last executing test programs: 2m43.115869433s ago: executing program 0 (id=4623): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) socket$inet6(0xa, 0x1, 0x0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000700), 0x101180, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r2, 0xc0040d07, &(0x7f0000000040)=0x121) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) recvmsg(r3, &(0x7f000000c1c0)={0x0, 0x0, 0x0}, 0x20) 2m41.971344116s ago: executing program 0 (id=4626): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) read$rfkill(r1, &(0x7f0000000040), 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r3, 0x29, 0x31, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, 0x0, 0x802, 0x0) syz_emit_vhci(&(0x7f0000000740)=ANY=[@ANYBLOB="040e070702200117"], 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x3c1, 0x3, 0x418, 0x320, 0x18c, 0x203, 0x320, 0x19030000, 0x578, 0x2e0, 0x2e0, 0x578, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0x210, 0x258, 0x0, {}, [@common=@rt={{0x138}, {0x0, [0x7, 0x2fd3], 0x7, 0x10, 0x1, [@private1={0xfc, 0x1, '\x00', 0x1}, @private0, @private0={0xfc, 0x0, '\x00', 0x1}, @loopback, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x1b}, @mcast1, @dev={0xfe, 0x80, '\x00', 0x1d}, @mcast1, @local, @private2={0xfc, 0x2, '\x00', 0x1}, @empty, @dev={0xfe, 0x80, '\x00', 0x19}, @remote]}}, @common=@inet=@esp={{0x30}, {[0x4d2, 0x4d2]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x478) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f0000001b40)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 2m40.997652953s ago: executing program 0 (id=4628): socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x8) openat$sndseq(0xffffffffffffff9c, 0x0, 0x101080) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_open_dev$cec(0x0, 0x0, 0x10000) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r3, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) 2m39.886431658s ago: executing program 0 (id=4631): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) r1 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, &(0x7f0000001100)={0x77359400}, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r3, {0x40}}, './file0/file0\x00'}) write$P9_RSETATTR(r4, &(0x7f0000000040)={0x7, 0x1b, 0x1}, 0x7) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) syz_io_uring_setup(0x2c0f, &(0x7f0000000400)={0x0, 0xe635, 0x1ffff9, 0x1000}, 0x0, 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000001a00)={'pcmmio\x00', [0x2000, 0x0, 0x4, 0x1, 0x25, 0x0, 0x400, 0x7, 0x54c6cff3, 0xfd, 0x2, 0x7fffffff, 0xfffffff7, 0x400001, 0x6, 0x5, 0x0, 0x7f, 0x3, 0x40000001, 0x9, 0x4, 0x4, 0x20001e5b, 0x3, 0xe66, 0x3, 0x6, 0x4008, 0x0, 0x3]}) 2m37.972952036s ago: executing program 0 (id=4636): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) socket$inet6(0xa, 0x1, 0x0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000700), 0x101180, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r2, 0xc0040d07, &(0x7f0000000040)=0x121) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) recvmsg(r3, &(0x7f000000c1c0)={0x0, 0x0, 0x0}, 0x20) 2m36.694928015s ago: executing program 0 (id=4640): sync() sync() sync() sync() openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'syztnl2\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x4, 0x1, 0x5, 0xe0c5, 0x1, @ipv4={'\x00', '\xff\xff', @multicast1}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10, 0x20, 0xd2, 0xffffffff}}) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x60, 0x13, 0x1, 0x70bd26, 0x25dfdbff, {0x1d, 0x3, 0x8, 0x29, {0x4e23, 0x4e23, [0x0, 0x6, 0xcc9, 0xfff], [0x200, 0x4, 0xf, 0x3], r1, [0x0, 0x8]}, 0x2, 0x1}, [@INET_DIAG_REQ_BYTECODE={0x11, 0x1, "45b631bec122f903b7036c00dc"}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000880}, 0x8) preadv(0xffffffffffffffff, 0x0, 0x0, 0xa3, 0x0) r2 = socket$kcm(0x29, 0x2, 0x0) close(r2) r3 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) utimensat(0xffffffffffffff9c, &(0x7f0000002240)='.\x00', 0x0, 0x0) r5 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0xd, &(0x7f0000000080), 0x2cb) close(r5) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) sendto(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x40008c1, 0x0, 0x0) 2m21.128522061s ago: executing program 32 (id=4640): sync() sync() sync() sync() openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'syztnl2\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x4, 0x1, 0x5, 0xe0c5, 0x1, @ipv4={'\x00', '\xff\xff', @multicast1}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10, 0x20, 0xd2, 0xffffffff}}) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x60, 0x13, 0x1, 0x70bd26, 0x25dfdbff, {0x1d, 0x3, 0x8, 0x29, {0x4e23, 0x4e23, [0x0, 0x6, 0xcc9, 0xfff], [0x200, 0x4, 0xf, 0x3], r1, [0x0, 0x8]}, 0x2, 0x1}, [@INET_DIAG_REQ_BYTECODE={0x11, 0x1, "45b631bec122f903b7036c00dc"}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000880}, 0x8) preadv(0xffffffffffffffff, 0x0, 0x0, 0xa3, 0x0) r2 = socket$kcm(0x29, 0x2, 0x0) close(r2) r3 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) utimensat(0xffffffffffffff9c, &(0x7f0000002240)='.\x00', 0x0, 0x0) r5 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0xd, &(0x7f0000000080), 0x2cb) close(r5) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) sendto(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x40008c1, 0x0, 0x0) 16.976692793s ago: executing program 1 (id=5003): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001500)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}, {&(0x7f00000005c0)="f2", 0x1}], 0x2}}, {{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000bc0)="e7bc2f4799fe560c31cf5a20a1b22fb77ce7f19e605b6a8d2645af02e63f9a9d7ba31907ccc0f4aa71ec0762b3a8e3332fe3603b4624ac6a578ccd9a27b381a8dad12b3e3de940a99238945935184cd93dd174b70ecb9c3c99d2df9dd0cbef6a9e230f7dd8367384f034a7a011388990e94cd4", 0x73}, {&(0x7f0000000c80)="6c3e28dcd5c7eb9bc39a4bbc398357f3ad842b38a95863911bbd6e6afd9641d356257181e43b6e60349f69ec5f529734f76708a6c5eccb57005c1a513d8030d12c", 0x41}, {&(0x7f0000000d00)="dc6e94ac2db166801ffce85f6f44f2cb071c6b5113bc6bbf2f503d468253693a01102fcb8157c6e8a2b5620efa5d22400147cce896821150f95c0c69fa587a1f99fcb28cfeb09f45cb836f0ff891be10bb209dc04adc202ef866f27b74faa5ad3a2e5d40ebd6785c4e4a97ac13238c746d1109d12af5446c4e84591f121a494251e43bed18f6269bdd2e56f9c211dd7145f664286911b8bb3acf76a1b5ece94183a6c8cc47f2e1dd4e91dc10be8732e92e8620fa060fb15016c2dc9b6da18325e778660d499aec6215b0f9f679fa76d22cdd4ae3776203e2054240594f1c9b77ad77cf3f", 0xe4}, {&(0x7f0000000fc0)="c6eae69212ba50dd664af774c32d34273a3baad9692140de74d9294c555a8c2e0d53acea79b788b5eb1a12ada17eda2b2fb96c439ce16e6266afda6613fd7c90be9a9dfcd1b099fe6b023b725241a6e1048c700e7a939bd3a38f1101213b81c252dd8c44b7e647940438343d0d082507", 0x70}, {&(0x7f00000010c0)="978d1129fddf5e2f1be8be48f935ef4f71893a57f79be3e44522d3987ccee23f4e717d8c8e14573937040fb658a24f1c9e0c7f98a24fa1209a6ea754e1244234c715713d120b6929614443fd6b4223bc04c3a8c9241ccbb6a8b0bb19fe4eedae48642a74e97588dc36bf06a4c1fb17b47b39240a6a8e9b5daa97e63d777e665841a349c52022252eafc1c129e154ab390624dd7fb8ac1e44c203140d6aab524f61cd8642ee0f380ebb21dc9267a8fbefa6eec89ff97e7800f44f89b17d43206217941c34067892c05465382550a1da2519", 0xd1}, {&(0x7f00000011c0)}], 0x6}}], 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000100)=@multiplanar_userptr={0x6, 0x3, 0x4, 0x4000, 0x5, {}, {0x4, 0x8, 0x8, 0x2, 0x9, 0x7, "ee7933fd"}, 0x6, 0x2, {0x0}, 0x402d}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0x3, 0xf1, 0x5, 0xfa, 0xd4, 0x6, 0x0, 0x4, 0x7, 0x9}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0xb, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0xffff1000, 0x9000, 0xb, 0x1, 0x2, 0x7, 0x4, 0x4, 0x81, 0x0, 0x6, 0x5}, {0xeeee8000, 0x30000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0xf3, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0x9, 0x3, 0x29, 0xd, 0x6, 0x5, 0x9, 0xe, 0x4b}, {0x6000, 0x0, 0x4, 0x4, 0x3, 0x7d, 0xfd, 0xff, 0x4, 0x90, 0x1, 0xfc}, {0x8000000, 0x4000, 0x0, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x7, 0x3, 0xa, 0x49, 0x54, 0x1, 0x2, 0x7}, {0xdddd1000, 0x5}, {0x4, 0x9}, 0x40030000, 0x0, 0x8000000, 0x300, 0x1, 0xa901, 0xe6e70c00, [0x3, 0x401, 0x9, 0xc5]}) mount_setattr(0xffffffffffffffff, 0x0, 0x8100, &(0x7f0000000580)={0x8a, 0x100079, 0x100000}, 0x20) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 13.630766305s ago: executing program 1 (id=5012): r0 = inotify_init() r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan1\x00'}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = fsopen(&(0x7f0000000240)='btrfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000180)='rootcontext', &(0x7f0000000300)='5\xfd\x04\xc6\xc9]\v\xd6S9q\x0f#\x93\x9d\xeb\x00\xcf\xb2~9*\xa9\x1d:\x06u46N\xd93\xe1\xa2\x05\x83Z\xbc\xbeT\x16\xab\xfb=4\xa6\x10,\"\xee\xf8o+\x02\xd8\xaft_\r\x1d\"\xc8\\k\xcc4\x96\xdb\xb0\xadA\x02[\x16\xb4\xca\xa5n\x87\xdb\xb3\x1f\xbb\xc0\x9f\xc2\x9e\t[\xba\x9e\xfd\xc76#\x8f\xc6\xe7\x11\x8fL\xd970x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000004c0)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="130d2abd7000fbdbdf252100000008000300", @ANYRES32=r3, @ANYBLOB="060098000400000054002c8008"], 0x78}, 0x1, 0x0, 0x0, 0x4000004}, 0x20008004) mount(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) modify_ldt$write(0x1, &(0x7f0000000040)={0x0, 0x0, 0x4000}, 0x10) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) 10.604965029s ago: executing program 2 (id=5016): r0 = inotify_init() r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan1\x00'}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = fsopen(&(0x7f0000000240)='btrfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000180)='rootcontext', &(0x7f0000000300)='5\xfd\x04\xc6\xc9]\v\xd6S9q\x0f#\x93\x9d\xeb\x00\xcf\xb2~9*\xa9\x1d:\x06u46N\xd93\xe1\xa2\x05\x83Z\xbc\xbeT\x16\xab\xfb=4\xa6\x10,\"\xee\xf8o+\x02\xd8\xaft_\r\x1d\"\xc8\\k\xcc4\x96\xdb\xb0\xadA\x02[\x16\xb4\xca\xa5n\x87\xdb\xb3\x1f\xbb\xc0\x9f\xc2\x9e\t[\xba\x9e\xfd\xc76#\x8f\xc6\xe7\x11\x8fL\xd970x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETGAMMA(r4, 0xc02064a4, &(0x7f0000000580)={r6, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) capset(&(0x7f0000000340)={0x20080522}, &(0x7f0000000300)={0x0, 0x4, 0x6, 0x0, 0x0, 0x3}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r3}, 0x8) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000040)={0x3ffffffffffffe96, &(0x7f0000000000)=[{0x2000, 0x5}]}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000700)={0x44, &(0x7f0000000240)={0x40, 0xb, 0x1, "9e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 9.952725693s ago: executing program 3 (id=5019): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) r1 = socket(0xa, 0x5, 0x0) set_mempolicy(0x6, &(0x7f00000003c0)=0x8000000000000001, 0xe0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, 0x0, 0x0) sendmsg$inet_sctp(r1, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xff, @loopback, 0x5}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000100)="e6", 0xffe0}], 0x1, &(0x7f0000000140)=[@dstaddrv4={0x18, 0x84, 0x7, @local}, @dstaddrv6={0x20, 0x84, 0x8, @rand_addr=' \x01\x00'}, @dstaddrv6={0x20, 0x84, 0x8, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}], 0x58, 0x4855}, 0x24000052) setrlimit(0x0, &(0x7f0000000080)={0x8}) 8.93257467s ago: executing program 4 (id=5020): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x20008000) sendmsg$kcm(r0, 0x0, 0x40) r2 = fsopen(&(0x7f0000000500)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f00000001c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000140), 0x200800, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@volatile}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1/file0'}}]}) 8.273442687s ago: executing program 4 (id=5021): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000840)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000001080)={0x44, &(0x7f0000000e00)={0x0, 0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000dc0)={0x1c, &(0x7f0000000640)={0x0, 0x30}, 0x0, 0x0}) syz_usb_control_io$uac2(r0, &(0x7f0000000240)={0x14, &(0x7f0000000b80)=ANY=[@ANYBLOB="2024cf000000cf01392176c15584bbfdd5717735e73cd50aa5b32ce74bc57ab82026ee940df9959f7e60741fcd13830809d6af9d72472802ba759c268f82073e8adde8b0d799cf9bef13ebded67531f4240700e3bf64919b4f17d99bce1d6b76247e4e98a5929e093088cb559504c59523646bb2e9bb656f26aa7e7f5d0a94970e3071034916e6e42475094a717930aabd343e138e21105acb7eb20b349c8b850bff7f3ef4c645464d4925dfb159669f4f311ac288077d7705b0656c73b108a2e65aedc3b15985838bc50ff0dca2b316cc430d9a7a8aaf216c053253f98f6737fe6ecb7d56"], &(0x7f0000000180)={0x0, 0x3, 0x8c, @string={0x8c, 0x3, "fe9f62c1c2fa2cd8f03c9c259493c6bcf8e43cec232911fa3c6d793199565a9cf7de7b87557cc15eda4123abb0d2aa521167abc9ed863f34b6a65e28bdba08f469c652e2793782bca08b04a822392bc4ea332f45075278ab4752dd5a17d26e87f8df690b4362b4e27e1d465aa618363dbb577f367952f2465495814aefdc51b5b55146f6bed844062285"}}}, &(0x7f0000000580)={0x44, &(0x7f0000000300)={0x0, 0xb, 0x8a, "5ea7055bbc7d13d620879a980ce412bd34c46a722783b5d5ed674cf6bdc857fc51c8c98d10893eebb68aef734f765d5fd4454a433e7ba1aebde53a3835e116a7a4bb957aef4fe557361b4ec66291dfff0d4674cb776fd2f37ac37d732cfa1ca6a134402a1e7c4c278286b2ef1970b1adaf80c128fcfd1978f82d3b560684b69ba6574261ae3c60fd2c6d"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000400)={0x0, 0x8, 0x1}, &(0x7f0000000440)={0x20, 0x81, 0x2, "8039"}, &(0x7f0000000480)={0x20, 0x82, 0x1, "be"}, &(0x7f00000004c0)={0x20, 0x83, 0x3, "d43b0d"}, &(0x7f0000000500)={0x20, 0x84, 0x4, "061e6311"}, &(0x7f0000000540)={0x20, 0x85, 0x3, "0ebb48"}}) 7.822773252s ago: executing program 3 (id=5024): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) futex(0x0, 0x80000000000b, 0xffffffff, 0x0, 0x0, 0x1) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000000300)=""/102400, 0x19000) io_uring_setup(0x7, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x57) ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f0000000100)={{0x80000000, 0x0, 0x4, [0xffffffff, 0x7]}, {0x80000000, 0x0, 0x6, [0xa, 0xf7]}, 0x4, [0x3, 0xffffb4b5]}) r1 = syz_open_dev$cec(&(0x7f0000000180), 0x0, 0x1000) ioctl$CEC_ADAP_S_PHYS_ADDR(r1, 0x40026102, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r2, 0x0, 0x18, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000400)=0x2a9a, 0x4) io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) r3 = timerfd_create(0x1, 0x0) timerfd_gettime(r3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xe8381, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x4048aec9, &(0x7f0000000980)={0x1, 0x0, @ioapic={0xfee00, 0x296a, 0x4, 0x3, 0x0, [{0x98, 0x37, 0x81, '\x00', 0x7f}, {0x41, 0x8, 0x30, '\x00', 0xf5}, {0xe9, 0x1, 0x9, '\x00', 0x11}, {0x7, 0x9, 0x3, '\x00', 0x8f}, {0x3, 0x7f, 0x92, '\x00', 0xa}, {0xf, 0xe3, 0x8, '\x00', 0xaa}, {0x6, 0x8, 0x6, '\x00', 0x8}, {0x1, 0x3, 0x8, '\x00', 0x67}, {0x80, 0xfc, 0xa, '\x00', 0x8}, {0x8, 0x2, 0x13, '\x00', 0x9f}, {0x8, 0xa, 0x6, '\x00', 0x3}, {0x2, 0xa, 0x3, '\x00', 0xa}, {0x1e, 0x6, 0x3, '\x00', 0xa6}, {0x8, 0x0, 0x8, '\x00', 0x9}, {0x2, 0x4c, 0xa2, '\x00', 0x1}, {0x8, 0x5e, 0x4, '\x00', 0x7}, {0x5, 0xa0, 0x47, '\x00', 0x4}, {0x7, 0x3, 0x2, '\x00', 0xa7}, {0x5, 0x0, 0xf, '\x00', 0x7}, {0x5e, 0xa, 0x8}, {0x7f, 0x6, 0x7, '\x00', 0x4}, {0x93, 0x44, 0x9, '\x00', 0x10}, {0x5, 0x8, 0x20, '\x00', 0xfc}, {0x6, 0xc, 0xc6, '\x00', 0x8}]}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x4000) r4 = timerfd_create(0x0, 0x0) timerfd_settime(r4, 0x3, &(0x7f0000000200)={{0x0, 0x989680}}, 0x0) timerfd_create(0x0, 0x0) 7.294588409s ago: executing program 2 (id=5025): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0x1) (async) clock_getres(0x17, 0xfffffffffffffffe) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000000)=0x4000000002) (async) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(0xffffffffffffffff, 0x114, 0xa, &(0x7f0000000000)=ANY=[], 0x4) (async) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) (async) r5 = syz_open_dev$tty1(0xc, 0x4, 0x3) write$UHID_INPUT(r5, &(0x7f0000001980)={0x9, {"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", 0x1061}}, 0x1006) (async) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x1000) (async) setresuid(0x0, 0x0, 0x0) (async) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r6, 0x2f) (async) ptrace$ARCH_MAP_VDSO_32(0x1e, r2, 0xc, 0x2002) socket$unix(0x1, 0x2, 0x0) syz_open_dev$vim2m(0x0, 0x1, 0x2) (async) syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x180) 7.031797331s ago: executing program 1 (id=5026): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="5800000002060108000000000000000000000000050005000a000040050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c6970000c00078008000640"], 0x58}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/sockstat\x00') socket(0x24, 0x80801, 0x1) preadv(r2, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/196, 0xc4}], 0x1, 0x8, 0xffffffff) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r1}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x16, 0x18, &(0x7f0000000440)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b705000008"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) ioctl$TIOCSERGETLSR(r3, 0x5459, &(0x7f0000000080)) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) openat2$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)={0x6404c0, 0x8687f3c094f890cb, 0x1}, 0x18) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@can_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_DST_IF={0x8, 0xa, r6}, @CGW_SRC_IF={0x8, 0x9, r7}]}, 0x24}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@can_delroute={0x24, 0x19, 0x1, 0x70bd28, 0x25dfdbfc, {0x1d, 0x1, 0x2}, [@CGW_SRC_IF={0x8}, @CGW_DST_IF={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008844}, 0x30004016) 6.969792745s ago: executing program 2 (id=5027): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040), 0x13f}}, 0x20) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$FITHAW(r3, 0xc0045878) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000003680)=@vmx={0x0, 0x0, 0x2080, {0x0, 0x0, {}, 0x1, 0xffffffffffffffff}, {'\x00', "0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000045b45011c8c377fe00"}}) prlimit64(0x0, 0xe, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) getpid() r4 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102400, 0x19000) fsopen(0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000180)="660f388084000072baf80c9cb860b4498c66efbafc0c66b80e00000066ef64f30fc7b000100f850100f30fc7b103006bb18000ffc00f326635000400000f30d2bc0a000f23c80f21f86635040040000f23f8b8f4008ee0", 0x57}], 0x1, 0x48, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6.935442805s ago: executing program 3 (id=5028): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040), 0x13f}}, 0x20) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$FITHAW(r3, 0xc0045878) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000003680)=@vmx={0x0, 0x0, 0x2080, {0x0, 0x0, {}, 0x1, 0xffffffffffffffff}, {'\x00', "0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000045b45011c8c377fe00"}}) prlimit64(0x0, 0xe, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102400, 0x19000) fsopen(0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000180)="660f388084000072baf80c9cb860b4498c66efbafc0c66b80e00000066ef64f30fc7b000100f850100f30fc7b103006bb18000ffc00f326635000400000f30d2bc0a000f23c80f21f86635040040000f23f8b8f4008ee0", 0x57}], 0x1, 0x48, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6.75294189s ago: executing program 1 (id=5029): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4605, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='net/ptype\x00') pread64(r1, &(0x7f0000002240)=""/237, 0xed, 0x4eb) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x802, 0x0) ioctl$NILFS_IOCTL_CHANGE_CPMODE(r2, 0x40106e80, &(0x7f0000000040)={0x7, 0x1}) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x2642, 0x0) writev(r4, &(0x7f0000000440)=[{&(0x7f0000000140)="93d90400000300", 0x7}, {&(0x7f0000000100)='\x00', 0x1}], 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/custom0\x00', 0x2, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xb8, 0x42, 0x6c, 0x10, 0x64b, 0x7825, 0x62b8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x8, 0x7f, 0x10, 0x8, "", [{{0x9, 0x4, 0x80, 0x3, 0x0, 0x58, 0xfd, 0x7d, 0x41}}]}}]}}, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000080)={0xc}) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000540)=@nat={'nat\x00', 0x670, 0x5, 0x418, 0x208, 0x208, 0xffffffff, 0x2b0, 0x168, 0x380, 0x380, 0xffffffff, 0x380, 0x380, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010104, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'wg1\x00', {}, {0xff}, 0x16}, 0x0, 0x130, 0x168, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'kmp\x00', "48ae43e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xf, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @port=0x4e22, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xfffc, 0xd, 0x1}, {0x2, 0x4, 0x3}, 0x1000, 0x100}}}, {{@ip={@multicast2, @broadcast, 0xff, 0x0, 'virt_wifi0\x00', 'batadv_slave_1\x00', {}, {0xff}}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @empty, @icmp_id=0x68, @port=0x4e22}}}}, {{@uncond, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0x4, "1542", 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @icmp_id, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x478) 4.656472624s ago: executing program 4 (id=5030): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000000c0), r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x2010}, 0x4000000) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x440, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001140)=0x0) timer_create(0x7, &(0x7f00000000c0)={0x0, 0x21, 0x2, @tid=r2}, &(0x7f0000001100)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) preadv(r1, &(0x7f0000001040)=[{&(0x7f0000000040)=""/4096, 0x1000}], 0x1, 0x6, 0x0) r4 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000001080)={0x28, 0x0, 0xffffffff, @hyper}, 0x10, 0xc0000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, &(0x7f0000000280)={0x3, 0x1, 0x7f, &(0x7f0000000080)=""/127}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x8002, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000400)={r6, 0x0, 0x0}, 0x1c) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r4, 0x28, 0x1, &(0x7f00000010c0)=0x5, 0x8) 4.490457245s ago: executing program 2 (id=5031): r0 = socket$inet_tcp(0x2, 0x1, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000680)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x38, 0x28, 0xda18, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x80, 0x0, 0x0, 0x1000, {[@timestamp={0x8, 0xa, 0x62, 0x4}, @sack={0x5, 0x2}]}}}}}}}, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$kcm(0x10, 0x2, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) r3 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x41, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001140)=@newqdisc={0xcc, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xf}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x9c, 0x2, {{0x9, 0x29, 0x80, 0x9, 0xffffffff, 0x91b1}, [@TCA_NETEM_RATE={0x14, 0x6, {0x5, 0x7, 0x7fffffff}}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x9}, @TCA_NETEM_CORR={0x10, 0x1, {0x3, 0x3aa8, 0x7}}, @TCA_NETEM_LOSS={0x23, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x9be8, 0x166e, 0xfffffff9, 0xffff476a}}, @NETEM_LOSS_GE={0x14, 0x2, {0x7fffffff, 0x15, 0x8, 0xff}}]}, @TCA_NETEM_DELAY_DIST={0x19, 0x2, "1fec3497f3dbd724734657c49974e72102ac6ec276"}, @TCA_NETEM_ECN={0x8}]}}}]}, 0xcc}}, 0x0) setsockopt$sock_int(r4, 0x1f, 0x20, &(0x7f0000000000)=0xfff, 0x4) write$nbd(r3, &(0x7f0000000340)={0x1000000, 0x0, 0x0, 0x40, 0x9, "82b0cfc4337965941538be09000000000000000000007400a391793ba70d0000000000fdf700000000ba"}, 0x3a) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x60b17f360213d71e, 0x3, &(0x7f0000000200)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.296611982s ago: executing program 5 (id=5032): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x141842, 0x8) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0) ftruncate(r2, 0x4) r3 = gettid() ioctl$SNDCTL_TMR_STOP(0xffffffffffffffff, 0x5403) timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) openat$kvm(0xffffffffffffff9c, 0x0, 0x1, 0x0) unshare(0x28000600) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = eventfd2(0x3, 0x1) ioctl$KVM_IRQFD(r6, 0x4020ae76, &(0x7f0000000240)={r7, 0x7fc, 0x2, r7}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x2000001) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) copy_file_range(r2, 0x0, r1, 0x0, 0x6, 0x700000000000000) r8 = dup(r0) ioctl$RTC_IRQP_SET(r8, 0x4008700c, 0x7e0) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r9, 0x400448e6, &(0x7f0000001040)) write$UHID_INPUT(r8, 0x0, 0x0) 4.133641212s ago: executing program 3 (id=5033): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000500)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2}}}, 0x30) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0x80, 0x4) read$FUSE(r2, 0x0, 0x0) capget(&(0x7f0000000280)={0x20080522}, &(0x7f00000002c0)={0x5, 0x7, 0x9, 0x9, 0x14d, 0x8000}) 3.873992243s ago: executing program 5 (id=5034): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_wait_time_recursive\x00', 0x26e1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) add_key$fscrypt_v1(0x0, &(0x7f0000000300)={'fscrypt:', @desc4}, &(0x7f0000000440)={0x0, "8527d2100090af54bfbca283be11c0de7af30e90937920fcba13d90af61beaa44d66a6535daf1bc35fb3af1e9197e31d26589d073c10184095fb00", 0x14}, 0x48, 0xffffffffffffffff) r8 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000700), 0x101180, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r8, 0xc0040d07, &(0x7f0000000040)=0x121) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) recvmsg(r9, &(0x7f000000c1c0)={0x0, 0x0, 0x0}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@loopback, 0x0, 0x2, 0x3, 0x9, 0x0, 0xc96e}, 0x20) close(r6) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="018d008dffff"}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000002c40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000020105000017006195e2fb0002af5bf7f459"], 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) 2.837573092s ago: executing program 5 (id=5035): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) r1 = socket(0xa, 0x5, 0x0) set_mempolicy(0x6, &(0x7f00000003c0)=0x8000000000000001, 0xe0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, 0x0, 0x0) sendmsg$inet_sctp(r1, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xff, @loopback, 0x5}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000100)="e6", 0xffe0}], 0x1, &(0x7f0000000140)=[@dstaddrv4={0x18, 0x84, 0x7, @local}, @dstaddrv6={0x20, 0x84, 0x8, @rand_addr=' \x01\x00'}, @dstaddrv6={0x20, 0x84, 0x8, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}], 0x58, 0x4855}, 0x24000052) setrlimit(0x0, &(0x7f0000000080)={0x8}) 2.599282395s ago: executing program 1 (id=5036): r0 = syz_usb_connect(0x5, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) r1 = fsopen(&(0x7f0000000000)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x90) r3 = openat(r2, &(0x7f0000000080)='.\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40, 0x16f) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0x12, {"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", 0x1000}}, 0x1006) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r4) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETGAMMA(r4, 0xc02064a4, &(0x7f0000000580)={r6, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) capset(&(0x7f0000000340)={0x20080522}, &(0x7f0000000300)={0x0, 0x4, 0x6, 0x0, 0x0, 0x3}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r3}, 0x8) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000040)={0x3ffffffffffffe96, &(0x7f0000000000)=[{0x2000, 0x5}]}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000700)={0x44, &(0x7f0000000240)={0x40, 0xb, 0x1, "9e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.502775651s ago: executing program 4 (id=5037): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000840)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000001080)={0x44, &(0x7f0000000e00)={0x0, 0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000dc0)={0x1c, &(0x7f0000000640)={0x0, 0x30}, 0x0, 0x0}) syz_usb_control_io$uac2(r0, &(0x7f0000000240)={0x14, &(0x7f0000000b80)=ANY=[@ANYBLOB="2024cf000000cf01392176c15584bbfdd5717735e73cd50aa5b32ce74bc57ab82026ee940df9959f7e60741fcd13830809d6af9d72472802ba759c268f82073e8adde8b0d799cf9bef13ebded67531f4240700e3bf64919b4f17d99bce1d6b76247e4e98a5929e093088cb559504c59523646bb2e9bb656f26aa7e7f5d0a94970e3071034916e6e42475094a717930aabd343e138e21105acb7eb20b349c8b850bff7f3ef4c645464d4925dfb159669f4f311ac288077d7705b0656c73b108a2e65aedc3b15985838bc50ff0dca2b316cc430d9a7a8aaf216c053253f98f6737fe6ecb7d56"], &(0x7f0000000180)={0x0, 0x3, 0x8c, @string={0x8c, 0x3, "fe9f62c1c2fa2cd8f03c9c259493c6bcf8e43cec232911fa3c6d793199565a9cf7de7b87557cc15eda4123abb0d2aa521167abc9ed863f34b6a65e28bdba08f469c652e2793782bca08b04a822392bc4ea332f45075278ab4752dd5a17d26e87f8df690b4362b4e27e1d465aa618363dbb577f367952f2465495814aefdc51b5b55146f6bed844062285"}}}, &(0x7f0000000580)={0x44, &(0x7f0000000300)={0x0, 0xb, 0x8a, "5ea7055bbc7d13d620879a980ce412bd34c46a722783b5d5ed674cf6bdc857fc51c8c98d10893eebb68aef734f765d5fd4454a433e7ba1aebde53a3835e116a7a4bb957aef4fe557361b4ec66291dfff0d4674cb776fd2f37ac37d732cfa1ca6a134402a1e7c4c278286b2ef1970b1adaf80c128fcfd1978f82d3b560684b69ba6574261ae3c60fd2c6d"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000400)={0x0, 0x8, 0x1}, &(0x7f0000000440)={0x20, 0x81, 0x2, "8039"}, &(0x7f0000000480)={0x20, 0x82, 0x1, "be"}, &(0x7f00000004c0)={0x20, 0x83, 0x3, "d43b0d"}, &(0x7f0000000500)={0x20, 0x84, 0x4, "061e6311"}, &(0x7f0000000540)={0x20, 0x85, 0x3, "0ebb48"}}) 1.472346863s ago: executing program 2 (id=5038): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d0102030109021200010000000009"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000001080)={0x44, &(0x7f0000000e00)={0x0, 0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000dc0)={0x1c, &(0x7f0000000640)={0x0, 0x30}, 0x0, 0x0}) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, &(0x7f0000000240)={0x14, &(0x7f0000000b80)=ANY=[@ANYBLOB="2024cf000000cf01392176c15584bbfdd5717735e73cd50aa5b32ce74bc57ab82026ee940df9959f7e60741fcd13830809d6af9d72472802ba759c268f82073e8adde8b0d799cf9bef13ebded67531f4240700e3bf64919b4f17d99bce1d6b76247e4e98a5929e093088cb559504c59523646bb2e9bb656f26aa7e7f5d0a94970e3071034916e6e42475094a717930aabd343e138e21105acb7eb20b349c8b850bff7f3ef4c645464d4925dfb159669f4f311ac288077d7705b0656c73b108a2e65aedc3b15985838bc50ff0dca2b316cc430d9a7a8aaf216c053253f98f6737fe6ecb7d56"], &(0x7f0000000180)={0x0, 0x3, 0x8c, @string={0x8c, 0x3, "fe9f62c1c2fa2cd8f03c9c259493c6bcf8e43cec232911fa3c6d793199565a9cf7de7b87557cc15eda4123abb0d2aa521167abc9ed863f34b6a65e28bdba08f469c652e2793782bca08b04a822392bc4ea332f45075278ab4752dd5a17d26e87f8df690b4362b4e27e1d465aa618363dbb577f367952f2465495814aefdc51b5b55146f6bed844062285"}}}, &(0x7f0000000580)={0x44, &(0x7f0000000300)={0x0, 0xb, 0x8a, "5ea7055bbc7d13d620879a980ce412bd34c46a722783b5d5ed674cf6bdc857fc51c8c98d10893eebb68aef734f765d5fd4454a433e7ba1aebde53a3835e116a7a4bb957aef4fe557361b4ec66291dfff0d4674cb776fd2f37ac37d732cfa1ca6a134402a1e7c4c278286b2ef1970b1adaf80c128fcfd1978f82d3b560684b69ba6574261ae3c60fd2c6d"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000400)={0x0, 0x8, 0x1}, &(0x7f0000000440)={0x20, 0x81, 0x2, "8039"}, &(0x7f0000000480)={0x20, 0x82, 0x1, "be"}, &(0x7f00000004c0)={0x20, 0x83, 0x3, "d43b0d"}, &(0x7f0000000500)={0x20, 0x84, 0x4, "061e6311"}, &(0x7f0000000540)={0x20, 0x85, 0x3, "0ebb48"}}) syz_usb_control_io$uac2(r0, &(0x7f0000000740)={0x14, &(0x7f0000000680)={0x20, 0x31, 0x40, {0x40, 0x9, "8d79ad375d8030daf5f1ee1ce1c529fec87707d502f4944abb3c0ac25db3579cb9aa723dbbe4c7df61f2b4fff05bfb744a4054ad1b15eee86dd136b19b29"}}, &(0x7f0000000700)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3409}}}, &(0x7f0000000b00)={0x44, &(0x7f0000000880)={0x40, 0x16, 0x86, "55931ffc1af4856399da6da8aa358b69235561e3b36173b23852a4ab61522e6d1cff723b6cdc50793df032ffb68360158a1d48f2df06504a2cba4b5946ba40eec8cd00383e506206161f105a17bfa28076a540066bf0294caffa29bb9b33a9ebb5f06fd0618250aec023271d8d8aad0e909ced3fb78b7ed0263c7ffa5452924eb55c6b6d6ac6"}, &(0x7f0000000940)={0x0, 0xa, 0x1, 0xd}, &(0x7f0000000980)={0x0, 0x8, 0x1, 0x5}, &(0x7f00000009c0)={0x20, 0x81, 0x2, "6f92"}, &(0x7f0000000a00)={0x20, 0x82, 0x3, "abbf08"}, &(0x7f0000000a40)=ANY=[@ANYBLOB="208301001ab793"], &(0x7f0000000a80)={0x20, 0x84, 0x1, 'L'}, &(0x7f0000000ac0)={0x20, 0x85, 0x3, "2cdb29"}}) 1.404465826s ago: executing program 5 (id=5039): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) r1 = socket(0xa, 0x5, 0x0) set_mempolicy(0x6, &(0x7f00000003c0)=0x8000000000000001, 0xe0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, 0x0, 0x0) sendmsg$inet_sctp(r1, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xff, @loopback, 0x5}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000100)="e6", 0xffe0}], 0x1, &(0x7f0000000140)=[@dstaddrv4={0x18, 0x84, 0x7, @local}, @dstaddrv6={0x20, 0x84, 0x8, @rand_addr=' \x01\x00'}, @dstaddrv6={0x20, 0x84, 0x8, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}], 0x58, 0x4855}, 0x24000052) setrlimit(0x0, &(0x7f0000000080)={0x8}) 1.099226981s ago: executing program 3 (id=5040): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELRULE={0x150, 0x8, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_RULE_USERDATA={0xfc, 0x7, 0x1, 0x0, "215954f0bd63143fca1d5d0b98095bafa8121016cdd1da399385c2aff655b573ef498607803b6ced58a7ae323d9d434e417e161c57271fbbfc994ba9c21bf8d49347b83a5ae3ae1e831a4740be1b932c76351bff7bf722ca8988b95a542bf3c0eb5a11e811a427d46a45b0fcda8a4d449c9ad0a6ac7415c6547a53b53dfa21eb84dc6e7e7ad8a0b4f0ddfb6707592b39b8a90ce3a5209b06a37fe2af40de58b4ba1add4dcef9c9be38b0b80e32c96f7ce11f2676e793fc7e400128864109b569bc953212dbe1e2e8fa9e404a9f9f4e76f298c2070c1138b24dd58b0916661a5f4de73467c5cc5685897f277ffe2e279ce02632c2e576c353"}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_RULE_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @notrack={{0xc}, @void}}]}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}}, 0x198}}, 0x0) syz_usb_connect$hid(0x1, 0x36, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) getpid() (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$netlink(0x10, 0x3, 0xf) (async) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r3, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='net/softnet_stat\x00') setsockopt$packet_int(r5, 0x107, 0x9, &(0x7f0000000180)=0x5, 0x4) sendmsg$NL80211_CMD_SET_REG(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x104d2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x4, 0x1, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x29}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x7}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x40000) 293.003855ms ago: executing program 3 (id=5041): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000840)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000001080)={0x44, &(0x7f0000000e00)={0x0, 0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, &(0x7f0000000240)={0x14, &(0x7f0000000b80)=ANY=[@ANYBLOB="2024cf000000cf01392176c15584bbfdd5717735e73cd50aa5b32ce74bc57ab82026ee940df9959f7e60741fcd13830809d6af9d72472802ba759c268f82073e8adde8b0d799cf9bef13ebded67531f4240700e3bf64919b4f17d99bce1d6b76247e4e98a5929e093088cb559504c59523646bb2e9bb656f26aa7e7f5d0a94970e3071034916e6e42475094a717930aabd343e138e21105acb7eb20b349c8b850bff7f3ef4c645464d4925dfb159669f4f311ac288077d7705b0656c73b108a2e65aedc3b15985838bc50ff0dca2b316cc430d9a7a8aaf216c053253f98f6737fe6ecb7d56"], &(0x7f0000000180)={0x0, 0x3, 0x8c, @string={0x8c, 0x3, "fe9f62c1c2fa2cd8f03c9c259493c6bcf8e43cec232911fa3c6d793199565a9cf7de7b87557cc15eda4123abb0d2aa521167abc9ed863f34b6a65e28bdba08f469c652e2793782bca08b04a822392bc4ea332f45075278ab4752dd5a17d26e87f8df690b4362b4e27e1d465aa618363dbb577f367952f2465495814aefdc51b5b55146f6bed844062285"}}}, &(0x7f0000000580)={0x44, &(0x7f0000000300)={0x0, 0xb, 0x8a, "5ea7055bbc7d13d620879a980ce412bd34c46a722783b5d5ed674cf6bdc857fc51c8c98d10893eebb68aef734f765d5fd4454a433e7ba1aebde53a3835e116a7a4bb957aef4fe557361b4ec66291dfff0d4674cb776fd2f37ac37d732cfa1ca6a134402a1e7c4c278286b2ef1970b1adaf80c128fcfd1978f82d3b560684b69ba6574261ae3c60fd2c6d"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000400)={0x0, 0x8, 0x1}, &(0x7f0000000440)={0x20, 0x81, 0x2, "8039"}, &(0x7f0000000480)={0x20, 0x82, 0x1, "be"}, &(0x7f00000004c0)={0x20, 0x83, 0x3, "d43b0d"}, &(0x7f0000000500)={0x20, 0x84, 0x4, "061e6311"}, &(0x7f0000000540)={0x20, 0x85, 0x3, "0ebb48"}}) 145.930103ms ago: executing program 5 (id=5042): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000040)={0x40, r0, 'id0\x00'}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000100)={0x12}) r2 = openat$kvm(0xffffff9c, &(0x7f0000000540), 0x8000, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]}) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000140)='illinois', 0x8) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x75, 0x7, 0x2, 0x4002804c4, 0x9, 0x8000000000000000, 0x5, 0x0, 0x4, 0xefffffffffffffff, 0x2000000000000000, 0x5, 0x8d], 0xeeee8000, 0x284a93}) ioctl$KVM_RUN(r4, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x42282, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 0s ago: executing program 5 (id=5043): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040), 0x13f}}, 0x20) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$FITHAW(r3, 0xc0045878) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000003680)=@vmx={0x0, 0x0, 0x2080, {0x0, 0x0, {}, 0x1, 0xffffffffffffffff}, {'\x00', "0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000045b45011c8c377fe00"}}) prlimit64(0x0, 0xe, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102400, 0x19000) fsopen(0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000180)="660f388084000072baf80c9cb860b4498c66efbafc0c66b80e00000066ef64f30fc7b000100f850100f30fc7b103006bb18000ffc00f326635000400000f30d2bc0a000f23c80f21f86635040040000f23f8b8f4008ee0", 0x57}], 0x1, 0x48, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) kernel console output (not intermixed with test programs): 239][ T30] audit: type=1400 audit(1781698456.031:12001): avc: denied { ioctl } for pid=23690 comm="syz.3.4792" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1273.452327][ T30] audit: type=1400 audit(1781698456.161:12002): avc: denied { read write } for pid=16231 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1273.459405][ T803] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 1273.943622][ T803] usb 4-1: device descriptor read/8, error -71 [ 1274.235655][ T30] audit: type=1400 audit(1781698456.161:12003): avc: denied { open } for pid=16231 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1274.273049][ T803] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1274.299031][ T30] audit: type=1400 audit(1781698456.161:12004): avc: denied { ioctl } for pid=16231 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1274.310474][ T803] usb 4-1: device descriptor read/8, error -71 [ 1274.479748][ T30] audit: type=1400 audit(1781698456.191:12005): avc: denied { read write } for pid=16718 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1274.507210][ T30] audit: type=1400 audit(1781698456.191:12006): avc: denied { open } for pid=16718 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1275.070157][ T30] audit: type=1400 audit(1781698456.191:12007): avc: denied { ioctl } for pid=16718 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1275.179541][ T803] usb usb4-port1: unable to enumerate USB device [ 1276.333824][T23728] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4800'. [ 1277.787111][T23736] kernel read not supported for file /!selinuxwk1m9ɞ*T#jYmVvm(p-QZ#{ (pid: 23736 comm: syz.4.4802) [ 1278.136089][ T30] kauditd_printk_skb: 92 callbacks suppressed [ 1278.136119][ T30] audit: type=1400 audit(1781698460.951:12100): avc: denied { create } for pid=23737 comm="syz.1.4804" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1278.532662][T23744] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1278.541987][T23744] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1278.573494][T23742] ceph: No mds server is up or the cluster is laggy [ 1278.580530][T21134] libceph: connect (1)[c::]:6789 error -101 [ 1278.614367][T21134] libceph: mon0 (1)[c::]:6789 connect error [ 1278.640484][ T30] audit: type=1400 audit(1781698460.951:12101): avc: denied { bind } for pid=23737 comm="syz.1.4804" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1278.665736][ T30] audit: type=1400 audit(1781698460.951:12102): avc: denied { node_bind } for pid=23737 comm="syz.1.4804" saddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 1278.728078][ T30] audit: type=1400 audit(1781698461.021:12103): avc: denied { create } for pid=23737 comm="syz.1.4804" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1278.842032][ T30] audit: type=1400 audit(1781698461.021:12104): avc: denied { ioctl } for pid=23737 comm="syz.1.4804" path="/dev/vhost-vsock" dev="devtmpfs" ino=1274 ioctlcmd=0xaf21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1279.024762][ T30] audit: type=1400 audit(1781698461.021:12105): avc: denied { read write } for pid=23737 comm="syz.1.4804" name="raw-gadget" dev="devtmpfs" ino=821 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1279.117936][ T30] audit: type=1400 audit(1781698461.021:12106): avc: denied { open } for pid=23737 comm="syz.1.4804" path="/dev/raw-gadget" dev="devtmpfs" ino=821 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1279.225763][ T30] audit: type=1400 audit(1781698461.021:12107): avc: denied { ioctl } for pid=23737 comm="syz.1.4804" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1279.340165][T23751] SQUASHFS error: Failed to read block 0x0: -5 [ 1279.350370][ T30] audit: type=1400 audit(1781698461.841:12108): avc: denied { read write } for pid=16374 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1279.394284][T23751] unable to read squashfs_super_block [ 1279.472181][ T30] audit: type=1400 audit(1781698461.841:12109): avc: denied { open } for pid=16374 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1279.709924][T21134] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 1279.873331][T21134] usb 4-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=49.83 [ 1279.906190][T21134] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1279.929534][T21134] usb 4-1: Product: syz [ 1279.946542][T21134] usb 4-1: Manufacturer: syz [ 1279.959335][T21134] usb 4-1: SerialNumber: syz [ 1279.977672][T21134] usb 4-1: config 0 descriptor?? [ 1280.001146][T21134] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 1280.378185][T22744] Bluetooth: hci0: Invalid handle: 0x9c98 > 0x0eff [ 1280.395142][T23757] random: crng reseeded on system resumption [ 1280.839405][ T803] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 1280.857042][T23757] nbd: couldn't find a device at index -103 [ 1280.905175][T21134] gspca_m5602: Failed to find a sensor [ 1280.927625][T21134] ALi m5602 4-1:0.0: ALi m5602 webcam failed [ 1280.950945][T21134] usb 4-1: USB disconnect, device number 23 [ 1280.999455][ T803] usb 3-1: device descriptor read/64, error -71 [ 1281.269429][ T803] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 1281.358963][T23768] FAULT_INJECTION: forcing a failure. [ 1281.358963][T23768] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1281.400592][T23768] CPU: 0 UID: 0 PID: 23768 Comm: syz.4.4812 Tainted: G L syzkaller #0 PREEMPT(full) [ 1281.400629][T23768] Tainted: [L]=SOFTLOCKUP [ 1281.400636][T23768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1281.400649][T23768] Call Trace: [ 1281.400656][T23768] [ 1281.400664][T23768] dump_stack_lvl+0x100/0x190 [ 1281.400691][T23768] should_fail_ex.cold+0x5/0xa [ 1281.400716][T23768] _copy_from_user+0x2e/0xd0 [ 1281.400740][T23768] copy_msghdr_from_user+0x9f/0x4c0 [ 1281.400765][T23768] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1281.400791][T23768] ? kstrtouint_from_user+0x13c/0x1d0 [ 1281.400820][T23768] ___sys_sendmsg+0x106/0x1e0 [ 1281.400843][T23768] ? __pfx____sys_sendmsg+0x10/0x10 [ 1281.400867][T23768] ? get_pid_task+0x106/0x250 [ 1281.400896][T23768] ? rcu_is_watching+0x12/0xc0 [ 1281.400929][T23768] __sys_sendmsg+0x160/0x210 [ 1281.400957][T23768] ? __pfx___sys_sendmsg+0x10/0x10 [ 1281.400991][T23768] ? rcu_is_watching+0x12/0xc0 [ 1281.401014][T23768] do_syscall_64+0x115/0x870 [ 1281.401034][T23768] ? clear_bhb_loop+0x40/0x90 [ 1281.401058][T23768] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1281.401079][T23768] RIP: 0033:0x7f755a19ce59 [ 1281.401095][T23768] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1281.401115][T23768] RSP: 002b:00007f755b0df028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1281.401137][T23768] RAX: ffffffffffffffda RBX: 00007f755a415fa0 RCX: 00007f755a19ce59 [ 1281.401152][T23768] RDX: 0000000000000000 RSI: 000020000000c2c0 RDI: 0000000000000008 [ 1281.401165][T23768] RBP: 00007f755b0df090 R08: 0000000000000000 R09: 0000000000000000 [ 1281.401178][T23768] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1281.401191][T23768] R13: 00007f755a416038 R14: 00007f755a415fa0 R15: 00007ffff0cc6f98 [ 1281.401213][T23768] [ 1281.621615][ T803] usb 3-1: device descriptor read/64, error -71 [ 1281.694310][T23777] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 1281.700848][T23777] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1281.721963][T23777] vhci_hcd vhci_hcd.0: Device attached [ 1281.732691][ T803] usb usb3-port1: attempt power cycle [ 1281.836464][T23775] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4814'. [ 1282.010923][T21127] usb 41-1: new low-speed USB device number 3 using vhci_hcd [ 1282.069393][ T803] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 1282.089405][T19984] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 1282.109990][ T803] usb 3-1: device descriptor read/8, error -71 [ 1282.203840][T23785] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4818'. [ 1282.269514][T19984] usb 5-1: Using ep0 maxpacket: 16 [ 1282.290055][T23778] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 2 [ 1282.299363][T19984] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1282.334550][ T6821] vhci_hcd vhci_hcd.4: stop threads [ 1282.343473][T19984] usb 5-1: too many configurations: 128, using maximum allowed: 8 [ 1282.369101][ T6821] vhci_hcd vhci_hcd.4: release socket [ 1282.375158][ T803] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 1282.390514][T19984] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 1282.398594][ T6821] vhci_hcd vhci_hcd.4: disconnect device [ 1282.411601][T19984] usb 5-1: can't read configurations, error -71 [ 1282.427167][ T803] usb 3-1: device descriptor read/8, error -71 [ 1282.566759][ T803] usb usb3-port1: unable to enumerate USB device [ 1283.045700][T23807] ceph: No mds server is up or the cluster is laggy [ 1283.424754][T17443] libceph: connect (1)[c::]:6789 error -101 [ 1283.464296][T17443] libceph: mon0 (1)[c::]:6789 connect error [ 1283.490286][ T30] kauditd_printk_skb: 236 callbacks suppressed [ 1283.490303][ T30] audit: type=1400 audit(1781698466.331:12346): avc: denied { read write } for pid=17460 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1283.549454][ T30] audit: type=1400 audit(1781698466.331:12347): avc: denied { open } for pid=17460 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1283.616926][T23812] kernel read not supported for file /!selinuxwk1m9ɞ*T#jYmVvm(p-QZ#{ (pid: 23812 comm: syz.5.4822) [ 1283.645499][ T30] audit: type=1400 audit(1781698466.331:12348): avc: denied { ioctl } for pid=17460 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1283.708448][T23814] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1283.716728][T23814] overlayfs: failed to set xattr on upper [ 1283.724884][T23814] overlayfs: ...falling back to redirect_dir=nofollow. [ 1283.726416][ T30] audit: type=1400 audit(1781698466.421:12349): avc: denied { ioctl } for pid=23801 comm="syz.3.4821" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1283.756891][T23814] overlayfs: ...falling back to index=off. [ 1283.756901][T23814] overlayfs: ...falling back to uuid=null. [ 1283.757574][T23814] overlayfs: conflicting lowerdir path [ 1283.763243][T21134] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 1283.786596][ T30] audit: type=1400 audit(1781698466.421:12350): avc: denied { create } for pid=23804 comm="syz.5.4822" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1283.857467][ T30] audit: type=1400 audit(1781698466.431:12351): avc: denied { write } for pid=23804 comm="syz.5.4822" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1283.895782][ T30] audit: type=1400 audit(1781698466.451:12352): avc: denied { sys_module } for pid=23804 comm="syz.5.4822" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1283.919542][T21134] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1283.933360][T21134] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1283.971048][T21134] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1284.011382][ T30] audit: type=1400 audit(1781698466.451:12353): avc: denied { module_load } for pid=23804 comm="syz.5.4822" path=2F2173656C696E7578776B311FD06DC37F39C99E2A0D5493FDE291EFAA16236A978FBCDE590FCCC56D56CB15766D2870C92D515A23D27B84BF06 dev="mqueue" ino=121284 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 1284.053551][T21134] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 1284.090598][T21134] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1284.110223][T21134] usb 4-1: Product: 䚳賞犵夃鏸뙖곒᜴띄仢핶碥ၫƅ뫤艑쀨傈뀼⸇勿徻ꨚ䙰걞챒`呣鍭敀噡䪞 [ 1284.152024][T21134] usb 4-1: Manufacturer: 컦桝ų͌멧筬㽛集狆엘ᛕ缋⭍㓌ᴲ膧䫺鹐ۉꨵ쉳⎻㡲Ȿ̢䩝犪㣺᳝㱛땶줐虨㴔䑩屰㫃농揖ž쎩 [ 1284.176804][ T30] audit: type=1400 audit(1781698466.481:12354): avc: denied { create } for pid=23804 comm="syz.5.4822" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1284.215000][T23821] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1284.229364][T21134] usb 4-1: SerialNumber: syz [ 1284.243620][T21134] usb 4-1: selecting invalid altsetting 1 [ 1284.252216][ T30] audit: type=1400 audit(1781698466.521:12355): avc: denied { ioctl } for pid=23801 comm="syz.3.4821" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1284.285992][T23821] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1284.295239][T21134] usb 4-1: unit 6 not found! [ 1285.040139][T19984] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 1285.252614][T23821] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4826'. [ 1285.380079][T19984] usb 5-1: Using ep0 maxpacket: 16 [ 1285.405166][T19984] usb 5-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1285.437558][T19984] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1285.479878][T19984] usb 5-1: config 0 descriptor?? [ 1285.512451][T19984] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 1285.886576][T19984] gspca_sonixj: reg_w1 err -71 [ 1285.917511][T19984] sonixj 5-1:0.0: probe with driver sonixj failed with error -71 [ 1285.919115][T21134] usb 4-1: 2:0: cannot get min/max values for control 1 (id 2) [ 1285.959908][T19984] usb 5-1: USB disconnect, device number 45 [ 1286.033613][T21134] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1286.065106][T21134] usb 4-1: USB disconnect, device number 24 [ 1286.169144][ T9091] udevd[9091]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1286.639834][T23837] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 1286.646371][T23837] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1286.675496][T23836] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1286.679958][T23837] vhci_hcd vhci_hcd.0: Device attached [ 1286.730007][T23836] overlayfs: failed to set xattr on upper [ 1286.746467][T23836] overlayfs: ...falling back to redirect_dir=nofollow. [ 1286.775223][T23836] overlayfs: ...falling back to index=off. [ 1286.804733][T23836] overlayfs: ...falling back to uuid=null. [ 1286.848295][T23836] overlayfs: conflicting lowerdir path [ 1286.919474][T17443] usb 43-1: new low-speed USB device number 2 using vhci_hcd [ 1286.949456][T21134] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1287.229786][T21127] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 1287.289507][T21134] usb 6-1: Using ep0 maxpacket: 16 [ 1287.391051][T21134] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1287.392109][T23838] vhci_hcd: connection closed [ 1287.428321][T21134] usb 6-1: too many configurations: 128, using maximum allowed: 8 [ 1287.472127][T12233] vhci_hcd vhci_hcd.5: stop threads [ 1287.482251][T12233] vhci_hcd vhci_hcd.5: release socket [ 1287.496155][T21134] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1287.514523][T12233] vhci_hcd vhci_hcd.5: disconnect device [ 1287.520240][T17443] usb 43-1: device descriptor read/64, error -385985119 [ 1287.530399][T21134] usb 6-1: can't read configurations, error -71 [ 1287.642971][T23849] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1287.656215][T23849] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1287.709457][T17443] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 1287.761690][T23853] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1287.769091][T23853] overlayfs: failed to set xattr on upper [ 1287.775507][T23853] overlayfs: ...falling back to redirect_dir=nofollow. [ 1287.782979][T23853] overlayfs: ...falling back to index=off. [ 1287.788980][T23853] overlayfs: ...falling back to uuid=null. [ 1287.795842][T23853] overlayfs: conflicting lowerdir path [ 1288.349535][ T3152] block nbd0: Possible stuck request ffff888027d5e000: control (read@0,1024B). Runtime 240 seconds [ 1288.361173][ T3152] block nbd0: Possible stuck request ffff888027d5e1c0: control (read@1024,1024B). Runtime 240 seconds [ 1288.374505][ T3152] block nbd0: Possible stuck request ffff888027d5e380: control (read@2048,1024B). Runtime 240 seconds [ 1288.389420][ T3152] block nbd0: Possible stuck request ffff888027d5e540: control (read@3072,1024B). Runtime 240 seconds [ 1288.441719][T23860] kernel read not supported for file /!selinuxwk1m9ɞ*T#jYmVvm(p-QZ#{ (pid: 23860 comm: syz.2.4838) [ 1288.755684][ T30] kauditd_printk_skb: 175 callbacks suppressed [ 1288.755709][ T30] audit: type=1400 audit(1781698471.341:12531): avc: denied { execmem } for pid=23861 comm="syz.5.4839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1288.909742][ T30] audit: type=1400 audit(1781698471.501:12532): avc: denied { create } for pid=23861 comm="syz.5.4839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1289.009594][ T30] audit: type=1400 audit(1781698471.501:12533): avc: denied { write } for pid=23861 comm="syz.5.4839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1289.129545][ T30] audit: type=1400 audit(1781698471.501:12534): avc: denied { read } for pid=23861 comm="syz.5.4839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1289.513955][ T30] audit: type=1400 audit(1781698471.631:12535): avc: denied { read write } for pid=23234 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1289.551812][ T30] audit: type=1400 audit(1781698471.631:12536): avc: denied { open } for pid=23234 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1289.665796][ T30] audit: type=1400 audit(1781698471.631:12537): avc: denied { ioctl } for pid=23234 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1289.748739][ T30] audit: type=1400 audit(1781698471.711:12538): avc: denied { prog_load } for pid=23864 comm="syz.1.4840" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1290.047671][ T30] audit: type=1400 audit(1781698471.711:12539): avc: denied { bpf } for pid=23864 comm="syz.1.4840" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1290.260560][ T30] audit: type=1400 audit(1781698471.711:12540): avc: denied { prog_load } for pid=23864 comm="syz.1.4840" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1290.819549][T21134] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 1291.119661][T21134] usb 5-1: Using ep0 maxpacket: 8 [ 1291.154365][T21134] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1291.187115][T21134] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1291.222593][T21134] usb 5-1: Product: syz [ 1291.241180][T21134] usb 5-1: Manufacturer: syz [ 1291.259062][T21134] usb 5-1: SerialNumber: syz [ 1291.290487][T21134] usb 5-1: config 0 descriptor?? [ 1291.439491][T23869] kexec: Could not allocate control_code_buffer [ 1291.688433][T21134] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1292.775199][T23916] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4856'. [ 1293.512698][T21134] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1293.644471][T23921] overlayfs: missing 'lowerdir' [ 1293.678275][T23923] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1293.689287][T23923] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1293.752670][T23925] siw: device registration error -23 [ 1293.786770][ T30] kauditd_printk_skb: 212 callbacks suppressed [ 1293.786802][ T30] audit: type=1400 audit(1781698476.621:12753): avc: denied { mounton } for pid=23919 comm="syz.5.4858" path="/28/file0" dev="tmpfs" ino=167 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1293.821489][T23925] afs: Unknown parameter '' [ 1294.464038][ T30] audit: type=1400 audit(1781698476.671:12754): avc: denied { prog_load } for pid=23919 comm="syz.5.4858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1294.556034][ T30] audit: type=1400 audit(1781698476.671:12755): avc: denied { bpf } for pid=23919 comm="syz.5.4858" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1294.579120][ T30] audit: type=1400 audit(1781698477.011:12756): avc: denied { allowed } for pid=23922 comm="syz.1.4859" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1294.712746][ T30] audit: type=1400 audit(1781698477.381:12757): avc: denied { create } for pid=23922 comm="syz.1.4859" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1294.774177][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1294.785595][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1294.793690][ T36] sl0: compressed packet ignored [ 1294.798895][ T30] audit: type=1400 audit(1781698477.381:12758): avc: denied { prog_load } for pid=23922 comm="syz.1.4859" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1294.822071][ T30] audit: type=1400 audit(1781698477.381:12759): avc: denied { bpf } for pid=23922 comm="syz.1.4859" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1294.847171][ T30] audit: type=1400 audit(1781698477.391:12760): avc: denied { ioctl } for pid=23883 comm="syz.4.4846" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1294.875706][ T30] audit: type=1400 audit(1781698477.421:12761): avc: denied { read write } for pid=16718 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1294.902537][ T30] audit: type=1400 audit(1781698477.421:12762): avc: denied { read write open } for pid=16718 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1295.581390][ T24] usb 2-1: USB disconnect, device number 16 [ 1295.669439][ T9] usb 5-1: USB disconnect, device number 46 [ 1296.350069][T23952] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4868'. [ 1297.226248][T23957] overlayfs: missing 'lowerdir' [ 1298.331923][T22744] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1298.339151][T22744] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1298.347368][T22744] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1298.355030][T22744] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1298.363899][T22744] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1299.457050][ T30] kauditd_printk_skb: 95 callbacks suppressed [ 1299.457084][ T30] audit: type=1400 audit(1781698482.291:12858): avc: denied { read } for pid=23960 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1299.570502][ T30] audit: type=1400 audit(1781698482.321:12859): avc: denied { open } for pid=23960 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1300.545885][ T30] audit: type=1400 audit(1781698482.321:12860): avc: denied { mounton } for pid=23960 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 1301.159661][T23959] kexec: Could not allocate control_code_buffer [ 1301.177412][ T30] audit: type=1400 audit(1781698482.361:12861): avc: denied { module_request } for pid=23960 comm="syz-executor" kmod="netdev-nr1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1301.338174][ T30] audit: type=1400 audit(1781698483.361:12862): avc: denied { sys_module } for pid=23960 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1301.399123][T22744] Bluetooth: hci5: command tx timeout [ 1301.467710][ T30] audit: type=1400 audit(1781698483.361:12863): avc: denied { module_request } for pid=23960 comm="syz-executor" kmod="nr1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1301.624739][ T30] audit: type=1400 audit(1781698483.371:12864): avc: denied { read write } for pid=17460 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1301.836359][ T30] audit: type=1400 audit(1781698483.371:12865): avc: denied { open } for pid=17460 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1301.976875][ T30] audit: type=1400 audit(1781698483.371:12866): avc: denied { ioctl } for pid=17460 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1302.022196][T23972] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 1302.028719][T23972] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1302.165809][T23972] vhci_hcd vhci_hcd.0: Device attached [ 1302.172010][ T30] audit: type=1400 audit(1781698484.011:12867): avc: denied { read write } for pid=16374 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1302.449404][T21134] usb 43-1: new low-speed USB device number 4 using vhci_hcd [ 1302.972733][ T9] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1303.132301][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 1303.158379][T23975] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 2 [ 1303.159543][ T9] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1303.178220][ T6824] vhci_hcd vhci_hcd.5: stop threads [ 1303.193188][ T6824] vhci_hcd vhci_hcd.5: release socket [ 1303.199628][ T9] usb 6-1: too many configurations: 128, using maximum allowed: 8 [ 1303.215026][ T9] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1303.227958][ T9] usb 6-1: can't read configurations, error -71 [ 1303.245995][ T6824] vhci_hcd vhci_hcd.5: disconnect device [ 1303.259362][T23960] lo speed is unknown, defaulting to 1000 [ 1303.419428][T21127] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 1303.537967][T22744] Bluetooth: hci5: command tx timeout [ 1303.622212][T21127] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1303.639714][T21127] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1303.649251][T21127] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1303.666717][T21127] usb 5-1: config 0 descriptor?? [ 1303.680993][T21127] pwc: Askey VC010 type 2 USB webcam detected. [ 1304.322549][T21127] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1304.483550][ T30] kauditd_printk_skb: 139 callbacks suppressed [ 1304.483574][ T30] audit: type=1400 audit(1781698487.311:13007): avc: denied { prog_load } for pid=24008 comm="syz.5.4881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1304.545119][T23960] bridge0: port 1(bridge_slave_0) entered blocking state [ 1304.561800][ T30] audit: type=1400 audit(1781698487.321:13008): avc: denied { bpf } for pid=24008 comm="syz.5.4881" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1304.587943][T23960] bridge0: port 1(bridge_slave_0) entered disabled state [ 1304.588072][T21127] pwc: recv_control_msg error -71 req 02 val 2c00 [ 1304.604258][T23960] bridge_slave_0: entered allmulticast mode [ 1304.616103][T23960] bridge_slave_0: entered promiscuous mode [ 1304.635275][T23960] bridge0: port 2(bridge_slave_1) entered blocking state [ 1304.650068][T23960] bridge0: port 2(bridge_slave_1) entered disabled state [ 1304.667202][T23960] bridge_slave_1: entered allmulticast mode [ 1304.679024][T23960] bridge_slave_1: entered promiscuous mode [ 1304.816021][T21127] pwc: recv_control_msg error -71 req 04 val 1000 [ 1304.840741][ T30] audit: type=1400 audit(1781698487.321:13009): avc: denied { perfmon } for pid=24008 comm="syz.5.4881" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1304.865616][T21127] pwc: recv_control_msg error -71 req 04 val 1300 [ 1304.881556][T21127] pwc: recv_control_msg error -71 req 04 val 1400 [ 1304.901993][T21127] pwc: recv_control_msg error -71 req 02 val 2000 [ 1304.911698][T21127] pwc: recv_control_msg error -71 req 02 val 2100 [ 1304.918491][ T30] audit: type=1400 audit(1781698487.351:13010): avc: denied { bpf } for pid=24008 comm="syz.5.4881" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1304.940336][T21127] pwc: recv_control_msg error -71 req 04 val 1500 [ 1304.961903][T21127] pwc: recv_control_msg error -71 req 02 val 2500 [ 1304.978736][T21127] pwc: recv_control_msg error -71 req 02 val 2400 [ 1304.987322][ T30] audit: type=1400 audit(1781698487.351:13011): avc: denied { prog_run } for pid=24008 comm="syz.5.4881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1305.013475][T21127] pwc: recv_control_msg error -71 req 02 val 2600 [ 1305.026330][T21127] pwc: recv_control_msg error -71 req 02 val 2900 [ 1305.036783][T23960] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1305.072521][ T30] audit: type=1400 audit(1781698487.371:13012): avc: denied { create } for pid=24008 comm="syz.5.4881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1305.098365][T21127] pwc: recv_control_msg error -71 req 02 val 2800 [ 1305.111538][T21127] pwc: recv_control_msg error -71 req 04 val 1100 [ 1305.128410][ T30] audit: type=1400 audit(1781698487.381:13013): avc: denied { read append } for pid=24008 comm="syz.5.4881" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1305.152977][T21127] pwc: recv_control_msg error -71 req 04 val 1200 [ 1305.170608][T21127] pwc: Registered as video103. [ 1305.186309][T23960] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1305.232706][T21127] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input70 [ 1305.246574][ T30] audit: type=1400 audit(1781698487.381:13014): avc: denied { open } for pid=24008 comm="syz.5.4881" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1305.292122][T21127] usb 5-1: USB disconnect, device number 47 [ 1305.394406][T23960] team0: Port device team_slave_0 added [ 1305.553709][T22744] Bluetooth: hci5: command tx timeout [ 1305.631011][ T30] audit: type=1400 audit(1781698487.381:13015): avc: denied { ioctl } for pid=24008 comm="syz.5.4881" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1305.641640][T23960] team0: Port device team_slave_1 added [ 1305.661365][ T30] audit: type=1400 audit(1781698487.521:13016): avc: denied { prog_load } for pid=24008 comm="syz.5.4881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1305.852578][T23960] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1306.402369][T23960] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1306.549458][T17443] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1306.712568][T23960] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1306.762471][T23960] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1306.783079][T23960] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1307.034975][T23960] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1307.062254][T17443] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1307.079935][T17443] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1307.085211][T24023] kexec: Could not allocate control_code_buffer [ 1307.129189][T17443] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1307.163827][T17443] usb 4-1: config 0 descriptor?? [ 1307.173276][T23960] hsr_slave_0: entered promiscuous mode [ 1307.183936][T17443] pwc: Askey VC010 type 2 USB webcam detected. [ 1307.207193][T23960] hsr_slave_1: entered promiscuous mode [ 1307.228235][T23960] debugfs: 'hsr0' already exists in 'hsr' [ 1307.246286][T23960] Cannot create hsr debugfs directory [ 1307.639379][T22744] Bluetooth: hci5: command tx timeout [ 1308.109570][T21134] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 1308.164814][T23960] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1308.175296][T23960] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1308.208557][T22744] Bluetooth: hci2: Unknown advertising packet type: 0x16 [ 1308.208582][T22744] Bluetooth: hci2: Unknown advertising packet type: 0x1c [ 1308.237223][T23960] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1308.255274][T23960] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1308.326065][T23960] bond0: (slave netdevsim1): Releasing backup interface [ 1308.346396][T23960] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1308.358330][T23960] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1308.453871][T17443] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1308.508241][T23960] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1308.546283][T23960] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1308.806896][T17443] pwc: recv_control_msg error -71 req 02 val 2c00 [ 1308.861048][T17443] pwc: recv_control_msg error -71 req 04 val 1000 [ 1308.907825][T17443] pwc: recv_control_msg error -71 req 04 val 1300 [ 1308.918248][T17443] pwc: recv_control_msg error -71 req 04 val 1400 [ 1308.937616][T17443] pwc: recv_control_msg error -71 req 02 val 2000 [ 1308.947727][T17443] pwc: recv_control_msg error -71 req 02 val 2100 [ 1308.964624][T17443] pwc: recv_control_msg error -71 req 04 val 1500 [ 1308.976348][T17443] pwc: recv_control_msg error -71 req 02 val 2500 [ 1308.990810][T17443] pwc: recv_control_msg error -71 req 02 val 2400 [ 1309.016659][T17443] pwc: recv_control_msg error -71 req 02 val 2600 [ 1309.043015][T17443] pwc: recv_control_msg error -71 req 02 val 2900 [ 1309.064429][T17443] pwc: recv_control_msg error -71 req 02 val 2800 [ 1309.093980][T17443] pwc: recv_control_msg error -71 req 04 val 1100 [ 1309.118479][T17443] pwc: recv_control_msg error -71 req 04 val 1200 [ 1309.145598][T17443] pwc: Registered as video103. [ 1309.153027][T23960] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1309.167253][T17443] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input71 [ 1309.196344][T23960] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1309.218488][T17443] usb 4-1: USB disconnect, device number 25 [ 1309.243508][T23960] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1309.371456][T23960] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1309.407472][T23960] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1309.489368][ T30] kauditd_printk_skb: 109 callbacks suppressed [ 1309.489396][ T30] audit: type=1400 audit(1781698492.301:13126): avc: denied { allowed } for pid=24042 comm="syz.2.4889" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1309.718621][ T30] audit: type=1400 audit(1781698492.391:13127): avc: denied { read } for pid=24042 comm="syz.2.4889" name="cec2" dev="devtmpfs" ino=962 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1309.814525][ T30] audit: type=1400 audit(1781698492.401:13128): avc: denied { open } for pid=24042 comm="syz.2.4889" path="/dev/cec2" dev="devtmpfs" ino=962 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1310.033365][T23960] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1310.048722][ T30] audit: type=1400 audit(1781698492.471:13129): avc: denied { map_create } for pid=24045 comm="syz.5.4886" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1310.075657][T23960] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1310.085351][T24050] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 1310.091839][T24050] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1310.113127][T24050] vhci_hcd vhci_hcd.0: Device attached [ 1310.118932][ T30] audit: type=1400 audit(1781698492.491:13130): avc: denied { map_create } for pid=24045 comm="syz.5.4886" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1310.373045][ T30] audit: type=1400 audit(1781698492.491:13131): avc: denied { map_read map_write } for pid=24045 comm="syz.5.4886" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1310.413705][T23960] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1310.429710][ T803] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 1310.453862][ T30] audit: type=1400 audit(1781698492.511:13132): avc: denied { prog_load } for pid=24045 comm="syz.5.4886" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1310.659477][ T9] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 1310.682196][ T30] audit: type=1400 audit(1781698492.511:13133): avc: denied { bpf } for pid=24045 comm="syz.5.4886" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1310.846002][ T30] audit: type=1400 audit(1781698492.511:13134): avc: denied { perfmon } for pid=24045 comm="syz.5.4886" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1310.875666][T23960] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1310.909408][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 1310.918061][ T30] audit: type=1400 audit(1781698492.541:13135): avc: denied { read write } for pid=16374 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1310.944920][T23960] 8021q: adding VLAN 0 to HW filter on device team0 [ 1311.002285][T24053] vhci_hcd: connection closed [ 1311.004824][ T6831] vhci_hcd vhci_hcd.3: stop threads [ 1311.016365][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1311.030231][T23953] bridge0: port 1(bridge_slave_0) entered blocking state [ 1311.037332][T23953] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1311.050912][ T9] usb 4-1: too many configurations: 128, using maximum allowed: 8 [ 1311.069283][ T6831] vhci_hcd vhci_hcd.3: release socket [ 1311.108662][ T9] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1311.117419][ T803] usb 39-1: device descriptor read/64, error -385985119 [ 1311.125198][ T6831] vhci_hcd vhci_hcd.3: disconnect device [ 1311.256362][ T9] usb 4-1: can't read configurations, error -71 [ 1311.258414][T23953] bridge0: port 2(bridge_slave_1) entered blocking state [ 1311.269727][T23953] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1311.479671][ T803] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 1313.419380][T17443] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1313.427140][T21134] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 1313.769376][T17443] usb 6-1: Using ep0 maxpacket: 16 [ 1313.786912][T17443] usb 6-1: config 8 has an invalid interface number: 128 but max is 0 [ 1313.800295][T21134] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1313.824499][T17443] usb 6-1: config 8 has no interface number 0 [ 1313.832399][T21134] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1313.845841][T17443] usb 6-1: config 8 interface 128 has no altsetting 0 [ 1313.855745][T21134] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1313.872339][T17443] usb 6-1: New USB device found, idVendor=064b, idProduct=7825, bcdDevice=62.b8 [ 1313.888786][T21134] usb 3-1: config 0 descriptor?? [ 1313.896055][T17443] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1313.913616][T21134] pwc: Askey VC010 type 2 USB webcam detected. [ 1313.921973][T17443] usb 6-1: Product: syz [ 1313.935549][T17443] usb 6-1: Manufacturer: syz [ 1313.970700][T17443] usb 6-1: SerialNumber: syz [ 1314.078170][T23960] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1314.186595][T23960] veth0_vlan: entered promiscuous mode [ 1314.217082][T17443] upd78f0730 6-1:8.128: upd78f0730 converter detected [ 1314.240980][T23960] veth1_vlan: entered promiscuous mode [ 1314.253602][T17443] usb 6-1: upd78f0730 converter now attached to ttyUSB0 [ 1314.284201][T17443] usb 6-1: USB disconnect, device number 9 [ 1314.318501][T17443] upd78f0730 ttyUSB0: upd78f0730 converter now disconnected from ttyUSB0 [ 1314.341928][T23960] veth0_macvtap: entered promiscuous mode [ 1314.349168][T17443] upd78f0730 6-1:8.128: device disconnected [ 1314.367696][T23960] veth1_macvtap: entered promiscuous mode [ 1314.398785][T23960] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1314.414962][T23960] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1314.457928][T16100] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1314.473150][T22744] Bluetooth: hci3: Unknown advertising packet type: 0x11 [ 1314.473174][T22744] Bluetooth: hci3: Unknown advertising packet type: 0x17 [ 1314.482389][T22744] Bluetooth: hci3: Unknown advertising packet type: 0x1d [ 1314.491368][T22744] Bluetooth: hci3: Malformed LE Event: 0x0d [ 1314.518401][T16100] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1314.520302][ T30] kauditd_printk_skb: 143 callbacks suppressed [ 1314.520326][ T30] audit: type=1400 audit(1781698497.351:13279): avc: denied { bpf } for pid=24081 comm="syz.2.4894" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1314.535895][T16100] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1314.568195][T16100] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1314.671946][ T30] audit: type=1400 audit(1781698497.421:13280): avc: denied { ioctl } for pid=24081 comm="syz.2.4894" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1314.733613][ T6831] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1314.773069][ T6831] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1314.834285][ T30] audit: type=1400 audit(1781698497.421:13281): avc: denied { ioctl } for pid=24081 comm="syz.2.4894" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1314.893785][T21134] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1314.925592][ T6831] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1314.964343][ T6831] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1314.966505][ T30] audit: type=1400 audit(1781698497.471:13282): avc: denied { create } for pid=23960 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1315.269806][ T30] audit: type=1400 audit(1781698497.471:13283): avc: denied { write } for pid=23960 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1315.293273][ T30] audit: type=1400 audit(1781698497.471:13284): avc: denied { read } for pid=23960 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1315.327676][ T30] audit: type=1400 audit(1781698497.561:13285): avc: denied { read } for pid=23960 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1315.351737][ T30] audit: type=1400 audit(1781698497.561:13286): avc: denied { write } for pid=23960 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1315.372417][ T30] audit: type=1400 audit(1781698497.651:13287): avc: denied { read write } for pid=23234 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1315.405323][ T30] audit: type=1400 audit(1781698497.651:13288): avc: denied { open } for pid=23234 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1315.520146][T21134] pwc: recv_control_msg error -71 req 02 val 2c00 [ 1315.533674][T21134] pwc: recv_control_msg error -71 req 04 val 1000 [ 1315.541570][T21134] pwc: recv_control_msg error -71 req 04 val 1300 [ 1315.548699][T21134] pwc: recv_control_msg error -71 req 04 val 1400 [ 1315.565250][T21134] pwc: recv_control_msg error -71 req 02 val 2000 [ 1315.579731][T21134] pwc: recv_control_msg error -71 req 02 val 2100 [ 1315.580110][ T9] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1315.586877][T21134] pwc: recv_control_msg error -71 req 04 val 1500 [ 1315.610079][T21134] pwc: recv_control_msg error -71 req 02 val 2500 [ 1315.619021][T24105] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4897'. [ 1315.635416][T21134] pwc: recv_control_msg error -71 req 02 val 2400 [ 1315.645890][T21134] pwc: recv_control_msg error -71 req 02 val 2600 [ 1315.673111][T21134] pwc: recv_control_msg error -71 req 02 val 2900 [ 1315.699679][T21134] pwc: recv_control_msg error -71 req 02 val 2800 [ 1315.727299][T21134] pwc: recv_control_msg error -71 req 04 val 1100 [ 1315.749486][T21127] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 1315.756499][T21134] pwc: recv_control_msg error -71 req 04 val 1200 [ 1315.786503][T21134] pwc: Registered as video103. [ 1315.809368][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 1315.813870][T21134] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input72 [ 1315.834921][ T9] usb 6-1: config 8 has an invalid interface number: 128 but max is 0 [ 1315.857230][ T9] usb 6-1: config 8 has no interface number 0 [ 1315.869530][ C1] sl0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 21080 ms [ 1315.877546][ C1] sl0: transmit timed out, driver error? [ 1315.896482][ T9] usb 6-1: config 8 interface 128 has no altsetting 0 [ 1315.904661][T21134] usb 3-1: USB disconnect, device number 61 [ 1315.945073][ T9] usb 6-1: New USB device found, idVendor=064b, idProduct=7825, bcdDevice=62.b8 [ 1315.955153][T21127] usb 4-1: Using ep0 maxpacket: 8 [ 1315.996894][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1316.010122][T21127] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1316.042767][ T9] usb 6-1: Product: syz [ 1316.047088][T21127] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1316.059477][ T9] usb 6-1: Manufacturer: syz [ 1316.064425][ T9] usb 6-1: SerialNumber: syz [ 1316.069282][T21127] usb 4-1: Product: syz [ 1316.075336][T21127] usb 4-1: Manufacturer: syz [ 1316.080882][T21127] usb 4-1: SerialNumber: syz [ 1316.104860][T21127] usb 4-1: config 0 descriptor?? [ 1316.400306][T21127] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1316.752140][ T9] upd78f0730 6-1:8.128: upd78f0730 converter detected [ 1316.791968][ T9] usb 6-1: upd78f0730 converter now attached to ttyUSB0 [ 1316.834172][ T9] usb 6-1: USB disconnect, device number 10 [ 1316.852327][ T9] upd78f0730 ttyUSB0: upd78f0730 converter now disconnected from ttyUSB0 [ 1316.913150][ T9] upd78f0730 6-1:8.128: device disconnected [ 1317.014147][T24121] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 1317.020667][T24121] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1317.066574][T24125] overlayfs: missing 'lowerdir' [ 1317.075348][T24121] vhci_hcd vhci_hcd.0: Device attached [ 1317.320454][ T803] usb 37-1: new low-speed USB device number 4 using vhci_hcd [ 1317.389433][T19984] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 1317.561407][T19984] usb 3-1: Using ep0 maxpacket: 16 [ 1317.613774][T24122] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 2 [ 1317.629470][T19984] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1317.682063][T12233] vhci_hcd vhci_hcd.2: stop threads [ 1317.691290][T19984] usb 3-1: too many configurations: 128, using maximum allowed: 8 [ 1317.704158][T12233] vhci_hcd vhci_hcd.2: release socket [ 1317.719418][T12233] vhci_hcd vhci_hcd.2: disconnect device [ 1317.726803][T19984] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1317.742461][T19984] usb 3-1: can't read configurations, error -71 [ 1318.266018][T21127] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1318.302939][T21127] usb 4-1: USB disconnect, device number 28 [ 1318.314634][T24140] overlayfs: missing 'lowerdir' [ 1318.437638][ T3152] block nbd0: Possible stuck request ffff888027d5e000: control (read@0,1024B). Runtime 270 seconds [ 1318.448941][ T3152] block nbd0: Possible stuck request ffff888027d5e1c0: control (read@1024,1024B). Runtime 270 seconds [ 1318.454030][T24142] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1318.460633][ T3152] block nbd0: Possible stuck request ffff888027d5e380: control (read@2048,1024B). Runtime 270 seconds [ 1318.480003][ T3152] block nbd0: Possible stuck request ffff888027d5e540: control (read@3072,1024B). Runtime 270 seconds [ 1318.694436][T24142] overlayfs: failed to set xattr on upper [ 1318.733277][T24142] overlayfs: ...falling back to redirect_dir=nofollow. [ 1318.785573][T24142] overlayfs: ...falling back to index=off. [ 1318.810824][T24142] overlayfs: ...falling back to uuid=null. [ 1318.826930][T24142] overlayfs: conflicting lowerdir path [ 1319.005342][T24147] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4911'. [ 1319.439377][T21134] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 1319.459391][T19984] usb 3-1: new full-speed USB device number 64 using dummy_hcd [ 1319.519787][T21127] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 1319.609384][T21134] usb 2-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=49.83 [ 1319.643054][T21134] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1319.665871][T19984] usb 3-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=49.83 [ 1319.666779][T21134] usb 2-1: Product: syz [ 1319.714655][T21134] usb 2-1: Manufacturer: syz [ 1319.719649][T21127] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1319.729350][T21134] usb 2-1: SerialNumber: syz [ 1319.746742][T19984] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1319.767852][T21127] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1319.768183][T21134] usb 2-1: config 0 descriptor?? [ 1319.798775][T19984] usb 3-1: Product: syz [ 1319.815635][T19984] usb 3-1: Manufacturer: syz [ 1319.826056][T21127] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1319.836833][T19984] usb 3-1: SerialNumber: syz [ 1319.852630][T19984] usb 3-1: config 0 descriptor?? [ 1319.863677][ T30] kauditd_printk_skb: 229 callbacks suppressed [ 1319.863809][ T30] audit: type=1400 audit(1781698502.701:13518): avc: denied { ioctl } for pid=24149 comm="syz.1.4913" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1319.864150][T21127] usb 4-1: config 0 descriptor?? [ 1319.909647][T19984] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 1319.957535][T21134] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 1319.971882][ T30] audit: type=1400 audit(1781698502.741:13519): avc: denied { ioctl } for pid=24145 comm="syz.2.4910" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1320.061846][T21127] pwc: Askey VC010 type 2 USB webcam detected. [ 1320.102576][ T30] audit: type=1400 audit(1781698502.891:13520): avc: denied { ioctl } for pid=24151 comm="syz.3.4914" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1320.208434][ T30] audit: type=1400 audit(1781698502.921:13521): avc: denied { ioctl } for pid=24149 comm="syz.1.4913" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1321.176850][ T30] audit: type=1400 audit(1781698502.971:13522): avc: denied { ioctl } for pid=24145 comm="syz.2.4910" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1321.303592][ T30] audit: type=1400 audit(1781698502.991:13523): avc: denied { read write } for pid=23234 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1321.362643][T21127] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1321.383201][T21134] gspca_m5602: Failed to find a sensor [ 1321.388700][T21134] ALi m5602 2-1:0.0: ALi m5602 webcam failed [ 1321.526888][T21134] usb 2-1: USB disconnect, device number 17 [ 1321.543156][ T30] audit: type=1400 audit(1781698502.991:13524): avc: denied { open } for pid=23234 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1321.687959][ T30] audit: type=1400 audit(1781698502.991:13525): avc: denied { ioctl } for pid=23234 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1321.723864][T19984] gspca_m5602: Failed to find a sensor [ 1321.773637][T19984] ALi m5602 3-1:0.0: ALi m5602 webcam failed [ 1321.787985][T19984] usb 3-1: USB disconnect, device number 64 [ 1321.837134][T21127] pwc: recv_control_msg error -71 req 02 val 2c00 [ 1321.858997][T21127] pwc: recv_control_msg error -71 req 04 val 1000 [ 1321.876169][ T30] audit: type=1400 audit(1781698503.081:13526): avc: denied { read } for pid=24153 comm="syz.5.4912" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1321.937388][T21127] pwc: recv_control_msg error -71 req 04 val 1300 [ 1321.964716][T21127] pwc: recv_control_msg error -71 req 04 val 1400 [ 1321.972516][ T30] audit: type=1400 audit(1781698503.081:13527): avc: denied { open } for pid=24153 comm="syz.5.4912" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1322.041372][T21127] pwc: recv_control_msg error -71 req 02 val 2000 [ 1322.062854][T21127] pwc: recv_control_msg error -71 req 02 val 2100 [ 1322.088244][T21127] pwc: recv_control_msg error -71 req 04 val 1500 [ 1322.111888][T21127] pwc: recv_control_msg error -71 req 02 val 2500 [ 1322.126829][T21127] pwc: recv_control_msg error -71 req 02 val 2400 [ 1322.149823][T21127] pwc: recv_control_msg error -71 req 02 val 2600 [ 1322.157425][T21127] pwc: recv_control_msg error -71 req 02 val 2900 [ 1322.166244][T21127] pwc: recv_control_msg error -71 req 02 val 2800 [ 1322.173543][T21127] pwc: recv_control_msg error -71 req 04 val 1100 [ 1322.224223][T21127] pwc: recv_control_msg error -71 req 04 val 1200 [ 1322.271774][T21127] pwc: Registered as video103. [ 1322.297159][T21127] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input73 [ 1322.608155][ T803] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 1322.617856][T21127] usb 4-1: USB disconnect, device number 29 [ 1323.786986][T24192] siw: device registration error -23 [ 1323.834497][T24192] afs: Unknown parameter 'dy' [ 1324.601671][T24180] kexec: Could not allocate control_code_buffer [ 1324.654761][T24179] kernel read not supported for file /!selinuxwk1m9ɞ*T#jYmVvm(p-QZ#{ (pid: 24179 comm: syz.2.4919) [ 1324.665312][T21134] usb 2-1: new low-speed USB device number 18 using dummy_hcd [ 1324.852250][T21134] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1324.865227][T21134] usb 2-1: config 0 has no interface number 0 [ 1324.883066][T24200] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4924'. [ 1324.907826][T21134] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1324.932292][T21134] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1324.953797][T21134] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1324.969496][T21134] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1324.995398][ T30] kauditd_printk_skb: 142 callbacks suppressed [ 1324.995414][ T30] audit: type=1400 audit(1781698507.831:13670): avc: denied { read } for pid=24197 comm="syz.3.4923" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1325.026374][T21134] usb 2-1: config 0 descriptor?? [ 1325.054874][T24196] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1325.082766][T21134] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1325.104725][ T30] audit: type=1400 audit(1781698507.831:13671): avc: denied { open } for pid=24197 comm="syz.3.4923" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1325.140676][ T30] audit: type=1400 audit(1781698507.881:13672): avc: denied { read write } for pid=23234 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1325.217744][ T30] audit: type=1400 audit(1781698507.881:13673): avc: denied { open } for pid=23234 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1325.290423][ T5721] usb 2-1: USB disconnect, device number 18 [ 1325.355335][ T30] audit: type=1400 audit(1781698507.881:13674): avc: denied { ioctl } for pid=23234 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1325.453880][ T30] audit: type=1400 audit(1781698507.891:13675): avc: denied { ioctl } for pid=24195 comm="syz.1.4922" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1325.506624][T24196] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4922'. [ 1325.516931][T21134] usb 5-1: new full-speed USB device number 48 using dummy_hcd [ 1325.553060][ T30] audit: type=1400 audit(1781698507.911:13676): avc: denied { ioctl } for pid=24195 comm="syz.1.4922" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1325.647966][ T30] audit: type=1400 audit(1781698507.971:13677): avc: denied { read } for pid=24203 comm="syz.5.4926" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1325.703668][T21134] usb 5-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=49.83 [ 1325.729644][ T30] audit: type=1400 audit(1781698507.971:13678): avc: denied { open } for pid=24203 comm="syz.5.4926" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1325.733155][T21134] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1325.835834][T21134] usb 5-1: Product: syz [ 1325.851178][T21134] usb 5-1: Manufacturer: syz [ 1325.864362][T21134] usb 5-1: SerialNumber: syz [ 1325.886675][T21134] usb 5-1: config 0 descriptor?? [ 1325.927224][T21134] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 1325.964003][ T30] audit: type=1400 audit(1781698508.091:13679): avc: denied { read } for pid=24202 comm="syz.4.4925" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1326.331123][ T5721] usb 3-1: new full-speed USB device number 65 using dummy_hcd [ 1326.763551][ T5721] usb 3-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=49.83 [ 1326.786548][ T5721] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1326.816504][ T5721] usb 3-1: Product: syz [ 1326.839254][ T5721] usb 3-1: Manufacturer: syz [ 1326.854582][ T5721] usb 3-1: SerialNumber: syz [ 1326.877234][ T5721] usb 3-1: config 0 descriptor?? [ 1326.901399][ T5721] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 1326.920148][T21134] gspca_m5602: Failed to find a sensor [ 1326.934558][T21134] ALi m5602 5-1:0.0: ALi m5602 webcam failed [ 1326.969157][T21134] usb 5-1: USB disconnect, device number 48 [ 1327.814379][T21127] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 1327.991334][T21127] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1328.028972][T21127] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1328.082577][T21127] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1328.098956][ T5721] gspca_m5602: Failed to find a sensor [ 1328.130424][ T5721] ALi m5602 3-1:0.0: ALi m5602 webcam failed [ 1328.161067][T21127] usb 4-1: config 0 descriptor?? [ 1328.180603][ T5721] usb 3-1: USB disconnect, device number 65 [ 1328.307352][T21127] pwc: Askey VC010 type 2 USB webcam detected. [ 1328.972899][T21127] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1329.475336][T24242] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4936'. [ 1329.529080][T21127] pwc: recv_control_msg error -71 req 02 val 2c00 [ 1329.554449][T21127] pwc: recv_control_msg error -71 req 04 val 1000 [ 1329.588052][T21127] pwc: recv_control_msg error -71 req 04 val 1300 [ 1329.647304][T21127] pwc: recv_control_msg error -71 req 04 val 1400 [ 1329.695734][T21127] pwc: recv_control_msg error -71 req 02 val 2000 [ 1329.731534][T21127] pwc: recv_control_msg error -71 req 02 val 2100 [ 1329.801329][T21127] pwc: recv_control_msg error -71 req 04 val 1500 [ 1329.810767][T24231] kexec: Could not allocate control_code_buffer [ 1329.840502][T21127] pwc: recv_control_msg error -71 req 02 val 2500 [ 1329.872524][T21127] pwc: recv_control_msg error -71 req 02 val 2400 [ 1329.909409][ T5721] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 1329.923574][T21127] pwc: recv_control_msg error -71 req 02 val 2600 [ 1329.986870][T21127] pwc: recv_control_msg error -71 req 02 val 2900 [ 1330.036472][T21127] pwc: recv_control_msg error -71 req 02 val 2800 [ 1330.083507][T21127] pwc: recv_control_msg error -71 req 04 val 1100 [ 1330.118698][T21127] pwc: recv_control_msg error -71 req 04 val 1200 [ 1330.239934][T21127] pwc: Registered as video103. [ 1330.308094][T21127] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input74 [ 1330.386708][ T30] kauditd_printk_skb: 159 callbacks suppressed [ 1330.386785][ T30] audit: type=1400 audit(1781698513.161:13839): avc: denied { create } for pid=24247 comm="syz.4.4938" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1330.646400][T21127] usb 4-1: USB disconnect, device number 30 [ 1330.675995][ T30] audit: type=1400 audit(1781698513.271:13840): avc: denied { read } for pid=24247 comm="syz.4.4938" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1331.057712][ T30] audit: type=1400 audit(1781698513.281:13841): avc: denied { read open } for pid=24247 comm="syz.4.4938" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1331.119351][ T5721] usb 3-1: Using ep0 maxpacket: 16 [ 1331.377649][ T30] audit: type=1400 audit(1781698513.681:13842): avc: denied { read } for pid=4960 comm="acpid" name="event4" dev="devtmpfs" ino=5119 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1331.525831][ T30] audit: type=1400 audit(1781698513.681:13843): avc: denied { open } for pid=4960 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=5119 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1331.690693][ T30] audit: type=1400 audit(1781698513.681:13844): avc: denied { ioctl } for pid=24238 comm="syz.2.4935" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1331.772865][ T30] audit: type=1400 audit(1781698513.681:13845): avc: denied { ioctl } for pid=24238 comm="syz.2.4935" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1331.843902][ T30] audit: type=1400 audit(1781698513.791:13846): avc: denied { ioctl } for pid=24238 comm="syz.2.4935" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1331.908277][T24253] kernel read not supported for file /!selinuxwk1m9ɞ*T#jYmVvm(p-QZ#{ (pid: 24253 comm: syz.4.4938) [ 1331.938027][ T30] audit: type=1400 audit(1781698513.871:13847): avc: denied { ioctl } for pid=24238 comm="syz.2.4935" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1332.048518][ T30] audit: type=1400 audit(1781698514.191:13848): avc: denied { read write } for pid=16374 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1332.336428][T12086] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 1332.505946][T24261] FAULT_INJECTION: forcing a failure. [ 1332.505946][T24261] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1332.520160][T12086] usb 4-1: Using ep0 maxpacket: 8 [ 1332.534387][T12086] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1332.552018][T12086] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1332.570722][T12086] usb 4-1: Product: syz [ 1332.574103][ T5721] usb 3-1: device descriptor read/all, error -71 [ 1332.575482][T24261] CPU: 0 UID: 0 PID: 24261 Comm: syz.4.4942 Tainted: G L syzkaller #0 PREEMPT(full) [ 1332.575514][T24261] Tainted: [L]=SOFTLOCKUP [ 1332.575522][T24261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1332.575535][T24261] Call Trace: [ 1332.575542][T24261] [ 1332.575550][T24261] dump_stack_lvl+0x100/0x190 [ 1332.575575][T24261] should_fail_ex.cold+0x5/0xa [ 1332.575599][T24261] _copy_from_user+0x2e/0xd0 [ 1332.575623][T24261] io_submit_one+0xbd/0x1fb0 [ 1332.575651][T24261] ? rcu_is_watching+0x12/0xc0 [ 1332.575676][T24261] ? trace_irq_enable.constprop.0+0x122/0x160 [ 1332.575706][T24261] ? __pfx_io_submit_one+0x10/0x10 [ 1332.575735][T24261] ? rcu_is_watching+0x12/0xc0 [ 1332.575758][T24261] ? __might_fault+0xc5/0x140 [ 1332.575781][T24261] ? lock_release+0x24d/0x310 [ 1332.575802][T24261] ? __x64_sys_io_submit+0x1b1/0x3a0 [ 1332.575829][T24261] __x64_sys_io_submit+0x1b1/0x3a0 [ 1332.575857][T24261] ? __pfx___x64_sys_io_submit+0x10/0x10 [ 1332.575884][T24261] ? fput+0x79/0x100 [ 1332.575910][T24261] ? rcu_is_watching+0x12/0xc0 [ 1332.575934][T24261] do_syscall_64+0x115/0x870 [ 1332.575957][T24261] ? clear_bhb_loop+0x40/0x90 [ 1332.575979][T24261] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1332.576000][T24261] RIP: 0033:0x7f755a19ce59 [ 1332.576016][T24261] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1332.576036][T24261] RSP: 002b:00007f755b0df028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 1332.576056][T24261] RAX: ffffffffffffffda RBX: 00007f755a415fa0 RCX: 00007f755a19ce59 [ 1332.576071][T24261] RDX: 0000200000000700 RSI: 0000000000000001 RDI: 00007f755b095000 [ 1332.576085][T24261] RBP: 00007f755b0df090 R08: 0000000000000000 R09: 0000000000000000 [ 1332.576097][T24261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1332.576110][T24261] R13: 00007f755a416038 R14: 00007f755a415fa0 R15: 00007ffff0cc6f98 [ 1332.576132][T24261] [ 1332.785622][T12086] usb 4-1: Manufacturer: syz [ 1332.803558][T12086] usb 4-1: SerialNumber: syz [ 1332.833557][T12086] usb 4-1: config 0 descriptor?? [ 1333.059312][T12086] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1333.342003][T24277] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4944'. [ 1333.439606][T24275] wireguard0: entered promiscuous mode [ 1333.445145][T24275] wireguard0: entered allmulticast mode [ 1334.186086][T24282] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4947'. [ 1334.774572][T12086] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1334.812091][T12086] usb 4-1: USB disconnect, device number 31 [ 1334.840542][T21127] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 1335.265056][T21127] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1335.324598][T21127] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1335.428711][T21127] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1335.534660][ T30] kauditd_printk_skb: 167 callbacks suppressed [ 1335.534712][ T30] audit: type=1400 audit(1781698518.371:14016): avc: denied { create } for pid=24293 comm="syz.1.4950" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1335.687711][T21127] usb 5-1: config 0 descriptor?? [ 1335.898318][ T30] audit: type=1400 audit(1781698518.411:14017): avc: denied { setopt } for pid=24293 comm="syz.1.4950" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1336.008858][T21127] pwc: Askey VC010 type 2 USB webcam detected. [ 1336.237914][ T30] audit: type=1400 audit(1781698518.411:14018): avc: denied { bind } for pid=24293 comm="syz.1.4950" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1336.354865][ T30] audit: type=1400 audit(1781698518.411:14019): avc: denied { name_bind } for pid=24293 comm="syz.1.4950" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 1336.380733][ T30] audit: type=1400 audit(1781698518.411:14020): avc: denied { node_bind } for pid=24293 comm="syz.1.4950" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 1336.405689][ T30] audit: type=1400 audit(1781698518.411:14021): avc: denied { write } for pid=24293 comm="syz.1.4950" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1336.435184][ T30] audit: type=1400 audit(1781698518.411:14022): avc: denied { connect } for pid=24293 comm="syz.1.4950" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1336.518182][ T30] audit: type=1400 audit(1781698518.411:14023): avc: denied { name_connect } for pid=24293 comm="syz.1.4950" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 1336.584054][T21127] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1336.593326][ T30] audit: type=1400 audit(1781698518.621:14024): avc: denied { ioctl } for pid=24285 comm="syz.4.4949" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1336.679507][T12086] usb 2-1: new low-speed USB device number 19 using dummy_hcd [ 1336.921595][T24312] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1336.938139][T21127] pwc: recv_control_msg error -71 req 02 val 2c00 [ 1336.947838][T21127] pwc: recv_control_msg error -71 req 04 val 1000 [ 1336.958812][T21127] pwc: recv_control_msg error -71 req 04 val 1300 [ 1336.966100][T21127] pwc: recv_control_msg error -71 req 04 val 1400 [ 1336.973375][T21127] pwc: recv_control_msg error -71 req 02 val 2000 [ 1336.981632][T21127] pwc: recv_control_msg error -71 req 02 val 2100 [ 1336.988541][T21127] pwc: recv_control_msg error -71 req 04 val 1500 [ 1336.996548][T21127] pwc: recv_control_msg error -71 req 02 val 2500 [ 1337.015649][T12086] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1337.027416][T12086] usb 2-1: config 0 has no interface number 0 [ 1337.037536][T21127] pwc: recv_control_msg error -71 req 02 val 2400 [ 1337.047618][T12086] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1337.060826][T12086] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1337.072430][T21127] pwc: recv_control_msg error -71 req 02 val 2600 [ 1337.084924][T21127] pwc: recv_control_msg error -71 req 02 val 2900 [ 1337.098122][T21127] pwc: recv_control_msg error -71 req 02 val 2800 [ 1337.108762][T21127] pwc: recv_control_msg error -71 req 04 val 1100 [ 1337.116996][T12086] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1337.131312][T21127] pwc: recv_control_msg error -71 req 04 val 1200 [ 1337.190241][T12086] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1337.386459][T21127] pwc: Registered as video103. [ 1337.392301][T12086] usb 2-1: config 0 descriptor?? [ 1337.398011][T21127] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input75 [ 1337.414254][T24304] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1337.446712][T21127] usb 5-1: USB disconnect, device number 49 [ 1337.455007][T12086] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1337.641712][ C0] iowarrior 2-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 1337.664139][ T803] usb 2-1: USB disconnect, device number 19 [ 1337.694419][T24324] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4959'. [ 1338.229479][T12086] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 1338.389471][T12086] usb 5-1: Using ep0 maxpacket: 16 [ 1338.402691][T12086] usb 5-1: config 8 has an invalid interface number: 128 but max is 0 [ 1338.419431][T12086] usb 5-1: config 8 has no interface number 0 [ 1338.437914][T12086] usb 5-1: config 8 interface 128 has no altsetting 0 [ 1338.467781][T12086] usb 5-1: New USB device found, idVendor=064b, idProduct=7825, bcdDevice=62.b8 [ 1338.478808][T12086] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1338.487322][T12086] usb 5-1: Product: syz [ 1338.492017][T12086] usb 5-1: Manufacturer: syz [ 1338.497493][T12086] usb 5-1: SerialNumber: syz [ 1338.580327][ T803] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 1338.731391][T12086] upd78f0730 5-1:8.128: upd78f0730 converter detected [ 1338.743815][ T803] usb 3-1: Using ep0 maxpacket: 32 [ 1338.754343][ T803] usb 3-1: too many configurations: 17, using maximum allowed: 8 [ 1338.765078][T12086] usb 5-1: upd78f0730 converter now attached to ttyUSB0 [ 1338.776987][ T803] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 1338.793236][T12086] usb 5-1: USB disconnect, device number 50 [ 1338.801544][ T803] usb 3-1: config 0 has no interface number 0 [ 1338.822189][T12086] upd78f0730 ttyUSB0: upd78f0730 converter now disconnected from ttyUSB0 [ 1338.838214][ T803] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 1338.850818][ T803] usb 3-1: config 0 has no interface number 0 [ 1338.858902][T12086] upd78f0730 5-1:8.128: device disconnected [ 1338.870296][ T803] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 1338.883027][ T803] usb 3-1: config 0 has no interface number 0 [ 1338.893664][ T803] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 1338.903356][ T803] usb 3-1: config 0 has no interface number 0 [ 1338.915841][ T803] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 1338.926770][ T803] usb 3-1: config 0 has no interface number 0 [ 1338.946765][ T803] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 1338.956583][ T803] usb 3-1: config 0 has no interface number 0 [ 1338.965865][ T803] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 1338.980480][ T803] usb 3-1: config 0 has no interface number 0 [ 1338.998030][ T803] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 1339.008138][ T803] usb 3-1: config 0 has no interface number 0 [ 1339.028058][ T803] usb 3-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 1339.049552][ T803] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1339.070721][ T803] usb 3-1: Product: syz [ 1339.081608][ T803] usb 3-1: Manufacturer: syz [ 1339.090810][ T803] usb 3-1: SerialNumber: syz [ 1339.112721][ T803] usb 3-1: config 0 descriptor?? [ 1339.127517][ T803] etas_es58x 3-1:0.2: Starting syz syz (Serial Number syz) [ 1339.394966][T24343] FAULT_INJECTION: forcing a failure. [ 1339.394966][T24343] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1339.408127][T24343] CPU: 1 UID: 0 PID: 24343 Comm: syz.4.4964 Tainted: G L syzkaller #0 PREEMPT(full) [ 1339.408158][T24343] Tainted: [L]=SOFTLOCKUP [ 1339.408165][T24343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1339.408178][T24343] Call Trace: [ 1339.408185][T24343] [ 1339.408192][T24343] dump_stack_lvl+0x100/0x190 [ 1339.408217][T24343] should_fail_ex.cold+0x5/0xa [ 1339.408244][T24343] _copy_from_user+0x2e/0xd0 [ 1339.408268][T24343] copy_msghdr_from_user+0x9f/0x4c0 [ 1339.408293][T24343] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1339.408321][T24343] ? get_pid_task+0x106/0x250 [ 1339.408348][T24343] ___sys_recvmsg+0xdd/0x1a0 [ 1339.408371][T24343] ? __pfx____sys_recvmsg+0x10/0x10 [ 1339.408405][T24343] __x64_sys_recvmsg+0x19a/0x260 [ 1339.408435][T24343] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 1339.408475][T24343] ? rcu_is_watching+0x12/0xc0 [ 1339.408501][T24343] do_syscall_64+0x115/0x870 [ 1339.408523][T24343] ? clear_bhb_loop+0x40/0x90 [ 1339.408546][T24343] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1339.408567][T24343] RIP: 0033:0x7f755a19ce59 [ 1339.408582][T24343] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1339.408602][T24343] RSP: 002b:00007f755b0be028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 1339.408622][T24343] RAX: ffffffffffffffda RBX: 00007f755a416090 RCX: 00007f755a19ce59 [ 1339.408636][T24343] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000006 [ 1339.408649][T24343] RBP: 00007f755b0be090 R08: 0000000000000000 R09: 0000000000000000 [ 1339.408662][T24343] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1339.408674][T24343] R13: 00007f755a416128 R14: 00007f755a416090 R15: 00007ffff0cc6f98 [ 1339.408695][T24343] [ 1340.317021][ T803] etas_es58x 3-1:0.2: could not parse product info: '424242424242' [ 1340.409493][ T5721] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 1340.569651][ T5721] usb 2-1: Using ep0 maxpacket: 8 [ 1340.607992][ T30] kauditd_printk_skb: 225 callbacks suppressed [ 1340.608053][ T30] audit: type=1400 audit(1781698523.441:14242): avc: denied { ioctl } for pid=24344 comm="syz.1.4965" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1340.689581][ T5721] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1340.744448][ T5721] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1340.760027][ T30] audit: type=1400 audit(1781698523.501:14243): avc: denied { ioctl } for pid=24344 comm="syz.1.4965" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1340.796806][ T5721] usb 2-1: Product: syz [ 1340.813039][ T5721] usb 2-1: Manufacturer: syz [ 1340.825108][ T5721] usb 2-1: SerialNumber: syz [ 1340.847402][ T5721] usb 2-1: config 0 descriptor?? [ 1340.863797][ T30] audit: type=1400 audit(1781698523.521:14244): avc: denied { ioctl } for pid=24344 comm="syz.1.4965" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1340.929348][ T30] audit: type=1400 audit(1781698523.541:14245): avc: denied { read } for pid=5270 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 1341.101380][ T30] audit: type=1400 audit(1781698523.551:14246): avc: denied { search } for pid=5270 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1341.303141][T24361] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4967'. [ 1341.682790][ T30] audit: type=1400 audit(1781698523.551:14247): avc: denied { search } for pid=5270 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1341.712454][ T30] audit: type=1400 audit(1781698523.551:14248): avc: denied { search } for pid=5270 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1341.740092][ T30] audit: type=1400 audit(1781698523.551:14249): avc: denied { read } for pid=5270 comm="dhcpcd" name="n48" dev="tmpfs" ino=22070 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1341.762423][ T5721] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1341.778345][ T30] audit: type=1400 audit(1781698523.551:14250): avc: denied { open } for pid=5270 comm="dhcpcd" path="/run/udev/data/n48" dev="tmpfs" ino=22070 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1341.807744][ T30] audit: type=1400 audit(1781698523.551:14251): avc: denied { getattr } for pid=5270 comm="dhcpcd" path="/run/udev/data/n48" dev="tmpfs" ino=22070 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1341.833030][T24359] wireguard1: entered promiscuous mode [ 1341.838541][T24359] wireguard1: entered allmulticast mode [ 1341.908182][T17443] usb 3-1: USB disconnect, device number 68 [ 1342.057652][T17443] etas_es58x 3-1:0.2: Disconnecting syz syz [ 1342.718221][T24373] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4971'. [ 1342.975151][ T5721] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1343.008875][ T5721] usb 2-1: USB disconnect, device number 20 [ 1343.973871][T24391] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4974'. [ 1344.050403][T24391] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4974'. [ 1344.125388][T24399] [U]  [ 1344.236384][T24404] FAULT_INJECTION: forcing a failure. [ 1344.236384][T24404] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1344.299458][T24404] CPU: 0 UID: 0 PID: 24404 Comm: syz.4.4977 Tainted: G L syzkaller #0 PREEMPT(full) [ 1344.299497][T24404] Tainted: [L]=SOFTLOCKUP [ 1344.299505][T24404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1344.299518][T24404] Call Trace: [ 1344.299525][T24404] [ 1344.299533][T24404] dump_stack_lvl+0x100/0x190 [ 1344.299559][T24404] should_fail_ex.cold+0x5/0xa [ 1344.299584][T24404] _copy_from_user+0x2e/0xd0 [ 1344.299608][T24404] copy_msghdr_from_user+0x9f/0x4c0 [ 1344.299631][T24404] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1344.299655][T24404] ? kstrtouint_from_user+0x13c/0x1d0 [ 1344.299686][T24404] ___sys_sendmsg+0x106/0x1e0 [ 1344.299709][T24404] ? __pfx____sys_sendmsg+0x10/0x10 [ 1344.299730][T24404] ? get_pid_task+0x106/0x250 [ 1344.299757][T24404] ? rcu_is_watching+0x12/0xc0 [ 1344.299790][T24404] __sys_sendmsg+0x160/0x210 [ 1344.299819][T24404] ? __pfx___sys_sendmsg+0x10/0x10 [ 1344.299853][T24404] ? rcu_is_watching+0x12/0xc0 [ 1344.299878][T24404] do_syscall_64+0x115/0x870 [ 1344.299900][T24404] ? clear_bhb_loop+0x40/0x90 [ 1344.299923][T24404] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1344.299944][T24404] RIP: 0033:0x7f755a19ce59 [ 1344.299961][T24404] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1344.299980][T24404] RSP: 002b:00007f755b0df028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1344.299998][T24404] RAX: ffffffffffffffda RBX: 00007f755a415fa0 RCX: 00007f755a19ce59 [ 1344.300013][T24404] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000004 [ 1344.300026][T24404] RBP: 00007f755b0df090 R08: 0000000000000000 R09: 0000000000000000 [ 1344.300039][T24404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1344.300052][T24404] R13: 00007f755a416038 R14: 00007f755a415fa0 R15: 00007ffff0cc6f98 [ 1344.300073][T24404] [ 1344.584626][T24412] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 1344.591157][T24412] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1344.598657][T24412] vhci_hcd vhci_hcd.0: Device attached [ 1345.010299][ T803] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 1345.018759][T19984] usb 41-1: new low-speed USB device number 4 using vhci_hcd [ 1345.236351][T24425] FAULT_INJECTION: forcing a failure. [ 1345.236351][T24425] name failslab, interval 1, probability 0, space 0, times 0 [ 1345.250809][ T803] usb 5-1: Using ep0 maxpacket: 16 [ 1345.299180][T24413] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 3 [ 1345.308624][ T803] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1345.333363][ T6824] vhci_hcd vhci_hcd.4: stop threads [ 1345.348574][ T6824] vhci_hcd vhci_hcd.4: release socket [ 1345.350706][ T803] usb 5-1: too many configurations: 128, using maximum allowed: 8 [ 1345.390945][ T6824] vhci_hcd vhci_hcd.4: disconnect device [ 1345.977500][ T30] kauditd_printk_skb: 470 callbacks suppressed [ 1345.977514][ T30] audit: type=1400 audit(1781698528.811:14722): avc: denied { read write } for pid=16718 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1346.015420][ T803] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 1346.025941][ T803] usb 5-1: can't read configurations, error -71 [ 1346.107692][T24425] CPU: 1 UID: 0 PID: 24425 Comm: syz.5.4980 Tainted: G L syzkaller #0 PREEMPT(full) [ 1346.107726][T24425] Tainted: [L]=SOFTLOCKUP [ 1346.107733][T24425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1346.107753][T24425] Call Trace: [ 1346.107760][T24425] [ 1346.107767][T24425] dump_stack_lvl+0x100/0x190 [ 1346.107794][T24425] should_fail_ex.cold+0x5/0xa [ 1346.107818][T24425] ? fs_reclaim_acquire+0x70/0x100 [ 1346.107839][T24425] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1346.107869][T24425] should_failslab+0xc2/0x120 [ 1346.107899][T24425] __kmalloc_noprof+0xe0/0x840 [ 1346.107921][T24425] ? kfree+0x1e5/0x6c0 [ 1346.107945][T24425] tomoyo_realpath_from_path+0xb6/0x690 [ 1346.107977][T24425] tomoyo_path_number_perm+0x23c/0x580 [ 1346.108002][T24425] ? tomoyo_path_number_perm+0x22e/0x580 [ 1346.108028][T24425] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1346.108058][T24425] ? preempt_count_add+0x76/0x150 [ 1346.108084][T24425] ? rcu_is_watching+0x12/0xc0 [ 1346.108109][T24425] ? __fget_files+0x215/0x3d0 [ 1346.108130][T24425] ? hook_file_ioctl_common+0x149/0x410 [ 1346.108150][T24425] ? lock_release+0x24d/0x310 [ 1346.108170][T24425] ? __fget_files+0x21f/0x3d0 [ 1346.108192][T24425] security_file_ioctl+0xd3/0x230 [ 1346.108219][T24425] __x64_sys_ioctl+0xb7/0x210 [ 1346.108247][T24425] do_syscall_64+0x115/0x870 [ 1346.108270][T24425] ? clear_bhb_loop+0x40/0x90 [ 1346.108294][T24425] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1346.108314][T24425] RIP: 0033:0x7f8a20f9ce59 [ 1346.108330][T24425] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1346.108351][T24425] RSP: 002b:00007f8a21dad028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1346.108371][T24425] RAX: ffffffffffffffda RBX: 00007f8a21216180 RCX: 00007f8a20f9ce59 [ 1346.108386][T24425] RDX: 0000200000000000 RSI: 000000000000127f RDI: 0000000000000003 [ 1346.108399][T24425] RBP: 00007f8a21dad090 R08: 0000000000000000 R09: 0000000000000000 [ 1346.108412][T24425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1346.108425][T24425] R13: 00007f8a21216218 R14: 00007f8a21216180 R15: 00007ffd3d9d1e38 [ 1346.108446][T24425] [ 1346.108460][T24425] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1346.207499][ T30] audit: type=1400 audit(1781698528.811:14723): avc: denied { open } for pid=16718 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1346.690002][ T30] audit: type=1400 audit(1781698528.811:14724): avc: denied { ioctl } for pid=16718 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1346.718934][ T30] audit: type=1400 audit(1781698528.871:14725): avc: denied { read } for pid=24426 comm="syz.1.4981" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1347.075078][ T30] audit: type=1400 audit(1781698528.871:14726): avc: denied { open } for pid=24426 comm="syz.1.4981" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1347.227109][ T30] audit: type=1400 audit(1781698529.371:14727): avc: denied { ioctl } for pid=24419 comm="syz.5.4980" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1347.255012][ T30] audit: type=1400 audit(1781698529.441:14728): avc: denied { read write } for pid=17460 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1347.811990][ T30] audit: type=1400 audit(1781698529.441:14729): avc: denied { open } for pid=17460 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1347.838959][ T30] audit: type=1400 audit(1781698529.441:14730): avc: denied { ioctl } for pid=17460 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1348.086384][ T30] audit: type=1400 audit(1781698529.451:14731): avc: denied { search } for pid=24432 comm="rm" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1348.179629][T17443] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 1348.349586][T17443] usb 3-1: Using ep0 maxpacket: 16 [ 1348.358389][T17443] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1348.381254][T17443] usb 3-1: can't read configurations, error -61 [ 1348.510019][ T3152] block nbd0: Possible stuck request ffff888027d5e000: control (read@0,1024B). Runtime 300 seconds [ 1348.521296][ T3152] block nbd0: Possible stuck request ffff888027d5e1c0: control (read@1024,1024B). Runtime 300 seconds [ 1348.535187][ T3152] block nbd0: Possible stuck request ffff888027d5e380: control (read@2048,1024B). Runtime 300 seconds [ 1348.546589][ T3152] block nbd0: Possible stuck request ffff888027d5e540: control (read@3072,1024B). Runtime 300 seconds [ 1348.549434][T17443] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 1348.797679][T17443] usb 3-1: Using ep0 maxpacket: 16 [ 1348.814683][T17443] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1348.832723][T17443] usb 3-1: can't read configurations, error -61 [ 1349.595148][T17443] usb usb3-port1: attempt power cycle [ 1350.669570][T19984] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 1350.993990][ T30] kauditd_printk_skb: 112 callbacks suppressed [ 1350.994017][ T30] audit: type=1400 audit(1781698533.831:14844): avc: denied { create } for pid=24468 comm="syz.5.4992" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1351.063949][ T30] audit: type=1400 audit(1781698533.831:14845): avc: denied { ioctl } for pid=24466 comm="syz.2.4991" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1351.196299][ T30] audit: type=1400 audit(1781698533.881:14846): avc: denied { write } for pid=24468 comm="syz.5.4992" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1351.236195][T22744] Bluetooth: hci0: unknown advertising packet type: 0x20 [ 1351.260749][ T30] audit: type=1400 audit(1781698533.931:14847): avc: denied { module_request } for pid=24468 comm="syz.5.4992" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1351.299618][T17443] usb 3-1: new full-speed USB device number 71 using dummy_hcd [ 1351.334006][T17443] usb 3-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=49.83 [ 1351.352106][T17443] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1351.359519][ T30] audit: type=1400 audit(1781698533.941:14848): avc: denied { execute } for pid=24449 comm="syz.4.4987" name="file0" dev="tmpfs" ino=1782 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1351.386112][T17443] usb 3-1: Product: syz [ 1351.470772][T17443] usb 3-1: Manufacturer: syz [ 1351.493395][T17443] usb 3-1: SerialNumber: syz [ 1351.508689][ T30] audit: type=1400 audit(1781698533.941:14849): avc: denied { execute_no_trans } for pid=24449 comm="syz.4.4987" path="/331/file0" dev="tmpfs" ino=1782 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1351.573073][ T30] audit: type=1400 audit(1781698533.971:14850): avc: denied { sys_module } for pid=24468 comm="syz.5.4992" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1352.181119][ T30] audit: type=1400 audit(1781698533.971:14851): avc: denied { module_request } for pid=24468 comm="syz.5.4992" kmod="syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1352.231899][ T30] audit: type=1400 audit(1781698533.981:14852): avc: denied { ioctl } for pid=24468 comm="syz.5.4992" path="socket:[128421]" dev="sockfs" ino=128421 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1352.278585][T17443] usb 3-1: config 0 descriptor?? [ 1352.364099][T17443] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 1352.380077][ T30] audit: type=1400 audit(1781698533.991:14853): avc: denied { module_request } for pid=24468 comm="syz.5.4992" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1353.082340][T17443] gspca_m5602: Failed to find a sensor [ 1353.122501][T17443] ALi m5602 3-1:0.0: ALi m5602 webcam failed [ 1353.193276][T17443] usb 3-1: USB disconnect, device number 71 [ 1353.859711][T17443] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 1354.259851][T17443] usb 5-1: Using ep0 maxpacket: 16 [ 1354.284501][T17443] usb 5-1: config 8 has an invalid interface number: 128 but max is 0 [ 1354.322345][T17443] usb 5-1: config 8 has no interface number 0 [ 1354.341241][T17443] usb 5-1: config 8 interface 128 has no altsetting 0 [ 1354.369906][T17443] usb 5-1: New USB device found, idVendor=064b, idProduct=7825, bcdDevice=62.b8 [ 1354.398646][T17443] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1354.422694][T17443] usb 5-1: Product: syz [ 1354.438582][T17443] usb 5-1: Manufacturer: syz [ 1354.454081][T17443] usb 5-1: SerialNumber: syz [ 1355.128292][T17443] upd78f0730 5-1:8.128: upd78f0730 converter detected [ 1355.138376][T24495] binder: 24494:24495 ioctl c0306201 200000000080 returned -14 [ 1355.165842][T17443] usb 5-1: upd78f0730 converter now attached to ttyUSB0 [ 1355.419103][T17443] usb 5-1: USB disconnect, device number 53 [ 1355.458636][T17443] upd78f0730 ttyUSB0: upd78f0730 converter now disconnected from ttyUSB0 [ 1355.491328][T17443] upd78f0730 5-1:8.128: device disconnected [ 1355.599686][T21135] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 1355.829373][T21135] usb 3-1: Using ep0 maxpacket: 16 [ 1355.836665][T21135] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1355.845215][T21135] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1355.859269][T21135] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1355.875862][T21135] usb 3-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1356.047859][T24508] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4998'. [ 1356.067845][ T30] kauditd_printk_skb: 125 callbacks suppressed [ 1356.067871][ T30] audit: type=1400 audit(1781698538.871:14979): avc: denied { write } for pid=24501 comm="syz.5.4998" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1356.388537][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1356.403269][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1356.411482][T24506] wireguard0: entered promiscuous mode [ 1356.412644][T12233] sl0: compressed packet ignored [ 1356.417237][T24506] wireguard0: entered allmulticast mode [ 1356.423111][ T30] audit: type=1400 audit(1781698538.881:14980): avc: denied { write } for pid=24501 comm="syz.5.4998" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1356.462438][ T30] audit: type=1400 audit(1781698539.251:14981): avc: denied { ioctl } for pid=24502 comm="syz.3.5000" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1356.490396][ T30] audit: type=1400 audit(1781698539.271:14982): avc: denied { ioctl } for pid=24494 comm="syz.2.4999" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1356.543428][T21135] usb 3-1: New USB device found, idVendor=09e8, idProduct=0021, bcdDevice= 0.40 [ 1356.552950][T21135] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1356.568031][T21135] usb 3-1: Product: syz [ 1356.572620][T21135] usb 3-1: Manufacturer: syz [ 1356.577560][T21135] usb 3-1: SerialNumber: syz [ 1356.586344][ T30] audit: type=1400 audit(1781698539.421:14983): avc: denied { ioctl } for pid=24494 comm="syz.2.4999" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1356.658755][ T803] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 1356.763229][ T30] audit: type=1400 audit(1781698539.491:14984): avc: denied { read write } for pid=23234 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1356.840160][ T803] usb 4-1: Using ep0 maxpacket: 16 [ 1356.920088][ T803] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1357.000702][ T803] usb 4-1: config 0 has no interfaces? [ 1357.076001][ T803] usb 4-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1357.780960][ T803] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1357.907213][ T30] audit: type=1400 audit(1781698539.491:14985): avc: denied { open } for pid=23234 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1357.949903][ T30] audit: type=1400 audit(1781698539.491:14986): avc: denied { ioctl } for pid=23234 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1357.963780][ T803] usb 4-1: config 0 descriptor?? [ 1357.976248][ T30] audit: type=1400 audit(1781698539.491:14987): avc: denied { ioctl } for pid=24494 comm="syz.2.4999" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5509 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1357.976288][ T30] audit: type=1400 audit(1781698539.511:14988): avc: denied { read write } for pid=17460 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1358.181830][T24517] IPVS: length: 24 != 792 [ 1358.325806][ T803] usb 4-1: USB disconnect, device number 32 [ 1358.430082][T18717] Bluetooth: hci0: command 0x0406 tx timeout [ 1358.701247][T24529] siw: device registration error -23 [ 1359.690633][T21135] usb 3-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 1359.699102][T21135] usb 3-1: MIDIStreaming interface descriptor not found [ 1360.064558][T21135] usb 3-1: USB disconnect, device number 72 [ 1360.306732][T24546] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5009'. [ 1360.619244][T24544] wireguard0: entered promiscuous mode [ 1360.626152][T24544] wireguard0: entered allmulticast mode [ 1360.710713][ T5828] udevd[5828]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1360.929430][T21134] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 1360.969448][T17443] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1361.097460][ T30] kauditd_printk_skb: 153 callbacks suppressed [ 1361.097502][ T30] audit: type=1400 audit(1781698543.931:15142): avc: denied { read } for pid=24548 comm="syz.4.5010" name="cec4" dev="devtmpfs" ino=977 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1361.221523][T21134] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1361.240254][T21134] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1361.251158][T21134] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1361.261213][ T30] audit: type=1400 audit(1781698543.951:15143): avc: denied { read open } for pid=24548 comm="syz.4.5010" path="/dev/cec4" dev="devtmpfs" ino=977 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1361.326621][T21134] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1361.349157][T21134] usb 4-1: config 0 descriptor?? [ 1361.389368][T17443] usb 6-1: Using ep0 maxpacket: 8 [ 1361.415327][ T30] audit: type=1400 audit(1781698543.951:15144): avc: denied { ioctl } for pid=24548 comm="syz.4.5010" path="/dev/cec4" dev="devtmpfs" ino=977 ioctlcmd=0x6102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1361.463277][T17443] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 1361.501525][T17443] usb 6-1: config 0 has no interface number 0 [ 1361.529055][T17443] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1361.563106][ T30] audit: type=1400 audit(1781698543.961:15145): avc: denied { allowed } for pid=24548 comm="syz.4.5010" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1361.563815][T24558] SELinux: security_context_str_to_sid (5] S9q#) failed with errno=-22 [ 1361.629737][T17443] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1361.684142][ T30] audit: type=1400 audit(1781698543.961:15146): avc: denied { write } for pid=24548 comm="syz.4.5010" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1361.709197][T17443] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1361.762007][T17443] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1361.825186][ T30] audit: type=1400 audit(1781698543.961:15147): avc: denied { open } for pid=24548 comm="syz.4.5010" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1361.853341][T17443] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1361.863301][T21134] pyra 0003:1E7D:2CF6.002D: unknown main item tag 0x3 [ 1361.895808][T17443] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1361.906687][T21134] pyra 0003:1E7D:2CF6.002D: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.3-1/input0 [ 1361.934640][T17443] usb 6-1: config 0 descriptor?? [ 1361.965621][ T30] audit: type=1400 audit(1781698543.971:15148): avc: denied { write } for pid=24549 comm="syz.2.5011" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1362.012857][T17443] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1362.060311][T21134] pyra 0003:1E7D:2CF6.002D: couldn't init struct pyra_device [ 1362.069428][ T803] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 1362.084914][ T30] audit: type=1400 audit(1781698543.971:15149): avc: denied { ioctl } for pid=24534 comm="syz.3.5008" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1362.128070][T21134] pyra 0003:1E7D:2CF6.002D: couldn't install mouse [ 1362.148014][T21134] pyra 0003:1E7D:2CF6.002D: probe with driver pyra failed with error -32 [ 1362.198290][ T30] audit: type=1400 audit(1781698543.971:15150): avc: denied { write } for pid=24549 comm="syz.2.5011" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1362.311265][ T30] audit: type=1400 audit(1781698543.981:15151): avc: denied { create } for pid=24549 comm="syz.2.5011" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1362.383234][ T803] usb 2-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.a1 [ 1362.406198][ T803] usb 2-1: New USB device strings: Mfr=0, Product=229, SerialNumber=0 [ 1362.435265][ T803] usb 2-1: Product: syz [ 1362.455386][ T803] usb 2-1: config 0 descriptor?? [ 1362.890952][ T803] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 1362.900593][ T803] ftdi_sio ttyUSB0: unknown device type: 0xc6a1 [ 1363.951466][T21127] usb 2-1: USB disconnect, device number 21 [ 1363.964564][T21127] ftdi_sio 2-1:0.0: device disconnected [ 1364.595708][T21127] usb 6-1: USB disconnect, device number 11 [ 1364.623384][T21127] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 1364.762369][ T803] usb 4-1: USB disconnect, device number 33 [ 1364.777500][T24580] SELinux: security_context_str_to_sid (5] S9q#) failed with errno=-22 [ 1365.071497][T21134] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 1365.299695][T17443] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1365.337448][T21134] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1365.434691][T21134] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1365.525576][T21134] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1365.588824][T17443] usb 6-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.a1 [ 1365.634388][T24592] SELinux: security_context_str_to_sid (5] S9q#) failed with errno=-22 [ 1365.690904][T17443] usb 6-1: New USB device strings: Mfr=0, Product=229, SerialNumber=0 [ 1365.718608][T21134] usb 2-1: config 0 descriptor?? [ 1365.750901][T17443] usb 6-1: Product: syz [ 1365.758181][T21134] pwc: Askey VC010 type 2 USB webcam detected. [ 1365.785153][T17443] usb 6-1: config 0 descriptor?? [ 1365.823036][T17443] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 1365.883431][T17443] ftdi_sio ttyUSB0: unknown device type: 0xc6a1 [ 1366.092025][T19984] usb 6-1: USB disconnect, device number 12 [ 1366.098983][T19984] ftdi_sio 6-1:0.0: device disconnected [ 1366.113474][ T30] kauditd_printk_skb: 233 callbacks suppressed [ 1366.113490][ T30] audit: type=1400 audit(1781698548.951:15385): avc: denied { perfmon } for pid=24581 comm="syz.1.5018" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1366.151370][T21135] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 1366.168728][ T30] audit: type=1400 audit(1781698548.981:15386): avc: denied { map_create } for pid=24581 comm="syz.1.5018" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1366.191714][ T30] audit: type=1400 audit(1781698548.981:15387): avc: denied { map_read map_write } for pid=24581 comm="syz.1.5018" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1366.203807][T24600] overlayfs: missing 'lowerdir' [ 1366.219527][T22744] Bluetooth: hci5: adv larger than maximum supported [ 1366.219556][T22744] Bluetooth: hci5: Malformed LE Event: 0x0d [ 1366.224773][ T30] audit: type=1400 audit(1781698549.001:15389): avc: denied { map_create } for pid=24581 comm="syz.1.5018" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1366.253459][ T30] audit: type=1400 audit(1781698549.001:15388): avc: denied { mount } for pid=24581 comm="syz.1.5018" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 1366.293362][T24600] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1366.307939][T24600] overlayfs: failed to set xattr on upper [ 1366.314563][T24600] overlayfs: ...falling back to redirect_dir=nofollow. [ 1366.322250][T24600] overlayfs: ...falling back to index=off. [ 1366.328246][T24600] overlayfs: ...falling back to uuid=null. [ 1366.334292][ T30] audit: type=1400 audit(1781698549.001:15390): avc: denied { map_read map_write } for pid=24581 comm="syz.1.5018" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1366.340870][T21135] usb 3-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.a1 [ 1366.368700][ T30] audit: type=1400 audit(1781698549.001:15391): avc: denied { ioctl } for pid=24587 comm="syz.2.5016" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1366.369305][T24600] overlayfs: conflicting lowerdir path [ 1366.412606][T21135] usb 3-1: New USB device strings: Mfr=0, Product=229, SerialNumber=0 [ 1366.422325][T21135] usb 3-1: Product: syz [ 1366.428153][T21134] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1366.442819][T21135] usb 3-1: config 0 descriptor?? [ 1366.456692][T21135] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 1366.467288][T21135] ftdi_sio ttyUSB0: unknown device type: 0xc6a1 [ 1366.529495][ T30] audit: type=1400 audit(1781698549.031:15392): avc: denied { create } for pid=24598 comm="syz.4.5020" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1366.551583][ T30] audit: type=1400 audit(1781698549.041:15393): avc: denied { mount } for pid=24598 comm="syz.4.5020" name="/" dev="ramfs" ino=128971 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 1366.576025][ T30] audit: type=1400 audit(1781698549.041:15394): avc: denied { mounton } for pid=24598 comm="syz.4.5020" path="/file0" dev="ramfs" ino=128972 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 1366.656338][T21135] usb 3-1: USB disconnect, device number 73 [ 1366.666795][T21135] ftdi_sio 3-1:0.0: device disconnected [ 1366.889385][ T803] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 1367.059371][ T803] usb 5-1: Using ep0 maxpacket: 8 [ 1367.079824][ T803] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1367.099223][ T803] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1367.108389][ T803] usb 5-1: Product: syz [ 1367.116031][ T803] usb 5-1: Manufacturer: syz [ 1367.121395][ T803] usb 5-1: SerialNumber: syz [ 1367.169937][T19984] usb 6-1: new low-speed USB device number 13 using dummy_hcd [ 1367.289449][ T803] usb 5-1: config 0 descriptor?? [ 1367.564663][T19984] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1367.594850][T19984] usb 6-1: config 0 has no interface number 0 [ 1367.613824][T19984] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1367.641288][T19984] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1367.652680][ T803] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1367.671166][T19984] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1367.689614][T19984] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1367.702947][T19984] usb 6-1: config 0 descriptor?? [ 1367.711067][T24607] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1367.745297][T19984] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1367.841842][T21134] pwc: recv_control_msg error -71 req 02 val 2c00 [ 1367.850476][T21134] pwc: recv_control_msg error -71 req 04 val 1000 [ 1367.861511][T21134] pwc: recv_control_msg error -71 req 04 val 1300 [ 1367.879248][T21134] pwc: recv_control_msg error -71 req 04 val 1400 [ 1367.899727][T21134] pwc: recv_control_msg error -71 req 02 val 2000 [ 1367.916420][T21134] pwc: recv_control_msg error -71 req 02 val 2100 [ 1367.924567][T21134] pwc: recv_control_msg error -71 req 04 val 1500 [ 1367.936387][T21134] pwc: recv_control_msg error -71 req 02 val 2500 [ 1367.963489][T21134] pwc: recv_control_msg error -71 req 02 val 2400 [ 1367.999689][T21134] pwc: recv_control_msg error -71 req 02 val 2600 [ 1368.021262][T21134] pwc: recv_control_msg error -71 req 02 val 2900 [ 1368.043732][T21134] pwc: recv_control_msg error -71 req 02 val 2800 [ 1368.069416][T19984] usb 6-1: USB disconnect, device number 13 [ 1368.075692][ C0] iowarrior 6-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 1368.078156][T21134] pwc: recv_control_msg error -71 req 04 val 1100 [ 1368.668358][T21134] pwc: recv_control_msg error -71 req 04 val 1200 [ 1368.679140][T21134] pwc: Registered as video103. [ 1368.690380][T21134] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input76 [ 1368.705848][T21134] usb 2-1: USB disconnect, device number 22 [ 1369.438265][ T803] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1369.509215][ T803] usb 5-1: USB disconnect, device number 54 [ 1370.329344][ T24] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 1370.479431][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 1370.502060][ T24] usb 2-1: config 8 has an invalid interface number: 128 but max is 0 [ 1370.531020][ T24] usb 2-1: config 8 has no interface number 0 [ 1370.559496][ T24] usb 2-1: config 8 interface 128 has no altsetting 0 [ 1370.587100][ T24] usb 2-1: New USB device found, idVendor=064b, idProduct=7825, bcdDevice=62.b8 [ 1370.627756][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1370.672999][ T24] usb 2-1: Product: syz [ 1370.702047][ T24] usb 2-1: Manufacturer: syz [ 1370.726009][ T24] usb 2-1: SerialNumber: syz [ 1371.126793][ T24] upd78f0730 2-1:8.128: upd78f0730 converter detected [ 1371.163952][ T24] usb 2-1: upd78f0730 converter now attached to ttyUSB0 [ 1371.181937][ T30] kauditd_printk_skb: 161 callbacks suppressed [ 1371.184094][ T30] audit: type=1400 audit(1781698554.021:15556): avc: denied { create } for pid=24642 comm="syz.5.5034" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1371.261152][ T24] usb 2-1: USB disconnect, device number 23 [ 1371.386229][ T24] upd78f0730 ttyUSB0: upd78f0730 converter now disconnected from ttyUSB0 [ 1371.386867][ T30] audit: type=1400 audit(1781698554.111:15557): avc: denied { execmem } for pid=24642 comm="syz.5.5034" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1371.423858][ T24] upd78f0730 2-1:8.128: device disconnected [ 1371.783843][ T30] audit: type=1400 audit(1781698554.341:15558): avc: denied { create } for pid=24642 comm="syz.5.5034" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1371.885164][ T30] audit: type=1400 audit(1781698554.341:15559): avc: denied { write } for pid=24642 comm="syz.5.5034" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1371.908682][ T30] audit: type=1400 audit(1781698554.361:15560): avc: denied { read } for pid=24642 comm="syz.5.5034" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1371.939892][ T30] audit: type=1400 audit(1781698554.371:15561): avc: denied { write } for pid=24642 comm="syz.5.5034" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1371.966167][T24648] siw: device registration error -23 [ 1372.462876][ T30] audit: type=1400 audit(1781698554.411:15562): avc: denied { read write } for pid=16718 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1372.899925][ T30] audit: type=1400 audit(1781698554.421:15563): avc: denied { open } for pid=16718 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1373.140834][ T30] audit: type=1400 audit(1781698554.441:15564): avc: denied { ioctl } for pid=16718 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1373.185558][ T30] audit: type=1400 audit(1781698554.621:15565): avc: denied { name_bind } for pid=24646 comm="syz.2.5031" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 1373.549467][T21134] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 1373.749623][ T803] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 1373.757716][T12086] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 1373.780839][T21134] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1373.791556][T21134] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1373.801069][T21134] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1373.815134][T21134] usb 2-1: config 0 descriptor?? [ 1373.825115][T21134] pwc: Askey VC010 type 2 USB webcam detected. [ 1373.920238][ T803] usb 3-1: Using ep0 maxpacket: 8 [ 1373.934271][ T803] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1373.959480][T12086] usb 5-1: Using ep0 maxpacket: 8 [ 1373.971661][T12086] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1373.984270][T12086] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1373.995024][ T803] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1374.007676][T12086] usb 5-1: Product: syz [ 1374.012061][ T803] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1374.021858][T12086] usb 5-1: Manufacturer: syz [ 1374.027591][T12086] usb 5-1: SerialNumber: syz [ 1374.033467][ T803] usb 3-1: Product: syz [ 1374.039386][ T803] usb 3-1: Manufacturer: syz [ 1374.052404][T12086] usb 5-1: config 0 descriptor?? [ 1374.065509][ T803] usb 3-1: SerialNumber: syz [ 1374.123869][ T803] usb 3-1: config 0 descriptor?? [ 1374.247177][T22744] Bluetooth: hci5: adv larger than maximum supported [ 1374.247211][T22744] Bluetooth: hci5: Malformed LE Event: 0x0d [ 1374.314906][T12086] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1374.468817][T21134] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1374.879962][T21135] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 1375.622939][ T31] INFO: task syz.0.4640:23079 blocked for more than 143 seconds. [ 1375.646343][ T31] Tainted: G L syzkaller #0 [ 1375.657706][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1375.666462][T21135] usb 4-1: Using ep0 maxpacket: 8 [ 1375.677226][ T31] task:syz.0.4640 state:D stack:29304 pid:23079 tgid:23073 ppid:17067 task_flags:0x400040 flags:0x00080002 [ 1375.699493][ T31] Call Trace: [ 1375.703490][ T31] [ 1375.706531][ T31] __schedule+0x125c/0x6730 [ 1375.730838][T21135] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1375.744337][ T31] ? do_raw_spin_lock+0x128/0x260 [ 1375.755188][T21135] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1375.767120][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1375.774713][ T31] ? __pfx___schedule+0x10/0x10 [ 1375.780753][T21135] usb 4-1: Product: syz [ 1375.787850][T21135] usb 4-1: Manufacturer: syz [ 1375.814076][ T31] ? rcu_is_watching+0x12/0xc0 [ 1375.853066][T12086] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1375.865122][T21135] usb 4-1: SerialNumber: syz [ 1375.871666][ T31] ? schedule+0x2bf/0x390 [ 1375.902210][ T31] ? lock_release+0x24d/0x310 [ 1375.903852][T12086] usb 5-1: USB disconnect, device number 55 [ 1375.953405][ T31] schedule+0xdd/0x390 [ 1375.972882][T21135] usb 4-1: config 0 descriptor?? [ 1376.047442][ T31] schedule_preempt_disabled+0x13/0x30 [ 1376.092544][ T31] __mutex_lock+0xccc/0x1bd0 [ 1376.097195][ T31] ? sync_bdevs+0x153/0x480 [ 1376.102511][ T31] ? rcu_is_watching+0x12/0xc0 [ 1376.107699][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1376.113051][ T31] ? __mutex_unlock_slowpath+0x350/0x910 [ 1376.120005][ T31] ? iput.part.0+0x1a0/0x1050 [ 1376.125195][ T31] ? sync_bdevs+0x53/0x480 [ 1376.148541][ T31] ? lock_release+0x211/0x310 [ 1376.157540][ T31] ? sync_bdevs+0x153/0x480 [ 1376.167813][ T31] sync_bdevs+0x153/0x480 [ 1376.174904][ T31] ksys_sync+0xb0/0xf0 [ 1376.183335][ T31] ? __pfx_ksys_sync+0x10/0x10 [ 1376.194446][ T31] ? kcov_ioctl+0x16a/0x720 [ 1376.202868][ T31] ? rcu_is_watching+0x12/0xc0 [ 1376.212003][ T31] ? trace_irq_enable.constprop.0+0x122/0x160 [ 1376.222412][ T31] __do_sys_sync+0xe/0x20 [ 1376.231711][ T31] do_syscall_64+0x115/0x870 [ 1376.239434][ T31] ? clear_bhb_loop+0x40/0x90 [ 1376.247429][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1376.261408][ T31] RIP: 0033:0x7fa524f9ce59 [ 1376.276663][ T31] RSP: 002b:00007fa525e1d028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 1376.285639][ T31] RAX: ffffffffffffffda RBX: 00007fa525215fa0 RCX: 00007fa524f9ce59 [ 1376.298840][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1376.299397][ T30] kauditd_printk_skb: 111 callbacks suppressed [ 1376.299409][ T30] audit: type=1400 audit(1781698559.141:15677): avc: denied { ioctl } for pid=24676 comm="syz.3.5041" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1376.309951][ T31] RBP: 00007fa525215fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1376.351083][T21135] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1376.359952][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1376.367975][ T31] R13: 00007fa525216038 R14: 00007fa525215fa0 R15: 00007ffc88ad5ad8 [ 1376.376360][ T31] [ 1376.379869][ T31] INFO: task syz.0.4640:23082 blocked for more than 144 seconds. [ 1376.387610][ T31] Tainted: G L syzkaller #0 [ 1376.395100][T21134] pwc: recv_control_msg error -71 req 02 val 2c00 [ 1376.402765][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1376.413611][ T31] task:syz.0.4640 state:D stack:29304 pid:23082 tgid:23073 ppid:17067 task_flags:0x400040 flags:0x00080002 [ 1376.414420][ T30] audit: type=1400 audit(1781698559.261:15678): avc: denied { read write } for pid=23960 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1376.426632][T21134] pwc: recv_control_msg error -71 req 04 val 1000 [ 1376.463288][ T30] audit: type=1400 audit(1781698559.301:15679): avc: denied { read write open } for pid=23960 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1376.468966][ T31] Call Trace: [ 1376.493072][ T31] [ 1376.496107][T21134] pwc: recv_control_msg error -71 req 04 val 1300 [ 1376.502899][ T31] __schedule+0x125c/0x6730 [ 1376.507495][T21134] pwc: recv_control_msg error -71 req 04 val 1400 [ 1376.515809][ T31] ? do_raw_spin_lock+0x128/0x260 [ 1376.520528][ T30] audit: type=1400 audit(1781698559.301:15680): avc: denied { ioctl } for pid=23960 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1376.522755][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1376.552583][ T30] audit: type=1400 audit(1781698559.391:15681): avc: denied { ioctl } for pid=24676 comm="syz.3.5041" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1376.552643][ T30] audit: type=1400 audit(1781698559.391:15682): avc: denied { ioctl } for pid=24676 comm="syz.3.5041" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x550c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1376.582536][ T30] audit: type=1400 audit(1781698559.421:15683): avc: denied { read write } for pid=17460 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1376.605023][T21134] pwc: recv_control_msg error -71 req 02 val 2000 [ 1376.647488][T21134] pwc: recv_control_msg error -71 req 02 val 2100 [ 1376.650892][ T30] audit: type=1400 audit(1781698559.471:15684): avc: denied { open } for pid=17460 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1376.658587][T17443] usb 3-1: USB disconnect, device number 74 [ 1376.679576][ C1] sl0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 20270 ms [ 1376.679618][ C1] sl0: transmit timed out, driver error? [ 1376.711846][T21134] pwc: recv_control_msg error -71 req 04 val 1500 [ 1376.719442][T21134] pwc: recv_control_msg error -71 req 02 val 2500 [ 1376.726427][ T31] ? __pfx___schedule+0x10/0x10 [ 1376.731421][T21134] pwc: recv_control_msg error -71 req 02 val 2400 [ 1376.738141][T21134] pwc: recv_control_msg error -71 req 02 val 2600 [ 1376.739097][ T30] audit: type=1400 audit(1781698559.471:15685): avc: denied { ioctl } for pid=17460 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1376.748665][T21134] pwc: recv_control_msg error -71 req 02 val 2900 [ 1376.774511][ T30] audit: type=1400 audit(1781698559.471:15686): avc: denied { ioctl } for pid=24676 comm="syz.3.5041" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x550c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1376.784999][ T31] ? rcu_is_watching+0x12/0xc0 [ 1376.808953][ T31] ? schedule+0x2bf/0x390 [ 1376.815295][ T31] ? lock_release+0x24d/0x310 [ 1376.820693][T21134] pwc: recv_control_msg error -71 req 02 val 2800 [ 1376.827483][ T31] schedule+0xdd/0x390 [ 1376.831739][T21134] pwc: recv_control_msg error -71 req 04 val 1100 [ 1376.838251][ T31] schedule_preempt_disabled+0x13/0x30 [ 1376.844926][T21134] pwc: recv_control_msg error -71 req 04 val 1200 [ 1376.852422][ T31] __mutex_lock+0xccc/0x1bd0 [ 1376.857242][T21134] pwc: Registered as video103. [ 1376.863879][ T31] ? sync_bdevs+0x153/0x480 [ 1376.864179][T21134] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input77 [ 1376.880015][ T31] ? rcu_is_watching+0x12/0xc0 [ 1376.888271][T21134] usb 2-1: USB disconnect, device number 24 [ 1376.899245][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1376.905502][ T31] ? __mutex_unlock_slowpath+0x350/0x910 [ 1376.913051][ T31] ? iput.part.0+0x1a0/0x1050 [ 1376.918132][ T31] ? sync_bdevs+0x53/0x480 [ 1376.923917][ T31] ? lock_release+0x211/0x310 [ 1376.928620][ T31] ? sync_bdevs+0x153/0x480 [ 1376.933892][ T31] sync_bdevs+0x153/0x480 [ 1376.938628][ T31] ksys_sync+0xb0/0xf0 [ 1376.946951][ T31] ? __pfx_ksys_sync+0x10/0x10 [ 1376.951928][ T31] ? kcov_ioctl+0x16a/0x720 [ 1376.956837][ T31] ? rcu_is_watching+0x12/0xc0 [ 1376.962390][ T31] ? trace_irq_enable.constprop.0+0x122/0x160 [ 1376.968486][ T31] __do_sys_sync+0xe/0x20 [ 1376.973520][ T31] do_syscall_64+0x115/0x870 [ 1376.978502][ T31] ? clear_bhb_loop+0x40/0x90 [ 1376.983269][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1376.989181][ T31] RIP: 0033:0x7fa524f9ce59 [ 1376.994832][ T31] RSP: 002b:00007fa525dfc028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 1377.005326][ T31] RAX: ffffffffffffffda RBX: 00007fa525216090 RCX: 00007fa524f9ce59 [ 1377.013987][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1377.022039][ T31] RBP: 00007fa525216090 R08: 0000000000000000 R09: 0000000000000000 [ 1377.030462][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1377.038454][ T31] R13: 00007fa525216128 R14: 00007fa525216090 R15: 00007ffc88ad5ad8 [ 1377.046639][T21135] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1377.065597][ T31] [ 1377.069384][ T31] INFO: task syz.0.4640:23083 blocked for more than 144 seconds. [ 1377.077747][ T31] Tainted: G L syzkaller #0 [ 1377.120523][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1377.131406][ T31] task:syz.0.4640 state:D stack:29304 pid:23083 tgid:23073 ppid:17067 task_flags:0x400040 flags:0x00080002 [ 1377.143397][ T31] Call Trace: [ 1377.146671][ T31] [ 1377.150920][ T31] __schedule+0x125c/0x6730 [ 1377.155448][ T31] ? rcu_is_watching+0x12/0xc0 [ 1377.160919][ T31] ? do_raw_spin_lock+0x128/0x260 [ 1377.165974][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1377.171878][ T31] ? __pfx___schedule+0x10/0x10 [ 1377.176750][ T31] ? rcu_is_watching+0x12/0xc0 [ 1377.181554][ T31] ? schedule+0x2bf/0x390 [ 1377.186049][ T31] ? lock_release+0x24d/0x310 [ 1377.191184][ T31] schedule+0xdd/0x390 [ 1377.195272][ T31] schedule_preempt_disabled+0x13/0x30 [ 1377.200802][ T31] __mutex_lock+0xccc/0x1bd0 [ 1377.205405][ T31] ? sync_bdevs+0x153/0x480 [ 1377.210300][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1377.215346][ T31] ? __mutex_unlock_slowpath+0x350/0x910 [ 1377.221543][ T31] ? iput.part.0+0x1a0/0x1050 [ 1377.226240][ T31] ? sync_bdevs+0x53/0x480 [ 1377.233536][ T31] ? lock_release+0x211/0x310 [ 1377.238233][ T31] ? sync_bdevs+0x153/0x480 [ 1377.242806][ T31] sync_bdevs+0x153/0x480 [ 1377.247152][ T31] ksys_sync+0xb0/0xf0 [ 1377.253539][ T31] ? __pfx_ksys_sync+0x10/0x10 [ 1377.258578][ T31] ? kcov_ioctl+0x16a/0x720 [ 1377.263138][ T31] ? rcu_is_watching+0x12/0xc0 [ 1377.267906][ T31] ? trace_irq_enable.constprop.0+0x122/0x160 [ 1377.274956][ T31] __do_sys_sync+0xe/0x20 [ 1377.279374][ T31] do_syscall_64+0x115/0x870 [ 1377.283982][ T31] ? clear_bhb_loop+0x40/0x90 [ 1377.288666][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1377.295189][ T31] RIP: 0033:0x7fa524f9ce59 [ 1377.299707][ T31] RSP: 002b:00007fa525ddb028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 1377.308131][ T31] RAX: ffffffffffffffda RBX: 00007fa525216180 RCX: 00007fa524f9ce59 [ 1377.321532][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1377.330076][ T31] RBP: 00007fa525216180 R08: 0000000000000000 R09: 0000000000000000 [ 1377.338067][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1377.347171][ T31] R13: 00007fa525216218 R14: 00007fa525216180 R15: 00007ffc88ad5ad8 [ 1377.356223][ T31] [ 1377.359374][ T31] INFO: task syz.0.4640:23084 blocked for more than 145 seconds. [ 1377.367457][ T31] Tainted: G L syzkaller #0 [ 1377.374123][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1377.383304][ T31] task:syz.0.4640 state:D stack:28360 pid:23084 tgid:23073 ppid:17067 task_flags:0x400040 flags:0x00080002 [ 1377.395281][ T31] Call Trace: [ 1377.398555][ T31] [ 1377.402133][ T31] __schedule+0x125c/0x6730 [ 1377.406662][ T31] ? do_raw_spin_lock+0x128/0x260 [ 1377.411726][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1377.417100][ T31] ? __pfx___schedule+0x10/0x10 [ 1377.422298][ T31] ? rcu_is_watching+0x12/0xc0 [ 1377.427115][ T31] ? schedule+0x2bf/0x390 [ 1377.431505][ T31] ? lock_release+0x24d/0x310 [ 1377.436269][ T31] schedule+0xdd/0x390 [ 1377.441245][ T31] schedule_preempt_disabled+0x13/0x30 [ 1377.446730][ T31] __mutex_lock+0xccc/0x1bd0 [ 1377.451914][ T31] ? sync_bdevs+0x153/0x480 [ 1377.456441][ T31] ? rcu_is_watching+0x12/0xc0 [ 1377.464753][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1377.469828][ T31] ? __mutex_unlock_slowpath+0x350/0x910 [ 1377.475640][ T31] ? iput.part.0+0x1a0/0x1050 [ 1377.480717][ T31] ? sync_bdevs+0x53/0x480 [ 1377.485152][ T31] ? lock_release+0x211/0x310 [ 1377.489971][ T31] ? sync_bdevs+0x153/0x480 [ 1377.494498][ T31] sync_bdevs+0x153/0x480 [ 1377.498831][ T31] ksys_sync+0xb0/0xf0 [ 1377.503814][ T31] ? __pfx_ksys_sync+0x10/0x10 [ 1377.508601][ T31] ? kcov_ioctl+0x16a/0x720 [ 1377.513435][ T31] ? rcu_is_watching+0x12/0xc0 [ 1377.518300][ T31] ? trace_irq_enable.constprop.0+0x122/0x160 [ 1377.525548][ T31] __do_sys_sync+0xe/0x20 [ 1377.530361][ T31] do_syscall_64+0x115/0x870 [ 1377.534967][ T31] ? clear_bhb_loop+0x40/0x90 [ 1377.540185][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1377.546440][ T31] RIP: 0033:0x7fa524f9ce59 [ 1377.551634][ T31] RSP: 002b:00007fa525dba028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 1377.561576][ T31] RAX: ffffffffffffffda RBX: 00007fa525216270 RCX: 00007fa524f9ce59 [ 1377.570598][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1377.578586][ T31] RBP: 00007fa525216270 R08: 0000000000000000 R09: 0000000000000000 [ 1377.586621][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1377.594956][ T31] R13: 00007fa525216308 R14: 00007fa525216270 R15: 00007ffc88ad5ad8 [ 1377.603130][ T31] [ 1377.607804][ T31] INFO: lockdep is turned off. [ 1377.617551][ T31] NMI backtrace for cpu 1 [ 1377.617571][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1377.617599][ T31] Tainted: [L]=SOFTLOCKUP [ 1377.617607][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1377.617619][ T31] Call Trace: [ 1377.617626][ T31] [ 1377.617632][ T31] dump_stack_lvl+0x100/0x190 [ 1377.617658][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 1377.617680][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1377.617703][ T31] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 1377.617734][ T31] sys_info+0x141/0x190 [ 1377.617759][ T31] watchdog+0xcb1/0x1030 [ 1377.617791][ T31] ? trace_irq_enable.constprop.0+0x122/0x160 [ 1377.617812][ T31] ? __pfx_watchdog+0x10/0x10 [ 1377.617840][ T31] ? __kthread_parkme+0x18c/0x230 [ 1377.617864][ T31] ? kthread+0x13a/0x450 [ 1377.617888][ T31] ? __pfx_watchdog+0x10/0x10 [ 1377.617916][ T31] kthread+0x370/0x450 [ 1377.617939][ T31] ? __pfx_kthread+0x10/0x10 [ 1377.617964][ T31] ret_from_fork+0x72b/0xd50 [ 1377.617996][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1377.618019][ T31] ? __switch_to+0x800/0x10f0 [ 1377.618046][ T31] ? __pfx_kthread+0x10/0x10 [ 1377.618075][ T31] ret_from_fork_asm+0x1a/0x30 [ 1377.618107][ T31] [ 1377.618121][ T31] Sending NMI from CPU 1 to CPUs 0: [ 1377.751025][ C0] NMI backtrace for cpu 0 [ 1377.751044][ C0] CPU: 0 UID: 0 PID: 5590 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 1377.751070][ C0] Tainted: [L]=SOFTLOCKUP [ 1377.751077][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1377.751089][ C0] RIP: 0010:write_comp_data+0x7/0x90 [ 1377.751119][ C0] Code: 10 17 00 00 c3 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 65 8b 05 59 d2 02 12 <49> 89 f8 49 89 f1 49 89 d2 65 48 8b 3d 30 d2 02 12 a9 00 01 ff 00 [ 1377.751137][ C0] RSP: 0018:ffffc9000202f950 EFLAGS: 00000046 [ 1377.751152][ C0] RAX: 0000000080000003 RBX: 0000000000000001 RCX: ffffffff81f4d27a [ 1377.751164][ C0] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000001 [ 1377.751175][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: fffffbfff21b1e72 [ 1377.751186][ C0] R10: ffffffff90d8f397 R11: ffffffff81d4f52c R12: ffff8880b843c100 [ 1377.751198][ C0] R13: 000000000000000a R14: ffff8880b84284c8 R15: ffff8880b843c100 [ 1377.751210][ C0] FS: 0000555568c26540(0000) GS:ffff88812435f000(0000) knlGS:0000000000000000 [ 1377.751228][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1377.751240][ C0] CR2: 000056071cb6a708 CR3: 000000007d9ee000 CR4: 00000000003526f0 [ 1377.751252][ C0] Call Trace: [ 1377.751258][ C0] [ 1377.751264][ C0] trace_hrtimer_start+0x6a/0x220 [ 1377.751288][ C0] hrtimer_start_range_ns_common+0x553/0x18b0 [ 1377.751316][ C0] hrtimer_start_range_ns+0xc2/0x240 [ 1377.751340][ C0] finish_task_switch.isra.0+0xa39/0x1010 [ 1377.751363][ C0] __schedule+0x1264/0x6730 [ 1377.751384][ C0] ? hrtimer_start_range_ns_user+0x16c/0x4c0 [ 1377.751410][ C0] ? __pfx___schedule+0x10/0x10 [ 1377.751427][ C0] ? rcu_is_watching+0x12/0xc0 [ 1377.751448][ C0] ? schedule+0x2bf/0x390 [ 1377.751468][ C0] ? lock_release+0x24d/0x310 [ 1377.751486][ C0] schedule+0xdd/0x390 [ 1377.751502][ C0] do_nanosleep+0x113/0x500 [ 1377.751528][ C0] ? __pfx_do_nanosleep+0x10/0x10 [ 1377.751553][ C0] ? __asan_memset+0x23/0x50 [ 1377.751574][ C0] ? __hrtimer_setup+0x208/0x330 [ 1377.751595][ C0] hrtimer_nanosleep+0x14f/0x350 [ 1377.751619][ C0] ? __pfx_hrtimer_nanosleep+0x10/0x10 [ 1377.751644][ C0] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 1377.751665][ C0] ? get_timespec64+0x147/0x240 [ 1377.751690][ C0] ? __pfx_get_timespec64+0x10/0x10 [ 1377.751718][ C0] common_nsleep+0xa1/0xd0 [ 1377.751737][ C0] __x64_sys_clock_nanosleep+0x336/0x480 [ 1377.751764][ C0] ? __pfx___x64_sys_clock_nanosleep+0x10/0x10 [ 1377.751792][ C0] ? rcu_is_watching+0x12/0xc0 [ 1377.751813][ C0] do_syscall_64+0x115/0x870 [ 1377.751832][ C0] ? clear_bhb_loop+0x40/0x90 [ 1377.751854][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1377.751871][ C0] RIP: 0033:0x7fb5f4157fd7 [ 1377.751885][ C0] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1377.751902][ C0] RSP: 002b:00007ffc33cc9640 EFLAGS: 00000202 ORIG_RAX: 00000000000000e6 [ 1377.751917][ C0] RAX: ffffffffffffffda RBX: 0000555568c26540 RCX: 00007fb5f4157fd7 [ 1377.751929][ C0] RDX: 00007ffc33cc9680 RSI: 0000000000000000 RDI: 0000000000000000 [ 1377.751941][ C0] RBP: 00007ffc33cc9b60 R08: 0000000000000000 R09: 0000000000000000 [ 1377.751952][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000004 [ 1377.751962][ C0] R13: 00007ffc33cc96bc R14: 00007ffc33cc9750 R15: 0000000000000000 [ 1377.751980][ C0] [ 1378.102836][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1378.109689][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1378.120352][ T31] Tainted: [L]=SOFTLOCKUP [ 1378.124661][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1378.134698][ T31] Call Trace: [ 1378.137960][ T31] [ 1378.140874][ T31] dump_stack_lvl+0x100/0x190 [ 1378.145560][ T31] vpanic+0x552/0x970 [ 1378.149528][ T31] ? __pfx_vpanic+0x10/0x10 [ 1378.154020][ T31] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 1378.160170][ T31] panic+0xd1/0xe0 [ 1378.163881][ T31] ? __pfx_panic+0x10/0x10 [ 1378.168284][ T31] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 1378.174436][ T31] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 1378.180608][ T31] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 1378.186772][ T31] ? watchdog.cold+0x1ec/0x234 [ 1378.191529][ T31] ? watchdog+0xcc1/0x1030 [ 1378.195941][ T31] watchdog.cold+0x1fd/0x234 [ 1378.200522][ T31] ? trace_irq_enable.constprop.0+0x122/0x160 [ 1378.206595][ T31] ? __pfx_watchdog+0x10/0x10 [ 1378.211269][ T31] ? __kthread_parkme+0x18c/0x230 [ 1378.216285][ T31] ? kthread+0x13a/0x450 [ 1378.220548][ T31] ? __pfx_watchdog+0x10/0x10 [ 1378.225217][ T31] kthread+0x370/0x450 [ 1378.229274][ T31] ? __pfx_kthread+0x10/0x10 [ 1378.233856][ T31] ret_from_fork+0x72b/0xd50 [ 1378.238454][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1378.243552][ T31] ? __switch_to+0x800/0x10f0 [ 1378.248218][ T31] ? __pfx_kthread+0x10/0x10 [ 1378.252806][ T31] ret_from_fork_asm+0x1a/0x30 [ 1378.257575][ T31] [ 1378.260795][ T31] Kernel Offset: disabled [ 1378.265121][ T31] Rebooting in 86400 seconds..