 4-1: device descriptor read/64, error -71 [ 782.884135][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 782.898803][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 782.924222][ T9] usb 5-1: config 4 interface 0 has no altsetting 0 [ 782.947503][ T9] usb 5-1: string descriptor 0 read error: -22 [ 782.969615][ T9] usb 5-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 783.010444][ T9] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 783.124898][ T5792] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 783.140282][ T9] usb 5-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 783.154492][ T5614] Bluetooth: hci5: command 0x0c1a tx timeout [ 783.304256][ T5792] usb 4-1: device descriptor read/64, error -71 [ 783.306609][ T9] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 783.329012][ T9] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 783.340880][ T9] usb 5-1: media controller created [ 783.389031][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 783.458100][T15494] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 783.496980][ T5792] usb usb4-port1: attempt power cycle [ 783.643423][T15494] veth0_vlan: entered promiscuous mode [ 783.695265][T15494] veth1_vlan: entered promiscuous mode [ 783.766331][T15688] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2575'. [ 783.795883][ T5793] usb 5-1: USB disconnect, device number 125 [ 783.825630][T15721] fuse: Bad value for 'group_id' [ 783.859915][T15721] fuse: Bad value for 'group_id' [ 783.864403][ T5792] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 783.887932][T15494] veth0_macvtap: entered promiscuous mode [ 783.917998][ T5792] usb 4-1: device descriptor read/8, error -71 [ 783.923457][T15494] veth1_macvtap: entered promiscuous mode [ 783.962483][T15494] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 784.530317][T15494] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 784.595739][ T5854] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 784.630330][ T5854] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 784.658951][ T5854] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 784.681870][ T5854] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 785.083008][T15747] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 785.107137][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 785.129359][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 785.206034][T15747] pim6reg9: entered allmulticast mode [ 785.234481][ T5614] Bluetooth: hci5: command 0x0c1a tx timeout [ 785.253060][ T6000] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 785.278216][ T5792] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 785.291234][ T6000] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 785.305906][ T5792] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 785.317814][ T5792] usb 4-1: config 0 interface 0 has no altsetting 0 [ 785.326984][ T5792] usb 4-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 785.343589][ T5792] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 785.379717][ T5792] usb 4-1: config 0 descriptor?? [ 785.413894][ T5706] usb 5-1: new full-speed USB device number 126 using dummy_hcd [ 785.672741][ T5706] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 785.707201][ T5706] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 785.726756][ T29] kauditd_printk_skb: 704 callbacks suppressed [ 785.726772][ T29] audit: type=1400 audit(2000000639.547:20836): avc: denied { ioctl } for pid=15764 comm="syz.2.2585" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 785.761852][ T5706] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 785.789019][ T29] audit: type=1400 audit(2000000639.547:20837): avc: denied { create } for pid=15769 comm="syz.0.2586" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 785.797008][ T5706] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 785.856509][ T29] audit: type=1400 audit(2000000639.547:20838): avc: denied { search } for pid=15768 comm="rm" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 785.873678][ T5706] usb 5-1: config 0 descriptor?? [ 785.878393][ T5744] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 785.911213][ T5706] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 785.912505][ T29] audit: type=1400 audit(2000000639.547:20839): avc: denied { search } for pid=15768 comm="rm" name="dhcpcd" dev="tmpfs" ino=1772 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 785.927108][ T5706] dvb-usb: bulk message failed: -22 (3/0) [ 785.941418][ T29] audit: type=1400 audit(2000000639.547:20840): avc: denied { search } for pid=15768 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 785.986042][ T29] audit: type=1400 audit(2000000639.547:20841): avc: denied { getattr } for pid=15768 comm="rm" path="/run/dhcpcd/hook-state/resolv.conf.eth5.link" dev="tmpfs" ino=12741 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 786.008137][ T5706] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 786.044548][ T5706] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 786.046467][ T29] audit: type=1400 audit(2000000639.547:20842): avc: denied { write } for pid=15768 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 786.060299][ T5706] usb 5-1: media controller created [ 786.074608][ T5744] usb 3-1: Using ep0 maxpacket: 8 [ 786.082248][ T5706] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 786.098759][ T5744] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 786.111543][ T5744] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 786.126460][ T5706] dvb-usb: bulk message failed: -22 (6/0) [ 786.132117][ T29] audit: type=1400 audit(2000000639.547:20843): avc: denied { remove_name } for pid=15768 comm="rm" name="resolv.conf.eth5.link" dev="tmpfs" ino=12741 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 786.159524][ T5744] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 786.179220][ T5744] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 786.204351][ T5744] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 786.222865][ T29] audit: type=1400 audit(2000000639.547:20844): avc: denied { unlink } for pid=15768 comm="rm" name="resolv.conf.eth5.link" dev="tmpfs" ino=12741 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 786.266195][ T5744] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 786.296488][ T5744] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 786.308674][ T29] audit: type=1400 audit(2000000639.547:20845): avc: denied { create } for pid=15769 comm="syz.0.2586" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 786.375217][ T5706] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 786.416679][T15749] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 786.436752][ T5706] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input69 [ 786.471726][T15749] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 786.492738][ T5706] dvb-usb: schedule remote query interval to 150 msecs. [ 786.517807][ T5706] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 786.586773][ T5744] usb 3-1: usb_control_msg returned -32 [ 786.610633][ T5744] usbtmc 3-1:16.0: can't read capabilities [ 786.661030][ T5734] usb 5-1: USB disconnect, device number 126 [ 786.740718][ T5734] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 786.919497][T15765] usbtmc 3-1:16.0: usb_control_msg returned -71 [ 786.926956][T14582] usb 3-1: USB disconnect, device number 125 [ 786.933984][T15781] usbtmc 3-1:16.0: send_request_dev_dep_msg_in returned -19 [ 787.104497][ T5706] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 787.254851][ T5706] usb 1-1: Using ep0 maxpacket: 32 [ 787.270852][ T5706] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 787.296436][ T5706] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 787.306582][ T5706] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 787.317368][ T5706] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 787.324586][ T5614] Bluetooth: hci5: command 0x0c1a tx timeout [ 787.331074][ T5706] usb 1-1: config 0 descriptor?? [ 787.677925][ T5792] usbhid 4-1:0.0: can't add hid device: -71 [ 787.728602][ T5792] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 787.951048][ T5792] usb 4-1: USB disconnect, device number 124 [ 787.982810][ T5706] usbhid 1-1:0.0: can't add hid device: -71 [ 788.011483][ T5706] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 788.048815][ T5706] usb 1-1: USB disconnect, device number 71 [ 788.293924][ T5744] usb 6-1: new high-speed USB device number 95 using dummy_hcd [ 788.474086][ T5744] usb 6-1: device descriptor read/64, error -71 [ 788.916769][ T5744] usb 6-1: new high-speed USB device number 96 using dummy_hcd [ 789.194008][ T5744] usb 6-1: device descriptor read/64, error -71 [ 789.339051][ T5744] usb usb6-port1: attempt power cycle [ 789.751327][ T5744] usb 6-1: new high-speed USB device number 97 using dummy_hcd [ 789.867203][ T5744] usb 6-1: device descriptor read/8, error -71 [ 789.973864][ T5827] usb 1-1: new full-speed USB device number 72 using dummy_hcd [ 790.106999][T15836] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2604'. [ 790.123969][ T5744] usb 6-1: new high-speed USB device number 98 using dummy_hcd [ 790.145722][ T5744] usb 6-1: device descriptor read/8, error -71 [ 790.152981][ T5827] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 790.174743][ T5827] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 790.195595][ T5827] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 790.213913][ T5827] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 790.236417][ T5827] usb 1-1: config 0 descriptor?? [ 790.258330][ T5827] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 790.265105][ T5744] usb usb6-port1: unable to enumerate USB device [ 790.295507][ T5827] dvb-usb: bulk message failed: -22 (3/0) [ 790.305822][ T5827] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 790.324849][ T5827] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 790.343985][ T5827] usb 1-1: media controller created [ 790.350391][ T5827] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 790.388446][ T5827] dvb-usb: bulk message failed: -22 (6/0) [ 790.411140][ T5827] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 790.420986][T15836] SELinux: failed to load policy [ 790.439322][ T5827] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input70 [ 790.491425][ T5827] dvb-usb: schedule remote query interval to 150 msecs. [ 790.507008][ T5827] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 790.664069][ T5734] dvb-usb: bulk message failed: -22 (1/0) [ 790.675076][ T5734] dvb-usb: error while querying for an remote control event. [ 790.881125][ T5827] dvb-usb: bulk message failed: -22 (1/0) [ 790.893465][ T29] kauditd_printk_skb: 465 callbacks suppressed [ 790.893481][ T29] audit: type=1400 audit(2000000644.707:21278): avc: denied { read write open } for pid=15825 comm="syz.0.2601" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 790.934420][ T5827] dvb-usb: error while querying for an remote control event. [ 790.944892][ T29] audit: type=1400 audit(2000000644.747:21279): avc: denied { ioctl } for pid=15825 comm="syz.0.2601" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 791.011683][T15842] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 791.014677][ T29] audit: type=1400 audit(2000000644.757:21280): avc: denied { ioctl } for pid=15825 comm="syz.0.2601" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 791.049683][ T29] audit: type=1400 audit(2000000644.797:21281): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.169 src=30006 daddr=10.128.1.78 dest=59398 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 791.081974][T15842] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 791.213977][ T5734] dvb-usb: bulk message failed: -22 (1/0) [ 791.219873][ T5734] dvb-usb: error while querying for an remote control event. [ 791.598783][ T29] audit: type=1400 audit(2000000644.797:21282): avc: denied { read write } for pid=6418 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 791.699694][ T29] audit: type=1400 audit(2000000644.797:21283): avc: denied { open } for pid=6418 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 791.734449][ T5734] dvb-usb: bulk message failed: -22 (1/0) [ 791.752364][ T5734] dvb-usb: error while querying for an remote control event. [ 791.796817][ T29] audit: type=1400 audit(2000000644.797:21284): avc: denied { ioctl } for pid=6418 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 791.913926][ T29] audit: type=1400 audit(2000000644.797:21285): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.169 src=30006 daddr=10.128.1.78 dest=59398 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 792.011264][ T29] audit: type=1400 audit(2000000644.807:21286): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.169 src=30006 daddr=10.128.1.78 dest=59398 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 792.053931][ T5734] dvb-usb: bulk message failed: -22 (1/0) [ 792.091048][ T29] audit: type=1400 audit(2000000644.867:21287): avc: denied { read write } for pid=15848 comm="syz.5.2607" name="sg0" dev="devtmpfs" ino=759 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 792.115466][ T5734] dvb-usb: error while querying for an remote control event. [ 792.295342][ T5734] dvb-usb: bulk message failed: -22 (1/0) [ 792.306305][ T5734] dvb-usb: error while querying for an remote control event. [ 792.594072][ T5734] dvb-usb: bulk message failed: -22 (1/0) [ 792.624854][ T5734] dvb-usb: error while querying for an remote control event. [ 792.704046][ T5713] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 792.769649][ T5734] usb 1-1: USB disconnect, device number 72 [ 792.811024][ T5734] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 792.813872][ T5706] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 792.853957][ T5713] usb 5-1: Using ep0 maxpacket: 32 [ 792.860940][ T5713] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 792.872656][ T5713] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 792.883301][ T5713] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 792.894437][ T5713] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 792.907265][ T5713] usb 5-1: config 0 descriptor?? [ 792.973934][ T5706] usb 4-1: Using ep0 maxpacket: 8 [ 792.981417][ T5706] usb 4-1: config index 0 descriptor too short (expected 26, got 18) [ 792.993335][ T5706] usb 4-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 793.002796][ T5792] usb 6-1: new high-speed USB device number 99 using dummy_hcd [ 793.010778][ T5706] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 793.019953][ T5706] usb 4-1: Product: syz [ 793.024542][ T5706] usb 4-1: Manufacturer: syz [ 793.029177][ T5706] usb 4-1: SerialNumber: syz [ 793.105365][ T5706] usb 4-1: config 0 descriptor?? [ 793.116674][ T5706] gspca_main: sq930x-2.14.0 probing 2770:930c [ 793.742608][ T5706] gspca_sq930x: reg_r 001f failed -110 [ 793.748723][ T5706] sq930x 4-1:0.0: probe with driver sq930x failed with error -110 [ 793.758081][ T5792] usb 6-1: config 0 has an invalid interface number: 120 but max is 0 [ 793.776408][ T5792] usb 6-1: config 0 has no interface number 0 [ 793.810725][ T5713] usbhid 5-1:0.0: can't add hid device: -71 [ 793.817573][ T5792] usb 6-1: config 0 interface 120 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 793.830509][ T5713] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 793.840324][ T5792] usb 6-1: config 0 interface 120 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 793.853980][ T5713] usb 5-1: USB disconnect, device number 127 [ 793.864599][ T5792] usb 6-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 793.873953][ T5792] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 793.883690][ T5792] usb 6-1: config 0 descriptor?? [ 793.897743][ T5792] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.120/input/input71 [ 793.960599][ C0] usbtouchscreen 6-1:0.120: usbtouch_irq - usb_submit_urb failed with result: -1 [ 794.596366][ T5713] usb 6-1: USB disconnect, device number 99 [ 794.917456][T15905] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2622'. [ 794.929441][T15905] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 794.988206][ T5827] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 795.116037][T15907] input: syz0 as /devices/virtual/input/input72 [ 795.366471][ T5827] usb 5-1: Using ep0 maxpacket: 32 [ 795.392020][ T5827] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 795.416304][ T5827] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 795.431401][ T5827] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 795.442785][ T5827] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 795.454876][ T5827] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 795.466828][T15903] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2621'. [ 795.475940][ T5827] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 795.569964][ T5827] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 795.579499][ T5827] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 795.595386][ T5827] usb 5-1: config 0 descriptor?? [ 795.627437][ T5792] usb 4-1: USB disconnect, device number 125 [ 796.059603][ T29] kauditd_printk_skb: 291 callbacks suppressed [ 796.059618][ T29] audit: type=1400 audit(2000000649.877:21579): avc: denied { read write } for pid=5657 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 796.171200][ T29] audit: type=1400 audit(2000000649.887:21580): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.169 src=30006 daddr=10.128.1.78 dest=59398 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 796.298495][ T29] audit: type=1400 audit(2000000649.917:21581): avc: denied { read write open } for pid=5657 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 796.399541][ T29] audit: type=1400 audit(2000000649.917:21582): avc: denied { ioctl } for pid=5657 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 796.473264][ T29] audit: type=1400 audit(2000000649.927:21583): avc: denied { read write } for pid=9640 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 796.544295][ T29] audit: type=1400 audit(2000000649.927:21584): avc: denied { open } for pid=9640 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 796.593985][ T5734] usb 1-1: new full-speed USB device number 73 using dummy_hcd [ 796.618049][ T29] audit: type=1400 audit(2000000649.927:21585): avc: denied { ioctl } for pid=9640 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 796.675735][ T5827] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 796.698117][ T29] audit: type=1400 audit(2000000649.957:21586): avc: denied { recv } for pid=15494 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.1.78 dest=59398 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 796.732725][T15925] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 796.765094][T15925] vimc vimc.0: first entity in the pipe 'Scaler' is not a source [ 796.776304][ T29] audit: type=1400 audit(2000000649.957:21587): avc: denied { recv } for pid=4980 comm="udevd" saddr=10.128.0.169 src=30006 daddr=10.128.1.78 dest=59398 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 796.823852][ T29] audit: type=1400 audit(2000000650.057:21588): avc: denied { create } for pid=15916 comm="syz.2.2625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 796.900813][ T5734] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 796.925885][ T5734] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 796.944631][ T5734] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 796.966224][ T5734] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 796.979986][ C1] usblp0: nonzero read bulk status received: -71 [ 796.989236][ T5792] usb 5-1: USB disconnect, device number 2 [ 797.008184][T15901] usblp0: error -71 reading from printer [ 797.014091][ T5734] usb 1-1: config 0 descriptor?? [ 797.027895][ T5734] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 797.054574][T15901] usblp0: removed [ 797.061140][ T5734] dvb-usb: bulk message failed: -22 (3/0) [ 797.090092][ T5734] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 797.123087][ T5734] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 797.137302][ T5734] usb 1-1: media controller created [ 797.144752][ T5734] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 797.178905][ T5734] dvb-usb: bulk message failed: -22 (6/0) [ 797.194386][ T5734] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 797.214990][ T5734] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input73 [ 797.243328][ T5734] dvb-usb: schedule remote query interval to 150 msecs. [ 797.262545][ T5734] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 797.403972][T14582] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 797.413988][ T5734] dvb-usb: bulk message failed: -22 (1/0) [ 797.436356][ T5734] dvb-usb: error while querying for an remote control event. [ 797.451494][T15932] syzkaller0: entered promiscuous mode [ 797.458730][T15932] syzkaller0: entered allmulticast mode [ 797.479116][T15928] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 797.509007][T15928] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 797.553906][T14582] usb 3-1: Using ep0 maxpacket: 32 [ 797.564382][T14582] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 797.578954][T14582] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 797.589303][T14582] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 797.622023][T14582] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 797.634190][ T5792] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 797.643528][ T5734] dvb-usb: bulk message failed: -22 (1/0) [ 797.668093][ T5734] dvb-usb: error while querying for an remote control event. [ 797.668759][T14582] usb 3-1: config 0 descriptor?? [ 797.803895][ T5792] usb 4-1: Using ep0 maxpacket: 32 [ 797.818726][ T5792] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 797.840139][ T5792] usb 4-1: config 0 has no interface number 0 [ 797.859304][ T5792] usb 4-1: too many endpoints for config 0 interface 1 altsetting 140: 181, using maximum allowed: 30 [ 797.872785][ T5792] usb 4-1: config 0 interface 1 altsetting 140 has 0 endpoint descriptors, different from the interface descriptor's value: 181 [ 797.877580][ T5734] dvb-usb: bulk message failed: -22 (1/0) [ 797.886385][ T5792] usb 4-1: config 0 interface 1 has no altsetting 0 [ 797.901858][ T5792] usb 4-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=94.15 [ 797.915910][ T5792] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 797.924377][ T5792] usb 4-1: Product: syz [ 797.928880][ T5792] usb 4-1: Manufacturer: syz [ 797.933683][ T5792] usb 4-1: SerialNumber: syz [ 797.970287][ T5734] dvb-usb: error while querying for an remote control event. [ 797.990482][ T5792] usb 4-1: config 0 descriptor?? [ 798.122999][T14582] usbhid 3-1:0.0: can't add hid device: -71 [ 798.131600][T14582] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 798.161447][T14582] usb 3-1: USB disconnect, device number 126 [ 798.163879][ T5744] dvb-usb: bulk message failed: -22 (1/0) [ 798.191152][ T5744] dvb-usb: error while querying for an remote control event. [ 798.236151][ T5792] RobotFuzz Open Source InterFace, OSIF 4-1:0.1: failure sending bit rate [ 798.254667][ T5792] RobotFuzz Open Source InterFace, OSIF 4-1:0.1: probe with driver RobotFuzz Open Source InterFace, OSIF failed with error -71 [ 798.295948][ T5792] usb 4-1: USB disconnect, device number 126 [ 798.374823][ T5744] dvb-usb: bulk message failed: -22 (1/0) [ 798.396518][ T5744] dvb-usb: error while querying for an remote control event. [ 798.454489][ T5744] usb 1-1: USB disconnect, device number 73 [ 798.493892][ T5744] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 798.840258][T15947] FAULT_INJECTION: forcing a failure. [ 798.840258][T15947] name failslab, interval 1, probability 0, space 0, times 0 [ 798.859512][T15947] CPU: 1 UID: 0 PID: 15947 Comm: syz.3.2635 Tainted: G L syzkaller #0 PREEMPT(full) [ 798.859547][T15947] Tainted: [L]=SOFTLOCKUP [ 798.859554][T15947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 798.859565][T15947] Call Trace: [ 798.859571][T15947] [ 798.859578][T15947] dump_stack_lvl+0x100/0x190 [ 798.859610][T15947] should_fail_ex.cold+0x5/0xa [ 798.859639][T15947] should_failslab+0xc2/0x120 [ 798.859660][T15947] __kmalloc_cache_node_noprof+0x7d/0x770 [ 798.859679][T15947] ? __get_vm_area_node+0x101/0x330 [ 798.859700][T15947] ? lock_acquire+0x1b1/0x370 [ 798.859728][T15947] __get_vm_area_node+0x101/0x330 [ 798.859754][T15947] __vmalloc_node_range_noprof+0x228/0x1630 [ 798.859777][T15947] ? vhost_task_create+0x1db/0x370 [ 798.859812][T15947] ? vhost_task_create+0x1db/0x370 [ 798.859844][T15947] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 798.859873][T15947] ? rcu_is_watching+0x12/0xc0 [ 798.859901][T15947] ? trace_kmem_cache_alloc+0xd5/0x100 [ 798.859923][T15947] ? vhost_task_create+0x1db/0x370 [ 798.859946][T15947] __vmalloc_node_noprof+0xad/0xf0 [ 798.859969][T15947] ? vhost_task_create+0x1db/0x370 [ 798.859997][T15947] copy_process+0x7fb/0x7e00 [ 798.860030][T15947] ? __pfx_copy_process+0x10/0x10 [ 798.860052][T15947] ? lockdep_init_map_type+0x5c/0x250 [ 798.860077][T15947] ? lockdep_init_map_type+0x5c/0x250 [ 798.860102][T15947] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 798.860125][T15947] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 798.860155][T15947] vhost_task_create+0x1db/0x370 [ 798.860181][T15947] ? __pfx_vhost_task_create+0x10/0x10 [ 798.860204][T15947] ? register_lock_class+0x40/0x560 [ 798.860235][T15947] ? __pfx_vhost_task_fn+0x10/0x10 [ 798.860263][T15947] ? __pfx___mutex_lock+0x10/0x10 [ 798.860290][T15947] ? kasan_quarantine_put+0x104/0x240 [ 798.860325][T15947] kvm_mmu_post_init_vm+0x1b3/0x370 [ 798.860353][T15947] kvm_arch_vcpu_ioctl_run+0x66/0x1890 [ 798.860382][T15947] ? kvm_vcpu_ioctl+0x1546/0x1720 [ 798.860409][T15947] kvm_vcpu_ioctl+0x730/0x1720 [ 798.860433][T15947] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 798.860454][T15947] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 798.860479][T15947] ? do_vfs_ioctl+0x226/0x13e0 [ 798.860503][T15947] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 798.860529][T15947] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 798.860564][T15947] ? __fget_files+0x215/0x3d0 [ 798.860586][T15947] ? hook_file_ioctl_common+0x149/0x410 [ 798.860623][T15947] ? selinux_file_ioctl+0x13b/0x290 [ 798.860646][T15947] ? selinux_file_ioctl+0xb6/0x290 [ 798.860672][T15947] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 798.860694][T15947] __x64_sys_ioctl+0x18e/0x210 [ 798.860716][T15947] do_syscall_64+0x10b/0xf80 [ 798.860739][T15947] ? clear_bhb_loop+0x40/0x90 [ 798.860762][T15947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 798.860779][T15947] RIP: 0033:0x7fa94939cdd9 [ 798.860797][T15947] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 798.860813][T15947] RSP: 002b:00007fa9475ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 798.860831][T15947] RAX: ffffffffffffffda RBX: 00007fa949615fa0 RCX: 00007fa94939cdd9 [ 798.860843][T15947] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000009 [ 798.860854][T15947] RBP: 00007fa9475ee090 R08: 0000000000000000 R09: 0000000000000000 [ 798.860865][T15947] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 798.860875][T15947] R13: 00007fa949616038 R14: 00007fa949615fa0 R15: 00007ffc3a969388 [ 798.860901][T15947] [ 798.861154][T15947] syz.3.2635: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 799.454469][T15947] CPU: 0 UID: 0 PID: 15947 Comm: syz.3.2635 Tainted: G L syzkaller #0 PREEMPT(full) [ 799.454498][T15947] Tainted: [L]=SOFTLOCKUP [ 799.454504][T15947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 799.454513][T15947] Call Trace: [ 799.454520][T15947] [ 799.454527][T15947] dump_stack_lvl+0x100/0x190 [ 799.454553][T15947] warn_alloc.cold+0x95/0x1c1 [ 799.454572][T15947] ? __pfx_warn_alloc+0x10/0x10 [ 799.454596][T15947] ? trace_kmalloc+0xe3/0x110 [ 799.454615][T15947] ? __kmalloc_cache_node_noprof+0x2d9/0x770 [ 799.454636][T15947] ? __kasan_kmalloc+0x8a/0xb0 [ 799.454652][T15947] ? __get_vm_area_node+0x208/0x330 [ 799.454677][T15947] __vmalloc_node_range_noprof+0xccd/0x1630 [ 799.454706][T15947] ? vhost_task_create+0x1db/0x370 [ 799.454736][T15947] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 799.454770][T15947] ? rcu_is_watching+0x12/0xc0 [ 799.454794][T15947] ? trace_kmem_cache_alloc+0xd5/0x100 [ 799.454814][T15947] ? vhost_task_create+0x1db/0x370 [ 799.454834][T15947] __vmalloc_node_noprof+0xad/0xf0 [ 799.454854][T15947] ? vhost_task_create+0x1db/0x370 [ 799.454878][T15947] copy_process+0x7fb/0x7e00 [ 799.454907][T15947] ? __pfx_copy_process+0x10/0x10 [ 799.454926][T15947] ? lockdep_init_map_type+0x5c/0x250 [ 799.454949][T15947] ? lockdep_init_map_type+0x5c/0x250 [ 799.454971][T15947] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 799.454991][T15947] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 799.455016][T15947] vhost_task_create+0x1db/0x370 [ 799.455038][T15947] ? __pfx_vhost_task_create+0x10/0x10 [ 799.455058][T15947] ? register_lock_class+0x40/0x560 [ 799.455084][T15947] ? __pfx_vhost_task_fn+0x10/0x10 [ 799.455108][T15947] ? __pfx___mutex_lock+0x10/0x10 [ 799.455131][T15947] ? kasan_quarantine_put+0x104/0x240 [ 799.455161][T15947] kvm_mmu_post_init_vm+0x1b3/0x370 [ 799.455184][T15947] kvm_arch_vcpu_ioctl_run+0x66/0x1890 [ 799.455207][T15947] ? kvm_vcpu_ioctl+0x1546/0x1720 [ 799.455232][T15947] kvm_vcpu_ioctl+0x730/0x1720 [ 799.455254][T15947] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 799.455272][T15947] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 799.455294][T15947] ? do_vfs_ioctl+0x226/0x13e0 [ 799.455314][T15947] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 799.455332][T15947] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 799.455365][T15947] ? __fget_files+0x215/0x3d0 [ 799.455386][T15947] ? hook_file_ioctl_common+0x149/0x410 [ 799.455419][T15947] ? selinux_file_ioctl+0x13b/0x290 [ 799.455442][T15947] ? selinux_file_ioctl+0xb6/0x290 [ 799.455467][T15947] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 799.455491][T15947] __x64_sys_ioctl+0x18e/0x210 [ 799.455510][T15947] do_syscall_64+0x10b/0xf80 [ 799.455531][T15947] ? clear_bhb_loop+0x40/0x90 [ 799.455551][T15947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 799.455568][T15947] RIP: 0033:0x7fa94939cdd9 [ 799.455584][T15947] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 799.455600][T15947] RSP: 002b:00007fa9475ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 799.455617][T15947] RAX: ffffffffffffffda RBX: 00007fa949615fa0 RCX: 00007fa94939cdd9 [ 799.455628][T15947] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000009 [ 799.455638][T15947] RBP: 00007fa9475ee090 R08: 0000000000000000 R09: 0000000000000000 [ 799.455648][T15947] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 799.455657][T15947] R13: 00007fa949616038 R14: 00007fa949615fa0 R15: 00007ffc3a969388 [ 799.455680][T15947] [ 799.456142][T15947] Mem-Info: [ 799.906862][T15947] active_anon:18458 inactive_anon:0 isolated_anon:0 [ 799.906862][T15947] active_file:22066 inactive_file:41008 isolated_file:0 [ 799.906862][T15947] unevictable:768 dirty:339 writeback:50 [ 799.906862][T15947] slab_reclaimable:12360 slab_unreclaimable:110224 [ 799.906862][T15947] mapped:31926 shmem:4214 pagetables:1557 [ 799.906862][T15947] sec_pagetables:0 bounce:0 [ 799.906862][T15947] kernel_misc_reclaimable:0 [ 799.906862][T15947] free:1263420 free_pcp:12031 free_cma:0 [ 800.067660][T15947] Node 0 active_anon:74432kB inactive_anon:0kB active_file:88264kB inactive_file:163824kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:127704kB dirty:1356kB writeback:0kB shmem:15320kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12752kB pagetables:6160kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 800.256315][T15947] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:168kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 800.393907][T15947] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 800.455612][T15947] lowmem_reserve[]: 0 2477 2478 2478 2478 [ 800.521819][T15947] Node 0 DMA32 free:1093752kB boost:0kB min:34056kB low:42568kB high:51080kB reserved_highatomic:0KB free_highatomic:0KB active_anon:74476kB inactive_anon:0kB active_file:88264kB inactive_file:163824kB unevictable:1536kB writepending:1384kB zspages:0kB present:3129332kB managed:2537084kB mlocked:0kB bounce:0kB free_pcp:47780kB local_pcp:27652kB free_cma:0kB [ 800.672452][T15947] lowmem_reserve[]: 0 0 1 1 1 [ 800.694566][T15947] Node 0 Normal free:0kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1092kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 800.733314][T15947] lowmem_reserve[]: 0 0 0 0 0 [ 800.739965][T15947] Node 1 Normal free:3944408kB boost:0kB min:55828kB low:69784kB high:83740kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 800.772290][T15947] lowmem_reserve[]: 0 0 0 0 0 [ 800.780234][T15947] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 800.794889][T15947] Node 0 DMA32: 3262*4kB (UME) 3250*8kB (UM) 1559*16kB (UM) 278*32kB (UME) 265*64kB (UME) 293*128kB (UME) 149*256kB (UME) 77*512kB (UME) 46*1024kB (UME) 7*2048kB (UM) 202*4096kB (M) = 1093752kB [ 800.831273][T15947] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 800.858172][T15947] Node 1 Normal: 2*4kB (U) 10*8kB (UM) 12*16kB (UM) 8*32kB (UM) 13*64kB (UM) 5*128kB (UM) 4*256kB (UM) 4*512kB (UM) 3*1024kB (UM) 2*2048kB (UM) 960*4096kB (M) = 3944408kB [ 800.885280][ T5792] usb 6-1: new high-speed USB device number 100 using dummy_hcd [ 800.898744][T15947] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 800.928367][T15977] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[15978] was attempted by "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[15977] [ 800.944425][T15947] Node 0 hugepages_total=4 hugepages_free=3 hugepages_surp=1 hugepages_size=2048kB [ 800.957285][T15947] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 800.975225][T15947] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 801.008620][T15947] 67964 total pagecache pages [ 801.025006][T15947] 0 pages in swap cache [ 801.035292][T15947] Free swap = 124996kB [ 801.053120][T15947] Total swap = 124996kB [ 801.063855][ T5792] usb 6-1: Using ep0 maxpacket: 32 [ 801.072351][T15947] 2097051 pages RAM [ 801.081821][ T29] kauditd_printk_skb: 308 callbacks suppressed [ 801.081849][ T29] audit: type=1400 audit(2000000654.897:21897): avc: denied { ioctl } for pid=15975 comm="syz.5.2644" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 801.082892][ T5792] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 801.097756][T15947] 0 pages HighMem/MovableOnly [ 801.141701][ T29] audit: type=1400 audit(2000000654.947:21898): avc: denied { read } for pid=15972 comm="syz.4.2643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 801.173945][T15947] 430892 pages reserved [ 801.178137][T15947] 0 pages cma reserved [ 801.182219][ T5792] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 801.227252][ T5792] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 801.254144][ T29] audit: type=1400 audit(2000000654.947:21899): avc: denied { read } for pid=15972 comm="syz.4.2643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 801.293958][ T5792] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 801.330945][ T5792] usb 6-1: config 0 descriptor?? [ 801.365806][ T29] audit: type=1400 audit(2000000654.987:21900): avc: denied { read } for pid=15972 comm="syz.4.2643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 801.458465][ T29] audit: type=1400 audit(2000000655.017:21901): avc: denied { read } for pid=15972 comm="syz.4.2643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 801.558502][ T29] audit: type=1400 audit(2000000655.027:21902): avc: denied { read } for pid=15972 comm="syz.4.2643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 801.644197][ T29] audit: type=1400 audit(2000000655.027:21903): avc: denied { read } for pid=15972 comm="syz.4.2643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 801.759152][ T29] audit: type=1400 audit(2000000655.067:21904): avc: denied { read } for pid=15972 comm="syz.4.2643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 801.872678][ T29] audit: type=1400 audit(2000000655.097:21905): avc: denied { read } for pid=15972 comm="syz.4.2643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 801.942421][ T29] audit: type=1400 audit(2000000655.147:21906): avc: denied { read } for pid=15972 comm="syz.4.2643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 802.263914][T14582] usb 1-1: new full-speed USB device number 74 using dummy_hcd [ 802.753944][ T5744] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 802.914042][ T5744] usb 5-1: Using ep0 maxpacket: 8 [ 802.924191][ T5744] usb 5-1: config 2 has an invalid interface number: 31 but max is 0 [ 803.078680][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 803.576913][T14582] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 803.585334][T14582] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 803.594289][T14582] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 803.630009][ T5744] usb 5-1: config 2 has no interface number 0 [ 803.685148][ T5792] usbhid 6-1:0.0: can't add hid device: -71 [ 803.700410][ T5744] usb 5-1: config 2 interface 31 has no altsetting 0 [ 803.720979][T15994] fuse: Unknown parameter 'user_i00000000000000000000' [ 803.728759][T14582] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 803.751491][ T5792] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 803.784100][T14582] usb 1-1: config 1 has no interface number 0 [ 803.813405][ T5792] usb 6-1: USB disconnect, device number 100 [ 803.829605][T14582] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 803.890955][T14582] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 803.947698][T14582] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 803.970732][ T5744] usb 5-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 804.012704][ T5744] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 804.035884][ T5744] usb 5-1: Product: syz [ 804.052130][ T5744] usb 5-1: Manufacturer: syz [ 804.070246][ T5744] usb 5-1: SerialNumber: syz [ 804.194505][ T5792] usb 6-1: new full-speed USB device number 101 using dummy_hcd [ 804.377805][ T5792] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 804.444096][ T5792] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 804.493051][ T5792] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 804.542574][ T5792] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 804.574979][ T5744] ch9200 5-1:2.31: probe with driver ch9200 failed with error -71 [ 804.602341][ T5792] usb 6-1: config 0 descriptor?? [ 804.626828][ T5744] usb 5-1: USB disconnect, device number 3 [ 804.646472][ T5792] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 804.681865][ T5792] dvb-usb: bulk message failed: -22 (3/0) [ 804.880075][ T5792] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 804.900639][T14582] snd_usb_pod 1-1:1.1: endpoint not available, using fallback values [ 804.948049][ T5792] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 804.960134][T14582] snd_usb_pod 1-1:1.1: invalid control EP [ 805.000411][ T5792] usb 6-1: media controller created [ 805.010960][T14582] snd_usb_pod 1-1:1.1: cannot start listening: -22 [ 805.041142][ T5792] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 805.052326][T14582] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 805.084258][T14582] snd_usb_pod 1-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 805.102147][ T5792] dvb-usb: bulk message failed: -22 (6/0) [ 805.135958][ T5792] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 805.239673][ T5792] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input74 [ 805.256114][T16009] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 805.315520][T16009] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 805.331369][T14582] usb 1-1: USB disconnect, device number 74 [ 805.463933][ T5792] dvb-usb: schedule remote query interval to 150 msecs. [ 805.578873][ T5792] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 805.733916][ T5792] dvb-usb: bulk message failed: -22 (1/0) [ 805.761216][ T5792] dvb-usb: error while querying for an remote control event. [ 805.964079][T14582] dvb-usb: bulk message failed: -22 (1/0) [ 805.994993][T14582] dvb-usb: error while querying for an remote control event. [ 806.192535][ T29] kauditd_printk_skb: 185 callbacks suppressed [ 806.192567][ T29] audit: type=1400 audit(2000000660.007:22092): avc: denied { recv } for pid=6418 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.1.78 dest=59398 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 806.231108][T14582] dvb-usb: bulk message failed: -22 (1/0) [ 806.251142][T14582] dvb-usb: error while querying for an remote control event. [ 806.275327][ T29] audit: type=1400 audit(2000000660.047:22093): avc: denied { recv } for pid=16015 comm="syz.2.2654" saddr=10.128.0.169 src=30006 daddr=10.128.1.78 dest=59398 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 806.277442][T16014] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 806.383775][ T29] audit: type=1400 audit(2000000660.057:22094): avc: denied { recv } for pid=5597 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.1.78 dest=59398 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 806.433911][T14582] dvb-usb: bulk message failed: -22 (1/0) [ 806.439824][T14582] dvb-usb: error while querying for an remote control event. [ 806.475839][ T29] audit: type=1400 audit(2000000660.067:22095): avc: denied { recv } for pid=15494 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.1.78 dest=59398 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 806.580278][ T29] audit: type=1400 audit(2000000660.167:22096): avc: denied { recv } for pid=16019 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.1.78 dest=59398 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 806.617026][T14582] dvb-usb: bulk message failed: -22 (1/0) [ 806.639809][T14582] dvb-usb: error while querying for an remote control event. [ 806.662996][ T29] audit: type=1400 audit(2000000660.167:22097): avc: denied { recv } for pid=16019 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.1.78 dest=59398 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 806.800309][ T29] audit: type=1400 audit(2000000660.167:22098): avc: denied { recv } for pid=16019 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.1.78 dest=59398 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 806.832600][T14582] dvb-usb: bulk message failed: -22 (1/0) [ 806.832679][ T5827] usb 6-1: USB disconnect, device number 101 [ 806.856059][T14582] dvb-usb: error while querying for an remote control event. [ 806.879396][ T5744] usb 1-1: new full-speed USB device number 75 using dummy_hcd [ 806.905562][ T29] audit: type=1400 audit(2000000660.177:22099): avc: denied { read write } for pid=16019 comm="syz.0.2655" name="video3" dev="devtmpfs" ino=936 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 806.930077][ T9] usb 3-1: new full-speed USB device number 127 using dummy_hcd [ 806.938434][ T29] audit: type=1400 audit(2000000660.177:22100): avc: denied { open } for pid=16019 comm="syz.0.2655" path="/dev/video3" dev="devtmpfs" ino=936 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 806.963488][ T5827] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 806.972033][ T29] audit: type=1400 audit(2000000660.177:22101): avc: denied { ioctl } for pid=16019 comm="syz.0.2655" path="/dev/video3" dev="devtmpfs" ino=936 ioctlcmd=0x5605 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 807.089139][ T5744] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 807.115863][ T9] usb 3-1: config 0 has no interfaces? [ 807.125173][ T9] usb 3-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 807.136471][ T5744] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 807.153528][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 807.161791][ T5744] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 807.176560][ T5744] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 807.187628][ T9] usb 3-1: config 0 descriptor?? [ 807.214744][ T5744] usb 1-1: config 0 descriptor?? [ 807.246018][ T5744] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 807.258264][ T5744] dvb-usb: bulk message failed: -22 (3/0) [ 807.285962][ T5744] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 807.376042][ T5744] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 807.405376][ T5744] usb 1-1: media controller created [ 807.448489][ T5744] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 807.988878][T16039] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 807.999523][T16039] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 808.044335][ T5744] dvb-usb: bulk message failed: -22 (6/0) [ 808.050161][ T5744] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 808.059902][ T5744] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input75 [ 808.073965][ T5744] dvb-usb: schedule remote query interval to 150 msecs. [ 808.080929][ T5744] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 808.184237][ T9] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 808.245462][ T5699] dvb-usb: bulk message failed: -22 (1/0) [ 808.256958][ T5699] dvb-usb: error while querying for an remote control event. [ 808.384070][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 808.385258][T14582] usb 3-1: USB disconnect, device number 127 [ 808.396751][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 808.409870][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 808.444118][ T5744] dvb-usb: bulk message failed: -22 (1/0) [ 808.460490][ T5744] dvb-usb: error while querying for an remote control event. [ 808.475599][ T9] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 808.507620][ T5706] usb 1-1: USB disconnect, device number 75 [ 808.509727][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 808.541815][ T9] usb 4-1: config 0 descriptor?? [ 808.569040][ T5706] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 808.673947][ T5699] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 808.834350][ T5699] usb 5-1: Using ep0 maxpacket: 16 [ 808.846825][ T5699] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 808.884079][ T5699] usb 5-1: config 0 interface 0 has no altsetting 0 [ 808.916039][ T5699] usb 5-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 808.939842][ T5699] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 808.980999][ T5699] usb 5-1: Product: syz [ 808.997004][ T5699] usb 5-1: Manufacturer: syz [ 809.019717][ T5699] usb 5-1: SerialNumber: syz [ 809.050460][ T5699] usb 5-1: config 0 descriptor?? [ 809.326801][ T5699] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input76 [ 809.358236][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 809.364883][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 809.383725][ T9] usb 4-1: USB disconnect, device number 127 [ 809.771750][ C0] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 809.935478][ T5699] imon:send_packet: packet tx failed (-71) [ 809.963874][ T5699] imon 5-1:0.0: panel buttons/knobs setup failed [ 809.978288][T16058] vlan3: entered promiscuous mode [ 810.003894][T16058] bridge0: entered promiscuous mode [ 810.024542][ T5699] rc_core: IR keymap rc-imon-pad not found [ 810.037430][ T5699] Registered IR keymap rc-empty [ 810.042972][ T5699] imon 5-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 810.053855][ T5699] imon 5-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 810.063332][ T5699] imon:send_packet: packet tx failed (-71) [ 810.084021][ T5699] imon 5-1:0.0: remote input dev register failed [ 810.098441][ T5699] imon 5-1:0.0: imon_init_intf0: rc device setup failed [ 810.137081][T16066] xt_hashlimit: size too large, truncated to 1048576 [ 810.168784][ T5699] imon 5-1:0.0: unable to initialize intf0, err 0 [ 810.175826][ T5699] imon:imon_probe: failed to initialize context! [ 810.182252][ T5699] imon 5-1:0.0: unable to register, err -19 [ 810.197030][ T5827] usb 1-1: new full-speed USB device number 76 using dummy_hcd [ 810.416399][ T5699] usb 5-1: USB disconnect, device number 4 [ 810.642660][T16074] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2670'. [ 810.676189][ T5827] usb 1-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 810.694599][ T5827] usb 1-1: config 253 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 810.706503][ T5827] usb 1-1: config 253 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 810.726061][ T5827] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 810.738192][ T5827] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 810.748541][ T5827] usb 1-1: SerialNumber: syz [ 811.013946][ T9] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 811.015707][T16085] serio: Serial port ttyprintk [ 811.027828][T16083] kvm: pic: level sensitive irq not supported [ 811.028073][T16083] kvm: pic: non byte read [ 811.032863][T16061] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 811.034569][T16083] kvm: pic: level sensitive irq not supported [ 811.051374][T16061] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 811.065090][T16083] kvm: pic: non byte read [ 811.117185][T16061] dlm: no local IP address has been set [ 811.127168][T16061] dlm: cannot start dlm midcomms -107 [ 811.138447][ T5827] rndis_host 1-1:253.0: RNDIS init failed, -71 [ 811.148687][ T5827] rndis_host 1-1:253.0: probe with driver rndis_host failed with error -71 [ 811.168879][ T5827] usb 1-1: USB disconnect, device number 76 [ 811.191085][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 811.207770][ T29] kauditd_printk_skb: 336 callbacks suppressed [ 811.207787][ T29] audit: type=1400 audit(2000000665.027:22438): avc: denied { ioctl } for pid=16080 comm="syz.2.2672" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 811.213155][ T9] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 811.265982][ T29] audit: type=1400 audit(2000000665.087:22439): avc: denied { execmem } for pid=16087 comm="syz.5.2675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 811.348339][ T29] audit: type=1400 audit(2000000665.127:22440): avc: denied { create } for pid=16094 comm="syz.4.2676" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 811.380088][ T29] audit: type=1400 audit(2000000665.137:22441): avc: denied { read } for pid=16094 comm="syz.4.2676" dev="nsfs" ino=4026533354 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 811.410922][ T9] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 811.429456][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 811.438593][ T29] audit: type=1400 audit(2000000665.137:22442): avc: denied { open } for pid=16094 comm="syz.4.2676" path="net:[4026533354]" dev="nsfs" ino=4026533354 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 811.533405][T16100] afs: Unknown parameter 'yn' [ 811.891505][ T9] usb 3-1: config 0 descriptor?? [ 811.899799][ T9] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 811.906646][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 812.302746][ T29] audit: type=1400 audit(2000000665.137:22443): avc: denied { create } for pid=16094 comm="syz.4.2676" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 812.323063][ T29] audit: type=1400 audit(2000000665.137:22444): avc: denied { bind } for pid=16094 comm="syz.4.2676" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 812.343172][ T29] audit: type=1400 audit(2000000665.137:22445): avc: denied { create } for pid=16094 comm="syz.4.2676" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 812.364933][ T29] audit: type=1400 audit(2000000665.137:22446): avc: denied { module_request } for pid=16087 comm="syz.5.2675" kmod="crypto-hmac(md5)" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 812.365596][ T9] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 812.387399][ T29] audit: type=1400 audit(2000000665.187:22447): avc: denied { write } for pid=16094 comm="syz.4.2676" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 812.781014][T16109] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 812.820872][ T9] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 812.849543][ T9] usb 3-1: media controller created [ 812.864249][T16109] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 812.919661][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 812.969783][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 812.991835][ T9] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 813.020607][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input78 [ 813.087094][ T9] dvb-usb: schedule remote query interval to 150 msecs. [ 813.106491][ T9] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 813.175398][ T9] usb 3-1: USB disconnect, device number 2 [ 813.244064][ T5706] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 813.454289][ T5706] usb 1-1: Using ep0 maxpacket: 32 [ 813.562727][ T5706] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 813.590316][ T5706] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 813.608568][ T5706] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 813.638865][ T9] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 813.642531][ T5706] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 813.693210][ T5706] usb 1-1: config 0 descriptor?? [ 813.750609][T16129] netlink: 'syz.4.2678': attribute type 4 has an invalid length. [ 813.787534][T16129] netlink: 'syz.4.2678': attribute type 4 has an invalid length. [ 814.064019][ T5792] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 814.486274][ T5792] usb 4-1: not running at top speed; connect to a high speed hub [ 814.496674][ T5792] usb 4-1: config 1 interface 0 altsetting 128 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 814.511954][ T5792] usb 4-1: config 1 interface 0 altsetting 128 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 814.528896][ T5706] usbhid 1-1:0.0: can't add hid device: -71 [ 814.545135][ T5706] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 814.574673][ T5792] usb 4-1: config 1 interface 0 has no altsetting 0 [ 815.039110][ T5792] usb 4-1: New USB device found, idVendor=0486, idProduct=0186, bcdDevice= 0.40 [ 815.054320][ T5706] usb 1-1: USB disconnect, device number 77 [ 815.060418][ T5792] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 815.091764][ T5792] usb 4-1: Product: ࠾ [ 815.110578][ T5792] usb 4-1: Manufacturer: 䑳ꇷ澖П햝稠듎⛮￮튟蘦ᨽƏ冿녃領⑦場괃ᆂ캉ල炚떴돪ﾌ㸔舸픻軡辸豄﮼獨鎹㿆쌐ⶆ뫛ゐᎤ⠍燲睃잍膨嘭挪暺弿惤칇껂ﲌᶴऄ緼㇩資蒺䇃㠠薠꼵쾅곷ꮵ⹥銺粥㏚㥖Ô䔅㊢ء鑈髬ⴡ짡ᯰ [ 815.199287][ T5792] usb 4-1: SerialNumber: з [ 815.229005][T16131] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 815.241675][T16131] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 815.472555][ T5792] usbhid 4-1:1.0: can't add hid device: -71 [ 815.485272][ T5792] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 815.500905][ T5792] usb 4-1: USB disconnect, device number 2 [ 815.506828][ T5706] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 815.543919][ T5699] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 815.698022][ T5699] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 815.712105][ T5706] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 815.726919][ T5699] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 815.768902][ T5699] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 815.841658][ T5699] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 815.926057][ T5699] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 816.048212][ T5699] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 816.151605][ T5699] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 816.205409][ T5699] usb 3-1: Product: syz [ 816.230309][ T5699] usb 3-1: Manufacturer: syz [ 816.347254][ T29] kauditd_printk_skb: 228 callbacks suppressed [ 816.347276][ T29] audit: type=1400 audit(2000000670.127:22676): avc: denied { recv } for pid=16146 comm="syz.4.2687" saddr=10.128.0.169 src=30006 daddr=10.128.1.78 dest=59398 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 816.543507][ T5699] cdc_wdm 3-1:1.0: skipping garbage [ 816.585549][ T5699] cdc_wdm 3-1:1.0: skipping garbage [ 816.594072][ T29] audit: type=1400 audit(2000000670.207:22677): avc: denied { read write } for pid=6418 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 816.790619][ T29] audit: type=1400 audit(2000000670.217:22678): avc: denied { open } for pid=6418 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 816.842481][ T5706] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 816.857937][ T5706] usb 1-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 816.871079][ T5706] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 816.880557][ T5706] usb 1-1: Product: syz [ 816.880625][ T29] audit: type=1400 audit(2000000670.217:22679): avc: denied { ioctl } for pid=6418 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 816.884759][ T5706] usb 1-1: Manufacturer: syz [ 816.884776][ T5706] usb 1-1: SerialNumber: syz [ 816.931980][ T29] audit: type=1400 audit(2000000670.277:22680): avc: denied { ioctl } for pid=16142 comm="syz.2.2685" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 816.972192][ T5699] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 816.982439][T16158] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.2689'. [ 817.003907][ T5699] cdc_wdm 3-1:1.0: Unknown control protocol [ 817.040039][ T29] audit: type=1400 audit(2000000670.307:22681): avc: denied { recv } for pid=6418 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.1.78 dest=59398 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 817.121660][ T29] audit: type=1400 audit(2000000670.337:22682): avc: denied { recv } for pid=5657 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.1.78 dest=59398 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 817.238644][ T29] audit: type=1400 audit(2000000670.337:22683): avc: denied { read write } for pid=5657 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 817.312103][ T29] audit: type=1400 audit(2000000670.347:22684): avc: denied { open } for pid=5657 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 817.388355][ T5706] usb 1-1: unit 4 not found! [ 817.390573][ T29] audit: type=1400 audit(2000000670.347:22685): avc: denied { ioctl } for pid=5657 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 817.439030][T16170] netlink: 64138 bytes leftover after parsing attributes in process `syz.5.2691'. [ 817.517226][ T5706] usb 1-1: USB disconnect, device number 78 [ 817.562085][ T5839] udevd[5839]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 818.313922][ T5706] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 818.343878][ T9] usb 6-1: new high-speed USB device number 102 using dummy_hcd [ 818.383953][ T5699] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 818.471741][ T5706] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 818.504607][ T5706] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 818.524327][ T5699] usb 1-1: device descriptor read/64, error -71 [ 818.531254][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 818.532023][ T5706] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 818.571765][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 818.584745][ T5706] usb 4-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db [ 818.596355][ T5706] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 818.600007][ T5793] usb 3-1: USB disconnect, device number 3 [ 818.619048][ T5706] usb 4-1: config 0 descriptor?? [ 818.632780][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 818.659234][ T5706] rndis_host 4-1:0.0: rndis: master #0/ffff888064b7d000 slave #1/0000000000000000 [ 818.705962][ T9] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 818.753896][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 818.774878][ T9] usb 6-1: config 0 descriptor?? [ 818.804620][ T5699] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 818.858026][ T5793] usb 4-1: USB disconnect, device number 3 [ 818.953905][ T5699] usb 1-1: device descriptor read/64, error -71 [ 819.074232][ T5699] usb usb1-port1: attempt power cycle [ 819.196322][ T9] hid_parser_main: 15 callbacks suppressed [ 819.196344][ T9] ft260 0003:0403:6030.0024: unknown main item tag 0x0 [ 819.219845][ T9] ft260 0003:0403:6030.0024: unknown main item tag 0x0 [ 819.406647][ T9] ft260 0003:0403:6030.0024: failed to retrieve chip version [ 819.414646][ T5699] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 819.441256][ T9] ft260 0003:0403:6030.0024: probe with driver ft260 failed with error -71 [ 819.469027][ T5699] usb 1-1: device descriptor read/8, error -71 [ 819.490261][ T9] usb 6-1: USB disconnect, device number 102 [ 819.723872][ T5699] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 819.758131][ T5699] usb 1-1: device descriptor read/8, error -71 [ 819.874706][ T5699] usb usb1-port1: unable to enumerate USB device [ 820.129942][T16212] program syz.4.2706 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 821.366614][ T29] kauditd_printk_skb: 393 callbacks suppressed [ 821.366630][ T29] audit: type=1400 audit(2000000675.187:23070): avc: denied { create } for pid=16245 comm="syz.0.2715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 821.394015][ T5699] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 821.422177][ T29] audit: type=1400 audit(2000000675.187:23071): avc: denied { connect } for pid=16243 comm="syz.5.2714" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 821.428166][T16248] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2714'. [ 821.462746][ T29] audit: type=1400 audit(2000000675.217:23072): avc: denied { setopt } for pid=16245 comm="syz.0.2715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 821.486251][ T29] audit: type=1400 audit(2000000675.217:23073): avc: denied { read write } for pid=16245 comm="syz.0.2715" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 821.510849][ T29] audit: type=1400 audit(2000000675.217:23074): avc: denied { open } for pid=16245 comm="syz.0.2715" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 821.539352][ T29] audit: type=1400 audit(2000000675.217:23075): avc: denied { read write } for pid=16245 comm="syz.0.2715" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 821.564228][ T29] audit: type=1400 audit(2000000675.217:23076): avc: denied { open } for pid=16245 comm="syz.0.2715" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 821.564270][ T9] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 821.588734][ T29] audit: type=1400 audit(2000000675.217:23077): avc: denied { ioctl } for pid=16245 comm="syz.0.2715" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 821.623740][ T29] audit: type=1400 audit(2000000675.227:23078): avc: denied { recv } for pid=5597 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.1.78 dest=59398 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 821.625964][ T5699] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 821.649617][ T5793] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 821.671067][ T29] audit: type=1400 audit(2000000675.237:23079): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.169 src=30006 daddr=10.128.1.78 dest=59398 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 821.684851][ T5699] usb 5-1: config 0 interface 0 has no altsetting 0 [ 821.705323][ T5699] usb 5-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 821.715403][ T5699] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 821.723413][ T5699] usb 5-1: Product: syz [ 821.727694][ T5699] usb 5-1: Manufacturer: syz [ 821.732317][ T5699] usb 5-1: SerialNumber: syz [ 821.743229][ T5699] usb 5-1: config 0 descriptor?? [ 821.756816][ T5699] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 821.767676][ T5699] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 821.778516][ T5699] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 821.787785][ T5699] usb 5-1: media controller created [ 821.802613][ T5699] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 821.814292][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 821.824422][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 821.843436][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 821.853887][ T5793] usb 1-1: Using ep0 maxpacket: 32 [ 821.856579][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 821.862039][ T5793] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 821.894189][ T9] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 821.902840][ T5793] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 821.907493][ T5699] DVB: Unable to find symbol tda10046_attach() [ 821.926840][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 821.928057][ T5793] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 821.936956][ T5699] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 821.944561][ T5793] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 821.959572][ T9] usb 4-1: config 0 descriptor?? [ 821.982701][ T5793] usb 1-1: config 0 descriptor?? [ 821.983394][ T5699] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 822.000229][T16232] 9p: Bad value for 'wfdno' [ 822.021685][ T5699] dvb_usb_m920x 5-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 822.050632][ T5699] usb 5-1: USB disconnect, device number 5 [ 822.154511][ T5792] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 822.313851][ T5792] usb 3-1: Using ep0 maxpacket: 8 [ 822.321009][ T5792] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 822.331959][ T5792] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 822.343922][ T5792] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 822.355838][ T5792] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 822.366611][ T5792] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 822.381697][ T5792] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 822.391142][ T5792] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 822.402768][ T9] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0025/input/input79 [ 822.415225][ T5793] ft260 0003:0403:6030.0026: unknown main item tag 0x0 [ 822.425900][ T5792] usb 3-1: Product: syz [ 822.431475][ T5793] ft260 0003:0403:6030.0026: unknown main item tag 0x0 [ 822.438633][ T5792] usb 3-1: Manufacturer: syz [ 822.443227][ T5792] usb 3-1: SerialNumber: syz [ 822.451956][ T5792] usb 3-1: config 0 descriptor?? [ 822.509113][ T9] microsoft 0003:045E:07DA.0025: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 822.632300][ T5793] ft260 0003:0403:6030.0026: failed to retrieve chip version [ 822.656880][ T5793] ft260 0003:0403:6030.0026: probe with driver ft260 failed with error -71 [ 822.677060][ T5792] radio-si470x 3-1:0.0: DeviceID=0x6f88 ChipID=0x202b [ 822.695103][ T5793] usb 1-1: USB disconnect, device number 83 [ 822.740414][ T5706] usb 4-1: USB disconnect, device number 4 [ 822.928511][ T5792] radio-si470x 3-1:0.0: software version 111, hardware version 136 [ 823.408187][ T5699] hid-generic 0006:0008:0001.0027: unknown main item tag 0x0 [ 823.418137][ T5699] hid-generic 0006:0008:0001.0027: unknown main item tag 0x0 [ 823.427038][ T5699] hid-generic 0006:0008:0001.0027: unknown main item tag 0x0 [ 823.434612][ T5699] hid-generic 0006:0008:0001.0027: unknown main item tag 0x0 [ 823.442143][ T5699] hid-generic 0006:0008:0001.0027: unknown main item tag 0x0 [ 823.451397][ T5699] hid-generic 0006:0008:0001.0027: unknown main item tag 0x0 [ 823.464364][ T5699] hid-generic 0006:0008:0001.0027: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 823.504493][ T9] usb 1-1: new low-speed USB device number 84 using dummy_hcd [ 823.514744][ T5792] radio-si470x 3-1:0.0: si470x_set_report: usb_control_msg returned -110 [ 823.524656][ T5792] radio-si470x 3-1:0.0: submitting int urb failed (-90) [ 823.532476][ T5792] radio-si470x 3-1:0.0: si470x_set_report: usb_control_msg returned -32 [ 823.539487][T16269] fido_id[16269]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 823.544136][ T5792] radio-si470x 3-1:0.0: probe with driver radio-si470x failed with error -22 [ 823.615343][T16272] bridge6: left allmulticast mode [ 823.681441][ T9] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 823.693285][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 823.704631][ T9] usb 1-1: config 0 has no interface number 0 [ 823.830582][ T9] usb 1-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 823.853022][ T9] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 823.872117][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 823.987651][ T9] usb 1-1: config 0 descriptor?? [ 824.003694][ T9] iowarrior 1-1:0.1: no interrupt-in endpoint found [ 824.439812][T16282] NILFS (nullb0): couldn't find nilfs on the device [ 824.475138][ T5792] usb 1-1: USB disconnect, device number 84 [ 824.901667][ T5793] usb 3-1: USB disconnect, device number 4 [ 824.922651][T16285] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 824.935947][T16285] vimc vimc.0: first entity in the pipe 'Scaler' is not a source [ 824.995471][T16288] dvmrp1: entered allmulticast mode [ 825.579793][T16299] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2730'. [ 825.597190][T16302] netlink: 'syz.5.2731': attribute type 1 has an invalid length. [ 825.616035][T16302] netlink: 'syz.5.2731': attribute type 4 has an invalid length. [ 825.628866][T16302] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.2731'. [ 825.885765][ T5706] usb 6-1: new high-speed USB device number 103 using dummy_hcd [ 825.981717][T16310] netlink: 'syz.3.2733': attribute type 1 has an invalid length. [ 826.053838][ T5706] usb 6-1: Using ep0 maxpacket: 16 [ 826.068939][ T5706] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 826.079222][ T5706] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 826.089858][T16310] 8021q: adding VLAN 0 to HW filter on device bond2 [ 826.097033][ T5706] usb 6-1: config 1 interface 0 has no altsetting 0 [ 826.105957][ T5706] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 826.116990][ T5706] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 826.125264][ T5706] usb 6-1: Product: syz [ 826.129571][ T5706] usb 6-1: Manufacturer: syz [ 826.134299][ T5706] usb 6-1: SerialNumber: syz [ 826.147875][ T5706] usb 6-1: 0:2 : does not exist [ 826.424461][ T29] kauditd_printk_skb: 302 callbacks suppressed [ 826.424502][ T29] audit: type=1400 audit(2000000680.247:23382): avc: denied { read } for pid=16315 comm="syz.3.2735" name="ubi_ctrl" dev="devtmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 826.703910][ T29] audit: type=1400 audit(2000000680.257:23383): avc: denied { open } for pid=16315 comm="syz.3.2735" path="/dev/ubi_ctrl" dev="devtmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 826.804647][ T29] audit: type=1400 audit(2000000680.267:23384): avc: denied { read } for pid=16315 comm="syz.3.2735" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 826.853031][ T29] audit: type=1400 audit(2000000680.267:23385): avc: denied { open } for pid=16315 comm="syz.3.2735" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 826.916084][ T29] audit: type=1400 audit(2000000680.267:23386): avc: denied { append } for pid=16315 comm="syz.3.2735" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 826.988159][ T29] audit: type=1400 audit(2000000680.267:23387): avc: denied { ioctl } for pid=16315 comm="syz.3.2735" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x64a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 827.007186][ T5706] usb 6-1: USB disconnect, device number 103 [ 827.025807][T16300] ALSA: mixer_oss: invalid OSS volume '' [ 827.052572][T16300] ALSA: mixer_oss: invalid OSS volume 'udFdsj@Jug0cd' [ 827.067600][ T29] audit: type=1400 audit(2000000680.267:23388): avc: denied { module_request } for pid=16315 comm="syz.3.2735" kmod="netdev-syztnl1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 827.095532][T16300] ALSA: mixer_oss: invalid OSS volume 'NW֓YZS%fV' [ 827.121280][ T29] audit: type=1400 audit(2000000680.337:23389): avc: denied { create } for pid=16300 comm="syz.5.2731" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 827.126291][T16300] ALSA: mixer_oss: invalid OSS volume ''lȿDTBxN' [ 827.151718][T16300] ALSA: mixer_oss: invalid OSS volume 'y' [ 827.159708][T16300] ALSA: mixer_oss: invalid OSS volume '5y}9r~M+3' [ 827.206931][ T29] audit: type=1400 audit(2000000680.347:23390): avc: denied { recv } for pid=16315 comm="syz.3.2735" saddr=10.128.0.169 src=30006 daddr=10.128.1.78 dest=59398 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 827.256220][T16300] ALSA: mixer_oss: invalid OSS volume '϶*kC9d7띦2;"' [ 827.279137][T16300] ALSA: mixer_oss: invalid OSS volume '*ndV8mE5:4' [ 827.305372][T16300] ALSA: mixer_oss: invalid OSS volume 'PKڵ1} {N&Ia 8*ʇ' [ 827.328830][ T29] audit: type=1400 audit(2000000680.357:23391): avc: denied { ioctl } for pid=16315 comm="syz.3.2735" path="/dev/dri/card0" dev="devtmpfs" ino=627 ioctlcmd=0x642d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 827.366820][T16300] ALSA: mixer_oss: invalid OSS volume 'OC"['m/AO^G&-' [ 827.398002][T16300] ALSA: mixer_oss: invalid OSS volume '' [ 827.416099][T16300] ALSA: mixer_oss: invalid OSS volume '@HV-=f#o)U.N' [ 827.445688][T16300] ALSA: mixer_oss: invalid OSS volume '^&8HLV^\LP&҉\' [ 827.464467][T16300] ALSA: mixer_oss: invalid OSS volume '82p<2Iq܁¹UAԺ%A' [ 827.483606][T16300] ALSA: mixer_oss: invalid OSS volume 'Q' [ 827.500144][T16300] ALSA: mixer_oss: invalid OSS volume '$~i[r2LN' [ 827.511689][T16300] ALSA: mixer_oss: invalid OSS volume '#yw܏#YqNȠ' [ 827.532580][T16300] ALSA: mixer_oss: invalid OSS volume '+]OؓOGec9bx'ĮC' [ 827.580696][T16300] ALSA: mixer_oss: invalid OSS volume '_*[bYcq~lr [ 830.853627][ C1] dump_stack_lvl+0x100/0x190 [ 830.853648][ C1] print_report+0x13d/0x4b0 [ 830.853671][ C1] ? __virt_addr_valid+0x239/0x430 [ 830.853690][ C1] ? mcp2221_raw_event+0x103c/0x10a0 [ 830.853716][ C1] kasan_report+0xdf/0x1d0 [ 830.853734][ C1] ? mcp2221_raw_event+0x103c/0x10a0 [ 830.853758][ C1] mcp2221_raw_event+0x103c/0x10a0 [ 830.853782][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 830.853810][ C1] __hid_input_report.constprop.0+0x314/0x460 [ 830.853834][ C1] ? __pfx_mcp2221_raw_event+0x10/0x10 [ 830.853862][ C1] ? ktime_get_mono_fast_ns+0x1c3/0x3f0 [ 830.853883][ C1] hid_irq_in+0x52e/0x6b0 [ 830.853901][ C1] __usb_hcd_giveback_urb+0x38d/0x610 [ 830.853919][ C1] usb_hcd_giveback_urb+0x3ca/0x4a0 [ 830.853935][ C1] dummy_timer+0xda1/0x36c0 [ 830.853956][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 830.853977][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 830.853993][ C1] ? mark_held_locks+0x40/0x70 [ 830.854012][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 830.854031][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 830.854046][ C1] __hrtimer_run_queues+0x470/0xa00 [ 830.854072][ C1] hrtimer_run_softirq+0x17d/0x2c0 [ 830.854096][ C1] handle_softirqs+0x1ea/0xa00 [ 830.854120][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 830.854141][ C1] ? _raw_spin_unlock+0x28/0x50 [ 830.854157][ C1] ? __hrtimer_rearm_deferred+0x9b/0x740 [ 830.854174][ C1] __irq_exit_rcu+0x162/0x210 [ 830.854195][ C1] irq_exit_rcu+0x9/0x30 [ 830.854216][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 830.854235][ C1] [ 830.854241][ C1] [ 830.854247][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 830.854264][ C1] RIP: 0010:lock_acquire+0x5e/0x370 [ 830.854284][ C1] Code: 05 bb 5d 26 12 83 f8 07 0f 87 d9 02 00 00 48 0f a3 05 c6 30 f3 0e 0f 82 a4 02 00 00 8b 35 4e 64 f3 0e 85 f6 0f 85 bf 00 00 00 <48> 8b 44 24 30 65 48 2b 05 5d 5d 26 12 0f 85 ed 02 00 00 48 83 c4 [ 830.854305][ C1] RSP: 0018:ffffc9000484e9b8 EFLAGS: 00000206 [ 830.854318][ C1] RAX: 0000000000000046 RBX: 0000000000000000 RCX: 0000000000000001 [ 830.854328][ C1] RDX: 0000000000000000 RSI: ffffffff8defb538 RDI: ffffffff8c1c3600 [ 830.854338][ C1] RBP: ffff88801fefc998 R08: ffffffff96185700 R09: 000000000000009f [ 830.854349][ C1] R10: 0000000000000200 R11: 0000000000000000 R12: 0000000000000000 [ 830.854359][ C1] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000000 [ 830.854375][ C1] ? inode_init_always_gfp+0xce1/0x1000 [ 830.854399][ C1] _raw_spin_lock+0x2e/0x40 [ 830.854417][ C1] ? new_inode+0x79/0x1c0 [ 830.854433][ C1] new_inode+0x79/0x1c0 [ 830.854449][ C1] debugfs_create_dir+0xc4/0x440 [ 830.854466][ C1] i2c_register_adapter+0x3ff/0x1210 [ 830.854485][ C1] i2c_add_adapter+0x10a/0x1a0 [ 830.854500][ C1] devm_i2c_add_adapter+0x1b/0x90 [ 830.854515][ C1] mcp2221_probe.cold+0x5fe/0xf06 [ 830.854539][ C1] ? __pfx_mcp2221_probe+0x10/0x10 [ 830.854563][ C1] hid_device_probe+0x50e/0x800 [ 830.854581][ C1] ? __pfx_hid_device_probe+0x10/0x10 [ 830.854598][ C1] really_probe+0x241/0xa60 [ 830.854623][ C1] __driver_probe_device+0x22e/0x480 [ 830.854647][ C1] driver_probe_device+0x4c/0x1b0 [ 830.854662][ C1] __device_attach_driver+0x1df/0x340 [ 830.854676][ C1] ? __pfx___device_attach_driver+0x10/0x10 [ 830.854691][ C1] bus_for_each_drv+0x159/0x1e0 [ 830.854711][ C1] ? __pfx_bus_for_each_drv+0x10/0x10 [ 830.854730][ C1] ? lockdep_hardirqs_on+0x78/0x100 [ 830.854749][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 830.854768][ C1] __device_attach+0x1e4/0x4d0 [ 830.854782][ C1] ? __pfx___device_attach+0x10/0x10 [ 830.854797][ C1] ? do_raw_spin_unlock+0x145/0x1e0 [ 830.854820][ C1] device_initial_probe+0xaf/0xd0 [ 830.854836][ C1] bus_probe_device+0x64/0x160 [ 830.854857][ C1] device_add+0x1210/0x1950 [ 830.854874][ C1] ? __pfx_device_add+0x10/0x10 [ 830.854891][ C1] ? debugfs_create_file_full+0x41/0x60 [ 830.854908][ C1] hid_add_device+0x2bf/0x440 [ 830.854923][ C1] ? mutex_init_lockdep+0xf1/0x120 [ 830.854944][ C1] usbhid_probe+0xc3c/0x1230 [ 830.854969][ C1] ? __pfx_usbhid_probe+0x10/0x10 [ 830.854991][ C1] ? mark_held_locks+0x40/0x70 [ 830.855009][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 830.855028][ C1] usb_probe_interface+0x303/0x8f0 [ 830.855053][ C1] ? __pfx_usb_probe_interface+0x10/0x10 [ 830.855076][ C1] really_probe+0x241/0xa60 [ 830.855100][ C1] __driver_probe_device+0x22e/0x480 [ 830.855124][ C1] driver_probe_device+0x4c/0x1b0 [ 830.855138][ C1] __device_attach_driver+0x1df/0x340 [ 830.855153][ C1] ? __pfx___device_attach_driver+0x10/0x10 [ 830.855167][ C1] bus_for_each_drv+0x159/0x1e0 [ 830.855187][ C1] ? __pfx_bus_for_each_drv+0x10/0x10 [ 830.855206][ C1] ? lockdep_hardirqs_on+0x78/0x100 [ 830.855226][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 830.855246][ C1] __device_attach+0x1e4/0x4d0 [ 830.855260][ C1] ? __pfx___device_attach+0x10/0x10 [ 830.855274][ C1] ? do_raw_spin_unlock+0x145/0x1e0 [ 830.855304][ C1] device_initial_probe+0xaf/0xd0 [ 830.855323][ C1] bus_probe_device+0x64/0x160 [ 830.855346][ C1] device_add+0x1210/0x1950 [ 830.855365][ C1] ? __pfx_device_add+0x10/0x10 [ 830.855386][ C1] usb_set_configuration+0xd97/0x1c60 [ 830.855413][ C1] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 830.855431][ C1] usb_generic_driver_probe+0xa1/0xe0 [ 830.855450][ C1] usb_probe_device+0xef/0x400 [ 830.855471][ C1] ? __pfx_usb_probe_device+0x10/0x10 [ 830.855492][ C1] really_probe+0x241/0xa60 [ 830.855515][ C1] __driver_probe_device+0x22e/0x480 [ 830.855538][ C1] ? usb_driver_applicable+0x1c7/0x220 [ 830.855562][ C1] driver_probe_device+0x4c/0x1b0 [ 830.855577][ C1] __device_attach_driver+0x1df/0x340 [ 830.855592][ C1] ? __pfx___device_attach_driver+0x10/0x10 [ 830.855606][ C1] bus_for_each_drv+0x159/0x1e0 [ 830.855625][ C1] ? __pfx_bus_for_each_drv+0x10/0x10 [ 830.855645][ C1] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 830.855664][ C1] __device_attach+0x1e4/0x4d0 [ 830.855678][ C1] ? __pfx___device_attach+0x10/0x10 [ 830.855692][ C1] ? do_raw_spin_unlock+0x145/0x1e0 [ 830.855716][ C1] device_initial_probe+0xaf/0xd0 [ 830.855730][ C1] bus_probe_device+0x64/0x160 [ 830.855752][ C1] device_add+0x1210/0x1950 [ 830.855769][ C1] ? __pfx_device_add+0x10/0x10 [ 830.855785][ C1] ? usb_detect_static_quirks+0x335/0x3e0 [ 830.855807][ C1] usb_new_device.cold+0x685/0x115c [ 830.855828][ C1] ? do_raw_spin_lock+0x128/0x260 [ 830.855849][ C1] ? __pfx_usb_new_device+0x10/0x10 [ 830.855870][ C1] ? mark_held_locks+0x40/0x70 [ 830.855890][ C1] hub_event+0x314d/0x4af0 [ 830.855918][ C1] ? __pfx_hub_event+0x10/0x10 [ 830.855938][ C1] ? __list_del_entry_valid_or_report+0x120/0x1d0 [ 830.855962][ C1] ? rcu_is_watching+0x12/0xc0 [ 830.855986][ C1] process_one_work+0xa0e/0x1980 [ 830.856010][ C1] ? __pfx_process_one_work+0x10/0x10 [ 830.856032][ C1] ? __pfx_hub_event+0x10/0x10 [ 830.856053][ C1] worker_thread+0x5ef/0xe50 [ 830.856075][ C1] ? kthread+0x13a/0x450 [ 830.856093][ C1] ? __pfx_worker_thread+0x10/0x10 [ 830.856112][ C1] kthread+0x370/0x450 [ 830.856129][ C1] ? __pfx_kthread+0x10/0x10 [ 830.856147][ C1] ret_from_fork+0x72b/0xd50 [ 830.856167][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 830.856186][ C1] ? rcu_is_watching+0x12/0xc0 [ 830.856209][ C1] ? __switch_to+0x800/0x1100 [ 830.856231][ C1] ? __pfx_kthread+0x10/0x10 [ 830.856249][ C1] ret_from_fork_asm+0x1a/0x30 [ 830.856276][ C1] [ 830.856282][ C1] [ 831.613719][ C1] The buggy address belongs to the physical page: [ 831.620108][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888077d8fc80 pfn:0x77d8f [ 831.630162][ C1] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 831.637255][ C1] raw: 00fff00000000000 dead000000000100 dead000000000122 0000000000000000 [ 831.645817][ C1] raw: ffff888077d8fc80 0000000000000000 00000000ffffffff 0000000000000000 [ 831.654374][ C1] page dumped because: kasan: bad access detected [ 831.660759][ C1] page_owner tracks the page as freed [ 831.666101][ C1] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x29c2(GFP_NOWAIT|__GFP_HIGHMEM|__GFP_IO|__GFP_FS|__GFP_ZERO), pid 16326, tgid 16326 (syz.3.2737), ts 827632263523, free_ts 828236216745 [ 831.685874][ C1] post_alloc_hook+0x153/0x170 [ 831.690632][ C1] get_page_from_freelist+0x11a6/0x33b0 [ 831.696167][ C1] __alloc_frozen_pages_noprof+0x27c/0x2bc0 [ 831.702049][ C1] alloc_pages_mpol+0x1fb/0x540 [ 831.706880][ C1] alloc_pages_noprof+0x1a/0x160 [ 831.711800][ C1] __vmalloc_node_range_noprof+0xf9a/0x1630 [ 831.717676][ C1] __vmalloc_node_noprof+0xad/0xf0 [ 831.722773][ C1] copy_process+0x7fb/0x7e00 [ 831.727344][ C1] kernel_clone+0x12e/0x9c0 [ 831.731827][ C1] __do_sys_clone3+0x214/0x290 [ 831.736569][ C1] do_syscall_64+0x10b/0xf80 [ 831.741145][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 831.747015][ C1] page last free pid 5699 tgid 5699 stack trace: [ 831.753316][ C1] __free_frozen_pages+0x747/0x1040 [ 831.758509][ C1] vfree+0x15f/0x8d0 [ 831.762387][ C1] delayed_vfree_work+0x56/0x80 [ 831.767218][ C1] process_one_work+0xa0e/0x1980 [ 831.772155][ C1] worker_thread+0x5ef/0xe50 [ 831.776726][ C1] kthread+0x370/0x450 [ 831.780780][ C1] ret_from_fork+0x72b/0xd50 [ 831.785443][ C1] ret_from_fork_asm+0x1a/0x30 [ 831.790717][ C1] [ 831.793033][ C1] Memory state around the buggy address: [ 831.798640][ C1] ffff888077d8fe80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 831.806692][ C1] ffff888077d8ff00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 831.814732][ C1] >ffff888077d8ff80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 831.822765][ C1] ^ [ 831.830716][ C1] ffff888077d90000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 831.838755][ C1] ffff888077d90080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 831.846793][ C1] ================================================================== [ 831.854831][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 831.862005][ C1] CPU: 1 UID: 0 PID: 5793 Comm: kworker/1:8 Tainted: G L syzkaller #0 PREEMPT(full) [ 831.872924][ C1] Tainted: [L]=SOFTLOCKUP [ 831.877225][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 831.887260][ C1] Workqueue: usb_hub_wq hub_event [ 831.892283][ C1] Call Trace: [ 831.895549][ C1] [ 831.898373][ C1] dump_stack_lvl+0x100/0x190 [ 831.903032][ C1] vpanic+0x552/0x970 [ 831.907000][ C1] ? __pfx_vpanic+0x10/0x10 [ 831.911485][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 831.916490][ C1] ? mcp2221_raw_event+0x103c/0x10a0 [ 831.921767][ C1] panic+0xd1/0xe0 [ 831.925467][ C1] ? __pfx_panic+0x10/0x10 [ 831.929866][ C1] ? end_report.part.0+0x23/0x90 [ 831.934791][ C1] ? rcu_is_watching+0x12/0xc0 [ 831.939545][ C1] ? end_report.part.0+0x23/0x90 [ 831.944472][ C1] check_panic_on_warn.cold+0x19/0x34 [ 831.949826][ C1] end_report.part.0+0x3a/0x90 [ 831.954575][ C1] kasan_report.cold+0xe/0x18 [ 831.959239][ C1] ? mcp2221_raw_event+0x103c/0x10a0 [ 831.964515][ C1] mcp2221_raw_event+0x103c/0x10a0 [ 831.969617][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 831.975406][ C1] __hid_input_report.constprop.0+0x314/0x460 [ 831.981455][ C1] ? __pfx_mcp2221_raw_event+0x10/0x10 [ 831.987597][ C1] ? ktime_get_mono_fast_ns+0x1c3/0x3f0 [ 831.993127][ C1] hid_irq_in+0x52e/0x6b0 [ 831.997439][ C1] __usb_hcd_giveback_urb+0x38d/0x610 [ 832.002791][ C1] usb_hcd_giveback_urb+0x3ca/0x4a0 [ 832.007985][ C1] dummy_timer+0xda1/0x36c0 [ 832.012477][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 832.018269][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 832.023193][ C1] ? mark_held_locks+0x40/0x70 [ 832.027941][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 832.033729][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 832.038651][ C1] __hrtimer_run_queues+0x470/0xa00 [ 832.043851][ C1] hrtimer_run_softirq+0x17d/0x2c0 [ 832.048949][ C1] handle_softirqs+0x1ea/0xa00 [ 832.053703][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 832.058976][ C1] ? _raw_spin_unlock+0x28/0x50 [ 832.063808][ C1] ? __hrtimer_rearm_deferred+0x9b/0x740 [ 832.069422][ C1] __irq_exit_rcu+0x162/0x210 [ 832.074085][ C1] irq_exit_rcu+0x9/0x30 [ 832.078316][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 832.083932][ C1] [ 832.086844][ C1] [ 832.089755][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 832.095730][ C1] RIP: 0010:lock_acquire+0x5e/0x370 [ 832.100913][ C1] Code: 05 bb 5d 26 12 83 f8 07 0f 87 d9 02 00 00 48 0f a3 05 c6 30 f3 0e 0f 82 a4 02 00 00 8b 35 4e 64 f3 0e 85 f6 0f 85 bf 00 00 00 <48> 8b 44 24 30 65 48 2b 05 5d 5d 26 12 0f 85 ed 02 00 00 48 83 c4 [ 832.120504][ C1] RSP: 0018:ffffc9000484e9b8 EFLAGS: 00000206 [ 832.126551][ C1] RAX: 0000000000000046 RBX: 0000000000000000 RCX: 0000000000000001 [ 832.134501][ C1] RDX: 0000000000000000 RSI: ffffffff8defb538 RDI: ffffffff8c1c3600 [ 832.142451][ C1] RBP: ffff88801fefc998 R08: ffffffff96185700 R09: 000000000000009f [ 832.150402][ C1] R10: 0000000000000200 R11: 0000000000000000 R12: 0000000000000000 [ 832.158370][ C1] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000000 [ 832.166325][ C1] ? inode_init_always_gfp+0xce1/0x1000 [ 832.171858][ C1] _raw_spin_lock+0x2e/0x40 [ 832.176343][ C1] ? new_inode+0x79/0x1c0 [ 832.180654][ C1] new_inode+0x79/0x1c0 [ 832.184794][ C1] debugfs_create_dir+0xc4/0x440 [ 832.189717][ C1] i2c_register_adapter+0x3ff/0x1210 [ 832.194987][ C1] i2c_add_adapter+0x10a/0x1a0 [ 832.199731][ C1] devm_i2c_add_adapter+0x1b/0x90 [ 832.204736][ C1] mcp2221_probe.cold+0x5fe/0xf06 [ 832.209748][ C1] ? __pfx_mcp2221_probe+0x10/0x10 [ 832.214861][ C1] hid_device_probe+0x50e/0x800 [ 832.219697][ C1] ? __pfx_hid_device_probe+0x10/0x10 [ 832.225053][ C1] really_probe+0x241/0xa60 [ 832.229546][ C1] __driver_probe_device+0x22e/0x480 [ 832.234823][ C1] driver_probe_device+0x4c/0x1b0 [ 832.239828][ C1] __device_attach_driver+0x1df/0x340 [ 832.245181][ C1] ? __pfx___device_attach_driver+0x10/0x10 [ 832.251054][ C1] bus_for_each_drv+0x159/0x1e0 [ 832.255891][ C1] ? __pfx_bus_for_each_drv+0x10/0x10 [ 832.261247][ C1] ? lockdep_hardirqs_on+0x78/0x100 [ 832.266443][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 832.272238][ C1] __device_attach+0x1e4/0x4d0 [ 832.276980][ C1] ? __pfx___device_attach+0x10/0x10 [ 832.282247][ C1] ? do_raw_spin_unlock+0x145/0x1e0 [ 832.287436][ C1] device_initial_probe+0xaf/0xd0 [ 832.292453][ C1] bus_probe_device+0x64/0x160 [ 832.297207][ C1] device_add+0x1210/0x1950 [ 832.301695][ C1] ? __pfx_device_add+0x10/0x10 [ 832.306529][ C1] ? debugfs_create_file_full+0x41/0x60 [ 832.312059][ C1] hid_add_device+0x2bf/0x440 [ 832.316717][ C1] ? mutex_init_lockdep+0xf1/0x120 [ 832.321813][ C1] usbhid_probe+0xc3c/0x1230 [ 832.326392][ C1] ? __pfx_usbhid_probe+0x10/0x10 [ 832.331404][ C1] ? mark_held_locks+0x40/0x70 [ 832.336149][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 832.341939][ C1] usb_probe_interface+0x303/0x8f0 [ 832.347042][ C1] ? __pfx_usb_probe_interface+0x10/0x10 [ 832.352663][ C1] really_probe+0x241/0xa60 [ 832.357157][ C1] __driver_probe_device+0x22e/0x480 [ 832.362432][ C1] driver_probe_device+0x4c/0x1b0 [ 832.367436][ C1] __device_attach_driver+0x1df/0x340 [ 832.372789][ C1] ? __pfx___device_attach_driver+0x10/0x10 [ 832.378673][ C1] bus_for_each_drv+0x159/0x1e0 [ 832.383512][ C1] ? __pfx_bus_for_each_drv+0x10/0x10 [ 832.388871][ C1] ? lockdep_hardirqs_on+0x78/0x100 [ 832.394055][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 832.399854][ C1] __device_attach+0x1e4/0x4d0 [ 832.404597][ C1] ? __pfx___device_attach+0x10/0x10 [ 832.409864][ C1] ? do_raw_spin_unlock+0x145/0x1e0 [ 832.415054][ C1] device_initial_probe+0xaf/0xd0 [ 832.420059][ C1] bus_probe_device+0x64/0x160 [ 832.424834][ C1] device_add+0x1210/0x1950 [ 832.429320][ C1] ? __pfx_device_add+0x10/0x10 [ 832.434154][ C1] usb_set_configuration+0xd97/0x1c60 [ 832.439520][ C1] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 832.445569][ C1] usb_generic_driver_probe+0xa1/0xe0 [ 832.450926][ C1] usb_probe_device+0xef/0x400 [ 832.455675][ C1] ? __pfx_usb_probe_device+0x10/0x10 [ 832.461039][ C1] really_probe+0x241/0xa60 [ 832.465535][ C1] __driver_probe_device+0x22e/0x480 [ 832.470813][ C1] ? usb_driver_applicable+0x1c7/0x220 [ 832.476262][ C1] driver_probe_device+0x4c/0x1b0 [ 832.481271][ C1] __device_attach_driver+0x1df/0x340 [ 832.487147][ C1] ? __pfx___device_attach_driver+0x10/0x10 [ 832.493020][ C1] bus_for_each_drv+0x159/0x1e0 [ 832.497861][ C1] ? __pfx_bus_for_each_drv+0x10/0x10 [ 832.503230][ C1] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 832.509020][ C1] __device_attach+0x1e4/0x4d0 [ 832.513765][ C1] ? __pfx___device_attach+0x10/0x10 [ 832.519036][ C1] ? do_raw_spin_unlock+0x145/0x1e0 [ 832.524239][ C1] device_initial_probe+0xaf/0xd0 [ 832.529338][ C1] bus_probe_device+0x64/0x160 [ 832.534115][ C1] device_add+0x1210/0x1950 [ 832.538603][ C1] ? __pfx_device_add+0x10/0x10 [ 832.543447][ C1] ? usb_detect_static_quirks+0x335/0x3e0 [ 832.549157][ C1] usb_new_device.cold+0x685/0x115c [ 832.554345][ C1] ? do_raw_spin_lock+0x128/0x260 [ 832.559357][ C1] ? __pfx_usb_new_device+0x10/0x10 [ 832.564540][ C1] ? mark_held_locks+0x40/0x70 [ 832.569303][ C1] hub_event+0x314d/0x4af0 [ 832.573714][ C1] ? __pfx_hub_event+0x10/0x10 [ 832.578463][ C1] ? __list_del_entry_valid_or_report+0x120/0x1d0 [ 832.584870][ C1] ? rcu_is_watching+0x12/0xc0 [ 832.589625][ C1] process_one_work+0xa0e/0x1980 [ 832.594556][ C1] ? __pfx_process_one_work+0x10/0x10 [ 832.599921][ C1] ? __pfx_hub_event+0x10/0x10 [ 832.604674][ C1] worker_thread+0x5ef/0xe50 [ 832.609273][ C1] ? kthread+0x13a/0x450 [ 832.613504][ C1] ? __pfx_worker_thread+0x10/0x10 [ 832.618599][ C1] kthread+0x370/0x450 [ 832.622666][ C1] ? __pfx_kthread+0x10/0x10 [ 832.627243][ C1] ret_from_fork+0x72b/0xd50 [ 832.631824][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 832.636921][ C1] ? rcu_is_watching+0x12/0xc0 [ 832.641674][ C1] ? __switch_to+0x800/0x1100 [ 832.646341][ C1] ? __pfx_kthread+0x10/0x10 [ 832.650939][ C1] ret_from_fork_asm+0x1a/0x30 [ 832.655697][ C1] [ 832.659224][ C1] Kernel Offset: disabled [ 832.663523][ C1] Rebooting in 86400 seconds..