last executing test programs: 2m45.33757236s ago: executing program 4 (id=74): r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002bc0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000083900000008000300", @ANYRES32=r3, @ANYBLOB="14005a800f000480050001"], 0x30}, 0x1, 0x0, 0x0, 0x4810}, 0x10) r4 = open(&(0x7f00000000c0)='./bus\x00', 0x18d03e, 0x0) r5 = open(&(0x7f00000004c0)='./bus\x00', 0xc2802, 0x100) ftruncate(r5, 0x1002008002) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r4, 0x0) r6 = gettid() process_vm_writev(r6, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x2b, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) fallocate(r0, 0x0, 0x0, 0x400001) 2m43.613358576s ago: executing program 4 (id=77): syz_usb_connect$cdc_ncm(0x3, 0x72, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7"], 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x0, 0x5, 0x717e387b, 0x40, "1ae302020000deff17031213a5bd00", 0x9, 0x2}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000001e40), r2) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140), 0x20500, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)={@local, @random="0000080e00", @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, '\x00', 0x14, 0x6, 0xff, @dev={0xfe, 0x80, '\x00', 0x39}, @local, {[], {{0x4e26, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0xc2, 0x7, 0x0, 0x3}}}}}}}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0) ioctl$TCSETS(r0, 0x404c4701, &(0x7f00000002c0)={0x0, 0x0, 0x400000, 0x1a01c5c6, 0x54, "5bcc19a3894df7ecc10d1c8f0000000400"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0xf9) r4 = syz_io_uring_setup(0xd03, &(0x7f0000002900)={0x0, 0xf25d, 0x10, 0x0, 0x3}, &(0x7f0000000440), &(0x7f0000000140), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_PROBE(r4, 0x23, 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000001c0)=0x9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect$midi(0x0, 0x24, &(0x7f0000002200)=ANY=[@ANYBLOB="120100030000004030144b474000010203010902120001015e"], 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') process_vm_writev(r5, &(0x7f0000000580)=[{&(0x7f0000000080)=""/36, 0x24}], 0x1, &(0x7f0000000100), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r3, 0xc0305615, &(0x7f0000000200)={0x0, {0x80000000, 0x8}}) ioctl$TIOCSTI(r0, 0x5412, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp\x00') pread64(r6, &(0x7f0000000180)=""/43, 0xfd8a, 0x3c) socket$nl_netfilter(0x10, 0x3, 0xc) 2m39.556980436s ago: executing program 4 (id=92): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0xe, &(0x7f0000000000)) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x15d74000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r3, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r3, 0x2) accept4(r3, 0x0, 0x0, 0x0) 2m38.478025992s ago: executing program 4 (id=96): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000040)={0x191, 0x258, 0x1e0, 0x2000, 0x32, 0x1, 0x0, 0x0, {}, {0x0, 0x0, 0x1001}, {0x0, 0x0, 0x1}, {}, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x26, 0x0, 0x0, 0x4}) 2m38.248180614s ago: executing program 4 (id=100): mkdir(&(0x7f0000000040)='./file0\x00', 0x65) r0 = inotify_init1(0x800) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x1d, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000001000000b708000000000000dbaaf8fff1000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000006a000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2}, 0xc) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r7 = dup(r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r7, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r5, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) inotify_add_watch(r0, &(0x7f0000000240)='.\x00', 0x60000526) inotify_add_watch(r0, &(0x7f0000005780)='./file0\x00', 0x44000201) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8e) 2m36.251064981s ago: executing program 4 (id=106): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x4, &(0x7f0000006680)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x4e76, 0x5, &(0x7f0000000000)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) socket(0x10, 0x3, 0x0) eventfd2(0x3, 0x80801) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x2228, 0x1, 0x1, 0x3b5}, 0x0, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) socket$inet_udp(0x2, 0x2, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_9p2000}]}}) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r1, @ANYRESHEX=r2], 0x15) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x2, 0x9, &(0x7f0000000040)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) pivot_root(0x0, 0x0) munmap(&(0x7f0000468000/0x4000)=nil, 0x4000) 2m20.897098451s ago: executing program 32 (id=106): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x4, &(0x7f0000006680)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x4e76, 0x5, &(0x7f0000000000)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) socket(0x10, 0x3, 0x0) eventfd2(0x3, 0x80801) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x2228, 0x1, 0x1, 0x3b5}, 0x0, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) socket$inet_udp(0x2, 0x2, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_9p2000}]}}) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r1, @ANYRESHEX=r2], 0x15) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x2, 0x9, &(0x7f0000000040)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) pivot_root(0x0, 0x0) munmap(&(0x7f0000468000/0x4000)=nil, 0x4000) 13.120056422s ago: executing program 3 (id=530): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7000fc"], 0x34}, 0x1, 0x0, 0x0, 0x20004080}, 0x4000000) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x8801, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0x759, 0x7, 0x7d, 0x7, 0x8000, 0x4, 0x2}, 0x0, &(0x7f0000000080)={0x3fc, 0x6, 0xffffffffffffffff, 0x2000000000000003, 0x6, 0x10, 0x80000006}, 0x0, 0x0) 12.01430705s ago: executing program 3 (id=532): socket$inet6_tcp(0xa, 0x1, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400ff0160291d000905", @ANYRES8], 0x0) syz_open_dev$audion(&(0x7f00000002c0), 0x3, 0x408001) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) accept4(r0, 0x0, 0x0, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x20280, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000080)='sysfs\x00', 0xa728a9, 0x0) mkdir(&(0x7f0000000200)='./bus\x00', 0x10) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000021c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) rmdir(&(0x7f0000000280)='./file0\x00') chroot(&(0x7f0000000000)='./bus\x00') openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r4 = dup2(r3, r3) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f00000001c0)=0x2) read$FUSE(r4, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) 11.146135668s ago: executing program 1 (id=536): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301410009210008003c5b010009058103"], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0xc0686611, &(0x7f0000000180)={0x10065, 0x0, 0x3f, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') (async) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301410009210008003c5b010009058103"], 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0xc0686611, &(0x7f0000000180)={0x10065, 0x0, 0x3f, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) (async) 11.056141855s ago: executing program 2 (id=537): ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000040)={0x191, 0x78, 0xa0, 0x300, 0x32, 0x1c0, 0x0, 0x0, {0x0, 0x3e000000, 0x7000000}, {}, {}, {}, 0x0, 0x40, 0x0, 0x0, 0x0, 0x6, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, 0x8, 0x4, 0x0, 0x2, 0xa}) r0 = syz_open_dev$dvb_frontend(&(0x7f00000015c0), 0x0, 0x400) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff30}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r3 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r3, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg$inet6(r1, &(0x7f0000000a80)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x4d7, @rand_addr=' \x01\x00', 0x3}, 0x1c, &(0x7f0000000900)=[{&(0x7f0000000400)="fc", 0x1}], 0x1}}], 0x1, 0x4c040) ioctl$FE_GET_PROPERTY(r0, 0x80106f53, &(0x7f0000000280)={0x34, &(0x7f0000000000)=[{0x46, '\x00', @data=0x401, 0x7fffffff}]}) 9.877407931s ago: executing program 2 (id=540): r0 = socket$pptp(0x18, 0x1, 0x2) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000000, 0x100010, r0, 0x5cd7a000) r1 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000d00)={0x0, &(0x7f0000000880)=[@wrmsr={0x65, 0x20, {0xdc1, 0xbc27}}, @nested_vmlaunch={0x12f, 0x18, 0x3}, @nested_amd_invlpga={0x17d, 0x20, {0xeeeff000, 0x350c}}], 0x58}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000a8e000/0x18000)=nil, &(0x7f0000000dc0)=[@text16={0x10, &(0x7f0000000d40)="643e660f350f01d12e0f01c2660f6fe866b9800000c00f326635000100000f30d2790064660f3809f60fd2b0f3ff66b8080000000f23c00f21f8663500000c000f23f80f01f4", 0x46}], 0x1, 0x8, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x87) socket$l2tp6(0xa, 0x2, 0x73) r3 = socket$inet6(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/sockstat6\x00') keyctl$dh_compute(0x21, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff6000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0, r3}, 0x68) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) set_mempolicy(0x4005, 0x0, 0x4) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x2f00020b, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7515, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010000000"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r5, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000fd3fffff000000000000000000000000007b8af8ff00000000b7080000683200007b8af0ff00000000bfa1000000000000070100000007040000f0ffffffb702000008000000182300"/89, @ANYRES32=r6, @ANYBLOB="00000000000f0000b70500000800000085000000760000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) inotify_init1(0x0) 9.704104842s ago: executing program 5 (id=541): close(0xffffffffffffffff) 9.541639806s ago: executing program 5 (id=543): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[], 0x0}, 0x94) (async) r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$setperm(0x5, r0, 0x52b242d) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @auto=[0x39, 0x31, 0x30, 0x61, 0x63, 0x63, 0x35, 0x64, 0x33, 0x30, 0x0, 0x39, 0x61, 0x39, 0x34, 0x66]}, &(0x7f0000000100)={0x0, "485f544cec6b223ae07a286fffe2451f4fb5d4f21858a3bf6d24a210968a29878affaa0cfa2805956eea0d3ad8cc0aec8c09fd3502c7feff2523f12a4b991800", 0x31}, 0x48, r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000"], 0x48) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r2}, 0x4) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r1, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0920000000000035090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000020000b7050000080000001c00000000000000bf980000000000000d080000000000008500000006000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) 8.47984661s ago: executing program 5 (id=544): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) r1 = socket(0x10, 0x3, 0x80000000) recvmmsg$unix(r1, &(0x7f00000037c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1800000b000000b3000000000000000007000000", @ANYRES32=0x0], 0x18}}, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0xa, &(0x7f0000000100)=0xf6, 0x4) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) pipe(&(0x7f0000000000)) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'syz_tun\x00'}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x8000) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x82, 0x0, &(0x7f0000000000)) r6 = socket(0x1e, 0x4, 0x0) recvmmsg$unix(r6, &(0x7f00000007c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000000, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mremap(&(0x7f0000fa4000/0x2000)=nil, 0x2000, 0x13000, 0x3, &(0x7f0000fed000/0x13000)=nil) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r7 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r7, &(0x7f0000000840)=[{0x0}], 0x1) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0x10, &(0x7f0000000800)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [@call={0x85, 0x0, 0x0, 0xa0}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r9, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b80a000500000000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r4, @ANYRES32, @ANYBLOB='\x00'/18], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 7.753090881s ago: executing program 1 (id=546): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000300), 0x80080, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='\x00', 0x88500) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000040)={0xba, 0x2, "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"}) bind$tipc(r0, 0x0, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002280)=[{&(0x7f0000000340)="7a1e587c90811fd3dacf78a792bb5257a69eac0d0a740abd601753d5091e48175f42b7d1f2ecf76098d6304efaead09bac016ede6f2170e63661c03aa78b65f1700cba7f93ced0af9cd9f3bd3c9a9b8ca30a14884005eb5e46a8b5b29a549f2aa41c59e9200822bf42f7e65315c6ce720756d929e309ef544e90564fecdce1dfbfa298", 0x83}, {&(0x7f0000000700)="e4d2ffee0bf454b78d6992cf1ec54d8e806976df434fb2c3f033c5409b020000000000000056e3b504dfa31b705443d00646cbb373593ac8ba86e5e7f416cb4ab5a69a1eca2cc905000000bc278887df69db0fda02b01f53eac6f30e0200000023bd689f380b8f8cb1c35e2016a421e8a1a35812eef1d920015f908257d482f27fad896a06ea4f319c592853af110a8ffa619987067883a5c9dd6c8d1943c6d6270c3ce30591e0ea04d65a233e39da0c8ca8175c8fbdff05000000000000002122552bf573385067cf432bb2991adb118e931d2a8aa29c5bebbbef6659", 0xdd}, {&(0x7f0000000500)="721806b774edeacca2cc79e39336e213f4395efeff4013c81385974b5ce0e256d8154ed8d2cd4cfd56268a25d661d38f5d4cb52b6c2451087a9c0e37c10ba06a5579951c3ac4af9c727884bdd5c91224bd4a8131c670b4199cc21c1851e14dfc763bcdb84e388e3ffb09a584848a9e98d370a6c10a2437c27e0a0000e8b8570955", 0x81}, {&(0x7f00000006c0)="51f3817e45d3e6446c8eb191", 0xc}, {&(0x7f0000000800)="c89bf56a3d2892b1634ca83dbeffa7f7ef7420d440a6c239818bcd33efed5cef11962d3c96608326c743ec8c4e941772f0026fa008e9ce858bf70d6228b02aebedeba698509a4f1f0f468f36cc90332853428a55f065a5de1d465cf9e440284af6ae809da4963f456b67a152f25d168c9f7b0cb5f6ed7cd24a62373cb25d06b0899174577850a4afdc57f0bc6f83609379b2460253b30167", 0x98}, {&(0x7f0000001180)="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", 0x1000}, {&(0x7f0000002180)="e18561100a42fc9d3f306501e9b108a10e96e9a00b6a1c80abcada9b90345214b562d339395d048329f2d7536625b116311b6ee27c97ba31549e74868abced5e7e245b298d578f3ab1aef973ee3cdc5fa2003fb5dda2703fcebc1704bba1c059008366c44d3aa57a847f60055560571c9495ef863fd862aab780918699fb404baba6616fccfcfe1603a0b7c5089a0ba281eec98538e9aacba07d2d27d889fb0e0c228ec1080d5079eab525cf85ad901bb495f041f645d7e8aa11d389083d469370", 0xc1}], 0x7, 0x0, 0x0, 0x11}, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@ipv6_newrule={0x74, 0x20, 0x400, 0x70bd2b, 0x25dfdbfe, {0xa, 0x20, 0x10, 0x29, 0x5, 0x0, 0x0, 0x8, 0x11}, [@FIB_RULE_POLICY=@FRA_TABLE={0x8, 0xf, 0xd330}, @FRA_DST={0x14, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}}, @FRA_DST={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x31}}, @FRA_SRC={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @FRA_DST={0x14, 0x1, @loopback}]}, 0x74}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@getqdisc={0x38, 0x26, 0x300, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x15, 0xfff1}, {0x3, 0xb}, {0xa, 0x3}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x50}]}, 0x38}, 0x1, 0x0, 0x0, 0x50040}, 0x0) kexec_load(0x3, 0x7, &(0x7f00000005c0)=[{&(0x7f0000000000), 0x0, 0x5, 0xff}, {&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb9227524d4fe6b621a19823457d04c399283edbac755852623c82f7206d26e918a2981c8f68476969bf8c4bcd37ba24e4ba1683339879a11b854a7478f898805f327af12eaab8ac918c201b7f932e124796f1aba03e031312bd7e67403651abac282b310f420dbcdea31d52854783d6952a2a7b10f3e45715203107f8ce516d99c8c7db918e0989ef123cc524fa8ae0af5c952de542a268179439f62e20fb410df0a4c2e54ec355436d7cf9989fa7b13df2f67b", 0xe7, 0x5, 0xffffffff}, {&(0x7f0000000200), 0x0, 0x5, 0x4}, {0x0, 0x0, 0x100, 0x9}, {0x0, 0x0, 0x7, 0x2}, {0x0, 0x0, 0x2, 0xfffffffffffffffa}, {0x0, 0x0, 0x5, 0x6}], 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) connect$inet(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x8) r4 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000000340), 0x0, 0x8000) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f00000005c0)={0x0, 0x1}, 0x8) io_uring_setup(0x7a98, &(0x7f0000000400)={0x0, 0x6d47, 0x800, 0x4, 0x800035e}) 7.617771531s ago: executing program 2 (id=547): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x4) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) (async) setfsgid(0xee00) (async) setfsgid(0xee00) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2000010, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) read$FUSE(r0, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x9, 0x1100, 0x40, 0x0, 0x6, 0x0, 0x0, 0x0, 0x40}}, 0x50) (async) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="2d0000000400000000000000000000000100000000000000000000800000230005"], 0x2d) 6.707755728s ago: executing program 5 (id=549): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804dd00000000000001090224000100000000090402000103000000092105000001220500090581030002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r1 = gettid() rt_sigtimedwait(&(0x7f0000000000)={[0xffffffffffffffff]}, &(0x7f0000000280), 0x0, 0x8) timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r1}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x6}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)="10") 6.442202775s ago: executing program 1 (id=550): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000300), 0x12) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) r3 = syz_usb_connect$hid(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201500009022400010000c00009040000ff030001000921080004010d0000000581032004038100"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000300)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB=' 16'], 0x0, 0x0, 0x0, 0x0}, 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000001"], 0x6c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) readv(r4, &(0x7f0000000040)=[{&(0x7f0000000180)=""/152, 0x98}], 0x1) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 6.360480094s ago: executing program 3 (id=551): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902"], 0x0) r1 = socket$kcm(0x11, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @cb_func={0x18, 0x7, 0x4, 0x0, 0xfffffffffffffffc}, @generic={0x65, 0x8, 0x0, 0xfffa}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @exit]}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) sendmsg$kcm(r1, &(0x7f0000001780)={&(0x7f00000003c0)=@caif, 0x80, 0x0}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0xf4, 0xb1, 0x6a, 0x20, 0xfc5, 0x1227, 0xf304, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0xf7, 0x50, 0x18, "", [{{0x9, 0x4, 0xaa, 0x4, 0x0, 0x99, 0x46, 0xe5, 0x6}}]}}]}}, 0x0) syz_usb_disconnect(r0) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r5 = gettid() mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000004, 0x6031, 0xffffffffffffffff, 0x5d686000) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$TCSETS(r6, 0x5402, 0x0) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4006, &(0x7f0000000000)=0x4, 0x5, 0x2) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc), 0x80, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x17) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x14}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR={0xa, 0x9, @local}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x48}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x8, [@struct={0x6, 0x1, 0x0, 0xf, 0x0, 0x1efc, [{0x9, 0x4, 0x6}]}]}, {0x0, [0x2e, 0x5f, 0x0, 0x0, 0x0, 0x5f]}}, 0x0, 0x38, 0x0, 0x0, 0x2}, 0x28) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f0000000100)) syz_usb_connect$uac1(0x5, 0x72, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0xa7, 0x17cc, 0xd8d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0x0, 0x50, 0x2, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x3, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x7, 0x5f, 0x0, {0x7, 0x25, 0x1, 0xc, 0xa, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x2, 0x1, {0x7, 0x25, 0x1, 0x4, 0x5, 0x4cf6}}}}}}}}]}}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0}) memfd_secret(0x0) 5.927915516s ago: executing program 2 (id=552): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="640000000206030000000000000000000000000005000100070000000900020073797a310000000014000780050015000000000008001240000000000500050002000000050004000000000016000300686173683a6e6574"], 0x64}}, 0x0) sendmsg(r0, &(0x7f0000000000)={0x0, 0x46, &(0x7f00000000c0), 0x1}, 0x40000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_create_resource$binfmt(0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x4000000000001, 0x0, 0x1, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x80, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r1, 0x804c4700, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x0, "3eccd8f9d20000000000001000000200000500"}) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x8) ioctl$KVM_SET_GSI_ROUTING(r3, 0x4008ae6a, &(0x7f0000001600)={0x2, 0x0, [{0x1, 0x4, 0x0, 0x0, @sint={0x3, 0x7}}, {0xfff, 0x5, 0x1, 0x0, @irqchip={0x7, 0x5}}]}) syz_usb_connect$uac1(0x3, 0x84, &(0x7f0000001680)=ANY=[@ANYBLOB="12011001000000401e0420304000010203010902720003010910080904000000010100000a240106000a00020102090401000001020000090401010101020000072401080901110b24020140010901b04f4209050109000405f70d0725ff"], 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x17ef, 0x60ee, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x90, 0x8, "", [{{0x9, 0x4, 0x0, 0xfe, 0xdf, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x81, 0x3, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x3, 0xc1}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f0000000380)={0x2c, &(0x7f0000000040)={0x20, 0x8, 0x28, {0x28, 0x21, "c263138526792c3cbdeace918d0fb74237cc6e446c4e88e78881ce2a52973661d67a0c554438"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) r5 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r5, &(0x7f0000000240)={0x18, 0x2, {0x1, @empty}}, 0x1e) fsopen(0x0, 0x1) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x40940, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x7c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TIOCVHANGUP(r6, 0x5437, 0x2) 5.476900548s ago: executing program 0 (id=553): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x15) ioctl$KVM_GET_PIT2(r2, 0x8070ae9f, &(0x7f0000000080)) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) mount$9p_rdma(0x0, 0x0, 0x0, 0x10000, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) socketpair$unix(0x1, 0x2, 0x0, 0x0) capset(0x0, &(0x7f0000000280)={0x0, 0x8004, 0x0, 0x81, 0xffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x18, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) ioctl$KVM_SET_DEBUGREGS(r8, 0x4080aea2, &(0x7f0000000000)={[0xd000, 0x1000, 0x4], 0x100, 0x42, 0x8}) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x68, r1, 0x800, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x60}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7fffffff}]}, 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x20) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000e40), 0x40080, 0x0) ioctl$TIOCPKT(r9, 0x5420, 0x0) 4.392743476s ago: executing program 0 (id=554): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TARGET_INFO={0x2c, 0x3, "7339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c700"/40}, @NFTA_TARGET_NAME={0x8, 0x1, 'TEE\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="180000002e09090027bd700000000000ff00000004001900"], 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r3, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x20008800) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r3, 0x10, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x0, 0x4f}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x20}, 0x20008001) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000280)={r1, 0x7, 0x104, 0x7ff}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H'], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) 4.004160105s ago: executing program 0 (id=555): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7000fc"], 0x34}, 0x1, 0x0, 0x0, 0x20004080}, 0x4000000) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x8801, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0x759, 0x7, 0x7d, 0x7, 0x8000, 0x4, 0x2}, 0x0, &(0x7f0000000080)={0x3fc, 0x6, 0xffffffffffffffff, 0x2000000000000003, 0x6, 0x10, 0x80000006}, 0x0, 0x0) 3.072677402s ago: executing program 5 (id=556): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) ioperm(0x0, 0x2, 0x7e) connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000640)=0x653, 0x4) sendto$inet6(r0, &(0x7f0000000240)="c4", 0xfffffffffffffedf, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @rand_addr, 0x5}, 0x1c) syz_io_uring_setup(0xf51, &(0x7f0000000580)={0x0, 0x4d4d, 0x2, 0x2, 0xffffffff}, &(0x7f0000000240), &(0x7f0000000080), &(0x7f0000000000)) 3.015079244s ago: executing program 0 (id=557): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000080)={'syz0\x00', {}, 0x3, [0x80000000, 0x3, 0x3ff, 0x5, 0xfffffffd, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x3, 0x0, 0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x1, 0x0, 0x0, 0x0, 0xf5b1, 0xffffffff, 0x10000002, 0x99, 0x20000000, 0x20, 0x0, 0xffffffff, 0x0, 0x40, 0x0, 0x0, 0xfffffffe, 0x0, 0x8, 0x3, 0x0, 0x0, 0xe758, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffe, 0x0, 0x0, 0x1, 0x0, 0xf], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0xedc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffff8, 0x1, 0xfffffffe, 0x2000079, 0x400, 0x0, 0x8001, 0x10000, 0x40000, 0x20007, 0xc0800000, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x7db, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0xfffffffd, 0x4771], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x2, 0xed5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x400, 0x200000, 0x80000000, 0x0, 0x0, 0x475, 0x0, 0x0, 0x0, 0x80, 0xf, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc], [0x8002, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0xfffffffc, 0x8003, 0x3, 0xfffffffc, 0x4, 0x800, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, 0xfffffffd, 0x0, 0x0, 0x0, 0x8002, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ec5, 0x200000, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0xffffe]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="780000000001010400000000141a000002000010240001801400018008000100e000000108000200e00000010c0002800500010000000000240002801400018008000100ac1414aa08000200ac1414bb0c00028005000100000000000800074000000001"], 0x78}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7000000000010104000000000000000002000006240001801400018008000100e000000108000200ac1414000c00028005000100000000002c0002801400018008000100e000000108000200e00000010c000280050001000000000006000340000000000800074000000000040006"], 0x70}}, 0x0) syz_usb_connect$uac3(0x0, 0xa5, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000002044060f80400001020301090293000301ff2010080b0002010130070904000000010130000a2401042f000800000013240304000403ff01b57e00000e000300010005240505050d24070105050000000200000009040100000102300009040101010102300009050109000240d4040a25250600000001040009040200000102300009795601010102300009058209ff03fa0a020a252503000000040900"], 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000500)='/dev/comedi5\x00', 0x40, 0x0) ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, &(0x7f0000000740)={'comedi_bond\x00', [0x4, 0x4, 0x98d, 0x8, 0x923, 0xf, 0x8, 0x8000003, 0x1, 0xb, 0x7f, 0x411, 0x8, 0xffffffc0, 0x5, 0x3, 0x8001, 0xffff1bac, 0x3, 0x5, 0x1, 0x0, 0x9, 0x2, 0x7, 0x6, 0x21, 0x7, 0x8, 0x0, 0x1, 0x7fffffff]}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x27, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r10, r8, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x66, &(0x7f00000005c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa000000000000080045100058006d0000082f90780a010102e00000010421880a00000000000000000c0086f9080088be000000031c00ed070100000000000009080022eb000000002204224002000000000000070007100508006558000000000800da6f440ed9ba51b295327ebdcef70e1c84cd88636ad726e2c86a1ef85ed4b76ed7493653765a04c50e941b0008c5734e778e911381f16fd7d9cc7438cde96fcfa47cc754a11e6c367209321c47059471ee542f567fbf52d76103ac78dbc6cba8b500"/212], 0x0) r11 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mreqn(r11, 0x0, 0x24, 0x0, &(0x7f00000004c0)) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000000)={&(0x7f000000d000)=@newtfilter={0x40, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xe}, {}, {0x7, 0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x24040084) r12 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000201c1b100c00000000000109022d0001000060000904008002030000000921060400012205000905810320000908070905020340"], 0x0) syz_usb_control_io(r12, 0x0, 0x0) syz_usb_control_io(r12, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r12, 0x81, 0x8, &(0x7f0000000080)="116b41319ef13386") syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010003f1046c401aeb00e37e4b0102030109021b000172061006091e050905ca02ff03100281000000000000"], &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) 2.804035072s ago: executing program 5 (id=558): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00221100000093881675df29432283de8fa814bc0e05a0"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGREPORT(r1, 0x400c4807, &(0x7f0000000040)={0x3, 0xffffffff, 0x8}) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002f00010000000000fcdbdf250401f2800c00180008ac0f00000000001400010001000000000000000000ffffac"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) bind$unix(r4, &(0x7f00000003c0)=@abs={0x1}, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000140)={'vxcan1\x00', 0x0}) ioctl$sock_SIOCDELRT(r4, 0x890c, &(0x7f00000005c0)={0x0, @tipc=@name={0x1e, 0x2, 0x3, {{0x43}, 0x2}}, @in={0x2, 0x7ff, @multicast1}, @can={0x1d, r5}, 0x100, 0x0, 0x0, 0x0, 0x726a, &(0x7f0000000540)='vlan1\x00', 0x1ff, 0x58, 0xfff9}) write(r2, &(0x7f0000000580)="2500000014000707030e00001280690f0a0011000100f5fe0012ff000000078a8f50c5440039", 0x26) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, 0x0, 0x0) r7 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000040)={0x84, @broadcast, 0x4ea1, 0x3, 'nq\x00', 0x9, 0x10000004, 0x8}, 0x2c) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40000) r8 = socket$kcm(0xa, 0x2, 0x0) r9 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x1}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) setsockopt$IP_VS_SO_SET_ADDDEST(r9, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x10000, 0x5, 0x12d5c, 0x12d4c}}, 0x44) sendmsg$sock(r8, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev, 0xfffffeec}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mknod$loop(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4, 0x1) creat(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) bind$alg(r10, &(0x7f0000000600)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(seqiv(rfc4106-gcm-aesni))\x00'}, 0x58) 2.548110278s ago: executing program 3 (id=559): r0 = syz_open_dev$sndpcmp(&(0x7f0000001740), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r0, 0xc0884123, &(0x7f0000000000)={0x6, "31aeb6bf53768468d0eab6c0a4e98c88c0f69a3fe8d98bc6342595be7cce9e36b6e8662699ba3f3034110e1adfc9c447f94b68ae6d00dd5a45aacd75768b86a1", {0x8000, 0x87}}) r1 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000100)=ANY=[@ANYRES16=r0], 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x33a0096fd557a9a2, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$MSR(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000400)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) r4 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$unix(0x1, 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f00000005c0)={{0x0, 0x4}, 'port0\x00', 0xf3, 0x1114fa, 0xff, 0xf2, 0x1, 0x0, 0x1, 0x0, 0x7cce8c743ee810df}) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000040)=0x2) readv(r3, &(0x7f00000002c0)=[{&(0x7f0000000700)=""/4109, 0x100d}, {&(0x7f0000000400)=""/204, 0xcc}], 0x2) ioctl$BTRFS_IOC_INO_LOOKUP(r2, 0x4008c001, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r7, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) socket(0x2, 0x1, 0x0) 2.544178414s ago: executing program 1 (id=560): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b00)={0xffffffffffffffff}) bind$unix(r1, &(0x7f0000003000)=@abs={0x1, 0x0, 0x4e21}, 0x6e) listen(r1, 0x3841b273) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) r2 = socket(0x1e, 0x5, 0x0) connect$tipc(r2, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) recvmmsg(r2, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000440)=""/130, 0x82}], 0x1, &(0x7f0000002880)=""/4096, 0x18}, 0x7ff}], 0x1, 0x20, 0x0) sendmmsg$inet(r2, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)='\x00', 0x1}], 0x1, 0x0, 0x2b}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) ftruncate(r2, 0x6) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000950000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000200)={@cgroup=r5, r3, 0x38, 0x6}, 0x20) openat$cgroup_subtree(r5, &(0x7f00000000c0), 0x2, 0x0) r6 = dup(r0) write$evdev(r6, 0x0, 0x24) 1.728201559s ago: executing program 2 (id=561): r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) (async) getsockname$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000040)={'batadv_slave_1\x00', {0x2, 0x0, @loopback=0x7f000000}}) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv6_newrule={0x1c, 0x20, 0x1, 0x2000, 0x25dfdbf6, {0xa, 0x80, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_inet_SIOCSIFADDR(r2, 0x891c, &(0x7f0000000080)={'batadv_slave_1\x00', {0x2, 0x0, @private=0xfffffffc}}) (async) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000305ff810000fddbdf2500000000", @ANYRES32=r1, @ANYBLOB="1748000040000200280012800a006e00000018100280140001000000007c2f360999dcfaace5f40a4fe4b7a07fdebce3ed5dc38312d1cfffa5a06064971debd8fc60c032a2a41b106bc0de1a236df778a3285589fcc2422abc528f8a4afe7d4ff92089c3ce01bba751cd8a", @ANYRES32=r1], 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x0) r4 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$sock_timeval(r4, 0x1, 0x15, &(0x7f0000000140)={0x77359400}, 0x10) 1.618847269s ago: executing program 3 (id=562): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x2) accept(r0, 0x0, &(0x7f0000000280)) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, &(0x7f0000000300)) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000180)={@remote, 0xdf, 0x0, 0x2, 0xa}, 0x20) socket$inet6_tcp(0xa, 0x1, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x4}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) writev(0xffffffffffffffff, 0x0, 0x0) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, 0x0) write$binfmt_script(r3, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000) r4 = socket$rds(0x15, 0x5, 0x0) r5 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) fchdir(r6) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) creat(&(0x7f0000000180)='./bus\x00', 0xc4) getdents64(r7, &(0x7f00000000c0)=""/55, 0x37) lseek(r7, 0x3, 0x0) bind$rds(r3, &(0x7f00000010c0)={0x2, 0x4e24, @rand_addr=0x64110102}, 0x10) sendmsg$inet(r4, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)}, 0x0) sched_setaffinity(0x0, 0xfffffffffffffe10, 0x0) ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000000)={0xf0f046}) 1.525651672s ago: executing program 1 (id=563): ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000040)={0x191, 0x78, 0xa0, 0x300, 0x32, 0x1c0, 0x0, 0x0, {0x0, 0x3e000000, 0x7000000}, {}, {}, {}, 0x0, 0x40, 0x0, 0x0, 0x0, 0x6, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, 0x8, 0x4, 0x0, 0x2, 0xa}) r0 = syz_open_dev$dvb_frontend(&(0x7f00000015c0), 0x0, 0x400) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff30}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r3 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r3, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg$inet6(r1, &(0x7f0000000a80)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x4d7, @rand_addr=' \x01\x00', 0x3}, 0x1c, &(0x7f0000000900)=[{&(0x7f0000000400)="fc", 0x1}], 0x1}}], 0x1, 0x4c040) ioctl$FE_GET_PROPERTY(r0, 0x80106f53, &(0x7f0000000280)={0x34, &(0x7f0000000000)=[{0x46, '\x00', @data=0x401, 0x7fffffff}]}) 1.056455711s ago: executing program 1 (id=564): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000006c9b406f047fff000000000001090224000100000000090400000903000000092100000001222900090581030000000000"], 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) r2 = epoll_create1(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000001c0), 0x2, 0x8081) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) io_setup(0x3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') getdents64(r4, &(0x7f0000002f40)=""/4098, 0x1002) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x1a}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000140)=0x80) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x9, {0x9}}}, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) 1.055913219s ago: executing program 2 (id=565): socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@private0, 0x0, 0x0, 0x1, 0x1}, 0x20) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa"], 0xcfa4) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x0, 0xa}, {0x90010022, 0x1}]}, 0x94) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f00000008c0)=r4, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000380)={@private2, 0x800, 0x0, 0x1, 0x2, 0x0, 0x100}, 0x20) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = getpid() r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv4_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_PRIORITY={0x8}]}, 0x24}}, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xe501, 0x3, 0x208, 0x0, 0xa, 0x1000000, 0xb8, 0x0, 0x170, 0x230, 0x230, 0x170, 0x223, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x3b9, 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x3c0, 'syz0\x00', {0xffffffffffffffff}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) ptrace$setopts(0x4206, r7, 0x8322, 0x100000) r10 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r12 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r12, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r11, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x10, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x1}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x10) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=@ipv6_getaddrlabel={0x9c, 0x4a, 0x800, 0x70bd2d, 0x25dfdbfe, {0xa, 0x0, 0x3f, 0x0, r11}, [@IFAL_LABEL={0x8}, @IFAL_LABEL={0x8, 0x2, 0x3}, @IFAL_ADDRESS={0x14, 0x1, @mcast1}, @IFAL_LABEL={0x8, 0x2, 0x3}, @IFAL_LABEL={0x8, 0x2, 0xc}, @IFAL_LABEL={0x8, 0x2, 0x4}, @IFAL_ADDRESS={0x14, 0x1, @mcast1}, @IFAL_LABEL={0x8, 0x2, 0x7}, @IFAL_ADDRESS={0x14, 0x1, @loopback}, @IFAL_ADDRESS={0x14, 0x1, @empty}]}, 0x9c}}, 0x4000844) 749.489628ms ago: executing program 0 (id=566): r0 = io_uring_setup(0x519, &(0x7f0000000640)={0x0, 0x3cb4, 0x2, 0xd01fa, 0x8100014e}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x10}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0xa0}}, 0x40880) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8080, 0x186) close_range(r2, r0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 241.212191ms ago: executing program 0 (id=567): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7000fc"], 0x34}, 0x1, 0x0, 0x0, 0x20004080}, 0x4000000) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x8801, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0x759, 0x7, 0x7d, 0x7, 0x8000, 0x4, 0x2}, 0x0, &(0x7f0000000080)={0x3fc, 0x6, 0xffffffffffffffff, 0x2000000000000003, 0x6, 0x10, 0x80000006}, 0x0, 0x0) 0s ago: executing program 3 (id=568): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x7, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x3) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000040)={0x191, 0x258, 0x1e0, 0x2000, 0x32, 0x1, 0x0, 0x0, {}, {0x0, 0x0, 0x1001}, {0x0, 0x0, 0x1}, {}, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x26, 0x0, 0x0, 0x4}) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) listen(r4, 0xffff7ffc) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) syz_io_uring_setup(0x2760, &(0x7f00000001c0)={0x0, 0xfffffffc, 0x2, 0x3, 0x2cf}, &(0x7f00000004c0), &(0x7f0000000000), &(0x7f0000000000)) ioctl$sock_bt_bnep_BNEPGETCONNLIST(0xffffffffffffffff, 0x800442d2, &(0x7f0000000280)={0x3, &(0x7f0000000380)=[{0x0, 0x0, 0x0, @remote}, {0x0, 0x0, 0x0, @remote}, {0x0, 0x0, 0x0, @local}]}) r5 = gettid() timer_create(0x0, &(0x7f0000000400)={0x0, 0x25, 0x4, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x430}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000800000/0x800000)=nil, &(0x7f000022a000/0x4000)=nil, 0x800000}) kernel console output (not intermixed with test programs): ] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 131.630145][ T29] audit: type=1400 audit(1779645882.488:369): avc: denied { mount } for pid=6355 comm="syz.2.134" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 131.732090][ T29] audit: type=1400 audit(1779645882.598:370): avc: denied { read } for pid=6355 comm="syz.2.134" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 131.754553][ T6370] orangefs_devreq_open: device cannot be opened in blocking mode [ 131.809316][ T29] audit: type=1400 audit(1779645882.618:371): avc: denied { open } for pid=6355 comm="syz.2.134" path="/29/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 131.828304][ T86] usb 3-1: USB disconnect, device number 4 [ 131.838054][ T24] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 131.865258][ T29] audit: type=1400 audit(1779645882.668:372): avc: denied { ioctl } for pid=6355 comm="syz.2.134" path="socket:[11034]" dev="sockfs" ino=11034 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 131.880485][ T24] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 131.961420][ T5717] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 132.064941][ T29] audit: type=1400 audit(1779645882.928:373): avc: denied { read write } for pid=6371 comm="syz.1.139" name="rdma_cm" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 132.093507][ T6372] netlink: 12 bytes leftover after parsing attributes in process `syz.1.139'. [ 132.115514][ T5717] usb 1-1: device descriptor read/64, error -71 [ 132.124605][ T29] audit: type=1400 audit(1779645882.958:374): avc: denied { open } for pid=6371 comm="syz.1.139" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 132.179249][ T6372] netlink: 20 bytes leftover after parsing attributes in process `syz.1.139'. [ 132.207757][ T6372] netlink: 8 bytes leftover after parsing attributes in process `syz.1.139'. [ 132.361441][ T5717] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 132.406930][ T29] audit: type=1400 audit(1779645883.268:375): avc: denied { unmount } for pid=5621 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 132.521457][ T5717] usb 1-1: device descriptor read/64, error -71 [ 132.634833][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.635096][ T5717] usb usb1-port1: attempt power cycle [ 132.648130][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.794126][ T29] audit: type=1400 audit(1779645883.658:376): avc: denied { write } for pid=6376 comm="syz.1.141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 132.913807][ T29] audit: type=1400 audit(1779645883.778:377): avc: denied { bind } for pid=6379 comm="syz.3.142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 132.915084][ T6380] Bluetooth: MGMT ver 1.23 [ 132.947672][ T6380] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 133.001508][ T5717] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 133.032087][ T5717] usb 1-1: device descriptor read/8, error -71 [ 133.233235][ T6386] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.252539][ T6386] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.274263][ T5717] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 133.346705][ T5717] usb 1-1: device descriptor read/8, error -71 [ 133.617400][ T5717] usb usb1-port1: unable to enumerate USB device [ 133.878549][ T29] audit: type=1400 audit(1779645884.738:378): avc: denied { create } for pid=6390 comm="syz.2.145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 135.690423][ T6404] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6404 comm=syz.3.148 [ 135.721953][ T6404] 9pnet_virtio: no channels available for device syz [ 135.925560][ T6404] netlink: 16 bytes leftover after parsing attributes in process `syz.3.148'. [ 136.589093][ T6404] bond1: entered promiscuous mode [ 136.594386][ T6404] 8021q: adding VLAN 0 to HW filter on device bond1 [ 136.613284][ T6404] syz.3.148 (6404) used greatest stack depth: 19336 bytes left [ 137.030580][ T5618] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 137.041196][ T5618] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 137.054474][ T5618] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 137.068319][ T5618] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 137.076832][ T5618] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 137.403850][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 137.403861][ T29] audit: type=1400 audit(1779645888.268:383): avc: denied { ioctl } for pid=6418 comm="syz.1.151" path="socket:[11155]" dev="sockfs" ino=11155 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 137.650424][ T6424] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 137.682145][ T29] audit: type=1400 audit(1779645888.508:384): avc: denied { read write } for pid=6418 comm="syz.1.151" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 138.049280][ T29] audit: type=1400 audit(1779645888.508:385): avc: denied { open } for pid=6418 comm="syz.1.151" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 138.130101][ T29] audit: type=1400 audit(1779645888.528:386): avc: denied { getopt } for pid=6418 comm="syz.1.151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 138.431084][ T6407] lo speed is unknown, defaulting to 1000 [ 139.192400][ T5618] Bluetooth: hci5: command tx timeout [ 139.273390][ T29] audit: type=1400 audit(1779645890.128:387): avc: denied { create } for pid=6442 comm="syz.3.156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 139.745727][ T6466] x_tables: ip_tables: sctp match: only valid for protocol 132 [ 139.949907][ T6407] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.996310][ T6407] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.036257][ T6407] bridge_slave_0: entered allmulticast mode [ 140.069683][ T6407] bridge_slave_0: entered promiscuous mode [ 140.078087][ T29] audit: type=1400 audit(1779645890.938:388): avc: denied { unlink } for pid=6468 comm="syz.1.159" name="#1" dev="tmpfs" ino=235 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 140.095450][ T6407] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.115948][ T6407] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.154538][ T6407] bridge_slave_1: entered allmulticast mode [ 140.158446][ T29] audit: type=1400 audit(1779645890.988:389): avc: denied { mount } for pid=6468 comm="syz.1.159" name="/" dev="overlay" ino=231 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 140.209301][ T6407] bridge_slave_1: entered promiscuous mode [ 140.246555][ T29] audit: type=1400 audit(1779645891.108:390): avc: denied { unmount } for pid=5610 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 140.368281][ T29] audit: type=1400 audit(1779645891.228:391): avc: denied { write } for pid=6480 comm="syz.1.163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 140.424500][ T29] audit: type=1400 audit(1779645891.248:392): avc: denied { setopt } for pid=6480 comm="syz.1.163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 140.516437][ T6407] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 140.518133][ T6482] netlink: 'syz.3.161': attribute type 1 has an invalid length. [ 140.581630][ T6482] netlink: 28 bytes leftover after parsing attributes in process `syz.3.161'. [ 140.603220][ T6407] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 140.981613][ T6407] team0: Port device team_slave_0 added [ 141.004015][ T6407] team0: Port device team_slave_1 added [ 141.083714][ T6407] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 141.105870][ T6407] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 141.167930][ T6407] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 141.210731][ T6407] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 141.241173][ T6407] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 141.281107][ T5618] Bluetooth: hci5: command tx timeout [ 141.322307][ T6407] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 141.433199][ T6407] hsr_slave_0: entered promiscuous mode [ 141.456311][ T6407] hsr_slave_1: entered promiscuous mode [ 141.476173][ T6407] debugfs: 'hsr0' already exists in 'hsr' [ 141.496363][ T6407] Cannot create hsr debugfs directory [ 141.908628][ T6498] lo speed is unknown, defaulting to 1000 [ 142.019658][ T6501] 8021q: adding VLAN 0 to HW filter on device bond2 [ 142.153740][ T6504] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 142.184973][ T6504] bond2: (slave macvlan2): Enslaving as a backup interface with an up link [ 142.239884][ T5346] bond_slave_0: entered promiscuous mode [ 142.246640][ T5346] bond_slave_1: entered promiscuous mode [ 142.846084][ T6509] 9p: Bad value for 'rfdno' [ 142.895409][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 142.895420][ T29] audit: type=1400 audit(1779645893.748:400): avc: denied { setcurrent } for pid=6507 comm="syz.1.170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 142.953306][ T6407] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 142.982051][ T6407] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 143.008884][ T6407] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 143.049038][ T6407] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 143.085876][ T6407] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 143.103212][ T6521] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.117638][ T6407] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 143.134734][ T6521] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.143780][ T6407] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 143.171204][ T6407] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 143.261453][ T804] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 143.351919][ T5618] Bluetooth: hci5: command tx timeout [ 143.435735][ T804] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 143.446617][ T804] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.476136][ T6407] 8021q: adding VLAN 0 to HW filter on device bond0 [ 143.484996][ T804] usb 3-1: Product: syz [ 143.514097][ T804] usb 3-1: Manufacturer: syz [ 143.588784][ T804] usb 3-1: SerialNumber: syz [ 143.609677][ T6533] input: syz1 as /devices/virtual/input/input7 [ 143.630813][ T6407] 8021q: adding VLAN 0 to HW filter on device team0 [ 143.662273][ T804] usb 3-1: config 0 descriptor?? [ 143.721668][ T1327] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.728843][ T1327] bridge0: port 1(bridge_slave_0) entered forwarding state [ 143.791202][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.798396][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 143.949498][ T29] audit: type=1400 audit(1779645894.808:401): avc: denied { bind } for pid=6537 comm="syz.3.175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 143.983504][ T6407] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 144.058521][ T29] audit: type=1400 audit(1779645894.828:402): avc: denied { listen } for pid=6537 comm="syz.3.175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 144.115373][ T804] usb 3-1: Firmware: major: 186, minor: 89, hardware type: ATUSB (1) [ 144.152934][ T29] audit: type=1400 audit(1779645894.878:403): avc: denied { connect } for pid=6537 comm="syz.3.175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 144.259718][ T804] usb 3-1: failed to fetch extended address, random address set [ 144.292797][ T29] audit: type=1400 audit(1779645894.878:404): avc: denied { read } for pid=6537 comm="syz.3.175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 144.325665][ T29] audit: type=1400 audit(1779645894.878:405): avc: denied { shutdown } for pid=6537 comm="syz.3.175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 144.426004][ T29] audit: type=1400 audit(1779645894.978:406): avc: denied { ioctl } for pid=6537 comm="syz.3.175" path="socket:[12370]" dev="sockfs" ino=12370 ioctlcmd=0x3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 144.841883][ T804] usb 3-1: USB disconnect, device number 5 [ 145.456236][ T5618] Bluetooth: hci5: command tx timeout [ 146.251091][ T6407] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 146.737927][ T6581] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.778107][ T6581] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.301487][ T6580] netlink: 'syz.2.177': attribute type 1 has an invalid length. [ 147.504793][ T6580] netlink: 28 bytes leftover after parsing attributes in process `syz.2.177'. [ 147.651950][ T5717] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 147.710486][ T6407] veth0_vlan: entered promiscuous mode [ 147.863166][ T6407] veth1_vlan: entered promiscuous mode [ 147.872791][ T5717] usb 2-1: Using ep0 maxpacket: 8 [ 147.887541][ T5717] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 147.918044][ T5717] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 147.955023][ T5717] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.651075][ T6407] veth0_macvtap: entered promiscuous mode [ 148.657725][ T5717] usb 2-1: config 0 descriptor?? [ 149.857996][ T6601] siw: device registration error -23 [ 150.290184][ T6407] veth1_macvtap: entered promiscuous mode [ 150.333792][ T5717] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 150.369146][ T6407] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 150.386662][ T5717] usb 2-1: USB disconnect, device number 7 [ 150.415217][ T6407] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 150.516177][ T6595] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.539527][ T29] audit: type=1400 audit(1779645901.398:407): avc: denied { getopt } for pid=6602 comm="syz.1.188" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 150.581749][ T6595] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.636548][ T6595] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.660759][ T6607] netlink: 'syz.3.189': attribute type 1 has an invalid length. [ 151.026150][ T6607] bond3: entered promiscuous mode [ 151.068367][ T6607] 8021q: adding VLAN 0 to HW filter on device bond3 [ 151.095015][ T6595] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.127074][ T6613] 8021q: adding VLAN 0 to HW filter on device bond3 [ 151.167889][ T6613] bond3: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 151.190566][ T6613] bond3: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 151.220450][ T6613] bond3: (slave ip6gre1): making interface the new active one [ 151.220486][ T6613] ip6gre1: entered promiscuous mode [ 151.223761][ T6613] bond3: (slave ip6gre1): Enslaving as an active interface with an up link [ 151.396588][ T183] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.396625][ T183] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.506940][ T6624] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.507319][ T6624] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.526095][ T6595] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.526109][ T6595] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.545486][ T29] audit: type=1400 audit(1779645902.408:408): avc: denied { mounton } for pid=6407 comm="syz-executor" path="/root/syzkaller.OEwSO0/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=12231 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 151.811554][ T29] audit: type=1400 audit(1779645902.668:409): avc: denied { bind } for pid=6627 comm="syz.1.193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 152.626698][ T6639] xt_cluster: you have exceeded the maximum number of cluster nodes (524288 > 32) [ 152.646458][ T29] audit: type=1400 audit(1779645903.388:410): avc: denied { bind } for pid=6634 comm="syz.3.194" lport=5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 153.039652][ T29] audit: type=1400 audit(1779645903.388:411): avc: denied { name_bind } for pid=6634 comm="syz.3.194" src=28189 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 154.594726][ T29] audit: type=1400 audit(1779645903.388:412): avc: denied { node_bind } for pid=6634 comm="syz.3.194" saddr=127.0.0.1 src=28189 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 154.716968][ T6649] netlink: 'syz.3.197': attribute type 26 has an invalid length. [ 154.735676][ T6649] netlink: 4 bytes leftover after parsing attributes in process `syz.3.197'. [ 157.604523][ T29] audit: type=1400 audit(1779645908.468:413): avc: denied { write } for pid=6665 comm="syz.0.201" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 157.875692][ T6668] netlink: 12 bytes leftover after parsing attributes in process `syz.5.203'. [ 157.891453][ T5346] usb 1-1: new low-speed USB device number 10 using dummy_hcd [ 157.930974][ T29] audit: type=1400 audit(1779645908.788:414): avc: denied { create } for pid=6667 comm="syz.5.203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 157.986530][ T29] audit: type=1400 audit(1779645908.788:415): avc: denied { write } for pid=6667 comm="syz.5.203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 158.056275][ T5346] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1007, setting to 0 [ 158.160677][ T29] audit: type=1400 audit(1779645909.018:416): avc: denied { setopt } for pid=6670 comm="syz.2.202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 158.181858][ T5346] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 8, setting to 0 [ 158.334088][ T6673] process 'syz.2.202' launched './file2' with NULL argv: empty string added [ 158.647687][ T29] audit: type=1400 audit(1779645909.208:417): avc: denied { execute_no_trans } for pid=6670 comm="syz.2.202" path="/39/file2" dev="tmpfs" ino=225 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 158.681396][ T29] audit: type=1400 audit(1779645909.228:418): avc: denied { create } for pid=6670 comm="syz.2.202" name="file7" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 161.171805][ T5346] usb 1-1: string descriptor 0 read error: -71 [ 161.181551][ T5346] usb 1-1: New USB device found, idVendor=0a4e, idProduct=4040, bcdDevice= 0.40 [ 162.155375][ T5346] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.166703][ T29] audit: type=1400 audit(1779645913.028:419): avc: denied { write } for pid=6681 comm="syz.2.206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 162.191674][ T5346] usb 1-1: can't set config #1, error -71 [ 163.158740][ T5346] usb 1-1: USB disconnect, device number 10 [ 163.462283][ T29] audit: type=1400 audit(1779645914.328:420): avc: denied { mounton } for pid=6691 comm="syz.5.209" path="/6/file0" dev="tmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 163.929426][ T29] audit: type=1400 audit(1779645914.368:421): avc: denied { append } for pid=6691 comm="syz.5.209" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 164.373618][ T29] audit: type=1400 audit(1779645915.198:422): avc: denied { create } for pid=6695 comm="syz.5.211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 165.215495][ T6707] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 165.247603][ T6707] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 166.222877][ T5346] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 166.418475][ T5346] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 166.433326][ T5346] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 166.453847][ T5346] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.486066][ T5346] usb 1-1: config 0 descriptor?? [ 166.501516][ T5803] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 166.513905][ T5346] gspca_main: spca501-2.14.0 probing 0000:0000 [ 166.673323][ T5803] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 166.697206][ T5803] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 166.725584][ T5803] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 166.749186][ T5803] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 166.774794][ T5803] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 166.810520][ T5803] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 166.857278][ T5803] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 166.892734][ T5803] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.937892][ T5803] usb 2-1: config 0 descriptor?? [ 166.954484][ T6711] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 166.988069][ T5346] gspca_spca501: reg write: error -71 [ 166.995460][ T5346] spca501 1-1:0.0: Reg write failed for 0x02,0xa048,0x00 [ 167.015413][ T5346] spca501 1-1:0.0: probe with driver spca501 failed with error -22 [ 167.193301][ T5803] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 8 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 168.161403][ T5346] usb 1-1: USB disconnect, device number 11 [ 168.400232][ T5803] usb 2-1: USB disconnect, device number 8 [ 168.421138][ T5803] usblp0: removed [ 170.505746][ T6756] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=771 sclass=netlink_route_socket pid=6756 comm=syz.1.225 [ 170.911575][ T5717] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 172.306555][ T29] audit: type=1400 audit(1779645923.118:423): avc: denied { ioctl } for pid=6768 comm="syz.2.229" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 172.451409][ T5717] usb 2-1: Using ep0 maxpacket: 16 [ 172.461666][ T5717] usb 2-1: config 0 has an invalid descriptor of length 169, skipping remainder of the config [ 172.473216][ T5717] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 172.489553][ T5717] usb 2-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 172.498906][ T5717] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.527836][ T5717] usb 2-1: config 0 descriptor?? [ 172.532892][ T24] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 172.546681][ T5717] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 172.693596][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 172.703012][ T24] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 172.721790][ T24] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 172.845351][ T24] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 172.879878][ T24] usb 3-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 173.137969][ T29] audit: type=1400 audit(1779645923.888:424): avc: denied { setopt } for pid=6755 comm="syz.1.225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 173.883197][ T24] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 174.118284][ T24] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 174.196053][ T24] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 174.274530][ T24] usb 3-1: config 168 interface 0 has no altsetting 0 [ 174.307087][ T24] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 174.321698][ T6789] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 174.336118][ T29] audit: type=1804 audit(1779645925.198:425): pid=6788 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.5.233" name="/newroot/13/file0" dev="tmpfs" ino=86 res=1 errno=0 [ 174.361503][ T24] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 174.388523][ T24] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 174.436759][ T29] audit: type=1400 audit(1779645925.238:426): avc: denied { setopt } for pid=6785 comm="syz.3.232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 174.456101][ T24] usb 3-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 174.481289][ T24] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 174.510502][ T29] audit: type=1400 audit(1779645925.238:427): avc: denied { setopt } for pid=6785 comm="syz.3.232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 174.537657][ T24] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 174.570675][ T24] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 174.586039][ T29] audit: type=1400 audit(1779645925.338:428): avc: denied { connect } for pid=6785 comm="syz.3.232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 174.612239][ T24] usb 3-1: config 168 interface 0 has no altsetting 0 [ 174.663087][ T24] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 174.680074][ T24] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 174.714263][ T24] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 174.737133][ T24] usb 3-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 174.751304][ T24] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 174.779152][ T24] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 174.794878][ T24] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 174.811451][ T24] usb 3-1: config 168 interface 0 has no altsetting 0 [ 174.915629][ T24] usb 3-1: string descriptor 0 read error: -71 [ 174.925367][ T5717] usb 2-1: USB disconnect, device number 9 [ 174.944996][ T24] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 175.004479][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.043197][ T24] usb 3-1: can't set config #168, error -71 [ 175.077033][ T24] usb 3-1: USB disconnect, device number 6 [ 175.243947][ T6798] tipc: Started in network mode [ 176.197883][ T6798] tipc: Node identity 7f000001, cluster identity 4711 [ 176.288564][ T6798] tipc: Enabled bearer , priority 10 [ 176.962289][ T5346] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 177.102853][ T5717] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 177.135174][ T6815] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.173545][ T5346] usb 6-1: unable to get BOS descriptor or descriptor too short [ 177.182017][ T6815] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.196470][ T5346] usb 6-1: not running at top speed; connect to a high speed hub [ 177.213677][ T6816] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.229169][ T5346] usb 6-1: config 5 has an invalid interface number: 220 but max is 0 [ 177.241931][ T6816] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.264032][ T5346] usb 6-1: config 5 has no interface number 0 [ 177.285137][ T5717] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 177.306406][ T5346] usb 6-1: config 5 interface 220 has no altsetting 0 [ 177.308732][ T5717] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 177.332664][ T5717] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 177.336573][ T5346] usb 6-1: New USB device found, idVendor=0681, idProduct=0010, bcdDevice=28.ae [ 177.342300][ T5717] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 177.362224][ T5717] usb 2-1: SerialNumber: syz [ 177.362358][ T5346] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.472664][ T9] tipc: Node number set to 2130706433 [ 177.498545][ T5346] usb 6-1: Product: syz [ 177.507391][ T5346] usb 6-1: Manufacturer: syz [ 177.516479][ T5346] usb 6-1: SerialNumber: syz [ 178.744780][ T5346] usb 6-1: can't set config #5, error -71 [ 178.798374][ T5346] usb 6-1: USB disconnect, device number 2 [ 178.806466][ T6833] mmap: syz.0.243 (6833): VmData 37466112 exceed data ulimit 6. Update limits or use boot option ignore_rlimit_data. [ 180.155204][ T5717] usb 2-1: 0:2 : does not exist [ 180.173724][ T5717] usb 2-1: unit 5: unexpected type 0x0d [ 180.651744][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 181.584993][ T5717] usb 2-1: USB disconnect, device number 10 [ 181.699662][ T5614] udevd[5614]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 182.041124][ T6866] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.052000][ T6855] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[5620] was attempted by "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[6855] [ 182.080288][ T6855] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[5620] was attempted by "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[6855] [ 182.097804][ T6866] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.118181][ T29] audit: type=1400 audit(1779645932.968:429): avc: denied { append } for pid=6853 comm="syz.0.251" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 182.152836][ T6866] FAT-fs (nullb0): bogus number of reserved sectors [ 182.166727][ T6866] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 182.195569][ T29] audit: type=1400 audit(1779645932.968:430): avc: denied { append } for pid=6853 comm="syz.0.251" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 182.219299][ T9] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 182.575502][ T9] usb 6-1: device descriptor read/64, error -71 [ 182.595583][ T29] audit: type=1400 audit(1779645933.008:431): avc: denied { mounton } for pid=6865 comm="syz.3.254" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 182.747067][ T29] audit: type=1400 audit(1779645933.608:432): avc: denied { read } for pid=6869 comm="syz.2.238" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 182.821424][ T9] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 183.001454][ T9] usb 6-1: device descriptor read/64, error -71 [ 183.121725][ T9] usb usb6-port1: attempt power cycle [ 183.461425][ T9] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 183.502234][ T9] usb 6-1: device descriptor read/8, error -71 [ 183.781836][ T9] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 183.865661][ T6884] siw: device registration error -23 [ 184.246843][ T9] usb 6-1: device descriptor read/8, error -71 [ 184.361791][ T9] usb usb6-port1: unable to enumerate USB device [ 184.473317][ T9] libceph: connect (1)[c::]:6789 error -101 [ 184.483057][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 184.499759][ T9] libceph: connect (1)[c::]:6789 error -101 [ 184.509655][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 184.548682][ T6886] ceph: No mds server is up or the cluster is laggy [ 184.901487][ T9] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 185.084566][ T9] usb 1-1: config 0 has an invalid interface number: 69 but max is 0 [ 185.134626][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 185.206873][ T9] usb 1-1: config 0 has no interface number 0 [ 185.250781][ T9] usb 1-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 255 [ 185.307162][ T29] audit: type=1400 audit(1779645936.148:433): avc: denied { append } for pid=6898 comm="syz.1.261" name="frontend0" dev="devtmpfs" ino=928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 185.346048][ T9] usb 1-1: config 0 interface 69 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 185.448005][ T9] usb 1-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 185.493838][ T29] audit: type=1400 audit(1779645936.288:434): avc: denied { bind } for pid=6898 comm="syz.1.261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 185.530485][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.586161][ T9] usb 1-1: Product: syz [ 185.605725][ T9] usb 1-1: Manufacturer: syz [ 185.620213][ T9] usb 1-1: SerialNumber: syz [ 185.828414][ T9] usb 1-1: config 0 descriptor?? [ 185.936408][ T6894] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 185.950554][ T9] cyberjack 1-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 185.990280][ T9] cyberjack ttyUSB0: usb_submit_urb(read int) failed [ 186.092304][ T9] usb 1-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 186.149852][ T6892] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.159608][ T6892] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.187294][ T6892] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.197518][ T6892] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.250727][ T5717] usb 1-1: USB disconnect, device number 12 [ 186.307314][ T6911] netlink: 20 bytes leftover after parsing attributes in process `syz.1.265'. [ 186.329868][ T6911] 8021q: VLANs not supported on sit0 [ 186.396399][ T24] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 186.611544][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 186.664035][ T24] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 186.689359][ T5717] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 186.709143][ T24] usb 6-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 186.732157][ T5717] cyberjack 1-1:0.69: device disconnected [ 186.738411][ T24] usb 6-1: config 0 interface 0 has no altsetting 0 [ 186.766781][ T24] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 186.781485][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.803270][ T24] usb 6-1: Product: syz [ 186.809284][ T24] usb 6-1: Manufacturer: syz [ 186.815685][ T24] usb 6-1: SerialNumber: syz [ 186.835417][ T24] usb 6-1: config 0 descriptor?? [ 187.065882][ T6915] netlink: 16 bytes leftover after parsing attributes in process `syz.3.266'. [ 187.081401][ T29] audit: type=1400 audit(1779645937.928:435): avc: denied { create } for pid=6904 comm="syz.5.263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 187.135671][ T29] audit: type=1400 audit(1779645937.968:436): avc: denied { sys_admin } for pid=6904 comm="syz.5.263" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 187.294457][ T29] audit: type=1400 audit(1779645938.158:437): avc: denied { mount } for pid=6904 comm="syz.5.263" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 187.342043][ T9] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 187.372346][ T29] audit: type=1400 audit(1779645938.228:438): avc: denied { ioctl } for pid=6926 comm="syz.0.268" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 187.403448][ T6935] block nbd1: not configured, cannot reconfigure [ 187.415422][ T6935] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 187.433683][ T29] audit: type=1400 audit(1779645938.268:439): avc: denied { write } for pid=6933 comm="syz.1.270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 187.455241][ T6935] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 187.512470][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 187.530824][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 187.542236][ T24] gs_usb 6-1:0.0: Couldn't get device config: (err=-121) [ 187.555737][ T24] gs_usb 6-1:0.0: probe with driver gs_usb failed with error -121 [ 187.563595][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 187.578963][ T9] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 187.590229][ T29] audit: type=1400 audit(1779645938.438:440): avc: denied { read write } for pid=5610 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 187.601478][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 187.654444][ T29] audit: type=1400 audit(1779645938.438:441): avc: denied { open } for pid=5610 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 187.671227][ T9] usb 1-1: SerialNumber: syz [ 187.738460][ T9] usb 1-1: 0:2 : does not exist [ 187.742999][ T29] audit: type=1400 audit(1779645938.448:442): avc: denied { ioctl } for pid=5610 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 187.772489][ T29] audit: type=1400 audit(1779645938.628:443): avc: denied { prog_load } for pid=6936 comm="syz.1.271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 187.831179][ T29] audit: type=1400 audit(1779645938.628:444): avc: denied { bpf } for pid=6936 comm="syz.1.271" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 187.873952][ T29] audit: type=1400 audit(1779645938.628:445): avc: denied { perfmon } for pid=6936 comm="syz.1.271" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 188.164037][ T6945] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.185892][ T6945] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.211426][ T24] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 188.364846][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 188.378814][ T24] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 188.388537][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.397006][ T24] usb 2-1: Product: syz [ 188.404540][ T24] usb 2-1: Manufacturer: syz [ 188.409308][ T24] usb 2-1: SerialNumber: syz [ 188.417662][ T24] usb 2-1: config 0 descriptor?? [ 188.436482][ T24] dm9601 2-1:0.0: probe with driver dm9601 failed with error -22 [ 188.566597][ T9] usb 1-1: 5:0: failed to get current value for ch 1 (-22) [ 188.588239][ T9] usb 1-1: 5:0: failed to get current value for ch 2 (-22) [ 188.606980][ T9] usb 1-1: 5:0: failed to get current value for ch 3 (-22) [ 188.629179][ T9] usb 1-1: 5:0: cannot get min/max values for control 5 (id 5) [ 188.697606][ T9] usb 1-1: 5:0: cannot get min/max values for control 5 (id 5) [ 188.800579][ T9] usb 1-1: USB disconnect, device number 13 [ 189.506637][ T24] usb 6-1: USB disconnect, device number 7 [ 192.393462][ T5346] usb 2-1: USB disconnect, device number 11 [ 192.552353][ T24] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 192.620399][ T29] kauditd_printk_skb: 36 callbacks suppressed [ 192.620415][ T29] audit: type=1400 audit(1779645943.478:482): avc: denied { read } for pid=5275 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 192.702613][ T29] audit: type=1400 audit(1779645943.568:483): avc: denied { audit_write } for pid=6985 comm="syz.5.284" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 192.723919][ T5717] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 192.751862][ T29] audit: type=1400 audit(1779645943.578:484): avc: denied { read append } for pid=6985 comm="syz.5.284" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 192.861534][ T29] audit: type=1400 audit(1779645943.578:485): avc: denied { open } for pid=6985 comm="syz.5.284" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 192.922340][ T5717] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 192.939659][ T29] audit: type=1400 audit(1779645943.578:486): avc: denied { ioctl } for pid=6985 comm="syz.5.284" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 192.965708][ T5717] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 192.982919][ T5717] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.986922][ T29] audit: type=1400 audit(1779645943.688:487): avc: denied { bind } for pid=6985 comm="syz.5.284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 193.027483][ T5717] usb 1-1: config 0 descriptor?? [ 193.035221][ T29] audit: type=1400 audit(1779645943.698:488): avc: denied { unmount } for pid=5621 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 193.113055][ T5717] pwc: Askey VC010 type 2 USB webcam detected. [ 193.279926][ T29] audit: type=1400 audit(1779645944.138:489): avc: denied { bind } for pid=6997 comm="syz.3.289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 193.283332][ T6998] netlink: 'syz.3.289': attribute type 10 has an invalid length. [ 193.346407][ T29] audit: type=1400 audit(1779645944.198:490): avc: denied { getopt } for pid=6997 comm="syz.3.289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 193.378748][ T29] audit: type=1400 audit(1779645944.238:491): avc: denied { create } for pid=7002 comm="syz.1.291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 193.388412][ T6998] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 193.430003][ T6998] team0: Port device netdevsim1 added [ 193.457145][ T7003] netlink: 'syz.1.291': attribute type 1 has an invalid length. [ 193.509464][ T5717] pwc: recv_control_msg error -32 req 02 val 2b00 [ 193.593993][ T7011] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 193.784358][ T7003] netlink: 4 bytes leftover after parsing attributes in process `syz.1.291'. [ 194.030222][ T5717] pwc: recv_control_msg error -32 req 02 val 2700 [ 194.039568][ T7004] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 194.083629][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.114029][ T7003] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 194.130652][ T7003] bond1 (unregistering): Released all slaves [ 194.138760][ T7017] faux_driver vgem: [drm] Unknown color mode 135169; guessing buffer size. [ 194.239064][ T5717] pwc: recv_control_msg error -71 req 04 val 1000 [ 194.247380][ T5717] pwc: recv_control_msg error -71 req 04 val 1300 [ 194.251431][ T5346] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 194.262339][ T5717] pwc: recv_control_msg error -71 req 04 val 1400 [ 194.269584][ T5717] pwc: recv_control_msg error -71 req 02 val 2000 [ 194.277892][ T5717] pwc: recv_control_msg error -71 req 02 val 2100 [ 194.284820][ T5717] pwc: recv_control_msg error -71 req 04 val 1500 [ 194.291704][ T5717] pwc: recv_control_msg error -71 req 02 val 2500 [ 194.298395][ T5717] pwc: recv_control_msg error -71 req 02 val 2400 [ 194.308322][ T5717] pwc: recv_control_msg error -71 req 02 val 2600 [ 194.334533][ T5717] pwc: recv_control_msg error -71 req 02 val 2900 [ 194.342951][ T5717] pwc: recv_control_msg error -71 req 02 val 2800 [ 194.350410][ T5717] pwc: recv_control_msg error -71 req 04 val 1100 [ 194.357535][ T5717] pwc: recv_control_msg error -71 req 04 val 1200 [ 194.386388][ T5717] pwc: Registered as video103. [ 194.396737][ T5717] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input8 [ 194.418465][ T5346] usb 2-1: Using ep0 maxpacket: 16 [ 194.438231][ T5346] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 194.456025][ T5346] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 194.482253][ T5717] usb 1-1: USB disconnect, device number 14 [ 194.510032][ T5346] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 4 [ 194.523244][ T5346] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 194.548915][ T5346] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 194.561237][ T5346] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 194.571871][ T5346] usb 2-1: Manufacturer: syz [ 194.586131][ T7022] input: syz1 as /devices/virtual/input/input9 [ 194.605278][ T5346] usb 2-1: config 0 descriptor?? [ 194.881401][ T5346] rc_core: IR keymap rc-hauppauge not found [ 194.888991][ T5346] Registered IR keymap rc-empty [ 194.895991][ T5346] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 194.922658][ T5346] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 194.943000][ T5346] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 194.980812][ T5346] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input10 [ 195.011945][ T5346] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 195.031721][ T5346] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 195.051961][ T5346] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 195.061693][ T5613] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 195.081607][ T5346] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 195.112574][ T5346] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 195.131911][ T5346] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 195.152671][ T5346] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 195.171750][ T5346] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 195.194876][ T5346] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 195.226942][ T5613] usb 1-1: config 0 has an invalid interface number: 65 but max is 3 [ 195.243851][ T5346] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 195.268769][ T5613] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 195.284637][ T5613] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 4 [ 195.298073][ T5613] usb 1-1: config 0 has no interface number 0 [ 195.307078][ T5346] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 195.322573][ T5346] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 195.335133][ T5613] usb 1-1: New USB device found, idVendor=0af7, idProduct=0101, bcdDevice=91.34 [ 195.445658][ T5613] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.464297][ T5346] usb 2-1: USB disconnect, device number 12 [ 195.480816][ T5613] usb 1-1: Product: syz [ 195.743485][ T5613] usb 1-1: Manufacturer: syz [ 195.758820][ T5613] usb 1-1: SerialNumber: syz [ 195.809945][ T5613] usb 1-1: config 0 descriptor?? [ 196.483975][ T5613] flexcop_usb: set interface failed. [ 196.503616][ T5613] b2c2_flexcop_usb 1-1:0.65: probe with driver b2c2_flexcop_usb failed with error -22 [ 196.554486][ T5613] usb 1-1: USB disconnect, device number 15 [ 196.615263][ T7049] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.634579][ T7049] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 197.845315][ T7049] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 197.860391][ T29] kauditd_printk_skb: 35 callbacks suppressed [ 197.860403][ T29] audit: type=1400 audit(1779645948.718:527): avc: denied { connect } for pid=7046 comm="syz.1.302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 197.979491][ T7049] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.005867][ T7049] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.040039][ T29] audit: type=1400 audit(1779645948.898:528): avc: denied { kexec_image_load } for pid=7055 comm="syz.2.304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 198.053619][ T7049] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.103880][ T29] audit: type=1400 audit(1779645948.958:529): avc: denied { create } for pid=7055 comm="syz.2.304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 198.128001][ T7053] netlink: 28 bytes leftover after parsing attributes in process `syz.1.302'. [ 198.143729][ T7049] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.177458][ T29] audit: type=1400 audit(1779645948.968:530): avc: denied { bind } for pid=7055 comm="syz.2.304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 198.243762][ T29] audit: type=1400 audit(1779645948.968:531): avc: denied { setopt } for pid=7055 comm="syz.2.304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 198.249595][ T7049] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.273244][ T7056] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 198.683044][ T29] audit: type=1400 audit(1779645948.988:532): avc: denied { accept } for pid=7055 comm="syz.2.304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 198.912386][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 198.949673][ T29] audit: type=1400 audit(1779645948.998:533): avc: denied { write } for pid=7055 comm="syz.2.304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 198.962194][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 199.030506][ T29] audit: type=1400 audit(1779645948.998:534): avc: denied { read } for pid=7055 comm="syz.2.304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 199.100901][ T29] audit: type=1400 audit(1779645949.008:535): avc: denied { ioctl } for pid=7058 comm="syz.5.305" path="socket:[14377]" dev="sockfs" ino=14377 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 199.213350][ T29] audit: type=1400 audit(1779645949.008:536): avc: denied { connect } for pid=7058 comm="syz.5.305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 199.646833][ T7085] netlink: 'syz.0.310': attribute type 1 has an invalid length. [ 199.746999][ T7085] 8021q: adding VLAN 0 to HW filter on device bond1 [ 199.877701][ T7088] bond1: (slave geneve2): making interface the new active one [ 199.980846][ T7088] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 200.322368][ T7102] gre0: entered promiscuous mode [ 200.352052][ T7102] gre0: entered allmulticast mode [ 200.573360][ T7117] netlink: 4 bytes leftover after parsing attributes in process `syz.5.315'. [ 200.601764][ T7117] netlink: 12 bytes leftover after parsing attributes in process `syz.5.315'. [ 201.280063][ T7074] Bluetooth: hci3: command 0x0406 tx timeout [ 201.286334][ T7074] Bluetooth: hci1: command 0x0406 tx timeout [ 201.292406][ T7074] Bluetooth: hci2: command 0x0406 tx timeout [ 201.298427][ T7074] Bluetooth: hci0: command 0x0406 tx timeout [ 202.338639][ T7141] netlink: 16 bytes leftover after parsing attributes in process `syz.5.320'. [ 202.619994][ T7147] netlink: 'syz.2.322': attribute type 1 has an invalid length. [ 202.627677][ T7147] netlink: 28 bytes leftover after parsing attributes in process `syz.2.322'. [ 203.691383][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 204.045724][ T29] kauditd_printk_skb: 47 callbacks suppressed [ 204.045740][ T29] audit: type=1400 audit(1779645954.908:584): avc: denied { create } for pid=7160 comm="syz.3.326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 204.164672][ T7167] netlink: 'syz.3.328': attribute type 1 has an invalid length. [ 204.181582][ T29] audit: type=1400 audit(1779645955.038:585): avc: denied { create } for pid=7168 comm="syz.5.329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 204.201442][ T5717] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 204.239534][ T7171] netlink: 40 bytes leftover after parsing attributes in process `syz.3.328'. [ 204.244282][ T86] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 204.258757][ T29] audit: type=1400 audit(1779645955.068:586): avc: denied { ioctl } for pid=7168 comm="syz.5.329" path="socket:[14638]" dev="sockfs" ino=14638 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 204.362180][ T7167] 8021q: adding VLAN 0 to HW filter on device bond4 [ 204.371419][ T5717] usb 3-1: Using ep0 maxpacket: 32 [ 204.396817][ T5717] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 204.405948][ T29] audit: type=1400 audit(1779645955.088:587): avc: denied { create } for pid=7168 comm="syz.5.329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 204.413765][ T86] usb 2-1: device descriptor read/64, error -71 [ 204.469295][ T5717] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 204.502460][ T5717] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 204.530637][ T29] audit: type=1400 audit(1779645955.088:588): avc: denied { setopt } for pid=7168 comm="syz.5.329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 204.534826][ T5717] usb 3-1: Product: syz [ 204.624528][ T5717] usb 3-1: Manufacturer: syz [ 204.638110][ T5717] usb 3-1: SerialNumber: syz [ 204.644935][ T29] audit: type=1400 audit(1779645955.378:589): avc: denied { write } for pid=7144 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 204.674232][ T5717] usb 3-1: config 0 descriptor?? [ 204.700188][ T7156] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 204.814961][ T86] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 204.888534][ T7186] netlink: 4 bytes leftover after parsing attributes in process `syz.3.331'. [ 204.907610][ T7186] netlink: 12 bytes leftover after parsing attributes in process `syz.3.331'. [ 205.051981][ T86] usb 2-1: device descriptor read/64, error -71 [ 205.193654][ T86] usb usb2-port1: attempt power cycle [ 206.262116][ T29] audit: type=1400 audit(1779645956.578:590): avc: denied { open } for pid=7182 comm="syz.5.332" path="/dev/ptyqe" dev="devtmpfs" ino=133 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 206.347595][ T5717] usb 3-1: USB disconnect, device number 7 [ 206.398480][ T29] audit: type=1400 audit(1779645956.598:591): avc: denied { ioctl } for pid=7182 comm="syz.5.332" path="/dev/ptyqe" dev="devtmpfs" ino=133 ioctlcmd=0x5423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 206.560998][ T7193] netlink: 'syz.3.334': attribute type 1 has an invalid length. [ 206.567267][ T29] audit: type=1400 audit(1779645956.598:592): avc: denied { write } for pid=7182 comm="syz.5.332" name="001" dev="devtmpfs" ino=747 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 206.568713][ T7193] netlink: 28 bytes leftover after parsing attributes in process `syz.3.334'. [ 206.600424][ T86] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 206.632398][ T86] usb 2-1: device descriptor read/8, error -71 [ 206.696117][ T29] audit: type=1400 audit(1779645956.608:593): avc: denied { write } for pid=7182 comm="syz.5.332" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 206.742358][ T7190] netlink: 28 bytes leftover after parsing attributes in process `syz.2.324'. [ 206.801609][ T7190] netlink: 28 bytes leftover after parsing attributes in process `syz.2.324'. [ 206.911466][ T86] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 206.932215][ T86] usb 2-1: device descriptor read/8, error -71 [ 207.054111][ T86] usb usb2-port1: unable to enumerate USB device [ 207.172104][ T7200] input: syz1 as /devices/virtual/input/input11 [ 208.040325][ T7220] netlink: 16 bytes leftover after parsing attributes in process `syz.2.340'. [ 208.106879][ T7221] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 208.230952][ T7221] bond2: (slave lo): Enslaving as an active interface with an up link [ 208.261582][ T5613] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 208.978120][ T7221] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 209.241409][ T5613] usb 6-1: Using ep0 maxpacket: 8 [ 209.263036][ T5613] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 209.280181][ T5613] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 209.409356][ T5613] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.585918][ T7241] netlink: 'syz.0.345': attribute type 1 has an invalid length. [ 209.593804][ T7241] netlink: 28 bytes leftover after parsing attributes in process `syz.0.345'. [ 209.675564][ T5613] usb 6-1: config 0 descriptor?? [ 209.722877][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 209.722895][ T29] audit: type=1400 audit(1779645960.588:599): avc: denied { map } for pid=7235 comm="syz.2.344" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 209.902445][ T5613] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 210.519172][ T29] audit: type=1400 audit(1779645961.378:600): avc: denied { create } for pid=7246 comm="syz.0.347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 210.560208][ T29] audit: type=1400 audit(1779645961.408:601): avc: denied { mount } for pid=7246 comm="syz.0.347" name="/" dev="autofs" ino=15912 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 210.839842][ T29] audit: type=1400 audit(1779645961.698:602): avc: denied { ioctl } for pid=7256 comm="syz.3.349" path="socket:[15924]" dev="sockfs" ino=15924 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 210.865068][ T7257] team0: entered allmulticast mode [ 210.878364][ T7257] team_slave_0: entered allmulticast mode [ 210.897581][ T7257] team_slave_1: entered allmulticast mode [ 210.909765][ T7257] netdevsim netdevsim3 netdevsim1: entered allmulticast mode [ 210.928099][ T7258] team0: left allmulticast mode [ 210.933164][ T7258] team_slave_0: left allmulticast mode [ 210.938807][ T7258] team_slave_1: left allmulticast mode [ 210.944465][ T7258] netdevsim netdevsim3 netdevsim1: left allmulticast mode [ 210.951038][ T7257] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 210.974211][ T7257] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.051427][ T86] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 211.191523][ T86] usb 2-1: device descriptor read/64, error -71 [ 211.461427][ T86] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 211.622908][ T86] usb 2-1: device descriptor read/64, error -71 [ 211.757123][ T86] usb usb2-port1: attempt power cycle [ 211.877592][ T5346] usb 6-1: USB disconnect, device number 9 [ 211.971559][ T7265] netlink: 'syz.3.351': attribute type 2 has an invalid length. [ 211.996609][ T7265] netlink: 224 bytes leftover after parsing attributes in process `syz.3.351'. [ 212.021875][ T29] audit: type=1400 audit(1779645962.888:603): avc: denied { write } for pid=7264 comm="syz.3.351" laddr=172.20.20.10 lport=255 faddr=172.20.20.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 212.050842][ T7265] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.076684][ T7265] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.287368][ T29] audit: type=1400 audit(1779645963.128:604): avc: denied { name_bind } for pid=7268 comm="syz.0.353" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 212.843784][ T5346] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 212.857151][ T86] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 213.081357][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 213.093233][ T29] audit: type=1400 audit(1779645963.128:605): avc: denied { node_bind } for pid=7268 comm="syz.0.353" saddr=::1 src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 213.105624][ T5346] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 213.132020][ T86] usb 2-1: device descriptor read/8, error -71 [ 213.151616][ T5346] usb 6-1: config 0 has no interface number 0 [ 213.183698][ T5346] usb 6-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 213.205265][ T5346] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.238621][ T5346] usb 6-1: Product: syz [ 213.345683][ T5346] usb 6-1: Manufacturer: syz [ 213.359034][ T5346] usb 6-1: SerialNumber: syz [ 213.377323][ T5346] usb 6-1: config 0 descriptor?? [ 213.440080][ T7281] netlink: 'syz.3.357': attribute type 1 has an invalid length. [ 213.447912][ T7281] netlink: 28 bytes leftover after parsing attributes in process `syz.3.357'. [ 213.548726][ T5346] usb 6-1: selecting invalid altsetting 1 [ 213.581929][ T86] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 213.595092][ T5346] dvb_ttusb_budget: ttusb_init_controller: error [ 213.608142][ T5346] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 213.642471][ T86] usb 2-1: device descriptor read/8, error -71 [ 213.771714][ T86] usb usb2-port1: unable to enumerate USB device [ 213.827404][ T24] IPVS: starting estimator thread 0... [ 213.876334][ T5346] DVB: Unable to find symbol stv0299_attach() [ 213.925891][ T7285] netlink: 8 bytes leftover after parsing attributes in process `syz.1.358'. [ 213.952229][ T7286] IPVS: using max 36 ests per chain, 86400 per kthread [ 213.988694][ T5346] DVB: Unable to find symbol tda8083_attach() [ 213.991865][ T7283] netlink: 164 bytes leftover after parsing attributes in process `syz.1.358'. [ 214.006431][ T5346] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 214.030661][ T5346] usb 6-1: USB disconnect, device number 10 [ 214.312964][ T7294] netlink: 4 bytes leftover after parsing attributes in process `syz.3.361'. [ 214.349599][ T7294] netlink: 12 bytes leftover after parsing attributes in process `syz.3.361'. [ 214.364467][ T5613] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 214.386264][ T7296] netlink: 4 bytes leftover after parsing attributes in process `syz.0.355'. [ 214.402986][ T7296] netlink: 8 bytes leftover after parsing attributes in process `syz.0.355'. [ 214.422925][ T7296] netlink: 8 bytes leftover after parsing attributes in process `syz.0.355'. [ 214.491466][ T29] audit: type=1400 audit(1779645965.348:606): avc: denied { map } for pid=7299 comm="syz.3.363" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=15009 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 214.535988][ T5613] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 214.539332][ T29] audit: type=1400 audit(1779645965.358:607): avc: denied { read write } for pid=7299 comm="syz.3.363" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=15009 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 214.601197][ T5613] usb 3-1: New USB device found, idVendor=06cb, idProduct=73f4, bcdDevice= 0.00 [ 214.631407][ T5613] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.653279][ T804] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 214.671044][ T29] audit: type=1400 audit(1779645965.528:608): avc: denied { accept } for pid=7304 comm="syz.3.365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 214.699565][ T7306] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.767429][ T7309] netlink: 'syz.0.364': attribute type 3 has an invalid length. [ 214.785634][ T7309] netlink: 'syz.0.364': attribute type 3 has an invalid length. [ 214.829089][ T7306] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.841119][ T804] usb 2-1: Using ep0 maxpacket: 16 [ 214.887366][ T804] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 214.973730][ T804] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 215.042085][ T5613] usb 3-1: config 0 descriptor?? [ 215.764687][ T804] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 215.796128][ T804] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.907933][ T804] usb 2-1: config 0 descriptor?? [ 216.135953][ T5613] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 216.342224][ T7317] macsec1: entered promiscuous mode [ 216.347657][ T7317] macsec1: entered allmulticast mode [ 216.360104][ T29] audit: type=1400 audit(1779645967.218:609): avc: denied { name_bind } for pid=7316 comm="syz.0.368" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 216.402130][ T7319] fuse: Unknown parameter 'gt' [ 216.667545][ T804] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 216.687938][ T29] audit: type=1400 audit(1779645967.258:610): avc: denied { read write } for pid=7297 comm="syz.1.362" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 216.713945][ T29] audit: type=1400 audit(1779645967.258:611): avc: denied { open } for pid=7297 comm="syz.1.362" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 217.352336][ T804] usb 6-1: device descriptor read/64, error -71 [ 217.360873][ T29] audit: type=1400 audit(1779645967.258:612): avc: denied { mounton } for pid=7297 comm="syz.1.362" path="/77/file0" dev="tmpfs" ino=443 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 217.383437][ T29] audit: type=1400 audit(1779645967.388:613): avc: denied { read write } for pid=7316 comm="syz.0.368" name="vhost-vsock" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 217.420140][ T29] audit: type=1400 audit(1779645967.518:614): avc: denied { open } for pid=7316 comm="syz.0.368" path="/dev/vhost-vsock" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 217.445202][ T29] audit: type=1400 audit(1779645967.648:615): avc: denied { wake_alarm } for pid=7289 comm="syz.2.359" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 218.442326][ T29] audit: type=1400 audit(1779645967.648:616): avc: denied { read } for pid=7289 comm="syz.2.359" name="sg0" dev="devtmpfs" ino=732 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 219.505031][ T804] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 220.475710][ T29] audit: type=1400 audit(1779645967.648:617): avc: denied { open } for pid=7289 comm="syz.2.359" path="/dev/sg0" dev="devtmpfs" ino=732 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 220.507211][ T29] audit: type=1400 audit(1779645967.728:618): avc: denied { write } for pid=7289 comm="syz.2.359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 220.837136][ T86] usb 2-1: USB disconnect, device number 21 [ 221.001152][ T5717] usb 3-1: USB disconnect, device number 8 [ 221.491457][ T804] usb 6-1: device descriptor read/64, error -71 [ 221.651527][ T804] usb usb6-port1: attempt power cycle [ 221.846730][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 221.846770][ T29] audit: type=1400 audit(1779645972.708:624): avc: denied { sys_module } for pid=7343 comm="syz.1.375" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 221.847263][ T7354] fuse: Bad value for 'group_id' [ 221.894622][ T7354] fuse: Bad value for 'group_id' [ 222.031591][ T804] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 222.041941][ T7361] binder: Bad value for 'stats' [ 222.050886][ T29] audit: type=1400 audit(1779645972.908:625): avc: denied { mounton } for pid=7334 comm="syz.0.371" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 222.600936][ T804] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 222.616265][ T29] audit: type=1400 audit(1779645972.908:626): avc: denied { write } for pid=7334 comm="syz.0.371" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 222.621134][ T7365] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.650337][ T804] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.650738][ T7365] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.667514][ T804] usb 6-1: Product: syz [ 222.686906][ T804] usb 6-1: Manufacturer: syz [ 222.692871][ T29] audit: type=1400 audit(1779645973.548:627): avc: denied { execute } for pid=7364 comm="syz.3.379" name="file0" dev="tmpfs" ino=513 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 222.719454][ T804] usb 6-1: SerialNumber: syz [ 222.745010][ T804] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 222.762210][ T29] audit: type=1400 audit(1779645973.548:628): avc: denied { execute_no_trans } for pid=7364 comm="syz.3.379" path="/95/file0" dev="tmpfs" ino=513 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 222.841786][ T29] audit: type=1400 audit(1779645973.698:629): avc: denied { firmware_load } for pid=5717 comm="kworker/1:4" path="/lib/firmware/ath9k_htc/htc_9271-1.4.0.fw" dev="sda1" ino=313 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 222.873045][ T29] audit: type=1400 audit(1779645973.698:630): avc: denied { bind } for pid=7362 comm="syz.2.378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 222.895803][ T7369] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=51 sclass=netlink_route_socket pid=7369 comm=syz.2.378 [ 222.915621][ T5717] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 222.931604][ T7369] netlink: 'syz.2.378': attribute type 1 has an invalid length. [ 222.946576][ T29] audit: type=1400 audit(1779645973.698:631): avc: denied { name_bind } for pid=7362 comm="syz.2.378" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 222.988135][ T29] audit: type=1400 audit(1779645973.708:632): avc: denied { node_bind } for pid=7362 comm="syz.2.378" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 223.010787][ T7369] 8021q: adding VLAN 0 to HW filter on device bond1 [ 223.026071][ T29] audit: type=1400 audit(1779645973.728:633): avc: denied { write } for pid=7362 comm="syz.2.378" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 223.026322][ T7371] bond1: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 223.135585][ T7371] bond1: entered allmulticast mode [ 223.212107][ T7369] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 223.569583][ T7374] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 223.849232][ T5738] usb 6-1: USB disconnect, device number 13 [ 224.001732][ T5717] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 224.015124][ T5717] ath9k_htc: Failed to initialize the device [ 224.033955][ T5738] usb 6-1: ath9k_htc: USB layer deinitialized [ 224.331873][ T86] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 224.464249][ T5613] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 224.533204][ T86] usb 3-1: Using ep0 maxpacket: 16 [ 224.553035][ T86] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 224.567186][ T86] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 224.578933][ T86] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 224.591153][ T86] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 224.605168][ T86] usb 3-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 224.621041][ T86] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.727158][ T5613] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 224.817648][ T5613] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 224.818992][ T86] usb 3-1: config 0 descriptor?? [ 225.238043][ T86] nintendo 0003:057E:2019.0002: hidraw0: USB HID v80.05 Device [HID 057e:2019] on usb-dummy_hcd.2-1/input0 [ 225.292636][ T7409] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 225.317294][ T7409] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 225.375559][ T86] nintendo 0003:057E:2019.0002: Failed to get joycon info; ret=-38 [ 225.410265][ T86] nintendo 0003:057E:2019.0002: Failed to retrieve controller info; ret=-38 [ 225.440361][ T86] nintendo 0003:057E:2019.0002: Failed to initialize controller; ret=-38 [ 225.779764][ T86] nintendo 0003:057E:2019.0002: probe - fail = -38 [ 225.787949][ T86] nintendo 0003:057E:2019.0002: probe with driver nintendo failed with error -38 [ 225.823560][ T86] usb 3-1: USB disconnect, device number 9 [ 226.006755][ T7426] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 226.025902][ T7426] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.637970][ T7431] netlink: 12 bytes leftover after parsing attributes in process `syz.1.396'. [ 227.500466][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 227.500485][ T29] audit: type=1400 audit(1779645977.848:639): avc: denied { write } for pid=7432 comm="syz.1.397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 227.556230][ T5613] usb 1-1: string descriptor 0 read error: -71 [ 227.577866][ T5613] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 227.688554][ T5613] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.715177][ T7438] loop8: detected capacity change from 0 to 7 [ 227.739081][ T5613] usb 1-1: can't set config #1, error -71 [ 227.777006][ T5613] usb 1-1: USB disconnect, device number 16 [ 227.819094][ T7438] Dev loop8: unable to read RDB block 7 [ 227.854477][ T7438] loop8: unable to read partition table [ 227.892849][ T7438] loop8: partition table beyond EOD, truncated [ 227.901517][ T7438] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 227.953365][ T29] audit: type=1400 audit(1779645978.808:640): avc: denied { setopt } for pid=7446 comm="syz.2.401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 227.984407][ T29] audit: type=1400 audit(1779645978.838:641): avc: denied { write } for pid=7446 comm="syz.2.401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 228.366589][ T29] audit: type=1400 audit(1779645979.218:642): avc: denied { connect } for pid=7454 comm="syz.3.404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 228.527866][ T29] audit: type=1400 audit(1779645979.218:643): avc: denied { name_connect } for pid=7454 comm="syz.3.404" dest=65532 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 228.746706][ T29] audit: type=1400 audit(1779645979.348:644): avc: denied { shutdown } for pid=7454 comm="syz.3.404" lport=44601 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 228.905553][ T29] audit: type=1400 audit(1779645979.358:645): avc: denied { read } for pid=7454 comm="syz.3.404" lport=44601 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 230.993193][ T86] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 231.173615][ T86] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 231.449502][ T86] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 231.461733][ T86] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 231.468589][ T7475] input: syz1 as /devices/virtual/input/input12 [ 231.508502][ T86] usb 2-1: string descriptor 0 read error: -71 [ 231.529383][ T86] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 231.539511][ T86] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.748782][ T86] usb 2-1: config 0 descriptor?? [ 232.770429][ T86] usb 2-1: can't set config #0, error -71 [ 232.820557][ T86] usb 2-1: USB disconnect, device number 22 [ 233.041039][ T7487] Invalid source name [ 233.045414][ T29] audit: type=1400 audit(1779645983.908:646): avc: denied { mount } for pid=7484 comm="syz.3.413" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 233.047168][ T7485] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.116105][ T29] audit: type=1400 audit(1779645983.978:647): avc: denied { read write } for pid=7473 comm="syz.0.410" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 233.117999][ T7474] 9p: Bad value for 'rfdno' [ 233.145648][ T7485] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 233.201307][ T29] audit: type=1400 audit(1779645983.978:648): avc: denied { open } for pid=7473 comm="syz.0.410" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 233.411453][ T5803] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 233.595616][ T5803] usb 1-1: config 0 has an invalid interface number: 128 but max is 0 [ 233.623455][ T5803] usb 1-1: config 0 has no interface number 0 [ 233.641096][ T5803] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 233.661773][ T5803] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.685612][ T5803] usb 1-1: Product: syz [ 233.700187][ T5803] usb 1-1: Manufacturer: syz [ 233.710545][ T5803] usb 1-1: SerialNumber: syz [ 233.723124][ T5803] usb 1-1: config 0 descriptor?? [ 233.736270][ T29] audit: type=1400 audit(1779645984.598:649): avc: denied { name_connect } for pid=7498 comm="syz.5.417" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 233.861462][ T24] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 234.032844][ T24] usb 2-1: config 0 has an invalid interface number: 64 but max is 0 [ 234.043061][ T24] usb 2-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 234.060197][ T24] usb 2-1: config 0 has no interface number 0 [ 234.066447][ T29] audit: type=1400 audit(1779645984.918:650): avc: denied { watch watch_reads } for pid=7507 comm="syz.2.419" path="pipe:[17474]" dev="pipefs" ino=17474 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 234.069121][ T24] usb 2-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 234.100233][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.121485][ T24] usb 2-1: Product: syz [ 234.141507][ T24] usb 2-1: Manufacturer: syz [ 234.151692][ T24] usb 2-1: SerialNumber: syz [ 234.180672][ T24] usb 2-1: config 0 descriptor?? [ 234.362489][ T29] audit: type=1400 audit(1779645985.228:651): avc: denied { read write } for pid=7512 comm="syz.2.421" name="rdma_cm" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 234.389461][ T29] audit: type=1400 audit(1779645985.228:652): avc: denied { open } for pid=7512 comm="syz.2.421" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 234.486509][ T7514] netlink: 28 bytes leftover after parsing attributes in process `syz.2.421'. [ 234.815870][ T5803] usb 1-1: Firmware version (0.0) predates our first public release. [ 234.837253][ T5803] usb 1-1: Please update to version 0.2 or newer [ 234.846161][ T24] uvcvideo 2-1:0.64: Found UVC 0.00 device syz (046d:0823) [ 234.871886][ T24] uvcvideo 2-1:0.64: No valid video chain found. [ 234.918840][ T24] usb 2-1: USB disconnect, device number 23 [ 234.974169][ T5803] usb 1-1: USB disconnect, device number 17 [ 235.267950][ T29] audit: type=1400 audit(1779645986.128:653): avc: denied { mount } for pid=7526 comm="syz.0.424" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 235.353659][ T29] audit: type=1400 audit(1779645986.198:654): avc: denied { ioctl } for pid=7532 comm="syz.2.425" path="socket:[17504]" dev="sockfs" ino=17504 ioctlcmd=0x48ca scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 235.473557][ T7542] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 235.517951][ T7542] netlink: 'syz.3.428': attribute type 3 has an invalid length. [ 235.639197][ T7545] netlink: 'syz.0.427': attribute type 1 has an invalid length. [ 235.648254][ T7545] netlink: 28 bytes leftover after parsing attributes in process `syz.0.427'. [ 235.756733][ T5613] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 235.924184][ T7554] sg_write: data in/out 764/14 bytes for SCSI command 0x0-- guessing data in; [ 235.924184][ T7554] program syz.3.431 not setting count and/or reply_len properly [ 235.970221][ T29] audit: type=1400 audit(1779645986.768:655): avc: denied { write } for pid=7551 comm="syz.3.431" name="sg0" dev="devtmpfs" ino=732 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 236.073263][ T5613] usb 6-1: config index 0 descriptor too short (expected 3133, got 61) [ 236.123869][ T24] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 236.288081][ T5613] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 236.318880][ T5613] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 236.344684][ T5613] usb 6-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 236.367754][ T5613] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.450462][ T5613] usb 6-1: config 0 descriptor?? [ 236.483345][ T24] usb 2-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30 [ 236.510036][ T5613] gspca_main: spca561-2.14.0 probing abcd:cdee [ 236.527655][ T24] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 236.592180][ T24] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 236.628398][ T24] usb 2-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 236.644265][ T7554] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 236.658727][ T7554] block device autoloading is deprecated and will be removed. [ 236.691494][ T5613] spca561 6-1:0.0: probe with driver spca561 failed with error -22 [ 236.956791][ T24] usb 2-1: config 0 interface 0 has no altsetting 0 [ 236.960052][ T5613] usb 6-1: USB disconnect, device number 14 [ 237.003581][ T24] usb 2-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00 [ 237.081596][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.133665][ T24] usb 2-1: config 0 descriptor?? [ 237.347247][ T7549] tmpfs: Bad value for 'mpol' [ 237.571989][ T7576] netlink: 'syz.5.437': attribute type 1 has an invalid length. [ 237.579666][ T7576] netlink: 28 bytes leftover after parsing attributes in process `syz.5.437'. [ 237.807518][ T24] usbhid 2-1:0.0: can't add hid device: -71 [ 237.827406][ T24] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 237.840240][ T5717] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 237.855678][ T24] usb 2-1: USB disconnect, device number 24 [ 238.024725][ T5717] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 238.061827][ T7591] netlink: 4 bytes leftover after parsing attributes in process `syz.1.441'. [ 238.089090][ T7591] netlink: 12 bytes leftover after parsing attributes in process `syz.1.441'. [ 238.311063][ T5717] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 238.472817][ T5717] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 238.538334][ T7594] netlink: 8 bytes leftover after parsing attributes in process `syz.3.443'. [ 238.547279][ T5717] usb 1-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 238.565548][ T5717] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.586070][ T5717] usb 1-1: config 0 descriptor?? [ 238.596131][ T7580] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 238.720248][ T7596] netlink: 'syz.2.442': attribute type 4 has an invalid length. [ 238.955233][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 238.955250][ T29] audit: type=1400 audit(1779645989.818:659): avc: denied { name_bind } for pid=7600 comm="syz.3.445" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 238.992517][ T7603] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.004023][ T7603] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.047164][ T7598] lo speed is unknown, defaulting to 1000 [ 239.057884][ T7599] lo speed is unknown, defaulting to 1000 [ 239.146516][ T29] audit: type=1400 audit(1779645989.888:660): avc: denied { setopt } for pid=7579 comm="syz.0.438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 239.166682][ T5717] hid-multitouch 0003:1FD2:6007.0003: ignoring exceeding usage max [ 239.183697][ T5717] hid-multitouch 0003:1FD2:6007.0003: usage index exceeded [ 239.191257][ T5717] hid-multitouch 0003:1FD2:6007.0003: item 0 2 2 0 parsing failed [ 239.200537][ T29] audit: type=1400 audit(1779645990.048:661): avc: denied { create } for pid=7601 comm="syz.1.446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 239.222717][ T5717] hid-multitouch 0003:1FD2:6007.0003: probe with driver hid-multitouch failed with error -22 [ 239.239642][ T29] audit: type=1400 audit(1779645990.098:662): avc: denied { write } for pid=7601 comm="syz.1.446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 239.260642][ T5717] usb 1-1: USB disconnect, device number 18 [ 239.492145][ T5612] Bluetooth: hci3: unexpected event for opcode 0x0407 [ 239.586093][ T29] audit: type=1326 audit(1779645990.448:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7619 comm="syz.5.449" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17ef59ce59 code=0x7ffc0000 [ 239.622151][ T29] audit: type=1326 audit(1779645990.448:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7619 comm="syz.5.449" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17ef59ce59 code=0x7ffc0000 [ 239.658005][ T29] audit: type=1326 audit(1779645990.478:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7619 comm="syz.5.449" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17ef59ce59 code=0x7ffc0000 [ 239.714929][ T29] audit: type=1326 audit(1779645990.478:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7619 comm="syz.5.449" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17ef59ce59 code=0x7ffc0000 [ 239.801554][ T29] audit: type=1326 audit(1779645990.478:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7619 comm="syz.5.449" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f17ef59ce59 code=0x7ffc0000 [ 239.895582][ T29] audit: type=1326 audit(1779645990.478:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7619 comm="syz.5.449" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17ef59ce59 code=0x7ffc0000 [ 240.307053][ T86] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 240.561693][ T86] usb 3-1: Using ep0 maxpacket: 8 [ 240.585599][ T86] usb 3-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=4d.89 [ 240.607599][ T86] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.660788][ T86] usb 3-1: config 0 descriptor?? [ 240.710468][ T86] gm12u320 3-1:0.0: [drm:gm12u320_misc_request.constprop.0] *ERROR* Misc. req. error -22 [ 240.766669][ T86] gm12u320 3-1:0.0: probe with driver gm12u320 failed with error -5 [ 240.831966][ T86] usb-storage 3-1:0.0: USB Mass Storage device detected [ 240.934386][ T7629] netlink: 28 bytes leftover after parsing attributes in process `syz.2.453'. [ 240.967991][ T7644] binder: 7641:7644 ioctl 3b72 200000000880 returned -22 [ 240.983582][ T7638] macvlan2: entered promiscuous mode [ 240.985371][ T86] usb-storage 3-1:0.0: device ignored [ 241.180118][ T7638] bridge0: entered promiscuous mode [ 241.250560][ T7644] binder: 7641:7644 ioctl c0845657 200000001ac0 returned -22 [ 241.607710][ T7658] binder: 7641:7658 ioctl 2285 200000000800 returned -22 [ 241.666850][ T5346] IPVS: starting estimator thread 0... [ 241.908913][ T7659] IPVS: using max 35 ests per chain, 84000 per kthread [ 241.947868][ T7651] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.976514][ T7651] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 242.026173][ T7664] netlink: 68 bytes leftover after parsing attributes in process `syz.5.459'. [ 242.223841][ T7673] can0: slcan on ttyS3. [ 242.412532][ T7671] can0 (unregistered): slcan off ttyS3. [ 242.738604][ T7690] siw: device registration error -23 [ 243.501662][ T7698] 9p: Unknown access argument : -22 [ 243.521066][ T5612] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 243.534092][ T5612] Bluetooth: hci3: Injecting HCI hardware error event [ 243.553940][ T5612] Bluetooth: hci3: hardware error 0x00 [ 244.007141][ T29] kauditd_printk_skb: 119 callbacks suppressed [ 244.007175][ T29] audit: type=1400 audit(1779646253.861:788): avc: denied { read } for pid=7700 comm="syz.1.469" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 244.160618][ T29] audit: type=1400 audit(1779646253.891:789): avc: denied { open } for pid=7700 comm="syz.1.469" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 244.185247][ T29] audit: type=1400 audit(1779646253.901:790): avc: denied { ioctl } for pid=7700 comm="syz.1.469" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 244.673529][ T24] usb 3-1: USB disconnect, device number 10 [ 244.700538][ T29] audit: type=1400 audit(1779646254.121:791): avc: denied { write } for pid=7700 comm="syz.1.469" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 244.760262][ T5346] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 244.970263][ T5346] usb 6-1: Using ep0 maxpacket: 16 [ 244.995593][ T5346] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 245.340521][ T5346] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 245.364569][ T29] audit: type=1400 audit(1779646255.212:792): avc: denied { create } for pid=7710 comm="syz.0.472" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 245.392438][ T5346] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 245.418405][ T5346] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 245.437958][ T5346] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.463793][ T5346] usb 6-1: config 0 descriptor?? [ 245.670133][ T5724] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 245.848728][ T5724] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 245.874769][ T5724] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 245.891452][ T5724] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.915412][ T5724] usb 2-1: Product: syz [ 245.928140][ T5724] usb 2-1: Manufacturer: syz [ 245.942100][ T5724] usb 2-1: SerialNumber: syz [ 245.989771][ T5612] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 246.008805][ T29] audit: type=1400 audit(1779646255.862:793): avc: denied { unlink } for pid=5620 comm="syz-executor" name="file0" dev="tmpfs" ino=493 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 246.040021][ T5346] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 246.060558][ T5346] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 246.085646][ T5346] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 246.108094][ T5346] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 246.121613][ T5346] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 246.139174][ T5346] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 246.148830][ T5346] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 246.163034][ T5346] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 246.204073][ T7703] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.230008][ T7703] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.260869][ T29] audit: type=1400 audit(1779646256.122:794): avc: denied { mount } for pid=7722 comm="syz.0.475" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 246.289677][ T5346] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.0004/input/input13 [ 246.420779][ T29] audit: type=1400 audit(1779646256.282:795): avc: denied { unmount } for pid=5620 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 246.460929][ T5346] microsoft 0003:045E:07DA.0004: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 246.537303][ T5346] usb 6-1: USB disconnect, device number 15 [ 246.687841][ T7730] fido_id[7730]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 246.761422][ T29] audit: type=1400 audit(1779646256.622:796): avc: denied { read } for pid=7734 comm="syz.3.477" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 246.800988][ T7735] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.819669][ T29] audit: type=1400 audit(1779646256.622:797): avc: denied { open } for pid=7734 comm="syz.3.477" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 246.852067][ T7735] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.105722][ T5724] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 247.114469][ T5724] cdc_ncm 2-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 247.124265][ T5724] cdc_ncm 2-1:1.0: setting rx_max = 2048 [ 247.352471][ T5612] Bluetooth: hci4: command 0x0406 tx timeout [ 247.682395][ T5724] cdc_ncm 2-1:1.0: setting tx_max = 88 [ 247.758044][ T5724] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 247.958793][ T5724] usb 2-1: USB disconnect, device number 25 [ 248.044270][ T7749] siw: device registration error -23 [ 248.413361][ T5724] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM (NO ZLP) [ 248.545345][ T7752] netlink: 40 bytes leftover after parsing attributes in process `syz.0.481'. [ 249.316905][ T7758] sg_write: data in/out 764/14 bytes for SCSI command 0x0-- guessing data in; [ 249.316905][ T7758] program syz.5.482 not setting count and/or reply_len properly [ 249.551585][ T7753] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 249.561015][ T7753] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 249.571584][ T7753] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 249.606347][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 249.606361][ T29] audit: type=1400 audit(1779646259.434:801): avc: denied { firmware_load } for pid=7747 comm="syz.0.481" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 250.791580][ T29] audit: type=1400 audit(1779646260.584:802): avc: denied { write } for pid=7771 comm="syz.0.488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 252.315450][ T7790] siw: device registration error -23 [ 252.976157][ T5346] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 253.129091][ T7796] sg_write: data in/out 764/14 bytes for SCSI command 0x0-- guessing data in; [ 253.129091][ T7796] program syz.5.495 not setting count and/or reply_len properly [ 253.382733][ T5346] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 253.392510][ T5346] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.409496][ T5346] usb 1-1: Product: syz [ 253.431818][ T5346] usb 1-1: Manufacturer: syz [ 253.444435][ T5346] usb 1-1: SerialNumber: syz [ 253.471897][ T5346] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 253.488181][ T5803] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 253.749666][ T29] audit: type=1400 audit(1779646263.616:803): avc: denied { append } for pid=7789 comm="syz.0.493" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 253.791269][ T7791] veth3: entered promiscuous mode [ 253.796564][ T7791] veth3: entered allmulticast mode [ 254.060264][ T86] usb 1-1: USB disconnect, device number 19 [ 254.361939][ T29] audit: type=1400 audit(1779646264.226:804): avc: denied { getopt } for pid=7806 comm="syz.1.498" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 254.418114][ T7811] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 254.451497][ T29] audit: type=1400 audit(1779646264.306:805): avc: denied { read } for pid=7810 comm="syz.2.499" dev="sockfs" ino=18063 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 254.473234][ T7812] 9p: Bad value for 'rfdno' [ 254.521729][ T7811] qnx6: wrong signature (magic) in superblock #1. [ 254.548116][ T5803] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 254.559874][ T7812] dvmrp0: entered allmulticast mode [ 254.571988][ T7811] qnx6: unable to read the first superblock [ 254.584968][ T5803] ath9k_htc: Failed to initialize the device [ 254.613344][ T86] usb 1-1: ath9k_htc: USB layer deinitialized [ 254.739116][ T7818] netlink: 60 bytes leftover after parsing attributes in process `syz.1.501'. [ 254.781358][ T7811] 9p: Could not find request transport: xen [ 254.974929][ T7825] nfs4: Unknown parameter 'no' [ 255.507157][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.041554][ T29] audit: type=1400 audit(1779646265.907:806): avc: denied { write } for pid=7839 comm="syz.5.507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 256.074584][ T5803] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 256.097499][ T7840] netlink: 32 bytes leftover after parsing attributes in process `syz.5.507'. [ 256.108814][ T29] audit: type=1400 audit(1779646265.967:807): avc: denied { bind } for pid=7839 comm="syz.5.507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 256.131086][ T7840] netlink: 32 bytes leftover after parsing attributes in process `syz.5.507'. [ 256.244570][ T5803] usb 3-1: Using ep0 maxpacket: 8 [ 256.254610][ T5803] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 256.279814][ T5803] usb 3-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice= d.68 [ 256.289519][ T5803] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.298063][ T5803] usb 3-1: Product: syz [ 256.302517][ T5803] usb 3-1: Manufacturer: syz [ 256.307446][ T5803] usb 3-1: SerialNumber: syz [ 256.316941][ T5803] usb 3-1: config 0 descriptor?? [ 256.330167][ T5803] kalmia 3-1:0.0: probe with driver kalmia failed with error -22 [ 256.414425][ T86] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 256.515821][ T29] audit: type=1400 audit(1779646266.387:808): avc: denied { unmount } for pid=5620 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 256.576119][ T86] usb 6-1: Using ep0 maxpacket: 32 [ 256.591006][ T86] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 256.611607][ T804] usb 3-1: USB disconnect, device number 11 [ 256.622756][ T86] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 256.634839][ T86] usb 6-1: config 1 has no interface number 1 [ 256.642450][ T86] usb 6-1: config 1 interface 2 has no altsetting 0 [ 256.660887][ T86] usb 6-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 256.671316][ T86] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.680168][ T86] usb 6-1: Manufacturer: 턪胼䌿퉥㩂痙仙쟲 [ 256.687342][ T86] usb 6-1: SerialNumber: syz [ 257.279582][ T86] usb 6-1: BAAD MICROPHONE c_chmask mismatch [ 257.458076][ T86] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 257.481111][ T86] hub 6-1:1.2: Invalid hub with more than one config or interface [ 257.512227][ T86] hub 6-1:1.2: probe with driver hub failed with error -22 [ 258.609082][ T29] audit: type=1400 audit(1779646267.618:809): avc: denied { write } for pid=7860 comm="syz.2.512" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 259.145587][ T86] usb 6-1: USB disconnect, device number 16 [ 259.258871][ T7865] nvme_fabrics: missing parameter 'transport=%s' [ 259.312791][ T5614] udevd[5614]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 259.372731][ T7865] nvme_fabrics: missing parameter 'nqn=%s' [ 259.630114][ T7882] netlink: 'syz.5.518': attribute type 7 has an invalid length. [ 260.362473][ T24] usb 6-1: new full-speed USB device number 17 using dummy_hcd [ 260.472670][ T29] audit: type=1400 audit(1779646270.269:810): avc: denied { mount } for pid=7901 comm="syz.3.523" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 261.022441][ T24] usb 6-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x7F, changing to 0xF [ 261.067573][ T24] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 261.089591][ T24] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 29949, setting to 64 [ 261.271703][ T24] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 261.274510][ T7911] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 261.306647][ T24] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 576, setting to 64 [ 261.314073][ T7911] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 261.342366][ T24] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 261.376778][ T24] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 261.395013][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 261.398725][ T7911] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 261.459759][ T7911] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 261.480987][ T24] usb 6-1: SerialNumber: syz [ 261.495560][ T7882] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 261.516100][ T7914] Bluetooth: MGMT ver 1.23 [ 261.522006][ T7882] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 261.543070][ T7882] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 261.574755][ T24] rndis_host 6-1:1.0: missing RNDIS status endpoint [ 261.777476][ T24] usb 6-1: USB disconnect, device number 17 [ 262.366377][ T7931] kAFS: unparsable volume name [ 262.511453][ T5717] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 262.891220][ T5717] usb 2-1: Using ep0 maxpacket: 32 [ 263.058027][ T5717] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 263.183437][ T5717] usb 2-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=33.f9 [ 263.255656][ T5717] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.291822][ T5717] usb 2-1: Product: syz [ 263.317330][ T5717] usb 2-1: Manufacturer: syz [ 263.339271][ T5717] usb 2-1: SerialNumber: syz [ 263.346595][ T7939] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 263.372611][ T5717] usb 2-1: config 0 descriptor?? [ 263.480628][ T7939] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 263.517757][ T7947] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 263.859038][ T7944] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10) [ 263.865861][ T7944] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 263.874339][ T7944] vhci_hcd vhci_hcd.0: Device attached [ 264.048119][ T5717] usb 2-1: USB disconnect, device number 26 [ 264.233203][ T7945] vhci_hcd: connection closed [ 264.417740][ T6562] vhci_hcd vhci_hcd.0: stop threads [ 264.638209][ T6562] vhci_hcd vhci_hcd.0: release socket [ 264.783194][ T6562] vhci_hcd vhci_hcd.0: disconnect device [ 264.795207][ T24] usb 34-1: SetAddress Request (2) to port 0 [ 264.803276][ T24] usb 34-1: new SuperSpeed USB device number 2 using vhci_hcd [ 264.830216][ T24] usb 34-1: enqueue for inactive port 0 [ 264.893764][ T29] audit: type=1400 audit(1779646274.751:811): avc: denied { remount } for pid=7938 comm="syz.3.532" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 265.223776][ T24] usb usb34-port1: attempt power cycle [ 265.279987][ T5803] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 265.338496][ T7968] netlink: 28 bytes leftover after parsing attributes in process `syz.5.539'. [ 265.460054][ T5803] usb 2-1: Using ep0 maxpacket: 32 [ 265.487893][ T5803] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 265.509667][ T29] audit: type=1400 audit(1779646275.372:812): avc: denied { map } for pid=7971 comm="syz.2.540" path="socket:[18366]" dev="sockfs" ino=18366 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 265.547115][ T5803] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 265.578693][ T5803] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 265.599822][ T29] audit: type=1400 audit(1779646275.372:813): avc: denied { read } for pid=7971 comm="syz.2.540" path="socket:[18366]" dev="sockfs" ino=18366 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 265.626184][ T5803] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.658209][ T5803] usb 2-1: config 0 descriptor?? [ 265.690824][ T5803] hub 2-1:0.0: USB hub found [ 265.728532][ T29] audit: type=1400 audit(1779646275.582:814): avc: denied { checkpoint_restore } for pid=7971 comm="syz.2.540" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 265.818401][ T24] usb usb34-port1: unable to enumerate USB device [ 266.095027][ T7981] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 266.345398][ T7981] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 266.631737][ T5803] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 266.651186][ T5803] usbhid 2-1:0.0: fixing wrong optional hid class descriptors count [ 266.679623][ T5803] usbhid 2-1:0.0: can't add hid device: -22 [ 266.685663][ T5803] usbhid 2-1:0.0: probe with driver usbhid failed with error -22 [ 266.735178][ T5803] usb 2-1: USB disconnect, device number 27 [ 266.969333][ T7989] netlink: 'syz.5.544': attribute type 1 has an invalid length. [ 267.439102][ T7989] 8021q: adding VLAN 0 to HW filter on device bond1 [ 268.137610][ T7992] bond1: (slave syz_tun): Enslaving as a backup interface with an up link [ 268.431522][ T29] audit: type=1400 audit(1779646278.203:815): avc: denied { setopt } for pid=8007 comm="syz.0.548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 268.799374][ T29] audit: type=1400 audit(1779646278.213:816): avc: denied { execute } for pid=8007 comm="syz.0.548" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=19491 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 269.428471][ T24] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 269.547657][ T8020] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 269.575154][ T8022] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 269.584165][ T8022] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 269.597839][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 269.607615][ T24] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 269.635721][ T8022] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 269.666254][ T24] usb 6-1: config 0 has no interface number 0 [ 269.694870][ T8022] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 269.703110][ T24] usb 6-1: config 0 interface 2 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 269.762772][ T24] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 269.800170][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.830211][ T24] usb 6-1: config 0 descriptor?? [ 269.877708][ T5724] usb 2-1: new low-speed USB device number 28 using dummy_hcd [ 270.490280][ T24] mcp2221 0003:04D8:00DD.0005: unknown main item tag 0x0 [ 270.516686][ T24] mcp2221 0003:04D8:00DD.0005: unknown main item tag 0x0 [ 270.516694][ T5724] usb 2-1: device descriptor read/64, error -71 [ 270.538664][ T24] mcp2221 0003:04D8:00DD.0005: unknown main item tag 0x0 [ 270.562016][ T24] mcp2221 0003:04D8:00DD.0005: unknown main item tag 0x0 [ 270.572726][ T8031] netlink: 'syz.3.551': attribute type 9 has an invalid length. [ 270.587425][ T5717] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 270.598768][ T24] mcp2221 0003:04D8:00DD.0005: unknown main item tag 0x0 [ 270.624743][ T24] mcp2221 0003:04D8:00DD.0005: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input2 [ 270.693315][ T8031] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 270.723169][ C1] usb 6-1: input irq status -75 received [ 270.751514][ T5717] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 270.771114][ T5724] usb 2-1: new low-speed USB device number 29 using dummy_hcd [ 270.841618][ T8031] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 270.870231][ T5717] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 270.920652][ T5717] usb 3-1: New USB device found, idVendor=041e, idProduct=3020, bcdDevice= 0.40 [ 270.956126][ T5717] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.993844][ T5717] usb 3-1: Product: syz [ 271.007889][ T8036] netlink: 4 bytes leftover after parsing attributes in process `syz.0.554'. [ 271.022115][ T5717] usb 3-1: Manufacturer: syz [ 271.044436][ T5717] usb 3-1: SerialNumber: syz [ 271.069413][ T5724] usb 2-1: device descriptor read/64, error -71 [ 271.151693][ T24] usb 6-1: USB disconnect, device number 18 [ 271.208909][ T5724] usb usb2-port1: attempt power cycle [ 271.996811][ T5724] usb 2-1: new low-speed USB device number 30 using dummy_hcd [ 272.115024][ T5724] usb 2-1: device descriptor read/8, error -71 [ 272.166241][ T8041] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 272.278756][ T8041] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 272.320003][ T8046] netlink: 20 bytes leftover after parsing attributes in process `syz.0.557'. [ 272.401143][ T5724] usb 2-1: new low-speed USB device number 31 using dummy_hcd [ 272.448537][ T5724] usb 2-1: device descriptor read/8, error -71 [ 272.491599][ T5717] usb 3-1: 1:1 : no or invalid class specific endpoint descriptor [ 272.513733][ T5717] usb 3-1: 1:1: invalid format type 0x1101 is detected, processed as PCM [ 272.535376][ T5717] usb 3-1: 1:1 : sample bitwidth 9 in over sample bytes 1 [ 272.556647][ T5717] usb 3-1: 0:2 : does not exist [ 272.566768][ T5724] usb usb2-port1: unable to enumerate USB device [ 272.607229][ T5803] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 272.776621][ T5803] usb 1-1: Using ep0 maxpacket: 32 [ 272.787851][ T5717] usb 3-1: USB disconnect, device number 12 [ 272.801588][ T8050] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 272.813796][ T5803] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 272.826633][ T24] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 272.836686][ T29] audit: type=1400 audit(1779646282.715:817): avc: denied { connect } for pid=8051 comm="syz.1.560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 272.866626][ T8050] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 272.876744][ T5803] usb 1-1: config 1 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 272.905724][ T5803] usb 1-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= 0.40 [ 272.920985][ T5803] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.944744][ T5619] udevd[5619]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 273.129366][ T29] audit: type=1400 audit(1779646282.975:818): avc: denied { create } for pid=8049 comm="syz.3.559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 273.196033][ T5803] usb 1-1: Product: syz [ 273.208612][ T5803] usb 1-1: Manufacturer: syz [ 273.215726][ T5803] usb 1-1: SerialNumber: syz [ 273.359174][ T29] audit: type=1400 audit(1779646283.196:819): avc: denied { connect } for pid=8049 comm="syz.3.559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 273.360912][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 273.482787][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 273.506042][ T24] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 273.535453][ T24] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 273.550317][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.576771][ T24] usb 6-1: config 0 descriptor?? [ 273.710791][ T8046] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 273.739475][ T8046] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 273.769310][ T8046] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 273.788420][ T8046] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 273.816817][ T5803] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 273.832010][ T29] audit: type=1400 audit(1779646283.706:820): avc: denied { mount } for pid=8056 comm="syz.3.562" name="/" dev="ramfs" ino=19628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 273.859703][ T5803] usb 1-1: unit 255 not found! [ 273.895287][ T8064] netlink: 24 bytes leftover after parsing attributes in process `syz.2.561'. [ 273.935041][ T5803] usb 1-1: disable ehci-hcd to run US-144 [ 273.957866][ T5803] usb 1-1: disable ehci-hcd to run US-144 [ 273.984771][ T5803] usb 1-1: USB disconnect, device number 20 [ 274.008880][ T24] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x2 [ 274.063029][ T5614] udevd[5614]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 274.238709][ T24] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 274.284887][ T8048] netlink: 'syz.5.558': attribute type 1 has an invalid length. [ 274.312911][ T8048] netlink: 224 bytes leftover after parsing attributes in process `syz.5.558'. [ 274.426501][ T5724] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 274.481000][ T5803] IPVS: starting estimator thread 0... [ 274.587949][ T5724] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 274.605471][ T8075] IPVS: using max 39 ests per chain, 93600 per kthread [ 274.617185][ T5724] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 274.634905][ T5724] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 274.661550][ T5724] usb 2-1: New USB device found, idVendor=046f, idProduct=ff7f, bcdDevice= 0.00 [ 274.687045][ T5724] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.716103][ T5724] usb 2-1: config 0 descriptor?? [ 277.356771][ T30] INFO: task syz.4.106:6251 blocked for more than 144 seconds. [ 277.413719][ T5803] usb 6-1: reset high-speed USB device number 19 using dummy_hcd [ 277.627950][ T30] Tainted: G L syzkaller #0 [ 277.645752][ T5724] usbhid 2-1:0.0: can't add hid device: -71 [ 277.649464][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 277.675574][ T30] task:syz.4.106 state:D stack:26840 pid:6251 tgid:6245 ppid:5622 task_flags:0x400640 flags:0x00080002 [ 277.695489][ T30] Call Trace: [ 277.700293][ T5724] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 277.710633][ T30] [ 277.726843][ T30] __schedule+0x1295/0x67a0 [ 277.750847][ T30] ? __pfx___schedule+0x10/0x10 [ 277.762937][ T5724] usb 2-1: USB disconnect, device number 32 [ 277.770997][ T30] ? find_held_lock+0x2b/0x80 [ 277.788277][ T30] ? schedule+0x2bf/0x390 [ 277.796740][ T30] schedule+0xdd/0x390 [ 277.802009][ T30] schedule_timeout+0x1b2/0x280 [ 277.812352][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 277.818148][ T30] ? preempt_schedule_thunk+0x16/0x30 [ 277.827031][ T30] __wait_for_common+0x2e7/0x4c0 [ 277.840142][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 277.853781][ T30] ? __pfx___wait_for_common+0x10/0x10 [ 277.862700][ T30] ? preempt_schedule_thunk+0x16/0x30 [ 277.873100][ T30] wait_for_completion_state+0x1c/0x40 [ 277.881133][ T30] vfs_coredump+0x80d/0x5770 [ 277.893339][ T30] ? __lock_acquire+0x4a5/0x2630 [ 277.905118][ T30] ? __pfx_vfs_coredump+0x10/0x10 [ 277.914210][ T30] ? __lock_acquire+0x4a5/0x2630 [ 277.919848][ T30] ? __lock_acquire+0x4a5/0x2630 [ 277.933490][ T30] ? lock_acquire+0x1b1/0x370 [ 277.950220][ T30] ? do_raw_spin_lock+0x128/0x260 [ 277.957617][ T30] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 277.963667][ T30] ? debug_object_assert_init+0x1c4/0x300 [ 277.974884][ T30] ? do_raw_spin_lock+0x128/0x260 [ 277.983610][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 277.993680][ T30] ? __lock_acquire+0x4a5/0x2630 [ 278.003652][ T30] ? rcu_is_watching+0x12/0xc0 [ 278.014408][ T30] ? trace_hrtimer_start+0x79/0x230 [ 278.020890][ T30] ? hrtimer_start_range_ns+0x860/0x1a50 [ 278.027414][ T30] ? finish_task_switch.isra.0+0x2cb/0x1010 [ 278.034561][ T30] ? finish_task_switch.isra.0+0x384/0x1010 [ 278.043647][ T30] ? rcu_is_watching+0x12/0xc0 [ 278.048734][ T30] ? trace_sched_exit_tp+0x11c/0x160 [ 278.056660][ T30] ? __schedule+0x12a7/0x67a0 [ 278.061463][ T30] ? rcu_is_watching+0x12/0xc0 [ 278.066437][ T30] ? __pfx___schedule+0x10/0x10 [ 278.073549][ T30] ? trace_reschedule_exit.constprop.0+0x6b/0x220 [ 278.086929][ T30] ? proc_coredump_connector+0x2d3/0x4f0 [ 278.093597][ T30] ? __pfx_proc_coredump_connector+0x10/0x10 [ 278.104494][ T30] ? kasan_save_free_info+0x3b/0x70 [ 278.120406][ T30] get_signal+0x2162/0x2210 [ 278.125237][ T30] ? __pfx_get_signal+0x10/0x10 [ 278.133363][ T30] ? __pfx___schedule+0x10/0x10 [ 278.146636][ T30] arch_do_signal_or_restart+0x91/0x7e0 [ 278.153603][ T30] ? preempt_schedule_common+0x42/0xc0 [ 278.163646][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 278.169952][ T30] ? force_sig_info_to_task+0x4d2/0x660 [ 278.175750][ T30] ? rcu_is_watching+0x12/0xc0 [ 278.181696][ T30] exit_to_user_mode_loop+0x8b/0x4f0 [ 278.190608][ T30] ? rcu_is_watching+0x12/0xc0 [ 278.197758][ T30] do_syscall_64+0x706/0xf80 [ 278.203578][ T30] ? clear_bhb_loop+0x40/0x90 [ 278.211994][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.219194][ T30] RIP: 0033:0x7f8891f9ce59 [ 278.224724][ T30] RSP: 002b:00007f8892e3a0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 278.233552][ T30] RAX: 00000000000000ca RBX: 00007f8892216098 RCX: 00007f8891f9ce59 [ 278.243540][ T30] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f889221609c [ 278.253522][ T30] RBP: 00007f8892216090 R08: 0000000000000001 R09: 0000000000000000 [ 278.263573][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 278.273585][ T30] R13: 00007f8892216128 R14: 00007fff3aa014e0 R15: 00007fff3aa015c8 [ 278.283512][ T30] [ 278.286668][ T30] [ 278.286668][ T30] Showing all locks held in the system: [ 278.330611][ T30] 4 locks held by kworker/0:0/9: [ 278.342266][ T30] #0: ffff88801eee4140 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12d6/0x1980 [ 278.367697][ T30] #1: ffffc900000e7d08 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x973/0x1980 [ 278.385635][ T30] #2: ffff88802bbae1d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bd/0x4af0 [ 278.410861][ T30] #3: ffff88802bc19568 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x5ab/0x4af0 [ 278.423497][ T30] 1 lock held by khungtaskd/30: [ 278.429518][ T30] #0: ffffffff8e7e5620 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 278.446806][ T30] 2 locks held by getty/5369: [ 278.453482][ T30] #0: ffff8880383a90a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 278.463545][ T30] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14f0 [ 278.477010][ T30] 5 locks held by kworker/0:7/5803: [ 278.483431][ T30] #0: ffff88813fe5b140 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12d6/0x1980 [ 278.494229][ T30] #1: ffffc9000442fd08 ((work_completion)(&intf->reset_ws)){+.+.}-{0:0}, at: process_one_work+0x973/0x1980 [ 278.506876][ T30] #2: ffff88802d2961d8 (&dev->mutex){....}-{4:4}, at: usb_lock_device_for_reset+0x181/0x330 [ 278.520350][ T30] #3: ffff88802bc19568 (&port_dev->status_lock){+.+.}-{4:4}, at: usb_reset_device+0x538/0xaa0 [ 278.531741][ T30] #4: ffff88802b9e5f60 (hcd->address0_mutex){+.+.}-{4:4}, at: usb_reset_and_verify_device+0x331/0x1110 [ 278.544065][ T30] 5 locks held by kworker/u8:13/6595: [ 278.549594][ T30] 1 lock held by syz.2.524/7920: [ 278.561843][ T30] 5 locks held by syz.5.558/8048: [ 278.567630][ T30] #0: ffffffff906bcf88 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 278.578592][ T30] #1: ffffffff906bd040 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x57b/0x800 [ 278.603334][ T30] #2: ffffffff8fb31ae0 (hwsim_phys_lock){+.+.}-{4:4}, at: hwsim_del_radio_nl+0xa8/0x200 [ 278.613740][ T30] #3: ffffffff9060e9e0 (rtnl_mutex){+.+.}-{4:4}, at: wpan_phy_unregister+0xfe/0x410 [ 278.627729][ T30] #4: ffffffff8e7f1168 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0 [ 278.638906][ T30] 2 locks held by syz.0.567/8094: [ 278.644216][ T30] #0: ffffffff906bcf88 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 278.653496][ T30] #1: ffffffff906bd040 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x57b/0x800 [ 278.667243][ T30] [ 278.682469][ T30] ============================================= [ 278.682469][ T30] [ 278.698935][ T30] NMI backtrace for cpu 0 [ 278.698972][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 278.699001][ T30] Tainted: [L]=SOFTLOCKUP [ 278.699011][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 278.699023][ T30] Call Trace: [ 278.699030][ T30] [ 278.699039][ T30] dump_stack_lvl+0x100/0x190 [ 278.699069][ T30] nmi_cpu_backtrace.cold+0x12d/0x151 [ 278.699095][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 278.699122][ T30] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 278.699149][ T30] sys_info+0x141/0x190 [ 278.699168][ T30] watchdog+0xcb1/0x1030 [ 278.699200][ T30] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 278.699227][ T30] ? __pfx_watchdog+0x10/0x10 [ 278.699252][ T30] ? __kthread_parkme+0x18c/0x230 [ 278.699276][ T30] ? kthread+0x13a/0x450 [ 278.699298][ T30] ? __pfx_watchdog+0x10/0x10 [ 278.699320][ T30] kthread+0x370/0x450 [ 278.699342][ T30] ? __pfx_kthread+0x10/0x10 [ 278.699368][ T30] ret_from_fork+0x72b/0xd50 [ 278.699395][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 278.699423][ T30] ? __switch_to+0x800/0x1100 [ 278.699454][ T30] ? __pfx_kthread+0x10/0x10 [ 278.699479][ T30] ret_from_fork_asm+0x1a/0x30 [ 278.699520][ T30] [ 278.699544][ T30] Sending NMI from CPU 0 to CPUs 1: [ 278.832607][ C1] NMI backtrace for cpu 1 [ 278.832625][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 278.832650][ C1] Tainted: [L]=SOFTLOCKUP [ 278.832657][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 278.832668][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 278.832700][ C1] Code: 56 92 02 e9 c3 42 03 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 63 51 20 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 278.832718][ C1] RSP: 0018:ffffc90000197df0 EFLAGS: 00000246 [ 278.832734][ C1] RAX: 0000000001031d71 RBX: ffff88801e2c2500 RCX: ffffffff8b8b4095 [ 278.832746][ C1] RDX: 0000000000000000 RSI: ffffffff8df24341 RDI: ffffffff8c1c4380 [ 278.832758][ C1] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed10170a67b5 [ 278.832768][ C1] R10: ffff8880b8533dab R11: 0000000000000000 R12: 0000000000000001 [ 278.832779][ C1] R13: ffffed1003c584a0 R14: 0000000000000001 R15: ffffffff90d7e850 [ 278.832791][ C1] FS: 0000000000000000(0000) GS:ffff88812446a000(0000) knlGS:0000000000000000 [ 278.832808][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 278.832819][ C1] CR2: 00007f155d5e8158 CR3: 0000000059c2c000 CR4: 00000000003526f0 [ 278.832833][ C1] Call Trace: [ 278.832839][ C1] [ 278.832845][ C1] default_idle+0x9/0x10 [ 278.832862][ C1] default_idle_call+0x6c/0xb0 [ 278.832879][ C1] do_idle+0x464/0x590 [ 278.832898][ C1] ? __pfx_do_idle+0x10/0x10 [ 278.832913][ C1] ? finish_task_switch.isra.0+0x152/0x1010 [ 278.832936][ C1] cpu_startup_entry+0x4f/0x60 [ 278.832953][ C1] start_secondary+0x21d/0x2d0 [ 278.832975][ C1] ? __pfx_start_secondary+0x10/0x10 [ 278.832998][ C1] common_startup_64+0x13e/0x148 [ 278.833031][ C1] [ 279.133100][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 279.139979][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 279.150638][ T30] Tainted: [L]=SOFTLOCKUP [ 279.154941][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 279.164976][ T30] Call Trace: [ 279.168233][ T30] [ 279.171139][ T30] dump_stack_lvl+0x100/0x190 [ 279.175842][ T30] vpanic+0x552/0x970 [ 279.179802][ T30] ? __pfx_vpanic+0x10/0x10 [ 279.184280][ T30] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 279.190412][ T30] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 279.196544][ T30] panic+0xd1/0xe0 [ 279.200245][ T30] ? __pfx_panic+0x10/0x10 [ 279.204638][ T30] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 279.210768][ T30] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 279.216903][ T30] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 279.223036][ T30] ? watchdog.cold+0x1ec/0x234 [ 279.227777][ T30] ? watchdog+0xcc1/0x1030 [ 279.232171][ T30] watchdog.cold+0x1fd/0x234 [ 279.236739][ T30] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 279.242524][ T30] ? __pfx_watchdog+0x10/0x10 [ 279.247186][ T30] ? __kthread_parkme+0x18c/0x230 [ 279.252193][ T30] ? kthread+0x13a/0x450 [ 279.256412][ T30] ? __pfx_watchdog+0x10/0x10 [ 279.261063][ T30] kthread+0x370/0x450 [ 279.265111][ T30] ? __pfx_kthread+0x10/0x10 [ 279.269686][ T30] ret_from_fork+0x72b/0xd50 [ 279.274261][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 279.279354][ T30] ? __switch_to+0x800/0x1100 [ 279.284023][ T30] ? __pfx_kthread+0x10/0x10 [ 279.288590][ T30] ret_from_fork_asm+0x1a/0x30 [ 279.293342][ T30] [ 279.296684][ T30] Kernel Offset: disabled [ 279.300993][ T30] Rebooting in 86400 seconds..