last executing test programs: 15.077054017s ago: executing program 2 (id=1579): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() ptrace(0x10, r0) sched_setaffinity(0x0, 0x8, &(0x7f0000000480)=0x81) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = semget$private(0x0, 0x4000000009, 0x668) semop(r3, 0x0, 0x0) semctl$GETNCNT(r3, 0x3, 0xe, &(0x7f0000000280)=""/51) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20a02, 0x0) ioctl$TIOCSSOFTCAR(r4, 0x5453, 0x0) io_submit(0x0, 0x2, &(0x7f00000001c0)=[0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x5, 0x7, r1, &(0x7f0000000340)="67221cab6e97dfc605584957a0c40a32b0468271f4fc875517b06614262c51b1ed04f983e486a2d7ff6e8a7252332b9bbd6476b404340fb1ad6c208f629f92b590a999d439832b6e0a2738efcfa293e304eae5c2b43f9d1cfc590d1c78de61883e65aff2c15d5b56ced30575c39c63916173c5c70b4c4be3c6047501941290ac8e38ad2bf629b148697787c9fa778c98d83900859f65f7575267b4df84b3263c625c796049dfd939d02c41575301a4c878421b73a6be94cd4174c1d9a718cb3f32093ab9", 0xc4, 0x7, 0x0, 0x2}]) semtimedop(r3, &(0x7f00000004c0)=[{0x2, 0xffff, 0x800}, {0x7, 0x5067}, {0x4, 0x4, 0xc00}, {0x1, 0x7, 0x1800}, {0x3, 0x8, 0x1000}, {0x1, 0x9}], 0x6, &(0x7f0000001040)={0x0, 0x989680}) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x40002, 0x0) 14.02781524s ago: executing program 1 (id=1584): prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r2, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r2, 0x0, 0xffffffffffffffff, 0x1}) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r5, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r7 = accept(r5, 0x0, 0x0) sendto$packet(r7, 0x0, 0x0, 0x4004010, 0x0, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x80}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCGARP(r6, 0x8954, &(0x7f0000000240)={{0x2, 0x4e22, @broadcast}, {0x306, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}, 0x30, {0x2, 0x4e23, @broadcast}, 'wg1\x00'}) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x6c, 0x10, 0xffffffffffffffff, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x1ba20, 0x40a18}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x34, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}, @IFLA_VLAN_EGRESS_QOS={0x28, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1, 0x8001}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x401, 0x401}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1, 0x5}}]}]}}}, @IFLA_LINK={0x8}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x8000002) close_range(r0, 0xffffffffffffffff, 0x0) 12.920359022s ago: executing program 4 (id=1587): socket$inet6_sctp(0xa, 0x801, 0x84) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) syz_io_uring_setup(0x2d64, &(0x7f0000000100)={0x0, 0x100577, 0x2, 0x0, 0x42}, &(0x7f0000000400), 0x0, &(0x7f0000000000)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) shmctl$SHM_STAT_ANY(0x0, 0xf, &(0x7f0000000600)=""/26) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(0x0, r1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x1c, r2, 0x305, 0x70bd26, 0x0, {0x7}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0xf0ffff}, 0x24044080) 11.291851375s ago: executing program 4 (id=1590): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="200803"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 10.024180627s ago: executing program 0 (id=1593): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ff9000/0x4000)=nil) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_icmp(0x2, 0x2, 0x1) socket$alg(0x26, 0x5, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/class/vtconsole/vtcon1/bind\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='0\x00', 0x1) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETVESABLANK(r2, 0x541c, 0x0) ioctl$TIOCL_BLANKSCREEN(r2, 0x541c, &(0x7f0000000200)) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000d00)=@flushpolicy={0x10, 0x1d, 0x1}, 0x10}}, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140)=ANY=[@ANYRES8=r0, @ANYRES64], 0x50) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r4, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0) r5 = socket(0x15, 0x5, 0x0) getsockopt(r5, 0x200000000114, 0x2711, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 9.948987019s ago: executing program 1 (id=1594): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000001b40)={0x0, 0x4, 0x0, [0x5, 0x13, 0xa, 0x101, 0xf3d], [0x81, 0x8, 0x0, 0x5, 0x31c, 0x3, 0xf6bb, 0x40, 0x8, 0xfff, 0x8, 0xffff, 0x0, 0x328, 0x6, 0x400, 0xb04, 0x3, 0xffffffffffff2870, 0x1, 0x4, 0xffff, 0x1, 0x9, 0xf6, 0xf, 0xe8, 0xda, 0x1, 0x0, 0x5, 0x0, 0x7b, 0x6, 0x0, 0xfffffffffffffffa, 0x8, 0x3, 0x2, 0xc, 0xc2f, 0x7ff, 0x9, 0x3, 0x0, 0x200, 0xe569, 0x101, 0x2, 0xffff, 0x9, 0x6, 0x3, 0x7, 0x70757c94, 0x5, 0x2, 0x100, 0x1, 0x6, 0x5, 0x8000, 0x7, 0x6, 0x9, 0x5, 0xfff, 0x5, 0x1, 0x0, 0x2, 0x9, 0x100, 0x2, 0x6, 0x5, 0x8, 0x1, 0x42c5, 0x4, 0x14bc, 0x8, 0x4, 0x5, 0x1, 0x8b8, 0x18e, 0x9, 0x27b7, 0x7, 0x8, 0xfffffffffffffffa, 0x6, 0x58, 0x6, 0x5, 0xffffffff, 0x9, 0x101, 0x6, 0x1, 0x7, 0xfffffffffffffff8, 0x0, 0xebc8, 0x5, 0x100, 0x101, 0x5, 0x10000, 0x63cb, 0x8, 0x5, 0xc, 0x876, 0x9, 0x8, 0x9, 0x100000001, 0x6, 0x9ef]}) sendmsg$IPVS_CMD_SET_INFO(r1, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$netlink(0x10, 0x3, 0x0) syz_open_procfs$namespace(0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x50, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000140)={'batadv0\x00', 0x0}) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000240)='./cgroup\x00', &(0x7f0000000040)='jfs\x00', 0x2200010, &(0x7f00000000c0)='discard') r4 = socket(0x9, 0x803, 0x8000ff) setsockopt$inet_tcp_int(r4, 0x6, 0x2, &(0x7f0000000080)=0x2, 0x4) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/pm_async', 0x100, 0x8) ioctl$TCSETSW(r5, 0x5403, &(0x7f0000000180)={0x7, 0x3, 0x5, 0x2, 0xf, "ea4d77658e947860840aa9e3f4fa25b543bf6f"}) 9.922515714s ago: executing program 0 (id=1595): timer_create(0x1, 0x0, &(0x7f0000000100)) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) lseek(0xffffffffffffffff, 0x54, 0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) sendmsg$NFC_CMD_FW_DOWNLOAD(0xffffffffffffffff, 0x0, 0x2400c040) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80, 0x143) getdents64(r4, &(0x7f0000000580)=""/174, 0xff56) 9.104968194s ago: executing program 0 (id=1597): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffffff, 0x0, &(0x7f0000000380)={[&(0x7f0000000180)='!}]\x00', &(0x7f00000001c0)='-*$$^/%{/\x81&&\x00', &(0x7f0000000200)='/dev/comedi0\x00', &(0x7f0000000240)='comedi_bond\x00', &(0x7f0000000280)='#Q*\\\'+!]{!(\x00']}, 0x0, 0x400) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x500, 0x8000) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f0000000000)={'comedi_bond\x00', [0x4, 0x0, 0x7fffffff, 0x8, 0x90000, 0x9, 0xed, 0x890, 0x280ffa, 0xfffffffb, 0x4, 0x1, 0x1030, 0x1000008, 0x4c, 0x40000009, 0xfff7ffa6, 0x3ff, 0x1ff, 0x9ea, 0x3, 0xb, 0x9, 0x101, 0x1, 0x990e, 0x5, 0x18, 0xf, 0x2000006, 0x77fd]}) socket$xdp(0x2c, 0x3, 0x0) ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) 9.093045978s ago: executing program 2 (id=1598): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="d80000001c0081054e81f782db44b904021d08040e000000100d10a118000c000600142603600e1208000f0000810401a8001600200001400300000803600cfab94dcf5c0461", 0x46}], 0x1, 0x0, 0x0, 0x7400}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="6a38f0ff10"], 0x0, 0x42, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000c9"], 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 9.025654744s ago: executing program 3 (id=1599): r0 = syz_io_uring_setup(0x31c5, &(0x7f0000000140)={0x0, 0xd73c, 0x10000, 0x1, 0x135}, &(0x7f00000001c0), &(0x7f00000003c0), &(0x7f0000000000)) syz_io_uring_setup(0x3c5f, &(0x7f0000000240)={0x0, 0x20, 0x27, 0x2, 0x0, 0x0, r0}, &(0x7f00000002c0), &(0x7f0000000000), 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x40002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key$keyring(&(0x7f0000000340), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x4) r6 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r6, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x11, 0x8100}, 0x14) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000400)=0x11) ioctl$TCSETS(r2, 0x5402, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f0000000340)={0x2b}, 0x8) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) readahead(0xffffffffffffffff, 0x8, 0x1) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 8.57036676s ago: executing program 1 (id=1600): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x201c}, 0x4000) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0xdffffffe, 0x80, 0x0, 0x0, "8100e1c8e80b598c36ff000800"}) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) eventfd(0xc) r3 = syz_open_dev$video4linux(&(0x7f0000000000), 0x3, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r3, 0xc0585605, &(0x7f00000001c0)={0x0, 0x0, {0x1, 0x0, 0x3012, 0x0, 0xd, 0x2, 0x2}}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$FUSE_OPEN(r4, &(0x7f0000000080)={0x20, 0x8000000000000009, 0x0, {0x0, 0x8}}, 0x20) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) syz_emit_ethernet(0x6c, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000000), 0x8) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x60}) epoll_create1(0x80000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80387, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r6, 0x40505331, &(0x7f0000000540)={{}, {0x18}, 0x0, 0x7}) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, 0x0) socket$xdp(0x2c, 0x3, 0x0) 7.813280098s ago: executing program 2 (id=1601): r0 = socket$key(0xf, 0x3, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00') pread64(r2, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) syz_genetlink_get_family_id$nfc(&(0x7f0000000480), 0xffffffffffffffff) write$nci(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[], 0x102) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=@allocspi={0xf8, 0x16, 0x1, 0x70bd2b, 0x25dfdbfe, {{{@in=@empty, @in=@private=0xa010101, 0x4e23, 0x0, 0x4e24, 0x0, 0xa, 0x80, 0x20, 0x5e}, {@in6=@local, 0x4d5, 0x33}, @in=@dev={0xac, 0x14, 0x14, 0x10}, {0x8, 0x7b5, 0x0, 0x6, 0x9, 0x0, 0xffffffff, 0x3}, {0x2, 0x3, 0x1, 0xfffffffffffffffa}, {0x0, 0x10001, 0xfffffff9}, 0x70bd2a, 0x0, 0x0, 0x2, 0x6, 0x1}, 0x8, 0x74f}}, 0xf8}, 0x1, 0x0, 0x0, 0x10}, 0x400c8c0) sendmsg$key(r0, &(0x7f0000000440)={0x900, 0x0, &(0x7f0000000400)={0x0}}, 0x40408c0) 7.74561369s ago: executing program 4 (id=1602): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r1}, 0x8) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x40000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./trace/events/dwc3/dwc3_ctrl_req/inject\x00', 0x2, 0x0) write(r4, &(0x7f0000000100), 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/trace\x00', 0x0, 0x0) read(r5, &(0x7f0000000180), 0x1000) 7.659124744s ago: executing program 3 (id=1603): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000180), 0x2000090, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="2c02"]) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x20001, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0xa, 0x2, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r4, 0x107, 0xa, 0x0, 0x0) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x2, 0x1200, 0x3e, 0xb, 0x0, 0x2}, 0x1c) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000140)={0x84, @rand_addr=0x64010105, 0x4e22, 0x3, 'lblc\x00', 0x1, 0x80005, 0x6f}, 0x2c) socket$kcm(0xa, 0x2, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e24, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x10000, 0xc, 0x2}}, 0x44) r7 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x88002, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000100)=0xd) r8 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) r9 = dup(r8) write$UHID_INPUT(r9, &(0x7f0000001040)={0x18, {"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", 0x100d}}, 0xfffffdef) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f00000003c0)={'pcl818\x00', [0x140, 0x2, 0x3, 0x0, 0x1, 0x2, 0x7ffd, 0x6, 0x1007, 0xf, 0x4, 0x10, 0xf8, 0x8, 0x4ce, 0x9e9b, 0x101, 0x401, 0xc, 0x8, 0x4, 0x0, 0xa, 0x9, 0xffd, 0x200000, 0xaf, 0x0, 0x10001fc, 0x0, 0x4]}) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r2, 0x942e, 0x0) 6.503558958s ago: executing program 3 (id=1604): prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r2, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r2, 0x0, 0xffffffffffffffff, 0x1}) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r6, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r8 = accept(r6, 0x0, 0x0) sendto$packet(r8, 0x0, 0x0, 0x4004010, 0x0, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, r3, 0x0, 0x10001, 0x0, 0x1, 0xd6fe2, 0x2fc247}) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCGARP(r7, 0x8954, &(0x7f0000000240)={{0x2, 0x4e22, @broadcast}, {0x306, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}, 0x30, {0x2, 0x4e23, @broadcast}, 'wg1\x00'}) sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x6c, 0x10, 0xffffffffffffffff, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x1ba20, 0x40a18}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x34, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}, @IFLA_VLAN_EGRESS_QOS={0x28, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1, 0x8001}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x401, 0x401}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1, 0x5}}]}]}}}, @IFLA_LINK={0x8}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x8000002) close_range(r0, 0xffffffffffffffff, 0x0) 6.4963042s ago: executing program 1 (id=1605): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) rt_sigprocmask(0x1, &(0x7f0000000000)={[0x5]}, 0x0, 0x8) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_icmp(0x2, 0x2, 0x1) socket$alg(0x26, 0x5, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/class/vtconsole/vtcon1/bind\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='0\x00', 0x1) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETVESABLANK(r2, 0x541c, 0x0) ioctl$TIOCL_BLANKSCREEN(r2, 0x541c, &(0x7f0000000200)) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000d00)=@flushpolicy={0x10, 0x1d, 0x1}, 0x10}}, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140)=ANY=[@ANYRES8=r0, @ANYRES64], 0x50) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r4, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0) r5 = socket(0x15, 0x5, 0x0) getsockopt(r5, 0x200000000114, 0x2711, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 6.396193132s ago: executing program 2 (id=1606): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) pipe2(0x0, 0x0) openat$qrtrtun(0xffffff9c, 0x0, 0x200801) syz_open_dev$usbmon(&(0x7f0000001940), 0x6c, 0x109000) r1 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = openat(r1, 0x0, 0x2, 0x0) write(r2, 0x0, 0x0) syz_clone(0x0, 0x0, 0x43, 0x0, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002240)={&(0x7f0000002340)={0x70, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x53, 0x33, @action={{{}, {}, @device_b}, @tdls_setup_resp={0xc, 0x1, 0x16, 0x5, @val=0x700, @void, @val={0x2d, 0x1a, {0x8000, 0x2, 0x2, 0x0, {0x2, 0xc, 0x0, 0xd, 0x0, 0x0, 0x1, 0x1}, 0x8, 0x8, 0x5}}, @val={0x65, 0x12, {@initial, @broadcast, @device_b}}}}}]}, 0x70}, 0x1, 0x0, 0x0, 0x2800}, 0x10) 6.278495915s ago: executing program 1 (id=1607): timer_create(0x1, 0x0, &(0x7f0000000100)) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) lseek(0xffffffffffffffff, 0x54, 0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) sendmsg$NFC_CMD_FW_DOWNLOAD(0xffffffffffffffff, 0x0, 0x2400c040) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80, 0x143) getdents64(r4, &(0x7f0000000580)=""/174, 0xff56) 5.263732464s ago: executing program 0 (id=1608): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() ptrace(0x10, r0) sched_setaffinity(0x0, 0x8, &(0x7f0000000480)=0x81) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = semget$private(0x0, 0x4000000009, 0x668) semop(r3, 0x0, 0x0) semctl$GETNCNT(r3, 0x3, 0xe, &(0x7f0000000280)=""/51) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20a02, 0x0) ioctl$TIOCSSOFTCAR(r4, 0x5453, 0x0) io_submit(0x0, 0x2, &(0x7f00000001c0)=[0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x5, 0x7, r1, &(0x7f0000000340)="67221cab6e97dfc605584957a0c40a32b0468271f4fc875517b06614262c51b1ed04f983e486a2d7ff6e8a7252332b9bbd6476b404340fb1ad6c208f629f92b590a999d439832b6e0a2738efcfa293e304eae5c2b43f9d1cfc590d1c78de61883e65aff2c15d5b56ced30575c39c63916173c5c70b4c4be3c6047501941290ac8e38ad2bf629b148697787c9fa778c98d83900859f65f7575267b4df84b3263c625c796049dfd939d02c41575301a4c878421b73a6be94cd4174c1d9a718cb3f32093ab9", 0xc4, 0x7, 0x0, 0x2}]) semtimedop(r3, &(0x7f00000004c0)=[{0x2, 0xffff, 0x800}, {0x7, 0x5067}, {0x4, 0x4, 0xc00}, {0x1, 0x7, 0x1800}, {0x3, 0x8, 0x1000}, {0x1, 0x9}], 0x6, &(0x7f0000001040)={0x0, 0x989680}) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x40002, 0x0) 5.260036879s ago: executing program 1 (id=1609): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) socket$xdp(0x2c, 0x3, 0x0) recvmmsg(r0, &(0x7f0000004080), 0x0, 0x40000121, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) getrlimit(0xe, &(0x7f0000000040)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r1, &(0x7f00000004c0)="d9", 0x1, 0x40851, 0x0, 0x0) syz_usb_connect(0x0, 0x56, &(0x7f0000000080)=ANY=[], 0x0) 5.231159247s ago: executing program 4 (id=1610): openat(0xffffffffffffff9c, 0x0, 0x8000, 0x100) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) mlock(&(0x7f0000b02000/0x2000)=nil, 0x2000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f00000001c0)=0x6, 0x4) write$cgroup_subtree(r3, &(0x7f0000000300)=ANY=[], 0x9) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001080)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'syzkaller0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x100) 5.195690729s ago: executing program 3 (id=1611): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="d80000001c0081054e81f782db44b904021d08040e000000100d10a118000c000600142603600e1208000f0000810401a8001600200001400300000803600cfab94dcf5c0461", 0x46}], 0x1, 0x0, 0x0, 0x7400}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="6a38f0ff10"], 0x0, 0x42, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000c9"], 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 4.993727717s ago: executing program 2 (id=1612): r0 = socket$kcm(0x2b, 0x1, 0x0) syz_clone3(0x0, 0x0) io_setup(0x8, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x8, 0x8ab5, 0x10001, 0x20000000, 0x100, 0x4, 0x63dd1ea1, 0x1}, 0x0, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, 0xffffffffffffffff, 0x0}]) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000c08d) 4.886546657s ago: executing program 3 (id=1613): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfc409000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x2) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f00007f3000/0x1000)=nil, 0x1000, 0x2, 0x4000010, r1, 0x918dd000) r3 = syz_open_dev$mtd(&(0x7f0000000900), 0x46, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) setsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000000480), 0x4) ioctl$MEMREADOOB64(r3, 0x1269, &(0x7f00000000c0)={0x1}) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00220f000000540b4550182195f51584"], 0x0}, 0x0) ioctl$HIDIOCGUCODE(0xffffffffffffffff, 0xc018480d, &(0x7f0000000280)={0x3, 0x100, 0x0, 0x404, 0x80000}) 2.412905331s ago: executing program 4 (id=1614): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000180), 0x2000090, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="2c02"]) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x20001, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0xa, 0x2, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r4, 0x107, 0xa, 0x0, 0x0) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x2, 0x1200, 0x3e, 0xb, 0x0, 0x2}, 0x1c) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000140)={0x84, @rand_addr=0x64010105, 0x4e22, 0x3, 'lblc\x00', 0x1, 0x80005, 0x6f}, 0x2c) socket$kcm(0xa, 0x2, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e24, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x10000, 0xc, 0x2}}, 0x44) r7 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x88002, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000100)=0xd) r8 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) r9 = dup(r8) write$UHID_INPUT(r9, &(0x7f0000001040)={0x18, {"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", 0x100d}}, 0xfffffdef) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f00000003c0)={'pcl818\x00', [0x140, 0x2, 0x3, 0x0, 0x1, 0x2, 0x7ffd, 0x6, 0x1007, 0xf, 0x4, 0x10, 0xf8, 0x8, 0x4ce, 0x9e9b, 0x101, 0x401, 0xc, 0x8, 0x4, 0x0, 0xa, 0x9, 0xffd, 0x200000, 0xaf, 0x0, 0x10001fc, 0x0, 0x4]}) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r2, 0x942e, 0x0) 1.753596105s ago: executing program 3 (id=1615): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x201c}, 0x4000) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0xdffffffe, 0x80, 0x0, 0x0, "8100e1c8e80b598c36ff000800"}) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)) r3 = syz_open_dev$video4linux(&(0x7f0000000000), 0x3, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r3, 0xc0585605, &(0x7f00000001c0)={0x0, 0x0, {0x1, 0x0, 0x3012, 0x0, 0xd, 0x2, 0x2}}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$FUSE_OPEN(r4, &(0x7f0000000080)={0x20, 0x8000000000000009, 0x0, {0x0, 0x8}}, 0x20) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) syz_emit_ethernet(0x6c, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000000), 0x8) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x60}) epoll_create1(0x80000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80387, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r6, 0x40505331, &(0x7f0000000540)={{}, {0x18}, 0x0, 0x7}) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, 0x0) socket$xdp(0x2c, 0x3, 0x0) 1.125755675s ago: executing program 2 (id=1616): r0 = socket$key(0xf, 0x3, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00') pread64(r2, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) syz_genetlink_get_family_id$nfc(&(0x7f0000000480), 0xffffffffffffffff) write$nci(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[], 0x102) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=@allocspi={0xf8, 0x16, 0x1, 0x70bd2b, 0x25dfdbfe, {{{@in=@empty, @in=@private=0xa010101, 0x4e23, 0x0, 0x4e24, 0x0, 0xa, 0x80, 0x20, 0x5e}, {@in6=@local, 0x4d5, 0x33}, @in=@dev={0xac, 0x14, 0x14, 0x10}, {0x8, 0x7b5, 0x0, 0x6, 0x9, 0x0, 0xffffffff, 0x3}, {0x2, 0x3, 0x1, 0xfffffffffffffffa}, {0x0, 0x10001, 0xfffffff9}, 0x70bd2a, 0x0, 0x0, 0x2, 0x6, 0x1}, 0x8, 0x74f}}, 0xf8}, 0x1, 0x0, 0x0, 0x10}, 0x400c8c0) sendmsg$key(r0, &(0x7f0000000440)={0x900, 0x0, &(0x7f0000000400)={0x0}}, 0x40408c0) 1.04770229s ago: executing program 0 (id=1617): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) rt_sigprocmask(0x1, &(0x7f0000000000)={[0x5]}, 0x0, 0x8) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_icmp(0x2, 0x2, 0x1) socket$alg(0x26, 0x5, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/class/vtconsole/vtcon1/bind\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='0\x00', 0x1) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETVESABLANK(r2, 0x541c, 0x0) ioctl$TIOCL_BLANKSCREEN(r2, 0x541c, &(0x7f0000000200)) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000d00)=@flushpolicy={0x10, 0x1d, 0x1}, 0x10}}, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140)=ANY=[@ANYRES8=r0, @ANYRES64], 0x50) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r4, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0) r5 = socket(0x15, 0x5, 0x0) getsockopt(r5, 0x200000000114, 0x2711, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 28.687449ms ago: executing program 4 (id=1618): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) io_setup(0x8, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) setns(0xc9, 0x0) r3 = socket(0x8, 0x5, 0x5) sendto$inet(r3, 0x0, 0x0, 0x4000000, 0x0, 0x0) 0s ago: executing program 0 (id=1619): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x6, 0x7fc00100}]}) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, 0x0, 0x20) open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x12) landlock_create_ruleset(&(0x7f0000000180)={0x100, 0x0, 0x1}, 0x30, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x1, 0x0) syz_open_dev$vim2m(&(0x7f00000000c0), 0x100c, 0x2) socket$inet6(0xa, 0x800000000000002, 0x0) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080), 0x20c03, 0x0) r1 = syz_usb_connect(0x3, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ncm(r1, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xc38, &(0x7f00000020c0)=ANY=[@ANYBLOB="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", @ANYRES64=r0]) kernel console output (not intermixed with test programs): ] usb 3-1: USB disconnect, device number 10 [ 149.339436][ T30] audit: type=1400 audit(1785765403.449:425): avc: denied { read } for pid=6941 comm="syz.4.392" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 149.375710][ T30] audit: type=1400 audit(1785765403.449:426): avc: denied { open } for pid=6941 comm="syz.4.392" path="/74/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 149.412262][ T10] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 149.455244][ T10] usb 1-1: device descriptor read/8, error -71 [ 149.929672][ T10] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 150.521550][ T30] audit: type=1400 audit(1785765405.149:427): avc: denied { bind } for pid=6950 comm="syz.3.397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 150.559415][ T10] usb 1-1: device descriptor read/8, error -71 [ 150.567006][ T30] audit: type=1400 audit(1785765405.179:428): avc: denied { node_bind } for pid=6950 comm="syz.3.397" saddr=172.20.20.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 150.697832][ T6950] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 150.708002][ T10] usb usb1-port1: unable to enumerate USB device [ 153.059445][ T30] audit: type=1400 audit(1785765407.689:429): avc: denied { execute } for pid=6956 comm="syz.1.399" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=19924 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 153.212616][ T6965] kvm: kvm [6964]: vcpu0, guest rIP: 0x610c Unhandled WRMSR(0x11e) = 0xbe702911 [ 153.228581][ T6965] kvm: kvm [6964]: vcpu0, guest rIP: 0x610c Unhandled WRMSR(0x186) = 0x800 [ 153.247039][ T6965] kvm: kvm [6964]: vcpu0, guest rIP: 0x610c Unhandled WRMSR(0x11e) = 0xbe702911 [ 153.361123][ T6965] kvm: kvm [6964]: vcpu0, guest rIP: 0x610c Unhandled WRMSR(0x187) = 0x800 [ 153.452362][ T24] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 153.520663][ T6987] xt_limit: Overflow, try lower: 324382443/0 [ 154.082186][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 154.119009][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 154.169091][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 154.218999][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 154.263365][ T30] audit: type=1400 audit(1785765408.809:430): avc: denied { mount } for pid=6992 comm="syz.3.410" name="/" dev="ramfs" ino=19948 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 154.515834][ T24] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 154.545038][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.582064][ T24] usb 5-1: config 0 descriptor?? [ 155.220155][ T24] usbhid 5-1:0.0: can't add hid device: -71 [ 155.285785][ T24] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 156.310059][ T24] usb 5-1: USB disconnect, device number 14 [ 156.464020][ T30] audit: type=1400 audit(1785765411.099:431): avc: denied { bind } for pid=7015 comm="syz.3.419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 156.493940][ T5732] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 156.512365][ T30] audit: type=1400 audit(1785765411.119:432): avc: denied { read } for pid=7015 comm="syz.3.419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 157.123451][ T5732] usb 2-1: config 0 has an invalid interface number: 117 but max is 0 [ 157.131741][ T5732] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 157.142606][ T5732] usb 2-1: config 0 has no interface number 0 [ 157.148752][ T5732] usb 2-1: config 0 interface 117 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 157.160051][ T5732] usb 2-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 157.170216][ T5732] usb 2-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 157.185558][ T5732] usb 2-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 157.200172][ T5732] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.300085][ T5732] usb 2-1: Product: syz [ 157.314818][ T5732] usb 2-1: Manufacturer: syz [ 157.338880][ T5732] usb 2-1: SerialNumber: syz [ 157.360427][ T5732] usb 2-1: config 0 descriptor?? [ 157.406125][ T30] audit: type=1400 audit(1785765412.039:433): avc: denied { read write } for pid=7027 comm="syz.4.423" name="uhid" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 157.456099][ T24] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 157.471086][ T30] audit: type=1400 audit(1785765412.039:434): avc: denied { open } for pid=7027 comm="syz.4.423" path="/dev/uhid" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 157.497951][ T24] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 157.536507][ T7026] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.540524][ T24] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz0 [ 157.578839][ T7036] xt_limit: Overflow, try lower: 324382443/0 [ 157.673327][ T994] IPVS: starting estimator thread 0... [ 157.772551][ T7039] IPVS: using max 45 ests per chain, 108000 per kthread [ 157.781090][ T5732] usbtouchscreen 2-1:0.117: probe with driver usbtouchscreen failed with error -71 [ 157.836876][ T5732] usb 2-1: USB disconnect, device number 7 [ 158.330750][ T7046] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 158.829140][ T30] audit: type=1400 audit(1785765413.069:435): avc: denied { getattr } for pid=7042 comm="syz.2.428" name="saved_tgids" dev="tracefs" ino=1420 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 158.929737][ T7026] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.067081][ T7026] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.160419][ T7026] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.394418][ T57] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.410297][ T57] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.423767][ T57] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.442657][ T57] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.782253][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 160.172810][ T7073] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 160.690536][ T24] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 160.872213][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 160.884667][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 160.910811][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 160.930874][ T24] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 160.956922][ T24] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 160.975697][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.999300][ T24] usb 3-1: config 0 descriptor?? [ 161.625746][ T24] usbhid 3-1:0.0: can't add hid device: -71 [ 161.638014][ T24] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 161.663346][ T24] usb 3-1: USB disconnect, device number 11 [ 163.875496][ T5817] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 164.130587][ T5817] usb 5-1: unable to get BOS descriptor or descriptor too short [ 164.137384][ T7128] binder: BINDER_SET_CONTEXT_MGR already set [ 164.144348][ T7128] binder: 7124:7128 ioctl 4018620d 200000000100 returned -16 [ 164.163923][ T7128] binder: BINDER_SET_CONTEXT_MGR already set [ 164.170071][ T7128] binder: 7124:7128 ioctl 4018620d 200000001000 returned -16 [ 164.170485][ T5817] usb 5-1: not running at top speed; connect to a high speed hub [ 164.236170][ T5817] usb 5-1: config 14 has an invalid interface number: 57 but max is 1 [ 164.282737][ T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!! [ 164.344225][ T5817] usb 5-1: config 14 has an invalid interface number: 228 but max is 1 [ 164.366913][ T5817] usb 5-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 164.419799][ T5817] usb 5-1: config 14 has no interface number 0 [ 164.447027][ T5817] usb 5-1: config 14 has no interface number 1 [ 164.501500][ T5817] usb 5-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 164.550662][ T5817] usb 5-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 164.563099][ T5817] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 165.161146][ T5817] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 137, setting to 64 [ 165.173041][ T5817] usb 5-1: config 14 interface 57 has no altsetting 0 [ 165.198178][ T5817] usb 5-1: config 14 interface 228 has no altsetting 0 [ 165.218785][ T5817] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 165.230226][ T5817] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.239912][ T5817] usb 5-1: Product: syz [ 165.247067][ T5817] usb 5-1: Manufacturer: syz [ 165.251731][ T5817] usb 5-1: SerialNumber: syz [ 165.256728][ T30] audit: type=1400 audit(1785765419.889:436): avc: denied { kexec_image_load } for pid=7137 comm="syz.3.463" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 165.303327][ T5739] usb 3-1: new low-speed USB device number 12 using dummy_hcd [ 165.426826][ T30] audit: type=1400 audit(1785765420.059:437): avc: denied { read write } for pid=7139 comm="syz.1.465" name="rtc0" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 166.060948][ T30] audit: type=1400 audit(1785765420.059:438): avc: denied { open } for pid=7139 comm="syz.1.465" path="/dev/rtc0" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 166.081721][ T5739] usb 3-1: unable to get BOS descriptor or descriptor too short [ 166.097565][ T5739] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 166.107253][ T5739] usb 3-1: can't read configurations, error -71 [ 166.193317][ T30] audit: type=1400 audit(1785765420.089:439): avc: denied { ioctl } for pid=7139 comm="syz.1.465" path="/dev/rtc0" dev="devtmpfs" ino=922 ioctlcmd=0x7005 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 166.382565][ T5817] legousbtower 5-1:14.57: interrupt endpoints not found [ 166.413205][ T30] audit: type=1400 audit(1785765420.699:440): avc: denied { module_load } for pid=7141 comm="syz.3.466" path="/108/bus" dev="tmpfs" ino=589 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 166.531865][ T7144] Invalid ELF header magic: != ELF [ 166.795776][ T5817] legousbtower 5-1:14.228: LEGO USB Tower firmware version is 0.0 build 0 [ 166.876229][ T5817] legousbtower 5-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 167.582452][ T30] audit: type=1400 audit(1785765422.179:441): avc: denied { ioctl } for pid=7172 comm="syz.2.475" path="socket:[20402]" dev="sockfs" ino=20402 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 167.973583][ T7181] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.099815][ T7181] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.118570][ T30] audit: type=1400 audit(1785765422.189:442): avc: denied { bind } for pid=7172 comm="syz.2.475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 168.143116][ T30] audit: type=1400 audit(1785765422.189:443): avc: denied { listen } for pid=7172 comm="syz.2.475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 168.164466][ T30] audit: type=1400 audit(1785765422.259:444): avc: denied { accept } for pid=7172 comm="syz.2.475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 168.195281][ T30] audit: type=1400 audit(1785765422.339:445): avc: denied { read } for pid=7172 comm="syz.2.475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 169.201494][ T5739] usb 5-1: USB disconnect, device number 15 [ 169.336942][ T5611] Bluetooth: hci2: unexpected event for opcode 0x2019 [ 169.351197][ T5739] legousbtower 5-1:14.228: LEGO USB Tower #-160 now disconnected [ 169.852181][ T5739] usb 5-1: new low-speed USB device number 16 using dummy_hcd [ 170.596088][ T5739] usb 5-1: unable to get BOS descriptor or descriptor too short [ 170.718887][ T5739] usb 5-1: config 8 has an invalid interface number: 59 but max is 3 [ 170.729691][ T5739] usb 5-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 170.741917][ T5739] usb 5-1: config 8 has 1 interface, different from the descriptor's value: 4 [ 170.751650][ T5739] usb 5-1: config 8 has no interface number 0 [ 170.758244][ T5739] usb 5-1: config 8 interface 59 altsetting 2 has an endpoint descriptor with address 0x1A, changing to 0xA [ 170.772387][ T5739] usb 5-1: config 8 interface 59 altsetting 2 endpoint 0xA has invalid wMaxPacketSize 0 [ 170.782545][ T5739] usb 5-1: config 8 interface 59 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 10 [ 170.795985][ T5739] usb 5-1: config 8 interface 59 has no altsetting 0 [ 170.842270][ T5817] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 171.237177][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 171.237193][ T30] audit: type=1400 audit(1785765425.869:450): avc: denied { write } for pid=7218 comm="syz.0.492" path="socket:[21540]" dev="sockfs" ino=21540 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 171.422211][ T5817] usb 2-1: Using ep0 maxpacket: 8 [ 171.429331][ T5817] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 171.444238][ T5817] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 171.496714][ T5817] usb 2-1: config 16 interface 0 altsetting 0 has an endpoint descriptor with address 0xB6, changing to 0x86 [ 171.511824][ T5817] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 55305, setting to 1024 [ 171.548901][ T5817] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 1024 [ 171.567603][ T5817] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 171.591771][ T5817] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 171.612530][ T5817] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.679186][ T7225] warning: `syz.2.493' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 171.847569][ T5817] usb 2-1: GET_CAPABILITIES returned 0 [ 171.855855][ T5817] usbtmc 2-1:16.0: can't read capabilities [ 172.128437][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 172.147102][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 172.157911][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 172.168604][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 172.177692][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 172.187695][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 172.196771][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 172.217005][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 172.236074][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 172.309473][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 172.327331][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 172.336798][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 172.345904][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 172.355008][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 172.364114][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 172.373299][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 172.389115][ T5817] usb 2-1: USB disconnect, device number 8 [ 172.621480][ T5739] usb 5-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=73.88 [ 172.642246][ T5739] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.683817][ T5739] usb 5-1: can't set config #8, error -71 [ 172.718405][ T5739] usb 5-1: USB disconnect, device number 16 [ 172.836482][ T30] audit: type=1400 audit(1785765427.469:451): avc: denied { ioctl } for pid=7251 comm="syz.3.505" path="socket:[20941]" dev="sockfs" ino=20941 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 173.942289][ T5817] usb 3-1: new low-speed USB device number 14 using dummy_hcd [ 174.110361][ T5817] usb 3-1: unable to get BOS descriptor or descriptor too short [ 174.132246][ T5817] usb 3-1: config 8 has an invalid interface number: 59 but max is 3 [ 174.143545][ T5817] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 174.154438][ T5817] usb 3-1: config 8 has 1 interface, different from the descriptor's value: 4 [ 174.163427][ T5817] usb 3-1: config 8 has no interface number 0 [ 174.169589][ T5817] usb 3-1: config 8 interface 59 altsetting 2 has an endpoint descriptor with address 0x1A, changing to 0xA [ 174.181930][ T5817] usb 3-1: config 8 interface 59 altsetting 2 endpoint 0xA has invalid wMaxPacketSize 0 [ 174.191713][ T5817] usb 3-1: config 8 interface 59 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 10 [ 174.204766][ T5817] usb 3-1: config 8 interface 59 has no altsetting 0 [ 174.638162][ T7286] overlayfs: overlapping lowerdir path [ 174.702564][ T7286] overlayfs: failed to resolve './cgroup.net/devices.allow': -2 [ 174.995374][ T7291] netlink: 'syz.3.518': attribute type 11 has an invalid length. [ 175.067772][ T7291] 8021q: adding VLAN 0 to HW filter on device eth0 [ 175.086515][ T7291] 8021q: adding VLAN 0 to HW filter on device eth1 [ 175.101626][ T7291] 8021q: adding VLAN 0 to HW filter on device eth2 [ 175.112438][ T7291] 8021q: adding VLAN 0 to HW filter on device eth3 [ 175.902204][ T10] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 175.989134][ T30] audit: type=1400 audit(1785765430.619:452): avc: denied { lock } for pid=7301 comm="syz.3.522" path="socket:[21056]" dev="sockfs" ino=21056 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 176.153500][ T10] usb 5-1: config 0 has an invalid interface number: 117 but max is 0 [ 176.162710][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 176.174261][ T10] usb 5-1: config 0 has no interface number 0 [ 176.180459][ T10] usb 5-1: config 0 interface 117 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 176.191900][ T10] usb 5-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 176.204732][ T10] usb 5-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 176.220109][ T10] usb 5-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 176.229617][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.237728][ T10] usb 5-1: Product: syz [ 176.242121][ T10] usb 5-1: Manufacturer: syz [ 176.246782][ T10] usb 5-1: SerialNumber: syz [ 176.255674][ T10] usb 5-1: config 0 descriptor?? [ 176.678070][ T10] usb 5-1: USB disconnect, device number 17 [ 176.754643][ T5817] usb 3-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=73.88 [ 176.770141][ T5817] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.800346][ T5817] usb 3-1: can't set config #8, error -71 [ 176.808271][ T5817] usb 3-1: USB disconnect, device number 14 [ 176.959733][ T7314] syzkaller0: entered promiscuous mode [ 176.968146][ T7314] syzkaller0: entered allmulticast mode [ 177.046416][ T7319] Invalid ELF header magic: != ELF [ 178.672157][ T5710] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 179.314167][ T5710] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 179.332154][ T5710] usb 3-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00 [ 179.342449][ T5710] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.353463][ T5710] usb 3-1: config 0 descriptor?? [ 179.359086][ T7338] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 180.139501][ T5710] asus 0003:0B05:1ABE.0002: unknown main item tag 0x0 [ 180.160435][ T5710] asus 0003:0B05:1ABE.0002: unknown main item tag 0x0 [ 180.203259][ T5710] asus 0003:0B05:1ABE.0002: unknown main item tag 0x0 [ 180.583804][ T5710] asus 0003:0B05:1ABE.0002: unknown main item tag 0x0 [ 180.616028][ T5710] asus 0003:0B05:1ABE.0002: unknown main item tag 0x0 [ 180.628609][ T5710] asus 0003:0B05:1ABE.0002: unknown main item tag 0x0 [ 180.636777][ T5710] asus 0003:0B05:1ABE.0002: unknown main item tag 0x0 [ 180.652238][ T5710] asus 0003:0B05:1ABE.0002: unknown main item tag 0x0 [ 180.660496][ T5710] asus 0003:0B05:1ABE.0002: unknown main item tag 0x0 [ 180.670347][ T5710] asus 0003:0B05:1ABE.0002: unknown main item tag 0x0 [ 180.678006][ T7355] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 180.687949][ T994] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 180.703321][ T5710] asus 0003:0B05:1ABE.0002: hidraw0: USB HID v7f.fd Device [HID 0b05:1abe] on usb-dummy_hcd.2-1/input0 [ 180.732604][ T5710] usb 3-1: USB disconnect, device number 15 [ 180.801441][ T7359] fido_id[7359]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 180.863393][ T994] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 180.927369][ T5739] IPVS: starting estimator thread 0... [ 181.107557][ T994] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 181.122433][ T7368] IPVS: using max 41 ests per chain, 98400 per kthread [ 181.729155][ T994] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.749426][ T994] usb 1-1: config 0 descriptor?? [ 181.796553][ T5611] Bluetooth: hci1: unexpected event for opcode 0x0c26 [ 182.058023][ T994] usbhid 1-1:0.0: can't add hid device: -71 [ 182.077341][ T994] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 182.609672][ T994] usb 1-1: USB disconnect, device number 12 [ 183.432252][ T994] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 183.773743][ T7397] block device autoloading is deprecated and will be removed. [ 184.040937][ T5611] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 184.279441][ T30] audit: type=1326 audit(1785765438.909:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7399 comm="syz.2.553" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23ac99e019 code=0x7ffc0000 [ 184.347880][ T30] audit: type=1326 audit(1785765438.909:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7399 comm="syz.2.553" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23ac99e019 code=0x7ffc0000 [ 184.423924][ T30] audit: type=1326 audit(1785765439.009:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7399 comm="syz.2.553" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f23ac99e019 code=0x7ffc0000 [ 184.502392][ T30] audit: type=1326 audit(1785765439.009:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7399 comm="syz.2.553" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23ac99e019 code=0x7ffc0000 [ 184.533611][ T30] audit: type=1326 audit(1785765439.009:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7399 comm="syz.2.553" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23ac99e019 code=0x7ffc0000 [ 184.627127][ T30] audit: type=1326 audit(1785765439.019:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7399 comm="syz.2.553" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=204 compat=0 ip=0x7f23ac99e019 code=0x7ffc0000 [ 184.690384][ T30] audit: type=1326 audit(1785765439.029:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7399 comm="syz.2.553" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23ac99e019 code=0x7ffc0000 [ 184.760672][ T30] audit: type=1326 audit(1785765439.029:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7399 comm="syz.2.553" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f23ac99e019 code=0x7ffc0000 [ 184.857188][ T30] audit: type=1326 audit(1785765439.029:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7399 comm="syz.2.553" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23ac99e019 code=0x7ffc0000 [ 184.960906][ T30] audit: type=1326 audit(1785765439.029:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7399 comm="syz.2.553" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f23ac99e019 code=0x7ffc0000 [ 187.194710][ T5611] Bluetooth: hci0: unexpected event for opcode 0x0c03 [ 187.503703][ T187] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 187.696304][ T187] usb 1-1: config 4 has an invalid interface number: 44 but max is 0 [ 187.714018][ T187] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 187.737952][ T187] usb 1-1: config 4 has no interface number 0 [ 187.752366][ T187] usb 1-1: config 4 interface 44 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 187.788494][ T187] usb 1-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20 [ 188.387927][ T187] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.399217][ T187] usb 1-1: Product: syz [ 188.404509][ T187] usb 1-1: Manufacturer: syz [ 188.411231][ T187] usb 1-1: SerialNumber: syz [ 188.436586][ T7476] fuse: Bad value for 'fd' [ 188.668411][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 188.879961][ T187] dvb-usb: found a 'Gigabyte U7000' in warm state. [ 188.916168][ T187] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 188.935039][ T187] dvbdev: DVB: registering new adapter (Gigabyte U7000) [ 188.952846][ T187] usb 1-1: media controller created [ 188.971962][ T187] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 189.050230][ T187] DVB: Unable to find symbol dib7000p_attach() [ 189.056676][ T187] dvb-usb: no frontend was attached by 'Gigabyte U7000' [ 189.161215][ T187] rc_core: IR keymap rc-dib0700-rc5 not found [ 189.198151][ T187] Registered IR keymap rc-empty [ 189.214528][ T187] dvb-usb: could not initialize remote control. [ 189.229167][ T187] dvb-usb: Gigabyte U7000 successfully initialized and connected. [ 189.884733][ T187] usb 1-1: USB disconnect, device number 14 [ 189.938053][ T187] dvb-usb: Gigabyte U7000 successfully deinitialized and disconnected. [ 190.212747][ T29] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 190.419877][ T29] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 190.486189][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.553755][ T29] usb 5-1: Product: syz [ 190.589503][ T29] usb 5-1: Manufacturer: syz [ 190.625550][ T29] usb 5-1: SerialNumber: syz [ 190.931304][ T36] nci: nci_rx_work: unknown MT 0x4 [ 191.077834][ T29] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 191.092171][ T29] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 191.460413][ T7561] fuse: Bad value for 'fd' [ 191.526352][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 191.526369][ T30] audit: type=1400 audit(1785765446.159:475): avc: denied { write } for pid=7562 comm="syz.1.613" name="usb_gadget" dev="configfs" ino=1339 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 191.558231][ T30] audit: type=1400 audit(1785765446.189:476): avc: denied { write } for pid=7562 comm="syz.1.613" name="configs" dev="configfs" ino=21463 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 191.586669][ T30] audit: type=1400 audit(1785765446.219:477): avc: denied { write } for pid=7562 comm="syz.1.613" name="functions" dev="configfs" ino=21462 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 191.609627][ T30] audit: type=1400 audit(1785765446.219:478): avc: denied { write } for pid=7562 comm="syz.1.613" name="c.1" dev="configfs" ino=21467 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 191.636805][ T30] audit: type=1400 audit(1785765446.219:479): avc: denied { create } for pid=7562 comm="syz.1.613" name="ncm.usb0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=lnk_file permissive=1 [ 191.657740][ T30] audit: type=1400 audit(1785765446.219:480): avc: denied { write } for pid=7562 comm="syz.1.613" name="c.1" dev="configfs" ino=21467 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 191.682309][ T7549] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 191.784644][ T7566] syzkaller0: entered promiscuous mode [ 191.790310][ T7566] syzkaller0: entered allmulticast mode [ 192.790067][ T29] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -EPROTO [ 192.835222][ T29] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 192.891467][ T7593] overlayfs: missing 'lowerdir' [ 192.933939][ T7595] fuse: fd is not a fuse device [ 193.089412][ T29] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 193.104451][ T29] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 193.114427][ T29] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 193.125880][ T29] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 193.165253][ T29] usb 5-1: USB disconnect, device number 18 [ 193.572188][ T5817] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 193.671396][ T7611] nvme_fabrics: no handler found for transport lPop. [ 193.746115][ T5817] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 193.763920][ T5817] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.783747][ T5817] usb 3-1: Product: syz [ 193.794776][ T5817] usb 3-1: Manufacturer: syz [ 193.802823][ T5817] usb 3-1: SerialNumber: syz [ 193.818824][ T5817] usb 3-1: config 0 descriptor?? [ 194.313648][ T5817] usb 3-1: Firmware version (0.0) predates our first public release. [ 194.321903][ T5817] usb 3-1: Please update to version 0.2 or newer [ 194.331502][ T5817] usb 3-1: Firmware: build [ 195.794962][ T5817] usb 3-1: USB disconnect, device number 16 [ 196.561678][ T30] audit: type=1400 audit(1785765451.189:481): avc: denied { mount } for pid=7648 comm="syz.1.644" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 196.600912][ T7650] Console: switching to colour VGA+ 80x25 [ 196.625694][ T30] audit: type=1400 audit(1785765451.259:482): avc: denied { nlmsg_write } for pid=7648 comm="syz.1.644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 196.770700][ T30] audit: type=1400 audit(1785765451.399:483): avc: denied { getopt } for pid=7648 comm="syz.1.644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 196.865046][ T30] audit: type=1400 audit(1785765451.499:484): avc: denied { unmount } for pid=5607 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 198.710421][ T30] audit: type=1400 audit(1785765453.339:485): avc: denied { write } for pid=7668 comm="syz.1.650" name="functions" dev="configfs" ino=21462 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 198.781283][ T30] audit: type=1400 audit(1785765453.389:486): avc: denied { write } for pid=7668 comm="syz.1.650" name="header" dev="configfs" ino=22453 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 198.833498][ T30] audit: type=1400 audit(1785765453.409:487): avc: denied { bind } for pid=7675 comm="syz.0.652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 198.862407][ T30] audit: type=1400 audit(1785765453.439:488): avc: denied { write } for pid=7668 comm="syz.1.650" name="fs" dev="configfs" ino=22462 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 198.932722][ T30] audit: type=1400 audit(1785765453.439:489): avc: denied { write } for pid=7668 comm="syz.1.650" name="fs" dev="configfs" ino=22462 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 198.942758][ T7669] configfs-gadget.g1 gadget.32: HOST MAC 86:1a:ae:44:2f:90 [ 198.989924][ T30] audit: type=1400 audit(1785765453.459:490): avc: denied { write } for pid=7668 comm="syz.1.650" name="header" dev="configfs" ino=22466 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 199.019501][ T7669] configfs-gadget.g1 gadget.32: MAC da:5c:5c:64:f8:b4 [ 199.064358][ T7669] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind() [ 199.369201][ T7703] netlink: 'syz.0.659': attribute type 10 has an invalid length. [ 199.430035][ T7703] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 199.465455][ T7703] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 199.746805][ T5344] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 200.303608][ T5344] usb 2-1: device descriptor read/64, error -71 [ 200.793966][ T5710] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 200.807827][ T7740] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 200.862176][ T5344] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 200.989317][ T5710] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 201.004209][ T5344] usb 2-1: device descriptor read/64, error -71 [ 201.010417][ T5710] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.030312][ T5710] usb 3-1: Product: syz [ 201.040620][ T5710] usb 3-1: Manufacturer: syz [ 201.058159][ T5710] usb 3-1: SerialNumber: syz [ 201.135935][ T5344] usb usb2-port1: attempt power cycle [ 201.432193][ T5739] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 201.480273][ T5710] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 201.492174][ T5344] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 201.514770][ T5344] usb 2-1: device descriptor read/8, error -71 [ 201.515768][ T5710] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 201.582159][ T5739] usb 5-1: Using ep0 maxpacket: 16 [ 201.589187][ T5739] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 201.602510][ T5739] usb 5-1: config 0 interface 0 has no altsetting 0 [ 201.609206][ T5739] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 201.619436][ T5739] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.633836][ T5739] usb 5-1: config 0 descriptor?? [ 201.752175][ T5344] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 201.783172][ T5344] usb 2-1: device descriptor read/8, error -71 [ 201.892584][ T5344] usb usb2-port1: unable to enumerate USB device [ 202.079493][ T5739] nzxt-smart2 0003:1E71:2009.0003: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.4-1/input0 [ 202.529859][ T994] usb 5-1: USB disconnect, device number 19 [ 202.826992][ T7788] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 203.013725][ T5710] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -EPROTO [ 203.029890][ T5710] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 203.055466][ T5710] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 203.087706][ T5710] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 203.120228][ T5710] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 203.224880][ T5710] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 203.249505][ T5710] usb 3-1: USB disconnect, device number 17 [ 203.393037][ T7805] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 203.682182][ T5344] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 203.833422][ T5344] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 203.849325][ T5344] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 203.859899][ T5344] usb 1-1: config 0 has no interface number 0 [ 203.866898][ T5344] usb 1-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 203.883391][ T5344] usb 1-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 203.892585][ T5344] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.904533][ T5344] usb 1-1: config 0 descriptor?? [ 203.916634][ T5344] usbhid 1-1:0.1: couldn't find an input interrupt endpoint [ 204.619203][ T30] kauditd_printk_skb: 34 callbacks suppressed [ 204.619221][ T30] audit: type=1400 audit(1785765459.249:525): avc: denied { write } for pid=7852 comm="syz.2.705" name="functions" dev="configfs" ino=21462 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 204.666902][ T30] audit: type=1400 audit(1785765459.259:526): avc: denied { write } for pid=7852 comm="syz.2.705" name="midi2.usb0" dev="configfs" ino=23809 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 204.690376][ T30] audit: type=1400 audit(1785765459.259:527): avc: denied { write } for pid=7852 comm="syz.2.705" name="c.1" dev="configfs" ino=21467 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 204.716079][ T30] audit: type=1400 audit(1785765459.259:528): avc: denied { write } for pid=7852 comm="syz.2.705" name="c.1" dev="configfs" ino=21467 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 204.767951][ T5611] Bluetooth: hci1: unexpected event for opcode 0x0c03 [ 205.622655][ T7865] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 206.142324][ T994] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 206.232654][ T5710] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 206.313966][ T994] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 206.322443][ T994] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 206.332592][ T994] usb 3-1: config 0 has no interface number 0 [ 206.338695][ T994] usb 3-1: config 0 interface 41 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 206.349537][ T994] usb 3-1: config 0 interface 41 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 206.362574][ T994] usb 3-1: config 0 interface 41 has no altsetting 0 [ 206.371656][ T994] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 206.381008][ T994] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.389247][ T994] usb 3-1: Product: syz [ 206.393499][ T994] usb 3-1: Manufacturer: syz [ 206.398118][ T994] usb 3-1: SerialNumber: syz [ 206.404448][ T5710] usb 2-1: Using ep0 maxpacket: 8 [ 206.415380][ T994] usb 3-1: config 0 descriptor?? [ 206.426115][ T994] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -22 [ 206.435576][ T5710] usb 2-1: New USB device found, idVendor=22b8, idProduct=6425, bcdDevice=d3.6c [ 206.447546][ T5710] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.458870][ T5710] usb 2-1: Product: syz [ 206.466458][ T5710] usb 2-1: Manufacturer: syz [ 206.473365][ T5710] usb 2-1: SerialNumber: syz [ 206.482229][ T5739] usb 1-1: USB disconnect, device number 15 [ 206.494562][ T5710] usb 2-1: config 0 descriptor?? [ 206.503868][ T5710] cdc_ether 2-1:0.0: skipping garbage [ 206.514110][ T5710] cdc_ether 2-1:0.0: bad CDC descriptors [ 206.531782][ T5710] usb 2-1: unsupported MDLM descriptors [ 206.546119][ T5710] cdc_acm 2-1:0.0: skipping garbage [ 206.716963][ T5344] usb 2-1: USB disconnect, device number 13 [ 206.917468][ T5739] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 207.087459][ T5739] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 207.100576][ T5739] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.110737][ T5739] usb 1-1: Product: syz [ 207.117535][ T5739] usb 1-1: Manufacturer: syz [ 207.128437][ T5739] usb 1-1: SerialNumber: syz [ 207.133602][ T5611] Bluetooth: hci4: unexpected event for opcode 0x0c03 [ 207.553556][ T5739] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 207.567050][ T5739] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 208.186419][ T5611] Bluetooth: hci0: unexpected event for opcode 0x0c03 [ 209.034366][ T5344] usb 3-1: USB disconnect, device number 18 [ 209.114050][ T30] audit: type=1400 audit(1785765463.739:529): avc: denied { ioctl } for pid=7941 comm="syz.4.740" path="socket:[23091]" dev="sockfs" ino=23091 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 209.194763][ T5739] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -EPROTO [ 209.234522][ T5739] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 209.275121][ T5739] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 209.305501][ T5739] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 209.333407][ T5739] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 209.357684][ T5739] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 209.399930][ T5739] usb 1-1: USB disconnect, device number 16 [ 209.597865][ T7951] netlink: 4 bytes leftover after parsing attributes in process `syz.1.744'. [ 209.638027][ T7951] hsr_slave_1 (unregistering): left promiscuous mode [ 210.958016][ T5710] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 211.293673][ T5710] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 211.315688][ T5710] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 211.849105][ T5710] usb 1-1: config 0 has no interface number 0 [ 211.866689][ T5710] usb 1-1: config 0 interface 41 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 211.877895][ T5710] usb 1-1: config 0 interface 41 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 211.891971][ T5710] usb 1-1: config 0 interface 41 has no altsetting 0 [ 211.903143][ T5710] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 211.913358][ T5710] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.921432][ T5710] usb 1-1: Product: syz [ 211.926209][ T5710] usb 1-1: Manufacturer: syz [ 211.931375][ T5710] usb 1-1: SerialNumber: syz [ 211.941659][ T5710] usb 1-1: config 0 descriptor?? [ 211.956742][ T5710] CoreChips 1-1:0.41: probe with driver CoreChips failed with error -22 [ 212.240306][ T7992] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 213.646546][ T187] usb 1-1: USB disconnect, device number 17 [ 214.123609][ T30] audit: type=1400 audit(1785765468.759:530): avc: denied { write } for pid=8014 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 214.314260][ T8048] Invalid ELF header magic: != ELF [ 214.787697][ T8047] fuse: fd is not a fuse device [ 214.855642][ T30] audit: type=1400 audit(1785765469.489:531): avc: denied { write } for pid=8049 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 214.902524][ T187] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 215.082206][ T187] usb 3-1: Using ep0 maxpacket: 32 [ 215.095220][ T187] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 215.115533][ T187] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 215.177894][ T187] usb 3-1: config 0 has no interface number 0 [ 215.244705][ T8066] fuse: fd is not a fuse device [ 215.583326][ T187] usb 3-1: config 0 interface 51 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 215.603990][ T187] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 215.613271][ T187] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.621342][ T187] usb 3-1: Product: syz [ 215.625596][ T187] usb 3-1: Manufacturer: syz [ 215.630268][ T187] usb 3-1: SerialNumber: syz [ 215.638552][ T187] usb 3-1: config 0 descriptor?? [ 215.650656][ T187] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 216.032474][ T187] usb 3-1: qt2_attach - failed to power on unit: -71 [ 216.109427][ T187] quatech2 3-1:0.51: probe with driver quatech2 failed with error -71 [ 216.275685][ T187] usb 3-1: USB disconnect, device number 19 [ 217.122163][ T5739] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 217.467971][ T5739] usb 1-1: Using ep0 maxpacket: 16 [ 217.551114][ T5739] usb 1-1: unable to get BOS descriptor or descriptor too short [ 217.610600][ T5739] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 217.626455][ T5739] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 217.701814][ T187] hid_parser_main: 467 callbacks suppressed [ 217.701836][ T187] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 217.759404][ T5739] usb 1-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 217.775097][ T5739] usb 1-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 217.785599][ T5739] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.790346][ T187] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 217.793929][ T5739] usb 1-1: Product: syz [ 217.808427][ T5739] usb 1-1: Manufacturer: syz [ 217.818369][ T5739] usb 1-1: SerialNumber: syz [ 217.894607][ T8103] Invalid ELF header magic: != ELF [ 218.289554][ T5739] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 218.309906][ T5739] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 218.350656][ T5739] usb 1-1: 1:2 : does not exist [ 219.339488][ T30] audit: type=1400 audit(1785765473.969:532): avc: denied { read } for pid=8113 comm="syz.4.795" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 219.403406][ T30] audit: type=1400 audit(1785765473.999:533): avc: denied { open } for pid=8113 comm="syz.4.795" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 219.535679][ T30] audit: type=1400 audit(1785765474.019:534): avc: denied { ioctl } for pid=8113 comm="syz.4.795" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 220.095552][ T8121] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 220.455788][ T5739] usb 1-1: USB disconnect, device number 18 [ 220.607804][ T187] IPVS: starting estimator thread 0... [ 220.695757][ T8137] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 220.705752][ T8130] IPVS: using max 44 ests per chain, 105600 per kthread [ 220.852202][ T187] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 221.033764][ T187] usb 3-1: Using ep0 maxpacket: 32 [ 221.067411][ T187] usb 3-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 221.112051][ T187] usb 3-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 221.134974][ T994] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 221.192528][ T187] usb 3-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 221.254803][ T187] usb 3-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 221.337504][ T994] usb 2-1: Using ep0 maxpacket: 8 [ 221.345332][ T5819] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 221.355143][ T187] usb 3-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 221.365455][ T994] usb 2-1: New USB device found, idVendor=22b8, idProduct=6425, bcdDevice=d3.6c [ 221.374686][ T187] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.389793][ T994] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.401381][ T187] usb 3-1: Product: syz [ 221.405692][ T994] usb 2-1: Product: syz [ 221.409897][ T187] usb 3-1: Manufacturer: syz [ 221.414641][ T994] usb 2-1: Manufacturer: syz [ 221.419320][ T187] usb 3-1: SerialNumber: syz [ 221.424799][ T994] usb 2-1: SerialNumber: syz [ 221.435345][ T994] usb 2-1: config 0 descriptor?? [ 221.465800][ T994] cdc_ether 2-1:0.0: bad CDC descriptors [ 221.472584][ C0] imon 3-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 221.480653][ T994] usb 2-1: unsupported MDLM descriptors [ 221.503629][ T5819] usb 5-1: Using ep0 maxpacket: 32 [ 221.521826][ T5819] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 221.523015][ T187] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/input/input16 [ 221.556441][ T30] audit: type=1400 audit(1785765476.189:535): avc: denied { read } for pid=4962 comm="acpid" name="mouse1" dev="devtmpfs" ino=2981 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 221.580732][ T5819] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 221.655105][ T5819] usb 5-1: config 0 has no interface number 0 [ 221.661249][ T5819] usb 5-1: config 0 interface 51 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 221.674415][ T30] audit: type=1400 audit(1785765476.189:536): avc: denied { open } for pid=4962 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=2981 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 221.682272][ T187] imon 3-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 221.698089][ T30] audit: type=1400 audit(1785765476.189:537): avc: denied { ioctl } for pid=4962 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=2981 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 221.699778][ T5819] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 221.754535][ T29] usb 2-1: USB disconnect, device number 14 [ 221.765452][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 221.772464][ T5819] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.781707][ T5819] usb 5-1: Product: syz [ 221.793368][ T5819] usb 5-1: Manufacturer: syz [ 221.798072][ T5819] usb 5-1: SerialNumber: syz [ 221.816865][ T187] (id 0x00) [ 221.834451][ T5819] usb 5-1: config 0 descriptor?? [ 221.856946][ T5819] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 221.958048][ T187] rc_core: IR keymap rc-imon-pad not found [ 222.018309][ T187] Registered IR keymap rc-empty [ 222.083097][ T187] imon 3-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 222.085840][ T5819] usb 5-1: qt2_attach - failed to power on unit: -71 [ 222.163382][ T5819] quatech2 5-1:0.51: probe with driver quatech2 failed with error -71 [ 222.175771][ T187] imon 3-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 222.231186][ T5819] usb 5-1: USB disconnect, device number 20 [ 222.467651][ T187] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0 [ 223.020252][ T187] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0/input17 [ 223.038438][ T187] imon 3-1:155.0: iMON device (15c2:ffdc, intf0) on usb<3:20> initialized [ 223.069729][ T8167] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 223.797828][ T8180] overlayfs: failed to clone lowerpath [ 224.256256][ T30] audit: type=1400 audit(1785765478.889:538): avc: denied { bind } for pid=8189 comm="syz.0.820" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 225.070920][ T5344] IPVS: starting estimator thread 0... [ 225.188527][ T8206] IPVS: using max 72 ests per chain, 172800 per kthread [ 225.695066][ T29] usb 3-1: USB disconnect, device number 20 [ 227.631248][ T8222] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 228.605207][ T8243] netlink: 32 bytes leftover after parsing attributes in process `syz.1.828'. [ 230.848026][ T30] audit: type=1400 audit(1785765485.479:539): avc: denied { mounton } for pid=8320 comm="syz.1.865" path="/151/file0" dev="tmpfs" ino=805 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 231.429343][ T8328] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 231.603160][ T8335] binder: BINDER_SET_CONTEXT_MGR already set [ 231.609398][ T8335] binder: 8333:8335 ioctl 4018620d 200000001000 returned -16 [ 232.656773][ T30] audit: type=1400 audit(1785765486.739:540): avc: denied { mount } for pid=8339 comm="syz.0.872" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 233.011732][ T30] audit: type=1400 audit(1785765486.749:541): avc: denied { mounton } for pid=8339 comm="syz.0.872" path="/163/file0" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 233.152002][ T30] audit: type=1400 audit(1785765487.779:542): avc: denied { unmount } for pid=5614 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 234.573989][ T8372] binder: BINDER_SET_CONTEXT_MGR already set [ 234.580119][ T8372] binder: 8369:8372 ioctl 4018620d 200000001000 returned -16 [ 235.355928][ T8380] comedi comedi0: aio_aio12_8: I/O base address not correctly aligned [ 235.875921][ T30] audit: type=1400 audit(1785765490.489:543): avc: denied { read write } for pid=8384 comm="syz.4.887" name="sg0" dev="devtmpfs" ino=805 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 236.247570][ T30] audit: type=1400 audit(1785765490.539:544): avc: denied { open } for pid=8384 comm="syz.4.887" path="/dev/sg0" dev="devtmpfs" ino=805 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 236.357571][ T8388] infiniband syz0: set active [ 236.363095][ T8388] infiniband syz0: added bond_slave_1 [ 236.398482][ T8388] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 236.413748][ T8388] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 236.430897][ T8388] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 236.463716][ T8388] RDS/IB: syz0: added [ 236.468012][ T8388] smc: adding ib device syz0 with port count 1 [ 236.475509][ T8388] smc: ib device syz0 port 1 has no pnetid [ 236.917711][ T30] audit: type=1400 audit(1785765490.859:545): avc: denied { write } for pid=8384 comm="syz.4.887" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 237.467649][ T8399] fuse: fd is not a fuse device [ 238.481830][ T8418] netlink: 4 bytes leftover after parsing attributes in process `syz.0.897'. [ 238.792756][ T994] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 239.122388][ T994] usb 3-1: Using ep0 maxpacket: 8 [ 239.244187][ T994] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 239.410075][ T994] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 239.623259][ T994] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 240.162321][ T994] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 240.176531][ T994] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 240.189944][ T994] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 240.199032][ T994] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.232466][ T8434] syzkaller0: entered promiscuous mode [ 240.266176][ T8434] syzkaller0: entered allmulticast mode [ 240.745221][ T994] usb 3-1: usb_control_msg returned -71 [ 240.753932][ T994] usbtmc 3-1:16.0: can't read capabilities [ 240.774169][ T994] usb 3-1: USB disconnect, device number 21 [ 240.783998][ T5344] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 241.418262][ T30] audit: type=1400 audit(1785765496.049:546): avc: denied { getopt } for pid=8467 comm="syz.0.913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 241.518107][ T5344] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 241.527263][ T5344] usb 2-1: config 0 has no interface number 0 [ 241.536010][ T5344] usb 2-1: config 0 interface 41 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 241.547119][ T5344] usb 2-1: config 0 interface 41 has no altsetting 0 [ 241.555855][ T5344] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 241.565006][ T5344] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.577075][ T5344] usb 2-1: Product: syz [ 241.581250][ T5344] usb 2-1: Manufacturer: syz [ 241.586210][ T5344] usb 2-1: SerialNumber: syz [ 241.595015][ T5344] usb 2-1: config 0 descriptor?? [ 241.684262][ T5344] CoreChips 2-1:0.41: probe with driver CoreChips failed with error -22 [ 242.529432][ T8477] syz.0.915 (8477): drop_caches: 2 [ 242.548417][ T8478] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 242.919334][ T8498] fuse: fd is not a fuse device [ 243.844547][ T5344] usb 2-1: USB disconnect, device number 15 [ 244.220376][ T30] audit: type=1400 audit(1785765498.849:547): avc: denied { read write } for pid=8505 comm="syz.1.925" name="inject" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 244.271724][ T30] audit: type=1400 audit(1785765498.879:548): avc: denied { open } for pid=8505 comm="syz.1.925" path="/166/trace/events/dwc3/dwc3_ctrl_req/inject" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 244.417035][ T8522] fuse: Unknown parameter '00000000000000000000003' [ 244.423956][ T30] audit: type=1400 audit(1785765499.049:549): avc: denied { mounton } for pid=8515 comm="syz.4.930" path="/165/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 244.466945][ T994] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 244.633016][ T994] usb 1-1: Using ep0 maxpacket: 16 [ 244.658311][ T994] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 244.696710][ T994] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 244.731476][ T994] usb 1-1: New USB device found, idVendor=0810, idProduct=0002, bcdDevice= 0.00 [ 244.756005][ T994] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.780346][ T994] usb 1-1: config 0 descriptor?? [ 245.210406][ T994] pantherlord 0003:0810:0002.0005: unknown main item tag 0x0 [ 245.238542][ T994] pantherlord 0003:0810:0002.0005: unknown main item tag 0x0 [ 245.262623][ T994] pantherlord 0003:0810:0002.0005: unknown main item tag 0x0 [ 245.405902][ T994] pantherlord 0003:0810:0002.0005: unknown main item tag 0x0 [ 245.413432][ T994] pantherlord 0003:0810:0002.0005: unknown main item tag 0x0 [ 246.374798][ T994] pantherlord 0003:0810:0002.0005: unknown main item tag 0x0 [ 246.383178][ T994] pantherlord 0003:0810:0002.0005: unknown main item tag 0x0 [ 246.409678][ T994] pantherlord 0003:0810:0002.0005: unknown main item tag 0x0 [ 246.422524][ T994] pantherlord 0003:0810:0002.0005: unknown main item tag 0x0 [ 246.512196][ T5344] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 246.553405][ T994] pantherlord 0003:0810:0002.0005: unknown main item tag 0x0 [ 246.576893][ T994] pantherlord 0003:0810:0002.0005: hidraw0: USB HID v0.08 Device [HID 0810:0002] on usb-dummy_hcd.0-1/input0 [ 246.624311][ T994] pantherlord 0003:0810:0002.0005: no output reports found [ 246.763776][ T5344] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 246.785599][ T5344] usb 5-1: config 0 has no interface number 0 [ 246.809788][ T5344] usb 5-1: config 0 interface 41 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 246.831444][ T5344] usb 5-1: config 0 interface 41 has no altsetting 0 [ 246.860792][ T5344] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 246.894249][ T5344] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.925086][ T5344] usb 5-1: Product: syz [ 246.949975][ T994] usb 1-1: USB disconnect, device number 19 [ 246.999688][ T5344] usb 5-1: Manufacturer: syz [ 247.016394][ T5344] usb 5-1: SerialNumber: syz [ 247.044112][ T5344] usb 5-1: config 0 descriptor?? [ 247.065997][ T5344] CoreChips 5-1:0.41: probe with driver CoreChips failed with error -22 [ 247.088189][ T8542] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 247.359285][ T8563] netlink: 'syz.1.947': attribute type 1 has an invalid length. [ 247.433816][ T8564] fuse: fd is not a fuse device [ 249.151081][ T187] usb 5-1: USB disconnect, device number 21 [ 249.511331][ T8597] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8597 comm=syz.2.958 [ 249.538540][ T8601] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 249.812692][ T8606] Invalid ELF header magic: != ELF [ 250.100811][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 250.304553][ T30] audit: type=1400 audit(1785765504.939:550): avc: denied { write } for pid=8598 comm="syz.1.959" path="socket:[25351]" dev="sockfs" ino=25351 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 250.326299][ T8607] Bluetooth: MGMT ver 1.23 [ 250.439287][ T30] audit: type=1400 audit(1785765505.069:551): avc: denied { mount } for pid=8613 comm="syz.2.964" name="/" dev="autofs" ino=26370 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 253.416610][ T8685] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 254.199666][ T8688] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 255.272960][ T8724] netlink: 'syz.0.998': attribute type 1 has an invalid length. [ 255.959221][ T8724] 8021q: adding VLAN 0 to HW filter on device bond1 [ 256.053007][ T8726] bond1: (slave geneve2): making interface the new active one [ 256.408278][ T8726] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 257.668355][ T8787] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 258.562482][ T994] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 258.733323][ T994] usb 3-1: Using ep0 maxpacket: 8 [ 258.742747][ T994] usb 3-1: unable to get BOS descriptor or descriptor too short [ 258.816441][ T994] usb 3-1: New USB device found, idVendor=1235, idProduct=8204, bcdDevice= 0.40 [ 258.833596][ T994] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.858355][ T994] usb 3-1: Product: syz [ 258.868454][ T994] usb 3-1: Manufacturer: syz [ 258.878568][ T994] usb 3-1: SerialNumber: syz [ 258.994127][ T8797] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 259.352385][ T994] usb 3-1: 1:1: invalid format type 0x1002 is detected, processed as PCM [ 259.362361][ T994] usb 3-1: 1:1 : sample bitwidth 252 in over sample bytes 4 [ 259.406737][ T994] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 259.692524][ T29] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 259.716156][ T994] usb 3-1: USB disconnect, device number 22 [ 259.953168][ T29] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 259.990329][ T5949] udevd[5949]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 260.033292][ T29] usb 1-1: config 0 has no interface number 0 [ 260.049512][ T29] usb 1-1: config 0 interface 41 has no altsetting 0 [ 260.082257][ T29] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 260.105502][ T29] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.124767][ T29] usb 1-1: Product: syz [ 260.132135][ T29] usb 1-1: Manufacturer: syz [ 260.136860][ T29] usb 1-1: SerialNumber: syz [ 260.147451][ T29] usb 1-1: config 0 descriptor?? [ 260.765637][ T29] CoreChips 1-1:0.41: probe with driver CoreChips failed with error -32 [ 260.809150][ T29] usb 1-1: USB disconnect, device number 20 [ 262.069585][ T8835] Invalid ELF header magic: != ELF [ 262.615545][ T8840] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 262.998401][ T30] audit: type=1400 audit(1785765517.629:552): avc: denied { bind } for pid=8844 comm="syz.0.1026" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 263.113711][ T8771] Set syz1 is full, maxelem 65536 reached [ 266.111445][ T8885] program syz.0.1040 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 266.573291][ T5817] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 266.743833][ T5817] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 266.779062][ T5817] usb 1-1: config 0 has no interfaces? [ 266.795831][ T5817] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 266.819602][ T5817] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.853693][ T5817] usb 1-1: config 0 descriptor?? [ 266.867725][ T8898] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 268.190353][ T30] audit: type=1400 audit(1785765522.819:553): avc: denied { ioctl } for pid=8894 comm="syz.0.1045" path="/dev/input/event2" dev="devtmpfs" ino=923 ioctlcmd=0x4518 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 268.475003][ T5817] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 268.814658][ T5817] usb 5-1: Using ep0 maxpacket: 8 [ 268.854255][ T5817] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 268.892739][ T5817] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 268.901942][ T5817] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.936976][ T5817] usb 5-1: config 0 descriptor?? [ 269.201927][ T5817] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 269.401024][ T5710] usb 1-1: USB disconnect, device number 21 [ 270.613930][ T8953] overlayfs: failed to clone lowerpath [ 270.947038][ T5710] usb 5-1: USB disconnect, device number 22 [ 272.556802][ T8952] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 273.312181][ T5710] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 273.350698][ T30] audit: type=1400 audit(1785765527.979:554): avc: denied { write } for pid=8991 comm="syz.4.1075" name="functions" dev="configfs" ino=21462 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 273.414053][ T8992] zram0: detected capacity change from 0 to 8 [ 273.485802][ T30] audit: type=1400 audit(1785765528.119:555): avc: denied { write } for pid=8991 comm="syz.4.1075" name="c.1" dev="configfs" ino=21467 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 273.492766][ T5710] usb 1-1: Using ep0 maxpacket: 8 [ 273.565796][ T30] audit: type=1400 audit(1785765528.149:556): avc: denied { write } for pid=8991 comm="syz.4.1075" name="c.1" dev="configfs" ino=21467 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 273.606853][ T5710] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 273.634563][ T5710] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 273.677501][ T5710] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 273.708587][ T5710] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 273.733995][ T5710] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 273.760878][ T5710] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.795416][ T5710] hub 1-1:1.0: bad descriptor, ignoring hub [ 273.818407][ T5710] hub 1-1:1.0: probe with driver hub failed with error -5 [ 273.840438][ T5710] cdc_wdm 1-1:1.0: skipping garbage [ 273.858203][ T5710] cdc_wdm 1-1:1.0: skipping garbage [ 273.882282][ T5710] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 273.899217][ T5710] cdc_wdm 1-1:1.0: Unknown control protocol [ 274.042364][ T994] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 274.072014][ T30] audit: type=1400 audit(1785765528.699:557): avc: denied { read write } for pid=8982 comm="syz.0.1073" name="cdc-wdm0" dev="devtmpfs" ino=3033 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 274.594842][ T8994] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 274.657011][ T30] audit: type=1400 audit(1785765528.709:558): avc: denied { open } for pid=8982 comm="syz.0.1073" path="/dev/cdc-wdm0" dev="devtmpfs" ino=3033 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 274.681557][ T30] audit: type=1400 audit(1785765529.289:559): avc: denied { getattr } for pid=8993 comm="syz.1.1076" name="saved_tgids" dev="tracefs" ino=1420 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 274.685306][ T994] usb 5-1: config 0 has an invalid interface number: 117 but max is 0 [ 274.739058][ T994] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 274.758385][ T994] usb 5-1: config 0 has no interface number 0 [ 274.781570][ T994] usb 5-1: config 0 interface 117 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 274.887274][ T994] usb 5-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 274.906721][ T994] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.925011][ T994] usb 5-1: Product: syz [ 274.933271][ T994] usb 5-1: Manufacturer: syz [ 274.942371][ T994] usb 5-1: SerialNumber: syz [ 275.131982][ T994] usb 5-1: config 0 descriptor?? [ 275.880686][ T9025] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 275.888486][ T30] audit: type=1400 audit(1785765530.509:560): avc: denied { mounton } for pid=9023 comm="syz.1.1083" path="/syzcgroup/unified/syz1" dev="cgroup2" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 275.957281][ T9025] cramfs: wrong magic [ 276.878090][ T5819] usb 5-1: USB disconnect, device number 23 [ 276.884124][ T30] audit: type=1400 audit(1785765531.509:561): avc: denied { write } for pid=9028 comm="syz.1.1088" path="socket:[27224]" dev="sockfs" ino=27224 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 278.094392][ T9061] fuse: Bad value for 'fd' [ 278.332383][ T29] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 278.634551][ T30] audit: type=1400 audit(1785765532.809:562): avc: denied { watch } for pid=9055 comm="syz.3.1098" path="pipe:[28195]" dev="pipefs" ino=28195 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 279.187126][ T9046] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 279.281341][ T29] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 279.304687][ T29] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 279.315119][ T29] usb 3-1: config 220 has no interface number 2 [ 279.321431][ T29] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 279.335676][ T29] usb 3-1: config 220 interface 0 has no altsetting 0 [ 279.345964][ T29] usb 3-1: config 220 interface 76 has no altsetting 0 [ 279.357718][ T9068] trusted_key: syz.1.1100 sent an empty control message without MSG_MORE. [ 279.376861][ T29] usb 3-1: config 220 interface 1 has no altsetting 0 [ 279.388234][ T30] audit: type=1800 audit(1785765534.019:563): pid=9070 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.1102" name="nullb0" dev="tmpfs" ino=1488 res=0 errno=0 [ 279.434915][ T29] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 279.459343][ T29] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.487942][ T29] usb 3-1: Product: syz [ 279.502344][ T29] usb 3-1: Manufacturer: syz [ 279.512371][ T29] usb 3-1: SerialNumber: syz [ 279.872894][ T29] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 279.893809][ T5344] usb 1-1: USB disconnect, device number 22 [ 279.950940][ T29] uvcvideo 3-1:220.0: No valid video chain found. [ 280.548488][ T29] usb 3-1: USB disconnect, device number 23 [ 280.667795][ T9083] fuse: fd is not a fuse device [ 281.566035][ T9090] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 282.891183][ T9118] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 282.997736][ T9128] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1124'. [ 283.207378][ T9132] fuse: fd is not a fuse device [ 283.690139][ T30] audit: type=1400 audit(1785765538.319:564): avc: denied { write } for pid=9133 comm="syz.4.1125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 284.980974][ T9158] fuse: Unknown parameter 'grou00000000000000000000' [ 285.124701][ T9163] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1136'. [ 285.531746][ T9173] fuse: fd is not a fuse device [ 287.825230][ T9200] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1148'. [ 289.390079][ T9220] fuse: Unknown parameter 'group_i00000000000000000000' [ 290.491841][ T9232] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 291.752121][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 292.596905][ T30] audit: type=1400 audit(1785765547.089:565): avc: denied { write } for pid=9258 comm="syz.1.1168" name="usbmon4" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 293.538134][ T9277] program syz.4.1173 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 293.713766][ T9282] fuse: Unknown parameter 'group_i00000000000000000000' [ 293.872920][ T9285] fuse: fd is not a fuse device [ 295.177247][ T30] audit: type=1400 audit(1785765549.159:566): avc: denied { watch } for pid=9286 comm="syz.4.1177" path="/211/file1" dev="tmpfs" ino=1128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 295.271174][ T30] audit: type=1400 audit(1785765549.159:567): avc: denied { watch_sb watch_reads } for pid=9286 comm="syz.4.1177" path="/211/file1" dev="tmpfs" ino=1128 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 295.299504][ T30] audit: type=1400 audit(1785765549.189:568): avc: denied { append } for pid=9286 comm="syz.4.1177" name="sg0" dev="devtmpfs" ino=805 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 296.925784][ T9307] gadgetfs: bound to dummy_udc driver [ 297.018100][ T30] audit: type=1400 audit(1785765551.519:569): avc: denied { connect } for pid=9304 comm="syz.4.1184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 297.946817][ T30] audit: type=1400 audit(1785765552.579:570): avc: denied { unmount } for pid=5608 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 299.518846][ T9342] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 302.210897][ T9373] fuse: fd is not a fuse device [ 302.896556][ T9365] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 303.769595][ T30] audit: type=1400 audit(1785765558.389:571): avc: denied { setopt } for pid=9385 comm="syz.1.1209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 304.070566][ T9397] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 305.104310][ T9399] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 305.794437][ T9399] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1213'. [ 305.877273][ T9417] fuse: fd is not a fuse device [ 309.393817][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 309.626701][ T9460] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 309.983441][ T994] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 310.637690][ T994] usb 2-1: Using ep0 maxpacket: 8 [ 310.922332][ T994] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 310.932537][ T994] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 310.942109][ T994] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 310.953400][ T994] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 310.963232][ T994] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.984651][ T9460] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1233'. [ 311.004587][ T994] hub 2-1:1.0: bad descriptor, ignoring hub [ 311.018925][ T994] hub 2-1:1.0: probe with driver hub failed with error -5 [ 311.036950][ T994] cdc_wdm 2-1:1.0: skipping garbage [ 311.043776][ T994] cdc_wdm 2-1:1.0: skipping garbage [ 311.050328][ T994] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 311.326074][ T994] usb 2-1: USB disconnect, device number 16 [ 311.571043][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 311.679230][ T9502] fuse: fd is not a fuse device [ 313.962235][ T5710] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 314.132184][ T5710] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 314.157500][ T5732] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 314.170112][ T5710] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 314.194243][ T5710] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.347969][ T5732] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 314.370618][ T5732] usb 1-1: config 0 has no interface number 0 [ 314.449131][ T5710] usb 2-1: config 0 descriptor?? [ 314.463542][ T5732] usb 1-1: config 0 interface 41 has no altsetting 0 [ 314.535316][ T5732] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 314.590660][ T5732] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.662154][ T5732] usb 1-1: Product: syz [ 314.684958][ T5732] usb 1-1: Manufacturer: syz [ 314.708957][ T5710] usbhid 2-1:0.0: can't add hid device: -71 [ 314.725644][ T5732] usb 1-1: SerialNumber: syz [ 314.735796][ T5710] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 314.749108][ T5732] usb 1-1: config 0 descriptor?? [ 314.796739][ T5710] usb 2-1: USB disconnect, device number 17 [ 314.897326][ T9529] syz.4.1254: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 314.913362][ T9529] CPU: 1 UID: 0 PID: 9529 Comm: syz.4.1254 Not tainted syzkaller #0 PREEMPT(full) [ 314.913392][ T9529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 314.913403][ T9529] Call Trace: [ 314.913411][ T9529] [ 314.913419][ T9529] dump_stack_lvl+0x100/0x190 [ 314.913452][ T9529] warn_alloc.cold+0x94/0xa8 [ 314.913471][ T9529] ? __pfx_warn_alloc+0x10/0x10 [ 314.913491][ T9529] ? register_lock_class+0x40/0x560 [ 314.913523][ T9529] ? kasan_save_stack+0x3f/0x50 [ 314.913547][ T9529] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 314.913577][ T9529] ? xskq_create+0x52/0x1d0 [ 314.913595][ T9529] ? xsk_setsockopt+0x743/0xab0 [ 314.913613][ T9529] ? do_sock_setsockopt+0xf3/0x1d0 [ 314.913647][ T9529] ? __sys_setsockopt+0x195/0x220 [ 314.913669][ T9529] ? __x64_sys_setsockopt+0xbd/0x160 [ 314.913692][ T9529] ? do_syscall_64+0x115/0x870 [ 314.913716][ T9529] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.913742][ T9529] ? xskq_create+0xfb/0x1d0 [ 314.913762][ T9529] __vmalloc_node_range_noprof+0x136c/0x1630 [ 314.913798][ T9529] ? xskq_create+0xfb/0x1d0 [ 314.913824][ T9529] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 314.913857][ T9529] ? kasan_save_track+0x14/0x30 [ 314.913877][ T9529] ? __kasan_kmalloc+0xaa/0xb0 [ 314.913900][ T9529] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 314.913929][ T9529] ? xskq_create+0xfb/0x1d0 [ 314.913947][ T9529] vmalloc_user_noprof+0x9e/0xe0 [ 314.913973][ T9529] ? xskq_create+0xfb/0x1d0 [ 314.913991][ T9529] xskq_create+0xfb/0x1d0 [ 314.914009][ T9529] xsk_setsockopt+0x743/0xab0 [ 314.914027][ T9529] ? __pfx_xsk_setsockopt+0x10/0x10 [ 314.914042][ T9529] ? find_held_lock+0x2b/0x80 [ 314.914057][ T9529] ? __fget_files+0x215/0x3d0 [ 314.914077][ T9529] ? selinux_socket_setsockopt+0x6a/0x80 [ 314.914105][ T9529] ? __pfx_xsk_setsockopt+0x10/0x10 [ 314.914125][ T9529] do_sock_setsockopt+0xf3/0x1d0 [ 314.914154][ T9529] __sys_setsockopt+0x195/0x220 [ 314.914183][ T9529] __x64_sys_setsockopt+0xbd/0x160 [ 314.914206][ T9529] ? do_syscall_64+0x90/0x870 [ 314.914227][ T9529] ? lockdep_hardirqs_on+0x78/0x100 [ 314.914250][ T9529] do_syscall_64+0x115/0x870 [ 314.914273][ T9529] ? clear_bhb_loop+0x40/0x90 [ 314.914296][ T9529] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.914315][ T9529] RIP: 0033:0x7f8e0a19e019 [ 314.914332][ T9529] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 314.914349][ T9529] RSP: 002b:00007f8e083d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 314.914368][ T9529] RAX: ffffffffffffffda RBX: 00007f8e0a426090 RCX: 00007f8e0a19e019 [ 314.914379][ T9529] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000d [ 314.914390][ T9529] RBP: 00007f8e0a23500c R08: 0000000000000029 R09: 0000000000000000 [ 314.914401][ T9529] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 314.914412][ T9529] R13: 00007f8e0a426128 R14: 00007f8e0a426090 R15: 00007fff3c420d18 [ 314.914437][ T9529] [ 314.916327][ T9529] Mem-Info: [ 315.215959][ T9529] active_anon:9475 inactive_anon:0 isolated_anon:0 [ 315.215959][ T9529] active_file:0 inactive_file:61635 isolated_file:0 [ 315.215959][ T9529] unevictable:768 dirty:283 writeback:0 [ 315.215959][ T9529] slab_reclaimable:10760 slab_unreclaimable:104618 [ 315.215959][ T9529] mapped:30028 shmem:2311 pagetables:1168 [ 315.215959][ T9529] sec_pagetables:0 bounce:0 [ 315.215959][ T9529] kernel_misc_reclaimable:0 [ 315.215959][ T9529] free:1287719 free_pcp:13371 free_cma:0 [ 315.261234][ T5710] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 315.270518][ T9529] Node 0 active_anon:38500kB inactive_anon:0kB active_file:0kB inactive_file:246344kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:120112kB dirty:1132kB writeback:0kB shmem:7708kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12288kB pagetables:4400kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 315.326875][ T9529] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:96kB pagetables:172kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 315.360465][ T9529] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 315.371292][ T5732] CoreChips 1-1:0.41: probe with driver CoreChips failed with error -22 [ 315.406613][ T9529] lowmem_reserve[]: 0 2472 2473 2473 2473 [ 315.414682][ T5710] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 315.420105][ T9529] Node 0 DMA32 free:1187632kB boost:0kB min:34012kB low:42512kB high:51012kB reserved_highatomic:0KB free_highatomic:0KB active_anon:42216kB inactive_anon:0kB active_file:0kB inactive_file:246372kB unevictable:1536kB writepending:1172kB zspages:4kB present:3129332kB managed:2532144kB mlocked:0kB bounce:0kB free_pcp:54152kB local_pcp:21256kB free_cma:0kB [ 315.445843][ T5710] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 315.477172][ T9529] lowmem_reserve[]: [ 315.494019][ T5710] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.515861][ T5710] usb 2-1: config 0 descriptor?? [ 315.519031][ T9529] 0 0 0 0 0 [ 315.540127][ T9529] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:376kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 315.574531][ T9529] lowmem_reserve[]: 0 0 0 0 0 [ 315.579398][ T9529] Node 1 Normal free:3943988kB boost:0kB min:55880kB low:69848kB high:83816kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 315.611532][ T9529] lowmem_reserve[]: 0 0 0 0 0 [ 315.617498][ T9529] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 315.625324][ T994] usb 1-1: USB disconnect, device number 23 [ 315.692905][ T9529] Node 0 DMA32: 1707*4kB (UME) 236*8kB (UME) 90*16kB (UE) 267*32kB (ME) 229*64kB (ME) 152*128kB (ME) 83*256kB (ME) 41*512kB (M) 23*1024kB (ME) 11*2048kB (ME) 255*4096kB (M) = 1185612kB [ 315.718832][ T9529] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 315.731183][ T9529] Node 1 Normal: 1*4kB (U) 4*8kB (UM) 5*16kB (UM) 12*32kB (UM) 9*64kB (UM) 4*128kB (UM) 4*256kB (UM) 2*512kB (M) 2*1024kB (UM) 1*2048kB (M) 961*4096kB (M) = 3943988kB [ 315.750900][ T9529] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 315.760539][ T9529] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=3 hugepages_size=2048kB [ 315.769991][ T9529] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 315.779715][ T9529] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 315.789328][ T9529] 63717 total pagecache pages [ 315.794102][ T9529] 0 pages in swap cache [ 315.798341][ T9529] Free swap = 124996kB [ 315.802645][ T9529] Total swap = 124996kB [ 315.806996][ T9529] 2097051 pages RAM [ 315.810856][ T9529] 0 pages HighMem/MovableOnly [ 315.815664][ T9529] 432306 pages reserved [ 315.819860][ T9529] 0 pages cma reserved [ 316.002502][ T9537] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 316.132852][ T9511] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 316.142672][ T9511] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 316.333364][ T5710] aiptek 2-1:0.0: Aiptek using 400 ms programming speed [ 316.344511][ T5710] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input18 [ 316.472156][ T5732] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 316.668256][ T5732] usb 1-1: Using ep0 maxpacket: 32 [ 316.689513][ T5732] usb 1-1: config 0 has an invalid interface number: 35 but max is 0 [ 316.717957][ T5732] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 316.750988][ T5732] usb 1-1: config 0 has no interface number 0 [ 316.774020][ T5732] usb 1-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 316.807043][ C0] aiptek 2-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 316.815297][ T5710] usb 2-1: USB disconnect, device number 18 [ 316.871188][ T5732] usb 1-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 316.909356][ T5732] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.937649][ T5732] usb 1-1: Product: syz [ 316.946524][ T5732] usb 1-1: Manufacturer: syz [ 316.961760][ T5732] usb 1-1: SerialNumber: syz [ 316.965228][ T9553] fuse: Bad value for 'user_id' [ 316.972763][ T9553] fuse: Bad value for 'user_id' [ 316.973330][ T5732] usb 1-1: config 0 descriptor?? [ 316.996899][ T5732] radio-si470x 1-1:0.35: could not find interrupt in endpoint [ 317.012210][ T5732] radio-si470x 1-1:0.35: probe with driver radio-si470x failed with error -5 [ 317.208919][ T5732] radio-raremono 1-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 317.416874][ T5732] videodev: could not get a free minor [ 317.441527][ T5732] radio-raremono 1-1:0.35: could not register video device [ 317.498804][ T5732] radio-raremono 1-1:0.35: probe with driver radio-raremono failed with error -23 [ 317.533646][ T9561] JFS: discard option not supported on device [ 317.558824][ T9561] Mount JFS Failure: -5 [ 317.563363][ T9561] jfs_mount failed w/return code = -5 [ 317.587308][ T5732] usbhid 1-1:0.35: couldn't find an input interrupt endpoint [ 318.098711][ T5732] usb 1-1: USB disconnect, device number 24 [ 318.421251][ T9572] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1265'. [ 318.472228][ T187] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 318.636714][ T187] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 318.653753][ T187] usb 3-1: config 0 has no interface number 0 [ 318.670528][ T187] usb 3-1: config 0 interface 41 has no altsetting 0 [ 318.693961][ T187] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 318.707685][ T187] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.812257][ T187] usb 3-1: Product: syz [ 318.824878][ T187] usb 3-1: Manufacturer: syz [ 318.843671][ T187] usb 3-1: SerialNumber: syz [ 318.854337][ T187] usb 3-1: config 0 descriptor?? [ 320.247476][ T9592] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1277'. [ 320.690355][ T187] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffb9 [ 321.100447][ T187] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -71 [ 321.114392][ T187] usb 3-1: USB disconnect, device number 24 [ 321.258915][ T30] audit: type=1400 audit(1785765575.889:572): avc: denied { bind } for pid=9608 comm="syz.2.1284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 321.279137][ T30] audit: type=1400 audit(1785765575.899:573): avc: denied { read } for pid=5272 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 321.674255][ T9624] overlayfs: failed to clone lowerpath [ 322.141296][ T9632] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 322.157344][ T9632] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 322.174591][ T9632] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 322.199018][ T9632] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 322.244994][ T9632] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 324.053329][ T30] audit: type=1326 audit(1785765578.659:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9606 comm="syz.1.1281" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f801599e019 code=0x0 [ 324.181867][ T12] smbdirect: ib_dev[syz2] removed [ 325.696322][ T9662] program syz.0.1303 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 326.580287][ T9675] overlayfs: failed to clone lowerpath [ 327.076036][ T9685] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1313'. [ 327.471439][ T9692] program syz.1.1315 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 327.613695][ T9696] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1317'. [ 328.895977][ T9716] overlayfs: failed to clone lowerpath [ 329.037728][ T9719] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1324'. [ 329.185401][ T5819] IPVS: starting estimator thread 0... [ 329.371283][ T9721] IPVS: using max 42 ests per chain, 100800 per kthread [ 330.864376][ T9734] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1328'. [ 331.270418][ T9738] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1330'. [ 332.266693][ T9759] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1337'. [ 332.857822][ T9758] overlayfs: failed to clone lowerpath [ 333.878834][ T9777] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1344'. [ 334.844502][ T9793] overlayfs: failed to clone lowerpath [ 335.051037][ T9799] fuse: Bad value for 'fd' [ 335.472881][ T9808] binder: BINDER_SET_CONTEXT_MGR already set [ 335.479181][ T9808] binder: 9806:9808 ioctl 4018620d 200000000100 returned -16 [ 335.582833][ T9808] binder: BINDER_SET_CONTEXT_MGR already set [ 335.589131][ T9808] binder: 9806:9808 ioctl 4018620d 200000001000 returned -16 [ 337.633268][ T9827] overlayfs: failed to clone lowerpath [ 337.976875][ T9833] binder: 9828:9833 ioctl 40046210 0 returned -14 [ 337.995071][ T30] audit: type=1400 audit(1785765592.619:575): avc: denied { create } for pid=9828 comm="syz.4.1362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 338.275537][ T30] audit: type=1400 audit(1785765592.619:576): avc: denied { write } for pid=9828 comm="syz.4.1362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 338.396091][ T9841] netlink: 1624 bytes leftover after parsing attributes in process `syz.2.1365'. [ 338.402813][ T9840] CIFS: Attempting to mount //127.0.0.1/share [ 338.469458][ T9840] CIFS: VFS: Error connecting to socket. Aborting operation. [ 338.478211][ T9840] CIFS: VFS: cifs_mount failed w/return code = -111 [ 338.886159][ T9842] binder: BINDER_SET_CONTEXT_MGR already set [ 338.892381][ T9842] binder: 9837:9842 ioctl 4018620d 200000000100 returned -16 [ 338.975121][ T9842] binder: BINDER_SET_CONTEXT_MGR already set [ 338.986793][ T9842] binder: 9837:9842 ioctl 4018620d 200000001000 returned -16 [ 339.517557][ T9849] fuse: Bad value for 'fd' [ 340.413722][ T5732] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 340.593997][ T5732] usb 2-1: Using ep0 maxpacket: 32 [ 340.619610][ T5732] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 340.629804][ T9867] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1373'. [ 340.642340][ T5732] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.657364][ T5732] usb 2-1: Product: syz [ 340.670821][ T5732] usb 2-1: Manufacturer: syz [ 340.680496][ T5732] usb 2-1: SerialNumber: syz [ 340.718229][ T5732] usb 2-1: config 0 descriptor?? [ 340.770724][ T5732] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 342.047659][ T9874] overlayfs: failed to clone lowerpath [ 342.122145][ T994] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 342.381613][ T994] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 342.471210][ T9885] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9885 comm=syz.0.1378 [ 342.486350][ T994] usb 3-1: config 0 has no interface number 0 [ 342.604948][ T994] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 342.649102][ T994] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 342.666245][ T994] usb 3-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 342.675947][ T994] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.687274][ T994] usb 3-1: config 0 descriptor?? [ 342.776059][ T5732] gspca_ov534_9: reg_w failed -71 [ 343.074903][ T5732] gspca_ov534_9: Unknown sensor 0000 [ 343.074996][ T5732] ov534_9 2-1:0.0: probe with driver ov534_9 failed with error -22 [ 343.109362][ T994] prodikeys 0003:041E:2801.0006: item fetching failed at offset 5/7 [ 343.135694][ T5732] usb 2-1: USB disconnect, device number 19 [ 343.145599][ T994] prodikeys 0003:041E:2801.0006: hid parse failed [ 343.159219][ T994] prodikeys 0003:041E:2801.0006: probe with driver prodikeys failed with error -22 [ 343.270432][ T9899] fuse: Invalid rootmode [ 343.307660][ T994] usb 3-1: USB disconnect, device number 25 [ 343.620537][ T9905] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1386'. [ 344.098702][ T9926] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9926 comm=syz.4.1393 [ 344.122987][ T29] usb 1-1: new full-speed USB device number 25 using dummy_hcd [ 344.140847][ T9925] capability: warning: `syz.2.1394' uses 32-bit capabilities (legacy support in use) [ 344.428211][ T9930] tipc: Started in network mode [ 344.433377][ T9930] tipc: Node identity 4, cluster identity 4711 [ 344.439574][ T9930] tipc: Node number set to 4 [ 344.532202][ T30] audit: type=1400 audit(1785765599.039:577): avc: denied { setopt } for pid=9924 comm="syz.2.1394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 344.733767][ T29] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 344.742195][ T29] usb 1-1: config 0 has no interface number 0 [ 344.748378][ T29] usb 1-1: config 0 interface 41 has no altsetting 0 [ 344.756974][ T29] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 344.766262][ T29] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.774412][ T29] usb 1-1: Product: syz [ 344.778740][ T29] usb 1-1: Manufacturer: syz [ 344.783416][ T29] usb 1-1: SerialNumber: syz [ 344.790684][ T29] usb 1-1: config 0 descriptor?? [ 345.054313][ T30] audit: type=1400 audit(1785765599.689:578): avc: denied { read write } for pid=9935 comm="syz.4.1398" name="file0" dev="fuse" ino=16390 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 345.101093][ T30] audit: type=1400 audit(1785765599.689:579): avc: denied { open } for pid=9935 comm="syz.4.1398" path="/253/file0/file0" dev="fuse" ino=16390 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 345.571546][ T29] CoreChips 1-1:0.41: probe with driver CoreChips failed with error -22 [ 346.090923][ T29] usb 1-1: USB disconnect, device number 25 [ 346.255637][ T9954] JFS: discard option not supported on device [ 346.302101][ T9954] Mount JFS Failure: -5 [ 346.306494][ T9954] jfs_mount failed w/return code = -5 [ 346.748756][ T9958] program syz.2.1407 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 347.096666][ T30] audit: type=1400 audit(1785765601.719:580): avc: denied { write } for pid=9965 comm="syz.2.1412" name="functions" dev="configfs" ino=21462 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 347.134452][ T994] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 347.185775][ T29] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 347.298858][ T30] audit: type=1400 audit(1785765601.879:581): avc: denied { write } for pid=9965 comm="syz.2.1412" name="c.1" dev="configfs" ino=21467 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 347.362718][ T994] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 347.410720][ T994] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 347.467909][ T994] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 347.529877][ T994] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 347.592818][ T994] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 347.663761][ T994] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 347.702628][ T994] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 347.748977][ T994] usb 5-1: Product: syz [ 347.796426][ T994] usb 5-1: Manufacturer: syz [ 347.823895][ T994] cdc_wdm 5-1:1.0: skipping garbage [ 347.841961][ T994] cdc_wdm 5-1:1.0: skipping garbage [ 347.877466][ T994] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 347.896424][ T994] cdc_wdm 5-1:1.0: Unknown control protocol [ 347.943473][ T29] usb 1-1: Using ep0 maxpacket: 16 [ 347.953937][ T29] usb 1-1: unable to get BOS descriptor or descriptor too short [ 347.966936][ T29] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 347.980553][ T29] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 348.006478][ T29] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 348.036346][ T29] usb 1-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 348.054499][ T29] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.079952][ T29] usb 1-1: Product: syz [ 348.139386][ T29] usb 1-1: Manufacturer: syz [ 348.153606][ T29] usb 1-1: SerialNumber: syz [ 348.682856][ T5739] usb 5-1: USB disconnect, device number 24 [ 349.041170][ T9994] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1418'. [ 349.150184][ T29] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 349.179489][ T29] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 349.304762][ T9999] JFS: discard option not supported on device [ 349.340600][ T9999] Mount JFS Failure: -5 [ 349.345149][ T9999] jfs_mount failed w/return code = -5 [ 349.853093][ T29] usb 1-1: USB disconnect, device number 26 [ 350.085120][ T994] usb 5-1: new full-speed USB device number 25 using dummy_hcd [ 351.295163][ T994] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 351.303356][ T994] usb 5-1: config 0 has no interface number 0 [ 351.309419][ T994] usb 5-1: config 0 interface 41 has no altsetting 0 [ 351.330519][ T994] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 351.339589][ T994] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.347661][ T994] usb 5-1: Product: syz [ 351.496160][ T994] usb 5-1: Manufacturer: syz [ 351.500872][ T994] usb 5-1: SerialNumber: syz [ 351.524661][ T994] usb 5-1: config 0 descriptor?? [ 353.105233][ T994] CoreChips 5-1:0.41: probe with driver CoreChips failed with error -71 [ 353.130298][ T994] usb 5-1: USB disconnect, device number 25 [ 354.972801][ T10] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 355.060872][T10061] gadgetfs: bound to dummy_udc driver [ 355.362299][ T5819] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 355.670813][T10055] gadgetfs: suspended from state 2 [ 355.753183][ T10] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 355.803195][ T10] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 355.840798][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 355.919073][ T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 355.994778][ T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 356.078236][ T10] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 356.104152][ T10] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 356.118738][ T10] usb 1-1: Product: syz [ 356.123108][ T10] usb 1-1: Manufacturer: syz [ 356.163831][ T10] cdc_wdm 1-1:1.0: skipping garbage [ 356.178561][ T10] cdc_wdm 1-1:1.0: skipping garbage [ 356.333150][T10074] fuse: Bad value for 'rootmode' [ 356.340131][ T10] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 356.346625][ T10] cdc_wdm 1-1:1.0: Unknown control protocol [ 357.362093][ T994] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 357.765493][ T10] usb 1-1: USB disconnect, device number 27 [ 357.779099][ T994] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 357.801279][ T994] usb 3-1: config 0 has no interface number 0 [ 357.814740][ T994] usb 3-1: config 0 interface 41 has no altsetting 0 [ 357.917790][ T994] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 357.928773][ T994] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.942101][ T994] usb 3-1: Product: syz [ 357.946385][ T994] usb 3-1: Manufacturer: syz [ 357.951059][ T994] usb 3-1: SerialNumber: syz [ 358.100133][ T994] usb 3-1: config 0 descriptor?? [ 358.842236][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 358.872034][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 359.230589][ T994] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -71 [ 359.392393][ T994] usb 3-1: USB disconnect, device number 26 [ 360.484728][T10084] overlayfs: failed to clone lowerpath [ 360.905481][T10120] gadgetfs: bound to dummy_udc driver [ 360.923706][ T5819] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 361.006242][T10119] fuse: Bad value for 'rootmode' [ 361.203508][ T29] usb 1-1: new full-speed USB device number 28 using dummy_hcd [ 361.215285][ T5819] usb 2-1: config 0 has an invalid interface number: 117 but max is 0 [ 361.268765][ C1] gadgetfs: connected [ 361.279760][T10123] program syz.2.1460 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 361.290195][ T5819] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 361.300615][ T29] gadgetfs: disconnected [ 361.327109][ T5819] usb 2-1: config 0 has no interface number 0 [ 361.334670][ T5819] usb 2-1: config 0 interface 117 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 361.350525][ T5819] usb 2-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 361.361578][ T5819] usb 2-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 361.378322][ T5819] usb 2-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 361.389726][ T5819] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.399093][ T5819] usb 2-1: Product: syz [ 361.431187][ T5819] usb 2-1: Manufacturer: syz [ 361.450512][ T5819] usb 2-1: SerialNumber: syz [ 361.472760][ C1] gadgetfs: connected [ 361.478402][ T5819] usb 2-1: config 0 descriptor?? [ 361.483913][ T29] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 361.495143][T10113] gadgetfs: suspended from state 3 [ 361.500264][T10113] gadgetfs: disconnected [ 361.553396][ T29] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 361.564133][ T29] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.578804][ T29] usb 1-1: can't set config #1, error -71 [ 361.586137][ T29] usb 1-1: USB disconnect, device number 28 [ 361.712256][ T994] usb 5-1: new full-speed USB device number 26 using dummy_hcd [ 361.890087][ T994] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 361.911510][ T994] usb 5-1: config 0 has no interface number 0 [ 361.926184][ T994] usb 5-1: config 0 interface 41 has no altsetting 0 [ 362.396641][ T994] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 362.416733][ T994] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.432932][ T994] usb 5-1: Product: syz [ 362.439202][ T994] usb 5-1: Manufacturer: syz [ 362.447824][ T994] usb 5-1: SerialNumber: syz [ 362.464134][ T994] usb 5-1: config 0 descriptor?? [ 362.769409][T10149] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1470'. [ 362.779194][T10149] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 362.853617][T10149] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 363.229835][T10153] fuse: Bad value for 'rootmode' [ 363.363054][ T994] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffb9 [ 363.450982][ T994] CoreChips 5-1:0.41: probe with driver CoreChips failed with error -71 [ 363.494899][ T994] usb 5-1: USB disconnect, device number 26 [ 363.590777][ T5819] usb 2-1: USB disconnect, device number 21 [ 364.279176][T10157] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 366.114207][ T29] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 366.391633][T10190] JFS: discard option not supported on device [ 366.399396][T10190] Mount JFS Failure: -5 [ 366.403791][T10190] jfs_mount failed w/return code = -5 [ 366.770860][ T29] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 366.809967][ T29] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.846560][ T29] usb 2-1: Product: syz [ 366.857830][ T29] usb 2-1: Manufacturer: syz [ 366.879105][ T29] usb 2-1: SerialNumber: syz [ 367.117313][T10192] 9p: Bad value for 'rfdno' [ 367.477564][T10195] tipc: Started in network mode [ 367.492571][T10195] tipc: Node identity 4, cluster identity 4711 [ 367.514544][T10195] tipc: Node number set to 4 [ 367.611890][ T29] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 367.647073][ T29] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 368.370500][ T29] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 368.409251][ T29] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 368.429519][ T29] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 368.454235][ T29] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -32 [ 368.462399][ T5344] usb 1-1: new full-speed USB device number 29 using dummy_hcd [ 368.626077][ T5344] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 368.656541][ T5344] usb 1-1: config 0 has no interface number 0 [ 368.681566][ T5344] usb 1-1: config 0 interface 41 has no altsetting 0 [ 368.707966][ T5344] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 368.738602][ T5344] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.755093][ T5344] usb 1-1: Product: syz [ 368.761106][ T5344] usb 1-1: Manufacturer: syz [ 368.766718][ T5344] usb 1-1: SerialNumber: syz [ 368.776589][ T5344] usb 1-1: config 0 descriptor?? [ 369.234261][T10218] gadgetfs: bound to dummy_udc driver [ 369.650807][ T5710] usb 2-1: USB disconnect, device number 22 [ 369.837836][T10214] gadgetfs: suspended from state 2 [ 369.936524][ T5819] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 370.178982][ T5344] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffb9 [ 370.238371][ T5344] CoreChips 1-1:0.41: probe with driver CoreChips failed with error -71 [ 370.358858][ T5344] usb 1-1: USB disconnect, device number 29 [ 372.376945][T10245] netlink: 'syz.2.1499': attribute type 9 has an invalid length. [ 372.840496][T10248] program syz.0.1501 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 372.975831][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 373.282148][ T5344] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 373.930050][T10250] overlayfs: failed to clone lowerpath [ 373.950844][ T5344] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 373.976789][ T5344] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.998696][ T5344] usb 1-1: Product: syz [ 374.010015][ T5344] usb 1-1: Manufacturer: syz [ 374.021672][ T5344] usb 1-1: SerialNumber: syz [ 374.605421][ T5344] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 375.055508][ T5344] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 375.554745][ T5344] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -EPIPE [ 375.584340][ T5344] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 375.598765][ T5344] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 375.612814][ T5344] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -32 [ 376.199607][T10281] JFS: discard option not supported on device [ 376.209636][T10281] Mount JFS Failure: -5 [ 376.214005][T10281] jfs_mount failed w/return code = -5 [ 376.304779][ T5819] usb 3-1: new full-speed USB device number 28 using dummy_hcd [ 376.468276][ T5819] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 376.512390][ T5819] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 376.545766][ T5819] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 376.552388][ T994] usb 1-1: USB disconnect, device number 30 [ 376.796418][ T5819] usb 3-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 376.834388][ T5819] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.863794][ T5819] usb 3-1: Product: syz [ 376.882788][ T5819] usb 3-1: Manufacturer: syz [ 376.901677][ T5819] usb 3-1: SerialNumber: syz [ 376.977056][ T5819] usb 3-1: config 0 descriptor?? [ 377.018248][T10275] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 377.096577][T10291] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1513'. [ 377.450992][ T5819] rc_core: IR keymap rc-streamzap not found [ 377.464737][ T5819] Registered IR keymap rc-empty [ 377.481243][ T5819] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 377.496333][ T5819] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input20 [ 377.581019][T10299] gadgetfs: bound to dummy_udc driver [ 377.842256][ T29] usb 1-1: new full-speed USB device number 31 using dummy_hcd [ 378.037883][ C1] gadgetfs: connected [ 378.042471][ T29] gadgetfs: disconnected [ 378.069424][T10303] program syz.0.1516 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 378.080253][ T5819] usb 3-1: USB disconnect, device number 28 [ 378.161475][T10305] fuse: Unknown parameter 'use00000000000000000000' [ 378.402063][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 378.890221][T10298] overlayfs: failed to clone lowerpath [ 380.303169][ T30] audit: type=1400 audit(1785765634.839:582): avc: denied { map } for pid=10325 comm="syz.2.1524" path="socket:[34852]" dev="sockfs" ino=34852 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 380.601114][ T30] audit: type=1400 audit(1785765634.839:583): avc: denied { write } for pid=10325 comm="syz.2.1524" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 380.662123][ T994] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 380.879276][ T994] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 380.912634][ T994] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.933561][ T994] usb 5-1: Product: syz [ 380.945945][ T994] usb 5-1: Manufacturer: syz [ 380.957456][ T994] usb 5-1: SerialNumber: syz [ 381.432099][ T994] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 381.447610][ T994] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 381.720265][T10339] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1526'. [ 381.975134][T10344] dummy_hcd dummy_hcd.0: remove, state 4 [ 382.020797][T10344] usb usb1: USB disconnect, device number 1 [ 382.072969][ T994] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -EPIPE [ 382.139316][ T994] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 382.350517][ T994] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 382.385405][ T994] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -32 [ 382.535315][T10344] dummy_hcd dummy_hcd.0: stopped [ 382.557436][T10344] dummy_hcd dummy_hcd.0: USB bus 1 deregistered [ 383.129312][ T10] usb 5-1: USB disconnect, device number 27 [ 385.220716][T10358] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 389.476185][T10404] overlayfs: failed to clone lowerpath [ 389.511773][T10419] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10419 comm=syz.0.1550 [ 389.616774][ T30] audit: type=1400 audit(1785765644.229:584): avc: denied { setopt } for pid=10421 comm="syz.2.1552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 389.747156][ T5611] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 392.529480][T10440] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.675358][T10440] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.059180][T10440] bond0: (slave netdevsim1): Releasing backup interface [ 394.285032][T10440] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.229250][T10471] overlayfs: failed to clone lowerpath [ 396.269475][T10440] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.449053][T10481] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10481 comm=syz.1.1568 [ 396.922375][ T36] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.995007][ T36] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.222147][ T36] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.232266][ T36] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.978396][T10518] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 404.272231][ T994] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 405.053337][ T994] usb 5-1: device descriptor read/64, error -71 [ 405.332987][ T994] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 405.423682][T10576] JFS: discard option not supported on device [ 405.435342][T10576] Mount JFS Failure: -5 [ 405.439556][T10576] jfs_mount failed w/return code = -5 [ 406.029553][T10580] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 406.081575][ T994] usb 5-1: device descriptor read/64, error -71 [ 406.212629][ T994] usb usb5-port1: attempt power cycle [ 406.852088][ T994] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 406.872844][ T994] usb 5-1: device descriptor read/8, error -71 [ 408.583356][T10600] 9p: Bad value for 'rfdno' [ 409.080198][T10614] comedi comedi0: comedi_bond: 4:2 attached, 32 channels from 1 devices [ 409.882230][T10616] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 410.846661][T10630] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 410.861467][T10630] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 410.878768][T10630] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 410.926944][T10630] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 412.555777][ T53] smbdirect: ib_dev[syz2] removed [ 414.815176][ T994] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 414.975429][ T994] usb 2-1: device descriptor read/64, error -71 [ 415.282150][ T994] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 415.462121][ T994] usb 2-1: device descriptor read/64, error -71 [ 415.589124][ T30] audit: type=1400 audit(1785765670.219:585): avc: denied { read append } for pid=10665 comm="syz.0.1619" name="btrfs-control" dev="devtmpfs" ino=1315 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 415.869425][T10669] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN NOPTI [ 415.881528][T10669] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 415.889932][T10669] CPU: 1 UID: 0 PID: 10669 Comm: syz.0.1619 Not tainted syzkaller #0 PREEMPT(full) [ 415.899277][T10669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 415.909326][T10669] RIP: 0010:dummy_udc_start+0x91/0x1d0 [ 415.914780][T10669] Code: df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 28 01 00 00 4c 8b ab 90 06 00 00 48 b8 00 00 00 00 00 fc ff df 4c 89 ea 48 c1 ea 03 <80> 3c 02 00 0f 85 10 01 00 00 83 ed 01 bf 02 00 00 00 49 8b 5d 00 [ 415.934379][T10669] RSP: 0018:ffffc90004ef7b48 EFLAGS: 00010246 [ 415.940429][T10669] RAX: dffffc0000000000 RBX: ffff888027418c00 RCX: ffffc900139c7000 [ 415.948375][T10669] RDX: 0000000000000000 RSI: ffffffff87d05527 RDI: ffff888027419290 [ 415.956398][T10669] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000005 [ 415.964380][T10669] R10: 0000000000000003 R11: 0000000000000000 R12: ffff888079e3c050 [ 415.972337][T10669] R13: 0000000000000000 R14: ffff88802c5fb4f1 R15: ffff88802c5fb008 [ 415.980292][T10669] FS: 00007f5fe54b46c0(0000) GS:ffff888123ed8000(0000) knlGS:0000000000000000 [ 415.989203][T10669] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 415.995780][T10669] CR2: 00007f5fe54b2fd0 CR3: 0000000056137000 CR4: 00000000003526f0 [ 416.003741][T10669] Call Trace: [ 416.007433][T10669] [ 416.010349][T10669] gadget_bind_driver+0x4ac/0xbf0 [ 416.015355][T10669] ? __pfx_gadget_bind_driver+0x10/0x10 [ 416.020873][T10669] really_probe+0x241/0xa60 [ 416.025357][T10669] __driver_probe_device+0x20e/0x450 [ 416.030632][T10669] driver_probe_device+0x4a/0x140 [ 416.035630][T10669] __driver_attach+0x21f/0x5b0 [ 416.040367][T10669] ? __pfx___driver_attach+0x10/0x10 [ 416.045627][T10669] bus_for_each_dev+0x13e/0x1d0 [ 416.050448][T10669] ? __pfx_bus_for_each_dev+0x10/0x10 [ 416.055796][T10669] ? bus_add_driver+0x2b5/0x5b0 [ 416.060630][T10669] bus_add_driver+0x305/0x5b0 [ 416.065289][T10669] driver_register+0x1e2/0x360 [ 416.070036][T10669] ? rcu_is_watching+0x12/0xc0 [ 416.074776][T10669] usb_gadget_register_driver_owner+0x132/0x210 [ 416.080999][T10669] raw_ioctl+0x1a85/0x2b80 [ 416.085394][T10669] ? __pfx_raw_ioctl+0x10/0x10 [ 416.090135][T10669] ? selinux_file_ioctl+0x13b/0x290 [ 416.095311][T10669] ? selinux_file_ioctl+0xb6/0x290 [ 416.100409][T10669] ? __pfx_raw_ioctl+0x10/0x10 [ 416.105147][T10669] __x64_sys_ioctl+0x18e/0x210 [ 416.109898][T10669] do_syscall_64+0x115/0x870 [ 416.114463][T10669] ? clear_bhb_loop+0x40/0x90 [ 416.119121][T10669] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.124993][T10669] RIP: 0033:0x7f5fe459dcab [ 416.129379][T10669] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 416.148956][T10669] RSP: 002b:00007f5fe54b1f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 416.157340][T10669] RAX: ffffffffffffffda RBX: 000000000000000d RCX: 00007f5fe459dcab [ 416.165284][T10669] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 000000000000000d [ 416.173235][T10669] RBP: 00007f5fe54b2fd0 R08: 0000000000000001 R09: 00000000ffffffff [ 416.181178][T10669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 416.189118][T10669] R13: 0000200000000040 R14: 0000000000000003 R15: 0000000000000000 [ 416.197076][T10669] [ 416.200076][T10669] Modules linked in: [ 416.204366][T10669] ---[ end trace 0000000000000000 ]--- [ 416.210418][ T994] usb usb2-port1: attempt power cycle [ 416.244352][T10669] RIP: 0010:dummy_udc_start+0x91/0x1d0 [ 416.258979][T10669] Code: df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 28 01 00 00 4c 8b ab 90 06 00 00 48 b8 00 00 00 00 00 fc ff df 4c 89 ea 48 c1 ea 03 <80> 3c 02 00 0f 85 10 01 00 00 83 ed 01 bf 02 00 00 00 49 8b 5d 00 [ 416.279526][ T30] audit: type=1400 audit(1785765670.309:586): avc: denied { ioctl open } for pid=10665 comm="syz.0.1619" path="/dev/btrfs-control" dev="devtmpfs" ino=1315 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 416.327198][ T30] audit: type=1400 audit(1785765670.889:587): avc: denied { read } for pid=4959 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 416.354590][T10669] RSP: 0018:ffffc90004ef7b48 EFLAGS: 00010246 [ 416.370310][T10669] RAX: dffffc0000000000 RBX: ffff888027418c00 RCX: ffffc900139c7000 [ 416.386941][T10669] RDX: 0000000000000000 RSI: ffffffff87d05527 RDI: ffff888027419290 [ 416.401289][ T30] audit: type=1400 audit(1785765670.889:588): avc: denied { search } for pid=4959 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 416.430022][T10669] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000005 [ 416.445637][T10669] R10: 0000000000000003 R11: 0000000000000000 R12: ffff888079e3c050 [ 416.456078][ T30] audit: type=1400 audit(1785765670.889:589): avc: denied { write search } for pid=4959 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 416.479161][T10669] R13: 0000000000000000 R14: ffff88802c5fb4f1 R15: ffff88802c5fb008 [ 416.490285][T10669] FS: 00007f5fe54b46c0(0000) GS:ffff888123dd8000(0000) knlGS:0000000000000000 [ 416.504568][T10669] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 416.513396][ T30] audit: type=1400 audit(1785765670.889:590): avc: denied { add_name } for pid=4959 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 416.535384][T10669] CR2: 0000200000190000 CR3: 0000000056137000 CR4: 00000000003526f0 [ 416.544100][T10669] Kernel panic - not syncing: Fatal exception [ 416.550374][T10669] Kernel Offset: disabled [ 416.554679][T10669] Rebooting in 86400 seconds..