last executing test programs: 1m31.076563389s ago: executing program 3 (id=237): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x300}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x1100, 0x3}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 1m30.847485371s ago: executing program 3 (id=240): mkdir(&(0x7f00000001c0)='./file1\x00', 0xb) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r0 = open(&(0x7f0000000040)='./file1\x00', 0x808c00, 0x43) chdir(&(0x7f00000003c0)='./bus\x00') unlink(&(0x7f0000000140)='./file0\x00') mkdirat(r0, &(0x7f0000000340)='./file0\x00', 0xf3) creat(&(0x7f0000000000)='./file0\x00', 0x62) 1m30.53682005s ago: executing program 3 (id=242): socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) close(0x3) r0 = socket(0x1d, 0x80802, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000380)={0x1d, r1, 0x1, {0x0, 0xf0, 0x3}, 0xfe}, 0x18) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) pselect6(0x900, 0x0, 0x0, &(0x7f0000000240)={0x1f}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 1m29.288124225s ago: executing program 3 (id=249): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) r0 = open$dir(&(0x7f0000000100)='./file0/../file0\x00', 0x210200, 0x0) r1 = open_tree(r0, &(0x7f0000000040)='./file0/../file0\x00', 0x81901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 1m28.966552828s ago: executing program 3 (id=252): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x2, 0x801) syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x7, 0x1, 0x2, r2, 0xb}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x6, 0xfffffffffffffffd, 0x2, 0x5, 0x0, 0x4002004c5, 0x1000, 0x0, 0xfffffffffffffffd, 0x2, 0x0, 0x0, 0x2], 0x8080000, 0x1144}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1m28.384980985s ago: executing program 3 (id=254): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000200304306000000000000109022400010000000009040000010300000009210000000122020009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\"\v'], 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00140d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00M'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000b00)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="200e06"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000240)={&(0x7f0000000140)=[{0x7, 0x801, 0x0, 0x0}], 0x1}) 1m28.11378096s ago: executing program 32 (id=254): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000200304306000000000000109022400010000000009040000010300000009210000000122020009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\"\v'], 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00140d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00M'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000b00)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="200e06"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000240)={&(0x7f0000000140)=[{0x7, 0x801, 0x0, 0x0}], 0x1}) 1m24.303444714s ago: executing program 2 (id=274): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000080)={0xff, 0xd, 0x5}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f000000c000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000000)="b8010000000f01d9c4a179fabf0a000000650f167b1dc4627978899949091a460f01c2430f12c766baf80cb87c3b9b83ef66bafc0cec66450f388184a1633edccd66baf80cb846c0078def66bafc0c66b82f5166efc74424003a010000c744240279f80000ff1c24", 0x68}], 0x1, 0x19, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m23.863825332s ago: executing program 2 (id=275): socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x5b) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) sendmsg$key(0xffffffffffffffff, 0x0, 0x10) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x40e0, 0x0) pipe(&(0x7f0000000140)) r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0}, &(0x7f00000001c0)=0xc) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000002a000701fcffffff00000000057c000008000100", @ANYRES32=r1, @ANYBLOB="a2ab8800b5d75d9b56197a78099d965e070d5d683a2afabbfe743f1e0a2f0f235df122a42f805bcf69db0f147570a977bd5c205fc0f656d4af1bc5672e432c9f88f4c1d61b7ea590ad67428a66b2ed9a01d398976f42ee9f9836c0ae0e58ce81f9b8243debea4962560d6c13da4df4869220a08ae724820f4e4c2e469834c18c44e46253b84f17b74d81ae9092ad6cc69531c2"], 0x1c}, 0x1, 0x0, 0x0, 0x40001}, 0xc000) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000180)=0x62b8, 0x4) sendmsg$rds(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000880)=""/4092, 0xffc}], 0x1, 0x0, 0x0, 0x20000800}, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) r4 = openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r4, 0xc0d05640, &(0x7f00000000c0)={0xa, @pix={0x0, 0x0, 0x34565348, 0x0, 0x0, 0x0, 0x25}}) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r5 = syz_open_dev$video(&(0x7f0000000280), 0x101, 0xab02) ioctl$VIDIOC_S_INPUT(r5, 0xc0045627, &(0x7f0000000180)=0x1) ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, &(0x7f0000000480)={{0xfd, 0x2}, 0x100, './file0\x00'}) 1m23.496744522s ago: executing program 2 (id=277): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mlockall(0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x1) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, &(0x7f0000000100)={0x200000, 0x100c000, 0x8}) 1m21.881761767s ago: executing program 2 (id=281): mkdir(&(0x7f00000003c0)='./file0\x00', 0x10) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040), 0x802, &(0x7f00000000c0)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=', @ANYRESHEX=0x0]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r0, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x18) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) write$P9_RREADLINK(r1, &(0x7f0000000140)={0x10, 0x17, 0x2, {0x7, './file2'}}, 0xffffffac) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 1m21.487156419s ago: executing program 2 (id=285): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd(0x7ff) r3 = eventfd2(0x5, 0x0) r4 = eventfd(0x1) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000040)={r3, 0x20, 0x2, r2}) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000940)={r2, 0x30e, 0x2, r3}) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000000c0)={r4, 0xf2, 0x3, r3}) 1m21.04486084s ago: executing program 2 (id=287): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000200)={0x1c, &(0x7f0000000200)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000580)={0x34, &(0x7f0000000240)={0x0, 0xa}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0xe}, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x20, 0x0, 0x1, 0x4}}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000700)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000100)={0x0, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m20.587496952s ago: executing program 33 (id=287): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000200)={0x1c, &(0x7f0000000200)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000580)={0x34, &(0x7f0000000240)={0x0, 0xa}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0xe}, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x20, 0x0, 0x1, 0x4}}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000700)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000100)={0x0, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15.729842122s ago: executing program 1 (id=591): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x40180, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x80, 0x7fffffff, 0x8, 0x1}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40088c1}, 0x4040840) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0xe, 0xb}, {0x7, 0xffe0}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x2000c080) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="05", 0x1, 0x20000005, &(0x7f0000000140)={0x11, 0x7, r5, 0x1, 0x0, 0x6, @remote}, 0x14) socket$kcm(0x10, 0x2, 0x4) 15.326954681s ago: executing program 1 (id=595): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0x7b95b611, 0x802) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0xfffffeffffffffbc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x2, {0x0, 0xff, 0x6}, 0xfe}, 0x18) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) r4 = syz_io_uring_setup(0x49a, &(0x7f0000000480)={0x0, 0xb892, 0x2, 0x2, 0x40024e}, &(0x7f0000000280), &(0x7f0000000040), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_RESIZE_RINGS(r4, 0x21, &(0x7f0000000400)={0x0, 0x8048fd, 0x4000, 0x3, 0x110}, 0x1) bind$can_j1939(0xffffffffffffffff, &(0x7f00000000c0)={0x1d, r3, 0x2, {0x1, 0xf0}, 0xfe}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) splice(r6, 0x0, r7, 0x0, 0x38f9, 0x0) fcntl$setstatus(r7, 0x4, 0x6c00) fcntl$setstatus(r7, 0x4, 0x2400) write(r5, &(0x7f0000000040), 0xffffff4a) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xb, 0xfff2}, {0xfff1, 0xffff}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000082505a3a440000102030109023b0001010000000904000003"], 0x0) r8 = openat$sndtimer(0xffffff9c, &(0x7f0000000040), 0x2) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r8, 0xc0145401, &(0x7f00000001c0)={0x3, 0x2, 0x1, 0x3, 0x80000}) syz_pidfd_open(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000080000000000000064ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) 11.607330935s ago: executing program 0 (id=610): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./sys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) openat(0xffffffffffffffff, 0x0, 0x1, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x1, 0x0) write(r0, 0x0, 0x0) close(r0) mkdirat(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) nanosleep(0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./sys/class/udc/dummy_udc.0/soft_connect\x00', 0x1, 0x0) write(r1, &(0x7f0000000700)='connect\n\x00', 0x8) 11.580991193s ago: executing program 1 (id=612): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000016c0)={0x6, 0x8, &(0x7f00000014c0)=@raw=[@printk={@llu, {}, {}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffe02}, {}, {}, {0x85, 0x0, 0x0, 0xc7}}], &(0x7f0000001540)='GPL\x00'}, 0x94) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x600000, 0x0) syz_open_dev$video(0x0, 0x81, 0xa082) write(0xffffffffffffffff, &(0x7f0000000000)="240000001100", 0x6) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) syz_open_dev$ttys(0xc, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x987a3a9f32358a4c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000000300)=""/102400, 0x19000) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = open(&(0x7f0000000080)='./file1\x00', 0x66842, 0x0) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f00000000c0)="8576d44388fce81bf84bf0599e2b3fbbd664066ba957f31f9cae697b196f0c9335dd7c6244fad4f8d3c577b52e51b77fb279aa929e4405dd3907007e54f5b1489c8bbd15e83c4ea57c90171e06790b89290aeea126f0cb330fde5c0622cb6fe9e17ef5e2e8b6eab30baefcdb27425a94754173d986", 0x2c400}], 0x21, 0x7800, 0x0, 0x3) 10.928730961s ago: executing program 0 (id=615): socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x5b) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) sendmsg$key(0xffffffffffffffff, 0x0, 0x10) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x40e0, 0x0) pipe(&(0x7f0000000140)) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, &(0x7f00000001c0)) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000002a000701fcffffff00000000057c000008000100", @ANYRES32, @ANYBLOB="a2ab8800b5d75d9b56197a78099d965e070d5d683a2afabbfe743f1e0a2f0f235df122a42f805bcf69db0f147570a977bd5c205fc0f656d4af1bc5672e432c9f88f4c1d61b7ea590ad67428a66b2ed9a01d398976f42ee9f9836c0ae0e58ce81f9b8243debea4962560d6c13da4df4869220a08ae724820f4e4c2e469834c18c44e46253b84f17b74d81ae9092ad6cc69531c2"], 0x1c}, 0x1, 0x0, 0x0, 0x40001}, 0xc000) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000180)=0x62b8, 0x4) sendmsg$rds(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000880)=""/4092, 0xffc}], 0x1, 0x0, 0x0, 0x20000800}, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) r5 = openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r5, 0xc0d05640, &(0x7f00000000c0)={0xa, @pix={0x0, 0x0, 0x34565348, 0x0, 0x0, 0x0, 0x25}}) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r6 = syz_open_dev$video(&(0x7f0000000280), 0x101, 0xab02) ioctl$VIDIOC_S_INPUT(r6, 0xc0045627, &(0x7f0000000180)=0x1) ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, &(0x7f0000000480)={{0xfd, 0x2}, 0x100, './file0\x00'}) 9.844858486s ago: executing program 1 (id=621): r0 = socket(0x400000000010, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r4, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000003a80)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r9, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 8.942882122s ago: executing program 1 (id=622): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0x7b95b611, 0x802) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0xfffffeffffffffbc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x2, {0x0, 0xff, 0x6}, 0xfe}, 0x18) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) r4 = syz_io_uring_setup(0x49a, &(0x7f0000000480)={0x0, 0xb892, 0x2, 0x2, 0x40024e}, &(0x7f0000000280), &(0x7f0000000040), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_RESIZE_RINGS(r4, 0x21, &(0x7f0000000400)={0x0, 0x8048fd, 0x4000, 0x3, 0x110}, 0x1) bind$can_j1939(0xffffffffffffffff, &(0x7f00000000c0)={0x1d, r3, 0x2, {0x1, 0xf0}, 0xfe}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) splice(r6, 0x0, r7, 0x0, 0x38f9, 0x0) fcntl$setstatus(r7, 0x4, 0x6c00) fcntl$setstatus(r7, 0x4, 0x2400) write(r5, &(0x7f0000000040), 0xffffff4a) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xb, 0xfff2}, {0xfff1, 0xffff}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000082505a3a440000102030109023b0001010000000904000003"], 0x0) r8 = openat$sndtimer(0xffffff9c, &(0x7f0000000040), 0x2) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r8, 0xc0145401, &(0x7f00000001c0)={0x3, 0x2, 0x1, 0x3, 0x80000}) syz_pidfd_open(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000080000000000000064ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) 8.190727342s ago: executing program 0 (id=634): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = memfd_create(&(0x7f0000000480)='\xecO\xdd\xbd\xfc\xfa\xe1\xea\xea\x00\xb0\xd8Y\x03\x00\x00\x00\x00\x00\x00\x7f.\x14\x89|cW\x11\x0e$]7\x99\x11\xfd\xbe/6&\xe6\x97\x1e\xfbon\'\x0f<;\xbe\xa5`\"E]\xda]\xb9\xeb>\xe9\xf2\x99\xa8\xbeOA\xf8\\\xeb[\xd7:{\r\x91.\xdbxn\x1b\x17\xccMz\x1dc\x1d5\x9fe/\xb7k}\xd7\xa6\xd1\xcf\x1f\xf3\xae\x9e\xd6\x040\x19\x88\xa7:OYw\xfe\xaf\xdf\x16\x88\xfe\xd3\x13\x9f!\xd7\xcf\x86\x9f\xe8)\x01\x01\x00\x00\x06^\xb4', 0x0) ftruncate(r1, 0x8800000) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) r3 = accept$alg(r2, 0x0, 0x0) r4 = dup3(r3, r2, 0x0) sendfile(r4, r1, 0x0, 0x1000009) 7.528371171s ago: executing program 4 (id=625): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0xfffffffffffffe08, &(0x7f0000000040)=0xfffd) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) msgctl$IPC_INFO(0x0, 0x3, 0x0) 6.224104892s ago: executing program 5 (id=627): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000002c0)="bf"}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 6.223123108s ago: executing program 4 (id=628): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x0, 0x8, 0x8001, 0x0, 0xaf, 0x0, 0xfffffe0000000001, 0x7, 0xffffffff}, 0x0) dup(0xffffffffffffffff) syz_open_dev$video4linux(0x0, 0x5, 0x1801) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x1000000000000, 0x0}}, 0xfdbc) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000680)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x80800) sendmmsg$unix(r3, &(0x7f0000003e80), 0x400002c, 0x14) 6.020388866s ago: executing program 5 (id=630): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracefs_dir\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r0 = socket$xdp(0x2c, 0x3, 0x0) sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, 0x0, 0x800) r1 = syz_open_dev$MSR(&(0x7f00000000c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x23a000, 0x1000, 0x0, 0x3}, 0x20) 5.398494522s ago: executing program 5 (id=631): syz_kvm_add_vcpu$x86(0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2404c0c0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="110204000002"}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) 5.144740924s ago: executing program 5 (id=635): socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) sendmsg$key(0xffffffffffffffff, 0x0, 0x10) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x40e0, 0x0) pipe(&(0x7f0000000140)) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0}, &(0x7f00000001c0)=0xc) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000002a000701fcffffff00000000057c000008000100", @ANYRES32=r3, @ANYBLOB="a2ab8800b5d75d9b56197a78099d965e070d5d683a2afabbfe743f1e0a2f0f235df122a42f805bcf69db0f147570a977bd5c205fc0f656d4af1bc5672e432c9f88f4c1d61b7ea590ad67428a66b2ed9a01d398976f42ee9f9836c0ae0e58ce81f9b8243debea4962560d6c13da4df4869220a08ae724820f4e4c2e469834c18c44e46253b84f17b74d81ae9092ad6cc69531c2"], 0x1c}, 0x1, 0x0, 0x0, 0x40001}, 0xc000) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r5, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000180)=0x62b8, 0x4) sendmsg$rds(r4, &(0x7f00000001c0)={&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000880)=""/4092, 0xffc}], 0x1, 0x0, 0x0, 0x20000800}, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) r6 = openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r6, 0xc0d05640, &(0x7f00000000c0)={0xa, @pix={0x0, 0x0, 0x34565348, 0x0, 0x0, 0x0, 0x25}}) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r7 = syz_open_dev$video(&(0x7f0000000280), 0x101, 0xab02) ioctl$VIDIOC_S_INPUT(r7, 0xc0045627, &(0x7f0000000180)=0x1) ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, &(0x7f0000000480)={{0xfd, 0x2}, 0x100, './file0\x00'}) 4.33151118s ago: executing program 1 (id=637): r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff000000070501020002000705810200020007050202000200070582020002"], 0x0) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x40, &(0x7f0000000100)="900100"/64) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x40, &(0x7f0000000300)="9101000000112233445500"/64) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x40, &(0x7f0000000900)="880100"/64) syz_usb_ep_write(r0, 0x81, 0x0, &(0x7f0000000a00)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000e00)='./sys\x00', &(0x7f0000000f00)='sysfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000001200)='stop', 0x4) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) 3.000988562s ago: executing program 6 (id=640): socket$netlink(0x10, 0x3, 0x0) r0 = syz_open_dev$video4linux(0x0, 0x100000000009, 0x690800) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000140)={0x1, 0x0, {0xfffffffd, 0xb77, 0x2006, 0x0, 0x5, 0x8, 0x3, 0xa4de36948e08189d}}) write$binfmt_script(0xffffffffffffffff, &(0x7f00000001c0)={'#! ', './file0', [], 0xa, "a53f5d0434deca9d04"}, 0x14) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0) r1 = syz_open_dev$usbfs(0x0, 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a140efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb737ae996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be500e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef1d7ee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) ioctl$USBDEVFS_CLAIMINTERFACE(r1, 0x8004550f, &(0x7f00000001c0)) madvise(&(0x7f00006d3000/0x4000)=nil, 0x4000, 0x66) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) gettid() r3 = syz_open_dev$cec(&(0x7f00000003c0), 0x0, 0x0) ioctl$CEC_TRANSMIT(r3, 0xc0386105, &(0x7f0000000480)={0x5, 0xfffffffffffffffe, 0x7, 0x0, 0x0, 0x0, "0ff8000000000000c5c6ff0717c3a86d", 0x1, 0x2, 0x0, 0x6, 0x2, 0x8, 0xff}) 2.835936286s ago: executing program 0 (id=641): mkdir(&(0x7f0000000000)='./config\x00', 0x1ff) mkdir(&(0x7f0000000100)='./dev\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='configfs\x00', &(0x7f0000000300)='./config\x00', &(0x7f0000000400)='configfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000600)='./dev\x00', &(0x7f0000000700)='devtmpfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000800)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./config/usb_gadget/g1/os_desc/use\x00', 0x1, 0x0) write(r0, 0x0, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./config/usb_gadget/g1/os_desc/b_vendor_code\x00', 0x1, 0x0) write(r1, &(0x7f0000000c00)='0x40', 0x4) close(r1) mkdir(&(0x7f0000000d00)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdir(&(0x7f0000000e00)='./config/usb_gadget/g1/functions/ncm.usb0\x00', 0x1ff) symlink(&(0x7f0000000f00)='./config/usb_gadget/g1/functions/ncm.usb0\x00', &(0x7f0000001000)='./config/usb_gadget/g1/configs/c.1/ncm.usb0\x00') 2.832422216s ago: executing program 6 (id=642): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x36, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa22}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="2200000004"], 0x48) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r2}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r1, 0xffffffffffffffff}, 0x4) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x1b, 0x4e21, 0xc, @private2, 0x2}, {0xa, 0x4e21, 0x7, @private2, 0x6b8d}, 0xffffffffffffffff, 0xffff3d9b}}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0920000000000035090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000020000b7050000080000001c00000000000000bf980000000000000d080000000000008500000006000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) 2.774840813s ago: executing program 5 (id=643): socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x121301, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) connect(r2, &(0x7f0000002440)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x80) r3 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000001c0)='source', &(0x7f0000000100)='%\xff:2\x82|\x9a\xe0\xadA\xde\xd5\x03\x00\x00\x00\xb7\xe5\xee:\xb5\x0e\xec\xe5\xdc\xe5\x8d?\x16BE\x8b\xe8)\xa9H\x99\x10\x02q\xf7\xd3\xc5*\x15\xdf_\xb2_`\x92|\x7f\xff9\xf7o$e&1\xfd\xea\xb0\xb0', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000002c0)='s\xefurce', &(0x7f0000000300)='\xb0\xfb\xd9\x9a\xbe\r\xcc:\x9b\xd0}\xe8\xff\xff\xff\xff\xff\xff\xff\x7f\xce\xf5\x1a\x01\xd6\a\xfe\xb8\x92~wS\x87\xd9\x9e0y\xc9\x8cw-zu(ht\xa1~\x9a\x8d^+\x9f\xee\x9a(&W\\\xbb\xd5W\xeb\x06\x9dva\x06\xe3\x97\xa1\x88\x83W{\x00\xff\xff\xff\xff\xff\xff\xff\xe9\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00)o\b~\xe3t`\xc9=;o\xe5\xb4T)\x04\xf9k\xfb%t\xa7\x80c\xbb\xeb\x10\xb8\x01', 0x0) userfaultfd(0x1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r5, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r4}, 0x20) recvmmsg(r4, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0}, 0xa5f}], 0x1, 0x40000163, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x44, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x44}}, 0x8000000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240fe8000000000000000000000000000bbc7e78a0384e272b0be98b2e80ec3676726155ef459d633d773c742aa3814a238e65088e047ebbec0a31e471ae6a2a0ff6446da212bbdb52357de5c092a085a7a8b405f564c7fc0a4633a18810f093a3625958016eb4e1f6b815988e02af99afcbfb99a7782d66d6615193ecf6e3a2f504206790a213ff3c82b4ab53e00f69973833678a8032a702626ef117b9283fb2f6db76b"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) r9 = dup(r8) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r9, 0x84, 0x64, &(0x7f0000000040), 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) 2.600116222s ago: executing program 0 (id=644): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) setreuid(0x0, 0xee01) r3 = socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r3, 0x119, 0x1, 0x0, 0x0) 2.545339287s ago: executing program 6 (id=645): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20050840) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)) socket$inet6(0xa, 0x3, 0x7) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000780), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000001000000000000"], &(0x7f0000000000)='GPL\x00', 0xc}, 0x94) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r1, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) 2.353541553s ago: executing program 6 (id=646): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffe9f}}]}}, 0x0) syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100002439da20cd061201a2d20102030109021b0001000000000904000001717ffe000905a1"], 0x0) syz_usb_connect(0x0, 0xdd, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000c4b868085a230901dabd000000010902f10001000000000904000005"], 0x0) syz_usb_connect(0x0, 0x6d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100003cda2a200a111022"], 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x1, &(0x7f00000000c0)="cc") syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000440)={0x34, &(0x7f00000001c0)=ANY=[@ANYBLOB="002206"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) 1.557812588s ago: executing program 0 (id=647): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0x7b95b611, 0x802) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0xfffffeffffffffbc) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={&(0x7f0000000880)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16, @ANYBLOB="01002cbd7000ffdbdf2501000000060006004e200000140002007767320000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c64a1553b6e901b9ff2f518c78042fb5420800050001000000"], 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x8000) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r3, 0x2, {0x0, 0xff, 0x6}, 0xfe}, 0x18) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) r5 = syz_io_uring_setup(0x49a, &(0x7f0000000480)={0x0, 0xb892, 0x2, 0x2, 0x40024e}, &(0x7f0000000280), &(0x7f0000000040), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_RESIZE_RINGS(r5, 0x21, &(0x7f0000000400)={0x0, 0x8048fd, 0x4000, 0x3, 0x110}, 0x1) bind$can_j1939(0xffffffffffffffff, &(0x7f00000000c0)={0x1d, r4, 0x2, {0x1, 0xf0}, 0xfe}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) splice(r7, 0x0, r8, 0x0, 0x38f9, 0x0) fcntl$setstatus(r8, 0x4, 0x6c00) fcntl$setstatus(r8, 0x4, 0x2400) write(r6, &(0x7f0000000040), 0xffffff4a) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r3, {0xb, 0xfff2}, {0xfff1, 0xffff}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000082505a3a440000102030109023b0001010000000904000003"], 0x0) r9 = openat$sndtimer(0xffffff9c, &(0x7f0000000040), 0x2) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r9, 0xc0145401, &(0x7f00000001c0)={0x3, 0x2, 0x1, 0x3, 0x80000}) syz_pidfd_open(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000080000000000000064ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) 1.275214074s ago: executing program 4 (id=648): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000008000000000000000000910095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180), 0x4) bind$llc(0xffffffffffffffff, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0xff, 0x2, 0x9}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$XFS_IOC_INUMBERS(0xffffffffffffffff, 0x80405880, &(0x7f0000000880)={{0xdc, 0xc, 0xce, 0xff5, 0x8}}) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000080), 0x8100, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0xffffffff000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r0, r0, 0x2f, 0x0, @void}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000140)=r2, 0x4) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) syz_open_procfs(0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x8400) 1.168621794s ago: executing program 4 (id=649): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x11}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 1.029915414s ago: executing program 5 (id=650): socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x5b) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) sendmsg$key(0xffffffffffffffff, 0x0, 0x10) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x40e0, 0x0) pipe(&(0x7f0000000140)) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0}, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000002a000701fcffffff00000000057c000008000100", @ANYRES32=r3, @ANYBLOB="a2ab8800b5d75d9b56197a78099d965e070d5d683a2afabbfe743f1e0a2f0f235df122a42f805bcf69db0f147570a977bd5c205fc0f656d4af1bc5672e432c9f88f4c1d61b7ea590ad67428a66b2ed9a01d398976f42ee9f9836c0ae0e58ce81f9b8243debea4962560d6c13da4df4869220a08ae724820f4e4c2e469834c18c44e46253b84f17b74d81ae9092ad6cc69531c2"], 0x1c}, 0x1, 0x0, 0x0, 0x40001}, 0xc000) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r5, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000180)=0x62b8, 0x4) sendmsg$rds(r4, &(0x7f00000001c0)={&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000880)=""/4092, 0xffc}], 0x1, 0x0, 0x0, 0x20000800}, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) r6 = openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r6, 0xc0d05640, &(0x7f00000000c0)={0xa, @pix={0x0, 0x0, 0x34565348, 0x0, 0x0, 0x0, 0x25}}) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r7 = syz_open_dev$video(&(0x7f0000000280), 0x101, 0xab02) ioctl$VIDIOC_S_INPUT(r7, 0xc0045627, &(0x7f0000000180)=0x1) ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, &(0x7f0000000480)={{0xfd, 0x2}, 0x100, './file0\x00'}) 928.624088ms ago: executing program 6 (id=651): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x18) r4 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r4, r3, 0x0, 0x3a) 925.38738ms ago: executing program 4 (id=652): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x82c03, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x0, 0x8, 0x80000001, 0x7}, 0x42}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0xc8c0}, 0x2) r6 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0003000024c1020000ff1107c2fb7fe0400018534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) 146.573652ms ago: executing program 4 (id=653): socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x5b) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) sendmsg$key(0xffffffffffffffff, 0x0, 0x10) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x40e0, 0x0) pipe(&(0x7f0000000140)) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0}, &(0x7f00000001c0)=0xc) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000002a000701fcffffff00000000057c000008000100", @ANYRES32=r3, @ANYBLOB="a2ab8800b5d75d9b56197a78099d965e070d5d683a2afabbfe743f1e0a2f0f235df122a42f805bcf69db0f147570a977bd5c205fc0f656d4af1bc5672e432c9f88f4c1d61b7ea590ad67428a66b2ed9a01d398976f42ee9f9836c0ae0e58ce81f9b8243debea4962560d6c13da4df4869220a08ae724820f4e4c2e469834c18c44e46253b84f17b74d81ae9092ad6cc69531c2"], 0x1c}, 0x1, 0x0, 0x0, 0x40001}, 0xc000) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r5, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000180)=0x62b8, 0x4) sendmsg$rds(r4, &(0x7f00000001c0)={&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000880)=""/4092, 0xffc}], 0x1, 0x0, 0x0, 0x20000800}, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) r6 = openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r6, 0xc0d05640, &(0x7f00000000c0)={0xa, @pix={0x0, 0x0, 0x34565348, 0x0, 0x0, 0x0, 0x25}}) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r7 = syz_open_dev$video(&(0x7f0000000280), 0x101, 0xab02) ioctl$VIDIOC_S_INPUT(r7, 0xc0045627, &(0x7f0000000180)=0x1) ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, &(0x7f0000000480)={{0xfd, 0x2}, 0x100, './file0\x00'}) 0s ago: executing program 6 (id=654): fsopen(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$SNDCTL_SEQ_GETOUTCOUNT(r0, 0x4004510d, &(0x7f0000000000)) read$char_usb(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) munmap(&(0x7f00002d2000/0x4000)=nil, 0x4000) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x8000, 0x1000}, 0x20) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) kernel console output (not intermixed with test programs): x snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.89/input/input5 [ 93.637914][ T805] em28xx 1-1:0.89: Remote control support is not available for this card. [ 93.648940][ T5727] em28xx 1-1:0.89: Closing input extension [ 93.656596][ T5727] em28xx 1-1:0.89: Deregistering snapshot button [ 93.673668][ T5968] evm: overlay not supported [ 93.722299][ T5727] em28xx 1-1:0.89: Freeing device [ 93.824732][ T805] hub 5-1:0.0: activate --> -90 [ 94.006179][ T5727] usb 4-1: USB disconnect, device number 2 [ 94.109771][ T5976] kAFS: unable to lookup cell '' [ 94.224351][ T5734] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 94.257120][ T5705] usb 5-1: USB disconnect, device number 2 [ 94.281917][ T5980] syz.1.59 uses obsolete (PF_INET,SOCK_PACKET) [ 94.405767][ T5734] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.433024][ T5734] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 94.462738][ T5734] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.480332][ T5734] usb 1-1: config 0 descriptor?? [ 94.720051][ T5734] usbhid 1-1:0.0: can't add hid device: -71 [ 94.743054][ T5734] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 94.819138][ T5734] usb 1-1: USB disconnect, device number 3 [ 94.871841][ T5992] Illegal XDP return value 4294967294 on prog (id 3) dev syz_tun, expect packet loss! [ 95.025733][ T30] kauditd_printk_skb: 53 callbacks suppressed [ 95.025750][ T30] audit: type=1400 audit(1785455069.536:281): avc: denied { create } for pid=5996 comm="syz.1.66" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 95.247239][ T6001] netlink: 4 bytes leftover after parsing attributes in process `syz.3.68'. [ 95.274907][ T805] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 95.284219][ T5734] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 95.380918][ T6009] kAFS: unable to lookup cell '' [ 95.445593][ T5734] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.445813][ T805] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 95.479501][ T5734] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 95.495233][ T805] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 95.505182][ T5727] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 95.520390][ T5734] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.520478][ T805] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 95.555399][ T5734] usb 1-1: config 0 descriptor?? [ 95.572007][ T805] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.616361][ T5998] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 95.628884][ T805] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 95.664152][ T5727] usb 4-1: Using ep0 maxpacket: 8 [ 95.683880][ T5727] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 95.720665][ T5727] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 95.769497][ T5727] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 95.811117][ T5727] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.842534][ T30] audit: type=1400 audit(1785455070.346:282): avc: denied { mount } for pid=6015 comm="syz.2.72" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 95.853186][ T5727] usb 4-1: Product: syz [ 95.923652][ T30] audit: type=1400 audit(1785455070.346:283): avc: denied { search } for pid=6015 comm="syz.2.72" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 95.946195][ T805] usb 2-1: USB disconnect, device number 3 [ 95.952281][ T5727] usb 4-1: Manufacturer: syz [ 95.969161][ T5727] usb 4-1: SerialNumber: syz [ 95.988346][ T30] audit: type=1400 audit(1785455070.346:284): avc: denied { write } for pid=6015 comm="syz.2.72" name="trace_marker" dev="tracefs" ino=1848 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 95.995497][ T5727] usbtest 4-1:1.0: couldn't get endpoints, -22 [ 96.018877][ T30] audit: type=1400 audit(1785455070.346:285): avc: denied { open } for pid=6015 comm="syz.2.72" path="/17/dir0/trace_marker" dev="tracefs" ino=1848 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 96.104621][ T5727] usbtest 4-1:1.0: probe with driver usbtest failed with error -22 [ 96.164611][ T30] audit: type=1400 audit(1785455070.396:286): avc: denied { search } for pid=6015 comm="syz.2.72" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 96.190669][ T30] audit: type=1400 audit(1785455070.396:287): avc: denied { read } for pid=6015 comm="syz.2.72" name="trace" dev="tracefs" ino=1797 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 96.222070][ T30] audit: type=1400 audit(1785455070.486:288): avc: denied { unmount } for pid=5617 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 96.385465][ T5973] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.395002][ T5734] aiptek 1-1:0.0: Aiptek using 400 ms programming speed [ 96.405339][ T5734] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input6 [ 96.418400][ T5973] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.505195][ T5705] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 96.640657][ T6022] VFS: Lookup of 'file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' in fuse fuse would have caused loop [ 96.674542][ T5705] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 96.684799][ T5705] usb 3-1: config 0 has no interfaces? [ 96.695435][ T5705] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 96.714290][ T5705] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 96.729804][ T5705] usb 3-1: Product: syz [ 96.739193][ T5705] usb 3-1: Manufacturer: syz [ 96.775756][ T5816] usb 1-1: USB disconnect, device number 4 [ 96.775797][ C0] aiptek 1-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 96.796764][ T5705] usb 3-1: config 0 descriptor?? [ 96.954819][ T6028] kvm: kvm [6027]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7 [ 96.963390][ T6028] kvm: kvm [6027]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7 [ 97.034415][ T6019] process 'syz.2.73' launched './file0' with NULL argv: empty string added [ 97.043092][ T30] audit: type=1400 audit(1785455071.536:289): avc: denied { execute } for pid=6018 comm="syz.2.73" name="file0" dev="tmpfs" ino=139 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 97.084661][ T5705] usb 3-1: USB disconnect, device number 2 [ 97.111011][ T30] audit: type=1400 audit(1785455071.546:290): avc: denied { read write } for pid=5610 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 98.143764][ T805] usb 4-1: USB disconnect, device number 3 [ 98.324148][ T5734] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 98.484131][ T5734] usb 2-1: Using ep0 maxpacket: 16 [ 98.497146][ T5734] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 98.525011][ T5734] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 98.544377][ T5734] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 98.557584][ T5734] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.565951][ T5734] usb 2-1: Product: syz [ 98.570926][ T5734] usb 2-1: Manufacturer: syz [ 98.576469][ T5734] usb 2-1: SerialNumber: syz [ 98.593018][ T5734] usb 2-1: config 0 descriptor?? [ 98.622568][ T5734] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 98.634155][ T5734] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 99.230031][ T5734] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 99.239076][ T5734] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 99.649624][ T5734] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 99.658929][ T5734] em28xx 2-1:0.0: No AC97 audio processor [ 99.674178][ T5734] usb 2-1: USB disconnect, device number 4 [ 99.685654][ T5734] em28xx 2-1:0.0: Disconnecting em28xx [ 99.696010][ T5734] em28xx 2-1:0.0: Freeing device [ 100.036496][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 100.036513][ T30] audit: type=1400 audit(1785455074.546:308): avc: denied { read write } for pid=6083 comm="syz.4.96" name="uinput" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 100.070177][ T30] audit: type=1400 audit(1785455074.546:309): avc: denied { open } for pid=6083 comm="syz.4.96" path="/dev/uinput" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 100.125282][ T30] audit: type=1400 audit(1785455074.636:310): avc: denied { ioctl } for pid=6083 comm="syz.4.96" path="/dev/uinput" dev="devtmpfs" ino=921 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 100.152694][ T6084] input: syz0 as /devices/virtual/input/input7 [ 100.702857][ T6052] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 100.722347][ T6058] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 100.748813][ T6067] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 100.850229][ T30] audit: type=1400 audit(1785455075.356:311): avc: denied { create } for pid=6102 comm="syz.2.104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 100.904258][ T30] audit: type=1400 audit(1785455075.396:312): avc: denied { setopt } for pid=6102 comm="syz.2.104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 101.100886][ T30] audit: type=1400 audit(1785455075.606:313): avc: denied { mount } for pid=6107 comm="syz.3.107" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 101.170461][ T30] audit: type=1400 audit(1785455075.676:314): avc: denied { create } for pid=6111 comm="syz.0.108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 101.192198][ T30] audit: type=1400 audit(1785455075.676:315): avc: denied { ioctl } for pid=6111 comm="syz.0.108" path="socket:[10964]" dev="sockfs" ino=10964 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 101.220716][ T30] audit: type=1400 audit(1785455075.676:316): avc: denied { bind } for pid=6111 comm="syz.0.108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 101.272832][ T30] audit: type=1400 audit(1785455075.676:317): avc: denied { setopt } for pid=6111 comm="syz.0.108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 101.335260][ T5816] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 101.344146][ T10] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 101.492343][ T6105] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 101.504678][ T10] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice= 1.00 [ 101.505005][ T5816] usb 3-1: Using ep0 maxpacket: 32 [ 101.515187][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.539616][ T5816] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.551938][ T5816] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 101.562720][ T5816] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 101.577152][ T5816] usb 3-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 101.586235][ T5816] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.597068][ T5816] usb 3-1: config 0 descriptor?? [ 101.761347][ T6121] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 101.884736][ T5727] usb 4-1: USB disconnect, device number 4 [ 102.054843][ T5816] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5011.0001/input/input8 [ 102.211865][ T5816] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5011.0001/input/input9 [ 102.293088][ T5816] kye 0003:0458:5011.0001: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.2-1/input0 [ 102.449436][ T10] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 102.624183][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 102.633564][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 102.642889][ T10] usb 1-1: config 65 has an invalid interface number: 60 but max is 0 [ 102.653980][ T10] usb 1-1: config 65 has no interface number 0 [ 102.660400][ T10] usb 1-1: config 65 interface 60 has no altsetting 0 [ 102.674095][ T10] usb 1-1: string descriptor 0 read error: -22 [ 102.687845][ T10] usb 1-1: New USB device found, idVendor=0499, idProduct=7010, bcdDevice=48.d3 [ 102.709440][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.743376][ T10] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 102.779336][ T6135] warning: `syz.1.117' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 102.864946][ T10] snd-usb-audio 1-1:65.60: probe with driver snd-usb-audio failed with error -2 [ 102.935688][ T6140] binder: 6139:6140 ioctl 4018620d 0 returned -22 [ 103.019311][ T5816] usb 1-1: USB disconnect, device number 5 [ 103.086342][ C0] kye 0003:0458:5011.0001: usb_submit_urb(ctrl) failed: -1 [ 103.696341][ T10] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 103.789274][ T6157] 9pnet: p9_errstr2errno: server reported unknown error 0x000000 [ 103.876950][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 103.890554][ T10] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 103.903256][ T10] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 103.919145][ T805] usb 3-1: USB disconnect, device number 3 [ 103.940862][ T10] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 103.991831][ T10] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 104.032990][ T10] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 104.056068][ T10] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 104.073756][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.345270][ T10] usb 4-1: usb_control_msg returned -32 [ 104.360372][ T10] usbtmc 4-1:16.0: can't read capabilities [ 104.713581][ T6172] usbtmc 4-1:16.0: INDICATOR_PULSE returned 0 [ 104.910516][ T6180] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 105.489798][ T5734] usb 4-1: USB disconnect, device number 5 [ 105.788274][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 105.788290][ T30] audit: type=1400 audit(1785455080.296:324): avc: denied { create } for pid=6195 comm="syz.1.135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 105.815341][ T30] audit: type=1400 audit(1785455080.306:325): avc: denied { connect } for pid=6195 comm="syz.1.135" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 105.837033][ T30] audit: type=1400 audit(1785455080.326:326): avc: denied { ioctl } for pid=6195 comm="syz.1.135" path="socket:[11199]" dev="sockfs" ino=11199 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 106.299413][ T30] audit: type=1400 audit(1785455080.326:327): avc: denied { write } for pid=6195 comm="syz.1.135" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 106.346164][ T30] audit: type=1400 audit(1785455080.776:328): avc: denied { write } for pid=6195 comm="syz.1.135" laddr=::1 lport=6 faddr=::1 fport=20011 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 106.870884][ T5816] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 107.384745][ T5816] usb 2-1: Using ep0 maxpacket: 8 [ 107.402901][ T5816] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 107.421004][ T5816] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 107.529507][ T5816] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 107.539867][ T5816] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 107.556212][ T5816] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 107.570885][ T5816] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 107.590784][ T5816] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.688471][ T6224] ubi0: attaching mtd0 [ 107.716807][ T6224] ubi0: scanning is finished [ 107.721491][ T6224] ubi0: empty MTD device detected [ 107.804808][ T30] audit: type=1400 audit(1785455082.306:329): avc: denied { mount } for pid=6223 comm="syz.4.144" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 107.826034][ T5816] usb 2-1: usb_control_msg returned -32 [ 107.832860][ T5816] usbtmc 2-1:16.0: can't read capabilities [ 107.929651][ T6224] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 107.953398][ T6224] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 107.991770][ T6224] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 108.014557][ T6224] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 108.030192][ T6224] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 108.044178][ T6224] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 108.067970][ T6224] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1730266249 [ 108.103899][ T6224] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 108.160874][ T6233] ubi0: background thread "ubi_bgt0d" started, PID 6233 [ 108.754276][ T30] audit: type=1400 audit(1785455083.256:330): avc: denied { unmount } for pid=5610 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 108.784717][ T6246] usbtmc 2-1:16.0: CHECK_CLEAR_STATUS returned 4 [ 108.990198][ T6255] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 109.034608][ T5734] usb 2-1: USB disconnect, device number 5 [ 109.691621][ T30] audit: type=1326 audit(1785455084.196:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6261 comm="syz.4.154" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe314d9e019 code=0x0 [ 109.865036][ T30] audit: type=1400 audit(1785455084.366:332): avc: denied { append } for pid=6268 comm="syz.2.155" name="ppp" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 109.962072][ T30] audit: type=1400 audit(1785455084.466:333): avc: denied { read } for pid=6270 comm="syz.1.156" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 110.569000][ T6288] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 111.367727][ T6295] netlink: 4 bytes leftover after parsing attributes in process `syz.2.165'. [ 111.723751][ T6302] fuse: Bad value for 'fd' [ 112.119139][ T5705] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 112.274370][ T5705] usb 3-1: Using ep0 maxpacket: 8 [ 112.394010][ T5705] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 112.552014][ T5705] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 112.708632][ T5705] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 112.730889][ T5705] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.755890][ T5705] usb 3-1: Product: syz [ 112.777659][ T5705] usb 3-1: Manufacturer: syz [ 112.798142][ T5705] usb 3-1: SerialNumber: syz [ 112.830895][ T5705] usbtest 3-1:1.0: couldn't get endpoints, -22 [ 112.845936][ T5705] usbtest 3-1:1.0: probe with driver usbtest failed with error -22 [ 113.261187][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 113.261205][ T30] audit: type=1400 audit(1785455087.766:341): avc: denied { mounton } for pid=6333 comm="syz.4.172" path="/36/file0" dev="tmpfs" ino=216 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 113.499172][ T6343] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 113.875245][ T805] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 114.054127][ T805] usb 2-1: Using ep0 maxpacket: 32 [ 114.067214][ T805] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 114.075549][ T805] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 114.086674][ T805] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 114.090089][ T10] usb 3-1: USB disconnect, device number 4 [ 114.098771][ T805] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 114.118188][ T805] usb 2-1: config 0 interface 0 has no altsetting 0 [ 114.133584][ T805] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 114.142892][ T805] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 114.164622][ T805] usb 2-1: Product: syz [ 114.173824][ T805] usb 2-1: Manufacturer: syz [ 114.180276][ T805] usb 2-1: SerialNumber: syz [ 114.198455][ T30] audit: type=1400 audit(1785455088.706:342): avc: denied { create } for pid=6346 comm="syz.2.176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 114.225913][ T805] usb 2-1: config 0 descriptor?? [ 114.232516][ T805] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 114.256616][ T30] audit: type=1400 audit(1785455088.756:343): avc: denied { bind } for pid=6346 comm="syz.2.176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 114.290863][ T805] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 114.340383][ T30] audit: type=1400 audit(1785455088.756:344): avc: denied { listen } for pid=6346 comm="syz.2.176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 114.414672][ T30] audit: type=1400 audit(1785455088.756:345): avc: denied { connect } for pid=6346 comm="syz.2.176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 114.577458][ T6345] ldusb 2-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 114.594697][ T10] usb 2-1: USB disconnect, device number 6 [ 114.597383][ C1] ldusb 2-1:0.0: usb_submit_urb failed (-19) [ 114.636960][ T30] audit: type=1400 audit(1785455088.766:346): avc: denied { accept } for pid=6346 comm="syz.2.176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 114.639036][ T10] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 114.656740][ T30] audit: type=1400 audit(1785455088.766:347): avc: denied { write } for pid=6346 comm="syz.2.176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 114.693436][ T6355] ======================================================= [ 114.693436][ T6355] WARNING: The mand mount option has been deprecated and [ 114.693436][ T6355] and is ignored by this kernel. Remove the mand [ 114.693436][ T6355] option from the mount to silence this warning. [ 114.693436][ T6355] ======================================================= [ 114.716595][ T30] audit: type=1400 audit(1785455089.196:348): avc: denied { mounton } for pid=6353 comm="syz.3.180" path="/proc/108/task" dev="proc" ino=12816 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 115.407250][ T6368] netlink: 'syz.3.182': attribute type 1 has an invalid length. [ 115.441512][ T6368] 8021q: adding VLAN 0 to HW filter on device bond1 [ 115.479463][ T6368] bond1: (slave geneve2): making interface the new active one [ 115.488856][ T6368] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 116.044705][ T6380] netlink: 4 bytes leftover after parsing attributes in process `syz.3.186'. [ 116.058518][ T6392] kAFS: unable to lookup cell '' [ 116.296281][ T10] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 116.346399][ T30] audit: type=1400 audit(1785455090.856:349): avc: denied { map } for pid=6398 comm="syz.1.191" path="socket:[12936]" dev="sockfs" ino=12936 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 116.387370][ T6397] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 116.475782][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 116.495071][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 116.539038][ T10] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 116.578439][ T30] audit: type=1400 audit(1785455091.086:350): avc: denied { mount } for pid=6405 comm="syz.4.192" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 116.605002][ T10] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 116.622701][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.641395][ T10] usb 4-1: Product: syz [ 116.655781][ T10] usb 4-1: Manufacturer: syz [ 116.668018][ T10] usb 4-1: SerialNumber: syz [ 116.703654][ T10] usbtest 4-1:1.0: couldn't get endpoints, -22 [ 116.726295][ T10] usbtest 4-1:1.0: probe with driver usbtest failed with error -22 [ 117.922187][ T6428] kvm: pic: non byte read [ 117.922386][ T6428] kvm: pic: non byte read [ 117.923218][ T6428] kvm: pic: level sensitive irq not supported [ 117.926754][ T6428] kvm: pic: non byte read [ 117.954468][ T6428] kvm: pic: level sensitive irq not supported [ 117.954520][ T6428] kvm: pic: non byte read [ 117.954693][ T6428] kvm: pic: level sensitive irq not supported [ 117.954739][ T6428] kvm: pic: non byte read [ 117.954904][ T6428] kvm: pic: level sensitive irq not supported [ 117.954950][ T6428] kvm: pic: non byte read [ 117.955113][ T6428] kvm: pic: level sensitive irq not supported [ 117.955158][ T6428] kvm: pic: non byte read [ 117.955343][ T6428] kvm: pic: level sensitive irq not supported [ 117.955388][ T6428] kvm: pic: non byte read [ 117.955549][ T6428] kvm: pic: level sensitive irq not supported [ 117.955599][ T6428] kvm: pic: non byte read [ 117.955788][ T6428] kvm: pic: level sensitive irq not supported [ 117.955833][ T6428] kvm: pic: non byte read [ 117.955996][ T6428] kvm: pic: level sensitive irq not supported [ 117.956195][ T6428] kvm: pic: level sensitive irq not supported [ 118.151677][ T6435] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 118.190378][ T6437] input: syz0 as /devices/virtual/input/input10 [ 118.723358][ T6451] kAFS: unable to lookup cell '' [ 118.740177][ T5816] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 118.823395][ T805] usb 4-1: USB disconnect, device number 6 [ 118.920089][ T5816] usb 2-1: Using ep0 maxpacket: 8 [ 119.095158][ T5816] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 119.174963][ T5816] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 119.270641][ T5816] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 119.281714][ T5816] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 119.294743][ T5816] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 119.329078][ T5816] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 119.351795][ T5816] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.554253][ T10] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 119.727552][ T10] usb 4-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 119.748517][ T10] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 119.772653][ T6461] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 119.786110][ T10] usb 4-1: Product: syz [ 119.787356][ T5816] usb 2-1: GET_CAPABILITIES returned 0 [ 119.795545][ T10] usb 4-1: Manufacturer: syz [ 119.799385][ T5816] usbtmc 2-1:16.0: can't read capabilities [ 119.809189][ T10] usb 4-1: SerialNumber: syz [ 119.834382][ T10] usb 4-1: config 0 descriptor?? [ 120.101914][ T5727] usb 4-1: USB disconnect, device number 7 [ 120.134992][ T5816] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 120.264480][ T6474] kAFS: unable to lookup cell '' [ 120.304445][ T5705] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 120.308277][ T5816] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 120.332394][ T5816] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.350381][ T5816] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 120.385288][ T5816] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 120.403079][ T5816] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 120.412838][ T5816] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 120.421861][ T5816] usb 3-1: Manufacturer: syz [ 120.438734][ T5816] usb 3-1: config 0 descriptor?? [ 120.516125][ T5705] usb 1-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 120.529347][ T5705] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.562794][ T5705] as10x_usb: device has been detected [ 120.582035][ T5705] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 120.629067][ T5705] usb 1-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 120.774531][ T6478] faux_driver vgem: [drm] Unknown color mode 7; guessing buffer size. [ 120.775145][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 120.775160][ T30] audit: type=1400 audit(1785455095.286:356): avc: denied { firmware_load } for pid=5705 comm="kworker/0:3" path="/lib/firmware/as102_data1_st.hex" dev="sda1" ino=297 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 120.872977][ T5816] appleir 0003:05AC:8243.0002: unknown main item tag 0x0 [ 120.918803][ T5816] appleir 0003:05AC:8243.0002: hiddev2,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 121.024423][ T5705] as10x_usb: error during firmware upload part1 [ 121.031150][ T5705] Registered device Abilis Systems DVB-Titan [ 122.074161][ T5705] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 122.236078][ T5705] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 32 [ 122.246130][ T5705] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 32 [ 122.256315][ T5705] usb 5-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00 [ 122.265549][ T5705] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.280333][ T6495] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 122.296606][ T6495] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 122.329083][ T5705] cyberjack 5-1:1.0: Reiner SCT Cyberjack USB card reader converter detected [ 122.366649][ T5705] usb 5-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 122.674124][ T5734] usb 5-1: USB disconnect, device number 3 [ 122.695104][ T5734] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 122.715938][ T5734] cyberjack 5-1:1.0: device disconnected [ 122.921400][ T5734] usb 3-1: USB disconnect, device number 5 [ 123.012950][ T30] audit: type=1400 audit(1785455097.516:357): avc: denied { create } for pid=6497 comm="syz.2.221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 123.042200][ T30] audit: type=1400 audit(1785455097.536:358): avc: denied { write } for pid=6497 comm="syz.2.221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 123.089080][ T30] audit: type=1400 audit(1785455097.536:359): avc: denied { read } for pid=6497 comm="syz.2.221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 123.120005][ T5705] usb 1-1: USB disconnect, device number 6 [ 123.175696][ T30] audit: type=1400 audit(1785455097.616:360): avc: denied { setopt } for pid=6497 comm="syz.2.221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 123.271828][ T5705] Unregistered device Abilis Systems DVB-Titan [ 123.287637][ T6486] Set syz1 is full, maxelem 65536 reached [ 123.296877][ T5705] as10x_usb: device has been disconnected [ 123.901910][ T6515] kAFS: unable to lookup cell '' [ 123.933019][ T6516] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 124.274942][ T805] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 124.451957][ T30] audit: type=1400 audit(1785455098.956:361): avc: denied { create } for pid=6524 comm="syz.2.229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 124.454512][ T805] usb 1-1: Using ep0 maxpacket: 32 [ 124.500849][ T805] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.521713][ T805] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.537607][ T805] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 124.573586][ T30] audit: type=1400 audit(1785455098.956:362): avc: denied { search } for pid=5272 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 124.579012][ T805] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.674958][ T805] usb 1-1: config 0 descriptor?? [ 124.698700][ T30] audit: type=1400 audit(1785455098.956:363): avc: denied { search } for pid=5272 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 124.780156][ T30] audit: type=1400 audit(1785455098.956:364): avc: denied { search } for pid=5272 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 124.871421][ T30] audit: type=1400 audit(1785455098.956:365): avc: denied { read } for pid=5272 comm="dhcpcd" name="n30" dev="tmpfs" ino=3147 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 125.069687][ T6447] usbtmc 2-1:16.0: usb_control_msg returned -110 [ 125.137914][ T805] ft260 0003:0403:6030.0003: unknown main item tag 0x0 [ 125.154456][ T805] ft260 0003:0403:6030.0003: unknown main item tag 0x0 [ 125.200773][ T5705] usb 2-1: USB disconnect, device number 7 [ 125.313087][ T805] ft260 0003:0403:6030.0003: chip code: 0000 0000 [ 125.403994][ T6548] netlink: 'syz.2.235': attribute type 1 has an invalid length. [ 125.482988][ T6548] 8021q: adding VLAN 0 to HW filter on device bond1 [ 125.513695][ T805] ft260 0003:0403:6030.0003: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.0-1/input0 [ 125.715361][ T805] ft260 0003:0403:6030.0003: failed to retrieve status: -32, no wakeup [ 125.743139][ T6548] bond1: (slave geneve2): making interface the new active one [ 125.752240][ T6560] binder_alloc: 6559: binder_alloc_buf, no vma [ 125.780052][ T6548] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 125.898474][ T6568] kAFS: unable to lookup cell '' [ 125.996814][ T6520] i2c i2c-1: adapter quirk: 2nd comb msg must be read (addr 0x3f43, size 0, write) [ 126.032296][ T805] usb 1-1: USB disconnect, device number 7 [ 126.264025][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 126.264042][ T30] audit: type=1400 audit(1785455100.766:383): avc: denied { create } for pid=6577 comm="syz.3.242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 126.347798][ T30] audit: type=1400 audit(1785455100.796:384): avc: denied { ioctl } for pid=6577 comm="syz.3.242" path="socket:[14463]" dev="sockfs" ino=14463 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 126.419617][ T30] audit: type=1400 audit(1785455100.816:385): avc: denied { bind } for pid=6577 comm="syz.3.242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 126.460491][ T30] audit: type=1400 audit(1785455100.816:386): avc: denied { write } for pid=6577 comm="syz.3.242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 126.482284][ T30] audit: type=1400 audit(1785455100.816:387): avc: denied { read } for pid=6577 comm="syz.3.242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 126.570317][ T6588] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 126.620254][ T30] audit: type=1400 audit(1785455101.096:388): avc: denied { write } for pid=6565 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 126.671900][ T6591] binder: BINDER_SET_CONTEXT_MGR already set [ 126.688574][ T6591] binder: 6590:6591 ioctl 4018620d 200000001000 returned -16 [ 126.704143][ T30] audit: type=1400 audit(1785455101.176:389): avc: denied { map } for pid=6590 comm="syz.0.244" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 126.932389][ T30] audit: type=1400 audit(1785455101.436:390): avc: denied { write } for pid=6598 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 127.384278][ T30] audit: type=1400 audit(1785455101.886:391): avc: denied { write } for pid=6602 comm="syz.4.247" path="socket:[14577]" dev="sockfs" ino=14577 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 127.466341][ T30] audit: type=1400 audit(1785455101.926:392): avc: denied { read write } for pid=6604 comm="syz.0.248" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 127.811369][ T6613] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 128.423270][ T82] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.625692][ T82] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.749257][ T82] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.769999][ T50] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 128.780017][ T50] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 128.795071][ T50] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 128.808679][ T50] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 128.818161][ T50] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 128.831240][ T6629] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 128.834813][ T10] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 128.876198][ T6629] block device autoloading is deprecated and will be removed. [ 128.889255][ T82] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.064199][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 129.136093][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.395050][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.467021][ T10] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 129.483508][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.545769][ T10] usb 5-1: config 0 descriptor?? [ 129.686011][ T82] bridge_slave_1: left allmulticast mode [ 129.713911][ T82] bridge_slave_1: left promiscuous mode [ 129.763339][ T82] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.847304][ T82] bridge_slave_0: left allmulticast mode [ 129.861380][ T82] bridge_slave_0: left promiscuous mode [ 129.862158][ T6646] Config c/1 of g1 needs at least one function. [ 129.878815][ T82] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.938980][ T6646] udc usbip-vudc.0: failed to start g1: -22 [ 129.961148][ T6646] configfs-gadget.g1 gadget.32: probe with driver configfs-gadget.g1 failed with error -22 [ 130.006312][ T10] ft260 0003:0403:6030.0004: unknown main item tag 0x0 [ 130.027555][ T6646] UDC core: g1: couldn't find an available UDC or it's busy [ 130.041766][ T10] ft260 0003:0403:6030.0004: unknown main item tag 0x0 [ 130.166824][ T6659] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 130.202989][ T10] ft260 0003:0403:6030.0004: chip code: 0000 0000 [ 130.403815][ T10] ft260 0003:0403:6030.0004: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.4-1/input0 [ 130.508850][ T82] bond1 (unregistering): (slave geneve2): Releasing active interface [ 130.587886][ T82] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 130.608420][ T10] ft260 0003:0403:6030.0004: failed to retrieve status: -32, no wakeup [ 130.617296][ T82] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 130.634386][ T82] bond0 (unregistering): Released all slaves [ 130.682497][ T82] bond1 (unregistering): Released all slaves [ 130.779731][ T6652] netlink: 76 bytes leftover after parsing attributes in process `syz.0.262'. [ 130.927617][ T5630] Bluetooth: hci3: command tx timeout [ 131.068670][ T5272] 8021q: adding VLAN 0 to HW filter on device eth2 [ 131.346143][ T6623] i2c i2c-1: adapter quirk: comb msg only to same addr (addr 0x0003, size 0, write) [ 131.366660][ T5705] usb 5-1: reset high-speed USB device number 4 using dummy_hcd [ 131.569386][ T6688] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 131.691831][ T6689] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 132.026428][ T82] hsr_slave_0: left promiscuous mode [ 132.052841][ T82] hsr_slave_1: left promiscuous mode [ 132.073600][ T82] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 132.107848][ T82] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 132.118178][ T6699] netlink: 4 bytes leftover after parsing attributes in process `syz.1.270'. [ 132.140054][ T6711] kAFS: unable to lookup cell '' [ 132.170882][ T82] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 132.187164][ T5734] usb 5-1: USB disconnect, device number 4 [ 132.202857][ T82] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 132.261193][ T82] veth1_macvtap: left promiscuous mode [ 132.267374][ T82] veth0_macvtap: left promiscuous mode [ 132.277549][ T82] veth1_vlan: left promiscuous mode [ 132.293939][ T82] veth0_vlan: left promiscuous mode [ 132.458280][ T30] kauditd_printk_skb: 41 callbacks suppressed [ 132.458297][ T30] audit: type=1400 audit(1785455106.966:434): avc: denied { write } for pid=6694 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 132.492236][ T10] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 132.521949][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.528887][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.661041][ T30] audit: type=1400 audit(1785455107.166:435): avc: denied { write } for pid=6723 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 132.718069][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 132.749642][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 132.775442][ T10] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 132.811073][ T10] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 132.823687][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.860190][ T10] usb 2-1: Product: syz [ 132.873881][ T10] usb 2-1: Manufacturer: syz [ 132.889928][ T10] usb 2-1: SerialNumber: syz [ 132.942177][ T10] usbtest 2-1:1.0: couldn't get endpoints, -22 [ 132.958546][ T10] usbtest 2-1:1.0: probe with driver usbtest failed with error -22 [ 132.977081][ T6727] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 132.994131][ T5630] Bluetooth: hci3: command tx timeout [ 133.095687][ T82] team0 (unregistering): Port device team_slave_1 removed [ 133.315712][ T82] team0 (unregistering): Port device team_slave_0 removed [ 134.017588][ T6740] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 134.703272][ T6745] dlm: no local IP address has been set [ 134.709578][ T6745] dlm: cannot start dlm midcomms -107 [ 135.074534][ T5630] Bluetooth: hci3: command tx timeout [ 135.222261][ T5272] 8021q: adding VLAN 0 to HW filter on device eth1 [ 135.258309][ T5705] usb 2-1: USB disconnect, device number 8 [ 135.736657][ T6627] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.768646][ T6627] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.777322][ T6627] bridge_slave_0: entered allmulticast mode [ 135.786134][ T6627] bridge_slave_0: entered promiscuous mode [ 135.799308][ T6627] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.827197][ T6627] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.837350][ T6627] bridge_slave_1: entered allmulticast mode [ 135.854234][ T6627] bridge_slave_1: entered promiscuous mode [ 135.950584][ T6627] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 135.988103][ T6777] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 136.063115][ T6627] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 136.190387][ T6627] team0: Port device team_slave_0 added [ 136.205884][ T6627] team0: Port device team_slave_1 added [ 136.306801][ T30] audit: type=1400 audit(1785455110.816:436): avc: denied { write } for pid=6764 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 136.347954][ T6627] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 136.385944][ T6627] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 136.440256][ T6627] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 136.469270][ T6627] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 136.484479][ T6627] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 136.559006][ T50] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 136.573288][ T50] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 136.581065][ T50] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 136.591901][ T50] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 136.599474][ T50] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 136.627179][ T6627] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 136.758673][ T30] audit: type=1400 audit(1785455111.266:437): avc: denied { write } for pid=6791 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 136.796366][ T6627] hsr_slave_0: entered promiscuous mode [ 136.805883][ T6627] hsr_slave_1: entered promiscuous mode [ 136.814381][ T6627] debugfs: 'hsr0' already exists in 'hsr' [ 136.820272][ T6627] Cannot create hsr debugfs directory [ 136.989201][ T82] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.077325][ T5272] 8021q: adding VLAN 0 to HW filter on device eth3 [ 137.144561][ T5630] Bluetooth: hci3: command tx timeout [ 137.258783][ T82] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.425762][ T30] audit: type=1400 audit(1785455111.926:438): avc: denied { write } for pid=6799 comm="syz.0.292" name="unix" dev="proc" ino=4026532970 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 137.489339][ T30] audit: type=1400 audit(1785455111.966:439): avc: denied { create } for pid=6798 comm="syz.1.291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 137.530598][ T82] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.606377][ T6808] UDC core: g1: couldn't find an available UDC or it's busy [ 137.617424][ T6808] UDC core: g1: couldn't find an available UDC or it's busy [ 137.684130][ T5705] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 137.726950][ T82] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.731838][ T6814] netlink: 'syz.1.294': attribute type 2 has an invalid length. [ 137.737485][ T30] audit: type=1400 audit(1785455112.236:440): avc: denied { connect } for pid=6813 comm="syz.1.294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 137.865895][ T5705] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 25711, setting to 64 [ 137.890531][ T5705] usb 1-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=69.cf [ 137.909324][ T5705] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.917713][ T5705] usb 1-1: Product: syz [ 137.932757][ T5705] usb 1-1: Manufacturer: syz [ 137.953148][ T5705] usb 1-1: SerialNumber: syz [ 137.968362][ T30] audit: type=1400 audit(1785455112.476:441): avc: denied { write } for pid=6804 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 138.011440][ T5705] usb 1-1: config 0 descriptor?? [ 138.023737][ T6801] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 138.067767][ T5705] uvcvideo 1-1:0.0: Found UVC 0.00 device syz (18ec:3288) [ 138.098480][ T5705] uvcvideo 1-1:0.0: No valid video chain found. [ 138.176090][ T30] audit: type=1400 audit(1785455112.686:442): avc: denied { write } for pid=6823 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 138.312376][ T30] audit: type=1400 audit(1785455112.816:443): avc: denied { read } for pid=5272 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 138.347096][ T5705] usb 1-1: USB disconnect, device number 8 [ 138.357237][ T5272] 8021q: adding VLAN 0 to HW filter on device eth4 [ 138.392262][ T6825] netlink: 4 bytes leftover after parsing attributes in process `syz.1.295'. [ 138.398019][ T6627] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 138.418927][ T6627] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 138.435725][ T6627] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 138.457287][ T6627] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 138.492149][ T6627] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 138.513076][ T6627] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 138.531288][ T6627] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 138.547994][ T6627] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 138.664672][ T5630] Bluetooth: hci4: command tx timeout [ 138.680517][ T82] bridge_slave_1: left allmulticast mode [ 138.686325][ T5734] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 138.693871][ T82] bridge_slave_1: left promiscuous mode [ 138.700354][ T82] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.710606][ T82] bridge_slave_0: left allmulticast mode [ 138.716468][ T82] bridge_slave_0: left promiscuous mode [ 138.722179][ T82] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.856844][ T5734] usb 2-1: Using ep0 maxpacket: 8 [ 138.863691][ T5734] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 138.876116][ T5734] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 138.892293][ T82] bond1 (unregistering): (slave geneve2): Releasing active interface [ 138.902341][ T5734] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 138.920287][ T5734] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.938544][ T5734] usb 2-1: Product: syz [ 138.944343][ T5734] usb 2-1: Manufacturer: syz [ 138.956484][ T5734] usb 2-1: SerialNumber: syz [ 138.962281][ T82] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 138.979558][ T82] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 138.979940][ T5734] usbtest 2-1:1.0: couldn't get endpoints, -22 [ 138.998664][ T82] bond0 (unregistering): Released all slaves [ 139.001119][ T5734] usbtest 2-1:1.0: probe with driver usbtest failed with error -22 [ 139.037624][ T82] bond1 (unregistering): Released all slaves [ 139.092662][ T6788] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.115613][ T805] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 139.123908][ T6788] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.137252][ T6788] bridge_slave_0: entered allmulticast mode [ 139.158571][ T6788] bridge_slave_0: entered promiscuous mode [ 139.173113][ T6788] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.204889][ T6788] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.212224][ T6788] bridge_slave_1: entered allmulticast mode [ 139.223272][ T6788] bridge_slave_1: entered promiscuous mode [ 139.287039][ T805] usb 5-1: Using ep0 maxpacket: 32 [ 139.305713][ T6788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 139.311386][ T805] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 139.317608][ T6788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 139.350998][ T805] usb 5-1: config 0 has no interface number 0 [ 139.377512][ T805] usb 5-1: config 0 interface 184 has no altsetting 0 [ 139.387426][ T805] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 139.399289][ T805] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.407678][ T805] usb 5-1: Product: syz [ 139.411984][ T805] usb 5-1: Manufacturer: syz [ 139.417144][ T805] usb 5-1: SerialNumber: syz [ 139.436871][ T805] usb 5-1: config 0 descriptor?? [ 139.457119][ T6788] team0: Port device team_slave_0 added [ 139.484050][ T6788] team0: Port device team_slave_1 added [ 139.550828][ T6788] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 139.558021][ T6788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 139.587401][ T6788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 139.606633][ T82] hsr_slave_0: left promiscuous mode [ 139.612748][ T82] hsr_slave_1: left promiscuous mode [ 139.619573][ T82] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 139.627219][ T82] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 139.637484][ T82] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 139.645380][ T82] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 139.674201][ T82] veth1_macvtap: left promiscuous mode [ 139.685821][ T82] veth0_macvtap: left promiscuous mode [ 139.697211][ T82] veth1_vlan: left promiscuous mode [ 139.703464][ T82] veth0_vlan: left promiscuous mode [ 139.952346][ T30] audit: type=1400 audit(1785455114.456:444): avc: denied { write } for pid=6859 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 140.061258][ T805] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 140.091908][ T30] audit: type=1400 audit(1785455114.596:445): avc: denied { write } for pid=6874 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 140.124107][ T805] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 140.162260][ T82] team0 (unregistering): Port device team_slave_1 removed [ 140.188955][ T82] team0 (unregistering): Port device team_slave_0 removed [ 140.338407][ T6788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 140.346444][ T6788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 140.373519][ T6788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 140.389167][ T5272] 8021q: adding VLAN 0 to HW filter on device eth5 [ 140.556097][ T6788] hsr_slave_0: entered promiscuous mode [ 140.562598][ T6788] hsr_slave_1: entered promiscuous mode [ 140.569806][ T6788] debugfs: 'hsr0' already exists in 'hsr' [ 140.586311][ T6788] Cannot create hsr debugfs directory [ 140.699806][ T6627] 8021q: adding VLAN 0 to HW filter on device bond0 [ 140.744631][ T5630] Bluetooth: hci4: command tx timeout [ 140.766688][ T6627] 8021q: adding VLAN 0 to HW filter on device team0 [ 140.830187][ T82] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.837360][ T82] bridge0: port 1(bridge_slave_0) entered forwarding state [ 140.873901][ T82] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.881077][ T82] bridge0: port 2(bridge_slave_1) entered forwarding state [ 140.952724][ T805] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 140.981812][ T805] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 141.007107][ T805] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 141.038218][ T805] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 141.079870][ T805] usb 5-1: USB disconnect, device number 5 [ 141.132767][ T5727] usb 2-1: USB disconnect, device number 9 [ 141.270159][ T30] audit: type=1400 audit(1785455115.776:446): avc: denied { write } for pid=6896 comm="syz.1.305" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 141.330813][ T30] audit: type=1400 audit(1785455115.836:447): avc: denied { write } for pid=6882 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 141.480238][ T6788] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 141.506162][ T6788] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 141.521957][ T30] audit: type=1400 audit(1785455116.026:448): avc: denied { write } for pid=6904 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 141.567544][ T6788] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 141.605995][ T6788] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 141.656711][ T5272] 8021q: adding VLAN 0 to HW filter on device eth6 [ 141.663666][ T6788] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 141.697700][ T6788] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 141.715801][ T6788] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 141.733339][ T6788] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 142.128611][ T6627] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 142.183500][ T6788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 142.273512][ T6788] 8021q: adding VLAN 0 to HW filter on device team0 [ 142.320287][ T135] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.327472][ T135] bridge0: port 1(bridge_slave_0) entered forwarding state [ 142.400388][ T1157] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.407567][ T1157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 142.557458][ T6938] netlink: 4 bytes leftover after parsing attributes in process `syz.4.313'. [ 142.824697][ T5630] Bluetooth: hci4: command tx timeout [ 142.844429][ T5705] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 142.908982][ T30] audit: type=1400 audit(1785455117.416:449): avc: denied { write } for pid=6930 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 142.947595][ T6627] veth0_vlan: entered promiscuous mode [ 142.975454][ T6627] veth1_vlan: entered promiscuous mode [ 143.038455][ T5705] usb 5-1: Using ep0 maxpacket: 8 [ 143.054126][ T5705] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 143.092844][ T6627] veth0_macvtap: entered promiscuous mode [ 143.094263][ T5705] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 143.137044][ T6627] veth1_macvtap: entered promiscuous mode [ 143.152413][ T5705] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 143.191804][ T5705] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.199732][ T6627] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 143.207519][ T30] audit: type=1400 audit(1785455117.716:450): avc: denied { write } for pid=6968 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 143.223502][ T5705] usb 5-1: Product: syz [ 143.252294][ T5705] usb 5-1: Manufacturer: syz [ 143.267170][ T5705] usb 5-1: SerialNumber: syz [ 143.276377][ T6627] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 143.337430][ T5705] usbtest 5-1:1.0: couldn't get endpoints, -22 [ 143.355954][ T5705] usbtest 5-1:1.0: probe with driver usbtest failed with error -22 [ 143.365338][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.406831][ T5272] 8021q: adding VLAN 0 to HW filter on device eth7 [ 143.496588][ T48] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.526819][ T48] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.610938][ T135] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 143.633584][ T1157] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.655917][ T135] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.757413][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 143.770123][ T6788] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 143.777772][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.809875][ T30] audit: type=1400 audit(1785455118.316:451): avc: denied { mounton } for pid=6627 comm="syz-executor" path="/root/syzkaller.llf9hr/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 143.869414][ T30] audit: type=1400 audit(1785455118.346:452): avc: denied { mounton } for pid=6627 comm="syz-executor" path="/root/syzkaller.llf9hr/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=17001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 143.934656][ T30] audit: type=1400 audit(1785455118.356:453): avc: denied { mounton } for pid=6627 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 144.332537][ T30] audit: type=1400 audit(1785455118.836:454): avc: denied { write } for pid=6982 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 144.422224][ T6788] veth0_vlan: entered promiscuous mode [ 144.483989][ T6788] veth1_vlan: entered promiscuous mode [ 144.904267][ T5630] Bluetooth: hci4: command tx timeout [ 145.031103][ T6788] veth0_macvtap: entered promiscuous mode [ 145.058943][ T6788] veth1_macvtap: entered promiscuous mode [ 145.083372][ T30] audit: type=1400 audit(1785455119.586:455): avc: denied { write } for pid=7017 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 145.096239][ T6788] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 145.122203][ T6788] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 145.182666][ T5272] 8021q: adding VLAN 0 to HW filter on device eth8 [ 145.284290][ T36] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.311470][ T36] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.338354][ T10] usb 5-1: USB disconnect, device number 6 [ 145.365560][ T48] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.470404][ T7022] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 145.497151][ T1157] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.506374][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.521237][ T1157] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.587424][ T7027] syzkaller0: entered promiscuous mode [ 145.599662][ T7027] syzkaller0: entered allmulticast mode [ 145.668540][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.677341][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 146.122937][ T30] audit: type=1400 audit(1785455120.626:456): avc: denied { bind } for pid=7046 comm="syz.6.328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 146.259204][ T7051] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 146.959388][ T30] audit: type=1400 audit(1785455121.456:457): avc: denied { create } for pid=7059 comm="syz.6.332" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 147.262800][ T30] audit: type=1400 audit(1785455121.696:458): avc: denied { mounton } for pid=7059 comm="syz.6.332" path="/2/file0" dev="tmpfs" ino=28 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 147.667314][ T7066] netlink: 4 bytes leftover after parsing attributes in process `syz.4.333'. [ 147.914227][ T5734] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 148.235360][ T5734] usb 5-1: Using ep0 maxpacket: 8 [ 148.252802][ T5734] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 148.282195][ T5734] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 148.297643][ T7093] ohci-platform serial8250: error -ENXIO: IRQ index 0 not found [ 148.324483][ T7095] bond1: up delay (9) is not a multiple of miimon (5), value rounded to 5 ms [ 148.348279][ T5734] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 148.365006][ T7095] bond1: entered allmulticast mode [ 148.382218][ T5734] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.420199][ T5734] usb 5-1: Product: syz [ 148.435212][ T7099] bridge1: entered promiscuous mode [ 148.442808][ T5734] usb 5-1: Manufacturer: syz [ 148.458388][ T5734] usb 5-1: SerialNumber: syz [ 148.500550][ T5734] usbtest 5-1:1.0: couldn't get endpoints, -22 [ 148.511214][ T7099] bridge1: entered allmulticast mode [ 148.520605][ T5734] usbtest 5-1:1.0: probe with driver usbtest failed with error -22 [ 148.530742][ T7099] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 148.885508][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 148.885542][ T30] audit: type=1400 audit(1785455123.396:473): avc: denied { mount } for pid=7110 comm="syz.1.347" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 148.919398][ T30] audit: type=1400 audit(1785455123.396:474): avc: denied { search } for pid=7110 comm="syz.1.347" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 148.942135][ T30] audit: type=1400 audit(1785455123.396:475): avc: denied { write } for pid=7110 comm="syz.1.347" name="nfsv4leasetime" dev="nfsd" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 148.969006][ T30] audit: type=1400 audit(1785455123.396:476): avc: denied { open } for pid=7110 comm="syz.1.347" path="/77/nfsd/nfsv4leasetime" dev="nfsd" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 148.997717][ T5816] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 149.008075][ T30] audit: type=1400 audit(1785455123.426:477): avc: denied { unmount } for pid=5611 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 149.040713][ T30] audit: type=1400 audit(1785455123.426:478): avc: denied { create } for pid=7112 comm="syz.5.346" name="#1b" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 149.062730][ T30] audit: type=1400 audit(1785455123.456:479): avc: denied { link } for pid=7112 comm="syz.5.346" name="#1b" dev="tmpfs" ino=78 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 149.099171][ T30] audit: type=1400 audit(1785455123.456:480): avc: denied { rename } for pid=7112 comm="syz.5.346" name="#1c" dev="tmpfs" ino=78 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 149.126243][ T7115] 0: reclassify loop, rule prio 0, protocol 03 [ 149.165191][ T5816] usb 1-1: Using ep0 maxpacket: 32 [ 149.173288][ T5816] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 149.184461][ T5816] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 149.195106][ T5816] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 149.204894][ T5816] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.224989][ T5816] usb 1-1: config 0 descriptor?? [ 149.343008][ T30] audit: type=1400 audit(1785455123.846:481): avc: denied { mmap_zero } for pid=7119 comm="syz.6.351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 149.554189][ T5727] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 149.576650][ T7127] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.352'. [ 149.587811][ T7125] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.352'. [ 149.597367][ T7126] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.352'. [ 149.649173][ T5816] ft260 0003:0403:6030.0005: unknown main item tag 0x0 [ 149.656101][ T5816] ft260 0003:0403:6030.0005: unknown main item tag 0x0 [ 149.709284][ T5727] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 149.720237][ T5727] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 149.729507][ T5727] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.740377][ T5727] usb 2-1: config 0 descriptor?? [ 149.846815][ T5816] ft260 0003:0403:6030.0005: chip code: 0000 0000 [ 149.934149][ T805] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 149.967383][ T5727] usbhid 2-1:0.0: can't add hid device: -71 [ 149.981615][ T5727] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 149.992925][ T5727] usb 2-1: USB disconnect, device number 10 [ 150.050317][ T5816] ft260 0003:0403:6030.0005: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.0-1/input0 [ 150.100303][ T805] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 150.112013][ T805] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 150.123752][ T805] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.259018][ T805] usb 7-1: config 0 descriptor?? [ 150.299933][ T5816] ft260 0003:0403:6030.0005: failed to retrieve status: -32, no wakeup [ 150.434820][ T805] pwc: Askey VC010 type 2 USB webcam detected. [ 150.900943][ T805] pwc: recv_control_msg error -32 req 02 val 2b00 [ 151.054516][ T805] pwc: recv_control_msg error -32 req 02 val 2700 [ 151.182975][ T805] pwc: recv_control_msg error -32 req 02 val 2c00 [ 151.278486][ T5747] usb 5-1: USB disconnect, device number 7 [ 151.294765][ T805] pwc: recv_control_msg error -32 req 04 val 1000 [ 151.319576][ T805] pwc: recv_control_msg error -32 req 04 val 1300 [ 151.337722][ T5816] usb 1-1: USB disconnect, device number 9 [ 151.352503][ T805] pwc: recv_control_msg error -32 req 04 val 1400 [ 151.374568][ T805] pwc: recv_control_msg error -32 req 02 val 2000 [ 151.384277][ T5720] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 151.584718][ T5720] usb 2-1: Using ep0 maxpacket: 32 [ 151.590684][ T805] pwc: recv_control_msg error -71 req 04 val 1500 [ 151.599206][ T805] pwc: recv_control_msg error -71 req 02 val 2500 [ 151.612493][ T805] pwc: recv_control_msg error -71 req 02 val 2400 [ 151.646420][ T5720] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 151.672302][ T805] pwc: recv_control_msg error -71 req 02 val 2600 [ 151.708123][ T5720] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 151.726774][ T805] pwc: recv_control_msg error -71 req 02 val 2900 [ 151.756602][ T805] pwc: recv_control_msg error -71 req 02 val 2800 [ 151.787660][ T5720] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.842918][ T805] pwc: recv_control_msg error -71 req 04 val 1100 [ 151.917714][ T805] pwc: recv_control_msg error -71 req 04 val 1200 [ 151.983378][ T5720] usb 2-1: config 0 descriptor?? [ 152.001303][ T805] pwc: Registered as video103. [ 152.012504][ T5720] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 152.039217][ T805] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input11 [ 152.050685][ T7145] gadgetfs: bound to dummy_udc driver [ 152.057823][ T5720] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 152.132561][ T805] usb 7-1: USB disconnect, device number 2 [ 152.230903][ T30] audit: type=1400 audit(1785455126.736:482): avc: denied { write } for pid=7133 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 152.324136][ T5727] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 152.335645][ C1] gadgetfs: connected [ 152.341799][ T5727] gadgetfs: disconnected [ 152.494320][ C1] gadgetfs: connected [ 152.511124][ T7143] gadgetfs: suspended from state 3 [ 152.522750][ T5727] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 152.533561][ T7143] gadgetfs: disconnected [ 152.540437][ T5734] usb 2-1: USB disconnect, device number 11 [ 152.542603][ T5727] usb 1-1: can't read configurations, error -71 [ 152.580926][ T5734] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 154.595198][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 154.595214][ T30] audit: type=1400 audit(1785455129.096:486): avc: denied { read write } for pid=7214 comm="syz.4.372" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 154.739465][ T30] audit: type=1400 audit(1785455129.096:487): avc: denied { open } for pid=7214 comm="syz.4.372" path="/74/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 154.911295][ T7220] kvm: requested 10895 ns i8254 timer period limited to 200000 ns [ 154.935758][ T7220] kvm: requested 106438 ns i8254 timer period limited to 200000 ns [ 155.039022][ T7220] kvm: requested 186057 ns i8254 timer period limited to 200000 ns [ 155.092589][ T7228] overlayfs: invalid redirect (./bus) [ 155.121813][ T7220] kvm: requested 55314 ns i8254 timer period limited to 200000 ns [ 155.181626][ T7220] kvm: requested 142476 ns i8254 timer period limited to 200000 ns [ 155.200384][ T7220] kvm: requested 106438 ns i8254 timer period limited to 200000 ns [ 155.229322][ T7220] kvm: requested 16761 ns i8254 timer period limited to 200000 ns [ 155.269474][ T7220] kvm: requested 85485 ns i8254 timer period limited to 200000 ns [ 155.691986][ T30] audit: type=1400 audit(1785455130.196:488): avc: denied { write } for pid=7221 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 155.772496][ T30] audit: type=1400 audit(1785455130.276:489): avc: denied { setopt } for pid=7247 comm="syz.6.380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 155.935503][ T7254] netlink: 44 bytes leftover after parsing attributes in process `syz.0.381'. [ 156.019232][ T7254] netlink: 43 bytes leftover after parsing attributes in process `syz.0.381'. [ 156.117575][ T7254] netlink: 'syz.0.381': attribute type 5 has an invalid length. [ 156.254140][ T7254] netlink: 43 bytes leftover after parsing attributes in process `syz.0.381'. [ 156.386579][ T30] audit: type=1400 audit(1785455130.856:490): avc: denied { write } for pid=7249 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 157.419792][ T30] audit: type=1400 audit(1785455131.926:491): avc: denied { relabelfrom } for pid=7279 comm="syz.0.389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 157.457173][ T30] audit: type=1400 audit(1785455131.926:492): avc: denied { relabelto } for pid=7279 comm="syz.0.389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 157.522879][ T7283] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 157.833441][ T30] audit: type=1400 audit(1785455132.336:493): avc: denied { read } for pid=7290 comm="syz.6.393" name="usbmon0" dev="devtmpfs" ino=717 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 157.878382][ T30] audit: type=1400 audit(1785455132.336:494): avc: denied { open } for pid=7290 comm="syz.6.393" path="/dev/usbmon0" dev="devtmpfs" ino=717 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 157.906288][ T30] audit: type=1400 audit(1785455132.376:495): avc: denied { ioctl } for pid=7290 comm="syz.6.393" path="/dev/usbmon0" dev="devtmpfs" ino=717 ioctlcmd=0x9203 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 158.134170][ T5727] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 158.308739][ T5727] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 158.324102][ T5727] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.332173][ T5727] usb 7-1: Product: syz [ 158.337440][ T5727] usb 7-1: Manufacturer: syz [ 158.342388][ T5727] usb 7-1: SerialNumber: syz [ 158.484478][ T9] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 158.631475][ T7300] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 158.635121][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 158.647661][ T7300] batadv_slave_1: entered promiscuous mode [ 158.659367][ T9] usb 6-1: config 0 has an invalid interface number: 34 but max is 0 [ 158.677211][ T9] usb 6-1: config 0 has no interface number 0 [ 158.693321][ T9] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 158.707306][ T9] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 158.723547][ T9] usb 6-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 158.743075][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.766749][ T9] usb 6-1: Product: syz [ 158.770944][ T9] usb 6-1: Manufacturer: syz [ 158.789683][ T9] usb 6-1: SerialNumber: syz [ 158.808641][ T9] usb 6-1: config 0 descriptor?? [ 158.819072][ T7293] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 158.827546][ T7293] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 159.065284][ T7293] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 159.085421][ T7293] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 159.179551][ T5727] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 159.214275][ T5727] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 159.235707][ T5727] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 159.266902][ T5727] lan78xx 7-1:1.0: probe with driver lan78xx failed with error -71 [ 159.282740][ T5727] usb 7-1: USB disconnect, device number 3 [ 159.303264][ T9] asix 6-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 159.423154][ T7322] netlink: 8 bytes leftover after parsing attributes in process `syz.1.401'. [ 159.878125][ T7332] netlink: 20 bytes leftover after parsing attributes in process `syz.1.402'. [ 160.380552][ T7337] gadgetfs: bound to dummy_udc driver [ 160.656147][ T805] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 160.663858][ T5727] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 160.673768][ T5816] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 160.692978][ C1] gadgetfs: connected [ 160.698026][ T5816] gadgetfs: disconnected [ 160.877010][ C1] gadgetfs: connected [ 160.922972][ T5816] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 160.943632][ T5727] usb 7-1: Using ep0 maxpacket: 16 [ 160.981780][ T5727] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 160.996273][ T805] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 161.018331][ T5816] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 161.075092][ T805] usb 5-1: config 0 has no interfaces? [ 161.082382][ T5816] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.090668][ T5727] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 161.122331][ T805] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 161.135798][ C1] gadgetfs: configuration #1 [ 161.147904][ T9] asix 6-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 161.149291][ T5727] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 161.167431][ T805] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.182936][ T805] usb 5-1: config 0 descriptor?? [ 161.190563][ T5727] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.197535][ T9] asix 6-1:0.34 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 161.206275][ T5727] usb 7-1: config 0 descriptor?? [ 161.231143][ T9] asix 6-1:0.34: probe with driver asix failed with error -71 [ 161.260899][ T9] usb 6-1: USB disconnect, device number 2 [ 161.274959][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 161.274974][ T30] audit: type=1400 audit(1785455135.776:500): avc: denied { write } for pid=7338 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 161.430114][ T7337] 9pnet_virtio: no channels available for device syz [ 161.479274][ T5734] usb 5-1: USB disconnect, device number 8 [ 161.488826][ T7337] gadgetfs: suspended from state 3 [ 161.488991][ T5816] usb 1-1: can't set config #1, error -71 [ 161.503277][ T7337] gadgetfs: disconnected [ 161.522740][ T7358] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 161.547186][ T5816] usb 1-1: USB disconnect, device number 12 [ 161.587335][ T30] audit: type=1400 audit(1785455136.096:501): avc: denied { write } for pid=7359 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 161.681827][ T7362] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 161.777180][ T7362] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 161.821222][ T7362] kvm: requested 13409 ns i8254 timer period limited to 200000 ns [ 161.899203][ T7380] netlink: zone id is out of range [ 161.945045][ T7380] netlink: get zone limit has 4 unknown bytes [ 162.006768][ T7383] tmpfs: Unknown parameter '' [ 162.011382][ T5727] usbhid 7-1:0.0: can't add hid device: -71 [ 162.039657][ T5727] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 162.083046][ T5727] usb 7-1: USB disconnect, device number 4 [ 162.119544][ T7389] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.129543][ T7389] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.179219][ T7391] futex_wake_op: syz.6.412 tries to shift op by 144; fix this program [ 162.183563][ T7389] bridge0: entered allmulticast mode [ 162.236128][ T30] audit: type=1400 audit(1785455136.736:502): avc: denied { write } for pid=7366 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 162.333645][ T7392] bridge_slave_1: left allmulticast mode [ 162.364492][ T7392] bridge_slave_1: left promiscuous mode [ 162.400412][ T7392] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.401088][ T30] audit: type=1400 audit(1785455136.906:503): avc: denied { write } for pid=7397 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 162.473641][ T7392] bridge_slave_0: left allmulticast mode [ 162.493848][ T7392] bridge_slave_0: left promiscuous mode [ 162.507600][ T7404] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 162.521316][ T7392] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.607771][ T7401] syzkaller0: entered promiscuous mode [ 162.616293][ T7401] syzkaller0: entered allmulticast mode [ 163.564134][ T30] audit: type=1400 audit(1785455138.066:504): avc: denied { write } for pid=7410 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 163.751102][ T30] audit: type=1400 audit(1785455138.156:505): avc: denied { write } for pid=7431 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 163.921002][ T7438] Bluetooth: MGMT ver 1.23 [ 163.921897][ T30] audit: type=1400 audit(1785455138.426:506): avc: denied { write } for pid=7435 comm="syz.1.422" path="socket:[19834]" dev="sockfs" ino=19834 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 164.025194][ T7437] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 164.031886][ T7437] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 164.863423][ T7437] vhci_hcd vhci_hcd.0: Device attached [ 164.913950][ T7442] vhci_hcd: connection closed [ 164.944520][ T6636] vhci_hcd vhci_hcd.5: stop threads [ 164.998940][ T6636] vhci_hcd vhci_hcd.5: release socket [ 165.020125][ T6636] vhci_hcd vhci_hcd.5: disconnect device [ 165.068493][ T7453] usb_phy_generic pcspkr: dummy supplies not allowed for exclusive requests (id=vbus) [ 165.106933][ T7455] syzkaller0: entered promiscuous mode [ 165.118695][ T7455] syzkaller0: entered allmulticast mode [ 165.348335][ T30] audit: type=1400 audit(1785455139.856:507): avc: denied { mount } for pid=7465 comm="syz.0.428" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 165.351002][ T7466] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 165.590635][ T30] audit: type=1400 audit(1785455140.096:508): avc: denied { mounton } for pid=7472 comm="syz.6.430" path="/proc/fs/nfsd" dev="proc" ino=4026531847 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 165.688360][ T30] audit: type=1400 audit(1785455140.146:509): avc: denied { write } for pid=7446 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 165.823795][ T7487] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 165.940234][ T7473] svc: failed to register nfsdv3 RPC service (errno 101). [ 165.978261][ T7473] svc: failed to register nfsaclv3 RPC service (errno 101). [ 166.042335][ T7473] failed to unregister tcp with rpcbind [ 166.150692][ T7473] svc: failed to register nfsdv3 RPC service (errno 97). [ 166.211064][ T7473] svc: failed to register nfsaclv3 RPC service (errno 97). [ 166.272135][ T7473] failed to unregister tcp with rpcbind [ 166.832523][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 166.832547][ T30] audit: type=1400 audit(1785455141.246:511): avc: denied { unmount } for pid=5609 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 167.804945][ T5720] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 168.177864][ T7511] netlink: 'syz.5.437': attribute type 12 has an invalid length. [ 168.195475][ T30] audit: type=1400 audit(1785455142.706:512): avc: denied { name_connect } for pid=7503 comm="syz.6.435" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 168.238294][ T30] audit: type=1400 audit(1785455142.736:513): avc: denied { create } for pid=7512 comm="syz.4.438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 168.303173][ T30] audit: type=1400 audit(1785455142.736:514): avc: denied { connect } for pid=7512 comm="syz.4.438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 168.327275][ T5720] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 136, changing to 7 [ 168.358995][ T5720] usb 1-1: language id specifier not provided by device, defaulting to English [ 168.381898][ T5720] usb 1-1: New USB device found, idVendor=2b73, idProduct=0029, bcdDevice= 0.40 [ 168.485313][ T30] audit: type=1400 audit(1785455142.926:515): avc: denied { write } for pid=7495 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 168.489623][ T5720] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.517599][ T5720] usb 1-1: Manufacturer: 먁똪틃⟛牢Ϲ쇱䧩⹕鱺坤卸믽컘ㅣ埅䞩陊滐招촞舚๽՘⸸呂녡 [ 168.529920][ T5720] usb 1-1: SerialNumber: syz [ 168.595763][ T30] audit: type=1400 audit(1785455143.096:516): avc: denied { write } for pid=7525 comm="syz.1.440" name="functions" dev="configfs" ino=10299 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 168.663611][ T7528] configfs-gadget.g1 gadget.32: FS Playback: Req. wMaxPacketSize 1420 at bInterval 1 > max ISOC 1023, may drop data! [ 168.701187][ T7524] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 168.731654][ T30] audit: type=1400 audit(1785455143.166:517): avc: denied { write } for pid=7525 comm="syz.1.440" name="c.1" dev="configfs" ino=13853 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 168.772774][ T30] audit: type=1800 audit(1785455143.166:518): pid=7528 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.440" name="UDC" dev="configfs" ino=20565 res=0 errno=0 [ 168.834192][ T30] audit: type=1400 audit(1785455143.236:519): avc: denied { write } for pid=7527 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 168.860624][ T5720] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 169.026740][ T5720] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 169.175254][ T7534] syzkaller0: entered promiscuous mode [ 169.197260][ T5720] usb 1-1: USB disconnect, device number 13 [ 169.199370][ T7534] syzkaller0: entered allmulticast mode [ 169.535844][ T805] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 169.700047][ T805] usb 5-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 169.731947][ T805] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 169.745596][ T805] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 169.794863][ T805] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 169.818488][ T805] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.929324][ T7536] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 170.453754][ T7554] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 170.753473][ T7556] syzkaller0: entered promiscuous mode [ 170.765184][ T30] audit: type=1400 audit(1785455145.266:520): avc: denied { write } for pid=7558 comm="syz.5.449" name="cluster" dev="configfs" ino=1061 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 170.794680][ T7556] syzkaller0: entered allmulticast mode [ 172.734215][ T188] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 173.452431][ T7598] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 173.494141][ T188] usb 2-1: Using ep0 maxpacket: 8 [ 173.506293][ T188] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 173.517926][ T188] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 173.529001][ T188] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 173.545036][ T188] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 173.555239][ T188] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 173.634262][ T188] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 173.643420][ T188] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.756517][ T7606] syzkaller0: entered promiscuous mode [ 173.762089][ T7606] syzkaller0: entered allmulticast mode [ 173.879179][ T188] usb 2-1: usb_control_msg returned -32 [ 173.887511][ T188] usbtmc 2-1:16.0: can't read capabilities [ 174.108367][ T805] aiptek 5-1:17.0: Aiptek using 400 ms programming speed [ 174.162238][ T805] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:17.0/input/input12 [ 174.297554][ T805] usb 5-1: USB disconnect, device number 9 [ 174.303429][ C1] aiptek 5-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 174.406518][ T7618] netlink: 28 bytes leftover after parsing attributes in process `syz.4.465'. [ 174.527918][ T7620] usbtmc 2-1:16.0: INDICATOR_PULSE returned 0 [ 175.014148][ T188] usb 2-1: USB disconnect, device number 12 [ 175.519830][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 175.519847][ T30] audit: type=1400 audit(1785455150.026:525): avc: denied { listen } for pid=7636 comm="syz.4.470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 175.726784][ T30] audit: type=1400 audit(1785455150.226:526): avc: denied { name_bind } for pid=7642 comm="syz.6.471" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 175.874190][ T10] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 176.034504][ T7645] 9p: Bad value for 'rfdno' [ 176.061216][ T10] usb 5-1: config index 0 descriptor too short (expected 28277, got 36) [ 176.096557][ T30] audit: type=1400 audit(1785455150.596:527): avc: denied { unmount } for pid=7644 comm="syz.6.472" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 176.121848][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 176.163958][ T10] usb 5-1: config 0 has no interfaces? [ 176.199837][ T10] usb 5-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 176.249650][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.310643][ T10] usb 5-1: config 0 descriptor?? [ 176.392011][ T7665] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 177.402463][ T7681] netlink: 36 bytes leftover after parsing attributes in process `syz.6.479'. [ 177.457654][ T30] audit: type=1400 audit(1785455151.966:528): avc: denied { create } for pid=7680 comm="syz.6.479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 177.516853][ T7684] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 178.073530][ T5816] usb 5-1: USB disconnect, device number 10 [ 178.807606][ T7686] bridge0: port 3(syz_tun) entered blocking state [ 178.825925][ T7686] bridge0: port 3(syz_tun) entered disabled state [ 178.835976][ T7686] syz_tun: entered allmulticast mode [ 178.855367][ T7686] syz_tun: entered promiscuous mode [ 178.869817][ T7686] bridge0: port 3(syz_tun) entered blocking state [ 178.876399][ T7686] bridge0: port 3(syz_tun) entered forwarding state [ 178.933563][ T7694] futex_wake_op: syz.1.484 tries to shift op by 144; fix this program [ 179.168286][ T7705] overlayfs: failed to clone upperpath [ 179.284475][ T7706] syzkaller0: entered promiscuous mode [ 179.290002][ T7706] syzkaller0: entered allmulticast mode [ 179.306794][ T7704] process 'newroot/39/bus/file0' started with executable stack [ 179.458208][ T30] audit: type=1400 audit(1785455153.936:529): avc: denied { name_connect } for pid=7700 comm="syz.4.488" dest=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 179.875922][ T7718] Mass Storage Function, version: 2009/09/11 [ 179.885952][ T30] audit: type=1400 audit(1785455154.386:530): avc: denied { write } for pid=7716 comm="syz.5.491" name="functions" dev="configfs" ino=10299 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 179.916915][ T7718] LUN: removable file: (no medium) [ 179.938970][ T30] audit: type=1400 audit(1785455154.446:531): avc: denied { write } for pid=7716 comm="syz.5.491" name="c.1" dev="configfs" ino=13853 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 179.961479][ T7718] configfs-gadget.g1 gadget.0: FS Playback: Req. wMaxPacketSize 1420 at bInterval 1 > max ISOC 1023, may drop data! [ 179.961525][ T7718] configfs-gadget.g1 gadget.0: afunc_bind:1251 Error! [ 179.961687][ T7718] udc dummy_udc.0: failed to start g1: -19 [ 179.964629][ T7718] UDC core: g1: couldn't find an available UDC or it's busy [ 180.109649][ T30] audit: type=1400 audit(1785455154.446:532): avc: denied { write } for pid=7716 comm="syz.5.491" name="c.1" dev="configfs" ino=13853 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 180.132346][ T30] audit: type=1800 audit(1785455154.446:533): pid=7718 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.491" name="UDC" dev="configfs" ino=20254 res=0 errno=0 [ 180.156812][ T30] audit: type=1400 audit(1785455154.646:534): avc: denied { write } for pid=7716 comm="syz.5.491" name="c.1" dev="configfs" ino=13853 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 181.002528][ T7729] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 181.009068][ T7729] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 181.036785][ T7729] vhci_hcd vhci_hcd.0: Device attached [ 181.271104][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 181.271121][ T30] audit: type=1400 audit(1785455155.776:539): avc: denied { listen } for pid=7741 comm="syz.5.496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 181.298782][ T5727] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 181.322477][ T30] audit: type=1400 audit(1785455155.826:540): avc: denied { accept } for pid=7741 comm="syz.5.496" lport=34747 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 181.407872][ T188] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 181.422982][ T30] audit: type=1400 audit(1785455155.926:541): avc: denied { shutdown } for pid=7741 comm="syz.5.496" lport=34747 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 181.599371][ T805] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 181.940097][ T30] audit: type=1400 audit(1785455156.446:542): avc: denied { create } for pid=7752 comm="syz.6.499" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 181.984577][ T5720] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 181.994304][ T188] usb 5-1: Using ep0 maxpacket: 16 [ 182.013779][ T188] usb 5-1: unable to get BOS descriptor or descriptor too short [ 182.018514][ T7733] vhci_hcd: connection closed [ 182.022188][ T188] usb 5-1: no configurations [ 182.032733][ T3291] vhci_hcd vhci_hcd.4: stop threads [ 182.038936][ T188] usb 5-1: can't read configurations, error -22 [ 182.045405][ T3291] vhci_hcd vhci_hcd.4: release socket [ 182.053367][ T3291] vhci_hcd vhci_hcd.4: disconnect device [ 182.084383][ T5727] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 182.092351][ T805] usb 2-1: Using ep0 maxpacket: 8 [ 182.098817][ T805] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 182.108968][ T805] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 182.128173][ T805] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 182.137500][ T805] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.145660][ T805] usb 2-1: Product: syz [ 182.150037][ T805] usb 2-1: Manufacturer: syz [ 182.155659][ T805] usb 2-1: SerialNumber: syz [ 182.160828][ T5720] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 182.173762][ T5720] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 182.196231][ T805] usbtest 2-1:1.0: couldn't get endpoints, -22 [ 182.219723][ T5720] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 182.233359][ T805] usbtest 2-1:1.0: probe with driver usbtest failed with error -22 [ 182.262580][ T5720] usb 6-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 182.275240][ T5720] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.290514][ T5720] usb 6-1: Product: syz [ 182.295586][ T5720] usb 6-1: Manufacturer: syz [ 182.301479][ T5720] usb 6-1: SerialNumber: syz [ 182.312442][ T5720] usb 6-1: config 0 descriptor?? [ 182.323935][ T5720] adutux 6-1:0.0: interrupt endpoints not found [ 182.528247][ T5720] usb 6-1: USB disconnect, device number 3 [ 182.639198][ T7766] syzkaller0: entered promiscuous mode [ 182.645375][ T7766] syzkaller0: entered allmulticast mode [ 182.813589][ T7770] binder_alloc: 7768: binder_alloc_buf, no vma [ 183.104150][ T188] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 183.384303][ T7786] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 183.395219][ T188] usb 5-1: Using ep0 maxpacket: 8 [ 183.597765][ T188] usb 5-1: unable to get BOS descriptor or descriptor too short [ 183.708268][ T188] usb 5-1: config 0 has an invalid interface number: 49 but max is 0 [ 183.717531][ T188] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 183.719922][ T5727] usb 2-1: USB disconnect, device number 13 [ 183.728467][ T188] usb 5-1: config 0 has no interface number 0 [ 183.742600][ T188] usb 5-1: config 0 interface 49 altsetting 11 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 183.755884][ T188] usb 5-1: config 0 interface 49 has no altsetting 0 [ 183.767208][ T188] usb 5-1: New USB device found, idVendor=0bda, idProduct=0140, bcdDevice=f7.67 [ 183.782586][ T188] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.810879][ T188] usb 5-1: Product: syz [ 183.825075][ T188] usb 5-1: Manufacturer: syz [ 183.829800][ T188] usb 5-1: SerialNumber: syz [ 183.841957][ T188] usb 5-1: config 0 descriptor?? [ 184.074674][ T188] rtsx_usb 5-1:0.49: probe with driver rtsx_usb failed with error -22 [ 184.108902][ T188] usb 5-1: USB disconnect, device number 12 [ 184.341754][ T7796] syzkaller0: entered promiscuous mode [ 184.394981][ T7796] syzkaller0: entered allmulticast mode [ 184.571074][ T7803] syzkaller0: entered promiscuous mode [ 184.578150][ T7803] syzkaller0: entered allmulticast mode [ 184.583212][ T7802] binder: BINDER_SET_CONTEXT_MGR already set [ 184.604741][ T7802] binder: 7800:7802 ioctl 4018620d 0 returned -16 [ 185.028247][ T7815] hub 8-0:1.0: USB hub found [ 185.051308][ T7815] hub 8-0:1.0: 1 port detected [ 185.884261][ T7816] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 186.839785][ T7828] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 187.775458][ T30] audit: type=1400 audit(1785455162.256:543): avc: denied { create } for pid=7832 comm="syz.4.526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 187.882001][ T30] audit: type=1400 audit(1785455162.276:544): avc: denied { create } for pid=7832 comm="syz.4.526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 189.146532][ T7838] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 189.166993][ T30] audit: type=1400 audit(1785455163.616:545): avc: denied { mount } for pid=7841 comm="syz.0.529" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 189.302264][ T30] audit: type=1400 audit(1785455163.806:546): avc: denied { unmount } for pid=5609 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 189.624544][ T30] audit: type=1400 audit(1785455164.126:547): avc: denied { append } for pid=7855 comm="syz.5.533" name="frontend0" dev="devtmpfs" ino=929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 190.200712][ T7864] fuse: fd is not a fuse device [ 190.735480][ T30] audit: type=1400 audit(1785455165.236:548): avc: denied { create } for pid=7878 comm="syz.1.541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 190.756522][ T7879] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 190.940715][ T7888] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 191.034001][ T30] audit: type=1400 audit(1785455165.536:549): avc: denied { connect } for pid=7886 comm="syz.1.542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 191.068275][ T5734] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 191.244406][ T5734] usb 5-1: Using ep0 maxpacket: 8 [ 191.256622][ T5734] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 191.294826][ T5734] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 191.348468][ T5734] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 191.373159][ T5734] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.401230][ T5734] usb 5-1: Product: syz [ 191.423458][ T5734] usb 5-1: Manufacturer: syz [ 191.447168][ T5734] usb 5-1: SerialNumber: syz [ 191.475916][ T5734] usbtest 5-1:1.0: couldn't get endpoints, -22 [ 191.503691][ T5734] usbtest 5-1:1.0: probe with driver usbtest failed with error -22 [ 191.996942][ T7892] binder: 7891:7892 unknown command 0 [ 192.041321][ T7892] binder: 7891:7892 ioctl c0306201 2000000004c0 returned -22 [ 192.078538][ T7894] binder: 7891:7894 ioctl c0306201 0 returned -14 [ 192.281268][ T7896] binder: BINDER_SET_CONTEXT_MGR already set [ 192.312941][ T7896] binder: 7895:7896 ioctl 4018620d 200000000040 returned -16 [ 192.449993][ T30] audit: type=1400 audit(1785455166.956:550): avc: denied { map } for pid=7897 comm="syz.1.545" path="socket:[21784]" dev="sockfs" ino=21784 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 193.594588][ T30] audit: type=1400 audit(1785455168.046:551): avc: denied { module_load } for pid=7904 comm="syz.1.548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 193.910548][ T188] usb 5-1: USB disconnect, device number 13 [ 193.949722][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.957961][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.190740][ T7896] syz.5.544 (7896): drop_caches: 2 [ 194.770812][ T30] audit: type=1400 audit(1785455168.906:552): avc: denied { create } for pid=7916 comm="syz.1.552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 194.791571][ T30] audit: type=1400 audit(1785455168.926:553): avc: denied { sys_admin } for pid=7916 comm="syz.1.552" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 195.611886][ T7930] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 196.892163][ T7957] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 196.940369][ T7959] team0: Device xfrm0 is of different type [ 196.956813][ T7959] tipc: Started in network mode [ 196.962640][ T7959] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 196.971801][ T7959] tipc: Enabled bearer , priority 0 [ 197.124606][ T7966] cgroup: Invalid name [ 197.270604][ T30] audit: type=1400 audit(1785455171.776:554): avc: denied { create } for pid=7961 comm="syz.0.568" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 197.799038][ T30] audit: type=1400 audit(1785455172.286:555): avc: denied { ioctl } for pid=7961 comm="syz.0.568" path="socket:[22048]" dev="sockfs" ino=22048 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 198.013893][ T7973] syzkaller0: entered promiscuous mode [ 198.041379][ T7973] syzkaller0: entered allmulticast mode [ 198.097541][ T5734] tipc: Node number set to 11578026 [ 198.231525][ T7981] overlayfs: failed to clone upperpath [ 198.502172][ T7993] serio: Serial port ptm0 [ 198.875003][ T8010] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 201.026811][ T8028] syzkaller0: entered promiscuous mode [ 201.050503][ T8028] syzkaller0: entered allmulticast mode [ 201.072376][ T30] audit: type=1400 audit(1785455175.576:556): avc: denied { write } for pid=8029 comm="syz.5.592" name="functions" dev="configfs" ino=10299 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 201.080406][ T8030] configfs-gadget.g1 gadget.0: FS Playback: Req. wMaxPacketSize 1420 at bInterval 1 > max ISOC 1023, may drop data! [ 201.108639][ T8030] configfs-gadget.g1 gadget.0: afunc_bind:1251 Error! [ 201.134277][ T30] audit: type=1400 audit(1785455175.576:557): avc: denied { write } for pid=8029 comm="syz.5.592" name="c.1" dev="configfs" ino=13853 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 201.135378][ T8030] udc dummy_udc.0: failed to start g1: -19 [ 201.184806][ T8030] UDC core: g1: couldn't find an available UDC or it's busy [ 201.195742][ T30] audit: type=1400 audit(1785455175.576:558): avc: denied { write } for pid=8029 comm="syz.5.592" name="c.1" dev="configfs" ino=13853 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 201.273657][ T30] audit: type=1400 audit(1785455175.776:559): avc: denied { ioctl } for pid=8031 comm="syz.0.593" path="socket:[22700]" dev="sockfs" ino=22700 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 201.392318][ T50] Bluetooth: hci2: command 0x0406 tx timeout [ 201.398424][ T5630] Bluetooth: hci1: command 0x0406 tx timeout [ 201.667188][ T8057] netlink: 36 bytes leftover after parsing attributes in process `syz.5.597'. [ 201.676286][ T8057] netlink: 16 bytes leftover after parsing attributes in process `syz.5.597'. [ 201.685475][ T8057] netlink: 36 bytes leftover after parsing attributes in process `syz.5.597'. [ 201.744468][ T8044] netlink: 4 bytes leftover after parsing attributes in process `syz.1.595'. [ 201.843415][ T8061] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 202.085362][ T30] audit: type=1400 audit(1785455176.456:560): avc: denied { bind } for pid=8058 comm="syz.0.600" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 202.383940][ T30] audit: type=1400 audit(1785455176.546:561): avc: denied { listen } for pid=8058 comm="syz.0.600" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 202.446575][ T5734] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 202.604129][ T5734] usb 2-1: Using ep0 maxpacket: 8 [ 202.639781][ T5734] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 202.680099][ T5734] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 202.718993][ T8074] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 202.738122][ T5734] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 202.755808][ T8074] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 202.768117][ T5734] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.792426][ T5734] usb 2-1: Product: syz [ 202.807179][ T5734] usb 2-1: Manufacturer: syz [ 202.829484][ T5734] usb 2-1: SerialNumber: syz [ 202.858674][ T5734] usbtest 2-1:1.0: couldn't get endpoints, -22 [ 202.892896][ T5734] usbtest 2-1:1.0: probe with driver usbtest failed with error -22 [ 202.992081][ T30] audit: type=1400 audit(1785455177.496:562): avc: denied { read } for pid=8078 comm="syz.0.603" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 203.074976][ T8081] syzkaller0: entered promiscuous mode [ 203.088184][ T8081] syzkaller0: entered allmulticast mode [ 204.057736][ T48] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 204.147426][ T8088] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 205.018595][ T5720] usb 2-1: USB disconnect, device number 14 [ 205.284716][ T8105] udc dummy_udc.0: soft-connect without a gadget driver [ 205.563914][ T30] audit: type=1400 audit(1785455180.066:563): avc: denied { open } for pid=8106 comm="syz.1.612" path="/dev/ptyq6" dev="devtmpfs" ino=125 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 205.631267][ T30] audit: type=1400 audit(1785455180.136:564): avc: denied { mounton } for pid=8110 comm="syz.6.614" path="/72/file0" dev="tmpfs" ino=412 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 205.923412][ T8121] overlayfs: failed to resolve './cgroup': -2 [ 206.518140][ T8127] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 207.670585][ T8136] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 208.055997][ T8138] netlink: 4 bytes leftover after parsing attributes in process `syz.1.622'. [ 208.324491][ T805] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 208.681179][ T805] usb 2-1: Using ep0 maxpacket: 8 [ 208.695973][ T805] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 209.041305][ T805] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 209.078842][ T805] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 209.100555][ T805] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.111696][ T805] usb 2-1: Product: syz [ 209.117537][ T805] usb 2-1: Manufacturer: syz [ 209.122568][ T805] usb 2-1: SerialNumber: syz [ 210.354161][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 210.463832][ T805] usbtest 2-1:1.0: couldn't get endpoints, -22 [ 210.476263][ T805] usbtest 2-1:1.0: probe with driver usbtest failed with error -22 [ 211.191727][ T30] audit: type=1400 audit(1785455185.696:565): avc: denied { ioctl } for pid=8168 comm="syz.6.629" path="socket:[22891]" dev="sockfs" ino=22891 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 211.753748][ T8186] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 212.284834][ T5720] usb 2-1: USB disconnect, device number 15 [ 212.864347][ T5720] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 213.515733][ T5720] usb 2-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 213.550395][ T5720] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.918386][ T30] audit: type=1400 audit(1785455188.426:566): avc: denied { write } for pid=8204 comm="syz.0.641" name="functions" dev="configfs" ino=10299 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 213.972573][ T30] audit: type=1400 audit(1785455188.456:567): avc: denied { write } for pid=8204 comm="syz.0.641" name="c.1" dev="configfs" ino=13853 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 214.060629][ T30] audit: type=1400 audit(1785455188.456:568): avc: denied { write } for pid=8204 comm="syz.0.641" name="c.1" dev="configfs" ino=13853 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 214.298926][ T8216] kAFS: unable to lookup cell '' [ 214.895009][ T30] audit: type=1400 audit(1785455188.886:569): avc: denied { setopt } for pid=8213 comm="syz.0.644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 214.916821][ T5720] cxacru 2-1:1.0: invalid response length to cm 0x84: 0 [ 214.933773][ T5720] ATM dev 0: cxacru_atm_start: CHIP_ADSL_LINE_START returned -5 [ 215.096602][ T5720] ATM dev 0: ADSL state: running [ 215.113021][ T5720] ATM dev 0: ADSL line: down [ 215.411336][ T8223] netlink: 4 bytes leftover after parsing attributes in process `syz.0.647'. [ 215.565407][ T8231] syzkaller0: entered promiscuous mode [ 215.574196][ T8231] syzkaller0: entered allmulticast mode [ 215.696089][ T188] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 215.867418][ T188] usb 1-1: Using ep0 maxpacket: 8 [ 215.876980][ T8240] syzkaller0: entered promiscuous mode [ 215.885453][ T188] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 215.897104][ T8238] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 216.324391][ T188] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 216.340912][ T188] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 216.351908][ T8240] syzkaller0: entered allmulticast mode [ 216.369382][ T188] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.399265][ T188] usb 1-1: Product: syz [ 216.405187][ T188] usb 1-1: Manufacturer: syz [ 216.412729][ T188] usb 1-1: SerialNumber: syz [ 216.433544][ T188] usbtest 1-1:1.0: couldn't get endpoints, -22 [ 216.444145][ T188] usbtest 1-1:1.0: probe with driver usbtest failed with error -22 [ 216.520275][ C1] ATM dev 0: usbatm_complete: urb 0xffff88807386d800 failed (-71)! [ 216.528226][ C1] ATM dev 0: usbatm_complete: urb 0xffff88807386d500 failed (-71)! [ 216.536131][ C1] ATM dev 0: usbatm_complete: urb 0xffff88807386d400 failed (-71)! [ 216.544025][ C1] ATM dev 0: usbatm_complete: urb 0xffff88807386d300 failed (-71)! [ 216.607074][ T5747] cxacru 2-1:1.0: invalid response length to cm 0x88: 0 [ 216.625972][ T5747] ATM dev 0: poll status: error -5 [ 216.633122][ T5720] usb 2-1: USB disconnect, device number 16 [ 216.652584][ T5747] ATM dev 0: polling disabled, set adsl_state to 'start' or 'poll' to resume [ 216.662989][ C1] ATM dev 0: usbatm_submit_urb: urb 0xffff88807386d800 submission failed (-19)! [ 216.694036][ T5747] ================================================================== [ 216.702109][ T5747] BUG: KASAN: slab-use-after-free in __mutex_lock+0x15ca/0x1bd0 [ 216.709735][ T5747] Read of size 8 at addr ffff88802a965218 by task kworker/1:6/5747 [ 216.717636][ T5747] [ 216.719953][ T5747] CPU: 1 UID: 0 PID: 5747 Comm: kworker/1:6 Tainted: G L syzkaller #0 PREEMPT(full) [ 216.719973][ T5747] Tainted: [L]=SOFTLOCKUP [ 216.719977][ T5747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 216.719988][ T5747] Workqueue: events cxacru_poll_status [ 216.720010][ T5747] Call Trace: [ 216.720015][ T5747] [ 216.720019][ T5747] dump_stack_lvl+0x100/0x190 [ 216.720034][ T5747] print_report+0x13d/0x4b0 [ 216.720052][ T5747] ? __virt_addr_valid+0x239/0x430 [ 216.720078][ T5747] ? __mutex_lock+0x15ca/0x1bd0 [ 216.720094][ T5747] kasan_report+0xdf/0x1c0 [ 216.720112][ T5747] ? __mutex_lock+0x15ca/0x1bd0 [ 216.720127][ T5747] __mutex_lock+0x15ca/0x1bd0 [ 216.720140][ T5747] ? cxacru_poll_status+0x55b/0xdc0 [ 216.720155][ T5747] ? preempt_schedule_common+0x42/0xc0 [ 216.720168][ T5747] ? preempt_schedule_thunk+0x16/0x40 [ 216.720180][ T5747] ? __pfx___mutex_lock+0x10/0x10 [ 216.720193][ T5747] ? __mutex_unlock_slowpath+0x6da/0x930 [ 216.720208][ T5747] ? __pfx__printk+0x10/0x10 [ 216.720220][ T5747] ? cxacru_poll_status+0x4c0/0xdc0 [ 216.720234][ T5747] ? cxacru_poll_status+0x4c3/0xdc0 [ 216.720250][ T5747] ? cxacru_poll_status+0x55b/0xdc0 [ 216.720264][ T5747] cxacru_poll_status+0x55b/0xdc0 [ 216.720281][ T5747] ? __pfx_cxacru_poll_status+0x10/0x10 [ 216.720299][ T5747] ? rcu_is_watching+0x12/0xc0 [ 216.720325][ T5747] process_one_work+0xa23/0x1940 [ 216.720353][ T5747] ? __pfx_process_one_work+0x10/0x10 [ 216.720379][ T5747] ? __pfx_cxacru_poll_status+0x10/0x10 [ 216.720396][ T5747] worker_thread+0x5ef/0xe50 [ 216.720410][ T5747] ? __pfx_worker_thread+0x10/0x10 [ 216.720423][ T5747] ? kthread+0x13a/0x450 [ 216.720433][ T5747] ? __pfx_worker_thread+0x10/0x10 [ 216.720445][ T5747] kthread+0x370/0x450 [ 216.720455][ T5747] ? __pfx_kthread+0x10/0x10 [ 216.720467][ T5747] ret_from_fork+0x72b/0xd50 [ 216.720483][ T5747] ? __pfx_ret_from_fork+0x10/0x10 [ 216.720499][ T5747] ? __switch_to+0x800/0x10f0 [ 216.720511][ T5747] ? __pfx_kthread+0x10/0x10 [ 216.720522][ T5747] ret_from_fork_asm+0x1a/0x30 [ 216.720543][ T5747] [ 216.720547][ T5747] [ 216.752357][ T8246] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 216.936181][ T5747] Allocated by task 5720: [ 216.940506][ T5747] kasan_save_stack+0x30/0x50 [ 216.945176][ T5747] kasan_save_track+0x14/0x30 [ 216.949840][ T5747] __kasan_kmalloc+0xaa/0xb0 [ 216.954414][ T5747] __kmalloc_cache_noprof+0x2e5/0x6c0 [ 216.959782][ T5747] cxacru_bind+0xac/0x1440 [ 216.964186][ T5747] usbatm_usb_probe+0x378/0x1b50 [ 216.969107][ T5747] cxacru_usb_probe+0x101/0x200 [ 216.973944][ T5747] usb_probe_interface+0x303/0x8f0 [ 216.979044][ T5747] really_probe+0x241/0xa60 [ 216.983533][ T5747] __driver_probe_device+0x20e/0x450 [ 216.988808][ T5747] driver_probe_device+0x4a/0x140 [ 216.993820][ T5747] __device_attach_driver+0x1df/0x320 [ 216.999178][ T5747] bus_for_each_drv+0x159/0x1e0 [ 217.004011][ T5747] __device_attach+0x1e4/0x4d0 [ 217.008763][ T5747] device_initial_probe+0xaf/0xd0 [ 217.013774][ T5747] bus_probe_device+0x64/0x160 [ 217.018523][ T5747] device_add+0x121d/0x1970 [ 217.023019][ T5747] usb_set_configuration+0xd97/0x1c60 [ 217.028381][ T5747] usb_generic_driver_probe+0xa1/0xe0 [ 217.033734][ T5747] usb_probe_device+0xef/0x400 [ 217.038486][ T5747] really_probe+0x241/0xa60 [ 217.042973][ T5747] __driver_probe_device+0x20e/0x450 [ 217.048245][ T5747] driver_probe_device+0x4a/0x140 [ 217.053258][ T5747] __device_attach_driver+0x1df/0x320 [ 217.058618][ T5747] bus_for_each_drv+0x159/0x1e0 [ 217.063457][ T5747] __device_attach+0x1e4/0x4d0 [ 217.068207][ T5747] device_initial_probe+0xaf/0xd0 [ 217.073218][ T5747] bus_probe_device+0x64/0x160 [ 217.077967][ T5747] device_add+0x121d/0x1970 [ 217.082460][ T5747] usb_new_device.cold+0x685/0x115c [ 217.087644][ T5747] hub_event+0x30a3/0x4a60 [ 217.092049][ T5747] process_one_work+0xa23/0x1940 [ 217.096972][ T5747] worker_thread+0x5ef/0xe50 [ 217.101546][ T5747] kthread+0x370/0x450 [ 217.105600][ T5747] ret_from_fork+0x72b/0xd50 [ 217.110181][ T5747] ret_from_fork_asm+0x1a/0x30 [ 217.114939][ T5747] [ 217.117245][ T5747] Freed by task 5720: [ 217.121202][ T5747] kasan_save_stack+0x30/0x50 [ 217.125869][ T5747] kasan_save_track+0x14/0x30 [ 217.130534][ T5747] kasan_save_free_info+0x3b/0x70 [ 217.135560][ T5747] __kasan_slab_free+0x5f/0x80 [ 217.140312][ T5747] kfree+0x22b/0x6c0 [ 217.144198][ T5747] cxacru_unbind+0x1fc/0x3d0 [ 217.148776][ T5747] usbatm_usb_disconnect+0x449/0x7e0 [ 217.154045][ T5747] usb_unbind_interface+0x1dd/0x9e0 [ 217.159234][ T5747] device_remove+0x12a/0x180 [ 217.163831][ T5747] device_release_driver_internal+0x44e/0x620 [ 217.169888][ T5747] bus_remove_device+0x2bc/0x560 [ 217.174811][ T5747] device_del+0x376/0x9b0 [ 217.179126][ T5747] usb_disable_device+0x367/0x810 [ 217.184136][ T5747] usb_disconnect+0x2e2/0x9a0 [ 217.188804][ T5747] hub_event+0x1c4f/0x4a60 [ 217.193204][ T5747] process_one_work+0xa23/0x1940 [ 217.198127][ T5747] worker_thread+0x5ef/0xe50 [ 217.202700][ T5747] kthread+0x370/0x450 [ 217.206752][ T5747] ret_from_fork+0x72b/0xd50 [ 217.211331][ T5747] ret_from_fork_asm+0x1a/0x30 [ 217.216090][ T5747] [ 217.218420][ T5747] Last potentially related work creation: [ 217.224110][ T5747] kasan_save_stack+0x30/0x50 [ 217.228782][ T5747] kasan_record_aux_stack+0xa7/0xc0 [ 217.233973][ T5747] insert_work+0x36/0x230 [ 217.238284][ T5747] __queue_work+0x9bc/0x12b0 [ 217.242855][ T5747] call_timer_fn+0x19a/0x610 [ 217.247431][ T5747] __run_timers+0x570/0xb00 [ 217.251919][ T5747] run_timer_base+0x114/0x190 [ 217.256588][ T5747] run_timer_softirq+0x1a/0x50 [ 217.261339][ T5747] handle_softirqs+0x1ea/0x9b0 [ 217.266090][ T5747] __irq_exit_rcu+0x162/0x210 [ 217.270757][ T5747] irq_exit_rcu+0x9/0x30 [ 217.274987][ T5747] sysvec_apic_timer_interrupt+0x56/0xc0 [ 217.280605][ T5747] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 217.286570][ T5747] [ 217.288873][ T5747] The buggy address belongs to the object at ffff88802a965000 [ 217.288873][ T5747] which belongs to the cache kmalloc-1k of size 1024 [ 217.302904][ T5747] The buggy address is located 536 bytes inside of [ 217.302904][ T5747] freed 1024-byte region [ffff88802a965000, ffff88802a965400) [ 217.316770][ T5747] [ 217.319077][ T5747] The buggy address belongs to the physical page: [ 217.325467][ T5747] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2a960 [ 217.334220][ T5747] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 217.342700][ T5747] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 217.350231][ T5747] page_type: f5(slab) [ 217.354196][ T5747] raw: 00fff00000000040 ffff88813fe23dc0 dead000000000100 dead000000000122 [ 217.362767][ T5747] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 217.371334][ T5747] head: 00fff00000000040 ffff88813fe23dc0 dead000000000100 dead000000000122 [ 217.379987][ T5747] head: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 217.388640][ T5747] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 217.397294][ T5747] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 217.405940][ T5747] page dumped because: kasan: bad access detected [ 217.412340][ T5747] page_owner tracks the page as allocated [ 217.418031][ T5747] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 13, tgid 13 (kworker/u8:1), ts 113792053570, free_ts 113218116001 [ 217.438597][ T5747] post_alloc_hook+0xfd/0x120 [ 217.443274][ T5747] get_page_from_freelist+0xf48/0x3530 [ 217.448719][ T5747] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 217.454595][ T5747] new_slab+0xa2/0x640 [ 217.458645][ T5747] refill_objects+0xe3/0x410 [ 217.463224][ T5747] __pcs_replace_empty_main+0x376/0x680 [ 217.468765][ T5747] __kmalloc_noprof+0x66d/0x820 [ 217.473603][ T5747] ieee802_11_parse_elems_full+0x17c/0x3bc0 [ 217.479490][ T5747] ieee80211_inform_bss+0x159/0x1170 [ 217.484770][ T5747] cfg80211_inform_single_bss_data+0x898/0x1dc0 [ 217.490998][ T5747] cfg80211_inform_bss_data+0x230/0x3b60 [ 217.496619][ T5747] cfg80211_inform_bss_frame_data+0x245/0x7c0 [ 217.502674][ T5747] ieee80211_bss_info_update+0x310/0xab0 [ 217.508299][ T5747] ieee80211_ibss_rx_queued_mgmt+0xe04/0x1c70 [ 217.514355][ T5747] ieee80211_iface_work+0xa9a/0x1070 [ 217.519633][ T5747] cfg80211_wiphy_work+0x2b7/0x550 [ 217.524738][ T5747] page last free pid 6017 tgid 6017 stack trace: [ 217.531042][ T5747] __free_frozen_pages+0x79f/0x1090 [ 217.536234][ T5747] qlist_free_all+0x47/0xf0 [ 217.540724][ T5747] kasan_quarantine_reduce+0x1a0/0x1f0 [ 217.546173][ T5747] __kasan_slab_alloc+0x69/0x90 [ 217.551019][ T5747] kmem_cache_alloc_noprof+0x26b/0x6a0 [ 217.556463][ T5747] do_getname+0x35/0x390 [ 217.560696][ T5747] do_sys_openat2+0xc7/0x1e0 [ 217.565273][ T5747] __x64_sys_openat+0x12d/0x210 [ 217.570111][ T5747] do_syscall_64+0x115/0x870 [ 217.574688][ T5747] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.580565][ T5747] [ 217.582867][ T5747] Memory state around the buggy address: [ 217.588475][ T5747] ffff88802a965100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 217.596518][ T5747] ffff88802a965180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 217.604558][ T5747] >ffff88802a965200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 217.612598][ T5747] ^ [ 217.617422][ T5747] ffff88802a965280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 217.625465][ T5747] ffff88802a965300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 217.633509][ T5747] ================================================================== [ 217.887397][ T30] audit: type=1400 audit(1785455192.356:570): avc: denied { read } for pid=4959 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 217.933687][ T30] audit: type=1400 audit(1785455192.356:571): avc: denied { search } for pid=4959 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 217.956794][ T5747] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 217.963994][ T5747] CPU: 1 UID: 0 PID: 5747 Comm: kworker/1:6 Tainted: G L syzkaller #0 PREEMPT(full) [ 217.974906][ T5747] Tainted: [L]=SOFTLOCKUP [ 217.979202][ T5747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 217.989236][ T5747] Workqueue: events cxacru_poll_status [ 217.994681][ T5747] Call Trace: [ 217.997936][ T5747] [ 218.000844][ T5747] dump_stack_lvl+0x100/0x190 [ 218.005502][ T5747] vpanic+0x552/0x970 [ 218.009461][ T5747] ? __pfx_vpanic+0x10/0x10 [ 218.013981][ T5747] ? __mutex_lock+0x15ca/0x1bd0 [ 218.018809][ T5747] panic+0xd1/0xe0 [ 218.022508][ T5747] ? __pfx_panic+0x10/0x10 [ 218.026902][ T5747] ? __mutex_lock+0x15ca/0x1bd0 [ 218.031731][ T5747] ? preempt_schedule_common+0x42/0xc0 [ 218.037170][ T5747] ? check_panic_on_warn+0x1f/0x90 [ 218.042267][ T5747] check_panic_on_warn.cold+0x19/0x34 [ 218.047632][ T5747] end_report.part.0+0x3a/0x90 [ 218.052386][ T5747] kasan_report.cold+0xe/0x18 [ 218.057055][ T5747] ? __mutex_lock+0x15ca/0x1bd0 [ 218.061915][ T5747] __mutex_lock+0x15ca/0x1bd0 [ 218.066576][ T5747] ? cxacru_poll_status+0x55b/0xdc0 [ 218.071753][ T5747] ? preempt_schedule_common+0x42/0xc0 [ 218.077187][ T5747] ? preempt_schedule_thunk+0x16/0x40 [ 218.082534][ T5747] ? __pfx___mutex_lock+0x10/0x10 [ 218.087536][ T5747] ? __mutex_unlock_slowpath+0x6da/0x930 [ 218.093148][ T5747] ? __pfx__printk+0x10/0x10 [ 218.097713][ T5747] ? cxacru_poll_status+0x4c0/0xdc0 [ 218.102890][ T5747] ? cxacru_poll_status+0x4c3/0xdc0 [ 218.108073][ T5747] ? cxacru_poll_status+0x55b/0xdc0 [ 218.113259][ T5747] cxacru_poll_status+0x55b/0xdc0 [ 218.118265][ T5747] ? __pfx_cxacru_poll_status+0x10/0x10 [ 218.123792][ T5747] ? rcu_is_watching+0x12/0xc0 [ 218.128539][ T5747] process_one_work+0xa23/0x1940 [ 218.133457][ T5747] ? __pfx_process_one_work+0x10/0x10 [ 218.138833][ T5747] ? __pfx_cxacru_poll_status+0x10/0x10 [ 218.144360][ T5747] worker_thread+0x5ef/0xe50 [ 218.148937][ T5747] ? __pfx_worker_thread+0x10/0x10 [ 218.154039][ T5747] ? kthread+0x13a/0x450 [ 218.158267][ T5747] ? __pfx_worker_thread+0x10/0x10 [ 218.163355][ T5747] kthread+0x370/0x450 [ 218.167400][ T5747] ? __pfx_kthread+0x10/0x10 [ 218.171982][ T5747] ret_from_fork+0x72b/0xd50 [ 218.176572][ T5747] ? __pfx_ret_from_fork+0x10/0x10 [ 218.181670][ T5747] ? __switch_to+0x800/0x10f0 [ 218.186332][ T5747] ? __pfx_kthread+0x10/0x10 [ 218.190920][ T5747] ret_from_fork_asm+0x1a/0x30 [ 218.195674][ T5747] [ 218.198899][ T5747] Kernel Offset: disabled [ 218.203204][ T5747] Rebooting in 86400 seconds..