last executing test programs: 22.099221162s ago: executing program 4 (id=123): r0 = socket(0x1e, 0x1, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) 21.076020994s ago: executing program 4 (id=125): r0 = syz_usb_connect$uac2(0x5, 0xa8, &(0x7f0000000000)=ANY=[@ANYBLOB="120110030000004082054c00400001020301090296000301053009080b00010107208c0904000000010120000924010040041d000708240a0001ff23000c2403020703000400070081090401000001022000090001010101022000090501090002030b040825010000400400090402000001022000090402010101022000092402020400cc1c051024010201000400000008b8000000030905820908"], &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000004d00)=ANY=[@ANYBLOB="bc440000", @ANYRES16=r2, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32, @ANYBLOB="5f000e0080000000ffffffffffff08021100000050505050505000000000000000000000640001000602a1003c040001990c2d1a004009010000000000000004000a000500000001000300000000710700ff000102084b7606f3043500b890007f030e008080"], 0x44bc}, 0x1, 0x0, 0x0, 0x11}, 0x4080) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0xa200, 0x0) syz_usb_control_io(r0, &(0x7f0000000700)={0x2c, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000800)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17.324691779s ago: executing program 1 (id=129): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x1, 0x0, 0xb4a, 0x7, 0x0, 0x80000001, 0x3}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) r4 = socket$igmp(0x2, 0x3, 0x2) ioctl$XFS_IOC_SET_RESBLKS(r4, 0xc0105872, 0x0) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r3, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x13, 0x4}) ioctl$DVB_DEMUX_DMX_REMOVE_PID(r3, 0x40026f34, &(0x7f0000000040)=0x1) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x0) timer_create(0x3, &(0x7f00000012c0)={0x0, 0x2f, 0x2, @thr={&(0x7f0000000200)="82435b3fcf7b2b3df75603c7cf6ecf869aecc9954bb5221ba5c98efcb0d320cb61bb2c284c411b9b26c7992dddd94f5c5d9cd763a7fbad3536086d0603ffa074cf6e214bdd3c16ec7e6933c8b296104d9f", &(0x7f0000001480)="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"}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000300)={0xffffffffffffffff}, 0x13f, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r6, &(0x7f0000000500)={0xc, 0x8, 0xfa00, {&(0x7f0000000380)}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r6, &(0x7f0000000cc0)={0x18, 0x110, 0xfa00, {r7, 0x7fffffff, 0x12, 0x0, 0x0, @in={0x2, 0x4e21, @broadcast}, @in={0x2, 0x4e20, @loopback}}}, 0x118) recvmmsg$unix(r5, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1}}], 0x4000000000003b9, 0x26022, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000100), &(0x7f0000000140)=0x14) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r3, 0x40146f2c, &(0x7f0000000000)={0xc, 0x1, 0x2, 0x1, 0x4}) getsockopt$inet6_int(r2, 0x29, 0x12, 0x0, &(0x7f00000001c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000280)={0x8, &(0x7f0000001300)=[{0x9280, 0xf, 0x1}, {0x5, 0x7, 0xe, 0x9}, {0xf, 0x7, 0xc4, 0x9}, {0x5293, 0x81, 0x9, 0xeca8}, {0x776, 0x4, 0x4, 0x6}, {0x1, 0x34, 0x5, 0xfffffff8}, {0x4, 0x6, 0xc, 0x5}, {0x7, 0x3, 0x9, 0x4}]}, 0x10) 14.824033326s ago: executing program 1 (id=134): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000002880)=@raw={'raw\x00', 0x3c1, 0x3, 0x3c0, 0x1e0, 0xc8, 0x8, 0x1e0, 0x5803, 0x2f0, 0x2e8, 0x2e8, 0x2f0, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x198, 0x1e0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5df11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f35a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x2, 0x3}}, @common=@unspec=@realm={{0x30}, {0x9, 0xcd}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x89, 0x8, 0xe, 'syz0\x00', {0x1}}}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x420) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) writev(0xffffffffffffffff, &(0x7f0000000840)=[{0x0}], 0x1) r2 = request_key(&(0x7f0000000080)='keyring\x00', &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0) r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x717101, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000280)={0x1, &(0x7f0000000200)=[{0x0}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r3, 0xc010641d, &(0x7f0000000380)={r4, &(0x7f0000000300)=""/126}) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, r2) r5 = fanotify_init(0x4, 0x800) fanotify_mark(r5, 0x441, 0x800003b, 0xffffffffffffffff, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000540)='./file5\x00', 0x82c0, 0x0) r7 = fanotify_init(0xf00, 0x0) fanotify_mark(r7, 0x105, 0x5000003a, r6, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x124) r8 = timerfd_create(0x8, 0x800) timerfd_settime(r8, 0x3, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) timerfd_gettime(r8, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000004c0)=',8Z', 0x3) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 14.262240025s ago: executing program 3 (id=135): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000005c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)={0x1c, r1, 0xf01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) 14.195696991s ago: executing program 4 (id=137): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB], 0x2c}}, 0x20000000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="e50a0000ffffffff61115c0000000000850000007c00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r2 = syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000002040)='./file0\x00', 0x1) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x5) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x14b101) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_misc(r5, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f00000002c0)={r5, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00000000170000000400", "f4bd000000801900", [0x100000000, 0x8000000000000000]}}) r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x28101) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r7, 0xc0bc5351, &(0x7f00000000c0)={0x1c, 0x1, 'client1\x00', 0x100000000, "c541e12dfbe471c9", "2df8e76a1ee147923397f2e86368ef29c0d68b94502a7a9fcc1405eea0b21367", 0xd3, 0x4}) syz_open_dev$char_usb(0xc, 0xb4, 0x10000) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) 14.174364778s ago: executing program 1 (id=138): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB], 0x2c}}, 0x20000000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="e50a0000ffffffff61115c0000000000850000007c00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r2 = syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000002040)='./file0\x00', 0x1) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x5) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x14b101) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_misc(r5, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f00000002c0)={r5, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00000000170000000400", "f4bd000000801900", [0x100000000, 0x8000000000000000]}}) r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x28101) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r7, 0xc0bc5351, &(0x7f00000000c0)={0x1c, 0x1, 'client1\x00', 0x100000000, "c541e12dfbe471c9", "2df8e76a1ee147923397f2e86368ef29c0d68b94502a7a9fcc1405eea0b21367", 0xd3, 0x4}) syz_open_dev$char_usb(0xc, 0xb4, 0x10000) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) 14.081637695s ago: executing program 3 (id=139): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4) recvmmsg(r0, &(0x7f00000054c0), 0x0, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x42, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket(0x40000000015, 0x5, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE2(0xffffffffffffffff, 0xe, &(0x7f0000000240)={0x3, 0x0, &(0x7f00000000c0), 0x0}, 0x20) r2 = syz_open_dev$media(&(0x7f0000000380), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r2, 0xc0287c02, &(0x7f0000000100)={0x80000000, 0x0, &(0x7f0000000200)=[{{}, {0x80000000, 0x0}}, {{}, {0x80000000, 0x0}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r2, 0xc0347c03, &(0x7f00000001c0)={{r4, r3, 0x1, [0x0, 0xf7df]}, {r4, r5, 0x4, [0x6]}, 0x1, [0x8, 0x3df]}) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000086a82, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x48, 0x0, 0x0, 0x0, 0x0) sendmsg$NFC_CMD_LLC_SET_PARAMS(0xffffffffffffffff, 0x0, 0x18) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x20040810) 13.255118884s ago: executing program 2 (id=140): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="07000000000000000000050000001800017d0a481efb30c8468a801400020076657468315f746f5f6801a92e4f4e978bb872884a5920737200000000666fa57463225186b8529035f9da64f3558c59993d436314c89f94a9f51dd345ca8a9b29664f710807245af7d17717f02d6d649c98fbc1c47e3c224ef585b9de4bd239a7"], 0x2c}}, 0x20000000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="e50a0000ffffffff61115c0000000000850000007c00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r2 = syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0) socket$packet(0x11, 0x3, 0x300) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000002040)='./file0\x00', 0x1) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x5) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x14b101) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_misc(r4, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000002c0)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00000000170000000400", "f4bd000000801900", [0x100000000, 0x8000000000000000]}}) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x28101) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r6, 0xc0bc5351, &(0x7f00000000c0)={0x1c, 0x1, 'client1\x00', 0x100000000, "c541e12dfbe471c9", "2df8e76a1ee147923397f2e86368ef29c0d68b94502a7a9fcc1405eea0b21367", 0xd3, 0x4}) syz_open_dev$char_usb(0xc, 0xb4, 0x10000) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) 12.932410037s ago: executing program 3 (id=142): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001180)={0x6, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001bc0)={r1, 0x0, 0x4000, 0xdc0, &(0x7f0000001cc0)="633268f83ca3000000a2029e3815bb2fa117d8326687688b2c969fd7267d546214af00d1ca2524d00f9e4d9555f3ab381b5d44fd6bda8c509e66101d296f10c805252e7c5d48d9814f46db8f07441878734b13270fe47fba418b7358984b9a61c2bbf964a520459fd0d90590b46cf1677d580a26933b6e35aee75996b73a15a25aa8ae2f1f9bc9699a505c0dc4050ab2255fc35f508ccc52f10ac12febf28652fe36f725714868675ca2a7042ab4b26904b2f000589694f69ab0b22a5aec72c5036ce1c8974690045e4ab412a70336b4c65b2dfc8121af4143c2e10a0e5632bcd44e0b000029da424d86f298656822dae2c002e289fbfa6fe0dfb2fd57713a7684dc166c628dc45027ac174c5db54f22e409eb4e94263dbc9919f90f1af3290918b9824c3e0268b300bf69cc2eb3fc58f655439bdbe2b905", &(0x7f0000001c40)=""/76, 0x0, 0x0, 0x47, 0x50, &(0x7f0000001ac0)="9c01bd6f9a6028c80d7364240fd78867d9d62eca43c565f2c5ac65dd4a0fadceb6c65dcb07f2421e69087e0f17b4eb709e4805f2722709c46bef17c4cb9aed9fb1c342179ea349", &(0x7f0000001a40)="408fd0050dc7945b483103067eca9bd26ffbe35abf0f88a103f6893dc2b1d1cdc2195d4ae89abc04ff5fe5d2466892c81015df835a7d47be4f852161bc4015e7564b08584290fe1762f943a653008ac5", 0x1, 0x0, 0x13}, 0x22) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x13, r2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r3, 0xff, 0x1, 0x0, &(0x7f0000000040)=0xfffffffffffffed0) 12.821453669s ago: executing program 0 (id=143): read$FUSE(0xffffffffffffffff, 0x0, 0x0) statx(0xffffffffffffff9c, 0x0, 0x2900, 0x88c, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000040)={0x6, 0x7, 0x10021da0, 0x10000, 0xff, "42f407000000195a14c84953dc7e8e5aec7776", 0xfffffffe, 0x9}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) r1 = syz_usb_connect(0x3, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000407c2c25010000000000010902270001010080fa0904000003ffffff0007058102000200070502020002000705830340"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) 12.627749864s ago: executing program 3 (id=144): io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000540)=[@ioring_restriction_register_op={0x0, 0x38fc2f1a6518ef8a}], 0x1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x1, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x4004550c, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000006a80), 0x1, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89101) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r2) socket$kcm(0x2d, 0x2, 0x0) r3 = openat$comedi(0xffffff9c, 0x0, 0x101401, 0x0) r4 = socket$rxrpc(0x21, 0x2, 0xa) poll(0x0, 0x0, 0x7f) setsockopt$sock_int(r4, 0x1, 0x7, &(0x7f0000000200), 0x4) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f0000000000)={'dt2801\x00', [0x294, 0x8, 0x7fffffff, 0x8, 0x2c, 0x1, 0xf1, 0x8, 0x80ffd, 0x2, 0x0, 0x9, 0x0, 0x1000004, 0x1, 0x10000, 0xfff7ffac, 0x7ffffffd, 0x1ef, 0x20000001, 0x20000010, 0x55, 0x8, 0x4008, 0x746f, 0x8, 0x6, 0x4, 0xee, 0x4, 0x7ffd, 0x800]}) ioctl$TUNSETOFFLOAD(r2, 0x89e0, 0x110e22fff6) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000000)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000", @ANYRES8=r1, @ANYBLOB="05", @ANYRES16=r1], 0x0) 11.801191739s ago: executing program 1 (id=145): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000007000010010ab4be68e8da23507000000", @ANYRES32=r1, @ANYBLOB="1000018004000480080001"], 0x28}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f00000000c0)={0x0, 0x7, 0xfff, 0x32, 0x8, 0x0, 0x9, 0x3, {0x0, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x25}}}, 0x5, 0x7, 0x3, 0xf, 0xb}}, &(0x7f0000000180)=0xb0) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000280)={r3, @in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0x84) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000380)={'dummy0\x00', 0x1}) r5 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) write$tun(r4, &(0x7f0000000200)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000000000000800001c"], 0x4a) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@getqdisc={0x24, 0x26, 0xfe, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x6, 0x10}, {0xc, 0xfff4}, {0x6, 0x5}}}, 0x24}}, 0x20004041) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newtfilter={0x24, 0x2c, 0x100, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x5, 0xffff}, {0x0, 0x8}, {0x7, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000051}, 0x4004000) r11 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x20000) ioctl$MON_IOCQ_RING_SIZE(r11, 0x9205) pipe2(&(0x7f0000000440), 0x84800) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) unlinkat(0xffffffffffffff9c, 0x0, 0x200) 10.188393939s ago: executing program 4 (id=146): r0 = memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0) pwrite64(r0, &(0x7f00000008c0)='/', 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x105401, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) unshare(0x20000400) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r4, &(0x7f0000002f40)=""/4098, 0x1002) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000007c0)=[{0x0, 0x0, &(0x7f0000000000)=[{0x0}, {0x0}, {&(0x7f00000002c0)}], 0x3, 0x0, 0x0, 0x10}], 0x1, 0x40800) syz_open_dev$sg(0x0, 0x0, 0x8002) r5 = accept$inet(r4, &(0x7f0000000100)={0x2, 0x0, @local}, &(0x7f0000000140)=0x10) ioctl$sock_inet_SIOCADDRT(r5, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0xffff, @multicast2}, {0x2, 0x200, @empty}, {0x2, 0x4e24, @empty}, 0x2a0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x401}) 7.631284026s ago: executing program 3 (id=147): socket$kcm(0x21, 0x2, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x4, 0x2, 0x7}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_MSG_GETSET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000000a0a010800000000000200000a0000010900010073797a3100000000090002"], 0x2c}, 0x1, 0x0, 0x0, 0x20000084}, 0x44) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}]}}}, {0x14, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xac}}, 0x0) getpeername$netlink(r2, &(0x7f0000000340), &(0x7f0000000540)=0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r8, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r9, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 7.560331196s ago: executing program 0 (id=148): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x80800) recvmmsg$unix(r1, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x60f, 0x0, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201100159a690406d0420095578010203010902120001000110990904", @ANYRES64, @ANYRESHEX, @ANYRES8], 0x0) 6.826304019s ago: executing program 2 (id=149): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000002880)=@raw={'raw\x00', 0x3c1, 0x3, 0x3c0, 0x1e0, 0xc8, 0x8, 0x1e0, 0x5803, 0x2f0, 0x2e8, 0x2e8, 0x2f0, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x198, 0x1e0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5df11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f35a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x2, 0x3}}, @common=@unspec=@realm={{0x30}, {0x9, 0xcd}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x89, 0x8, 0xe, 'syz0\x00', {0x1}}}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x420) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) writev(0xffffffffffffffff, &(0x7f0000000840)=[{0x0}], 0x1) r2 = request_key(&(0x7f0000000080)='keyring\x00', &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0) r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x717101, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000280)={0x1, &(0x7f0000000200)=[{0x0}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r3, 0xc010641d, &(0x7f0000000380)={r4, &(0x7f0000000300)=""/126}) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, r2) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x124) fanotify_mark(0xffffffffffffffff, 0x441, 0x800003b, r5, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000540)='./file5\x00', 0x82c0, 0x0) r7 = fanotify_init(0xf00, 0x0) fanotify_mark(r7, 0x105, 0x5000003a, r6, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x124) r8 = timerfd_create(0x8, 0x800) timerfd_settime(r8, 0x3, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) timerfd_gettime(r8, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000004c0)=',8Z', 0x3) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 5.880774018s ago: executing program 2 (id=150): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}}, 0x0) recvmmsg(r0, &(0x7f00000009c0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000c40)=""/277, 0x115}, {&(0x7f00000029c0)=""/4099, 0x1003}, {&(0x7f00000002c0)=""/200, 0xc8}, {&(0x7f0000000100)=""/258, 0x102}, {&(0x7f00000003c0)=""/178, 0xb2}], 0x5}, 0xf7d}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000d80)=""/4096, 0x1000}, {0x0}, {&(0x7f0000003a00)=""/4096, 0x1000}], 0x3}, 0x6c74a33a}], 0x2, 0x10002, 0x0) 4.932748558s ago: executing program 2 (id=151): r0 = socket(0x1e, 0x1, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000200)=@req3={0x8001, 0x7, 0xeac, 0xe74, 0x2, 0xe82a, 0x6}, 0x1c) r1 = syz_usb_connect(0x3, 0x86, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ffffff40cd060f010001010203010902740001010080fa090400000effffff0007058102400000070582024000000705830240000007058402400000070585024000000705860240000007058702400000070501024000000705020240000007050302400000070504024000000705050240"], 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="440000001000010027bd700402d4df250d000000", @ANYRES32=r4, @ANYBLOB="904e0600c16a010024001280110001006272696467655f736c617665000000000c0005800500040001000000"], 0x44}, 0x1, 0x0, 0x0, 0x400c080}, 0x200088c2) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) setns(r6, 0x24020000) r7 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = syz_pidfd_open(r7, 0x0) setns(r8, 0x24020000) mount(0x0, &(0x7f0000000080)='.\x00', 0x0, 0x1020, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYRESHEX, @ANYRES64=r4, @ANYRES32=r0, @ANYRESDEC=r0, @ANYRESOCT=r1], 0x50}}, 0x4044804) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a0000140002"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r9) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r9, &(0x7f0000000500)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="30010001", @ANYRES16=r10, @ANYBLOB="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"], 0x130}}, 0x4) syz_emit_ethernet(0x42, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaafc0c1100fe8000000000000000000000000000bb0000000000000000000000000000000080000e22000c907801020000"], 0x0) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) r11 = fanotify_init(0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000180)={0x200000, 0x200000, 0x0, 0x0, 0x2d33, 0x7}) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) fanotify_mark(r11, 0x101, 0x8000031, r12, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/ttyUSB0\x00', 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) 4.436368911s ago: executing program 4 (id=152): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'lblcr\x00', 0x1, 0x80005, 0x6f}, 0x2c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000000000000000000000100000800010001"], 0x1c}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="0e00"}) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000020303000000000000000000000000100800010001"], 0x1c}}, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000040)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff", @ANYBLOB], 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x0, 0xb, 0x0, &(0x7f0000000080)="0000000000002d9d8aaf5d", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xfffffffe}, 0x50) r4 = syz_usb_connect$hid(0x2, 0x0, 0x0, &(0x7f0000000280)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x110, 0x75, 0x6, 0x80, 0x10, 0x7}, 0xb9, &(0x7f0000000100)={0x5, 0xf, 0xb9, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "af5f4ff06596fdef7fb263210ce532e2"}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "e791d065b2644fe0904204efc541e32b"}, @ssp_cap={0xc, 0x10, 0xa, 0x7, 0x0, 0x4b, 0x0, 0x80}, @ssp_cap={0x1c, 0x10, 0xa, 0xc, 0x4, 0x8000, 0x0, 0x7f1, [0x1fe00c7, 0xf0, 0xf0, 0xf]}, @generic={0x64, 0x10, 0x2, "463e447aaf647fe65b698412e76760f967febb88e9c506add0bfb8227e3f3faeadcf663bd4a2eaca764701c0ebf10f6540e87bfd44dd82a68e888d051726c7ff7d4041253b407fa242a456bdb91f0c88925f6424c3d6f63ee61457bef388be93a4"}]}, 0x2, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x7cd3}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x401}}]}) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x35, 0x1, 0x8, 0x0, 0x0) r5 = getpgid(0x0) syz_open_procfs(r5, &(0x7f0000000440)='fdinfo/4\x00') openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) read(r6, &(0x7f00000006c0)=""/207, 0xcf) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a06ffffff7f070000000000000058000b480400945f64009400050038923944000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) r8 = socket$kcm(0x2, 0x200000000000001, 0x0) setsockopt$sock_attach_bpf(r8, 0x1, 0x50, &(0x7f0000000100), 0x48) syz_usb_control_io$hid(r4, &(0x7f0000000680)={0x24, &(0x7f00000002c0)={0x40, 0x17, 0x66, {0x66, 0x8, "dec1075c2ceabccdd634dd5afb59814d53048b19d780a9fb94891f20138073477ba950ffaaa0e44ede03e8d4e227642a1cf44d8aaed49edf448229260e27a5d441442c8e44ec945f1b77125537a2ba9ed1e9938da3181818562fc90e91153e11d36059d8"}}, &(0x7f0000000500)={0x0, 0x3, 0xe6, @string={0xe6, 0x3, "a828b427d306d3064e9f72e1743d1faa2a2c1483f4360e27a1aae90ffecaea256381120713c593dd4a7247743f5b74672f01dd1033479bd8ca821bb28171200df181afb0105f4b1f768a208d40797a3259df47ab7b3de5f6c2e5a6855d1c14e98fcf97a0fe1beec2c671c432b6924c8480fc73a914c72952d9e68e53939ebc1997436f4a6bd20642e214415eccdca6f989adeee39dead93b955c7e8ae5f8db25cc240fd8c2567229b46e3580f3fdae65e485cfdb2538a5c4adb0eee4ccf9d3031dfc46f76d7901b8c8aaffe24bd07501a4c53abe745e4e5f0e31c1c08c9bb7ac85e2f816"}}, &(0x7f0000000600)={0x0, 0x22, 0xa, {[@local=@item_4={0x3, 0x2, 0x3, "2615787b"}, @main=@item_4={0x3, 0x0, 0xc, "f194dd30"}]}}, 0x0}, 0x0) 3.649297203s ago: executing program 0 (id=153): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4) recvmmsg(r0, &(0x7f00000054c0), 0x0, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x42, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket(0x40000000015, 0x5, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE2(0xffffffffffffffff, 0xe, &(0x7f0000000240)={0x3, 0x0, &(0x7f00000000c0), 0x0}, 0x20) r2 = syz_open_dev$media(&(0x7f0000000380), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r2, 0xc0287c02, &(0x7f0000000100)={0x80000000, 0x0, &(0x7f0000000200)=[{{}, {0x80000000, 0x0}}, {{}, {0x80000000, 0x0}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r2, 0xc0347c03, &(0x7f00000001c0)={{r4, r3, 0x1, [0x0, 0xf7df]}, {r4, r5, 0x4, [0x6]}, 0x1, [0x8, 0x3df]}) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000086a82, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x48, 0x0, 0x0, 0x0, 0x0) sendmsg$NFC_CMD_LLC_SET_PARAMS(0xffffffffffffffff, 0x0, 0x18) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x20040810) 2.643297299s ago: executing program 0 (id=154): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000bc0)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}, @TCA_INGRESS_BLOCK={0x8}]}, 0x38}}, 0x44080) 1.943012645s ago: executing program 3 (id=155): syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870f500090582020002"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r2 = socket$kcm(0x2, 0xa, 0x2) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000040)="18", 0x48, 0x20008884, &(0x7f0000000080)={0x11, 0xd, r4, 0x1, 0xfd, 0x6, @multicast}, 0x14) syz_usb_connect$uac2(0x1, 0x12e, &(0x7f0000000400)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x17cc, 0x1000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x11c, 0x3, 0x1, 0x7, 0x40, 0x0, {0x8, 0xb, 0x1, 0x0, 0x1, 0x0, 0x20, 0xe0}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x4, 0xa, 0x42, 0x9}, [@mixer_unit={0x5, 0x24, 0x4, 0x4, 0x4}, @feature_unit={0xb, 0x24, 0x6, 0x3, 0x5, [0x9, 0x2, 0x1]}, @effect_unit={0xf, 0x24, 0x7, 0x2, 0x4, 0x2, [0x0, 0x3, 0x1, 0x3]}, @mixer_unit={0xb, 0x24, 0x4, 0x2, 0xb, "367cdaaf7139"}, @feature_unit={0xf, 0x24, 0x6, 0x3, 0x4, [0x3, 0xc, 0x6, 0x9, 0x9]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0xe219, 0x5, 0x57, 0x5}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x1, 0x1}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0xfa, 0x1, 0x6, 0x5, "45a276a1639b732b"}, @as_header={0x10, 0x24, 0x1, 0x1, 0x3, 0x2, 0x1002, 0xa, 0x5a0, 0x7}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x3, 0x4, 0x7, 0x96, "", "e1"}]}, {{0x9, 0x5, 0x1, 0x9, 0x1ff, 0x1, 0xc, 0x9, {0x8, 0x25, 0x1, 0xa94676f89979414a, 0x3c, 0x1, 0x80}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x0, 0x3, 0x60, 0x3}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x4e, 0x2, 0x2, 0x2, "54ca4043ef465e"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x7f, 0x54, 0x4, 0x70, 0xd6}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x4, 0xce}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0xd, 0x3, 0xb9, 0x3, "a8e39b06680ebd45d1"}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x9, 0x4, 0x2, 0x2}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x1, 0x0, 0x1, {0x8, 0x25, 0x1, 0x0, 0xc, 0x2, 0x1}}}}}}}}]}}, &(0x7f00000007c0)={0xa, &(0x7f0000000540)={0xa, 0x6, 0x300, 0x80, 0x6, 0x4, 0x20, 0xda}, 0x5, &(0x7f0000000580)={0x5, 0xf, 0x5}, 0x4, [{0x95, &(0x7f00000005c0)=@string={0x95, 0x3, "eb8767783418866da7024b440ccb536fc9998a63ea0785a6bfa41e4fb2c017b826451f478d827459eec853362059d9ba0c6ed231414ce33d9129b11acbae1bda3e58ec588fe22bda7c9946edc95388b2df5aa50230d748842cfafc7441d6d1716f644eb01fecd903f044895a6bc64f125d7c08c8e3cfa275e286866791edfae51f396d9adec2f7877776dba3b002ea478ea10c"}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x3801}}, {0x8f, &(0x7f0000000840)=ANY=[@ANYBLOB="8f037539c2237c5490300e052adeaccdec74f4dd1b73751ed35061f52e18092116e9375a41e2e2840d56722ba18ebc5aa90b2b18839a1f8ed94f0892ff3adaff15ae47158078c6fa029245fb75afb183b145a6b8d68b06a20292aaa30582346db26e9d5b88bf26341d01833af69b44dceae483d38ca4e1b07b9eb159637ae2ab1a68977135ca315dc52faf1e15de51450bf727d81bf75f2d"]}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x1cc0}}]}) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x4) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00007fe000/0x800000)=nil) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, &(0x7f0000000180)=ANY=[]) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000016c0)=@base={0x9, 0x4, 0x8, 0x8, 0x8}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000400)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, r6}, 0x38) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read(r7, &(0x7f0000000380)=""/144, 0x90) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x94, 0x7fff0001}]}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24000000) close_range(r8, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}}, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0x200, @loopback}, 0x1c) 1.861803446s ago: executing program 0 (id=156): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x200000005c831, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = openat$cgroup_pressure(r1, &(0x7f0000000100)='cpu.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r2, &(0x7f0000000080)={'some', 0x20, 0x2000000008, 0x20, 0x10000000fffff}, 0x2f) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r5, &(0x7f0000004680)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000480)=ANY=[@ANYBLOB="18000000041401002cbd7000fbdbdf25080001000100000011c960947fbf13f519d5933eade8254efa94b68d93da9e8fdd63bb3da197c724bbff836a1b5907779503c0797e86d31a4d146d40d0f907baa224f6c1c3e80225fc55f4b3babaa1407e7f335ba4217f9da1eb9a290efc22eb5cec3ba89d80820bc6ff"], 0x18}, 0x1, 0x0, 0x0, 0x48081}, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000040), 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000084) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) recvmmsg(r4, 0x0, 0x0, 0x10000, &(0x7f0000000440)={r6, r7+60000000}) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r8, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) r9 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_GET(r9, &(0x7f0000000280)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000200)={0x10, 0x3f8, 0x8, 0x70bd2c, 0x25dfdbfc, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4048800}, 0x0) r10 = socket$phonet(0x23, 0x2, 0x1) sendto$phonet(r10, &(0x7f00000000c0)="355eabc213179bacccd12131c482aabccdf8bdefbce5f1dc0146c0c93c47a383251b0e799bef524cb4cb769aad1cc74dac4787ea709fd09ec5fde6dbca89792eb2d1ece080498fbf810e929558b35bd85deaddaa51299f9b0600caf617480f4e391df250760c9a1d023e1c9e4dd6af0d45a260f59125742f9237db5018e0ac0a6e98b3cca02d02e6294501a78f8d34d5f0d343568e49576fcfbf9387196f267d4d20b73d905eae9d54996065af3ffbda4c73ced58ffb4c3ac93299d758f5d39f", 0xc0, 0x0, 0x0, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c000000170a030000000000000000000000ffff0900020073797a32000073797a3200000000"], 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x800) write$cgroup_pressure(r2, &(0x7f0000000180)={'some', 0x20, 0x7fffffffffffffff, 0x20, 0xffffffffffffffff}, 0x2f) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000340)="b9ff05000700008d9c18ed0f6fd2", 0x0, 0xfea, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}, 0x50) io_uring_setup(0x1b80, &(0x7f0000000040)={0x0, 0x8970, 0x1f280, 0x0, 0x8000399}) migrate_pages(0x0, 0x4, &(0x7f0000000000)=0x200000007f, &(0x7f0000000300)=0xa) 1.743395839s ago: executing program 1 (id=157): syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x3, 0xc2782) r0 = socket$packet(0x11, 0x3, 0x300) syncfs(0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'hsr0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="280320000a00140000007ef506be", 0xe, 0x1e1bb21e65f25594, &(0x7f0000000080)={0x11, 0x3, r1, 0x1, 0xe5, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}}, 0x14) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=ANY=[@ANYBLOB="34000000180001002cbd7000ffdbdf250a000000ff010003", @ANYRES32=0x0, @ANYBLOB="100012"], 0x34}, 0x1, 0x0, 0x0, 0x30000001}, 0x20000800) write$tun(r3, &(0x7f00000018c0)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x11, 0x800}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "ec9700", 0xf98, 0x2c, 0x0, @local, @mcast2, {[@fragment={0x67}], @pkt_toobig={0x2, 0x0, 0x0, 0x800, {0xf, 0x6, '*zc', 0x3ff, 0x6c, 0x1, @loopback, @loopback, [@routing={0x2f, 0x10, 0x0, 0x6, 0x0, [@private1={0xfc, 0x1, '\x00', 0x1}, @local, @private2, @empty, @remote, @private0={0xfc, 0x0, '\x00', 0x1}, @remote, @mcast2]}, @hopopts={0x3a, 0x1d8, '\x00', [@generic={0x2, 0xebf, "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"}]}], "ab0924172f9c2a1d"}}}}}}, 0xfce) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r2) 1.400393478s ago: executing program 4 (id=158): io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000540)=[@ioring_restriction_register_op={0x0, 0x38fc2f1a6518ef8a}], 0x1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x1, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x4004550c, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000006a80), 0x1, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89101) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r2) socket$kcm(0x2d, 0x2, 0x0) r3 = openat$comedi(0xffffff9c, 0x0, 0x101401, 0x0) r4 = socket$rxrpc(0x21, 0x2, 0xa) poll(0x0, 0x0, 0x7f) setsockopt$sock_int(r4, 0x1, 0x7, &(0x7f0000000200), 0x4) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f0000000000)={'dt2801\x00', [0x294, 0x8, 0x7fffffff, 0x8, 0x2c, 0x1, 0xf1, 0x8, 0x80ffd, 0x2, 0x0, 0x9, 0x0, 0x1000004, 0x1, 0x10000, 0xfff7ffac, 0x7ffffffd, 0x1ef, 0x20000001, 0x20000010, 0x55, 0x8, 0x4008, 0x746f, 0x8, 0x6, 0x4, 0xee, 0x4, 0x7ffd, 0x800]}) ioctl$TUNSETOFFLOAD(r2, 0x89e0, 0x110e22fff6) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000000)=ANY=[@ANYBLOB="2a01000020000040b7080000000000000301090292", @ANYRES8=r1, @ANYBLOB="05", @ANYRES16=r1], 0x0) 1.222202816s ago: executing program 1 (id=159): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="07000000000000000000050000001800017d0a481efb30c8468a801400020076657468315f746f5f6801a92e4f4e978bb872884a5920737200000000666fa57463225186b8529035f9da64f3558c59993d436314c89f94a9f51dd345ca8a9b29664f710807245af7d17717f02d6d649c98fbc1c47e3c224ef585b9de4bd239a7"], 0x2c}}, 0x20000000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="e50a0000ffffffff61115c0000000000850000007c00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r2 = syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0) socket$packet(0x11, 0x3, 0x300) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000002040)='./file0\x00', 0x1) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x5) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x14b101) r3 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_misc(r4, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000002c0)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00000000170000000400", "f4bd000000801900", [0x100000000, 0x8000000000000000]}}) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x28101) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r6, 0xc0bc5351, &(0x7f00000000c0)={0x1c, 0x1, 'client1\x00', 0x100000000, "c541e12dfbe471c9", "2df8e76a1ee147923397f2e86368ef29c0d68b94502a7a9fcc1405eea0b21367", 0xd3, 0x4}) syz_open_dev$char_usb(0xc, 0xb4, 0x10000) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) 1.190568277s ago: executing program 0 (id=160): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x15) ioctl$TCSETS(r0, 0xc0384707, &(0x7f0000000500)={0xffff7fff, 0x0, 0xfffffffe, 0x5, 0x0, "3eccd8f9d20000000000001000000200000500"}) r1 = syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003ac9bcc20d118af1ebb5a0102030109022400010700800b0904bb06023ae50400090507"], &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000000e80)={0x84, &(0x7f0000000140)=ANY=[@ANYBLOB="400d02000000e2"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000040)=""/141, &(0x7f0000000180)=0x8d) r2 = syz_open_dev$loop(&(0x7f0000000140), 0x5, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000400)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x800000000000208, 0x0, 0x0, 0x2, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000020000ffffffffff00", "2809e8dbe108598948224ad54afac11d875397bd3c5240f45f819e01177d2d458dd4992861ac00", "90be8b1c5500000000004000f0f9ffff0000000000ffff00", [0x80000000006, 0x6]}}) socket$nl_netfilter(0x10, 0x3, 0xc) socket$igmp(0x2, 0x3, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet_icmp(0x2, 0x2, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r8 = socket$inet_sctp(0x2, 0x1, 0x84) r9 = socket$rds(0x15, 0x5, 0x0) bind$rds(r9, &(0x7f0000001000)={0x2, 0x4e21, @loopback}, 0x10) sendmsg$rds(r9, &(0x7f0000000180)={&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r8, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x3, 'wrr\x00', 0xd, 0x81, 0x2e}, {@rand_addr=0xac1414aa, 0x4e23, 0x3, 0x1cb, 0x12d5c, 0x12d59}}, 0x44) ioctl$sock_inet_SIOCGARP(r4, 0x8954, 0x0) 943.13019ms ago: executing program 2 (id=161): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)=ANY=[], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r0, r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x11, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffff", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0xcc0, 0x0, &(0x7f0000000040)="f4b84de4115d64244a0e839e86dd", 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x40000000000029a, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000240)={@local, @ipv4={'\x00', '\xff\xff', @empty}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c200a2}) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r5, 0x5404) ioctl$SNDCTL_TMR_STOP(r5, 0x5403) r6 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, 0x400, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r6, 0xc1105518, &(0x7f0000000040)={{0x8, 0x0, 0x9, 0x0, 'syz0\x00'}, 0x1, [0x8, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0xfffffffffffffff7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x8200000000000000, 0x4, 0xfffffffffffffffe, 0x8, 0x0, 0x5, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x8000000000000000, 0x8, 0x8, 0x100000000, 0x0, 0x0, 0xcc, 0x0, 0x2, 0x0, 0x1, 0xd, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xe, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x800000, 0x0, 0x101, 0x0, 0xd721, 0x0, 0x0, 0x7fff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x58a9, 0x4, 0x0, 0x400000003, 0x0, 0x0, 0x0, 0x0, 0x9295]}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0xf) 0s ago: executing program 2 (id=162): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/bus/platform/drivers/dummy_udc/unbind\x00', 0x1, 0x0) write(r1, &(0x7f0000000280)='dummy_udc.0\n', 0xc) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000480), 0xffffffffffffffff) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x1000) listen(r2, 0x1) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x4, 0x2, 0x2, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000007300000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8080}, 0x4) write$selinux_load(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e7578"], 0x65) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x1c) kernel console output (not intermixed with test programs): t using interface batadv_slave_1 (retrying later): interface not active [ 88.375857][ T5596] hsr_slave_0: entered promiscuous mode [ 88.382575][ T5596] hsr_slave_1: entered promiscuous mode [ 88.389313][ T5596] debugfs: 'hsr0' already exists in 'hsr' [ 88.395451][ T5596] Cannot create hsr debugfs directory [ 88.494068][ T5594] hsr_slave_0: entered promiscuous mode [ 88.500519][ T5594] hsr_slave_1: entered promiscuous mode [ 88.506952][ T5594] debugfs: 'hsr0' already exists in 'hsr' [ 88.513723][ T5594] Cannot create hsr debugfs directory [ 88.562657][ T5604] hsr_slave_0: entered promiscuous mode [ 88.569445][ T5604] hsr_slave_1: entered promiscuous mode [ 88.576405][ T5604] debugfs: 'hsr0' already exists in 'hsr' [ 88.582425][ T5604] Cannot create hsr debugfs directory [ 88.598289][ T5593] hsr_slave_0: entered promiscuous mode [ 88.605722][ T5593] hsr_slave_1: entered promiscuous mode [ 88.612090][ T5593] debugfs: 'hsr0' already exists in 'hsr' [ 88.617886][ T5593] Cannot create hsr debugfs directory [ 89.061937][ T5595] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 89.080620][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 89.089473][ T5595] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 89.100717][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 89.110037][ T5595] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 89.115821][ T5602] Bluetooth: hci4: command tx timeout [ 89.118930][ T5609] Bluetooth: hci1: command tx timeout [ 89.131448][ T4913] Bluetooth: hci3: command tx timeout [ 89.137854][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 89.147087][ T5595] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 89.159401][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 89.186826][ T5609] Bluetooth: hci2: command tx timeout [ 89.194574][ T4913] Bluetooth: hci0: command tx timeout [ 89.240710][ T5596] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 89.254106][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 89.264702][ T5596] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 89.278573][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 89.291618][ T5596] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 89.307885][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 89.319567][ T5596] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 89.333025][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 89.446193][ T5594] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 89.458288][ T5594] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 89.470427][ T5594] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 89.480560][ T5594] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 89.491101][ T5594] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 89.503573][ T5594] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 89.515750][ T5594] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 89.526250][ T5594] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 89.644718][ T5593] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 89.657454][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 89.672755][ T5593] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 89.689706][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 89.713497][ T5595] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.732841][ T5593] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 89.744619][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 89.772844][ T5593] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 89.784929][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 89.861028][ T5595] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.882467][ T5596] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.922906][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.932428][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.952623][ T5604] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 89.962493][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 89.973862][ T5604] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 89.988398][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 89.997574][ T5604] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 90.010029][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 90.023423][ T5604] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 90.032717][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 90.044085][ T5596] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.057941][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.066232][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.112335][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.120590][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.160263][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.167405][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.198884][ T5594] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.261924][ T5594] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.316859][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.324426][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.350428][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 90.350739][ T30] audit: type=1400 audit(1786624073.118:154): avc: denied { sys_module } for pid=5595 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 90.354620][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.388615][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.431315][ T5593] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.547552][ T5593] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.613357][ T5604] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.630727][ T1158] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.638504][ T1158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.664681][ T1158] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.672401][ T1158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.756927][ T5604] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.801269][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.808659][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.852882][ T1158] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.860373][ T1158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.185891][ T4913] Bluetooth: hci4: command tx timeout [ 91.196419][ T5609] Bluetooth: hci3: command tx timeout [ 91.197494][ T5602] Bluetooth: hci1: command tx timeout [ 91.266361][ T5602] Bluetooth: hci0: command tx timeout [ 91.266898][ T4913] Bluetooth: hci2: command tx timeout [ 91.302812][ T5595] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.394651][ T5596] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.610402][ T5595] veth0_vlan: entered promiscuous mode [ 91.639100][ T5596] veth0_vlan: entered promiscuous mode [ 91.692151][ T5595] veth1_vlan: entered promiscuous mode [ 91.718968][ T5594] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.743141][ T5596] veth1_vlan: entered promiscuous mode [ 91.836253][ T10] cfg80211: failed to load regulatory.db [ 91.942117][ T5595] veth0_macvtap: entered promiscuous mode [ 91.955077][ T5596] veth0_macvtap: entered promiscuous mode [ 91.987448][ T5595] veth1_macvtap: entered promiscuous mode [ 92.005093][ T5593] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.022362][ T5596] veth1_macvtap: entered promiscuous mode [ 92.041892][ T5594] veth0_vlan: entered promiscuous mode [ 92.113204][ T5595] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.123712][ T5594] veth1_vlan: entered promiscuous mode [ 92.150690][ T5596] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.163935][ T5595] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.203008][ T5596] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.246082][ T5604] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.348258][ T57] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.419753][ T5594] veth0_macvtap: entered promiscuous mode [ 92.440747][ T5594] veth1_macvtap: entered promiscuous mode [ 92.506247][ T158] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.517342][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.526272][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.533414][ T5594] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.563781][ T5604] veth0_vlan: entered promiscuous mode [ 92.584800][ T158] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.586257][ T5594] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.600251][ T158] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.646151][ T5604] veth1_vlan: entered promiscuous mode [ 92.687958][ T1158] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.699219][ T126] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.712590][ T1158] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.748372][ T5593] veth0_vlan: entered promiscuous mode [ 92.751936][ T30] audit: type=1400 audit(1786624075.518:155): avc: denied { mounton } for pid=5596 comm="syz-executor" path="/root/syzkaller.lt5qoi/syz-tmp" dev="sda1" ino=2042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 92.794315][ T126] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.808467][ T30] audit: type=1400 audit(1786624075.538:156): avc: denied { mount } for pid=5596 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 92.822881][ T126] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.859968][ T30] audit: type=1400 audit(1786624075.538:157): avc: denied { mounton } for pid=5596 comm="syz-executor" path="/root/syzkaller.lt5qoi/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 92.897742][ T30] audit: type=1400 audit(1786624075.538:158): avc: denied { mount } for pid=5596 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 92.925870][ T5593] veth1_vlan: entered promiscuous mode [ 92.932037][ T30] audit: type=1400 audit(1786624075.548:159): avc: denied { mounton } for pid=5596 comm="syz-executor" path="/root/syzkaller.lt5qoi/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 92.971780][ T1158] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.973541][ T30] audit: type=1400 audit(1786624075.548:160): avc: denied { mounton } for pid=5596 comm="syz-executor" path="/root/syzkaller.lt5qoi/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7957 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 93.026014][ T30] audit: type=1400 audit(1786624075.558:161): avc: denied { unmount } for pid=5596 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 93.064135][ T30] audit: type=1400 audit(1786624075.628:162): avc: denied { mounton } for pid=5596 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2780 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 93.098594][ T30] audit: type=1400 audit(1786624075.638:163): avc: denied { mount } for pid=5596 comm="syz-executor" name="/" dev="gadgetfs" ino=7995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 93.113005][ T5604] veth0_macvtap: entered promiscuous mode [ 93.152647][ T1158] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.186032][ T1158] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.191701][ T5595] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 93.207218][ T5604] veth1_macvtap: entered promiscuous mode [ 93.264771][ T5604] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.267596][ T4913] Bluetooth: hci4: command tx timeout [ 93.275489][ T5602] Bluetooth: hci3: command tx timeout [ 93.285433][ T5609] Bluetooth: hci1: command tx timeout [ 93.298219][ T5604] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.321319][ T5593] veth0_macvtap: entered promiscuous mode [ 93.345782][ T5609] Bluetooth: hci0: command tx timeout [ 93.352294][ T4913] Bluetooth: hci2: command tx timeout [ 93.358903][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.359178][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.419166][ T5593] veth1_macvtap: entered promiscuous mode [ 93.437513][ T158] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.461980][ T158] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.476053][ T158] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.592297][ T5593] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.609244][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.635200][ T158] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.641939][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.678531][ T5593] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.716197][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.798841][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.805716][ T24] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 93.810330][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.876827][ T1158] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.997778][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 94.044989][ T24] usb 4-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 94.259610][ T24] usb 4-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 94.459376][ T24] usb 4-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 94.574535][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.605891][ T24] usb 4-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 94.635371][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.665976][ T24] usb 4-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 94.710891][ T142] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.760521][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.786801][ T5805] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.818433][ T5805] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.838326][ T24] usb 4-1: Product: syz [ 94.851553][ T24] usb 4-1: Manufacturer: syz [ 94.865009][ T24] usb 4-1: SerialNumber: syz [ 94.905630][ T5805] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.983304][ C1] imon 4-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 95.082256][ T24] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/input/input5 [ 95.192227][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.227512][ T24] imon 4-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 95.244409][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.298246][ T24] (id 0x00) [ 95.417077][ T30] kauditd_printk_skb: 30 callbacks suppressed [ 95.417089][ T30] audit: type=1400 audit(1786624078.188:194): avc: denied { create } for pid=5791 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 95.449373][ T5816] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 95.467072][ T57] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.545155][ T5816] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 95.556048][ T57] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.571782][ T5820] loop5: detected capacity change from 0 to 7 [ 95.717005][ T5820] Dev loop5: unable to read RDB block 7 [ 95.724214][ T5820] loop5: AHDI p1 [ 95.729148][ T5820] loop5: partition table partially beyond EOD, truncated [ 95.799993][ T1158] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.033416][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.136673][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.419828][ T24] rc_core: IR keymap rc-imon-pad not found [ 96.425361][ T5823] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.266091][ T5609] Bluetooth: hci4: command 0x0405 tx timeout [ 97.402964][ T5816] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 97.505485][ T4913] Bluetooth: hci1: command 0x0c1a tx timeout [ 98.024743][ T5816] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 98.038902][ T24] Registered IR keymap rc-empty [ 98.156129][ T5816] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 98.246008][ T30] audit: type=1400 audit(1786624078.288:195): avc: denied { append } for pid=5791 comm="syz.3.4" name="loop5" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 98.276615][ T24] imon 4-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 98.292415][ T24] imon 4-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 98.305687][ T30] audit: type=1400 audit(1786624078.858:196): avc: denied { bind } for pid=5791 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 98.329740][ T30] audit: type=1400 audit(1786624078.868:197): avc: denied { setopt } for pid=5791 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 98.360125][ T30] audit: type=1800 audit(1786624078.928:198): pid=5810 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=set_data cause=unavailable-hash-algorithm comm="syz.1.2" name="/0//deleted" dev="devpts" ino=3 res=0 errno=0 [ 98.397386][ T5816] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 98.411954][ T24] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0 [ 98.495053][ T5816] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 98.522204][ T24] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0/input6 [ 98.573164][ T5816] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 98.640486][ T5816] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 98.675763][ T5816] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 98.684449][ T24] imon 4-1:155.0: iMON device (15c2:ffdc, intf0) on usb<4:2> initialized [ 98.738402][ T5816] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 98.774372][ T5816] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 98.826031][ T30] audit: type=1400 audit(1786624081.588:199): avc: denied { write } for pid=5828 comm="syz.2.8" name="demux0" dev="devtmpfs" ino=928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 98.867543][ T24] usb 4-1: USB disconnect, device number 2 [ 98.903498][ T30] audit: type=1400 audit(1786624081.598:200): avc: denied { open } for pid=5828 comm="syz.2.8" path="/dev/dvb/adapter0/demux0" dev="devtmpfs" ino=928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 98.960221][ T5816] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 98.982474][ T5816] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 99.023232][ T30] audit: type=1400 audit(1786624081.738:201): avc: denied { ioctl } for pid=5828 comm="syz.2.8" path="socket:[8572]" dev="sockfs" ino=8572 ioctlcmd=0x5872 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 99.083724][ T5816] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 99.147058][ T5837] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 99.180334][ T30] audit: type=1400 audit(1786624081.758:202): avc: denied { ioctl } for pid=5824 comm="syz.1.7" path="/dev/dvb/adapter0/demux0" dev="devtmpfs" ino=928 ioctlcmd=0x6f2c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 99.352040][ T30] audit: type=1400 audit(1786624082.088:203): avc: denied { read write } for pid=5824 comm="syz.1.7" name="rdma_cm" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 99.465310][ T5329] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 99.586299][ T5837] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 99.597880][ T5609] Bluetooth: hci1: command 0x0c1a tx timeout [ 99.646132][ T5329] usb 5-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 99.655400][ T5796] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 99.657506][ T5329] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 99.716555][ T5329] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 99.752292][ T5329] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 99.782799][ T5329] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 99.806518][ T5329] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.825802][ T5796] usb 1-1: Using ep0 maxpacket: 32 [ 99.863958][ T5796] usb 1-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 99.895930][ T5846] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 99.908500][ T5796] usb 1-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 99.939165][ T5796] usb 1-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 99.981932][ T5796] usb 1-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 100.026008][ T5796] usb 1-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 100.065400][ T5609] Bluetooth: hci2: command 0x0c1a tx timeout [ 100.083673][ T5796] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.109811][ T5796] usb 1-1: Product: syz [ 100.121895][ T5796] usb 1-1: Manufacturer: syz [ 100.138317][ T5796] usb 1-1: SerialNumber: syz [ 100.177567][ C1] imon 1-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 100.249075][ T5796] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/input/input7 [ 100.496613][ T5847] loop5: detected capacity change from 0 to 7 [ 100.540370][ T5847] Dev loop5: unable to read RDB block 7 [ 100.555751][ T5609] Bluetooth: hci0: command 0x0c1a tx timeout [ 100.581144][ T5847] loop5: AHDI p1 [ 100.587850][ T5847] loop5: partition table partially beyond EOD, truncated [ 100.749883][ T5609] Bluetooth: hci3: command 0x0c1a tx timeout [ 100.979297][ T5849] ======================================================= [ 100.979297][ T5849] WARNING: The mand mount option has been deprecated and [ 100.979297][ T5849] and is ignored by this kernel. Remove the mand [ 100.979297][ T5849] option from the mount to silence this warning. [ 100.979297][ T5849] ======================================================= [ 101.040041][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 101.040094][ T30] audit: type=1400 audit(1786624083.808:205): avc: denied { name_bind } for pid=5825 comm="syz.4.5" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 101.205354][ T5609] Bluetooth: hci4: command 0x0405 tx timeout [ 101.205762][ T5796] imon 1-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 101.396430][ T5732] kernel read not supported for file /vcs (pid: 5732 comm: kworker/1:6) [ 101.669322][ T5609] Bluetooth: hci1: command 0x0c1a tx timeout [ 102.145205][ T5609] Bluetooth: hci2: command 0x0c1a tx timeout [ 102.626513][ T5609] Bluetooth: hci0: command 0x0c1a tx timeout [ 102.785869][ T5609] Bluetooth: hci3: command 0x0c1a tx timeout [ 103.154604][ T5329] gud 5-1:1.0: Failed to add properties (error=-5) [ 103.277417][ T5609] Bluetooth: hci4: command 0x0405 tx timeout [ 103.507039][ T30] audit: type=1400 audit(1786624083.848:206): avc: denied { node_bind } for pid=5825 comm="syz.4.5" saddr=255.255.255.255 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 103.548247][ T5329] gud 5-1:1.0: probe with driver gud failed with error -5 [ 103.879351][ T5796] (id 0x00) [ 103.991314][ T5796] rc_core: IR keymap rc-imon-pad not found [ 104.001476][ T5796] Registered IR keymap rc-empty [ 104.014053][ T5796] imon 1-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 104.028175][ T5796] imon 1-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 104.042711][ T5696] usb 5-1: USB disconnect, device number 2 [ 104.225433][ T5609] Bluetooth: hci2: command 0x0c1a tx timeout [ 104.254748][ T5796] imon:send_packet: packet tx failed (-71) [ 104.317121][ T5796] imon 1-1:155.0: remote input dev register failed [ 104.348849][ T5796] imon 1-1:155.0: imon_init_intf0: rc device setup failed [ 104.454116][ T30] audit: type=1400 audit(1786624087.218:207): avc: denied { create } for pid=5856 comm="syz.4.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 104.501963][ T5857] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 104.529741][ T30] audit: type=1400 audit(1786624087.248:208): avc: denied { setopt } for pid=5856 comm="syz.4.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 104.576752][ T5857] block device autoloading is deprecated and will be removed. [ 104.649780][ T5796] imon 1-1:155.0: unable to initialize intf0, err 0 [ 104.678787][ T5796] imon:imon_probe: failed to initialize context! [ 104.711237][ T5796] imon 1-1:155.0: unable to register, err -19 [ 104.720331][ T5609] Bluetooth: hci0: command 0x0c1a tx timeout [ 104.756853][ T30] audit: type=1400 audit(1786624087.248:209): avc: denied { bind } for pid=5856 comm="syz.4.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 104.785294][ T30] audit: type=1400 audit(1786624087.248:210): avc: denied { name_bind } for pid=5856 comm="syz.4.11" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 104.810233][ T30] audit: type=1400 audit(1786624087.338:211): avc: denied { node_bind } for pid=5856 comm="syz.4.11" saddr=::ffff:0.0.0.0 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 104.813525][ T5796] usb 1-1: USB disconnect, device number 2 [ 104.835849][ T30] audit: type=1400 audit(1786624087.338:212): avc: denied { write } for pid=5856 comm="syz.4.11" laddr=::ffff:0.0.0.0 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 104.878948][ T5609] Bluetooth: hci3: command 0x0c1a tx timeout [ 104.885401][ T30] audit: type=1400 audit(1786624087.338:213): avc: denied { connect } for pid=5856 comm="syz.4.11" laddr=::ffff:0.0.0.0 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 104.910333][ T30] audit: type=1400 audit(1786624087.338:214): avc: denied { name_connect } for pid=5856 comm="syz.4.11" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 105.071862][ T5857] tipc: Failed to obtain node identity [ 105.348328][ T5609] Bluetooth: hci4: command 0x0405 tx timeout [ 105.617872][ T5857] tipc: Enabling of bearer rejected, failed to enable media [ 106.053956][ T30] audit: type=1400 audit(1786624088.688:215): avc: denied { create } for pid=5856 comm="syz.4.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 106.509919][ T30] audit: type=1400 audit(1786624089.208:216): avc: denied { mount } for pid=5871 comm="syz.0.14" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 106.763695][ T5878] 9pnet_virtio: no channels available for device syz [ 106.883087][ T30] audit: type=1400 audit(1786624089.558:217): avc: denied { map_create } for pid=5871 comm="syz.0.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 107.075843][ T30] audit: type=1400 audit(1786624089.568:218): avc: denied { map_read map_write } for pid=5871 comm="syz.0.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 107.262780][ T30] audit: type=1400 audit(1786624089.568:219): avc: denied { accept } for pid=5871 comm="syz.0.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 107.323363][ T30] audit: type=1400 audit(1786624089.578:220): avc: denied { write } for pid=5871 comm="syz.0.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 107.378412][ T30] audit: type=1400 audit(1786624089.578:221): avc: denied { read } for pid=5871 comm="syz.0.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 107.540031][ T30] audit: type=1400 audit(1786624089.588:222): avc: denied { create } for pid=5871 comm="syz.0.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 107.624065][ T30] audit: type=1400 audit(1786624090.388:223): avc: denied { unmount } for pid=5594 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 107.705381][ T5796] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 107.891465][ T5796] usb 4-1: Using ep0 maxpacket: 16 [ 107.909565][ T5796] usb 4-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 107.931274][ T5796] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 107.954904][ T5796] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.997440][ T5796] usb 4-1: Product: syz [ 108.036452][ T5796] usb 4-1: Manufacturer: syz [ 108.060805][ T5796] usb 4-1: SerialNumber: syz [ 108.096207][ T5796] usb 4-1: config 0 descriptor?? [ 108.143101][ T30] audit: type=1400 audit(1786624090.898:224): avc: denied { mmap_zero } for pid=5892 comm="syz.2.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 108.202220][ T5796] hub 4-1:0.0: bad descriptor, ignoring hub [ 108.219630][ T5796] hub 4-1:0.0: probe with driver hub failed with error -5 [ 108.311369][ T29] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 108.329567][ T5796] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 108.411493][ T5883] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.461377][ T5883] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.485172][ T29] usb 5-1: Using ep0 maxpacket: 32 [ 108.513097][ T29] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 108.567542][ T5883] syz.3.16 uses obsolete (PF_INET,SOCK_PACKET) [ 108.584579][ T29] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 108.750685][ T5883] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.765680][ T5883] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.307491][ T29] usb 5-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 109.341583][ T29] usb 5-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 109.388426][ T29] usb 5-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 109.410504][ T5796] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 109.456007][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.469813][ T29] usb 5-1: Product: syz [ 109.476080][ T29] usb 5-1: Manufacturer: syz [ 109.488818][ T29] usb 5-1: SerialNumber: syz [ 109.611627][ C1] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 109.646904][ T29] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/input/input9 [ 109.772691][ T5603] udevd[5603]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 109.859574][ T5903] warning: `syz.3.16' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 109.929308][ T5909] netlink: 'syz.2.22': attribute type 3 has an invalid length. [ 109.972605][ T5796] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 109.988116][ T5909] netlink: 3 bytes leftover after parsing attributes in process `syz.2.22'. [ 110.057248][ T5890] loop5: detected capacity change from 0 to 7 [ 110.097756][ T5890] Dev loop5: unable to read RDB block 7 [ 110.124892][ T5890] loop5: AHDI p1 [ 110.138711][ T5890] loop5: partition table partially beyond EOD, truncated [ 110.207913][ T5796] usb 2-1: unable to get BOS descriptor or descriptor too short [ 110.233711][ T29] imon:send_packet: packet tx failed (-71) [ 110.248192][ T5796] usb 2-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 110.300815][ T5796] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 110.313543][ T29] imon 5-1:155.0: panel buttons/knobs setup failed [ 110.325320][ T29] imon 5-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 110.336048][ T5796] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 110.350448][ T29] (id 0x00) [ 110.356472][ T5796] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.390040][ T5796] usb 2-1: Product: syz [ 110.412957][ T5796] usb 2-1: Manufacturer: syz [ 110.437485][ T5796] usb 2-1: SerialNumber: syz [ 110.521116][ T5796] usb 2-1: selecting invalid altsetting 1 [ 110.557205][ T29] rc_core: IR keymap rc-imon-pad not found [ 110.568860][ T5796] usb 2-1: unit 6 not found! [ 110.596835][ T29] Registered IR keymap rc-empty [ 110.614989][ T29] imon 5-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 110.642903][ T5696] usb 4-1: USB disconnect, device number 3 [ 110.645817][ T29] imon 5-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 110.666820][ T29] imon:send_packet: packet tx failed (-71) [ 110.726303][ T29] imon 5-1:155.0: remote input dev register failed [ 110.748446][ T29] imon 5-1:155.0: imon_init_intf0: rc device setup failed [ 110.927223][ T29] imon 5-1:155.0: unable to initialize intf0, err 0 [ 110.951353][ T29] imon:imon_probe: failed to initialize context! [ 110.970934][ T29] imon 5-1:155.0: unable to register, err -19 [ 111.031502][ T29] usb 5-1: USB disconnect, device number 3 [ 111.084998][ T5905] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 111.096364][ T5796] usb 2-1: 2:0: failed to get current value for ch 0 (-71) [ 111.271922][ T5796] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 111.319876][ T5796] usb 2-1: USB disconnect, device number 2 [ 111.365013][ T5603] udevd[5603]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 111.416326][ T29] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 111.489893][ T5914] [U]  [ 111.535258][ T5329] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 111.595227][ T29] usb 5-1: Using ep0 maxpacket: 32 [ 111.606614][ T29] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 111.642381][ T29] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 111.682648][ T29] usb 5-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 111.725431][ T5329] usb 4-1: Using ep0 maxpacket: 32 [ 111.741492][ T29] usb 5-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 111.807545][ T29] usb 5-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 111.809661][ T5329] usb 4-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 111.835909][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 111.835930][ T30] audit: type=1400 audit(1786624094.608:237): avc: denied { read } for pid=5930 comm="syz.1.28" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 111.908500][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.919344][ T29] usb 5-1: Product: syz [ 111.924780][ T29] usb 5-1: Manufacturer: syz [ 111.931763][ T29] usb 5-1: SerialNumber: syz [ 111.979362][ T30] audit: type=1400 audit(1786624094.608:238): avc: denied { open } for pid=5930 comm="syz.1.28" path="/dev/dri/renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 112.036243][ T5329] usb 4-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 112.077500][ C1] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 112.096102][ T29] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/input/input11 [ 112.122480][ T5936] Bluetooth: MGMT ver 1.23 [ 112.149301][ T30] audit: type=1400 audit(1786624094.658:239): avc: denied { ioctl } for pid=5930 comm="syz.1.28" path="/dev/dri/renderD128" dev="devtmpfs" ino=626 ioctlcmd=0x6415 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 112.206000][ T5329] usb 4-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 112.264569][ T30] audit: type=1400 audit(1786624094.668:240): avc: denied { ioctl } for pid=5930 comm="syz.1.28" path="/dev/ppp" dev="devtmpfs" ino=708 ioctlcmd=0x7434 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 112.348332][ T5937] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 112.352202][ T5329] usb 4-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 112.432554][ T5329] usb 4-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 112.491342][ T5329] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.567658][ T30] audit: type=1400 audit(1786624094.858:241): avc: denied { setopt } for pid=5935 comm="syz.1.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 112.590885][ T5939] loop5: detected capacity change from 0 to 7 [ 112.607547][ T5939] Dev loop5: unable to read RDB block 7 [ 112.614428][ T5939] loop5: AHDI p1 [ 112.618557][ T5939] loop5: partition table partially beyond EOD, truncated [ 112.817344][ T30] audit: type=1400 audit(1786624094.888:242): avc: denied { read write } for pid=5935 comm="syz.1.29" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 113.138533][ T30] audit: type=1400 audit(1786624094.888:243): avc: denied { open } for pid=5935 comm="syz.1.29" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 113.201786][ T5329] usb 4-1: Product: syz [ 113.691898][ T30] audit: type=1400 audit(1786624094.888:244): avc: denied { bind } for pid=5935 comm="syz.1.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 113.905320][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 114.137421][ T24] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 114.163595][ T30] audit: type=1400 audit(1786624094.888:245): avc: denied { write } for pid=5935 comm="syz.1.29" path="socket:[9397]" dev="sockfs" ino=9397 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 114.445578][ T5329] usb 4-1: Manufacturer: syz [ 114.465460][ T24] usb 3-1: device descriptor read/64, error -71 [ 114.478851][ T30] audit: type=1400 audit(1786624094.908:246): avc: denied { write } for pid=5935 comm="syz.1.29" lport=135 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 114.732746][ T5329] usb 4-1: SerialNumber: syz [ 114.789063][ T5329] usb 4-1: can't set config #155, error -71 [ 114.802722][ T5329] usb 4-1: USB disconnect, device number 4 [ 114.917828][ T24] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 114.962312][ T29] imon:send_packet: packet tx failed (-71) [ 115.005559][ T29] imon 5-1:155.0: panel buttons/knobs setup failed [ 115.031204][ T29] imon 5-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 115.057941][ T29] (id 0x00) [ 115.115296][ T24] usb 3-1: device descriptor read/64, error -71 [ 115.307356][ T24] usb usb3-port1: attempt power cycle [ 115.746443][ T29] rc_core: IR keymap rc-imon-pad not found [ 115.764667][ T29] Registered IR keymap rc-empty [ 115.775034][ T29] imon 5-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 115.891348][ T29] imon 5-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 115.907214][ T29] imon:send_packet: packet tx failed (-71) [ 115.987566][ T29] imon 5-1:155.0: remote input dev register failed [ 116.005329][ T29] imon 5-1:155.0: imon_init_intf0: rc device setup failed [ 116.105635][ T5960] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5960 comm=syz.0.34 [ 116.308498][ T5959] xt_l2tp: missing protocol rule (udp|l2tpip) [ 116.562345][ T29] imon 5-1:155.0: unable to initialize intf0, err 0 [ 116.574918][ T29] imon:imon_probe: failed to initialize context! [ 116.585843][ T24] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 116.616504][ T29] imon 5-1:155.0: unable to register, err -19 [ 116.767450][ T29] usb 5-1: USB disconnect, device number 4 [ 116.835390][ T24] usb 3-1: device not accepting address 4, error -71 [ 116.908720][ T5966] Zero length message leads to an empty skb [ 116.995308][ T5969] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=5969 comm=syz.0.39 [ 117.091004][ T5972] netlink: 16 bytes leftover after parsing attributes in process `syz.0.39'. [ 117.117286][ T29] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 117.154962][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 117.154975][ T30] audit: type=1400 audit(1786624099.918:264): avc: denied { setopt } for pid=5968 comm="syz.0.39" lport=59 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 117.305198][ T29] usb 5-1: Using ep0 maxpacket: 32 [ 117.632921][ T29] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 117.680334][ T29] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 117.706048][ T29] usb 5-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 117.757110][ T29] usb 5-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 117.792772][ T30] audit: type=1400 audit(1786624100.548:265): avc: denied { write } for pid=5981 comm="syz.3.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 117.910923][ T29] usb 5-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 118.122754][ T5988] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.41'. [ 118.259331][ T30] audit: type=1400 audit(1786624100.548:266): avc: denied { nlmsg_write } for pid=5981 comm="syz.3.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 118.711175][ T30] audit: type=1400 audit(1786624100.588:267): avc: denied { allowed } for pid=5981 comm="syz.3.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 118.955728][ T30] audit: type=1400 audit(1786624100.658:268): avc: denied { setopt } for pid=5981 comm="syz.3.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 118.999891][ T29] usb 5-1: string descriptor 0 read error: -71 [ 119.007729][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.024743][ T29] usb 5-1: can't set config #155, error -71 [ 119.040080][ T29] usb 5-1: USB disconnect, device number 5 [ 119.185444][ T5696] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 119.265338][ T24] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 119.358730][ T5696] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 119.379300][ T5696] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 119.405616][ T29] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 119.423676][ T5696] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 119.445719][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 119.452021][ T24] usb 1-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 119.463745][ T24] usb 1-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 119.478433][ T5696] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 119.502672][ T24] usb 1-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 119.528323][ T5696] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.561390][ T5696] usb 2-1: Product: syz [ 119.568802][ T5696] usb 2-1: Manufacturer: syz [ 119.575521][ T5696] usb 2-1: SerialNumber: syz [ 119.589818][ T24] usb 1-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 119.602748][ T5696] usb 2-1: config 0 descriptor?? [ 119.604236][ T29] usb 5-1: Using ep0 maxpacket: 32 [ 119.631931][ T29] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 119.633891][ T5997] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 119.656078][ T24] usb 1-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 119.684241][ T29] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 119.688982][ T5997] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 119.727353][ T29] usb 5-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 119.737907][ T5696] usb 2-1: ucan: probing device on interface #0 [ 119.754016][ T29] usb 5-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 119.779468][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.793214][ T24] usb 1-1: Product: syz [ 119.803415][ T24] usb 1-1: Manufacturer: syz [ 119.815018][ T29] usb 5-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 119.838561][ T24] usb 1-1: SerialNumber: syz [ 119.857575][ T30] audit: type=1400 audit(1786624102.628:269): avc: denied { read } for pid=6004 comm="syz.3.46" name="vbi4" dev="devtmpfs" ino=979 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 119.909195][ C1] imon 1-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 119.926299][ T24] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/input/input13 [ 119.938393][ T5696] usb 2-1: ucan: could not read protocol version, ret=0 [ 119.963929][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.968647][ T30] audit: type=1400 audit(1786624102.728:270): avc: denied { ioctl } for pid=6004 comm="syz.3.46" path="socket:[8881]" dev="sockfs" ino=8881 ioctlcmd=0x8915 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 119.972168][ T29] usb 5-1: Product: syz [ 120.007365][ T5696] usb 2-1: ucan: probe failed; try to update the device firmware [ 120.045578][ T29] usb 5-1: Manufacturer: syz [ 120.050870][ T29] usb 5-1: SerialNumber: syz [ 120.089878][ C1] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 120.103679][ T29] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/input/input15 [ 120.161003][ T5796] usb 2-1: USB disconnect, device number 3 [ 120.260414][ T6006] loop5: detected capacity change from 0 to 7 [ 120.273670][ T6006] Dev loop5: unable to read RDB block 7 [ 120.280389][ T6006] loop5: AHDI p1 [ 120.284490][ T6006] loop5: partition table partially beyond EOD, truncated [ 120.315378][ T29] imon 5-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 120.437722][ T29] (id 0x00) [ 121.575171][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 122.461210][ T24] imon:send_packet: packet tx failed (-71) [ 122.508333][ T24] imon 1-1:155.0: panel buttons/knobs setup failed [ 122.515901][ T24] imon 1-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 122.530229][ T24] (id 0x00) [ 122.576550][ T29] rc_core: IR keymap rc-imon-pad not found [ 122.590697][ T29] Registered IR keymap rc-empty [ 122.598037][ T29] imon 5-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 122.612915][ T29] imon 5-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 122.627694][ T24] rc_core: IR keymap rc-imon-pad not found [ 122.640467][ T24] Registered IR keymap rc-empty [ 122.654325][ T24] imon 1-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 122.673831][ T29] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/rc/rc0 [ 122.719082][ T24] imon 1-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 122.736984][ T30] audit: type=1400 audit(1786624105.488:271): avc: denied { write } for pid=6016 comm="syz.3.48" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 122.749591][ T6020] netlink: 12 bytes leftover after parsing attributes in process `syz.3.48'. [ 122.771279][ T29] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/rc/rc0/input16 [ 122.797270][ T6023] netlink: 12 bytes leftover after parsing attributes in process `syz.1.49'. [ 122.811900][ T24] imon:send_packet: packet tx failed (-71) [ 122.835323][ T24] imon 1-1:155.0: remote input dev register failed [ 122.842667][ T24] imon 1-1:155.0: imon_init_intf0: rc device setup failed [ 122.872215][ T30] audit: type=1400 audit(1786624105.498:272): avc: denied { nlmsg_read } for pid=6016 comm="syz.3.48" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 122.937071][ T30] audit: type=1400 audit(1786624105.518:274): avc: denied { write } for pid=6018 comm="syz.1.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 123.050498][ T30] audit: type=1400 audit(1786624105.508:273): avc: denied { create } for pid=6016 comm="syz.3.48" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 123.119087][ T30] audit: type=1400 audit(1786624105.688:275): avc: denied { prog_run } for pid=6016 comm="syz.3.48" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 123.142730][ T24] imon 1-1:155.0: unable to initialize intf0, err 0 [ 123.153399][ T29] imon 5-1:155.0: iMON device (15c2:ffdc, intf0) on usb<5:6> initialized [ 123.173277][ T24] imon:imon_probe: failed to initialize context! [ 123.192661][ T29] usb 5-1: USB disconnect, device number 6 [ 123.209438][ T24] imon 1-1:155.0: unable to register, err -19 [ 123.312939][ T24] usb 1-1: USB disconnect, device number 3 [ 124.025390][ T30] audit: type=1400 audit(1786624106.788:276): avc: denied { create } for pid=6047 comm="syz.2.55" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 124.102430][ T30] audit: type=1400 audit(1786624106.828:277): avc: denied { create } for pid=6047 comm="syz.2.55" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 124.164201][ T5329] IPVS: starting estimator thread 0... [ 124.197277][ T6050] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 124.214212][ T30] audit: type=1400 audit(1786624106.828:278): avc: denied { write } for pid=6047 comm="syz.2.55" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 124.305322][ T24] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 124.314173][ T6051] IPVS: using max 63 ests per chain, 151200 per kthread [ 124.482080][ T30] audit: type=1400 audit(1786624107.248:279): avc: denied { execute } for pid=6054 comm="syz.0.56" path="/10/file1" dev="tmpfs" ino=73 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 124.510578][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 124.518579][ T5796] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 124.535968][ T24] usb 3-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 124.584449][ T30] audit: type=1400 audit(1786624107.328:280): avc: denied { watch } for pid=6054 comm="syz.0.56" path="/10/file1" dev="tmpfs" ino=73 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 124.629266][ T24] usb 3-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 124.645274][ T24] usb 3-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 124.681438][ T24] usb 3-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 124.718176][ T24] usb 3-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 124.752106][ T5796] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 124.769957][ T5796] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 124.797369][ T5796] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 124.809848][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.820959][ T24] usb 3-1: Product: syz [ 124.827690][ T24] usb 3-1: Manufacturer: syz [ 124.833462][ T5796] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 124.843818][ T5796] usb 2-1: SerialNumber: syz [ 124.851196][ T24] usb 3-1: SerialNumber: syz [ 124.920939][ C1] imon 3-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 124.960403][ T24] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/input/input17 [ 125.091503][ T6048] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.172317][ T6057] loop5: detected capacity change from 0 to 7 [ 125.179502][ T6048] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.199638][ T6057] Dev loop5: unable to read RDB block 7 [ 125.206009][ T6057] loop5: AHDI p1 [ 125.211210][ T6057] loop5: partition table partially beyond EOD, truncated [ 126.899924][ T5796] usb 2-1: 0:2 : does not exist [ 127.197491][ T5796] usb 2-1: USB disconnect, device number 4 [ 127.241315][ T24] imon:send_packet: packet tx failed (-71) [ 127.275262][ T24] imon 3-1:155.0: panel buttons/knobs setup failed [ 127.308864][ T24] imon 3-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 127.357153][ T24] (id 0x00) [ 127.491910][ T5603] udevd[5603]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 127.675449][ T24] rc_core: IR keymap rc-imon-pad not found [ 127.689160][ T24] Registered IR keymap rc-empty [ 128.185272][ T24] imon 3-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 128.196170][ T24] imon 3-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 128.208726][ T24] imon:send_packet: packet tx failed (-71) [ 128.221683][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 128.221700][ T30] audit: type=1400 audit(1786624110.988:283): avc: denied { open } for pid=6069 comm="syz.1.61" path="/dev/ptyq6" dev="devtmpfs" ino=125 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 128.275215][ T5732] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 128.286213][ T24] imon 3-1:155.0: remote input dev register failed [ 128.306311][ T24] imon 3-1:155.0: imon_init_intf0: rc device setup failed [ 128.404938][ T6074] netlink: 12 bytes leftover after parsing attributes in process `syz.4.62'. [ 128.411141][ T30] audit: type=1400 audit(1786624111.028:284): avc: denied { ioctl } for pid=6069 comm="syz.1.61" path="/dev/ptyq6" dev="devtmpfs" ino=125 ioctlcmd=0x5423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 128.492146][ T30] audit: type=1400 audit(1786624111.058:285): avc: denied { read write } for pid=6069 comm="syz.1.61" name="nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 128.524010][ T30] audit: type=1400 audit(1786624111.058:286): avc: denied { open } for pid=6069 comm="syz.1.61" path="/dev/nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 128.558050][ T24] imon 3-1:155.0: unable to initialize intf0, err 0 [ 128.572400][ T24] imon:imon_probe: failed to initialize context! [ 128.582005][ T5732] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 128.595374][ T24] imon 3-1:155.0: unable to register, err -19 [ 128.605527][ T5732] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 128.631598][ T5732] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 128.662179][ T24] usb 3-1: USB disconnect, device number 6 [ 128.671187][ T5732] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 128.708319][ T5732] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.726258][ T5732] usb 1-1: Product: syz [ 128.762297][ T5732] usb 1-1: Manufacturer: syz [ 128.771622][ T5732] usb 1-1: SerialNumber: syz [ 128.784046][ T30] audit: type=1400 audit(1786624111.548:287): avc: denied { create } for pid=6080 comm="syz.3.64" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 128.836334][ T5732] usb 1-1: config 0 descriptor?? [ 128.843940][ T6067] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 128.874689][ T6067] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 128.890397][ T5732] usb 1-1: ucan: probing device on interface #0 [ 128.922892][ T30] audit: type=1400 audit(1786624111.688:288): avc: denied { read write } for pid=6069 comm="syz.1.61" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 128.985946][ T6071] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 128.986889][ T30] audit: type=1400 audit(1786624111.688:289): avc: denied { open } for pid=6069 comm="syz.1.61" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 129.037388][ T24] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 129.048741][ T30] audit: type=1400 audit(1786624111.738:290): avc: denied { map } for pid=6069 comm="syz.1.61" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=9595 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 129.081872][ T30] audit: type=1400 audit(1786624111.738:291): avc: denied { read write } for pid=6069 comm="syz.1.61" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=9595 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 129.118431][ T30] audit: type=1400 audit(1786624111.748:292): avc: denied { ioctl } for pid=6069 comm="syz.1.61" path="/dev/binderfs/binder0" dev="binder" ino=13 ioctlcmd=0x6208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 129.120934][ T5732] usb 1-1: ucan: could not read protocol version, ret=0 [ 129.190570][ T5732] usb 1-1: ucan: probe failed; try to update the device firmware [ 129.225480][ T5796] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 129.245183][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 129.254055][ T24] usb 3-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 129.279916][ T24] usb 3-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 129.304089][ T24] usb 3-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 129.335269][ T24] usb 3-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 129.337954][ T9] usb 1-1: USB disconnect, device number 4 [ 129.365234][ T24] usb 3-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 129.415655][ T5796] usb 4-1: Using ep0 maxpacket: 32 [ 129.423121][ T5796] usb 4-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 129.434616][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.446216][ T24] usb 3-1: Product: syz [ 129.451683][ T24] usb 3-1: Manufacturer: syz [ 129.459839][ T24] usb 3-1: SerialNumber: syz [ 129.466714][ T5796] usb 4-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 129.483695][ T5796] usb 4-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 129.524758][ C1] imon 3-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 129.535317][ T5796] usb 4-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 129.551267][ T24] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/input/input19 [ 129.579718][ T5796] usb 4-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 129.600409][ T5796] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.610043][ T5796] usb 4-1: Product: syz [ 129.616066][ T5796] usb 4-1: Manufacturer: syz [ 129.622180][ T5796] usb 4-1: SerialNumber: syz [ 129.647425][ C1] imon 4-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 129.666144][ T5796] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/input/input21 [ 129.735270][ T29] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 129.780794][ T24] imon 3-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 129.818832][ T24] (id 0x00) [ 130.008750][ T5796] imon 4-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 130.257547][ T29] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 130.819429][ T6098] loop5: detected capacity change from 0 to 7 [ 130.890499][ T6098] Dev loop5: unable to read RDB block 7 [ 131.074448][ T6098] loop5: AHDI p1 [ 131.127893][ T6098] loop5: partition table partially beyond EOD, truncated [ 131.645188][ T5796] (id 0x00) [ 131.652312][ T29] usb 5-1: config index 0 descriptor too short (expected 45, got 28) [ 131.675335][ T29] usb 5-1: config 1 descriptor has 1 excess byte, ignoring [ 131.693983][ T29] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 131.712224][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.729902][ T29] usb 5-1: Product: syz [ 131.735250][ T5796] rc_core: IR keymap rc-imon-pad not found [ 131.744092][ T5796] Registered IR keymap rc-empty [ 131.751838][ T5796] imon 4-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 131.769958][ T29] usb 5-1: Manufacturer: syz [ 131.776328][ T29] usb 5-1: SerialNumber: syz [ 131.782831][ T5796] imon 4-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 131.818973][ T29] rtl8150 5-1:1.0: couldn't find required endpoints [ 131.863423][ T5796] imon:send_packet: packet tx failed (-71) [ 131.882500][ T29] rtl8150 5-1:1.0: probe with driver rtl8150 failed with error -5 [ 131.905677][ T24] rc_core: IR keymap rc-imon-pad not found [ 131.915719][ T5796] imon 4-1:155.0: remote input dev register failed [ 131.934103][ T24] Registered IR keymap rc-empty [ 131.945533][ T24] imon 3-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 131.957965][ T5796] imon 4-1:155.0: imon_init_intf0: rc device setup failed [ 131.979030][ T24] imon 3-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 132.036910][ T24] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0 [ 132.048278][ T5796] imon 4-1:155.0: unable to initialize intf0, err 0 [ 132.059520][ T5796] imon:imon_probe: failed to initialize context! [ 132.073749][ T24] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0/input20 [ 132.092335][ T5796] imon 4-1:155.0: unable to register, err -19 [ 132.145755][ T984] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 132.156366][ T9] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 132.166493][ T5796] usb 4-1: USB disconnect, device number 5 [ 132.202579][ T24] imon 3-1:155.0: iMON device (15c2:ffdc, intf0) on usb<3:7> initialized [ 132.258196][ T5329] usb 5-1: USB disconnect, device number 7 [ 132.279076][ T24] usb 3-1: USB disconnect, device number 7 [ 132.307207][ T984] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 132.326764][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 132.342996][ T984] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 132.363160][ T984] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 132.369304][ T9] usb 1-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 132.394055][ T984] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 132.409176][ T984] usb 2-1: SerialNumber: syz [ 132.420385][ T9] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 132.484035][ T9] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 132.511266][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 132.526894][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.550885][ T9] usb 1-1: Product: syz [ 132.569481][ T9] usb 1-1: Manufacturer: syz [ 132.579902][ T9] usb 1-1: SerialNumber: syz [ 132.608319][ T9] usb 1-1: config 0 descriptor?? [ 132.703720][ T6103] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.717311][ T6103] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.774721][ T984] usb 2-1: 0:2 : does not exist [ 132.791957][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.804136][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.352897][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 133.352910][ T30] audit: type=1400 audit(1786624116.118:303): avc: denied { read write } for pid=6113 comm="syz.2.73" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 133.489428][ T30] audit: type=1400 audit(1786624116.118:304): avc: denied { open } for pid=6113 comm="syz.2.73" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 133.586345][ T984] usb 2-1: USB disconnect, device number 5 [ 133.693515][ T6106] udevd[6106]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 133.750217][ T9] imon:imon_init_intf0: usb_submit_urb failed for intf0 (-90) [ 133.760493][ T30] audit: type=1400 audit(1786624116.318:305): avc: denied { write } for pid=6116 comm="syz.1.75" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 133.809007][ T9] imon 1-1:0.0: unable to initialize intf0, err -90 [ 133.822054][ T9] imon:imon_probe: failed to initialize context! [ 133.835965][ T30] audit: type=1400 audit(1786624116.358:306): avc: denied { ioctl } for pid=6118 comm="syz.4.74" path="/dev/vhost-net" dev="devtmpfs" ino=1271 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 133.877101][ T9] imon 1-1:0.0: unable to register, err -19 [ 133.923113][ T9] usb 1-1: USB disconnect, device number 5 [ 133.937349][ T30] audit: type=1400 audit(1786624116.388:307): avc: denied { read } for pid=6116 comm="syz.1.75" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 133.997839][ T6127] FAULT_INJECTION: forcing a failure. [ 133.997839][ T6127] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 134.036846][ T30] audit: type=1400 audit(1786624116.418:308): avc: denied { name_connect } for pid=6116 comm="syz.1.75" dest=19999 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 134.065530][ T6127] CPU: 1 UID: 0 PID: 6127 Comm: syz.3.76 Not tainted syzkaller #0 PREEMPT(full) [ 134.065568][ T6127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 134.065584][ T6127] Call Trace: [ 134.065589][ T6127] [ 134.065596][ T6127] dump_stack_lvl+0x100/0x190 [ 134.065634][ T6127] should_fail_ex.cold+0x5/0xa [ 134.065656][ T6127] _copy_from_user+0x2e/0xd0 [ 134.065682][ T6127] copy_msghdr_from_user+0x9f/0x4c0 [ 134.065704][ T6127] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 134.065739][ T6127] ___sys_sendmsg+0x106/0x1e0 [ 134.065761][ T6127] ? __pfx____sys_sendmsg+0x10/0x10 [ 134.065779][ T6127] ? __lock_acquire+0x49f/0x1a40 [ 134.065805][ T6127] ? get_pid_task+0x106/0x250 [ 134.065850][ T6127] __sys_sendmsg+0x160/0x210 [ 134.065877][ T6127] ? __pfx___sys_sendmsg+0x10/0x10 [ 134.065915][ T6127] do_syscall_64+0x115/0x870 [ 134.065943][ T6127] ? clear_bhb_loop+0x70/0xc0 [ 134.065969][ T6127] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.065992][ T6127] RIP: 0033:0x7f43a579e0d9 [ 134.066016][ T6127] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 134.066040][ T6127] RSP: 002b:00007f43a668a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 134.066065][ T6127] RAX: ffffffffffffffda RBX: 00007f43a5a25fa0 RCX: 00007f43a579e0d9 [ 134.066079][ T6127] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 134.066092][ T6127] RBP: 00007f43a668a090 R08: 0000000000000000 R09: 0000000000000000 [ 134.066105][ T6127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 134.066117][ T6127] R13: 00007f43a5a26038 R14: 00007f43a5a25fa0 R15: 00007ffd83ab1768 [ 134.066146][ T6127] [ 134.069188][ T30] audit: type=1400 audit(1786624116.528:309): avc: denied { shutdown } for pid=6116 comm="syz.1.75" lport=47209 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 134.360178][ T30] audit: type=1400 audit(1786624116.568:310): avc: denied { unmount } for pid=5596 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 134.404365][ T30] audit: type=1400 audit(1786624116.588:311): avc: denied { bind } for pid=6116 comm="syz.1.75" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 134.548591][ T30] audit: type=1400 audit(1786624117.128:312): avc: denied { connect } for pid=6128 comm="syz.2.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 135.645206][ T9] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 135.825776][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 135.835213][ T5696] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 135.852843][ T9] usb 1-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 135.878373][ T9] usb 1-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 135.895642][ T9] usb 1-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 135.937969][ T9] usb 1-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 135.957675][ T6153] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 135.977420][ T9] usb 1-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 136.008461][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.027614][ T5696] usb 3-1: Using ep0 maxpacket: 32 [ 136.037599][ T9] usb 1-1: Product: syz [ 136.044690][ T5696] usb 3-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 136.057543][ T9] usb 1-1: Manufacturer: syz [ 136.073935][ T9] usb 1-1: SerialNumber: syz [ 136.082074][ T5696] usb 3-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 136.106884][ T5696] usb 3-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 136.140569][ T5696] usb 3-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 136.142781][ C0] imon 1-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 136.166905][ T9] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/input/input23 [ 136.183333][ T5696] usb 3-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 136.202998][ T5696] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.218787][ T5696] usb 3-1: Product: syz [ 136.224163][ T5696] usb 3-1: Manufacturer: syz [ 136.233930][ T5696] usb 3-1: SerialNumber: syz [ 136.257291][ C0] imon 3-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 136.316064][ T5696] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/input/input25 [ 136.405174][ T9] imon 1-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 137.002394][ T9] (id 0x00) [ 137.412338][ T6159] loop5: detected capacity change from 0 to 7 [ 137.936769][ T5609] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 137.983570][ T5609] Bluetooth: hci4: Injecting HCI hardware error event [ 138.028966][ T5609] Bluetooth: hci4: hardware error 0x00 [ 138.236021][ T6159] Dev loop5: unable to read RDB block 7 [ 138.245176][ T6159] loop5: AHDI p1 [ 138.249796][ T6159] loop5: partition table partially beyond EOD, truncated [ 139.925245][ T5696] imon 3-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 139.938067][ T5696] (id 0x00) [ 139.973863][ T30] audit: type=1400 audit(1786624122.738:313): avc: denied { getopt } for pid=6163 comm="syz.1.84" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 140.004407][ T9] rc_core: IR keymap rc-imon-pad not found [ 140.012278][ T9] Registered IR keymap rc-empty [ 140.020874][ T9] imon 1-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 140.038158][ T9] imon 1-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 140.052398][ T9] imon:send_packet: packet tx failed (-71) [ 140.086195][ T9] imon 1-1:155.0: remote input dev register failed [ 140.112931][ T9] imon 1-1:155.0: imon_init_intf0: rc device setup failed [ 140.143978][ T24] IPVS: starting estimator thread 0... [ 140.167091][ T5696] rc_core: IR keymap rc-imon-pad not found [ 140.182210][ T5696] Registered IR keymap rc-empty [ 140.197078][ T5696] imon 3-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 140.225745][ T5696] imon 3-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 140.255360][ T6168] IPVS: using max 60 ests per chain, 144000 per kthread [ 140.271393][ T5696] rc rc1: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc1 [ 140.287943][ T9] imon 1-1:155.0: unable to initialize intf0, err 0 [ 140.295328][ T5796] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 140.330577][ T9] imon:imon_probe: failed to initialize context! [ 140.342224][ T5696] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc1/input26 [ 140.365311][ T9] imon 1-1:155.0: unable to register, err -19 [ 140.391931][ T9] usb 1-1: USB disconnect, device number 6 [ 140.403236][ T5696] imon 3-1:155.0: iMON device (15c2:ffdc, intf0) on usb<3:8> initialized [ 140.469784][ T5732] usb 3-1: USB disconnect, device number 8 [ 140.529896][ T5796] usb 2-1: Using ep0 maxpacket: 16 [ 140.545302][ T5609] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 140.576325][ T5796] usb 2-1: unable to get BOS descriptor or descriptor too short [ 140.594435][ T5796] usb 2-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= 0.40 [ 140.616945][ T5796] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 140.628378][ T5796] usb 2-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 140.643522][ T5796] usb 2-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 140.659699][ T5796] usb 2-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 140.692251][ T5796] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.710450][ T5796] usb 2-1: Product: syz [ 140.720668][ T5796] usb 2-1: Manufacturer: syz [ 140.730880][ T5796] usb 2-1: SerialNumber: syz [ 140.745300][ T9] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 140.948328][ T30] audit: type=1400 audit(1786624123.718:314): avc: denied { map_create } for pid=6170 comm="syz.2.86" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 141.076294][ T5796] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 141.088469][ T5796] usb 2-1: MIDIStreaming interface descriptor not found [ 141.100539][ T9] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 141.640528][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 141.654019][ T30] audit: type=1400 audit(1786624123.718:315): avc: denied { map_read map_write } for pid=6170 comm="syz.2.86" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 141.678499][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 141.700362][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 141.714885][ T9] usb 1-1: SerialNumber: syz [ 141.768203][ T5796] usb 2-1: USB disconnect, device number 6 [ 141.979687][ T6167] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.015367][ T6167] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.019203][ T6179] netlink: 8 bytes leftover after parsing attributes in process `syz.1.88'. [ 142.230481][ T9] usb 1-1: 0:2 : does not exist [ 142.297475][ T30] audit: type=1400 audit(1786624125.058:316): avc: denied { create } for pid=6183 comm="syz.1.90" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 142.420022][ T9] usb 1-1: USB disconnect, device number 7 [ 142.428250][ T30] audit: type=1400 audit(1786624125.068:317): avc: denied { setopt } for pid=6183 comm="syz.1.90" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 142.486808][ T30] audit: type=1400 audit(1786624125.088:318): avc: denied { write } for pid=6183 comm="syz.1.90" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 142.556403][ T5603] udevd[5603]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 143.303454][ T6202] netlink: 12 bytes leftover after parsing attributes in process `syz.3.93'. [ 143.332858][ T6200] netlink: 12 bytes leftover after parsing attributes in process `syz.0.94'. [ 143.392365][ T6202] Driver unsupported XDP return value 0 on prog (id 7) dev N/A, expect packet loss! [ 143.515772][ T5796] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 143.685563][ T5796] usb 2-1: Using ep0 maxpacket: 32 [ 143.695729][ T5796] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 143.759509][ T5796] usb 2-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 143.781179][ T5796] usb 2-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 143.794594][ T5796] usb 2-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 143.834886][ T30] audit: type=1400 audit(1786624126.598:319): avc: denied { create } for pid=6209 comm="syz.3.97" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 143.839811][ T5796] usb 2-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 143.883538][ T5796] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.905444][ T5796] usb 2-1: Product: syz [ 143.911299][ T30] audit: type=1400 audit(1786624126.678:320): avc: denied { accept } for pid=6209 comm="syz.3.97" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 143.916212][ T5796] usb 2-1: Manufacturer: syz [ 143.947404][ T5796] usb 2-1: SerialNumber: syz [ 144.000658][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 144.043080][ T5796] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/input/input27 [ 144.044765][ T30] audit: type=1400 audit(1786624126.708:321): avc: denied { write } for pid=6209 comm="syz.3.97" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 144.211110][ T30] audit: type=1400 audit(1786624126.708:322): avc: denied { read } for pid=6209 comm="syz.3.97" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 144.295232][ T5796] imon 2-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 144.314769][ T5796] (id 0x00) [ 144.661402][ T6222] loop5: detected capacity change from 0 to 7 [ 144.694183][ T6222] Dev loop5: unable to read RDB block 7 [ 144.703468][ T6222] loop5: AHDI p1 [ 144.709148][ T6222] loop5: partition table partially beyond EOD, truncated [ 145.748045][ T5796] rc_core: IR keymap rc-imon-pad not found [ 145.794197][ T5796] Registered IR keymap rc-empty [ 145.815275][ T5796] imon 2-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 145.857905][ T5796] imon 2-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 145.940003][ T5796] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0 [ 146.042880][ T5796] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0/input28 [ 146.136488][ T5796] imon 2-1:155.0: iMON device (15c2:ffdc, intf0) on usb<2:7> initialized [ 146.240545][ T6231] No source specified [ 146.475807][ T5796] usb 2-1: USB disconnect, device number 7 [ 146.505206][ T5773] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 146.676590][ T5773] usb 4-1: Using ep0 maxpacket: 16 [ 146.699309][ T5773] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 146.722152][ T5773] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 12336, setting to 64 [ 146.739677][ T5773] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.750599][ T5773] usb 4-1: Product: syz [ 146.756267][ T5773] usb 4-1: Manufacturer: syz [ 146.764090][ T5773] usb 4-1: SerialNumber: syz [ 146.786090][ T5773] usb 4-1: config 0 descriptor?? [ 146.887758][ T5773] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 146.955018][ T5773] IPVS: starting estimator thread 0... [ 147.011663][ T1158] usb 4-1: Failed to submit usb control message: -71 [ 147.020319][ T5696] usb 4-1: USB disconnect, device number 6 [ 147.054289][ T1158] usb 4-1: unable to send the bmi data to the device: -71 [ 147.085364][ T1158] usb 4-1: unable to get target info from device [ 147.096565][ T6246] IPVS: using max 63 ests per chain, 151200 per kthread [ 147.112591][ T1158] usb 4-1: could not get target info (-71) [ 147.130250][ T1158] usb 4-1: could not probe fw (-71) [ 147.208540][ T6252] netlink: 12 bytes leftover after parsing attributes in process `syz.1.107'. [ 147.226214][ T5773] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 147.391733][ T5773] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 147.420782][ T5773] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 147.461878][ T5773] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 147.482249][ T5773] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 147.493420][ T5773] usb 3-1: SerialNumber: syz [ 147.996981][ T6244] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.032830][ T6244] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.137740][ T5773] usb 3-1: 0:2 : does not exist [ 148.426174][ T5773] usb 3-1: USB disconnect, device number 9 [ 148.965208][ T5796] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 149.160388][ T5796] usb 4-1: Using ep0 maxpacket: 32 [ 149.179271][ T5796] usb 4-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 149.210529][ T5796] usb 4-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 149.243601][ T5796] usb 4-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 149.292706][ T5796] usb 4-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 149.418099][ T5796] usb 4-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 149.448702][ T5796] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.459250][ T5796] usb 4-1: Product: syz [ 149.498542][ T5796] usb 4-1: Manufacturer: syz [ 149.622032][ T5796] usb 4-1: SerialNumber: syz [ 149.670896][ C1] imon 4-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 149.694235][ T5796] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/input/input29 [ 150.509757][ T6283] loop5: detected capacity change from 0 to 7 [ 150.522520][ T6283] Dev loop5: unable to read RDB block 7 [ 150.530295][ T6283] loop5: AHDI p1 [ 150.534461][ T6283] loop5: partition table partially beyond EOD, truncated [ 151.263618][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 151.263637][ T30] audit: type=1400 audit(1786624134.028:328): avc: denied { mounton } for pid=6281 comm="syz.1.115" path="/proc/100/task" dev="proc" ino=9877 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 151.333478][ T30] audit: type=1400 audit(1786624134.098:329): avc: denied { associate } for pid=6285 comm="syz.1.115" name="core" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 151.364533][ T6287] FAULT_INJECTION: forcing a failure. [ 151.364533][ T6287] name failslab, interval 1, probability 0, space 0, times 0 [ 151.425016][ T6287] CPU: 1 UID: 0 PID: 6287 Comm: syz.2.116 Not tainted syzkaller #0 PREEMPT(full) [ 151.425038][ T6287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 151.425045][ T6287] Call Trace: [ 151.425049][ T6287] [ 151.425054][ T6287] dump_stack_lvl+0x100/0x190 [ 151.425076][ T6287] should_fail_ex.cold+0x5/0xa [ 151.425092][ T6287] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 151.425120][ T6287] should_failslab+0xc2/0x120 [ 151.425146][ T6287] kmem_cache_alloc_noprof+0x91/0x6a0 [ 151.425172][ T6287] ? skb_clone+0x190/0x400 [ 151.425201][ T6287] skb_clone+0x190/0x400 [ 151.425228][ T6287] netlink_deliver_tap+0xaed/0xcc0 [ 151.425255][ T6287] netlink_unicast+0x62b/0x850 [ 151.425282][ T6287] ? __pfx_netlink_unicast+0x10/0x10 [ 151.425312][ T6287] ? __pfx_sock_has_perm+0x10/0x10 [ 151.425343][ T6287] netlink_sendmsg+0x8b0/0xda0 [ 151.425369][ T6287] ? __pfx_netlink_sendmsg+0x10/0x10 [ 151.425394][ T6287] ? selinux_socket_sendmsg+0x198/0x2f0 [ 151.425429][ T6287] ____sys_sendmsg+0xa4d/0xbe0 [ 151.425461][ T6287] ? __pfx_netlink_sendmsg+0x10/0x10 [ 151.425486][ T6287] ? __pfx_____sys_sendmsg+0x10/0x10 [ 151.425532][ T6287] ___sys_sendmsg+0x190/0x1e0 [ 151.425555][ T6287] ? __pfx____sys_sendmsg+0x10/0x10 [ 151.425573][ T6287] ? __lock_acquire+0x49f/0x1a40 [ 151.425598][ T6287] ? get_pid_task+0x106/0x250 [ 151.425648][ T6287] __sys_sendmsg+0x160/0x210 [ 151.425675][ T6287] ? __pfx___sys_sendmsg+0x10/0x10 [ 151.425718][ T6287] do_syscall_64+0x115/0x870 [ 151.425745][ T6287] ? clear_bhb_loop+0x70/0xc0 [ 151.425771][ T6287] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.425793][ T6287] RIP: 0033:0x7f641d79e0d9 [ 151.425810][ T6287] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 151.425829][ T6287] RSP: 002b:00007f641e6b1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 151.425849][ T6287] RAX: ffffffffffffffda RBX: 00007f641da25fa0 RCX: 00007f641d79e0d9 [ 151.425864][ T6287] RDX: 0000000004040080 RSI: 0000200000000000 RDI: 0000000000000003 [ 151.425878][ T6287] RBP: 00007f641e6b1090 R08: 0000000000000000 R09: 0000000000000000 [ 151.425890][ T6287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 151.425903][ T6287] R13: 00007f641da26038 R14: 00007f641da25fa0 R15: 00007ffcc583af68 [ 151.425930][ T6287] [ 151.981732][ T5796] imon:send_packet: packet tx failed (-71) [ 152.025197][ T5796] imon 4-1:155.0: panel buttons/knobs setup failed [ 152.039168][ T5796] imon 4-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 152.126516][ T5796] (id 0x00) [ 152.186324][ T5796] rc_core: IR keymap rc-imon-pad not found [ 152.192459][ T5796] Registered IR keymap rc-empty [ 152.202206][ T5796] imon 4-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 152.213571][ T5796] imon 4-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 152.225563][ T5796] imon:send_packet: packet tx failed (-71) [ 152.245599][ T5796] imon 4-1:155.0: remote input dev register failed [ 152.253769][ T5796] imon 4-1:155.0: imon_init_intf0: rc device setup failed [ 152.263594][ T9] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 152.291266][ T5796] imon 4-1:155.0: unable to initialize intf0, err 0 [ 152.319406][ T5796] imon:imon_probe: failed to initialize context! [ 152.336939][ T5796] imon 4-1:155.0: unable to register, err -19 [ 152.349072][ T30] audit: type=1400 audit(1786624135.118:330): avc: denied { getopt } for pid=6289 comm="syz.2.117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 152.371445][ T5796] usb 4-1: USB disconnect, device number 7 [ 152.465358][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 152.487620][ T9] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 152.532464][ T9] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 152.567129][ T9] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 152.612944][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 152.647709][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 152.682899][ T9] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 152.751186][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.911784][ T6296] netlink: 12 bytes leftover after parsing attributes in process `syz.3.119'. [ 152.995219][ T9] usb 2-1: usb_control_msg returned -32 [ 153.009929][ T9] usbtmc 2-1:16.0: can't read capabilities [ 153.409466][ T30] audit: type=1400 audit(1786624136.138:331): avc: denied { write } for pid=6281 comm="syz.1.115" name="usbtmc0" dev="devtmpfs" ino=2931 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 153.475758][ T5773] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 153.746715][ T30] audit: type=1400 audit(1786624136.158:332): avc: denied { read } for pid=6301 comm="syz.3.122" name="iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 153.802707][ T30] audit: type=1400 audit(1786624136.158:333): avc: denied { open } for pid=6301 comm="syz.3.122" path="/dev/iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 153.915470][ T5773] usb 1-1: Using ep0 maxpacket: 32 [ 153.931981][ T5773] usb 1-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 153.948014][ T30] audit: type=1400 audit(1786624136.388:334): avc: denied { read write } for pid=6299 comm="syz.2.121" name="sg0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 153.982792][ T5773] usb 1-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 154.002706][ T5773] usb 1-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 154.023679][ T30] audit: type=1400 audit(1786624136.388:335): avc: denied { ioctl open } for pid=6299 comm="syz.2.121" path="/dev/sg0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 154.065323][ T5773] usb 1-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 154.084989][ T5773] usb 1-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 154.114605][ T30] audit: type=1400 audit(1786624136.478:336): avc: denied { write } for pid=6299 comm="syz.2.121" name="v4l-subdev6" dev="devtmpfs" ino=947 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 154.151402][ T30] audit: type=1400 audit(1786624136.498:337): avc: denied { ioctl } for pid=6297 comm="syz.0.120" path="/dev/raw-gadget" dev="devtmpfs" ino=819 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 154.316313][ T5773] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.332571][ T5773] usb 1-1: Product: syz [ 154.340452][ T5773] usb 1-1: Manufacturer: syz [ 154.346956][ T5773] usb 1-1: SerialNumber: syz [ 154.959562][ C0] imon 1-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 154.997361][ T5717] usb 2-1: USB disconnect, device number 8 [ 155.445620][ T5773] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/input/input31 [ 157.970306][ T5773] imon 1-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 158.041197][ T5773] (id 0x00) [ 158.296366][ T5773] rc_core: IR keymap rc-imon-pad not found [ 158.325284][ T984] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 158.800179][ T5773] Registered IR keymap rc-empty [ 158.810154][ T5773] imon 1-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 158.823357][ T5773] imon 1-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 158.840656][ T5773] imon:send_packet: packet tx failed (-71) [ 158.866747][ T5773] imon 1-1:155.0: remote input dev register failed [ 158.878218][ T5773] imon 1-1:155.0: imon_init_intf0: rc device setup failed [ 158.905688][ T5773] imon 1-1:155.0: unable to initialize intf0, err 0 [ 158.925363][ T5773] imon:imon_probe: failed to initialize context! [ 158.933179][ T5773] imon 1-1:155.0: unable to register, err -19 [ 158.949759][ T5773] usb 1-1: USB disconnect, device number 8 [ 158.995607][ T984] usb 5-1: unable to get BOS descriptor or descriptor too short [ 159.028746][ T984] usb 5-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 159.089678][ T984] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 159.150584][ T984] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 159.286657][ T984] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 159.303119][ T984] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.314723][ T984] usb 5-1: Product: syz [ 159.319551][ T984] usb 5-1: Manufacturer: syz [ 159.336066][ T984] usb 5-1: SerialNumber: syz [ 160.042463][ T30] audit: type=1400 audit(1786624142.808:338): avc: denied { create } for pid=6343 comm="syz.2.132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 160.079796][ T6345] netlink: 12 bytes leftover after parsing attributes in process `syz.2.132'. [ 160.089823][ T984] usb 5-1: 2:1 : no or invalid class specific endpoint descriptor [ 160.091278][ T30] audit: type=1400 audit(1786624142.838:339): avc: denied { write } for pid=6343 comm="syz.2.132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 160.128701][ T984] usb 5-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 160.151965][ T984] usb 5-1: found format II with max.bitrate = 4, frame size=7372 [ 160.184893][ T30] audit: type=1400 audit(1786624142.948:340): avc: denied { allowed } for pid=6343 comm="syz.2.132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 160.481245][ T984] usb 5-1: parse_audio_format_rates_v2v3(): unable to retrieve sample rate range (clock 0) [ 160.582925][ T984] usb 5-1: USB disconnect, device number 8 [ 160.668478][ T5603] udevd[5603]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 161.597682][ T9] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 161.765199][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 161.771739][ T9] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 161.783706][ T9] usb 2-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 161.795275][ T9] usb 2-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 161.807689][ T9] usb 2-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 161.821886][ T9] usb 2-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 161.844427][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.853562][ T9] usb 2-1: Product: syz [ 161.858370][ T9] usb 2-1: Manufacturer: syz [ 161.863106][ T9] usb 2-1: SerialNumber: syz [ 161.885523][ C0] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 161.900623][ T9] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/input/input33 [ 162.065435][ T984] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 162.105224][ T9] imon 2-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 162.115344][ T9] (id 0x00) [ 162.273341][ T9] rc_core: IR keymap rc-imon-pad not found [ 162.356512][ T9] Registered IR keymap rc-empty [ 162.371160][ T6359] loop5: detected capacity change from 0 to 7 [ 162.379940][ T6359] Dev loop5: unable to read RDB block 7 [ 162.386450][ T6359] loop5: AHDI p1 [ 162.393039][ T6359] loop5: partition table partially beyond EOD, truncated [ 162.420469][ T9] imon 2-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 162.452079][ T984] usb 5-1: Using ep0 maxpacket: 32 [ 162.452080][ T9] imon 2-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 162.473146][ T984] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 162.489510][ T984] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 162.508576][ T984] usb 5-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 162.517186][ T9] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0 [ 162.547802][ T984] usb 5-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 162.574623][ T9] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0/input34 [ 162.585194][ T984] usb 5-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 162.594625][ T9] imon 2-1:155.0: iMON device (15c2:ffdc, intf0) on usb<2:9> initialized [ 162.619861][ T984] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.630437][ T984] usb 5-1: Product: syz [ 162.645192][ T30] audit: type=1400 audit(1786624145.408:341): avc: denied { getopt } for pid=6368 comm="syz.3.142" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 162.646142][ T984] usb 5-1: Manufacturer: syz [ 162.688533][ T5717] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 162.762503][ T984] usb 5-1: SerialNumber: syz [ 162.833168][ C1] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 162.859284][ T984] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/input/input35 [ 162.885633][ T5717] usb 3-1: Using ep0 maxpacket: 32 [ 162.927826][ T5717] usb 3-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 162.992592][ T5796] usb 2-1: USB disconnect, device number 9 [ 163.011267][ T5717] usb 3-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 163.028269][ T30] audit: type=1400 audit(1786624145.778:342): avc: denied { write } for pid=6372 comm="syz.3.144" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 163.064060][ T5717] usb 3-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 163.065496][ T984] imon 5-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 163.080344][ T5717] usb 3-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 163.091121][ T984] (id 0x00) [ 163.099776][ T30] audit: type=1400 audit(1786624145.778:343): avc: denied { open } for pid=6372 comm="syz.3.144" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 163.099834][ T30] audit: type=1400 audit(1786624145.778:344): avc: denied { create } for pid=6372 comm="syz.3.144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 163.104282][ T30] audit: type=1400 audit(1786624145.878:345): avc: denied { setopt } for pid=6372 comm="syz.3.144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 163.139426][ T24] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 163.170880][ T5717] usb 3-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 163.223218][ T30] audit: type=1400 audit(1786624145.968:346): avc: denied { ioctl } for pid=6372 comm="syz.3.144" path="socket:[10017]" dev="sockfs" ino=10017 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 163.269619][ T5717] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.280591][ T5717] usb 3-1: Product: syz [ 163.341569][ T6378] loop5: detected capacity change from 0 to 7 [ 163.368941][ T6378] Dev loop5: unable to read RDB block 7 [ 163.380224][ T6378] loop5: AHDI p1 [ 163.393416][ T6378] loop5: partition table partially beyond EOD, truncated [ 163.429054][ T24] usb 1-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 163.455585][ T5732] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 163.498746][ T24] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 163.697977][ T5732] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 163.734742][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.781592][ T6379] imon:display_open: could not find interface for minor 0 [ 163.813355][ T5732] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 163.974988][ T5732] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 164.242022][ T5732] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 164.405451][ T5717] usb 3-1: Manufacturer: syz [ 164.423295][ T5732] usb 4-1: SerialNumber: syz [ 164.820145][ T5717] usb 3-1: SerialNumber: syz [ 164.835705][ T984] rc_core: IR keymap rc-imon-pad not found [ 164.843089][ C0] imon 3-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 164.850836][ T24] qmi_wwan 1-1:1.0: cdc-wdm0: USB WDM device [ 164.854436][ T5717] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/input/input37 [ 164.872913][ T984] Registered IR keymap rc-empty [ 164.889523][ T30] audit: type=1400 audit(1786624147.658:347): avc: denied { name_bind } for pid=6380 comm="syz.1.145" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 164.952355][ T984] imon 5-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 165.071502][ T984] imon 5-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 165.119544][ T984] imon:send_packet: packet tx failed (-71) [ 165.172852][ T984] imon 5-1:155.0: remote input dev register failed [ 165.205192][ T5717] imon 3-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 165.396152][ C1] qmi_wwan 1-1:1.0: nonzero urb status received: -71 [ 165.404293][ C1] qmi_wwan 1-1:1.0: wdm_int_callback - 0 bytes [ 165.411768][ C1] qmi_wwan 1-1:1.0: nonzero urb status received: -71 [ 165.418742][ C1] qmi_wwan 1-1:1.0: wdm_int_callback - 0 bytes [ 165.429697][ C1] qmi_wwan 1-1:1.0: nonzero urb status received: -71 [ 165.436800][ C1] qmi_wwan 1-1:1.0: wdm_int_callback - 0 bytes [ 165.443332][ C1] qmi_wwan 1-1:1.0: nonzero urb status received: -71 [ 165.450045][ C1] qmi_wwan 1-1:1.0: wdm_int_callback - 0 bytes [ 165.459711][ C1] qmi_wwan 1-1:1.0: nonzero urb status received: -71 [ 165.466447][ C1] qmi_wwan 1-1:1.0: wdm_int_callback - 0 bytes [ 165.473807][ C1] qmi_wwan 1-1:1.0: nonzero urb status received: -71 [ 165.483333][ C1] qmi_wwan 1-1:1.0: wdm_int_callback - 0 bytes [ 165.491467][ C1] qmi_wwan 1-1:1.0: nonzero urb status received: -71 [ 165.502399][ C1] qmi_wwan 1-1:1.0: wdm_int_callback - 0 bytes [ 165.515356][ C1] qmi_wwan 1-1:1.0: nonzero urb status received: -71 [ 165.525469][ C1] qmi_wwan 1-1:1.0: wdm_int_callback - 0 bytes [ 165.535435][ C1] qmi_wwan 1-1:1.0: nonzero urb status received: -71 [ 165.544003][ C1] qmi_wwan 1-1:1.0: wdm_int_callback - 0 bytes [ 165.552084][ C1] qmi_wwan 1-1:1.0: nonzero urb status received: -71 [ 165.559144][ C1] qmi_wwan 1-1:1.0: wdm_int_callback - 0 bytes [ 165.634218][ T984] imon 5-1:155.0: imon_init_intf0: rc device setup failed [ 165.646250][ T30] audit: type=1400 audit(1786624148.158:348): avc: denied { read write } for pid=6365 comm="syz.2.140" name="cdc-wdm0" dev="devtmpfs" ino=2966 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 166.087885][ T5717] (id 0x00) [ 166.273752][ T5732] usb 4-1: invalid UAC_HEADER (v1) [ 166.682327][ T30] audit: type=1400 audit(1786624148.158:349): avc: denied { open } for pid=6365 comm="syz.2.140" path="/dev/cdc-wdm0" dev="devtmpfs" ino=2966 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 167.675575][ T24] wwan wwan0: port wwan0qmi0 attached [ 167.790920][ T984] imon 5-1:155.0: unable to initialize intf0, err 0 [ 167.832724][ T30] audit: type=1400 audit(1786624150.598:350): avc: denied { read } for pid=6380 comm="syz.1.145" name="usbmon0" dev="devtmpfs" ino=715 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 167.897167][ T984] imon:imon_probe: failed to initialize context! [ 168.088169][ T984] imon 5-1:155.0: unable to register, err -19 [ 168.100511][ T24] qmi_wwan 1-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.0-1, WWAN/QMI device, b6:5a:a6:2b:4c:56 [ 168.534641][ T30] audit: type=1400 audit(1786624150.598:351): avc: denied { open } for pid=6380 comm="syz.1.145" path="/dev/usbmon0" dev="devtmpfs" ino=715 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 168.576651][ C1] qmi_wwan 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 168.586870][ T24] usb 1-1: USB disconnect, device number 9 [ 168.621316][ T984] usb 5-1: USB disconnect, device number 9 [ 168.675585][ T5717] rc_core: IR keymap rc-imon-pad not found [ 168.706707][ T5717] Registered IR keymap rc-empty [ 168.728448][ T5732] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 168.740878][ T5717] imon 3-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 168.741493][ T24] qmi_wwan 1-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.0-1, WWAN/QMI device [ 168.836095][ T5717] imon 3-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 168.888979][ T5732] usb 4-1: USB disconnect, device number 8 [ 169.282864][ T5717] imon:send_packet: packet tx failed (-71) [ 169.325655][ T5717] imon 3-1:155.0: remote input dev register failed [ 169.350136][ T5717] imon 3-1:155.0: imon_init_intf0: rc device setup failed [ 169.431650][ T5717] imon 3-1:155.0: unable to initialize intf0, err 0 [ 169.478171][ T5717] imon:imon_probe: failed to initialize context! [ 169.519017][ T5717] imon 3-1:155.0: unable to register, err -19 [ 169.520463][ T6169] udevd[6169]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 169.571614][ T5717] usb 3-1: USB disconnect, device number 10 [ 170.825335][ T5717] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 170.983925][ T5717] usb 3-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00 [ 171.003070][ T5717] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 171.016910][ T5717] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 171.028268][ T5717] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 171.039475][ T5717] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 171.048855][ T5732] IPVS: starting estimator thread 0... [ 171.054633][ T5717] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 171.069624][ T5717] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 64 [ 171.085039][ T5717] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 64 [ 171.106341][ T5717] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 64 [ 171.122629][ T5717] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 171.155532][ T6419] IPVS: using max 36 ests per chain, 86400 per kthread [ 171.156027][ T5717] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 171.178715][ T5717] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 171.193467][ T5717] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 64 [ 171.205229][ T5717] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 64 [ 171.215792][ T5717] usb 3-1: config 1 interface 0 altsetting 0 has 12 endpoint descriptors, different from the interface descriptor's value: 14 [ 171.232248][ T5717] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.254167][ T5717] usb 3-1: Product: syz [ 171.259918][ T5717] usb 3-1: Manufacturer: syz [ 171.265646][ T5717] usb 3-1: SerialNumber: syz [ 171.279509][ T6416] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 171.287995][ T6416] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 171.296274][ T6416] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 171.304008][ T6416] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 171.311974][ T6416] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 171.320641][ T6416] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 171.329177][ T6416] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 171.338109][ T6416] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 171.346256][ T6416] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 171.365517][ T6416] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 171.373137][ T6416] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 171.383266][ T6416] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 171.392002][ T9] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 171.405796][ T5717] keyspan 3-1:1.0: Keyspan 2 port adapter converter detected [ 171.428462][ T5717] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 7 [ 171.589631][ T9] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 171.634149][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 171.667122][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 171.679473][ T5717] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 171.691224][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 171.704071][ T30] audit: type=1400 audit(1786624154.468:352): avc: denied { create } for pid=6415 comm="syz.2.151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 171.704967][ T5717] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 6 [ 171.744516][ T9] usb 5-1: SerialNumber: syz [ 171.833795][ T5717] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 171.837996][ T30] audit: type=1400 audit(1786624154.568:353): avc: denied { sys_admin } for pid=6415 comm="syz.2.151" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 171.855580][ T6423] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 171.878874][ T30] audit: type=1400 audit(1786624154.608:354): avc: denied { remount } for pid=6415 comm="syz.2.151" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 172.513120][ T6422] capability: warning: `syz.2.151' uses deprecated v2 capabilities in a way that may be insecure [ 172.530643][ T30] audit: type=1400 audit(1786624155.278:355): avc: denied { mount } for pid=6415 comm="syz.2.151" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 173.445488][ T6416] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.449119][ T9] usb 5-1: 0:2 : does not exist [ 173.479164][ T24] wwan wwan0: port wwan0qmi0 disconnected [ 173.557750][ T9] usb 5-1: USB disconnect, device number 10 [ 173.751138][ T30] audit: type=1400 audit(1786624156.518:356): avc: denied { write } for pid=6435 comm="syz.1.157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 173.751381][ T6436] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 173.791841][ T6436] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 173.800752][ T6434] netlink: 12 bytes leftover after parsing attributes in process `syz.0.156'. [ 173.829759][ T5603] udevd[5603]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 173.876002][ T5773] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 173.970223][ T6436] netlink: 8 bytes leftover after parsing attributes in process `syz.1.157'. [ 174.035250][ T5773] usb 4-1: Using ep0 maxpacket: 32 [ 174.043545][ T5773] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 174.065924][ T5773] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 174.078286][ T5773] usb 4-1: config 0 has no interface number 0 [ 174.104888][ T5773] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.125364][ T5773] usb 4-1: Product: syz [ 174.129969][ T5773] usb 4-1: Manufacturer: syz [ 174.135066][ T5773] usb 4-1: SerialNumber: syz [ 174.166997][ T5773] usb 4-1: config 0 descriptor?? [ 174.186423][ T5773] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 174.281739][ T984] usb 3-1: USB disconnect, device number 11 [ 174.371210][ T984] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 174.390961][ T984] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 174.405061][ T984] keyspan 3-1:1.0: device disconnected [ 174.439396][ T5773] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 174.454450][ T5773] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 174.649289][ T6431] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.663648][ T6431] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.675277][ T30] audit: type=1400 audit(1786624157.448:357): avc: denied { map } for pid=6430 comm="syz.3.155" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 174.724787][ T5717] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 174.745736][ T9] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 174.756351][ T5696] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 174.909176][ T6431] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 174.927908][ T6431] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.943864][ T6431] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.986791][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 174.990402][ T984] usb 4-1: USB disconnect, device number 9 [ 175.016300][ T984] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 175.033100][ T984] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 175.050100][ T984] quatech2 4-1:0.51: device disconnected [ 175.065256][ T5717] usb 2-1: Using ep0 maxpacket: 32 [ 175.072734][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 175.085499][ T5696] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 175.098140][ T5717] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 175.112347][ T5696] usb 5-1: config index 0 descriptor too short (expected 1682, got 146) [ 175.123617][ T5696] usb 5-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 175.138886][ T5696] usb 5-1: config 6 has 0 interfaces, different from the descriptor's value: 5 [ 175.156053][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 175.167723][ T5717] usb 2-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 175.182478][ T9] usb 1-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 175.193344][ T5696] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 175.204593][ T5717] usb 2-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 175.219226][ T5696] usb 5-1: SerialNumber: syz [ 175.225064][ T5717] usb 2-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 175.245513][ T5717] usb 2-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 175.263567][ T9] usb 1-1: config 7 has an invalid interface number: 187 but max is 0 [ 175.274712][ T9] usb 1-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 175.288976][ T9] usb 1-1: config 7 has no interface number 0 [ 175.299937][ T9] usb 1-1: config 7 interface 187 altsetting 6 endpoint 0x7 has invalid wMaxPacketSize 0 [ 175.313458][ T9] usb 1-1: config 7 interface 187 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 175.330775][ T9] usb 1-1: config 7 interface 187 has no altsetting 0 [ 175.343640][ T5717] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.355197][ T5717] usb 2-1: Product: syz [ 175.363426][ T5717] usb 2-1: Manufacturer: syz [ 175.369565][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.433580][ T5717] usb 2-1: SerialNumber: syz [ 175.438581][ T9] usb 1-1: Product: syz [ 175.443164][ T9] usb 1-1: Manufacturer: syz [ 175.451177][ T9] usb 1-1: SerialNumber: syz [ 175.470118][ C0] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 175.507864][ T984] usb 5-1: USB disconnect, device number 11 [ 175.513116][ T5717] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/input/input39 [ 175.564648][ T9] usb 1-1: Cannot retrieve CPort count: -71 [ 175.584612][ T30] audit: type=1400 audit(1786624158.348:358): avc: denied { create } for pid=6451 comm="syz.2.162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 175.605338][ T9] usb 1-1: Cannot retrieve CPort count: -71 [ 175.610539][ T30] audit: type=1400 audit(1786624158.348:359): avc: denied { write } for pid=6451 comm="syz.2.162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 175.661502][ T6452] SELinux: policydb version 133 does not match my version range 15-35 [ 175.675487][ T6452] SELinux: failed to load policy [ 175.685003][ T30] audit: type=1400 audit(1786624158.428:360): avc: denied { load_policy } for pid=6451 comm="syz.2.162" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 175.715771][ T6443] ================================================================== [ 175.728945][ T6443] BUG: KASAN: slab-use-after-free in string+0x471/0x4d0 [ 175.737559][ T6443] Read of size 1 at addr ffff88802bec4500 by task syz.0.160/6443 [ 175.750076][ T6443] [ 175.753040][ T6443] CPU: 1 UID: 0 PID: 6443 Comm: syz.0.160 Not tainted syzkaller #0 PREEMPT(full) [ 175.753063][ T6443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 175.753072][ T6443] Call Trace: [ 175.753078][ T6443] [ 175.753085][ T6443] dump_stack_lvl+0x100/0x190 [ 175.753118][ T6443] print_report+0x13d/0x4b0 [ 175.753151][ T6443] ? __virt_addr_valid+0x239/0x430 [ 175.753184][ T6443] ? string+0x471/0x4d0 [ 175.753205][ T6443] kasan_report+0xdf/0x1c0 [ 175.753222][ T6443] ? string+0x471/0x4d0 [ 175.753236][ T6443] string+0x471/0x4d0 [ 175.753249][ T6443] ? __pfx_string+0x10/0x10 [ 175.753270][ T6443] vsnprintf+0x422/0x1300 [ 175.753304][ T6443] ? __pfx_vsnprintf+0x10/0x10 [ 175.753331][ T6443] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 175.753352][ T6443] ? is_bpf_text_address+0x94/0x1a0 [ 175.753369][ T6443] ? kernel_text_address+0x8d/0x100 [ 175.753384][ T6443] snprintf+0xc7/0x100 [ 175.753398][ T6443] ? __pfx_snprintf+0x10/0x10 [ 175.753424][ T6443] ? stack_trace_save+0x8e/0xc0 [ 175.753469][ T6443] dev_vprintk_emit+0x375/0x3e0 [ 175.753497][ T6443] ? __pfx_dev_vprintk_emit+0x10/0x10 [ 175.753529][ T6443] ? __x64_sys_ioctl+0x18e/0x210 [ 175.753558][ T6443] ? do_syscall_64+0x115/0x870 [ 175.753586][ T6443] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.753610][ T6443] dev_printk_emit+0xd2/0x10d [ 175.753635][ T6443] ? __pfx_dev_printk_emit+0x10/0x10 [ 175.753668][ T6443] __dev_printk+0xcb/0x100 [ 175.753694][ T6443] _dev_err+0xef/0x127 [ 175.753721][ T6443] ? __pfx__dev_err+0x10/0x10 [ 175.753750][ T6443] ? dummy_queue+0x3ca/0xb00 [ 175.753784][ T6443] ? find_held_lock+0x2b/0x80 [ 175.753805][ T6443] ? raw_process_ep0_io+0x314/0x9c0 [ 175.753844][ T6443] raw_process_ep0_io.cold+0x65/0x7f [ 175.753880][ T6443] raw_ioctl+0x1369/0x2b80 [ 175.753918][ T6443] ? __pfx_raw_ioctl+0x10/0x10 [ 175.753950][ T6443] ? selinux_file_ioctl+0xb6/0x290 [ 175.753987][ T6443] ? __pfx_raw_ioctl+0x10/0x10 [ 175.754021][ T6443] __x64_sys_ioctl+0x18e/0x210 [ 175.754056][ T6443] do_syscall_64+0x115/0x870 [ 175.754086][ T6443] ? clear_bhb_loop+0x70/0xc0 [ 175.754113][ T6443] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.754137][ T6443] RIP: 0033:0x7f6c4259dd6b [ 175.754157][ T6443] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 175.754181][ T6443] RSP: 002b:00007f6c407f3f50 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 175.754206][ T6443] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f6c4259dd6b [ 175.754223][ T6443] RDX: 00007f6c407f3fd0 RSI: 0000000040085503 RDI: 0000000000000004 [ 175.754239][ T6443] RBP: 00007f6c407f3fd0 R08: 0000000000000002 R09: 0000000000000000 [ 175.754254][ T6443] R10: 0000000000000004 R11: 0000000000000246 R12: 00007f6c407f3fd8 [ 175.754269][ T6443] R13: 0000000000000000 R14: 00007f6c42825fa0 R15: 00007ffe30a7d568 [ 175.754292][ T6443] [ 175.754300][ T6443] [ 176.075153][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 176.083675][ T6443] Allocated by task 1: [ 176.127260][ T6443] kasan_save_stack+0x30/0x50 [ 176.134464][ T6443] kasan_save_track+0x14/0x30 [ 176.142363][ T6443] __kasan_kmalloc+0xaa/0xb0 [ 176.147480][ T6443] __kmalloc_node_track_caller_noprof+0x331/0x830 [ 176.155161][ T6443] kvasprintf+0xbc/0x150 [ 176.161510][ T6443] kvasprintf_const+0x66/0x1a0 [ 176.167007][ T6443] kobject_set_name_vargs+0x5a/0x140 [ 176.173020][ T6443] dev_set_name+0xc7/0x100 [ 176.179298][ T6443] usb_add_gadget+0x520/0x920 [ 176.186598][ T6443] usb_add_gadget_udc+0x26/0x70 [ 176.192672][ T6443] dummy_udc_probe+0x69e/0x960 [ 176.200320][ T6443] platform_probe+0x106/0x1d0 [ 176.206901][ T6443] really_probe+0x241/0xa60 [ 176.212646][ T6443] __driver_probe_device+0x20e/0x450 [ 176.218339][ T6443] driver_probe_device+0x4a/0x140 [ 176.224458][ T6443] __device_attach_driver+0x1df/0x320 [ 176.232041][ T6443] bus_for_each_drv+0x159/0x1e0 [ 176.239069][ T6443] __device_attach+0x1e4/0x4d0 [ 176.245956][ T6443] device_initial_probe+0xaf/0xd0 [ 176.252033][ T6443] bus_probe_device+0x64/0x160 [ 176.259741][ T6443] device_add+0x121d/0x1970 [ 176.267044][ T6443] platform_device_add+0x35a/0x800 [ 176.273759][ T6443] dummy_hcd_init+0x803/0xc00 [ 176.278894][ T6443] do_one_initcall+0x11d/0x700 [ 176.284471][ T6443] kernel_init_freeable+0x6ea/0x7b0 [ 176.289882][ T6443] kernel_init+0x1f/0x1e0 [ 176.294346][ T6443] ret_from_fork+0x72b/0xd50 [ 176.299463][ T6443] ret_from_fork_asm+0x1a/0x30 [ 176.304429][ T6443] [ 176.306873][ T6443] Freed by task 6452: [ 176.311542][ T6443] kasan_save_stack+0x30/0x50 [ 176.316679][ T6443] kasan_save_track+0x14/0x30 [ 176.321556][ T6443] kasan_save_free_info+0x3b/0x70 [ 176.326758][ T6443] __kasan_slab_free+0x5f/0x80 [ 176.332058][ T6443] kfree+0x22b/0x6c0 [ 176.335948][ T6443] kfree_const+0x5a/0x70 [ 176.340297][ T6443] kobject_put+0x218/0x640 [ 176.344704][ T6443] put_device+0x1f/0x30 [ 176.348950][ T6443] platform_remove+0x5f/0x80 [ 176.353730][ T6443] device_remove+0xcb/0x180 [ 176.359338][ T6443] device_release_driver_internal+0x44e/0x620 [ 176.370109][ T6443] unbind_store+0xf8/0x110 [ 176.376040][ T6443] drv_attr_store+0x74/0xb0 [ 176.383613][ T6443] sysfs_kf_write+0xf2/0x150 [ 176.390613][ T6443] kernfs_fop_write_iter+0x3e0/0x5f0 [ 176.397253][ T6443] vfs_write+0x6ac/0x1050 [ 176.403933][ T6443] ksys_write+0x12a/0x250 [ 176.409581][ T6443] do_syscall_64+0x115/0x870 [ 176.414781][ T6443] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.422773][ T6443] [ 176.427408][ T6443] The buggy address belongs to the object at ffff88802bec4500 [ 176.427408][ T6443] which belongs to the cache kmalloc-16 of size 16 [ 176.445234][ T6443] The buggy address is located 0 bytes inside of [ 176.445234][ T6443] freed 16-byte region [ffff88802bec4500, ffff88802bec4510) [ 176.461499][ T6443] [ 176.464151][ T6443] The buggy address belongs to the physical page: [ 176.471670][ T6443] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2bec4 [ 176.482203][ T6443] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 176.490115][ T6443] page_type: f5(slab) [ 176.494300][ T6443] raw: 00fff00000000000 ffff88813fe21640 dead000000000100 dead000000000122 [ 176.504395][ T6443] raw: 0000000000000000 0000000800800080 00000000f5000000 0000000000000000 [ 176.513020][ T6443] page dumped because: kasan: bad access detected [ 176.519467][ T6443] page_owner tracks the page as allocated [ 176.525453][ T6443] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 13318626853, free_ts 0 [ 176.546660][ T6443] post_alloc_hook+0xfd/0x120 [ 176.551894][ T6443] get_page_from_freelist+0xf48/0x3530 [ 176.557938][ T6443] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 176.564017][ T6443] new_slab+0xa2/0x640 [ 176.568433][ T6443] refill_objects+0xe3/0x410 [ 176.573332][ T6443] __pcs_replace_empty_main+0x376/0x680 [ 176.580468][ T6443] __kmalloc_node_track_caller_noprof+0x679/0x830 [ 176.587527][ T6443] kstrdup+0x51/0xe0 [ 176.591450][ T6443] kstrdup_const+0x63/0x80 [ 176.595887][ T6443] __kernfs_new_node+0x9b/0xa10 [ 176.600755][ T6443] kernfs_new_node+0x117/0x150 [ 176.605622][ T6443] kernfs_create_link+0xcc/0x240 [ 176.610745][ T6443] sysfs_do_create_link_sd+0x90/0x140 [ 176.616207][ T6443] sysfs_create_link+0x61/0xc0 [ 176.620991][ T6443] driver_sysfs_add+0x91/0x2d0 [ 176.625814][ T6443] really_probe+0x146/0xa60 [ 176.630424][ T6443] page_owner free stack trace missing [ 176.635792][ T6443] [ 176.638116][ T6443] Memory state around the buggy address: [ 176.643850][ T6443] ffff88802bec4400: 00 04 fc fc 00 04 fc fc 00 04 fc fc 00 04 fc fc [ 176.652427][ T6443] ffff88802bec4480: 00 04 fc fc 00 04 fc fc 00 01 fc fc 00 01 fc fc [ 176.661716][ T6443] >ffff88802bec4500: fa fb fc fc 00 00 fc fc 00 00 fc fc 00 04 fc fc [ 176.670568][ T6443] ^ [ 176.674644][ T6443] ffff88802bec4580: 00 04 fc fc fa fb fc fc 00 00 fc fc fa fb fc fc [ 176.682741][ T6443] ffff88802bec4600: 00 05 fc fc 00 05 fc fc 00 05 fc fc 00 02 fc fc [ 176.692106][ T6443] ================================================================== [ 176.702535][ T9] es2_ap_driver 1-1:7.187: probe with driver es2_ap_driver failed with error -71 [ 176.717595][ T9] usb 1-1: USB disconnect, device number 10 [ 176.792002][ T6446] loop5: detected capacity change from 0 to 7 [ 176.800486][ T30] audit: type=1400 audit(1786624159.488:361): avc: denied { read } for pid=4945 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 176.825672][ T6446] Dev loop5: unable to read RDB block 7 [ 176.832161][ T6446] loop5: AHDI p1 [ 176.835998][ T6446] loop5: partition table partially beyond EOD, truncated [ 176.843767][ T30] audit: type=1400 audit(1786624159.498:362): avc: denied { search } for pid=4945 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 176.865563][ T30] audit: type=1400 audit(1786624159.498:363): avc: denied { write search } for pid=4945 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 176.889816][ T30] audit: type=1400 audit(1786624159.498:364): avc: denied { add_name } for pid=4945 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 176.911433][ T30] audit: type=1400 audit(1786624159.498:365): avc: denied { create } for pid=4945 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 176.935931][ T30] audit: type=1400 audit(1786624159.498:366): avc: denied { append open } for pid=4945 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 176.963263][ T30] audit: type=1400 audit(1786624159.498:367): avc: denied { getattr } for pid=4945 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 176.996155][ T6443] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 177.003832][ T6443] CPU: 1 UID: 0 PID: 6443 Comm: syz.0.160 Not tainted syzkaller #0 PREEMPT(full) [ 177.013139][ T6443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 177.023806][ T6443] Call Trace: [ 177.027445][ T6443] [ 177.030425][ T6443] dump_stack_lvl+0x100/0x190 [ 177.035103][ T6443] vpanic+0x552/0x970 [ 177.039166][ T6443] ? __pfx_vpanic+0x10/0x10 [ 177.043854][ T6443] ? string+0x471/0x4d0 [ 177.048489][ T6443] panic+0xd1/0xe0 [ 177.052576][ T6443] ? __pfx_panic+0x10/0x10 [ 177.057104][ T6443] ? string+0x471/0x4d0 [ 177.061375][ T6443] ? preempt_schedule_common+0x42/0xc0 [ 177.067530][ T6443] check_panic_on_warn.cold+0x19/0x34 [ 177.073702][ T6443] end_report.part.0+0x3a/0x90 [ 177.079736][ T6443] kasan_report.cold+0xe/0x18 [ 177.084449][ T6443] ? string+0x471/0x4d0 [ 177.089060][ T6443] string+0x471/0x4d0 [ 177.093177][ T6443] ? __pfx_string+0x10/0x10 [ 177.098038][ T6443] vsnprintf+0x422/0x1300 [ 177.102550][ T6443] ? __pfx_vsnprintf+0x10/0x10 [ 177.107613][ T6443] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 177.114167][ T6443] ? is_bpf_text_address+0x94/0x1a0 [ 177.120099][ T6443] ? kernel_text_address+0x8d/0x100 [ 177.125457][ T6443] snprintf+0xc7/0x100 [ 177.129551][ T6443] ? __pfx_snprintf+0x10/0x10 [ 177.134448][ T6443] ? stack_trace_save+0x8e/0xc0 [ 177.139807][ T6443] dev_vprintk_emit+0x375/0x3e0 [ 177.146071][ T6443] ? __pfx_dev_vprintk_emit+0x10/0x10 [ 177.152704][ T6443] ? __x64_sys_ioctl+0x18e/0x210 [ 177.157748][ T6443] ? do_syscall_64+0x115/0x870 [ 177.163280][ T6443] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.172537][ T6443] dev_printk_emit+0xd2/0x10d [ 177.178546][ T6443] ? __pfx_dev_printk_emit+0x10/0x10 [ 177.187184][ T6443] __dev_printk+0xcb/0x100 [ 177.192767][ T6443] _dev_err+0xef/0x127 [ 177.198879][ T6443] ? __pfx__dev_err+0x10/0x10 [ 177.205081][ T6443] ? dummy_queue+0x3ca/0xb00 [ 177.212230][ T6443] ? find_held_lock+0x2b/0x80 [ 177.220505][ T6443] ? raw_process_ep0_io+0x314/0x9c0 [ 177.226698][ T6443] raw_process_ep0_io.cold+0x65/0x7f [ 177.234253][ T6443] raw_ioctl+0x1369/0x2b80 [ 177.240822][ T6443] ? __pfx_raw_ioctl+0x10/0x10 [ 177.247356][ T6443] ? selinux_file_ioctl+0xb6/0x290 [ 177.254550][ T6443] ? __pfx_raw_ioctl+0x10/0x10 [ 177.262059][ T6443] __x64_sys_ioctl+0x18e/0x210 [ 177.268249][ T6443] do_syscall_64+0x115/0x870 [ 177.273934][ T6443] ? clear_bhb_loop+0x70/0xc0 [ 177.281460][ T6443] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.290772][ T6443] RIP: 0033:0x7f6c4259dd6b [ 177.295812][ T6443] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 177.324705][ T6443] RSP: 002b:00007f6c407f3f50 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 177.337710][ T6443] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f6c4259dd6b [ 177.346880][ T6443] RDX: 00007f6c407f3fd0 RSI: 0000000040085503 RDI: 0000000000000004 [ 177.356189][ T6443] RBP: 00007f6c407f3fd0 R08: 0000000000000002 R09: 0000000000000000 [ 177.370139][ T6443] R10: 0000000000000004 R11: 0000000000000246 R12: 00007f6c407f3fd8 [ 177.381701][ T6443] R13: 0000000000000000 R14: 00007f6c42825fa0 R15: 00007ffe30a7d568 [ 177.395599][ T6443] [ 177.400496][ T6443] Kernel Offset: disabled [ 177.406477][ T6443] Rebooting in 86400 seconds..