last executing test programs: 7.463684396s ago: executing program 2 (id=2808): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a02fa560186d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f68530c2b21a100efb76cba37ff3111d6847e0c7f719e169a596e5fc008daefba68f6222103472bc55704cdb72b4b996ed82ccb1eaae27969d008ba7d34171113d80672e65a6a0a72e19c2b60bd6276fd8bb6366e9d1ed9a60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13e4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe3635b2ee97c143f28def4b73905ca14d10d1f600"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@newtaction={0xf0, 0x30, 0x1, 0xe501, 0x0, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x30, 0x1, {0x0, 0x81000000, 0x800, 0x0, 0x0, {0x0, 0x1}, {}, 0x8001}}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x0, 0x0, 0x0, 0x400000, {0x0, 0x0, 0x0, 0x0, 0xffff}, {0x4}}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0xf0}}, 0x0) 7.013617866s ago: executing program 2 (id=2811): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000034276d20402003c68e01000000010902120001000000000904"], 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0/file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000240), 0x0, 0x0) umount2(&(0x7f0000000580)='./file0\x00', 0xc) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000780)=@newtaction={0x520, 0x30, 0x400, 0x70bd29, 0x25dfdbfb, {}, [{0x50c, 0x1, [@m_mirred={0x11c, 0x4, 0x0, 0x0, {{0xb}, {0xc4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x3, 0x10000000, 0x5}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0xfffffffc, 0xffffffffffffffff, 0xfffffffb, 0x2}, 0x2, r3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0xe8c, 0xffffffffffffffff, 0x7, 0x4}, 0x4, r3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xffffb43c, 0x8000, 0x10000000, 0x8e7, 0x2}, 0x2, r3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x401, 0x4, 0x6, 0x3}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x9, 0x8, 0x6, 0x73b3d9db}, 0x2, r3}}]}, {0x2d, 0x6, "426372a1131e229aeb6680ad5bf0f1a069495c34c365e88874e103b571db2440de74e012027f4e3f0e"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_sample={0x68, 0x1a, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x1, 0x2, 0x4, 0x40}}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x8, 0x10000000, 0x1, 0x6}}]}, {0xa, 0x6, "54f0ab2dc293"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_xt={0x208, 0x12, 0x0, 0x0, {{0x7}, {0x19c, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_TARG={0x117, 0x6, {0x6, 'nat\x00', 0xf, 0xff, "d1ce5fdedff6f89b571874e25ac4d002796e58c389da3d2cb2ded12e086e20b89cbab048461e7d9c2a439189d1e32582e3316acc2f962218764adcd6dd479c61f1c5bf6f6ad0e4180ccc108125845f52580c9e98675f8dba93d26a413f0c87ff6a1438ba05742b9c1321843b99db1ef61b23db715e36f74adc3a8f874a8118f2d0a367639b1960d0c45849ed6cec6159211ce8de3ffa187787866666e622e575d090c2ae1f2e7809ab958d4f59f3c5fe2b65fd6056d311331e4fb93497f86ecc4a8f75a0b1a8df5e09db556633ae423e5f9f9bc9ed6ed019e287dab61bc10dd2a78d13fb20354b4334b5d617ee"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x8}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x8}, @TCA_IPT_INDEX={0x8, 0x3, 0xfffffffa}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x10}]}, {0x48, 0x6, "f8ccd2b547676a2d2da89d4d445adc4c9ee3d0f64b429cda0f602498acf7d5e4bc8b3bd79f0326b26194d01cfd3e2bedf8de6f4c22e310ee20f388d01d06737d5f62a772"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_skbedit={0x84, 0x18, 0x0, 0x0, {{0xc}, {0x14, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xc, 0xb}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x6}]}, {0x46, 0x6, "bb80b02dba61ee06a17f6b577b516cc5acdc50e792d1f5a40b4528317a38be996cdfcda14cac9e456034fc1df558ef945eef0ca36ec391c9388460e5758f8ee3da0c"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_xt={0xf8, 0x9, 0x0, 0x0, {{0x7}, {0x40, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_INDEX={0x8, 0x3, 0x1}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}]}, {0x92, 0x6, "f78f43766572041f4b44a729790ca5ffe106a95a2f2834722186b1c9e1e9bb7aa69ac85e1f3aaeef347ceb7f1a432d163308b127933ed877f8272ac50447c542eb08e36f9ced209b932ad9a2fab3ec0acff8bd54407bd9b6889b0277059e4c1d8334402f24e6b96e9b8f7b0c5a248d421d58d999925b5814abdd065c09950e1d2cdfe725043e289628c9ed706d21"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x520}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@gettfilter={0x2c, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r3, {0xc, 0xfff2}, {0x0, 0xfff1}, {0x2}}, [{0x8, 0xb, 0xe}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000000)=0x10000) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000080)=0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=0xffffffffffffffff, 0x4) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="463eae00ea53ac1b52cb795587f924d3bff6ded3e4ba873edd9221cd7d03067157e08eaffae859498f818737858ab5a1889c6ebb"], 0x18}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) writev(r6, &(0x7f0000000180)=[{&(0x7f0000000040)="e26c", 0x2}], 0x1) 5.895126693s ago: executing program 4 (id=2815): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setrlimit(0xe, &(0x7f0000000380)={0x4, 0x3}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x3) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000040)=0x1) syz_usb_connect(0x0, 0x24, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000fb51f210cf1b400b85780000000109021200010100c00009042100000e0100"], 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) r3 = getpid() syz_pidfd_open(r3, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x22883, 0x0) r4 = syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x52}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000005, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mount_setattr(0xffffffffffffffff, 0x0, 0x9500, 0x0, 0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x4110}, 0x1}) io_uring_enter(r4, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=ANY=[@ANYBLOB="4000000010e20204020000000000000000000400", @ANYRES32=0x0, @ANYBLOB="0003000000000000200012800b00010067656e6576650000100002800400060008000200ac1e0101"], 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x8044) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3f, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r9 = fsopen(&(0x7f00000001c0)='devtmpfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f00000000c0)='iocharset', &(0x7f0000000100)='iocharset', 0x0) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000340)={0x4, 0x1, 0x2, 0xfffd, 0x30, 0x8001, &(0x7f00000002c0)="c5ae657a59f801b62198ad4d7ffc795f0596cc17ae5404b5f1d05e8533762f9a0686daa3aef7a9cf3f4a87170a5bf5ac"}) 4.59996833s ago: executing program 2 (id=2822): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) sendmmsg(r0, &(0x7f000000a440)=[{{0x0, 0x0, &(0x7f000000a300)=[{&(0x7f0000007f40)="45442384fba766eb9c06221de78884f02c22fc234826d0725ac1959a92e1016664e0d5955a533e3caf2499a7acf6c62a7c43c30d0590d9e162db6fd8dac5f38add0450e492b1d32e66b51287a338bd7e8f611b6a196d106f08a648ae8316b8a5a07229028b7cbd2b75de1d1f7c57f5984ea9fe80f8c166fd17f8d555069676cda5200edfaed89d2c1bcb0d236f53d95c7b221f16f4e044a2ec0ff49743b212ea30340c725a9ec5a1e51d7c733da6e7a8faa37c066bd065aebc2e121da88267df85b4568ee6be3d22b48cdb5093ecd2814e06817cfa0d2d264632c3e66239a27b153be96b06", 0xe5}, {&(0x7f0000008100)="3df0842ddcdb35a48bf102d77741d0f170ee6c06c37a313fdf8aab3507434beddc8e4e6af5dfff1b0669b8843d92d03759013463050253884e2212a8a874f340044620c0c617f27f2506996c3e3ecfe53564782366a3c6352b51666d4ec0726c9fc8a520466b152abf72556ba8b5418372da2d7d0fe0e4c988bca751e7b0777d77229990fd75173d3e988274e7ac1dbfe9aae6226a0917c3c45fc33fedfbf0032ef1e37a15951a105f92b7843539fc4ba3f754840b8cc210bd83a0fd7e1576e3e81dedbbba7628256a16", 0xca}, {&(0x7f0000009100)="c94ef5758ccf473828d9bb258578faa9c1", 0x11}, {&(0x7f0000009180)="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", 0x237}], 0x4}}], 0x1, 0x40) 4.298967442s ago: executing program 1 (id=2827): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000001300)) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[], 0x1c}}, 0x0) 4.270117684s ago: executing program 1 (id=2828): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@nfs_export_on}, {@xino_auto}], [], 0x2c}) 4.049481764s ago: executing program 1 (id=2829): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x2042, 0x19d) r3 = fanotify_init(0xf00, 0x1000) fanotify_mark(r3, 0x105, 0x10000839, 0xffffffffffffffff, 0x0) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000080)={0x20, 0x8000000000000009, 0x0, {0x0, 0x8}}, 0x20) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000001000/0x4000)=nil, 0x3) syz_emit_ethernet(0x34, &(0x7f00000000c0)=ANY=[], 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r5, 0x4018aebd, &(0x7f00000000c0)={0x400002, 0xffffffffffffffff, 0x1}) 4.048181491s ago: executing program 0 (id=2830): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) socket$nl_route(0x10, 0x3, 0x0) r1 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mmap$IORING_OFF_PBUF_RING(0x0, 0x550, 0x5, 0x80010, 0xffffffffffffffff, 0x873624fc) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000b80)={0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r2, 0x0, 0xb3) socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000100)={'vlan0\x00', &(0x7f0000002fc0)=@ethtool_channels={0x3d, 0x1ff, 0x5, 0x1, 0x1ff, 0x4, 0x7, 0x1000, 0xfff}}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="05000000010000000400000004"], 0x50) close(0x3) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x28}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000838500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.541419542s ago: executing program 2 (id=2832): r0 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100004898b610c2154100201f0102030109021b0001000500ea09040002018c78fd00090582f3c6"], 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000006bc0), 0x0, 0x0) read$FUSE(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000a40)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r6, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20) close_range(r5, 0xffffffffffffffff, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x2e, 0x501, 0x70bd25, 0x40000000, {0x0, 0x0, 0x0, r7, {}, {0xfff3, 0xffff}, {0x0, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x24000004) syz_usb_control_io$hid(r0, 0x0, 0x0) ioctl$F2FS_IOC_GET_FEATURES(0xffffffffffffffff, 0x8004f50c, &(0x7f0000000180)) 3.460811894s ago: executing program 0 (id=2833): socket(0x10, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r0, &(0x7f000039e000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="9a01000000f800b8d58800000f23d00f21f8351000000d0f23f864640f79ea66baf80cb8c85f5480ef66bafc0cecc4c2adac17b9550200000f320f2860c7c4e11751df0f2e2d00000080b9800000c00f3235008000000f30", 0x58}], 0x1, 0x4a, 0x0, 0x0) r3 = syz_open_dev$I2C(&(0x7f0000000180), 0x19a, 0x200) ioctl$I2C_SLAVE(r3, 0x703, 0x4) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) syz_open_procfs$namespace(0x0, &(0x7f00000003c0)='ns/time\x00') io_submit(r5, 0x1, &(0x7f0000000440)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x8, 0x1, r4, 0x0, 0x0, 0x8000}]) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000080)={0x1d0003, 0x0, {[0xffffffffffffffff, 0x0, 0x8, 0xfffffffdefffff14, 0x3, 0x10, 0xc, 0x4]}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.112025546s ago: executing program 1 (id=2836): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf2502000000080001", @ANYRES32=r3], 0x1c}}, 0x840) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB='@\x00'], 0x7) 2.922637303s ago: executing program 1 (id=2837): r0 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100004898b610c2154100201f0102030109021b0001000500ea09040002018c78fd00090582f3c6"], 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000006bc0), 0x0, 0x0) read$FUSE(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000a40)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r6, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20) close_range(r5, 0xffffffffffffffff, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x2e, 0x501, 0x70bd25, 0x40000000, {0x0, 0x0, 0x0, r7, {}, {0xfff3, 0xffff}, {0x0, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x24000004) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x3, &(0x7f0000000000)=ANY=[]) ioctl$F2FS_IOC_GET_FEATURES(0xffffffffffffffff, 0x8004f50c, &(0x7f0000000180)) 2.920426995s ago: executing program 3 (id=2838): kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217", 0x2a, 0x5, 0xffffffff}], 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000740)}], 0x2}, 0x41) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b0d9307", 0xe7}], 0x1, &(0x7f00000008c0)=[@iv={0x18}, @assoc={0x18, 0x117, 0x4, 0x6}], 0x30, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad8f709ed07bd2a91564fc364f1b971b0e005fe1d24f1b0d7f157b695c625cc39aac2d6f07b11d", 0xb5}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc", 0x2a}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d9df469c0c906000e0f82c089ec12677e7ade15e68a", 0xaf}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be9094ea58e9df52d9dbd9e0fae7a4", 0xcc}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b", 0x6f}], 0x5, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b", 0x44}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 2.806565528s ago: executing program 0 (id=2839): mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, 0x0) kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82ba", 0x2d, 0x5, 0xffffffff}], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, 0x0}}], 0x1, 0x14018891) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c94", 0xcb}], 0x1, &(0x7f00000008c0)=[@iv={0x90, 0x117, 0x2, 0x79, "bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4a0342bed8a3c79acd4bb1f9f46ef28a63b329e09a86c62f907539c9af6f1b0bc00510c3b27f64245b6"}], 0x90, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad8f709ed07bd2a91564fc364f1b971b0e005fe1d24f1b0d7f157b695c625cc39a", 0xaf}, {&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7", 0x98}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9", 0x83}], 0x4, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 2.7947115s ago: executing program 4 (id=2840): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf2502000000080001", @ANYRES32=r3], 0x1c}}, 0x840) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB='@\x00'], 0x7) 2.751020003s ago: executing program 4 (id=2841): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x4, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000e00)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000640)="80220ebd910ac0089289bf7c00bca5962c5bfb1a716ddd4cb96d929560eff333276dafb9550ec99b1b442aecb50f40d5615c1fd482b394607e18b1db2a25c0404c3080f22f3b96c8e3cd04ea9f341f890e916f7b230d9f969ed11b3ec826f08e85af851f034de926", 0x68}, {&(0x7f0000000740)="c5feaad002b474cb445c115793ac31043a4a6d9136f100b15c698e05d9a7f48773c3abaa067fc4519b13d66280447d4f963718f208f2ad650dad5d", 0x3b}], 0x2}}], 0x1, 0x800) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000003e80)=[{{0x0, 0x0, &(0x7f0000002800)=[{&(0x7f00000014c0)="cd5927a8b2a00ee8cc111509a5dcf0343c2c5b667c514bb3055b96ebda11b4c8308aef587ef82686dc7f027c402a00582f1b338d80160b21beef66b139a7061ff65ea9c6ed4de3c272fcce0b257c322f54ca01000000bb318d29a96c5035fd713f02f959dc5e55bd518d2ce967008eb6db0a89b4129c5b692bff14aeaa783a3cb22eb1004d87c97e8c8c587adeff394c43b74f5ba5ce66df35b3f4e7d9d7cbc36a20ec75e5dc96701ef447ee3160e70ad13117e96c171be8f0ba442afef0d073a33d7eb218dbb9c065f38a22096306c1e1", 0xd1}], 0x1}}, {{0x0, 0x0, &(0x7f0000003d40)=[{&(0x7f0000002b00)="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", 0x34d}], 0x1}}], 0x2, 0x42054) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x1000806d, 0x0, 0x0) 2.741997786s ago: executing program 3 (id=2842): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406855c9, &(0x7f0000000180)={0xb, 0x3, {0x53, 0xb, 0xb7, {0x7, 0xd6}, {0xeb, 0xb8}, @const={0x8000, {0x3, 0x1, 0x1, 0x9}}}, {0x57, 0x3, 0x2bd, {0x6, 0x5}, {0x7, 0x7}, @period={0x59, 0x100, 0x3, 0x0, 0x7, {0x3, 0x3ff, 0xd, 0x8}, 0x9, &(0x7f0000000080)=[0xf801, 0x6, 0x0, 0x8, 0x2, 0x4, 0x3444, 0x100, 0x3]}}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000040)={'batadv_slave_0\x00'}) ioctl$TUNSETCARRIER(r2, 0x400454e2, &(0x7f0000000000)=0x1) r3 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0xfffffffffffffffe, 0x1, 0x4, 0x100000000, 0x5, 0x0, 0xe}, {0x0, 0x8000, 0x40400000003, 0xfffffffffffffff9}, 0xfffffffc, 0x1, 0x1, 0x0, 0x6}, {{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x4d5, 0x3c}, 0x0, @in=@multicast2, 0x0, 0x0, 0x0, 0xb7, 0x7, 0xfffffffe}}, 0xe8) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x1c) 2.686079912s ago: executing program 4 (id=2843): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4) r2 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x1c) sendto$inet(r1, &(0x7f0000000040)="e5", 0xffffffe4, 0x0, 0x0, 0x0) 2.301431172s ago: executing program 0 (id=2844): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, 0x0, 0x40000) 1.47573133s ago: executing program 0 (id=2845): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x141042, 0x1) r0 = openat$kvm(0xffffff9c, &(0x7f0000000540), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xa0}, 0x2080) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0xd40, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="7b87f20f", @ANYRES64=r6], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1.309195128s ago: executing program 2 (id=2846): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140), 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(r3, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r3, &(0x7f0000000180), 0x400008a, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) getsockopt$sock_int(r3, 0x1, 0x6, 0x0, 0x0) r4 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="020a000002"], 0x10}}, 0x0) close(r4) mount(&(0x7f0000000180)=@nullb, &(0x7f0000000240)='./cgroup\x00', &(0x7f0000000040)='xfs\x00', 0x800049, &(0x7f00000001c0)='discard') socket$inet_udp(0x2, 0x2, 0x0) 1.299525032s ago: executing program 3 (id=2847): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf2502000000080001", @ANYRES32=r3], 0x1c}}, 0x840) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB='@\x00'], 0x7) 1.12807203s ago: executing program 3 (id=2848): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = fanotify_init(0xf00, 0x1000) fanotify_mark(r4, 0x105, 0x10000839, r3, 0x0) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000080)={0x20, 0x8000000000000009, 0x0, {0x0, 0x8}}, 0x20) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000001000/0x4000)=nil, 0x3) syz_emit_ethernet(0x34, &(0x7f00000000c0)=ANY=[], 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r6, 0x4018aebd, &(0x7f00000000c0)={0x400002, 0xffffffffffffffff, 0x1}) 1.125565838s ago: executing program 4 (id=2849): syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@newtaction={0xf0, 0x30, 0x1, 0xe501, 0x0, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x30, 0x1, {0x0, 0x81000000, 0x800, 0x0, 0x0, {0x0, 0x1}, {}, 0x8001}}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x0, 0x0, 0x0, 0x400000, {0x0, 0x0, 0x0, 0x0, 0xffff}, {0x4}}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0xf0}}, 0x0) 245.840914ms ago: executing program 2 (id=2850): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setrlimit(0xe, &(0x7f0000000380)={0x4, 0x3}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x3) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000040)=0x1) syz_usb_connect(0x0, 0x24, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000fb51f210cf1b400b85780000000109021200010100c00009042100000e0100"], 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) r3 = getpid() syz_pidfd_open(r3, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x22883, 0x0) r4 = syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x52}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000005, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mount_setattr(0xffffffffffffffff, 0x0, 0x9500, 0x0, 0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x4110}, 0x1}) io_uring_enter(r4, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=ANY=[@ANYBLOB="4000000010e20204020000000000000000000400", @ANYRES32=0x0, @ANYBLOB="0003000000000000200012800b00010067656e6576650000100002800400060008000200ac1e0101"], 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x8044) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3f, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) fsopen(&(0x7f00000001c0)='devtmpfs\x00', 0x1) r9 = syz_open_dev$usbfs(&(0x7f0000000280), 0x401, 0x400) ioctl$USBDEVFS_CONTROL(r9, 0xc0185500, &(0x7f0000000340)={0x4, 0x1, 0x2, 0xfffd, 0x30, 0x8001, &(0x7f00000002c0)="c5ae657a59f801b62198ad4d7ffc795f0596cc17ae5404b5f1d05e8533762f9a0686daa3aef7a9cf3f4a87170a5bf5ac"}) 160.158537ms ago: executing program 3 (id=2851): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@nfs_export_on}, {@xino_auto}], [], 0x2c}) 65.971646ms ago: executing program 0 (id=2852): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000034276d20402003c68e01000000010902120001000000000904"], 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0/file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000240), 0x0, 0x0) umount2(&(0x7f0000000580)='./file0\x00', 0xc) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000780)=@newtaction={0x520, 0x30, 0x400, 0x70bd29, 0x25dfdbfb, {}, [{0x50c, 0x1, [@m_mirred={0x11c, 0x4, 0x0, 0x0, {{0xb}, {0xc4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x3, 0x10000000, 0x5}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0xfffffffc, 0xffffffffffffffff, 0xfffffffb, 0x2}, 0x2, r3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0xe8c, 0xffffffffffffffff, 0x7, 0x4}, 0x4, r3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xffffb43c, 0x8000, 0x10000000, 0x8e7, 0x2}, 0x2, r3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x401, 0x4, 0x6, 0x3}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x9, 0x8, 0x6, 0x73b3d9db}, 0x2, r3}}]}, {0x2d, 0x6, "426372a1131e229aeb6680ad5bf0f1a069495c34c365e88874e103b571db2440de74e012027f4e3f0e"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_sample={0x68, 0x1a, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x1, 0x2, 0x4, 0x40}}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x8, 0x10000000, 0x1, 0x6}}]}, {0xa, 0x6, "54f0ab2dc293"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_xt={0x208, 0x12, 0x0, 0x0, {{0x7}, {0x19c, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_TARG={0x117, 0x6, {0x6, 'nat\x00', 0xf, 0xff, "d1ce5fdedff6f89b571874e25ac4d002796e58c389da3d2cb2ded12e086e20b89cbab048461e7d9c2a439189d1e32582e3316acc2f962218764adcd6dd479c61f1c5bf6f6ad0e4180ccc108125845f52580c9e98675f8dba93d26a413f0c87ff6a1438ba05742b9c1321843b99db1ef61b23db715e36f74adc3a8f874a8118f2d0a367639b1960d0c45849ed6cec6159211ce8de3ffa187787866666e622e575d090c2ae1f2e7809ab958d4f59f3c5fe2b65fd6056d311331e4fb93497f86ecc4a8f75a0b1a8df5e09db556633ae423e5f9f9bc9ed6ed019e287dab61bc10dd2a78d13fb20354b4334b5d617ee"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x8}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x8}, @TCA_IPT_INDEX={0x8, 0x3, 0xfffffffa}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x10}]}, {0x48, 0x6, "f8ccd2b547676a2d2da89d4d445adc4c9ee3d0f64b429cda0f602498acf7d5e4bc8b3bd79f0326b26194d01cfd3e2bedf8de6f4c22e310ee20f388d01d06737d5f62a772"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_skbedit={0x84, 0x18, 0x0, 0x0, {{0xc}, {0x14, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xc, 0xb}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x6}]}, {0x46, 0x6, "bb80b02dba61ee06a17f6b577b516cc5acdc50e792d1f5a40b4528317a38be996cdfcda14cac9e456034fc1df558ef945eef0ca36ec391c9388460e5758f8ee3da0c"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_xt={0xf8, 0x9, 0x0, 0x0, {{0x7}, {0x40, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_INDEX={0x8, 0x3, 0x1}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}]}, {0x92, 0x6, "f78f43766572041f4b44a729790ca5ffe106a95a2f2834722186b1c9e1e9bb7aa69ac85e1f3aaeef347ceb7f1a432d163308b127933ed877f8272ac50447c542eb08e36f9ced209b932ad9a2fab3ec0acff8bd54407bd9b6889b0277059e4c1d8334402f24e6b96e9b8f7b0c5a248d421d58d999925b5814abdd065c09950e1d2cdfe725043e289628c9ed706d21"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x520}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@gettfilter={0x2c, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r3, {0xc, 0xfff2}, {0x0, 0xfff1}, {0x2}}, [{0x8, 0xb, 0xe}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000000)=0x10000) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000080)=0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=0xffffffffffffffff, 0x4) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="463eae00ea53ac1b52cb795587f924d3bff6ded3e4ba873edd9221cd7d03067157e08eaffae859498f818737858ab5a1889c6ebb"], 0x18}}, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000001280)=ANY=[@ANYBLOB="12010003001f66088f0510660548020003010902120001049570810904008100ffffff02"], &(0x7f0000001700)={0xffffffa0, 0x0, 0x0, 0x0, 0x23}) r6 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) writev(r6, &(0x7f0000000180)=[{&(0x7f0000000040)="e26c", 0x2}], 0x1) 65.268752ms ago: executing program 4 (id=2853): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0x2}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000002}, 0x20004004) r2 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000035ffaa20cd0caf104a380102030109021b0001000010000904590201801e2a00090582"], 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) io_setup(0x18, &(0x7f0000000180)=0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000b00), 0x82, 0x0) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) io_submit(r3, 0x1, &(0x7f0000000600)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x1, 0x0, 0x2}]) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) r5 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r5, &(0x7f0000000000)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x2f}}}, 0x1e) connect$pptp(r5, &(0x7f0000000040)={0x18, 0x2, {0x2, @rand_addr=0x64010102}}, 0x1e) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000700)={0x44, &(0x7f0000000400)={0x0, 0x13, 0x1, 'W'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.579133ms ago: executing program 3 (id=2854): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000034276d20402003c68e01000000010902120001000000000904"], 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0/file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000240), 0x0, 0x0) umount2(&(0x7f0000000580)='./file0\x00', 0xc) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000780)=@newtaction={0x520, 0x30, 0x400, 0x70bd29, 0x25dfdbfb, {}, [{0x50c, 0x1, [@m_mirred={0x11c, 0x4, 0x0, 0x0, {{0xb}, {0xc4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x3, 0x10000000, 0x5}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0xfffffffc, 0xffffffffffffffff, 0xfffffffb, 0x2}, 0x2, r3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0xe8c, 0xffffffffffffffff, 0x7, 0x4}, 0x4, r3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xffffb43c, 0x8000, 0x10000000, 0x8e7, 0x2}, 0x2, r3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x401, 0x4, 0x6, 0x3}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x9, 0x8, 0x6, 0x73b3d9db}, 0x2, r3}}]}, {0x2d, 0x6, "426372a1131e229aeb6680ad5bf0f1a069495c34c365e88874e103b571db2440de74e012027f4e3f0e"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_sample={0x68, 0x1a, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x1, 0x2, 0x4, 0x40}}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x8, 0x10000000, 0x1, 0x6}}]}, {0xa, 0x6, "54f0ab2dc293"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_xt={0x208, 0x12, 0x0, 0x0, {{0x7}, {0x19c, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_TARG={0x117, 0x6, {0x6, 'nat\x00', 0xf, 0xff, "d1ce5fdedff6f89b571874e25ac4d002796e58c389da3d2cb2ded12e086e20b89cbab048461e7d9c2a439189d1e32582e3316acc2f962218764adcd6dd479c61f1c5bf6f6ad0e4180ccc108125845f52580c9e98675f8dba93d26a413f0c87ff6a1438ba05742b9c1321843b99db1ef61b23db715e36f74adc3a8f874a8118f2d0a367639b1960d0c45849ed6cec6159211ce8de3ffa187787866666e622e575d090c2ae1f2e7809ab958d4f59f3c5fe2b65fd6056d311331e4fb93497f86ecc4a8f75a0b1a8df5e09db556633ae423e5f9f9bc9ed6ed019e287dab61bc10dd2a78d13fb20354b4334b5d617ee"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x8}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x8}, @TCA_IPT_INDEX={0x8, 0x3, 0xfffffffa}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x10}]}, {0x48, 0x6, "f8ccd2b547676a2d2da89d4d445adc4c9ee3d0f64b429cda0f602498acf7d5e4bc8b3bd79f0326b26194d01cfd3e2bedf8de6f4c22e310ee20f388d01d06737d5f62a772"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_skbedit={0x84, 0x18, 0x0, 0x0, {{0xc}, {0x14, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xc, 0xb}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x6}]}, {0x46, 0x6, "bb80b02dba61ee06a17f6b577b516cc5acdc50e792d1f5a40b4528317a38be996cdfcda14cac9e456034fc1df558ef945eef0ca36ec391c9388460e5758f8ee3da0c"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_xt={0xf8, 0x9, 0x0, 0x0, {{0x7}, {0x40, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_INDEX={0x8, 0x3, 0x1}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}]}, {0x92, 0x6, "f78f43766572041f4b44a729790ca5ffe106a95a2f2834722186b1c9e1e9bb7aa69ac85e1f3aaeef347ceb7f1a432d163308b127933ed877f8272ac50447c542eb08e36f9ced209b932ad9a2fab3ec0acff8bd54407bd9b6889b0277059e4c1d8334402f24e6b96e9b8f7b0c5a248d421d58d999925b5814abdd065c09950e1d2cdfe725043e289628c9ed706d21"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x520}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@gettfilter={0x2c, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r3, {0xc, 0xfff2}, {0x0, 0xfff1}, {0x2}}, [{0x8, 0xb, 0xe}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000000)=0x10000) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000080)=0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=0xffffffffffffffff, 0x4) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="463eae00ea53ac1b52cb795587f924d3bff6ded3e4ba873edd9221cd7d03067157e08eaffae859498f818737858ab5a1889c6ebb"], 0x18}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000001280)=ANY=[@ANYBLOB="12010003001f66088f0510660548020003010902120001049570810904008100ffffff02"], &(0x7f0000001700)={0xffffffa0, 0x0, 0x0, 0x0, 0x23}) r6 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) writev(r6, &(0x7f0000000180)=[{&(0x7f0000000040)="e26c", 0x2}], 0x1) 0s ago: executing program 1 (id=2855): socket(0x10, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r0, &(0x7f000039e000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="9a01000000f800b8d58800000f23d00f21f8351000000d0f23f864640f79ea66baf80cb8c85f5480ef66bafc0cecc4c2adac17b9550200000f320f2860c7c4e11751df0f2e2d00000080b9800000c00f3235008000000f30", 0x58}], 0x1, 0x4a, 0x0, 0x0) r3 = syz_open_dev$I2C(&(0x7f0000000180), 0x19a, 0x200) ioctl$I2C_SLAVE(r3, 0x703, 0x4) openat$cuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) io_setup(0x1, &(0x7f0000000040)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000080)={0x1d0003, 0x0, {[0xffffffffffffffff, 0x0, 0x8, 0xfffffffdefffff14, 0x3, 0x10, 0xc, 0x4]}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) kernel console output (not intermixed with test programs): nt 0x8D has an invalid bInterval 0, changing to 7 [ 532.646061][ T5716] usb 2-1: config 0 interface 0 has no altsetting 0 [ 532.756985][ T5716] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 532.793038][ T5716] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 532.814304][T11674] usb 1-1: new full-speed USB device number 52 using dummy_hcd [ 532.817039][ T5716] usb 2-1: config 0 interface 0 has no altsetting 0 [ 532.993964][ T5721] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 533.050159][T11674] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 533.077035][T11674] usb 1-1: config 0 has no interface number 0 [ 533.093483][ T5716] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 533.105495][T11674] usb 1-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 533.105649][ T5716] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 533.129160][ T5716] usb 2-1: config 0 interface 0 has no altsetting 0 [ 533.137843][ T5716] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 533.149452][ T5716] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 533.155713][T11674] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 533.160827][ T5716] usb 2-1: config 0 interface 0 has no altsetting 0 [ 533.179261][ T5716] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 533.188905][ T5716] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 533.199928][ T5716] usb 2-1: config 0 interface 0 has no altsetting 0 [ 533.207816][ T5716] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 533.224282][ T5716] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 533.235829][ T5716] usb 2-1: config 0 interface 0 has no altsetting 0 [ 533.243145][ T5721] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 533.248342][T11674] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 533.257729][ T5721] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 533.276041][ T5716] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 533.286401][T11674] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 533.287734][ T5721] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 533.296391][T11674] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 533.304411][ T5716] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 533.311814][T11674] usb 1-1: Product: syz [ 533.328542][T11674] usb 1-1: SerialNumber: syz [ 533.343123][ T5721] usb 4-1: SerialNumber: syz [ 533.346830][T11674] usb 1-1: config 0 descriptor?? [ 533.352471][ T5716] usb 2-1: config 0 interface 0 has no altsetting 0 [ 533.364534][ T5716] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 533.365541][T11674] cm109 1-1:0.8: invalid payload size 0, expected 4 [ 533.376483][ T5716] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 533.392308][T11674] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input49 [ 533.401837][ T5716] usb 2-1: Product: syz [ 533.407214][ T5716] usb 2-1: Manufacturer: syz [ 533.412376][ T5716] usb 2-1: SerialNumber: syz [ 533.419143][ T5716] usb 2-1: config 0 descriptor?? [ 533.443686][ T5716] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 533.563025][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 533.669901][T11674] usb 2-1: USB disconnect, device number 64 [ 533.677882][T11674] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 533.774530][T14269] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 533.783217][T14269] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 534.039785][ T5721] cdc_ether 4-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.3-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 534.085816][T11674] usb 1-1: USB disconnect, device number 52 [ 534.104041][T11674] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 534.332445][ T29] audit: type=1400 audit(1781807608.603:553): avc: denied { write } for pid=14317 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 534.465791][ T29] audit: type=1400 audit(1781807608.743:554): avc: denied { write } for pid=14341 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 534.692995][T14286] __nla_validate_parse: 11 callbacks suppressed [ 534.693011][T14286] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2294'. [ 534.742763][ T5716] usb 4-1: USB disconnect, device number 49 [ 534.762087][ T5716] cdc_ether 4-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.3-1, CDC Ethernet Device [ 534.796530][ T29] audit: type=1400 audit(1781807609.073:555): avc: denied { read } for pid=5272 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 535.066497][ T29] audit: type=1400 audit(1781807609.343:556): avc: denied { write } for pid=14355 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 535.177491][ T29] audit: type=1400 audit(1781807609.453:557): avc: denied { write } for pid=14382 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 535.420249][ T29] audit: type=1400 audit(1781807609.684:558): avc: denied { write } for pid=14387 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 535.542074][ T29] audit: type=1400 audit(1781807609.814:559): avc: denied { write } for pid=14408 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 535.687452][T14428] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2327'. [ 535.872613][ T5716] usb 5-1: new full-speed USB device number 48 using dummy_hcd [ 536.034139][ T5716] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 536.053734][ T5716] usb 5-1: config 0 has no interface number 0 [ 536.060672][ T5716] usb 5-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 536.075609][ T5716] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 536.088794][ T5716] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 536.106775][ T5716] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 536.125905][ T5716] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 536.135952][ T5716] usb 5-1: Product: syz [ 536.141558][ T5716] usb 5-1: SerialNumber: syz [ 536.158431][ T5716] usb 5-1: config 0 descriptor?? [ 536.201397][ T5716] cm109 5-1:0.8: invalid payload size 0, expected 4 [ 536.234653][ T5716] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input50 [ 536.401609][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 536.547960][T14463] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2340'. [ 536.613226][T14421] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 536.627059][T14421] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 536.923980][ T5716] usb 5-1: USB disconnect, device number 48 [ 536.939108][ T5716] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 537.024182][T14479] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14479 comm=syz.2.2344 [ 537.691441][ T5716] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 538.021700][ T5716] usb 5-1: Using ep0 maxpacket: 32 [ 538.030916][ T5716] usb 5-1: New USB device found, idVendor=2040, idProduct=c603, bcdDevice= 1.8e [ 538.041440][ T5716] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 538.052860][ T5716] usb 5-1: config 0 descriptor?? [ 538.065917][ T5716] usb 5-1: dvb_usb_v2: found a 'Hauppauge 126xxx ATSC+' in warm state [ 538.092640][ T5716] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 538.119031][ T5716] dvbdev: DVB: registering new adapter (Hauppauge 126xxx ATSC+) [ 538.139451][ T5716] usb 5-1: media controller created [ 538.189149][ T5716] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 538.237041][ T5716] usb 5-1: selecting invalid altsetting 1 [ 538.259062][ T5716] set interface failed [ 538.259081][ T5716] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 538.290913][ T5716] error writing reg: 0xff, val: 0x00 [ 538.295556][T14490] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 538.311249][T14490] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 538.324360][T14490] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 538.350596][T14490] error writing reg: 0x1a, val: 0x1e [ 538.356817][ T5716] dvb_usb_mxl111sf 5-1:0.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 538.412033][ T5716] usb 5-1: USB disconnect, device number 49 [ 538.490552][T14525] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2360'. [ 538.827212][T14530] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2360'. [ 539.479770][ T29] audit: type=1400 audit(1781807613.746:560): avc: denied { read write } for pid=14544 comm="syz.2.2367" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 539.505737][ T29] audit: type=1400 audit(1781807613.746:561): avc: denied { open } for pid=14544 comm="syz.2.2367" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 539.509542][T14545] loop6: detected capacity change from 0 to 8 [ 539.892882][ T29] audit: type=1400 audit(1781807614.166:562): avc: denied { read write } for pid=14563 comm="syz.1.2372" name="mouse0" dev="devtmpfs" ino=987 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 539.919267][ T29] audit: type=1400 audit(1781807614.166:563): avc: denied { open } for pid=14563 comm="syz.1.2372" path="/dev/input/mouse0" dev="devtmpfs" ino=987 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 540.106428][T14572] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2376'. [ 540.190206][ T24] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 540.340181][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 540.355108][ T24] usb 2-1: config 1 has an invalid descriptor of length 173, skipping remainder of the config [ 540.366152][ T24] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 540.375174][ T24] usb 2-1: config 1 has no interface number 0 [ 540.381689][ T24] usb 2-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0xBC, changing to 0x8C [ 540.393567][ T24] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x8C has an invalid bInterval 93, changing to 7 [ 540.456039][T14579] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2377'. [ 540.678912][ T24] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x8C has invalid maxpacket 9440, setting to 1024 [ 540.693332][ T24] usb 2-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 540.702687][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.717184][ T24] usb 2-1: Product: syz [ 540.721540][ T24] usb 2-1: Manufacturer: syz [ 540.726493][ T24] usb 2-1: SerialNumber: syz [ 541.366557][T14593] binder: 14592:14593 ioctl c0306201 200000000080 returned -14 [ 541.385896][T14593] binder: 14592:14593 ioctl c0306201 2000000003c0 returned -14 [ 541.559976][ T5716] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 541.719567][ T5716] usb 4-1: Using ep0 maxpacket: 32 [ 541.730846][ T5716] usb 4-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 541.740335][ T5716] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 541.747458][ T5622] usb 2-1: USB disconnect, device number 65 [ 541.757704][ T5716] usb 4-1: config 0 descriptor?? [ 541.770008][ T5716] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 542.717916][ T5716] gspca_nw80x: reg_r err -71 [ 542.730520][ T5716] nw80x 4-1:0.0: probe with driver nw80x failed with error -71 [ 542.747591][ T5716] usb 4-1: USB disconnect, device number 50 [ 542.771542][T14648] tmpfs: Bad value for 'mpol' [ 542.776441][ T29] audit: type=1400 audit(1781807617.047:564): avc: denied { mounton } for pid=14646 comm="syz.0.2401" path="/syzcgroup/unified/syz0" dev="cgroup2" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 543.506439][T14677] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2410'. [ 544.205167][T14697] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 544.512480][ T5716] usb 1-1: new low-speed USB device number 53 using dummy_hcd [ 544.568090][ T24] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 544.641058][T14707] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 544.652269][T14707] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 544.709069][ T5716] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 544.716643][ T5716] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 544.728165][ T5716] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 544.740757][ T5716] usb 1-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 544.753051][ T5716] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 544.770719][ T5716] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 544.783155][ T5716] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 544.797289][ T5716] usb 1-1: config 168 interface 0 has no altsetting 0 [ 544.807617][ T5716] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 544.816137][ T5716] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 544.827687][ T5716] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 544.838998][ T5716] usb 1-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 544.851322][ T5716] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 544.862711][ T5716] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 544.874095][ T5716] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 544.887871][ T5716] usb 1-1: config 168 interface 0 has no altsetting 0 [ 544.895385][ T5716] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 544.903034][ T5716] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 544.914295][ T5716] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 544.965102][ T5716] usb 1-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 544.970231][T14716] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2423'. [ 544.987454][ T5716] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 545.017789][ T5716] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 545.030596][ T29] audit: type=1400 audit(1781807619.298:565): avc: denied { listen } for pid=14717 comm="syz.4.2424" lport=52423 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 545.057756][ T5716] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 545.073851][ T5716] usb 1-1: config 168 interface 0 has no altsetting 0 [ 545.078897][ T5622] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 545.081158][ T29] audit: type=1326 audit(1781807619.308:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14717 comm="syz.4.2424" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17ea39ce59 code=0x7ffc0000 [ 545.125737][ T29] audit: type=1326 audit(1781807619.308:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14717 comm="syz.4.2424" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17ea39ce59 code=0x7ffc0000 [ 545.157281][ T29] audit: type=1326 audit(1781807619.308:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14717 comm="syz.4.2424" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f17ea39ce59 code=0x7ffc0000 [ 545.183999][ T5716] usb 1-1: string descriptor 0 read error: -22 [ 545.190487][ T5716] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 545.200938][ T5716] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 545.209921][ T29] audit: type=1326 audit(1781807619.308:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14717 comm="syz.4.2424" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17ea39ce59 code=0x7ffc0000 [ 545.244015][ T5716] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 545.267831][ T29] audit: type=1326 audit(1781807619.308:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14717 comm="syz.4.2424" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17ea39ce59 code=0x7ffc0000 [ 545.294876][ T29] audit: type=1326 audit(1781807619.308:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14717 comm="syz.4.2424" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17ea39ce59 code=0x7ffc0000 [ 545.303912][ T5622] usb 4-1: Using ep0 maxpacket: 32 [ 545.323133][ T29] audit: type=1326 audit(1781807619.308:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14717 comm="syz.4.2424" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17ea39ce59 code=0x7ffc0000 [ 545.363319][ T5622] usb 4-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 545.374062][ T5622] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 545.375176][ T29] audit: type=1326 audit(1781807619.368:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14717 comm="syz.4.2424" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17ea39ce59 code=0x7ffc0000 [ 545.395069][ T5622] usb 4-1: config 0 descriptor?? [ 545.409709][ T5721] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 545.415189][T14728] FAULT_INJECTION: forcing a failure. [ 545.415189][T14728] name failslab, interval 1, probability 0, space 0, times 0 [ 545.450824][ T5622] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 545.461928][T14728] CPU: 0 UID: 0 PID: 14728 Comm: syz.2.2427 Not tainted syzkaller #0 PREEMPT(full) [ 545.461951][T14728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 545.461958][T14728] Call Trace: [ 545.461963][T14728] [ 545.461968][T14728] dump_stack_lvl+0x100/0x190 [ 545.461983][T14728] should_fail_ex.cold+0x5/0xa [ 545.461995][T14728] ? fs_reclaim_acquire+0x70/0x100 [ 545.462012][T14728] ? tomoyo_realpath_from_path+0xb6/0x690 [ 545.462027][T14728] should_failslab+0xc2/0x120 [ 545.462042][T14728] __kmalloc_noprof+0xe0/0x840 [ 545.462053][T14728] ? kfree+0x1e5/0x6c0 [ 545.462064][T14728] tomoyo_realpath_from_path+0xb6/0x690 [ 545.462081][T14728] tomoyo_path_number_perm+0x23c/0x580 [ 545.462093][T14728] ? tomoyo_path_number_perm+0x22e/0x580 [ 545.462105][T14728] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 545.462120][T14728] ? preempt_count_add+0x76/0x150 [ 545.462133][T14728] ? rcu_is_watching+0x12/0xc0 [ 545.462145][T14728] ? __fget_files+0x215/0x3d0 [ 545.462155][T14728] ? hook_file_ioctl_common+0x149/0x410 [ 545.462165][T14728] ? lock_release+0x24d/0x310 [ 545.462175][T14728] ? __fget_files+0x21f/0x3d0 [ 545.462185][T14728] security_file_ioctl+0xd3/0x230 [ 545.462199][T14728] __x64_sys_ioctl+0xb7/0x210 [ 545.462213][T14728] do_syscall_64+0x115/0x870 [ 545.462226][T14728] ? clear_bhb_loop+0x40/0x90 [ 545.462237][T14728] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 545.462248][T14728] RIP: 0033:0x7fdd8299ce59 [ 545.462256][T14728] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 545.462266][T14728] RSP: 002b:00007fdd8385c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 545.462277][T14728] RAX: ffffffffffffffda RBX: 00007fdd82c15fa0 RCX: 00007fdd8299ce59 [ 545.462283][T14728] RDX: 0000000000000000 RSI: 00000000c00c4d04 RDI: 0000000000000004 [ 545.462289][T14728] RBP: 00007fdd8385c090 R08: 0000000000000000 R09: 0000000000000000 [ 545.462295][T14728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 545.462301][T14728] R13: 00007fdd82c16038 R14: 00007fdd82c15fa0 R15: 00007fff46bca068 [ 545.462314][T14728] [ 545.462320][T14728] ERROR: Out of memory at tomoyo_realpath_from_path. [ 545.627486][ T5721] usb 2-1: Using ep0 maxpacket: 16 [ 545.690298][ T5721] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 545.703357][ T5721] usb 2-1: config 0 interface 0 has no altsetting 0 [ 545.712592][ T5721] usb 2-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 545.721943][ T5721] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 545.730778][ T5721] usb 2-1: Product: syz [ 545.747223][ T5721] usb 2-1: Manufacturer: syz [ 545.756282][ T5705] usb 1-1: USB disconnect, device number 53 [ 545.775501][ T5721] usb 2-1: SerialNumber: syz [ 545.814440][ T5721] usb 2-1: config 0 descriptor?? [ 546.031343][ T5721] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input52 [ 546.076583][T14741] fuse: Bad value for 'fd' [ 546.297176][ T5721] rc_core: IR keymap rc-imon-pad not found [ 546.303081][ T5721] Registered IR keymap rc-empty [ 546.308403][ T5721] imon 2-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 546.318687][ T5721] imon 2-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 546.449273][T14721] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2425'. [ 546.498274][ T5721] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 546.513646][ T5721] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input53 [ 546.528195][ T5721] imon 2-1:0.0: iMON device (15c2:0041, intf0) on usb<2:66> initialized [ 546.558581][ T5622] gspca_nw80x: reg_w err -71 [ 546.566909][ T5622] nw80x 4-1:0.0: probe with driver nw80x failed with error -71 [ 546.599459][ T5622] usb 4-1: USB disconnect, device number 51 [ 546.629189][T14752] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2434'. [ 546.730343][ C1] imon 2-1:0.0: imon imon_incoming_packet: invalid incoming packet size (len = 3, intf0) [ 546.743062][T14756] kvm: emulating exchange as write [ 547.197268][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 547.197459][T11674] usb 2-1: USB disconnect, device number 66 [ 547.210818][T14768] XFS (nullb0): Invalid superblock magic number [ 547.283102][T14777] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14777 comm=syz.2.2440 [ 547.322938][T14781] (syz.3.2442,14781,0):ocfs2_get_sector:1713 ERROR: status = -5 [ 547.331958][T14781] (syz.3.2442,14781,0):ocfs2_sb_probe:753 ERROR: status = -5 [ 547.331986][T14781] (syz.3.2442,14781,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 547.332007][T14781] (syz.3.2442,14781,0):ocfs2_fill_super:1177 ERROR: status = -5 [ 547.411389][T14781] CUSE: unknown device info "" [ 547.422698][T14781] CUSE: unknown device info "" [ 547.427932][T14781] CUSE: unknown device info "" [ 547.432944][T14781] CUSE: unknown device info "" [ 547.439158][T14781] CUSE: unknown device info "ÿ" [ 547.444415][T14781] CUSE: zero length info key specified [ 547.517518][T14790] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2446'. [ 547.706501][T11674] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 548.303245][T14800] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.2449'. [ 548.396067][T11674] usb 4-1: Using ep0 maxpacket: 32 [ 548.576021][ T5705] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 548.666033][ T5721] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 548.853218][ T5721] usb 5-1: Using ep0 maxpacket: 32 [ 548.901271][ T5721] usb 5-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 548.948112][ T5721] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 548.964690][T14811] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14811 comm=syz.2.2454 [ 549.119955][ T5721] usb 5-1: config 0 descriptor?? [ 549.175402][ T5721] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 549.262640][T11674] usb 4-1: config 0 has an invalid interface number: 35 but max is 0 [ 549.566370][T11674] usb 4-1: config 0 has no interface number 0 [ 549.572536][T11674] usb 4-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 549.588064][T11674] usb 4-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 549.599617][T11674] usb 4-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 549.609034][T11674] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 549.617155][T11674] usb 4-1: Product: syz [ 549.621414][T11674] usb 4-1: Manufacturer: syz [ 549.626674][T11674] usb 4-1: SerialNumber: syz [ 549.638196][T11674] usb 4-1: config 0 descriptor?? [ 549.648835][ T5705] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 549.658152][ T5705] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 549.667900][ T5705] usb 2-1: config 0 descriptor?? [ 549.762783][T14824] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2458'. [ 549.845480][T11674] radio-si470x 4-1:0.35: this is not a si470x device. [ 549.877719][T11674] radio-raremono 4-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 549.900737][ T24] usb 2-1: USB disconnect, device number 67 [ 550.226448][ T5721] gspca_nw80x: reg_w err -71 [ 550.231186][ T5721] nw80x 5-1:0.0: probe with driver nw80x failed with error -71 [ 550.242284][ T5721] usb 5-1: USB disconnect, device number 50 [ 550.248455][ T29] kauditd_printk_skb: 32 callbacks suppressed [ 550.248472][ T29] audit: type=1400 audit(1781807624.521:606): avc: denied { getopt } for pid=14848 comm="syz.2.2467" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 550.280760][T11674] radio-raremono 4-1:0.35: raremono_cmd_main failed (-71) [ 550.298159][T11674] radio-raremono 4-1:0.35: V4L2 device registered as radio48 [ 550.335621][T11674] usb 4-1: USB disconnect, device number 52 [ 550.352157][T11674] radio-raremono 4-1:0.35: Thanko's Raremono disconnected [ 550.369314][T14855] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2469'. [ 550.399144][T14857] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2470'. [ 550.478210][T14865] FAULT_INJECTION: forcing a failure. [ 550.478210][T14865] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 550.498664][T14865] CPU: 1 UID: 0 PID: 14865 Comm: syz.3.2473 Not tainted syzkaller #0 PREEMPT(full) [ 550.498691][T14865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 550.498701][T14865] Call Trace: [ 550.498707][T14865] [ 550.498713][T14865] dump_stack_lvl+0x100/0x190 [ 550.498737][T14865] should_fail_ex.cold+0x5/0xa [ 550.498759][T14865] _copy_from_iter+0x1f4/0x1690 [ 550.498780][T14865] ? __pfx__copy_from_iter+0x10/0x10 [ 550.498796][T14865] ? putname+0xb1/0x110 [ 550.498813][T14865] ? _parse_integer_limit+0x17f/0x1d0 [ 550.498836][T14865] ? _kstrtoull+0x13c/0x1f0 [ 550.498856][T14865] ? __pfx__kstrtoull+0x10/0x10 [ 550.498878][T14865] tun_get_user+0x265/0x3c20 [ 550.498900][T14865] ? kstrtouint+0xdf/0x130 [ 550.498930][T14865] ? __pfx_tun_get_user+0x10/0x10 [ 550.498951][T14865] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 550.498974][T14865] ? tun_get+0x191/0x370 [ 550.498991][T14865] ? rcu_is_watching+0x12/0xc0 [ 550.499013][T14865] ? tun_get+0x191/0x370 [ 550.499029][T14865] ? lock_release+0x24d/0x310 [ 550.499045][T14865] tun_chr_write_iter+0xdc/0x200 [ 550.499064][T14865] vfs_write+0x6ac/0x1050 [ 550.499086][T14865] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 550.499106][T14865] ? __pfx_vfs_write+0x10/0x10 [ 550.499133][T14865] ? lock_release+0x24d/0x310 [ 550.499153][T14865] ksys_write+0x12a/0x250 [ 550.499176][T14865] ? __pfx_ksys_write+0x10/0x10 [ 550.499202][T14865] ? rcu_is_watching+0x12/0xc0 [ 550.499224][T14865] do_syscall_64+0x115/0x870 [ 550.499245][T14865] ? clear_bhb_loop+0x40/0x90 [ 550.499264][T14865] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 550.499281][T14865] RIP: 0033:0x7ff7ccf9ce59 [ 550.499296][T14865] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 550.499313][T14865] RSP: 002b:00007ff7cdec4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 550.499331][T14865] RAX: ffffffffffffffda RBX: 00007ff7cd215fa0 RCX: 00007ff7ccf9ce59 [ 550.499343][T14865] RDX: 0000000000000ffe RSI: 00002000000000c0 RDI: 0000000000000003 [ 550.499353][T14865] RBP: 00007ff7cdec4090 R08: 0000000000000000 R09: 0000000000000000 [ 550.499363][T14865] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 550.499373][T14865] R13: 00007ff7cd216038 R14: 00007ff7cd215fa0 R15: 00007ffc6d7d6798 [ 550.499389][T14865] [ 550.875031][ T5622] usb 1-1: new full-speed USB device number 54 using dummy_hcd [ 551.093852][ T5622] usb 1-1: config index 0 descriptor too short (expected 6427, got 27) [ 551.102314][ T5622] usb 1-1: config 0 has an invalid interface number: 255 but max is 0 [ 551.131053][ T5622] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 551.151340][ T5622] usb 1-1: config 0 has no interface number 0 [ 551.159279][ T5622] usb 1-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 551.182525][ T5622] usb 1-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 551.214849][ T5622] usb 1-1: config 0 interface 255 has no altsetting 0 [ 551.221835][ T5622] usb 1-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 551.266995][ T5622] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 551.278975][ T5622] usb 1-1: config 0 descriptor?? [ 551.705980][T11711] Bluetooth: hci5: Frame reassembly failed (-84) [ 551.721630][T11711] Bluetooth: hci5: Frame reassembly failed (-84) [ 551.768979][T14896] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2483'. [ 552.058018][T14900] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2484'. [ 553.028701][ T24] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 553.225595][ T24] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 553.261133][ T24] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7 [ 553.316049][ T24] usb 3-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 553.326222][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 553.338144][ T24] usb 3-1: Product: syz [ 553.342404][ T24] usb 3-1: Manufacturer: syz [ 553.347474][ T24] usb 3-1: SerialNumber: syz [ 553.558407][T14945] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2499'. [ 553.568697][T14945] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2499'. [ 553.582014][T14945] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2499'. [ 553.593152][T14945] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2499'. [ 553.603059][T14945] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2499'. [ 553.613022][T14945] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2499'. [ 553.623728][T14945] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2499'. [ 553.633705][T14945] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2499'. [ 553.773396][ T5621] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 553.779662][ T50] Bluetooth: hci5: command 0x1003 tx timeout [ 553.807449][ T5721] usb 1-1: USB disconnect, device number 54 [ 555.724225][ T24] usb 3-1: Can't get UAC3 power state for id 10 [ 555.754330][ T24] usb 3-1: 2:0: cannot get min/max values for control 2 (id 2) [ 555.765382][T14985] fuse: Unknown parameter 'f' [ 555.775061][ T24] usb 3-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 555.788350][ T24] usb 3-1: [2] FU [Generic Out Playback Volume] ch = 1, val = 0/1/1 [ 556.090891][ T24] usb 3-1: USB disconnect, device number 72 [ 556.960384][ T29] audit: type=1400 audit(1781807887.237:607): avc: denied { setopt } for pid=15018 comm="syz.0.2522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 557.435894][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 557.720750][T15037] netlink: 'syz.3.2526': attribute type 7 has an invalid length. [ 557.741581][T15037] : entered promiscuous mode [ 557.962229][ T10] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 558.011974][ T24] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 558.059544][T15042] loop5: detected capacity change from 0 to 4095 [ 558.082750][ T5721] usb 3-1: new full-speed USB device number 73 using dummy_hcd [ 558.112858][ T10] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 558.125064][ T10] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7 [ 558.139617][ T10] usb 2-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 558.149152][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.157349][ T10] usb 2-1: Product: syz [ 558.161817][ T10] usb 2-1: Manufacturer: syz [ 558.166473][ T10] usb 2-1: SerialNumber: syz [ 558.172496][ T24] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 558.182598][ T24] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 558.194451][ T24] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 558.206130][ T24] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 558.215688][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.224153][ T24] usb 5-1: Product: syz [ 558.228434][ T24] usb 5-1: Manufacturer: syz [ 558.233688][ T24] usb 5-1: SerialNumber: syz [ 558.238389][ T29] audit: type=1400 audit(1781807888.518:608): avc: denied { append } for pid=15041 comm="syz.0.2529" name="sg0" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 558.265432][ T5721] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 558.274533][ T24] usb 5-1: config 0 descriptor?? [ 558.279936][ T5721] usb 3-1: config 0 has no interface number 0 [ 558.286487][T15029] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 558.294507][ T5721] usb 3-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 558.306362][T15029] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 558.313936][ T5721] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 558.314513][ T24] usb 5-1: ucan: probing device on interface #0 [ 558.332943][ T5721] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 558.344424][ T5721] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 558.353944][ T5721] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 558.362307][ T5721] usb 3-1: Product: syz [ 558.366542][ T5721] usb 3-1: SerialNumber: syz [ 558.373966][ T5721] usb 3-1: config 0 descriptor?? [ 558.394301][ T5721] cm109 3-1:0.8: invalid payload size 0, expected 4 [ 558.403788][ T5721] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input55 [ 558.619487][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 558.710922][ T5622] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 558.821360][T15036] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 558.829949][T15036] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 558.871078][ T5622] usb 4-1: Using ep0 maxpacket: 16 [ 558.889266][ T5622] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 558.902284][ T5622] usb 4-1: config 0 interface 0 has no altsetting 0 [ 558.921432][ T5622] usb 4-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 558.932634][ T5622] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.950962][ T5622] usb 4-1: Product: syz [ 558.952188][ T24] ucan 5-1:0.0: probe with driver ucan failed with error -71 [ 559.010294][ T24] usb 5-1: USB disconnect, device number 51 [ 559.040766][ T5622] usb 4-1: Manufacturer: syz [ 559.094314][ T5622] usb 4-1: SerialNumber: syz [ 559.157631][ T5622] usb 4-1: config 0 descriptor?? [ 559.188051][T11674] usb 3-1: USB disconnect, device number 73 [ 559.195035][T11674] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 559.559493][ T5622] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input56 [ 559.623481][T15058] __nla_validate_parse: 2 callbacks suppressed [ 559.623495][T15058] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2534'. [ 559.805544][T15063] fuse: Bad value for 'fd' [ 559.955708][T15064] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2535'. [ 559.968237][T15064] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2535'. [ 559.980169][T15064] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2535'. [ 559.990890][T15064] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2535'. [ 560.000816][T15064] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2535'. [ 560.011290][T15064] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2535'. [ 560.021438][T15064] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2535'. [ 560.031591][T15064] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2535'. [ 560.041729][T15064] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2535'. [ 560.136837][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 560.180224][ T5622] rc_core: IR keymap rc-imon-pad not found [ 560.186564][ T5622] Registered IR keymap rc-empty [ 560.191612][ T5622] imon 4-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 560.210911][ T29] audit: type=1400 audit(1781807890.499:609): avc: denied { bind } for pid=15069 comm="syz.2.2538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 560.473980][ T5622] imon 4-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 560.484136][ T5622] imon:send_packet: packet tx failed (-71) [ 560.515408][ T5622] imon 4-1:0.0: remote input dev register failed [ 560.530826][ T5622] imon 4-1:0.0: imon_init_intf0: rc device setup failed [ 560.546071][ T5622] imon 4-1:0.0: unable to initialize intf0, err 0 [ 560.637944][ T10] usb 2-1: Can't get UAC3 power state for id 10 [ 560.665377][ T5622] imon:imon_probe: failed to initialize context! [ 560.685001][ T10] usb 2-1: 2:0: cannot get min/max values for control 2 (id 2) [ 560.694304][ T5622] imon 4-1:0.0: unable to register, err -19 [ 560.707257][ T10] usb 2-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 560.737449][ T5622] usb 4-1: USB disconnect, device number 53 [ 560.754455][ T10] usb 2-1: [2] FU [Generic Out Playback Volume] ch = 1, val = 0/1/1 [ 560.834001][ T10] usb 2-1: USB disconnect, device number 68 [ 561.832891][T15111] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 561.919350][ T5716] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 561.999319][ T5622] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 562.039981][T15115] fuse: Bad value for 'fd' [ 562.089402][ T5716] usb 2-1: Using ep0 maxpacket: 8 [ 562.123621][ T5716] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 562.182739][ T5716] usb 2-1: config 0 has no interface number 0 [ 562.215803][ T5716] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 562.246138][ T5716] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 562.260891][ T5622] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 562.269816][ T5716] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 562.299902][ T5622] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 562.303124][ T5716] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 562.310225][ T5622] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 562.337289][ T5622] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 562.346395][ T5716] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 562.346419][ T5716] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 562.363695][ T5622] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 562.364026][ T5716] usb 2-1: config 0 descriptor?? [ 562.377474][ T5622] usb 4-1: config 0 descriptor?? [ 562.399929][ T5716] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 562.675106][T11674] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 562.752412][T15121] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 562.752412][T15121] Please contact the netfilter-devel mailing list or update your nftables rules. [ 562.834995][ T5622] plantronics 0003:047F:FFFF.003B: reserved main item tag 0xd [ 562.849214][ T5622] plantronics 0003:047F:FFFF.003B: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 562.865295][T11674] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 562.881210][ T10] usb 2-1: USB disconnect, device number 69 [ 562.881246][ C0] ldusb 2-1:0.55: usb_submit_urb failed (-19) [ 562.899075][T11674] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7 [ 562.932835][ T10] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 562.955481][T11674] usb 1-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 562.974416][T11674] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 562.988054][T11674] usb 1-1: Product: syz [ 562.994021][T11674] usb 1-1: Manufacturer: syz [ 563.003586][T11674] usb 1-1: SerialNumber: syz [ 563.060815][ T5622] usb 4-1: USB disconnect, device number 54 [ 563.218700][ T5716] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 563.369872][ T5716] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 563.380012][ T5716] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 563.389400][ T5716] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 563.399216][ T5716] usb 3-1: config 0 descriptor?? [ 563.412341][ T5716] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 563.876909][T15141] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 563.894175][T15141] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 565.490906][T11674] usb 1-1: Can't get UAC3 power state for id 10 [ 565.549785][T11674] usb 1-1: 2:0: cannot get min/max values for control 2 (id 2) [ 565.581507][T11674] usb 1-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 565.600145][ T29] audit: type=1400 audit(1781807895.892:610): avc: denied { bind } for pid=15172 comm="syz.1.2565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 565.604492][T11674] usb 1-1: [2] FU [Generic Out Playback Volume] ch = 1, val = 0/1/1 [ 565.676431][T11674] usb 1-1: USB disconnect, device number 55 [ 565.767489][T15178] __nla_validate_parse: 11 callbacks suppressed [ 565.767507][T15178] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2565'. [ 565.799241][T15178] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 566.103212][T13832] udevd[13832]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 566.131493][ T5622] usb 3-1: USB disconnect, device number 74 [ 566.175483][T15181] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2566'. [ 566.185980][T15181] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2566'. [ 566.195067][T15181] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2566'. [ 566.204105][T15181] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2566'. [ 566.213191][T15181] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2566'. [ 566.222235][T15181] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2566'. [ 566.231328][T15181] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2566'. [ 566.240397][T15181] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2566'. [ 566.249490][T15181] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2566'. [ 566.788480][T15191] XFS (nullb0): Invalid superblock magic number [ 567.106746][ T5622] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 567.160693][T15202] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 567.278112][ T5622] usb 1-1: Using ep0 maxpacket: 16 [ 567.290643][ T5622] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 567.322296][ T5622] usb 1-1: config 0 interface 0 has no altsetting 0 [ 567.330126][T15222] loop5: detected capacity change from 0 to 4095 [ 567.341230][ T5622] usb 1-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 567.364737][ T5622] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 567.382917][ T5622] usb 1-1: Product: syz [ 567.392515][ T5622] usb 1-1: Manufacturer: syz [ 567.403102][ T5622] usb 1-1: SerialNumber: syz [ 567.419742][ T5622] usb 1-1: config 0 descriptor?? [ 567.716598][ T5716] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 567.867830][ T5622] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input59 [ 567.877669][ T5716] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 567.903653][ T5716] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 567.918237][ T5716] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 567.942489][ T5716] usb 4-1: config 0 descriptor?? [ 567.960052][ T5716] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 568.146223][ T5622] rc_core: IR keymap rc-imon-pad not found [ 568.187053][ T5622] Registered IR keymap rc-empty [ 568.195101][ T5622] imon 1-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 568.206081][ T5622] imon 1-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 568.607971][ C0] imon 1-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 568.615080][ T5622] imon:send_packet: packet tx failed (-71) [ 568.627610][T15245] XFS (nullb0): Invalid superblock magic number [ 568.638009][ T5622] imon 1-1:0.0: remote input dev register failed [ 568.657984][ T5622] imon 1-1:0.0: imon_init_intf0: rc device setup failed [ 568.683410][ T5622] imon 1-1:0.0: unable to initialize intf0, err 0 [ 568.704247][ T5622] imon:imon_probe: failed to initialize context! [ 568.723705][T15257] FAULT_INJECTION: forcing a failure. [ 568.723705][T15257] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 568.736881][ T5622] imon 1-1:0.0: unable to register, err -19 [ 568.745472][ T5622] usb 1-1: USB disconnect, device number 56 [ 568.767284][T15257] CPU: 1 UID: 0 PID: 15257 Comm: syz.1.2585 Not tainted syzkaller #0 PREEMPT(full) [ 568.767301][T15257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 568.767308][T15257] Call Trace: [ 568.767312][T15257] [ 568.767316][T15257] dump_stack_lvl+0x100/0x190 [ 568.767333][T15257] should_fail_ex.cold+0x5/0xa [ 568.767347][T15257] _copy_from_user+0x2e/0xd0 [ 568.767358][T15257] copy_msghdr_from_user+0x9f/0x4c0 [ 568.767372][T15257] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 568.767388][T15257] ? kstrtouint_from_user+0x13c/0x1d0 [ 568.767404][T15257] ___sys_sendmsg+0x106/0x1e0 [ 568.767416][T15257] ? __pfx____sys_sendmsg+0x10/0x10 [ 568.767428][T15257] ? get_pid_task+0x106/0x250 [ 568.767444][T15257] ? rcu_is_watching+0x12/0xc0 [ 568.767462][T15257] __sys_sendmsg+0x160/0x210 [ 568.767477][T15257] ? __pfx___sys_sendmsg+0x10/0x10 [ 568.767495][T15257] ? rcu_is_watching+0x12/0xc0 [ 568.767508][T15257] do_syscall_64+0x115/0x870 [ 568.767522][T15257] ? clear_bhb_loop+0x40/0x90 [ 568.767534][T15257] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 568.767545][T15257] RIP: 0033:0x7f473299ce59 [ 568.767555][T15257] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 568.767565][T15257] RSP: 002b:00007f4733793028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 568.767577][T15257] RAX: ffffffffffffffda RBX: 00007f4732c15fa0 RCX: 00007f473299ce59 [ 568.767584][T15257] RDX: 0000000000028000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 568.767591][T15257] RBP: 00007f4733793090 R08: 0000000000000000 R09: 0000000000000000 [ 568.767597][T15257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 568.767603][T15257] R13: 00007f4732c16038 R14: 00007f4732c15fa0 R15: 00007ffe6869c808 [ 568.767613][T15257] [ 569.265632][ T5705] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 569.465009][ T5705] usb 5-1: Using ep0 maxpacket: 16 [ 569.471677][ T5705] usb 5-1: config 1 has an invalid interface number: 33 but max is 0 [ 569.480212][ T5705] usb 5-1: config 1 has no interface number 0 [ 569.486896][ T5705] usb 5-1: New USB device found, idVendor=1bcf, idProduct=0b40, bcdDevice=78.85 [ 569.495997][ T5705] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 569.507114][ T5705] uvcvideo 5-1:1.33: Found UVC 0.00 device (1bcf:0b40) [ 569.514924][ T5705] uvcvideo 5-1:1.33: Forcing UVC version to 1.0a [ 569.521453][ T5705] uvcvideo 5-1:1.33: No valid video chain found. [ 569.527991][T11674] usb 2-1: new full-speed USB device number 70 using dummy_hcd [ 569.966372][T11674] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 569.974464][T11674] usb 2-1: config 0 has no interface number 0 [ 569.980669][T11674] usb 2-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 569.992298][T11674] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 570.058548][T11674] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 570.072529][T11674] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 570.081890][T11674] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 570.090848][T11674] usb 2-1: Product: syz [ 570.095411][T11674] usb 2-1: SerialNumber: syz [ 570.102733][T11674] usb 2-1: config 0 descriptor?? [ 570.200600][T11674] cm109 2-1:0.8: invalid payload size 0, expected 4 [ 570.208463][T11674] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input61 [ 570.406900][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 570.490939][ T24] usb 4-1: USB disconnect, device number 56 [ 570.565033][T11674] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 570.608800][T15270] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 570.626736][T15270] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 570.649489][ T5622] usb 2-1: USB disconnect, device number 70 [ 570.660574][ T5622] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 570.734902][T11674] usb 1-1: Using ep0 maxpacket: 32 [ 570.746286][T11674] usb 1-1: config 0 has an invalid interface number: 89 but max is 0 [ 570.754814][T11674] usb 1-1: config 0 has no interface number 0 [ 570.761935][T11674] usb 1-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 570.772561][T11674] usb 1-1: config 0 interface 89 has no altsetting 0 [ 570.783416][T11674] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 570.798440][T11674] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 570.812185][T11674] usb 1-1: Product: syz [ 570.820413][T11674] usb 1-1: Manufacturer: syz [ 570.825425][T11674] usb 1-1: SerialNumber: syz [ 570.833750][T11674] usb 1-1: config 0 descriptor?? [ 570.848311][T11674] em28xx 1-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 570.859010][T11674] em28xx 1-1:0.89: Video interface 89 found: [ 571.018866][T15308] FAULT_INJECTION: forcing a failure. [ 571.018866][T15308] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 571.035087][T15308] CPU: 0 UID: 0 PID: 15308 Comm: syz.3.2599 Not tainted syzkaller #0 PREEMPT(full) [ 571.035112][T15308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 571.035124][T15308] Call Trace: [ 571.035129][T15308] [ 571.035136][T15308] dump_stack_lvl+0x100/0x190 [ 571.035158][T15308] should_fail_ex.cold+0x5/0xa [ 571.035180][T15308] _copy_from_user+0x2e/0xd0 [ 571.035199][T15308] copy_msghdr_from_user+0x9f/0x4c0 [ 571.035229][T15308] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 571.035251][T15308] ? kstrtouint+0xdf/0x130 [ 571.035274][T15308] ___sys_recvmsg+0xdd/0x1a0 [ 571.035294][T15308] ? __pfx____sys_recvmsg+0x10/0x10 [ 571.035322][T15308] do_recvmmsg+0x2f3/0x740 [ 571.035343][T15308] ? __pfx_do_recvmmsg+0x10/0x10 [ 571.035362][T15308] ? rcu_is_watching+0x12/0xc0 [ 571.035384][T15308] ? lock_release+0x24d/0x310 [ 571.035402][T15308] ? __mutex_unlock_slowpath+0x350/0x910 [ 571.035427][T15308] ? __fget_files+0x21f/0x3d0 [ 571.035443][T15308] __x64_sys_recvmmsg+0x22a/0x280 [ 571.035467][T15308] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 571.035495][T15308] ? rcu_is_watching+0x12/0xc0 [ 571.035517][T15308] do_syscall_64+0x115/0x870 [ 571.035537][T15308] ? clear_bhb_loop+0x40/0x90 [ 571.035556][T15308] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 571.035574][T15308] RIP: 0033:0x7ff7ccf9ce59 [ 571.035588][T15308] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 571.035605][T15308] RSP: 002b:00007ff7cdea3028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 571.035622][T15308] RAX: ffffffffffffffda RBX: 00007ff7cd216090 RCX: 00007ff7ccf9ce59 [ 571.035634][T15308] RDX: 000000000000f000 RSI: 0000200000000d00 RDI: 0000000000000003 [ 571.035644][T15308] RBP: 00007ff7cdea3090 R08: 0000000000000000 R09: 0000000000000000 [ 571.035654][T15308] R10: 0000000000010002 R11: 0000000000000246 R12: 0000000000000001 [ 571.035665][T15308] R13: 00007ff7cd216128 R14: 00007ff7cd216090 R15: 00007ffc6d7d6798 [ 571.035680][T15308] [ 571.469859][T15314] XFS (nullb0): Invalid superblock magic number [ 571.829571][T11674] em28xx 1-1:0.89: unknown em28xx chip ID (0) [ 572.050633][ T5705] usb 5-1: USB disconnect, device number 52 [ 572.100665][ T29] audit: type=1400 audit(1781807902.385:611): avc: denied { mmap_zero } for pid=15324 comm="syz.4.2602" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 572.175996][T15325] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(10) [ 572.182617][T15325] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 572.190471][T15325] vhci_hcd vhci_hcd.0: Device attached [ 572.199441][T15326] vhci_hcd: connection closed [ 572.199948][ T3470] vhci_hcd vhci_hcd.4: stop threads [ 572.200013][ T29] audit: type=1400 audit(1781807902.485:612): avc: denied { accept } for pid=15324 comm="syz.4.2602" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 572.204723][ T3470] vhci_hcd vhci_hcd.4: release socket [ 572.236218][ T3470] vhci_hcd vhci_hcd.4: disconnect device [ 572.364106][T11674] em28xx 1-1:0.89: AC97 command still being executed: not handled properly! [ 572.677809][T11674] em28xx 1-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 572.678823][T15334] tmpfs: Bad value for 'mpol' [ 572.715413][T11674] em28xx 1-1:0.89: board has no eeprom [ 572.783971][T11674] em28xx 1-1:0.89: Identified as Terratec Grabby (card=67) [ 572.799974][T11674] em28xx 1-1:0.89: analog set to bulk mode. [ 572.811531][ T5622] em28xx 1-1:0.89: Registering V4L2 extension [ 572.833351][T11674] usb 1-1: USB disconnect, device number 57 [ 572.851635][T11674] em28xx 1-1:0.89: Disconnecting em28xx [ 572.861955][ T5622] em28xx 1-1:0.89: Config register raw data: 0xffffffed [ 572.871204][ T5622] em28xx 1-1:0.89: AC97 chip type couldn't be determined [ 572.893143][ T5622] em28xx 1-1:0.89: No AC97 audio processor [ 572.920319][ T5622] usb 1-1: Decoder not found [ 572.926598][ T5622] em28xx 1-1:0.89: failed to create media graph [ 572.933397][ T5622] em28xx 1-1:0.89: V4L2 device video103 deregistered [ 572.945833][ T5622] em28xx 1-1:0.89: Registering snapshot button... [ 572.985955][ T5622] input: em28xx snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.89/input/input62 [ 573.047405][ T5622] em28xx 1-1:0.89: Remote control support is not available for this card. [ 573.073811][T11674] em28xx 1-1:0.89: Closing input extension [ 573.079793][T11674] em28xx 1-1:0.89: Deregistering snapshot button [ 573.170784][T11674] em28xx 1-1:0.89: Freeing device [ 573.439488][T15361] XFS (nullb0): Invalid superblock magic number [ 574.238122][T15391] XFS (nullb0): Invalid superblock magic number [ 574.752181][ T29] audit: type=1400 audit(1781807905.036:613): avc: denied { create } for pid=15421 comm="syz.0.2627" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 575.012796][ T5721] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 575.174775][ T5721] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 575.186098][ T5721] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7 [ 575.208385][ T5721] usb 1-1: New USB device found, idVendor=0763, idProduct=2003, bcdDevice= 0.40 [ 575.220159][ T5721] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 575.251248][ T5721] usb 1-1: Product: syz [ 575.265915][ T5721] usb 1-1: Manufacturer: syz [ 575.276752][ T5721] usb 1-1: SerialNumber: syz [ 575.945464][T15466] __nla_validate_parse: 12 callbacks suppressed [ 575.945481][T15466] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2640'. [ 575.960997][T15461] XFS (nullb0): Invalid superblock magic number [ 576.116496][ T29] audit: type=1400 audit(1781807906.407:614): avc: denied { write } for pid=15459 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 576.175860][ T5721] usb 1-1: Can't get UAC3 power state for id 10 [ 576.197604][ T29] audit: type=1400 audit(1781807906.477:615): avc: denied { write } for pid=15487 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 576.225993][ T5721] usb 1-1: 2:0: failed to get current value for ch 0 (-71) [ 576.251463][ T5721] usb 1-1: 2:0: cannot get min/max values for control 2 (id 2) [ 576.277452][ T5721] usb 1-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 576.290940][ T5721] usb 1-1: [2] FU [Generic Out Playback Volume] ch = 1, val = 0/1/1 [ 576.323885][ T5721] usb 1-1: USB disconnect, device number 58 [ 576.431237][ T5622] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 576.435916][T15502] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2645'. [ 576.790236][T10718] udevd[10718]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 576.851910][ T29] audit: type=1400 audit(1781807907.147:616): avc: denied { write } for pid=15495 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 576.904671][ T29] audit: type=1400 audit(1781807907.197:617): avc: denied { write } for pid=15512 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 576.911812][ T5622] usb 5-1: Using ep0 maxpacket: 16 [ 576.951670][ T5622] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 576.967114][ T5622] usb 5-1: config 0 interface 0 has no altsetting 0 [ 576.975508][ T5622] usb 5-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 576.985050][ T5622] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 576.994425][ T5622] usb 5-1: Product: syz [ 576.998796][ T5622] usb 5-1: Manufacturer: syz [ 577.006021][ T5622] usb 5-1: SerialNumber: syz [ 577.012283][ T5622] usb 5-1: config 0 descriptor?? [ 577.021770][ T24] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 577.114695][T15519] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2649'. [ 577.179281][T15521] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2650'. [ 577.188421][T15521] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2650'. [ 577.197821][T15521] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2650'. [ 577.206947][T15521] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2650'. [ 577.216046][T15521] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2650'. [ 577.225215][T15521] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2650'. [ 577.234289][T15521] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2650'. [ 577.250299][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 577.260621][ T24] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 577.263863][ T5622] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input63 [ 577.269911][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 577.301720][ T5721] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 577.320798][ T24] usb 4-1: config 0 descriptor?? [ 577.332915][ T24] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 577.471142][ T5721] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 577.482307][ T5721] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7 [ 577.510768][ T5721] usb 2-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 577.532369][ T5622] rc_core: IR keymap rc-imon-pad not found [ 577.545168][ T5721] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 577.546298][ T5622] Registered IR keymap rc-empty [ 577.553672][ T5721] usb 2-1: Product: syz [ 577.562579][ T5721] usb 2-1: Manufacturer: syz [ 577.568088][ T5721] usb 2-1: SerialNumber: syz [ 577.577514][ T5622] imon 5-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 577.590503][ T5622] imon 5-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 577.682046][ T5622] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 577.695471][ T5622] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input64 [ 577.707787][ T5622] imon 5-1:0.0: iMON device (15c2:0041, intf0) on usb<5:53> initialized [ 577.869188][ C0] imon 5-1:0.0: imon imon_incoming_packet: invalid incoming packet size (len = 3, intf0) [ 578.011437][ T24] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 578.051262][ T5622] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 578.069996][ C0] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 578.070616][T14711] usb 5-1: USB disconnect, device number 53 [ 578.161229][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 578.167518][ T24] usb 3-1: config 0 has an invalid interface number: 89 but max is 0 [ 578.176062][ T24] usb 3-1: config 0 has no interface number 0 [ 578.182253][ T24] usb 3-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 578.192133][ T24] usb 3-1: config 0 interface 89 has no altsetting 0 [ 578.200704][ T24] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 578.209836][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.217946][ T5622] usb 1-1: Using ep0 maxpacket: 16 [ 578.218044][ T24] usb 3-1: Product: syz [ 578.227377][ T24] usb 3-1: Manufacturer: syz [ 578.232520][ T24] usb 3-1: SerialNumber: syz [ 578.237875][ T5622] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 578.238391][ T24] usb 3-1: config 0 descriptor?? [ 578.249900][ T5622] usb 1-1: config 0 interface 0 has no altsetting 0 [ 578.258810][ T24] em28xx 3-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 578.262432][ T5622] usb 1-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 578.270956][ T24] em28xx 3-1:0.89: Video interface 89 found: [ 578.282293][ T5622] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.293660][ T5622] usb 1-1: Product: syz [ 578.297846][ T5622] usb 1-1: Manufacturer: syz [ 578.302462][ T5622] usb 1-1: SerialNumber: syz [ 578.308050][ T5622] usb 1-1: config 0 descriptor?? [ 578.521059][ T5622] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input65 [ 578.671988][T15552] FAULT_INJECTION: forcing a failure. [ 578.671988][T15552] name failslab, interval 1, probability 0, space 0, times 0 [ 578.684861][T15552] CPU: 0 UID: 0 PID: 15552 Comm: syz.4.2661 Not tainted syzkaller #0 PREEMPT(full) [ 578.684884][T15552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 578.684902][T15552] Call Trace: [ 578.684908][T15552] [ 578.684914][T15552] dump_stack_lvl+0x100/0x190 [ 578.684939][T15552] should_fail_ex.cold+0x5/0xa [ 578.684958][T15552] ? fs_reclaim_acquire+0x70/0x100 [ 578.684983][T15552] ? tomoyo_realpath_from_path+0xb6/0x690 [ 578.685008][T15552] should_failslab+0xc2/0x120 [ 578.685031][T15552] __kmalloc_noprof+0xe0/0x840 [ 578.685048][T15552] ? kfree+0x1e5/0x6c0 [ 578.685065][T15552] tomoyo_realpath_from_path+0xb6/0x690 [ 578.685091][T15552] tomoyo_path_number_perm+0x23c/0x580 [ 578.685111][T15552] ? tomoyo_path_number_perm+0x22e/0x580 [ 578.685131][T15552] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 578.685154][T15552] ? preempt_count_add+0x76/0x150 [ 578.685175][T15552] ? rcu_is_watching+0x12/0xc0 [ 578.685205][T15552] ? __fget_files+0x215/0x3d0 [ 578.685220][T15552] ? hook_file_ioctl_common+0x149/0x410 [ 578.685236][T15552] ? lock_release+0x24d/0x310 [ 578.685254][T15552] ? __fget_files+0x21f/0x3d0 [ 578.685271][T15552] security_file_ioctl+0xd3/0x230 [ 578.685293][T15552] __x64_sys_ioctl+0xb7/0x210 [ 578.685316][T15552] do_syscall_64+0x115/0x870 [ 578.685337][T15552] ? clear_bhb_loop+0x40/0x90 [ 578.685355][T15552] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 578.685372][T15552] RIP: 0033:0x7f17ea39ce59 [ 578.685386][T15552] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 578.685401][T15552] RSP: 002b:00007f17eb1e5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 578.685416][T15552] RAX: ffffffffffffffda RBX: 00007f17ea615fa0 RCX: 00007f17ea39ce59 [ 578.685427][T15552] RDX: 0000200000000300 RSI: 00000000c01864ba RDI: 0000000000000003 [ 578.685438][T15552] RBP: 00007f17eb1e5090 R08: 0000000000000000 R09: 0000000000000000 [ 578.685448][T15552] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 578.685458][T15552] R13: 00007f17ea616038 R14: 00007f17ea615fa0 R15: 00007fff75bce838 [ 578.685474][T15552] [ 578.685506][T15552] ERROR: Out of memory at tomoyo_realpath_from_path. [ 578.873409][ T24] em28xx 3-1:0.89: unknown em28xx chip ID (0) [ 578.990829][ T5622] rc_core: IR keymap rc-imon-pad not found [ 578.996754][ T5622] Registered IR keymap rc-empty [ 579.003334][ T5622] imon 1-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 579.017767][ T5622] imon 1-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 579.051277][ T5622] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 579.062950][ T5622] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input66 [ 579.082118][ T5622] imon 1-1:0.0: iMON device (15c2:0041, intf0) on usb<1:59> initialized [ 579.308989][ C0] imon 1-1:0.0: imon imon_incoming_packet: invalid incoming packet size (len = 3, intf0) [ 579.330857][ T24] em28xx 3-1:0.89: AC97 command still being executed: not handled properly! [ 579.510933][ C0] imon 1-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 579.511280][ T7383] usb 1-1: USB disconnect, device number 59 [ 579.525100][ T24] em28xx 3-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 579.533621][ T24] em28xx 3-1:0.89: board has no eeprom [ 579.590474][ T24] em28xx 3-1:0.89: Identified as Terratec Grabby (card=67) [ 579.597753][ T24] em28xx 3-1:0.89: analog set to bulk mode. [ 579.604038][T14711] em28xx 3-1:0.89: Registering V4L2 extension [ 579.628484][ T24] usb 3-1: USB disconnect, device number 75 [ 579.634547][T14711] em28xx 3-1:0.89: reading from i2c device at 0x4a failed (error=-19) [ 579.646600][T14711] em28xx 3-1:0.89: reading from i2c device at 0x48 failed (error=-19) [ 579.661111][ T24] em28xx 3-1:0.89: Disconnecting em28xx [ 579.666834][T14711] em28xx 3-1:0.89: Config register raw data: 0xffffffed [ 579.674063][T14711] em28xx 3-1:0.89: AC97 chip type couldn't be determined [ 579.681137][T14711] em28xx 3-1:0.89: No AC97 audio processor [ 579.688080][T14711] usb 3-1: Decoder not found [ 579.692872][T14711] em28xx 3-1:0.89: failed to create media graph [ 579.699132][T14711] em28xx 3-1:0.89: V4L2 device video103 deregistered [ 579.707899][T14711] em28xx 3-1:0.89: Registering snapshot button... [ 579.720928][T14711] input: em28xx snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.89/input/input67 [ 579.741631][T14711] em28xx 3-1:0.89: Remote control support is not available for this card. [ 579.750231][ T24] em28xx 3-1:0.89: Closing input extension [ 579.756873][ T24] em28xx 3-1:0.89: Deregistering snapshot button [ 579.772487][ T24] em28xx 3-1:0.89: Freeing device [ 579.780857][T14711] usb 4-1: USB disconnect, device number 57 [ 580.055483][ T5721] usb 2-1: Can't get UAC3 power state for id 10 [ 580.081442][ T5721] usb 2-1: 2:0: cannot get min/max values for control 2 (id 2) [ 580.095994][ T5721] usb 2-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 580.197394][ T5721] usb 2-1: [2] FU [Generic Out Playback Volume] ch = 1, val = 0/1/1 [ 580.226131][ T5721] usb 2-1: USB disconnect, device number 71 [ 580.259387][T10775] udevd[10775]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 580.361261][ T10] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 580.740171][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 580.753010][ T10] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 580.765664][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 580.781241][ T10] usb 5-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 580.813979][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 580.850423][ T10] usb 5-1: Product: syz [ 580.864995][ T10] usb 5-1: Manufacturer: syz [ 580.880859][ T10] usb 5-1: SerialNumber: syz [ 580.893092][ T10] usb 5-1: config 0 descriptor?? [ 580.912049][T15595] loop5: detected capacity change from 0 to 4095 [ 581.115181][ T10] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input68 [ 581.210980][ T5622] usb 3-1: new full-speed USB device number 76 using dummy_hcd [ 581.238586][T15605] netlink: 'syz.1.2679': attribute type 7 has an invalid length. [ 581.369566][ T10] rc_core: IR keymap rc-imon-pad not found [ 581.376822][ T5622] usb 3-1: config index 0 descriptor too short (expected 6427, got 27) [ 581.387311][ T10] Registered IR keymap rc-empty [ 581.392539][ T10] imon 5-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 581.412397][ T5622] usb 3-1: config 0 has an invalid interface number: 21 but max is 0 [ 581.426137][ T5622] usb 3-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 581.436721][ T10] imon 5-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 581.446676][ T5622] usb 3-1: config 0 has no interface number 0 [ 581.453286][ T5622] usb 3-1: config 0 interface 21 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 581.466996][ T5622] usb 3-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 581.476189][ T5622] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 581.490947][ T5622] usb 3-1: config 0 descriptor?? [ 581.511352][T15581] __nla_validate_parse: 15 callbacks suppressed [ 581.511367][T15581] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2670'. [ 581.543222][T15628] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2687'. [ 581.560089][T15628] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2687'. [ 581.569507][T15628] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2687'. [ 581.593172][T15628] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2687'. [ 581.606957][T15628] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2687'. [ 581.617402][T15628] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2687'. [ 581.628394][T15628] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2687'. [ 581.640080][T15628] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2687'. [ 581.649605][T14711] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 581.662716][T15628] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2687'. [ 581.682699][ C0] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 581.690544][ T10] imon:send_packet: packet tx failed (-71) [ 581.709540][ T10] imon 5-1:0.0: remote input dev register failed [ 581.718104][ T10] imon 5-1:0.0: imon_init_intf0: rc device setup failed [ 581.731759][ T403] Bluetooth: hci5: Frame reassembly failed (-84) [ 581.752341][ T10] imon 5-1:0.0: unable to initialize intf0, err 0 [ 581.758967][ T10] imon:imon_probe: failed to initialize context! [ 581.769535][ T10] imon 5-1:0.0: unable to register, err -19 [ 581.772392][T15634] overlayfs: failed to resolve './file2': -2 [ 581.837495][T14711] usb 2-1: Using ep0 maxpacket: 8 [ 582.030215][ T10] usb 5-1: USB disconnect, device number 54 [ 582.052573][T14711] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 582.087464][T14711] usb 2-1: config 0 has no interface number 0 [ 582.108776][T14711] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 582.127291][T14711] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 582.140860][T14711] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 582.152281][T14711] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 582.166288][T14711] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 582.178000][T14711] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 582.192568][T14711] usb 2-1: config 0 descriptor?? [ 582.203294][T14711] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 582.593525][T15641] kAFS: unable to lookup cell '' [ 582.628029][T15644] overlayfs: failed to resolve './file2': -2 [ 582.928022][ C0] ldusb 2-1:0.55: usb_submit_urb failed (-19) [ 582.934186][ T10] usb 2-1: USB disconnect, device number 72 [ 582.942419][ T10] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 583.298644][T14711] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 583.328624][ T5622] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 583.368637][ T10] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 583.448585][T14711] usb 1-1: Using ep0 maxpacket: 16 [ 583.455004][T14711] usb 1-1: config 1 has an invalid interface number: 33 but max is 0 [ 583.463699][T14711] usb 1-1: config 1 has no interface number 0 [ 583.470160][T14711] usb 1-1: New USB device found, idVendor=1bcf, idProduct=0b40, bcdDevice=78.85 [ 583.479305][T14711] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 583.489704][ T5622] usb 4-1: Using ep0 maxpacket: 16 [ 583.495073][T14711] uvcvideo 1-1:1.33: Found UVC 0.00 device (1bcf:0b40) [ 583.500665][ T5622] usb 4-1: config 1 has an invalid interface number: 33 but max is 0 [ 583.503634][T14711] uvcvideo 1-1:1.33: Forcing UVC version to 1.0a [ 583.512361][ T5622] usb 4-1: config 1 has no interface number 0 [ 583.517710][T14711] uvcvideo 1-1:1.33: No valid video chain found. [ 583.524065][ T5622] usb 4-1: New USB device found, idVendor=1bcf, idProduct=0b40, bcdDevice=78.85 [ 583.539608][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 583.546845][ T5622] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 583.556540][ T10] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 583.568296][ T5622] uvcvideo 4-1:1.33: Found UVC 0.00 device (1bcf:0b40) [ 583.579741][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 583.586377][ T5622] uvcvideo 4-1:1.33: Forcing UVC version to 1.0a [ 583.592902][ T5622] uvcvideo 4-1:1.33: No valid video chain found. [ 583.601411][ T10] usb 5-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 583.612479][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 583.621038][ T10] usb 5-1: Product: syz [ 583.625206][ T10] usb 5-1: Manufacturer: syz [ 583.629931][ T10] usb 5-1: SerialNumber: syz [ 583.635427][ T10] usb 5-1: config 0 descriptor?? [ 583.821870][ T5621] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 583.851228][ T5622] usb 3-1: USB disconnect, device number 76 [ 584.314921][ T10] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input70 [ 584.342889][T15677] XFS (nullb0): Invalid superblock magic number [ 584.429499][ T10] rc_core: IR keymap rc-imon-pad not found [ 584.459975][ T10] Registered IR keymap rc-empty [ 584.464900][ T10] imon 5-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 584.475110][ T10] imon 5-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 584.771847][ C0] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 584.782573][ T10] imon:send_packet: packet tx failed (-71) [ 584.818550][ T10] imon 5-1:0.0: remote input dev register failed [ 584.825416][ T10] imon 5-1:0.0: imon_init_intf0: rc device setup failed [ 584.839128][ T10] imon 5-1:0.0: unable to initialize intf0, err 0 [ 584.846543][ T10] imon:imon_probe: failed to initialize context! [ 584.855520][ T10] imon 5-1:0.0: unable to register, err -19 [ 584.864475][T15697] loop5: detected capacity change from 0 to 4095 [ 584.866525][ T10] usb 5-1: USB disconnect, device number 55 [ 585.836915][ T29] audit: type=1400 audit(1781807916.132:618): avc: denied { mount } for pid=15710 comm="syz.2.2710" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 586.069161][ T29] audit: type=1400 audit(1781807916.372:619): avc: denied { mount } for pid=15710 comm="syz.2.2710" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 586.243077][ T10] usb 4-1: USB disconnect, device number 58 [ 586.249594][ T5705] usb 1-1: USB disconnect, device number 60 [ 586.527826][T15724] __nla_validate_parse: 22 callbacks suppressed [ 586.527838][T15724] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2713'. [ 587.408307][ T29] audit: type=1400 audit(1781807917.713:620): avc: denied { sqpoll } for pid=15748 comm="syz.4.2721" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 587.499083][ T29] audit: type=1400 audit(1781807917.753:621): avc: denied { mounton } for pid=15748 comm="syz.4.2721" path="/proc/1657/cgroup" dev="proc" ino=74617 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 587.533430][ T29] audit: type=1400 audit(1781807917.753:622): avc: denied { getattr } for pid=15748 comm="syz.4.2721" name="/" dev="nsfs" ino=4026532782 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 588.150359][T15765] XFS (nullb0): Invalid superblock magic number [ 588.181026][ T5705] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 588.336121][ T5705] usb 4-1: Using ep0 maxpacket: 16 [ 588.344421][ T5705] usb 4-1: config 1 has an invalid interface number: 33 but max is 0 [ 588.356098][ T5705] usb 4-1: config 1 has no interface number 0 [ 588.370298][ T5705] usb 4-1: New USB device found, idVendor=1bcf, idProduct=0b40, bcdDevice=78.85 [ 588.379846][ T5705] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 588.393880][ T5705] uvcvideo 4-1:1.33: Found UVC 0.00 device (1bcf:0b40) [ 588.403363][ T5705] uvcvideo 4-1:1.33: Forcing UVC version to 1.0a [ 588.409925][ T5705] uvcvideo 4-1:1.33: No valid video chain found. [ 588.871207][ T5705] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 589.049582][ T5705] usb 5-1: unable to get BOS descriptor or descriptor too short [ 589.061205][ T5705] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 589.073271][ T5705] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 9 [ 589.083334][ T5705] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 589.093650][ T5705] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 0 [ 589.103918][T15783] XFS (nullb0): Invalid superblock magic number [ 589.117010][ T5705] usb 5-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39 [ 589.130972][ T5705] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 589.146012][ T5705] usb 5-1: Product: syz [ 589.157365][ T5705] usb 5-1: Manufacturer: syz [ 589.172288][ T5705] usb 5-1: SerialNumber: syz [ 589.185693][ T5705] usb 5-1: config 0 descriptor?? [ 589.206277][T15774] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 589.219713][ C0] usb 5-1: NFC: Urb failure (status -71) [ 589.239274][ T5705] usb 5-1: NFC: Unable to get FW version [ 589.248905][T15792] XFS (nullb0): Invalid superblock magic number [ 589.252768][ T5705] pn533_usb 5-1:0.0: probe with driver pn533_usb failed with error -90 [ 589.431740][T15803] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2732'. [ 589.448222][T15803] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2732'. [ 589.768485][T15803] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2732'. [ 589.798848][T15774] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 589.799084][T15803] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2732'. [ 589.823940][T15803] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2732'. [ 589.829982][T15774] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 589.833282][T15803] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2732'. [ 589.855007][T15803] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2732'. [ 589.867063][T15803] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2732'. [ 589.883729][ T7383] usb 5-1: USB disconnect, device number 56 [ 589.897964][T15803] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2732'. [ 590.438293][T15819] XFS (nullb0): Invalid superblock magic number [ 590.807732][ T7383] usb 4-1: USB disconnect, device number 59 [ 590.872597][ T5622] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 590.881850][ T5705] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 590.907528][T15829] XFS (nullb0): Invalid superblock magic number [ 591.014785][T11674] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 591.034819][ T5705] usb 1-1: Using ep0 maxpacket: 32 [ 591.041114][ T5705] usb 1-1: New USB device found, idVendor=2040, idProduct=c603, bcdDevice= 1.8e [ 591.051198][ T5705] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 591.060939][ T5622] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 591.072407][ T5705] usb 1-1: config 0 descriptor?? [ 591.077902][ T5622] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7 [ 591.090154][ T5705] usb 1-1: dvb_usb_v2: found a 'Hauppauge 126xxx ATSC+' in warm state [ 591.099910][ T5622] usb 3-1: New USB device found, idVendor=0763, idProduct=2003, bcdDevice= 0.40 [ 591.109364][ T5705] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 591.119611][ T5622] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 591.127859][ T5705] dvbdev: DVB: registering new adapter (Hauppauge 126xxx ATSC+) [ 591.135688][ T5622] usb 3-1: Product: syz [ 591.139859][ T5622] usb 3-1: Manufacturer: syz [ 591.144431][ T5622] usb 3-1: SerialNumber: syz [ 591.149650][ T5705] usb 1-1: media controller created [ 591.157740][ T5705] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 591.174082][ T5705] usb 1-1: selecting invalid altsetting 1 [ 591.180548][T11674] usb 5-1: Using ep0 maxpacket: 32 [ 591.186076][ T5705] set interface failed [ 591.186091][ T5705] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 591.196875][ T5705] error writing reg: 0xff, val: 0x00 [ 591.197896][T11674] usb 5-1: config 0 has an invalid interface number: 89 but max is 0 [ 591.212892][T11674] usb 5-1: config 0 has no interface number 0 [ 591.221657][T11674] usb 5-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 591.235002][T11674] usb 5-1: config 0 interface 89 has no altsetting 0 [ 591.242563][ T5705] dvb_usb_mxl111sf 1-1:0.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 591.265366][T11674] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 591.275041][T11674] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 591.283706][T11674] usb 5-1: Product: syz [ 591.288955][T11674] usb 5-1: Manufacturer: syz [ 591.293867][T11674] usb 5-1: SerialNumber: syz [ 591.304497][T11674] usb 5-1: config 0 descriptor?? [ 591.330333][T11674] em28xx 5-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 591.342765][T11674] em28xx 5-1:0.89: Video interface 89 found: [ 591.464460][T15814] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 591.474184][T15814] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 591.488104][ T5721] usb 1-1: USB disconnect, device number 61 [ 591.898401][T15847] XFS (nullb0): Invalid superblock magic number [ 592.093597][ T5622] usb 3-1: Can't get UAC3 power state for id 10 [ 592.105724][ T5622] usb 3-1: 2:0: failed to get current value for ch 0 (-71) [ 592.112229][ T29] audit: type=1400 audit(1781807922.405:623): avc: denied { write } for pid=15851 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 592.115902][ T5622] usb 3-1: 2:0: cannot get min/max values for control 2 (id 2) [ 592.143828][ T5622] usb 3-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 592.156084][ T5622] usb 3-1: [2] FU [Generic Out Playback Volume] ch = 1, val = 0/1/1 [ 592.181035][ T29] audit: type=1400 audit(1781807922.475:624): avc: denied { write } for pid=15867 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 592.285110][T11674] em28xx 5-1:0.89: unknown em28xx chip ID (0) [ 592.322943][ T29] audit: type=1400 audit(1781807922.615:625): avc: denied { mounton } for pid=15870 comm="syz.1.2746" path="/proc/1737/task" dev="proc" ino=75005 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 592.357005][T15871] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 592.381212][ T5622] usb 3-1: USB disconnect, device number 77 [ 592.598535][ T29] audit: type=1400 audit(1781807922.895:626): avc: denied { write } for pid=15869 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 592.660548][ T29] audit: type=1400 audit(1781807922.955:627): avc: denied { write } for pid=15890 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 592.724578][T11674] em28xx 5-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 592.733560][T11674] em28xx 5-1:0.89: board has no eeprom [ 592.793920][T11674] em28xx 5-1:0.89: Identified as Terratec Grabby (card=67) [ 592.846450][T11674] em28xx 5-1:0.89: analog set to bulk mode. [ 592.859698][ T5622] em28xx 5-1:0.89: Registering V4L2 extension [ 592.869905][T11674] usb 5-1: USB disconnect, device number 57 [ 592.883197][T11674] em28xx 5-1:0.89: Disconnecting em28xx [ 592.910126][ T29] audit: type=1400 audit(1781807923.205:628): avc: denied { cmd } for pid=15904 comm="syz.0.2753" path="/dev/ublk-control" dev="devtmpfs" ino=697 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 592.935716][ T5622] em28xx 5-1:0.89: Config register raw data: 0xffffffed [ 592.957254][ T5622] em28xx 5-1:0.89: AC97 chip type couldn't be determined [ 592.976538][ T5622] em28xx 5-1:0.89: No AC97 audio processor [ 592.990756][ T29] audit: type=1400 audit(1781807923.245:629): avc: denied { map } for pid=15904 comm="syz.0.2753" path="/dev/ublkc0" dev="devtmpfs" ino=3890 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 592.995229][ T5622] usb 5-1: Decoder not found [ 593.028188][ T5622] em28xx 5-1:0.89: failed to create media graph [ 593.034662][ T5622] em28xx 5-1:0.89: V4L2 device video103 deregistered [ 593.042323][ T5622] em28xx 5-1:0.89: Registering snapshot button... [ 593.049741][ T5622] input: em28xx snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.89/input/input72 [ 593.061815][ T5622] em28xx 5-1:0.89: Remote control support is not available for this card. [ 593.070442][T11674] em28xx 5-1:0.89: Closing input extension [ 593.143790][T11674] em28xx 5-1:0.89: Deregistering snapshot button [ 593.154155][T11674] em28xx 5-1:0.89: Freeing device [ 593.455053][T15920] XFS (nullb0): Invalid superblock magic number [ 593.623547][ T5622] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 593.784018][ T5622] usb 1-1: Using ep0 maxpacket: 32 [ 593.802416][ T5622] usb 1-1: config 0 has an invalid interface number: 89 but max is 0 [ 593.855176][ T5721] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 593.983318][ T24] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 593.986864][ T5622] usb 1-1: config 0 has no interface number 0 [ 593.997341][ T5622] usb 1-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 594.015343][ T5622] usb 1-1: config 0 interface 89 has no altsetting 0 [ 594.026335][ T5622] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 594.035527][ T5622] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 594.043604][ T5622] usb 1-1: Product: syz [ 594.048332][ T5622] usb 1-1: Manufacturer: syz [ 594.053268][ T5622] usb 1-1: SerialNumber: syz [ 594.066416][ T5622] usb 1-1: config 0 descriptor?? [ 594.096044][ T5622] em28xx 1-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 594.105705][ T5622] em28xx 1-1:0.89: Video interface 89 found: [ 594.323141][ T5721] usb 4-1: Using ep0 maxpacket: 32 [ 594.636887][ T5721] usb 4-1: New USB device found, idVendor=2040, idProduct=c603, bcdDevice= 1.8e [ 594.649118][ T5721] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 594.659099][ T5721] usb 4-1: config 0 descriptor?? [ 594.667140][ T5721] usb 4-1: dvb_usb_v2: found a 'Hauppauge 126xxx ATSC+' in warm state [ 594.679997][ T5721] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 594.699573][ T5721] dvbdev: DVB: registering new adapter (Hauppauge 126xxx ATSC+) [ 594.707923][ T5721] usb 4-1: media controller created [ 594.717210][ T5721] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 594.735087][ T5721] usb 4-1: selecting invalid altsetting 1 [ 594.740887][ T5721] set interface failed [ 594.741758][ T5721] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 594.752516][ T5721] error writing reg: 0xff, val: 0x00 [ 594.771330][ T5721] dvb_usb_mxl111sf 4-1:0.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 594.788311][ T24] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 594.802373][ T24] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7 [ 594.810210][ T5622] em28xx 1-1:0.89: unknown em28xx chip ID (0) [ 594.815788][ T24] usb 2-1: New USB device found, idVendor=0763, idProduct=2003, bcdDevice= 0.40 [ 594.829728][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 594.837791][ T24] usb 2-1: Product: syz [ 594.842619][ T24] usb 2-1: Manufacturer: syz [ 594.849079][ T24] usb 2-1: SerialNumber: syz [ 594.899078][T11674] usb 4-1: USB disconnect, device number 60 [ 595.112822][ T5721] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 595.192708][T14711] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 595.254253][ T5622] em28xx 1-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 595.273015][ T5721] usb 5-1: Using ep0 maxpacket: 16 [ 595.274314][ T5622] em28xx 1-1:0.89: board has no eeprom [ 595.291856][ T5721] usb 5-1: New USB device found, idVendor=5543, idProduct=0005, bcdDevice= 0.00 [ 595.301810][ T5721] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 595.318484][ T5721] usb 5-1: config 0 descriptor?? [ 595.342629][ T5622] em28xx 1-1:0.89: Identified as Terratec Grabby (card=67) [ 595.352191][ T5622] em28xx 1-1:0.89: analog set to bulk mode. [ 595.358582][ T10] em28xx 1-1:0.89: Registering V4L2 extension [ 595.364386][ T29] audit: type=1400 audit(1781807925.667:630): avc: denied { write } for pid=15955 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 595.388837][T14711] usb 3-1: Using ep0 maxpacket: 32 [ 595.394304][ T5622] usb 1-1: USB disconnect, device number 62 [ 595.409166][T14711] usb 3-1: config 0 has an invalid interface number: 89 but max is 0 [ 595.416726][ T5622] em28xx 1-1:0.89: Disconnecting em28xx [ 595.417425][ T24] usb 2-1: Can't get UAC3 power state for id 10 [ 595.435128][T14711] usb 3-1: config 0 has no interface number 0 [ 595.449714][T14711] usb 3-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 595.450632][ T10] em28xx 1-1:0.89: Config register raw data: 0xffffffed [ 595.470194][ T24] usb 2-1: 2:0: failed to get current value for ch 0 (-71) [ 595.489215][ T10] em28xx 1-1:0.89: AC97 chip type couldn't be determined [ 595.490427][T14711] usb 3-1: config 0 interface 89 has no altsetting 0 [ 595.507029][ T24] usb 2-1: 2:0: cannot get min/max values for control 2 (id 2) [ 595.518075][ T24] usb 2-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 595.520908][ T10] em28xx 1-1:0.89: No AC97 audio processor [ 595.535769][ T29] audit: type=1400 audit(1781807925.817:631): avc: denied { write } for pid=15968 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 595.559247][ T10] usb 1-1: Decoder not found [ 595.567916][ T10] em28xx 1-1:0.89: failed to create media graph [ 595.568292][ T24] usb 2-1: [2] FU [Generic Out Playback Volume] ch = 1, val = 0/1/1 [ 595.587886][ T10] em28xx 1-1:0.89: V4L2 device video103 deregistered [ 595.592788][T14711] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 595.603985][T14711] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 595.613950][T14711] usb 3-1: Product: syz [ 595.616256][ T10] em28xx 1-1:0.89: Registering snapshot button... [ 595.618934][ T29] audit: type=1400 audit(1781807925.837:632): avc: denied { watch watch_reads } for pid=15948 comm="syz.4.2765" path="pipe:[3978]" dev="pipefs" ino=3978 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 595.636097][ T10] input: em28xx snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.89/input/input73 [ 595.656413][T14711] usb 3-1: Manufacturer: syz [ 595.665135][T14711] usb 3-1: SerialNumber: syz [ 595.675184][ T10] em28xx 1-1:0.89: Remote control support is not available for this card. [ 595.690081][ T24] usb 2-1: USB disconnect, device number 73 [ 595.699718][ T5622] em28xx 1-1:0.89: Closing input extension [ 595.700168][T14711] usb 3-1: config 0 descriptor?? [ 595.728985][T14711] em28xx 3-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 595.733520][ T5622] em28xx 1-1:0.89: Deregistering snapshot button [ 595.747238][T10707] udevd[10707]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 595.770289][T14711] em28xx 3-1:0.89: Video interface 89 found: [ 595.778560][ T5622] em28xx 1-1:0.89: Freeing device [ 596.017747][ T5721] usbhid 5-1:0.0: can't add hid device: -71 [ 596.023985][ T5721] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 596.040168][ T5721] usb 5-1: USB disconnect, device number 58 [ 596.254306][T16000] sg_write: data in/out 404444/42 bytes for SCSI command 0x0-- guessing data in; [ 596.254306][T16000] program syz.1.2771 not setting count and/or reply_len properly [ 596.345983][T14711] em28xx 3-1:0.89: unknown em28xx chip ID (0) [ 596.586623][T16010] __nla_validate_parse: 1 callbacks suppressed [ 596.586637][T16010] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2774'. [ 596.611541][T16010] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2774'. [ 596.627962][T16010] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2774'. [ 596.737098][T16010] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2774'. [ 596.764319][T16010] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2774'. [ 596.778427][T16010] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2774'. [ 597.095520][T14711] em28xx 3-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 597.104037][T16010] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2774'. [ 597.105759][T14711] em28xx 3-1:0.89: board has no eeprom [ 597.126446][T16014] XFS (nullb0): Invalid superblock magic number [ 597.138860][T16010] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2774'. [ 597.172103][T16010] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2774'. [ 597.185880][T14711] em28xx 3-1:0.89: Identified as Terratec Grabby (card=67) [ 597.193880][T16010] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2774'. [ 597.203233][T14711] em28xx 3-1:0.89: analog set to bulk mode. [ 597.209310][ T5721] em28xx 3-1:0.89: Registering V4L2 extension [ 597.226305][T14711] usb 3-1: USB disconnect, device number 78 [ 597.240063][T14711] em28xx 3-1:0.89: Disconnecting em28xx [ 597.252748][ T5721] em28xx 3-1:0.89: Config register raw data: 0xffffffed [ 597.259884][ T5721] em28xx 3-1:0.89: AC97 chip type couldn't be determined [ 597.321836][ T5721] em28xx 3-1:0.89: No AC97 audio processor [ 597.331857][ T5721] usb 3-1: Decoder not found [ 597.336613][ T5721] em28xx 3-1:0.89: failed to create media graph [ 597.345855][ T5721] em28xx 3-1:0.89: V4L2 device video103 deregistered [ 597.387575][ T5721] em28xx 3-1:0.89: Registering snapshot button... [ 597.416446][ T5721] input: em28xx snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.89/input/input74 [ 597.455129][ T5721] em28xx 3-1:0.89: Remote control support is not available for this card. [ 597.474648][T14711] em28xx 3-1:0.89: Closing input extension [ 597.542327][T14711] em28xx 3-1:0.89: Deregistering snapshot button [ 597.586308][T14711] em28xx 3-1:0.89: Freeing device [ 597.701477][ T24] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 597.872047][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 597.880187][ T24] usb 4-1: New USB device found, idVendor=2040, idProduct=c603, bcdDevice= 1.8e [ 597.892776][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 597.909201][ T24] usb 4-1: config 0 descriptor?? [ 597.914782][ T5721] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 597.926394][ T24] usb 4-1: dvb_usb_v2: found a 'Hauppauge 126xxx ATSC+' in warm state [ 597.943081][ T24] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 597.954905][ T24] dvbdev: DVB: registering new adapter (Hauppauge 126xxx ATSC+) [ 597.964391][ T24] usb 4-1: media controller created [ 598.001151][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 598.068465][ T24] usb 4-1: selecting invalid altsetting 1 [ 598.074582][ T5721] usb 5-1: Using ep0 maxpacket: 16 [ 598.079985][ T24] set interface failed [ 598.080068][ T24] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 598.091773][ T24] error writing reg: 0xff, val: 0x00 [ 598.092491][ T5721] usb 5-1: config 1 has an invalid interface number: 33 but max is 0 [ 598.106394][T14711] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 598.118635][ T5721] usb 5-1: config 1 has no interface number 0 [ 598.154277][ T5721] usb 5-1: New USB device found, idVendor=1bcf, idProduct=0b40, bcdDevice=78.85 [ 598.154758][T16026] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 598.172757][ T5721] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 598.184408][ T24] dvb_usb_mxl111sf 4-1:0.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 598.204685][ T5721] uvcvideo 5-1:1.33: Found UVC 0.00 device (1bcf:0b40) [ 598.206352][T16026] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 598.212956][ T5721] uvcvideo 5-1:1.33: Forcing UVC version to 1.0a [ 598.251349][ T5721] uvcvideo 5-1:1.33: No valid video chain found. [ 598.272242][T14711] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 598.285466][T14711] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7 [ 598.300806][T14711] usb 3-1: New USB device found, idVendor=0763, idProduct=2003, bcdDevice= 0.40 [ 598.300834][T14711] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 598.300852][T14711] usb 3-1: Product: syz [ 598.300880][T14711] usb 3-1: Manufacturer: syz [ 598.300893][T14711] usb 3-1: SerialNumber: syz [ 598.350733][ T5622] usb 4-1: USB disconnect, device number 61 [ 598.921385][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 598.921403][ T29] audit: type=1400 audit(1781807929.228:636): avc: denied { write } for pid=16050 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 599.075304][ T29] audit: type=1400 audit(1781807929.379:637): avc: denied { write } for pid=16069 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 599.136741][T14711] usb 3-1: Can't get UAC3 power state for id 10 [ 599.147022][T14711] usb 3-1: 2:0: failed to get current value for ch 0 (-71) [ 599.165534][T14711] usb 3-1: 2:0: cannot get min/max values for control 2 (id 2) [ 599.186120][T14711] usb 3-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 599.196043][T14711] usb 3-1: [2] FU [Generic Out Playback Volume] ch = 1, val = 0/1/1 [ 599.272568][T14711] usb 3-1: USB disconnect, device number 79 [ 599.312434][ T29] audit: type=1400 audit(1781807929.619:638): avc: denied { ioctl } for pid=16078 comm="syz.0.2789" path="socket:[75567]" dev="sockfs" ino=75567 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 599.458284][ T29] audit: type=1400 audit(1781807929.759:639): avc: denied { write } for pid=16073 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 599.550590][ T29] audit: type=1400 audit(1781807929.849:640): avc: denied { write } for pid=16087 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 599.830507][T14711] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 599.860329][ T5622] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 599.980348][T14711] usb 2-1: Using ep0 maxpacket: 32 [ 599.990463][T14711] usb 2-1: config 0 has an invalid interface number: 89 but max is 0 [ 599.998798][T14711] usb 2-1: config 0 has no interface number 0 [ 600.005474][T14711] usb 2-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 600.016032][T14711] usb 2-1: config 0 interface 89 has no altsetting 0 [ 600.027685][T14711] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 600.037249][T14711] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 600.045419][ T5622] usb 1-1: Using ep0 maxpacket: 32 [ 600.045635][T14711] usb 2-1: Product: syz [ 600.055416][T14711] usb 2-1: Manufacturer: syz [ 600.060346][T14711] usb 2-1: SerialNumber: syz [ 600.071341][ T5622] usb 1-1: New USB device found, idVendor=2040, idProduct=c603, bcdDevice= 1.8e [ 600.076549][T14711] usb 2-1: config 0 descriptor?? [ 600.094102][ T5622] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 600.102082][T14711] em28xx 2-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 600.102113][T14711] em28xx 2-1:0.89: Video interface 89 found: [ 600.121033][ T5622] usb 1-1: config 0 descriptor?? [ 600.132256][ T5622] usb 1-1: dvb_usb_v2: found a 'Hauppauge 126xxx ATSC+' in warm state [ 600.148249][ T5622] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 600.158954][ T5622] dvbdev: DVB: registering new adapter (Hauppauge 126xxx ATSC+) [ 600.177232][ T5622] usb 1-1: media controller created [ 600.219285][ T5622] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 600.245903][ T5622] usb 1-1: selecting invalid altsetting 1 [ 600.257150][ T5622] set interface failed [ 600.257172][ T5622] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 600.267893][ T5622] error writing reg: 0xff, val: 0x00 [ 600.284234][ T5622] dvb_usb_mxl111sf 1-1:0.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 600.298157][ T29] audit: type=1400 audit(1781807930.599:641): avc: denied { append } for pid=16109 comm="syz.2.2797" name="video4" dev="devtmpfs" ino=937 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 600.457817][ T7383] usb 1-1: USB disconnect, device number 63 [ 600.918121][ T7383] usb 5-1: USB disconnect, device number 59 [ 600.953755][T14711] em28xx 2-1:0.89: unknown em28xx chip ID (0) [ 600.962767][T16121] XFS (nullb0): Invalid superblock magic number [ 601.652585][T14711] em28xx 2-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 601.678006][T16144] __nla_validate_parse: 10 callbacks suppressed [ 601.678019][T16144] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2805'. [ 601.693968][T16141] XFS (nullb0): Invalid superblock magic number [ 601.700604][T14711] em28xx 2-1:0.89: board has no eeprom [ 601.711509][T16144] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2805'. [ 601.747316][T16144] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2805'. [ 601.759450][T14711] em28xx 2-1:0.89: Identified as Terratec Grabby (card=67) [ 601.767141][T14711] em28xx 2-1:0.89: analog set to bulk mode. [ 601.774277][ T24] em28xx 2-1:0.89: Registering V4L2 extension [ 602.048111][T16144] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2805'. [ 602.060266][T14711] usb 2-1: USB disconnect, device number 74 [ 602.074226][T16144] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2805'. [ 602.074525][T14711] em28xx 2-1:0.89: Disconnecting em28xx [ 602.092577][T16144] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2805'. [ 602.111091][T16144] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2805'. [ 602.112413][ T24] em28xx 2-1:0.89: Config register raw data: 0xffffffed [ 602.128819][T16144] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2805'. [ 602.139671][T16144] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2805'. [ 602.151296][T16144] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2805'. [ 602.191063][ T24] em28xx 2-1:0.89: AC97 chip type couldn't be determined [ 602.278388][ T24] em28xx 2-1:0.89: No AC97 audio processor [ 602.307024][ T24] usb 2-1: Decoder not found [ 602.316591][ T24] em28xx 2-1:0.89: failed to create media graph [ 602.325535][ T24] em28xx 2-1:0.89: V4L2 device video103 deregistered [ 602.689821][T16167] XFS (nullb0): Invalid superblock magic number [ 602.714949][ T24] em28xx 2-1:0.89: Registering snapshot button... [ 602.729426][ T24] input: em28xx snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.89/input/input75 [ 602.779313][ T5705] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 602.836118][ T24] em28xx 2-1:0.89: Remote control support is not available for this card. [ 602.844854][T14711] em28xx 2-1:0.89: Closing input extension [ 602.850887][T14711] em28xx 2-1:0.89: Deregistering snapshot button [ 602.867312][T14711] em28xx 2-1:0.89: Freeing device [ 603.238628][ T5705] usb 3-1: Using ep0 maxpacket: 32 [ 603.245841][ T5705] usb 3-1: New USB device found, idVendor=2040, idProduct=c603, bcdDevice= 1.8e [ 603.290075][T16179] XFS (nullb0): Invalid superblock magic number [ 603.291065][ T5705] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 603.311054][ T5705] usb 3-1: config 0 descriptor?? [ 603.331905][ T5705] usb 3-1: dvb_usb_v2: found a 'Hauppauge 126xxx ATSC+' in warm state [ 603.370271][ T5705] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 603.402281][ T5705] dvbdev: DVB: registering new adapter (Hauppauge 126xxx ATSC+) [ 603.410567][ T5705] usb 3-1: media controller created [ 603.457563][ T5705] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 603.480446][ T5705] usb 3-1: selecting invalid altsetting 1 [ 603.486846][ T5705] set interface failed [ 603.486867][ T5705] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 603.497635][ T5705] error writing reg: 0xff, val: 0x00 [ 603.523764][ T5705] dvb_usb_mxl111sf 3-1:0.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 603.556135][ T5705] usb 3-1: USB disconnect, device number 80 [ 603.639481][ T24] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 604.159462][T16203] XFS (nullb0): Invalid superblock magic number [ 604.218224][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 604.230247][ T24] usb 5-1: config 1 has an invalid interface number: 33 but max is 0 [ 604.247035][ T24] usb 5-1: config 1 has no interface number 0 [ 604.253825][ T24] usb 5-1: New USB device found, idVendor=1bcf, idProduct=0b40, bcdDevice=78.85 [ 604.263045][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 604.289361][ T24] uvcvideo 5-1:1.33: Found UVC 0.00 device (1bcf:0b40) [ 604.312977][ T24] uvcvideo 5-1:1.33: Forcing UVC version to 1.0a [ 604.319635][ T24] uvcvideo 5-1:1.33: No valid video chain found. [ 604.942340][T16228] FAULT_INJECTION: forcing a failure. [ 604.942340][T16228] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 604.957047][T16228] CPU: 0 UID: 0 PID: 16228 Comm: syz.0.2826 Not tainted syzkaller #0 PREEMPT(full) [ 604.957073][T16228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 604.957083][T16228] Call Trace: [ 604.957089][T16228] [ 604.957095][T16228] dump_stack_lvl+0x100/0x190 [ 604.957118][T16228] should_fail_ex.cold+0x5/0xa [ 604.957138][T16228] _copy_from_user+0x2e/0xd0 [ 604.957156][T16228] copy_msghdr_from_user+0x9f/0x4c0 [ 604.957177][T16228] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 604.957198][T16228] ? kstrtouint_from_user+0x13c/0x1d0 [ 604.957228][T16228] ___sys_sendmsg+0x106/0x1e0 [ 604.957247][T16228] ? __pfx____sys_sendmsg+0x10/0x10 [ 604.957265][T16228] ? get_pid_task+0x106/0x250 [ 604.957288][T16228] ? rcu_is_watching+0x12/0xc0 [ 604.957313][T16228] __sys_sendmsg+0x160/0x210 [ 604.957336][T16228] ? __pfx___sys_sendmsg+0x10/0x10 [ 604.957364][T16228] ? rcu_is_watching+0x12/0xc0 [ 604.957385][T16228] do_syscall_64+0x115/0x870 [ 604.957405][T16228] ? clear_bhb_loop+0x40/0x90 [ 604.957422][T16228] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 604.957439][T16228] RIP: 0033:0x7f133839ce59 [ 604.957452][T16228] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 604.957467][T16228] RSP: 002b:00007f13391c3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 604.957484][T16228] RAX: ffffffffffffffda RBX: 00007f1338615fa0 RCX: 00007f133839ce59 [ 604.957494][T16228] RDX: 0000000000040004 RSI: 0000200000000280 RDI: 0000000000000007 [ 604.957503][T16228] RBP: 00007f13391c3090 R08: 0000000000000000 R09: 0000000000000000 [ 604.957514][T16228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 604.957524][T16228] R13: 00007f1338616038 R14: 00007f1338615fa0 R15: 00007ffc2bd7c598 [ 604.957540][T16228] [ 605.939742][ T5622] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 606.100367][ T5622] usb 3-1: Using ep0 maxpacket: 16 [ 606.131741][ T5622] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 606.176323][ T5622] usb 3-1: config 0 interface 0 has no altsetting 0 [ 606.204870][ T5622] usb 3-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 606.221709][ T5622] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 606.236587][ T5622] usb 3-1: Product: syz [ 606.241904][ T5622] usb 3-1: Manufacturer: syz [ 606.249651][ T5622] usb 3-1: SerialNumber: syz [ 606.260761][ T5622] usb 3-1: config 0 descriptor?? [ 606.392796][T14711] usb 5-1: USB disconnect, device number 60 [ 606.484344][ T5622] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input76 [ 606.507220][ T10] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 606.657105][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 606.679366][ T10] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 606.763345][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 606.831904][ T10] usb 2-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 606.924115][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 607.016661][ T10] usb 2-1: Product: syz [ 607.043068][T16247] __nla_validate_parse: 30 callbacks suppressed [ 607.043135][T16247] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2832'. [ 607.072429][ T10] usb 2-1: Manufacturer: syz [ 607.120733][ T10] usb 2-1: SerialNumber: syz [ 607.225665][ T10] usb 2-1: config 0 descriptor?? [ 607.298067][ T5622] rc_core: IR keymap rc-imon-pad not found [ 607.338694][ T5622] Registered IR keymap rc-empty [ 607.375887][ T5622] imon 3-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 607.447732][ T5622] imon 3-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 607.624194][ T10] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input78 [ 607.853055][ C0] imon 3-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 607.870973][ T5622] imon:send_packet: packet tx failed (-71) [ 607.916586][ T10] rc_core: IR keymap rc-imon-pad not found [ 607.922795][ T5622] imon 3-1:0.0: remote input dev register failed [ 607.935743][ T10] Registered IR keymap rc-empty [ 607.946344][ T5622] imon 3-1:0.0: imon_init_intf0: rc device setup failed [ 607.959904][ T10] imon 2-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 607.996023][ T10] imon 2-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 608.027930][T16264] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2837'. [ 608.088806][ T5622] imon 3-1:0.0: unable to initialize intf0, err 0 [ 608.099062][ T5622] imon:imon_probe: failed to initialize context! [ 608.105626][ T5622] imon 3-1:0.0: unable to register, err -19 [ 608.361933][ C0] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 608.559661][ T10] imon:send_packet: packet tx failed (-71) [ 608.578489][ T5622] usb 3-1: USB disconnect, device number 81 [ 608.596096][ T10] imon 2-1:0.0: remote input dev register failed [ 608.753963][T16306] XFS (nullb0): Invalid superblock magic number [ 608.758827][ T10] imon 2-1:0.0: imon_init_intf0: rc device setup failed [ 609.078744][ T10] imon 2-1:0.0: unable to initialize intf0, err 0 [ 609.098992][ T10] imon:imon_probe: failed to initialize context! [ 609.105351][ T10] imon 2-1:0.0: unable to register, err -19 [ 609.132839][ T10] usb 2-1: USB disconnect, device number 75 [ 609.355655][ T5721] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 609.405595][ T5622] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 609.413220][ T5705] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 609.445552][ T24] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 609.505509][ T5721] usb 3-1: Using ep0 maxpacket: 16 [ 609.512126][ T5721] usb 3-1: config 1 has an invalid interface number: 33 but max is 0 [ 609.520741][ T5721] usb 3-1: config 1 has no interface number 0 [ 609.527381][ T5721] usb 3-1: New USB device found, idVendor=1bcf, idProduct=0b40, bcdDevice=78.85 [ 609.536641][ T5721] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 609.549348][ T5721] uvcvideo 3-1:1.33: Found UVC 0.00 device (1bcf:0b40) [ 609.562746][ T5721] uvcvideo 3-1:1.33: Forcing UVC version to 1.0a [ 609.569484][ T5721] uvcvideo 3-1:1.33: No valid video chain found. [ 609.575464][ T5622] usb 5-1: Using ep0 maxpacket: 32 [ 609.581175][ T5705] usb 1-1: Using ep0 maxpacket: 32 [ 609.587982][ T5622] usb 5-1: config 0 has an invalid interface number: 89 but max is 0 [ 609.596789][ T5622] usb 5-1: config 0 has no interface number 0 [ 609.596925][ T5705] usb 1-1: New USB device found, idVendor=2040, idProduct=c603, bcdDevice= 1.8e [ 609.605822][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 609.618319][ T5622] usb 5-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 609.619892][ T24] usb 4-1: New USB device found, idVendor=2040, idProduct=c603, bcdDevice= 1.8e [ 609.637412][ T5622] usb 5-1: config 0 interface 89 has no altsetting 0 [ 609.645819][ T5705] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 609.655050][ T5622] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 609.664659][ T5622] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 609.665443][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 609.673915][ T5705] usb 1-1: config 0 descriptor?? [ 609.686126][ T5622] usb 5-1: Product: syz [ 609.690344][ T5622] usb 5-1: Manufacturer: syz [ 609.695070][ T5622] usb 5-1: SerialNumber: syz [ 609.701410][ T5705] usb 1-1: dvb_usb_v2: found a 'Hauppauge 126xxx ATSC+' in warm state [ 609.711586][ T24] usb 4-1: config 0 descriptor?? [ 609.712110][ T5622] usb 5-1: config 0 descriptor?? [ 609.723452][ T5705] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 609.729334][ T24] usb 4-1: dvb_usb_v2: found a 'Hauppauge 126xxx ATSC+' in warm state [ 609.736227][ T5622] em28xx 5-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 609.755246][ T5705] dvbdev: DVB: registering new adapter (Hauppauge 126xxx ATSC+) [ 609.760348][ T24] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 609.773249][ T5705] usb 1-1: media controller created [ 609.785007][ T24] dvbdev: DVB: registering new adapter (Hauppauge 126xxx ATSC+) [ 609.803123][ T24] usb 4-1: media controller created [ 609.820966][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 609.860217][ T5622] em28xx 5-1:0.89: Video interface 89 found: [ 609.870773][ T24] usb 4-1: selecting invalid altsetting 1 [ 609.874313][ T5705] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 609.880550][ T24] set interface failed [ 609.884969][ T24] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 609.896187][ T24] error writing reg: 0xff, val: 0x00 [ 609.911325][T16324] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 609.978233][T16324] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 609.987384][T16324] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000018: 0000 [#1] SMP KASAN NOPTI [ 609.999468][T16324] KASAN: null-ptr-deref in range [0x00000000000000c0-0x00000000000000c7] [ 610.007897][T16324] CPU: 0 UID: 0 PID: 16324 Comm: syz.0.2852 Not tainted syzkaller #0 PREEMPT(full) [ 610.017281][T16324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 610.027345][T16324] RIP: 0010:__mutex_lock+0x15d/0x1bd0 [ 610.032742][T16324] Code: 08 84 d2 0f 85 67 14 00 00 44 8b 3d dd db 88 0f 45 85 ff 75 29 48 b8 00 00 00 00 00 fc ff df 48 8d 7b 58 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 5e 14 00 00 48 3b 5b 58 0f 85 8b 07 00 00 bf 01 [ 610.052454][T16324] RSP: 0018:ffffc900052d7590 EFLAGS: 00010206 [ 610.058528][T16324] RAX: dffffc0000000000 RBX: 0000000000000068 RCX: 0000000000000000 [ 610.066506][T16324] RDX: 0000000000000018 RSI: 000000000000026f RDI: 00000000000000c0 [ 610.074483][T16324] RBP: ffffc900052d7700 R08: ffffffff880dae25 R09: 0000000000000000 [ 610.082462][T16324] R10: ffffc900052d7718 R11: 0000000000000000 R12: 0000000000000000 [ 610.090427][T16324] R13: 0000000000000000 R14: dffffc0000000000 R15: 0000000000000000 [ 610.098398][T16324] FS: 00007f13391c36c0(0000) GS:ffff888124332000(0000) knlGS:0000000000000000 [ 610.107313][T16324] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 610.113882][T16324] CR2: 000000110c3badef CR3: 0000000075c8f000 CR4: 00000000003526f0 [ 610.121846][T16324] Call Trace: [ 610.125128][T16324] [ 610.128236][T16324] ? dvb_usbv2_generic_write+0x25/0x50 [ 610.133690][T16324] ? __mutex_lock+0x26d/0x1bd0 [ 610.138442][T16324] ? mxl111sf_ctrl_msg+0xb8/0x2b0 [ 610.143552][T16324] ? number+0x983/0xc90 [ 610.147705][T16324] ? __pfx___mutex_lock+0x10/0x10 [ 610.152717][T16324] ? __pfx___mutex_lock+0x10/0x10 [ 610.157727][T16324] ? rcu_is_watching+0x12/0xc0 [ 610.162485][T16324] ? lock_acquire+0x301/0x370 [ 610.167237][T16324] ? dvb_usbv2_generic_write+0x25/0x50 [ 610.172681][T16324] dvb_usbv2_generic_write+0x25/0x50 [ 610.177952][T16324] mxl111sf_ctrl_msg+0x179/0x2b0 [ 610.182876][T16324] mxl111sf_write_reg+0x96/0x130 [ 610.187811][T16324] ? __pfx_mxl111sf_write_reg+0x10/0x10 [ 610.193353][T16324] ? __kernel_text_address+0xd/0x30 [ 610.198717][T16324] ? unwind_get_return_address+0x59/0xa0 [ 610.204343][T16324] ? arch_stack_walk+0xa6/0xf0 [ 610.209096][T16324] mxl111sf_i2c_start+0x6e/0x220 [ 610.214020][T16324] mxl111sf_i2c_xfer+0x178e/0x3240 [ 610.219114][T16324] ? stack_trace_save+0x8e/0xc0 [ 610.223957][T16324] ? __pfx_stack_trace_save+0x10/0x10 [ 610.229327][T16324] ? stack_depot_save_flags+0x27/0x9d0 [ 610.234769][T16324] ? __pfx_mxl111sf_i2c_xfer+0x10/0x10 [ 610.240207][T16324] ? __kasan_kmalloc+0xaa/0xb0 [ 610.244956][T16324] ? __kmalloc_node_track_caller_noprof+0x31e/0x890 [ 610.251526][T16324] ? memdup_user+0x2a/0xe0 [ 610.255926][T16324] ? i2cdev_write+0xe4/0x240 [ 610.260496][T16324] ? vfs_writev+0x5ed/0xdd0 [ 610.264981][T16324] ? do_writev+0x13e/0x340 [ 610.269394][T16324] ? do_syscall_64+0x115/0x870 [ 610.274142][T16324] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 610.280195][T16324] ? do_raw_spin_lock+0x128/0x260 [ 610.285203][T16324] __i2c_transfer+0x5d9/0x1740 [ 610.289955][T16324] ? trace_irq_enable.constprop.0+0x122/0x160 [ 610.296092][T16324] ? __pfx___i2c_transfer+0x10/0x10 [ 610.301274][T16324] ? rt_mutex_slowtrylock+0x93/0x100 [ 610.306545][T16324] i2c_transfer+0x15f/0x380 [ 610.311034][T16324] i2c_transfer_buffer_flags+0x10c/0x190 [ 610.316652][T16324] ? __pfx_i2c_transfer_buffer_flags+0x10/0x10 [ 610.322878][T16324] ? _copy_from_user+0x59/0xd0 [ 610.327636][T16324] i2cdev_write+0x11e/0x240 [ 610.332137][T16324] ? __pfx_i2cdev_write+0x10/0x10 [ 610.337147][T16324] vfs_writev+0x5ed/0xdd0 [ 610.341470][T16324] ? __pfx_vfs_writev+0x10/0x10 [ 610.346306][T16324] ? rcu_is_watching+0x12/0xc0 [ 610.351060][T16324] ? __fget_files+0x21f/0x3d0 [ 610.355715][T16324] ? do_writev+0x13e/0x340 [ 610.360125][T16324] do_writev+0x13e/0x340 [ 610.364351][T16324] ? __pfx_do_writev+0x10/0x10 [ 610.369098][T16324] ? rcu_is_watching+0x12/0xc0 [ 610.373859][T16324] do_syscall_64+0x115/0x870 [ 610.378445][T16324] ? clear_bhb_loop+0x40/0x90 [ 610.383104][T16324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 610.388987][T16324] RIP: 0033:0x7f133839ce59 [ 610.393383][T16324] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 610.412975][T16324] RSP: 002b:00007f13391c3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 610.421373][T16324] RAX: ffffffffffffffda RBX: 00007f1338615fa0 RCX: 00007f133839ce59 [ 610.429341][T16324] RDX: 0000000000000001 RSI: 0000200000000180 RDI: 000000000000000b [ 610.437291][T16324] RBP: 00007f1338432e6f R08: 0000000000000000 R09: 0000000000000000 [ 610.445239][T16324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 610.453190][T16324] R13: 00007f1338616038 R14: 00007f1338615fa0 R15: 00007ffc2bd7c598 [ 610.461320][T16324] [ 610.464324][T16324] Modules linked in: [ 610.468912][T16324] ---[ end trace 0000000000000000 ]--- [ 610.474732][T16324] RIP: 0010:__mutex_lock+0x15d/0x1bd0 [ 610.480447][T16324] Code: 08 84 d2 0f 85 67 14 00 00 44 8b 3d dd db 88 0f 45 85 ff 75 29 48 b8 00 00 00 00 00 fc ff df 48 8d 7b 58 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 5e 14 00 00 48 3b 5b 58 0f 85 8b 07 00 00 bf 01 [ 610.483788][ T5705] usb 1-1: selecting invalid altsetting 1 [ 610.506171][ T5705] set interface failed [ 610.507159][T16324] RSP: 0018:ffffc900052d7590 EFLAGS: 00010206 [ 610.517635][T16324] RAX: dffffc0000000000 RBX: 0000000000000068 RCX: 0000000000000000 [ 610.526395][T16324] RDX: 0000000000000018 RSI: 000000000000026f RDI: 00000000000000c0 [ 610.541451][ T29] audit: type=1400 audit(1781807940.384:642): avc: denied { read } for pid=4959 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 610.544975][T16324] RBP: ffffc900052d7700 R08: ffffffff880dae25 R09: 0000000000000000 [ 610.581052][T16324] R10: ffffc900052d7718 R11: 0000000000000000 R12: 0000000000000000 [ 610.590878][T16324] R13: 0000000000000000 R14: dffffc0000000000 R15: 0000000000000000 [ 610.593661][T16328] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 610.609546][ T29] audit: type=1400 audit(1781807940.384:643): avc: denied { search } for pid=4959 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 610.614039][T16324] FS: 00007f13391c36c0(0000) GS:ffff888124332000(0000) knlGS:0000000000000000 [ 610.632736][ T24] dvb_usb_mxl111sf 4-1:0.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 610.644019][T16328] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 610.650295][ T29] audit: type=1400 audit(1781807940.384:644): avc: denied { write search } for pid=4959 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 610.668719][T16324] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 610.682324][ T29] audit: type=1400 audit(1781807940.384:645): avc: denied { add_name } for pid=4959 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 610.707794][ T29] audit: type=1400 audit(1781807940.384:646): avc: denied { create } for pid=4959 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 610.731669][ T29] audit: type=1400 audit(1781807940.384:647): avc: denied { append open } for pid=4959 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 610.765193][T16324] CR2: 0000001b3380eff8 CR3: 0000000075c8f000 CR4: 00000000003526f0 [ 610.782173][T16324] Kernel panic - not syncing: Fatal exception [ 610.788489][T16324] Kernel Offset: disabled [ 610.792808][T16324] Rebooting in 86400 seconds..