last executing test programs: 1m10.119550915s ago: executing program 0 (id=540): r0 = socket$can_j1939(0x1d, 0x2, 0x7) syz_emit_ethernet(0xe, &(0x7f00000001c0)=ANY=[], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) add_key(0x0, 0x0, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) r2 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r2, 0x0, 0x0) keyctl$read(0xb, r2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000140)=0x7, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, 0x0}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000700)={0x0, 0x1e5, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x28, 0x31, 0x101, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x28}}, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000240)) r6 = syz_open_dev$dri(0x0, 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x2, 0x4}) 1m10.038116848s ago: executing program 0 (id=541): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) 1m9.707873621s ago: executing program 0 (id=543): socket$nl_netfilter(0x10, 0x3, 0xc) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/reserved_size', 0x220001, 0x54) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 1m9.626556771s ago: executing program 0 (id=545): syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b"], 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe) 1m7.907939764s ago: executing program 0 (id=562): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0x8, '\t\x00'}, @local=@item_4={0x3, 0x2, 0x0, "93bf0280"}, @main=@item_4={0x3, 0x0, 0xb, "7488dffc"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, &(0x7f00000008c0)=0x2) 1m6.207624665s ago: executing program 0 (id=573): mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x800448f0, &(0x7f0000000080)) socket$key(0xf, 0x3, 0x2) syz_usb_connect(0x0, 0x0, 0x0, 0x0) 1m4.409031487s ago: executing program 4 (id=593): syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582239f"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x800000000000) r0 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0xec25, 0x0, 0x0, 0x40008333}, 0x0, 0x0) io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001440), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) inotify_init() pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) 1m2.967435495s ago: executing program 4 (id=604): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000240)={0x0, 0x5, 0x3f, "81166d1a956a33144c0f47c5e45bfea2413134209c00754ccc9e6cb028ac910eb257faf5223f901e9eaf901b880fb9dec84ba7d66cab158a82053f6519c35d"}, 0x0, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x55}, 0x0, 0x0, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x1}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x8}, &(0x7f0000000480)={0x40, 0xb, 0x2, "ed6f"}, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x40, 0x19, 0x2, "629a"}, &(0x7f00000005c0)={0x40, 0x1a, 0x2, 0x7fff}, 0x0, 0x0, 0x0}) 1m1.174249847s ago: executing program 4 (id=617): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000380)={{0x6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x40000a}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}, 0x48) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, &(0x7f0000000300)={{0x6, @rose, 0x2}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default]}, 0x48) listen(r0, 0x1ad72f7) r2 = socket$key(0xf, 0x3, 0x2) recvmmsg(r2, &(0x7f0000002d40)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x20, &(0x7f0000002e40)) r3 = accept4(r0, 0x0, 0x0, 0x80000) syz_genetlink_get_family_id$fou(&(0x7f0000002f00), r3) 1m0.299710305s ago: executing program 4 (id=628): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000400)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891008, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x10dc43, 0x0) 1m0.268787567s ago: executing program 4 (id=629): socket$can_bcm(0x1d, 0x2, 0x2) r0 = memfd_create(&(0x7f00000005c0)=' \xc76\xbe\x91\x8d\x182)!\x9a%\xa2\xd28\xd6\x06\a\x0e\xfc\xfe\x12\x8f&\x13\xae%@T\xa3\xb0>\\\xec\xa9\xf9Q@6A\x10\x8cn|\x00\x00\x00\x00\x00\x00\x00\x00r\xbb\xdd\xe8\x87\x05=\xfb\x8b}\xfc\x1d\x03\xe1\xfcm\x9b\xf7fo\"i\xa1hk\x1f\xf5z\xc1\x7f\xa4\\]\xc4\xbe3\xf9\xa8\t?:\xd8\xda\x84\xeepI[\x1c\x00\x00\x00\x00\xf9v\x00\x00\x00\x00\x00T\xb6\xbe\x0f~\xc0\x92\xe9O{\xa8\x81(\x01\x14\xfc\x83\xf9\xfb\x05\x94T\x81@Lq]\xf9\x15zj\x87\xc4\x8e\xe8/\xb9-&R\x8e\xb2\xb3bBx\x1e1\x18\x8f\x19\xf7]#\xed,\xc7\x11\tp\xf4\xa3\xee\x00\x00\x00\x00\'}\x18\xe8O\xa8#K\xb6\xe4U\x92\xd2\x9d\xb8?2\xc8\xe7kovd\xa4\x1bl+\x14\x17\x14\x17C2! U\x04:\xd93F\xb9\xfc\x1b\xfd}\x05\xf9\x11\xf3)>q\x10\xd3\xf0\xaf>\xf8t(bX\xe3g\x05\xfe\b\xbcy\x95*\xca\a\xaf\xbb\xf9\xc3Y\xa2\x91\x90.\xc8\xbe\xb0\xa6\xbd\xbd\xfd\xfaf*\xb2&\x82\xa0\x17\xe7)\xf5\xa2\xccv\n\x1b\xd4\xf4\x11*\xc9\xc6*\xa4.\x94[$\xb8\xb3Q\xde\xd8A\xa4~c,`\x02\xb8\x01r\x89\x82\x13\xd0}C7\xfb\xf2\tM\x1e\xe9\xa5\v\xc5\xba(\x89\xb0l\x92H\x1cR\x1f>\xc4ie\xe0B\xf0[\xe2\xe1\x12\x1d\x8fR&\xd1\xa6#\xda.\x0f\xd7\xd7\xa4\x90\x14\x92I\xf82&\x16<\xf2RR\xc2\x02.Q\xef\x85\xef\xf9\xe5\x00\xe9\xca\xb1\x8c\x11\x11l\x9f\xc8\b\xf7A\xa6\x81\xad\xdc\x95\xc8\xef\x102\xa8\x87\x01\x00\\\xfee \n0F\xbc\x85\xc5C\xd0\x99\xe4\t\xab`\'t\xc2\xe9\x13\xcag\xea\xb3\xb5\x92\x00J\xc6y\x05\xcc\xde\xa0\xf6\xb9 \xe5\xdd\f\x18\xfc\xe0\xc3(\xd8\xeb\x1a6\xe6\xfa\x93\xc07R\x0f-\x9e\xf3\x87E\xa3\xd5o\x1bA\x88L/\xe7>45Q?\be\x7f\xa9\x9a\xcae\xd8Y\xdf]\x1bS\x825\xcb\x00\xa4}\x97\x84T\xad\x9b\x1e!\x8a\xbc\x02+#Q\xa9 \xe9\x05r\xe1\xec\x0f\xa7\xe6Of\x95\x02{', 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd5e, 0x240000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x400000bde) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x20e) ftruncate(r0, 0x400000) 1m0.091621005s ago: executing program 4 (id=631): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_rdma(0x10, 0x3, 0x14) bind$tipc(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r1, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 59.687291086s ago: executing program 32 (id=631): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_rdma(0x10, 0x3, 0x14) bind$tipc(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r1, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 51.103641983s ago: executing program 33 (id=573): mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x800448f0, &(0x7f0000000080)) socket$key(0xf, 0x3, 0x2) syz_usb_connect(0x0, 0x0, 0x0, 0x0) 5.719825194s ago: executing program 5 (id=893): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000540)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x24, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000a00)={0x44, &(0x7f0000000840)={0x40, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.179985002s ago: executing program 1 (id=899): bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@bloom_filter={0x1e, 0x2, 0x6, 0x7, 0x8411, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x0, 0xe}, 0x50) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$nullb(0xffffffffffffff9c, 0x0, 0xa4242, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x200000006, 0x0, 0x1}}, 0x40) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/246, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000002c0)={0x1, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000f}, 0x94) readlinkat(0xffffffffffffffff, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f00000002c0)=""/204, 0xcc) 5.10752944s ago: executing program 1 (id=901): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000440)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f00000001c0)={0xcc2}, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r4, 0x0, 0x0, 0x0, 0x2}) io_uring_enter(r4, 0x627, 0x4c1, 0x43, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x24000000) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, 0x0, 0x0, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x44) 5.064558148s ago: executing program 5 (id=903): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) openat$fb0(0xffffffffffffff9c, 0x0, 0x80042, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000080)="03", 0x1, 0xffffffffffffffff) pipe2$watch_queue(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r3, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) 4.947342183s ago: executing program 3 (id=905): getsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x8, &(0x7f0000000000), &(0x7f0000000100)=0x4) r0 = gettid() r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) sched_setscheduler(r1, 0x0, &(0x7f0000000140)=0x2) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454da, &(0x7f0000000080)={'batadv0\x00'}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x103442, 0x0) ioctl$TUNSETIFF(r2, 0x400454da, &(0x7f0000000140)={'batadv0\x00'}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'pimreg0\x00', 0x411}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000240)={'\x00', 0x52d35ce30131f272}) sched_setaffinity(r1, 0x8, &(0x7f0000000180)) rt_sigqueueinfo(r0, 0xb, &(0x7f0000002d00)={0x0, 0x0, 0xfffffffd}) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom0\x00', 0x802, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 3.799989404s ago: executing program 6 (id=910): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x0, 0x0, 0x0}, 0x94) socket$inet_icmp(0x2, 0x2, 0x1) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x2, &(0x7f0000000000)={0x0, 0xc, 0x4, @tid=r2}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) ptrace(0x10, r2) ptrace$setregs(0x1a, r2, 0xc, &(0x7f0000000000)) r3 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000006c0)={0x2, 0x0, [{0x0, 0xe, &(0x7f00000001c0)=""/14}, {0x2, 0xe0, &(0x7f0000000580)=""/224}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) write(r0, &(0x7f0000000340)="07000000010001", 0x7) 3.595318932s ago: executing program 6 (id=911): bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) socket$inet(0x2, 0x802, 0x1) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x6d}, 0x2c) r5 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r5, &(0x7f0000000000)={0xa, 0x0, 0x3, @empty, 0x101, 0x3}, 0x20) connect$l2tp6(r5, 0x0, 0x0) 3.594977329s ago: executing program 3 (id=912): openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_open_dev$vim2m(0x0, 0x0, 0x2) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) pwritev(r0, &(0x7f0000000040), 0x0, 0x3ff000, 0x400000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000140)={0x2, [0x0, 0x0]}, &(0x7f0000000180)=0x8) unshare(0x2040400) openat$sysfs(0xffffffffffffff9c, 0x0, 0x800, 0x2) openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x80000000005, 0x100000001000087}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x14, &(0x7f0000000040)=0x6) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bind$rds(0xffffffffffffffff, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0xc0, 0x61) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x7, 0xe, &(0x7f0000002180)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x26}, 0x48) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) 3.323454291s ago: executing program 3 (id=913): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)={0x1, 0x0, 0x56b, 0xfffffffffffffffc}) r1 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x3, 0x6576, 0x2d, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000000c0)={r2}) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x2, 0x2, 0x1, 0x7}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x1d, 0x0, 0x0) sendmsg$TIPC_NL_MON_PEER_GET(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)={0x20, r4, 0x30d, 0x0, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}]}]}, 0x20}}, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000240)=0x1) socket$nl_route(0x10, 0x3, 0x0) 3.291292729s ago: executing program 3 (id=914): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) r4 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r4, &(0x7f00000032c0), 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x68, 0x0, &(0x7f0000000380)=[@request_death={0x400c630e, 0x1}, @acquire, @register_looper, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0}) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r5, 0x5b03, 0x0) 3.252689088s ago: executing program 5 (id=915): socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200009b1aecb600000000000000008d0000007500000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r1, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket(0x15, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x271d, 0x0, &(0x7f0000000000)) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='hpfs\x00', 0x4080, 0x0) 3.027403148s ago: executing program 5 (id=917): r0 = socket$can_j1939(0x1d, 0x2, 0x7) syz_emit_ethernet(0xe, &(0x7f00000001c0)=ANY=[], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) add_key(0x0, 0x0, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) r2 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r2, 0x0, 0x0) keyctl$read(0xb, r2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000140)=0x7, 0x4) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, 0x0}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000700)={0x0, 0x1e5, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x28, 0x31, 0x101, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x28}}, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000240)) r7 = syz_open_dev$dri(0x0, 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x2, 0x4}) 2.924621857s ago: executing program 5 (id=918): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = openat(0xffffffffffffff9c, 0x0, 0xc0042, 0x1fe) r2 = msgget(0x0, 0x40) msgctl$MSG_STAT(r2, 0xb, &(0x7f0000000640)=""/40) futex(0x0, 0x80, 0x1, &(0x7f0000000840)={0x0, 0x3938700}, 0x0, 0x2) msgctl$MSG_INFO(r2, 0xc, &(0x7f0000000240)=""/166) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) socket(0x1d, 0x2, 0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) bind$inet(r1, &(0x7f00000000c0)={0x1d, 0x4e23, @multicast2}, 0x10) fcntl$lock(r3, 0x24, &(0x7f0000000040)={0x2, 0x2, 0x1, 0x7}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@cgroup=r1, 0x2b, 0x1, 0xd, 0x0, 0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000300)=[0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c5602117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100070c100000000000224e0000", 0x58}], 0x1) 2.779426454s ago: executing program 6 (id=920): r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f0000000040)='disconnect aa:aa:aa:aa:aa:11 1', 0x1e) timerfd_create(0x7, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) semop(0x0, &(0x7f0000002480)=[{0x0, 0x0, 0x1000}], 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000004c0)={0x14, 0x6a, 0xfcdfa0f79c183163, 0x0, 0x25dfdbfc, "", [@generic="8ef5"]}, 0x14}], 0x1, 0x0, 0x0, 0x48000}, 0x0) sendmsg$IPSET_CMD_CREATE(r2, 0x0, 0x0) sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x34, 0x4, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0xc011}, 0x800) sendmsg$NFT_MSG_GETFLOWTABLE(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x1c, 0x17, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r4 = fsopen(&(0x7f0000000100)='ocfs2_dlmfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) fchdir(0xffffffffffffffff) 2.666266658s ago: executing program 5 (id=921): r0 = syz_usb_connect(0x3, 0x4a, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000001c0)={0x14, &(0x7f00000000c0)={0x0, 0xc, 0xc, {0xc, 0x1, "adbfe9d7c135388e581b"}}, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000480)={0x1c, &(0x7f0000000400)={0x40, 0x10, 0x3f, "c5146641f2da1131c6b4b7581c31f266a15e2e967e9f9399ff16df1b7d1ef9b426eebaf6e7531411b3f2b7601673c170ebb886fef2ef84fbc1f33e6f9b2c4b"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x98}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x4}}) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r5 = syz_io_uring_setup(0xa0, &(0x7f0000000380)={0x0, 0x105cc6, 0x400, 0xfffffffe, 0x207}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r4, 0xc000000, &(0x7f0000000000)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x12}) io_uring_enter(r5, 0x847ba, 0x0, 0xe, 0x0, 0x0) r8 = getpid() r9 = syz_pidfd_open(r8, 0x0) ioctl$BTRFS_IOC_ADD_DEV(r9, 0xff04, 0x0) 2.607553731s ago: executing program 6 (id=922): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x181002, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r3, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r4 = eventfd(0x0) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000000)={r4, 0x0, 0x0, r4}) 2.338819503s ago: executing program 2 (id=924): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x40f02, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f00000000c0)=0x40) mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x8000, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) ioctl$KVM_SET_LAPIC(r6, 0xc008aec1, &(0x7f0000000240)={"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"}) socket$igmp(0x2, 0x3, 0x2) 1.779594839s ago: executing program 1 (id=925): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000002c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sched_setparam(0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000e3ff000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000e00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r4}, 0x10) getegid() syz_open_dev$usbmon(0x0, 0xe, 0x2401) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 1.32360755s ago: executing program 2 (id=926): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r0, 0x34}, 0x10) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_ACTIVATE(r5, 0x4bfa, 0x8000000000000000) 1.16383999s ago: executing program 3 (id=927): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x14) mkdir(0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, &(0x7f0000000340)) chdir(&(0x7f00000003c0)='./bus\x00') chdir(0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000380), 0x1, 0x100) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r2) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknod(0x0, 0xc000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0x237, &(0x7f0000000480)={0x0, 0x8101, 0x0, 0x0, 0x2cf}, &(0x7f0000000040)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r6 = socket$inet_smc(0x2b, 0x1, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000100)=@l2tp={0x2, 0x0, @multicast1, 0x3}, 0x0, 0x0, 0x2}) io_uring_enter(r3, 0x47ba, 0x0, 0x0, 0x0, 0x0) 1.107518568s ago: executing program 6 (id=928): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x0, 0x0) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000008, 0x12, 0xffffffffffffffff, 0xabb35000) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, 0x0) write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000000)={0xf, 0x1f, 0x2, 0x4}, 0xca80) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0xa, 0xfffa}, 0xba, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x2004d, 0x5, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x7, 0x3, 0x0, 0x5, 0x2c, 0x1, 0x7, 0x3c5b, 0x1, 0x5, 0x6, 0x1, 0x5, 0xffffffff, 0xe661, 0x4, 0x7, 0x5, 0x8, 0x4c74, 0x80000000, 0x40000, 0x4, 0x0, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x407, 0x8, 0x3e, 0x8e, 0x4006, 0x6, 0x0, 0x0, 0x4, 0x8, 0x400, 0x10000080, 0x0, 0x5, 0x7, 0x8, 0x4, 0xfffffffe, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0xd31, 0x6, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x10, 0xea4, 0x2, 0x4, 0xffff8000, 0x7fff, 0x5a7c, 0x0, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x9, 0x5, 0x3, 0x9, 0x1, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x0, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0xc12f, 0x3e7, 0xb, 0x4, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x5, 0x1, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0xa9, 0x5, 0x9, 0xacc, 0xbf, 0x2, 0x3ff, 0x7ff, 0x12b, 0x4, 0x1, 0x2, 0x0, 0x5, 0x1c, 0x120000, 0x100003, 0x2006, 0x80a2ed, 0x4, 0x1fb], [0x9, 0xbb33, 0x7, 0x9, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x9, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x1, 0x2, 0x5, 0xe7, 0x6, 0x16, 0xffffffff, 0x80000003, 0x5, 0x4, 0xc8, 0xa, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x2, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) sendmsg$NFT_BATCH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010400000000000000000100000008000240000000020900010073797a300000000014000000110001"], 0x50}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a44000000090a050600000000000000000100000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001405000d40"], 0x6c}}, 0x0) 1.107117776s ago: executing program 2 (id=929): r0 = socket$can_j1939(0x1d, 0x2, 0x7) syz_emit_ethernet(0xe, &(0x7f00000001c0)=ANY=[], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) add_key(0x0, 0x0, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) r2 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r2, 0x0, 0x0) keyctl$read(0xb, r2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000140)=0x7, 0x4) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, 0x0}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000700)={0x0, 0x1e5, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x28, 0x31, 0x101, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x28}}, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000240)) r7 = syz_open_dev$dri(0x0, 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x2, 0x4}) 1.05567704s ago: executing program 2 (id=930): socket$inet(0x2, 0x2, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0) pipe2$watch_queue(&(0x7f0000001180), 0x80) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x5836, 0x20000005, 0x7, 0x40, 0x1, 0x5479, 0x1037, 0x100000000a, 0x0, 0x51, 0x1, 0x100000002, 0x1, 0x9, 0x5, 0x800000006a], 0x100000, 0x3c6a86}) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl(r4, 0x8b32, &(0x7f0000000040)) 856.653618ms ago: executing program 1 (id=931): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x20000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000240)={0x7, 0x1, 0xa0008000}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0xb, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x2, 0x5, 0x3}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000340)={0xda2, 0x5, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000200)={0x200, 0x1fb, 0xc38}) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000340)={0x3, 0xc, 0x7}) r5 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0x8, 0x1, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000140)={0x6, 0x1000, 0x800}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000380)={0x100, 0x1, 0xaef}) close_range(r0, 0xffffffffffffffff, 0x0) 651.421478ms ago: executing program 1 (id=932): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x3e, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4007fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4, 0x0, 0x7}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x6) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, 0x0, 0x24000000) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000007c0)={0xa, 0x2, 0x0, @empty, 0x80000001}, 0x1c) close_range(r6, 0xffffffffffffffff, 0x0) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c0000001200010003050000000000000a090000"], 0x4c}}, 0x0) 183.670921ms ago: executing program 6 (id=933): syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) sendto$rose(r5, 0x0, 0x0, 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000240)={[0x74, 0x20005, 0x1, 0x4000000000, 0x2, 0x1000000002, 0x1041, 0x0, 0xfffffffffffffffb, 0x32a, 0xfffffffffffffffe, 0xffffffff, 0xfffffffffffffffd, 0x9, 0x800005, 0x6a], 0xd000, 0x1022d6}) syz_open_dev$vim2m(0x0, 0x7f, 0x2) ioctl$KVM_RUN(r6, 0xae80, 0x0) 170.59732ms ago: executing program 2 (id=934): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r1, @ANYBLOB="01000000000000000000170000000c00060001000000010000000c01308014000400976f1044852bca665354bd217b6b9037200001800c0005000c0000020000020008000100030000000500020003000000050002"], 0x12c}, 0x1, 0x0, 0x0, 0x24004821}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) ioctl$sock_proto_private(0xffffffffffffffff, 0x89e1, &(0x7f0000000200)="f33dfbf5b89f180e3b") sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f0000000300)={0x5, 0x267c}) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x9, 0xe0d6, 0xfffffff9, 0x200, 0x5}, 0x14) 120.08761ms ago: executing program 1 (id=935): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet(0x2, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000000100)={0x4, r4}) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f0000000080)=0x7) 39.549027ms ago: executing program 2 (id=936): r0 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_script(r0, &(0x7f0000000200)={'#! ', '', [{0x20, '#! '}, {}, {0x20, ',@-}.'}, {0x20, '#! '}, {0x20, '\xa8\xb5:\xe6'}]}, 0x18) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0xd0fb1000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@remote, 0x0, 0x2400, 0x4e21, 0x5, 0x2, 0x0, 0x20, 0x62}, {0x0, 0x0, 0x100000000000, 0x0, 0x1, 0x0, 0x100000000003}, {0x7e3}, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x40002}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x2500, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000014"], 0x188}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) socket(0x8000000010, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 0s ago: executing program 3 (id=937): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r4 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPOEIOCSFWD(r4, 0x4008b100, &(0x7f00000002c0)={0x18, 0x0, {0x1, @broadcast, 'lo\x00'}}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000440), r5) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)={0x14, r6, 0xc8036ab6d6cbef07, 0x70bd28}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x45080) kernel console output (not intermixed with test programs): 22 [ 132.552136][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.173047][ T30] audit: type=1400 audit(1754996084.038:333): avc: denied { read } for pid=6698 comm="syz.4.204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 133.179197][ T6700] netlink: 204 bytes leftover after parsing attributes in process `syz.2.203'. [ 133.248600][ T30] audit: type=1400 audit(1754996084.108:334): avc: denied { setopt } for pid=6698 comm="syz.4.204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 133.477296][ T30] audit: type=1400 audit(1754996084.328:335): avc: denied { mount } for pid=6716 comm="syz.1.210" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 133.683146][ T5964] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 133.764152][ T6738] netlink: 204 bytes leftover after parsing attributes in process `syz.2.222'. [ 133.833192][ T5861] usb 4-1: new low-speed USB device number 7 using dummy_hcd [ 133.852943][ T5964] usb 5-1: Using ep0 maxpacket: 8 [ 133.908381][ T5964] usb 5-1: config index 0 descriptor too short (expected 6427, got 27) [ 133.942634][ T5964] usb 5-1: config 0 has an invalid interface number: 21 but max is 0 [ 133.991357][ T5964] usb 5-1: config 0 has no interface number 0 [ 134.029978][ T5964] usb 5-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 134.086357][ T5964] usb 5-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 134.127551][ T5861] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 134.130331][ T5964] usb 5-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 134.162840][ T5861] usb 4-1: config 0 has no interface number 0 [ 134.168972][ T5861] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 134.194819][ T5964] usb 5-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 134.198742][ T5861] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 134.213560][ T5964] usb 5-1: New USB device strings: Mfr=31, Product=1, SerialNumber=0 [ 134.220232][ T6745] process 'syz.2.224' launched './file2' with NULL argv: empty string added [ 134.246120][ T5964] usb 5-1: Product: syz [ 134.249769][ T5861] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.252928][ T5964] usb 5-1: Manufacturer: syz [ 134.318852][ T5861] usb 4-1: config 0 descriptor?? [ 134.320314][ T5964] usb 5-1: config 0 descriptor?? [ 134.332645][ T5861] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 134.373885][ T6717] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 134.581556][ T6758] netlink: 204 bytes leftover after parsing attributes in process `syz.2.230'. [ 134.614277][ T5861] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 134.663040][ T5987] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 134.741523][ T5964] usb 5-1: USB disconnect, device number 4 [ 134.848454][ T10] usb 4-1: USB disconnect, device number 7 [ 134.905944][ T5861] usb 1-1: Using ep0 maxpacket: 8 [ 134.931071][ T5987] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 134.969019][ T5987] usb 2-1: config 0 has no interfaces? [ 134.975702][ T5861] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 134.976478][ T5987] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 134.997626][ T5987] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 135.005762][ T5987] usb 2-1: Manufacturer: syz [ 135.007946][ T5861] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 135.023509][ T5987] usb 2-1: config 0 descriptor?? [ 135.039128][ T5861] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 135.051456][ T5861] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 135.062942][ T5861] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 135.076779][ T5861] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 135.088791][ T5861] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.246285][ T5964] usb 2-1: USB disconnect, device number 4 [ 135.303716][ T5987] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 135.305516][ T5861] usb 1-1: GET_CAPABILITIES returned 0 [ 135.317322][ T5861] usbtmc 1-1:16.0: can't read capabilities [ 135.452945][ T5987] usb 3-1: Using ep0 maxpacket: 16 [ 135.462311][ T5987] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 135.474823][ T5987] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 135.488710][ T5987] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.505361][ T5987] usb 3-1: config 0 descriptor?? [ 135.522050][ T5962] usb 1-1: USB disconnect, device number 7 [ 135.773014][ T5861] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 135.831227][ T10] kernel read not supported for file /sequencer (pid: 10 comm: kworker/0:1) [ 135.922869][ T5861] usb 5-1: Using ep0 maxpacket: 32 [ 135.926845][ T5987] mcp2221 0003:04D8:00DD.0004: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 135.929647][ T5861] usb 5-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 135.947817][ T5861] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.957512][ T5861] usb 5-1: config 0 descriptor?? [ 135.965287][ T5861] gspca_main: sq930x-2.14.0 probing 041e:403c [ 136.124740][ T5962] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 136.166211][ T5861] gspca_sq930x: reg_r 001f failed -71 [ 136.171670][ T5861] sq930x 5-1:0.0: probe with driver sq930x failed with error -71 [ 136.182084][ T5861] usb 5-1: USB disconnect, device number 5 [ 136.280069][ T6778] netlink: 204 bytes leftover after parsing attributes in process `syz.0.238'. [ 136.337904][ T5962] usb 2-1: config 0 has an invalid interface number: 64 but max is 0 [ 136.371380][ T5962] usb 2-1: config 0 has no interface number 0 [ 136.388251][ T5987] usb 3-1: USB disconnect, device number 8 [ 136.433843][ T5962] usb 2-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 136.503695][ T5962] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.589455][ T5962] usb 2-1: Product: syz [ 136.639051][ T5962] usb 2-1: Manufacturer: syz [ 136.652033][ T5962] usb 2-1: SerialNumber: syz [ 136.675967][ T5962] usb 2-1: config 0 descriptor?? [ 136.718014][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 136.718029][ T30] audit: type=1400 audit(1754996087.578:344): avc: denied { append } for pid=6780 comm="syz.3.239" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 136.754286][ T6781] loop6: detected capacity change from 0 to 524287999 [ 137.021123][ T5962] usb 2-1: Found UVC 0.08 device syz (046d:0823) [ 137.041067][ T5962] usb 2-1: No valid video chain found. [ 137.064100][ T5962] usb 2-1: USB disconnect, device number 5 [ 137.188272][ T6797] binder: 6796:6797 ioctl 400c620e 200000000000 returned -22 [ 137.273213][ T2029] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 137.528087][ T2029] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.543463][ T2029] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 137.554296][ T2029] usb 3-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 138.235280][ T30] audit: type=1400 audit(1754996088.758:345): avc: denied { getopt } for pid=6801 comm="syz.3.248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 138.291976][ T2029] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.546699][ T2029] usb 3-1: config 0 descriptor?? [ 138.744508][ T30] audit: type=1400 audit(1754996089.608:346): avc: denied { connect } for pid=6815 comm="syz.4.253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 139.519311][ T2029] hid_parser_main: 74 callbacks suppressed [ 139.519331][ T2029] isku 0003:1E7D:319C.0005: unknown main item tag 0x0 [ 139.532491][ T2029] isku 0003:1E7D:319C.0005: item fetching failed at offset 6/7 [ 139.540870][ T2029] isku 0003:1E7D:319C.0005: parse failed [ 139.547090][ T2029] isku 0003:1E7D:319C.0005: probe with driver isku failed with error -22 [ 139.669720][ T5987] usb 3-1: USB disconnect, device number 9 [ 139.732974][ T5922] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 139.880978][ T30] audit: type=1400 audit(1754996090.738:347): avc: denied { write } for pid=6835 comm="syz.3.261" path="socket:[12573]" dev="sockfs" ino=12573 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 139.929833][ T30] audit: type=1400 audit(1754996090.788:348): avc: denied { bind } for pid=6839 comm="syz.3.262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 139.951891][ T5922] usb 5-1: config 0 has no interfaces? [ 139.963504][ T5922] usb 5-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 139.976641][ T5922] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.984806][ T5922] usb 5-1: Product: syz [ 139.989071][ T5922] usb 5-1: Manufacturer: syz [ 139.994914][ T5922] usb 5-1: SerialNumber: syz [ 140.004324][ T5922] usb 5-1: config 0 descriptor?? [ 140.112451][ T30] audit: type=1400 audit(1754996090.968:349): avc: denied { watch watch_reads } for pid=6849 comm="syz.1.267" path="/64" dev="tmpfs" ino=353 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 140.138239][ T2029] kernel write not supported for file /video36 (pid: 2029 comm: kworker/0:2) [ 140.237131][ T73] tipc: Subscription rejected, illegal request [ 140.268201][ T5861] usb 5-1: USB disconnect, device number 6 [ 140.285962][ T2029] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 140.317863][ T30] audit: type=1400 audit(1754996091.178:350): avc: denied { bind } for pid=6862 comm="syz.1.273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 140.452865][ T2029] usb 1-1: Using ep0 maxpacket: 32 [ 140.459932][ T2029] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 140.472843][ T2029] usb 1-1: config 0 has no interface number 0 [ 140.481133][ T2029] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 140.490304][ T2029] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.498462][ T2029] usb 1-1: Product: syz [ 140.502630][ T2029] usb 1-1: Manufacturer: syz [ 140.510310][ T2029] usb 1-1: SerialNumber: syz [ 140.516907][ T2029] usb 1-1: config 0 descriptor?? [ 140.526457][ T2029] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 140.650728][ T6877] netlink: 830 bytes leftover after parsing attributes in process `syz.3.276'. [ 140.661881][ T30] audit: type=1400 audit(1754996091.518:351): avc: denied { watch_sb } for pid=6876 comm="syz.1.278" path="/69" dev="tmpfs" ino=380 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 140.662818][ T6877] bond_slave_0: entered promiscuous mode [ 140.689481][ T6877] bond_slave_1: entered promiscuous mode [ 140.915336][ T2029] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 140.946882][ T2029] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 141.153041][ T5922] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 141.274554][ C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 141.275223][ T5962] usb 1-1: USB disconnect, device number 8 [ 141.302883][ T5922] usb 2-1: Using ep0 maxpacket: 32 [ 141.315573][ T5922] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 141.323917][ T5922] usb 2-1: config 0 has no interface number 0 [ 141.339791][ T5922] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 141.525397][ T5922] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.536829][ T5962] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 141.538101][ T5922] usb 2-1: Product: syz [ 141.564254][ T5962] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 141.576067][ T5962] quatech2 1-1:0.51: device disconnected [ 141.609628][ T5922] usb 2-1: Manufacturer: syz [ 141.622931][ T5922] usb 2-1: SerialNumber: syz [ 141.656406][ T5922] usb 2-1: config 0 descriptor?? [ 141.684906][ T5922] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 141.851358][ T6908] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 141.899049][ T5922] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 141.925674][ T5922] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 142.201307][ T6922] netlink: 204 bytes leftover after parsing attributes in process `syz.4.299'. [ 142.253012][ T5922] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 142.323100][ T5962] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 142.342582][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 142.363270][ T2029] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 142.363663][ T5987] usb 2-1: USB disconnect, device number 6 [ 142.455223][ T5987] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 142.514027][ T5962] usb 1-1: Using ep0 maxpacket: 8 [ 142.525918][ T5987] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 142.539557][ T5922] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.541975][ T5962] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 142.564600][ T5987] quatech2 2-1:0.51: device disconnected [ 142.629216][ T5922] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 142.629254][ T5962] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 142.650240][ T5962] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 142.657583][ T5922] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 142.661751][ T5962] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 142.682673][ T5922] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.718553][ T5962] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 142.723850][ T5922] usb 4-1: config 0 descriptor?? [ 142.727962][ T5962] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.732744][ T2029] usb 3-1: Using ep0 maxpacket: 16 [ 142.881179][ T2029] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.892735][ T2029] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 142.902034][ T2029] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.079330][ T5962] usb 1-1: GET_CAPABILITIES returned 0 [ 143.095062][ T2029] usb 3-1: config 0 descriptor?? [ 143.097181][ T5962] usbtmc 1-1:16.0: can't read capabilities [ 143.179688][ T30] audit: type=1400 audit(1754996094.038:352): avc: denied { name_bind } for pid=6929 comm="syz.1.302" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 143.267300][ T5922] pyra 0003:1E7D:2CF6.0006: unknown main item tag 0x0 [ 143.291818][ T5922] pyra 0003:1E7D:2CF6.0006: unknown main item tag 0x0 [ 143.317689][ T5922] pyra 0003:1E7D:2CF6.0006: unknown main item tag 0x0 [ 143.337409][ T5922] pyra 0003:1E7D:2CF6.0006: unknown main item tag 0x0 [ 143.363002][ T5922] pyra 0003:1E7D:2CF6.0006: unknown main item tag 0x0 [ 143.374731][ T6935] input: syz1 as /devices/virtual/input/input18 [ 143.378717][ T5922] pyra 0003:1E7D:2CF6.0006: unknown main item tag 0x0 [ 143.395254][ T10] usb 1-1: USB disconnect, device number 9 [ 143.414150][ T5922] pyra 0003:1E7D:2CF6.0006: unknown main item tag 0x0 [ 143.435424][ T5922] pyra 0003:1E7D:2CF6.0006: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.3-1/input0 [ 143.488576][ T30] audit: type=1400 audit(1754996094.348:353): avc: denied { listen } for pid=6939 comm="syz.4.306" lport=57970 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 143.531765][ T2029] mcp2221 0003:04D8:00DD.0007: unknown main item tag 0x0 [ 143.543341][ T2029] mcp2221 0003:04D8:00DD.0007: unknown main item tag 0x0 [ 143.560985][ T2029] mcp2221 0003:04D8:00DD.0007: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 143.561897][ T30] audit: type=1400 audit(1754996094.418:354): avc: denied { accept } for pid=6939 comm="syz.4.306" lport=57970 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 143.678663][ T5922] pyra 0003:1E7D:2CF6.0006: couldn't init struct pyra_device [ 143.688359][ T5922] pyra 0003:1E7D:2CF6.0006: couldn't install mouse [ 143.698252][ T5922] pyra 0003:1E7D:2CF6.0006: probe with driver pyra failed with error -71 [ 143.717046][ T5922] usb 4-1: USB disconnect, device number 8 [ 143.740149][ C0] usb 3-1: input irq status -75 received [ 143.947020][ T5922] usb 3-1: USB disconnect, device number 10 [ 144.019396][ T30] audit: type=1400 audit(1754996094.848:355): avc: denied { nlmsg_read } for pid=6960 comm="syz.4.314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 144.076660][ T5987] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 144.120099][ T6969] netlink: 204 bytes leftover after parsing attributes in process `syz.4.318'. [ 144.245690][ T5987] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 144.259232][ T5987] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 144.300348][ T5987] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 144.368099][ T5987] usb 2-1: config 0 interface 0 has no altsetting 0 [ 144.410485][ T5987] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 144.489890][ T5987] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 144.527223][ T5987] usb 2-1: config 0 interface 0 has no altsetting 0 [ 144.550117][ T5987] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 144.569482][ T5987] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 144.595225][ T5987] usb 2-1: config 0 interface 0 has no altsetting 0 [ 144.609640][ T5987] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 144.642943][ T5987] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 144.673293][ T5987] usb 2-1: config 0 interface 0 has no altsetting 0 [ 144.685549][ T5987] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 144.702921][ T5987] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 144.719869][ T5987] usb 2-1: config 0 interface 0 has no altsetting 0 [ 144.738638][ T5987] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 144.752905][ T5987] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 144.776114][ T5987] usb 2-1: config 0 interface 0 has no altsetting 0 [ 144.791648][ T5987] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 144.821575][ T5987] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 144.850226][ T5987] usb 2-1: config 0 interface 0 has no altsetting 0 [ 144.863431][ T5987] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 144.876192][ T5987] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 144.887553][ T5987] usb 2-1: config 0 interface 0 has no altsetting 0 [ 144.897423][ T5987] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 144.907773][ T5987] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 144.917273][ T5987] usb 2-1: Product: syz [ 144.921583][ T5987] usb 2-1: Manufacturer: syz [ 144.930839][ T5987] usb 2-1: SerialNumber: syz [ 144.993821][ T5987] usb 2-1: config 0 descriptor?? [ 145.023137][ T5987] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 145.110202][ T6996] netlink: 204 bytes leftover after parsing attributes in process `syz.3.330'. [ 145.313271][ T5987] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 145.550878][ T5962] usb 2-1: USB disconnect, device number 7 [ 145.557336][ T30] audit: type=1400 audit(1754996096.418:356): avc: denied { ioctl } for pid=7001 comm="syz.3.332" path="socket:[13085]" dev="sockfs" ino=13085 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 145.586809][ T5962] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 145.609966][ T5987] usb 1-1: unable to get BOS descriptor or descriptor too short [ 145.619131][ T5987] usb 1-1: not running at top speed; connect to a high speed hub [ 145.628099][ T5987] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 145.644145][ T5987] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 145.684705][ T5987] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 145.698793][ T5987] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.719591][ T5987] usb 1-1: Product: syz [ 145.729966][ T7006] syzkaller1: entered promiscuous mode [ 145.730341][ T5987] usb 1-1: Manufacturer: syz [ 145.742952][ T7006] syzkaller1: entered allmulticast mode [ 145.749395][ T5987] usb 1-1: SerialNumber: syz [ 145.953412][ T48] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 145.990944][ T5987] usb 1-1: skipping empty audio interface (v1) [ 146.042417][ T5987] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 146.073054][ T5987] usb 1-1: USB disconnect, device number 10 [ 146.136653][ T48] usb 5-1: Using ep0 maxpacket: 32 [ 146.151226][ T48] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 146.171178][ T48] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.213899][ T48] usb 5-1: config 0 descriptor?? [ 146.248734][ T7027] syzkaller1: entered promiscuous mode [ 146.255100][ T7027] syzkaller1: entered allmulticast mode [ 146.963869][ T48] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 146.992049][ T48] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 147.004065][ T48] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 147.011222][ T48] usb 5-1: media controller created [ 147.039445][ T48] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 147.104244][ T30] audit: type=1400 audit(1754996097.958:357): avc: denied { mount } for pid=7032 comm="syz.2.345" name="/" dev="configfs" ino=1167 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 147.202553][ T48] az6027: usb out operation failed. (-71) [ 147.232628][ T48] az6027: usb out operation failed. (-71) [ 147.238857][ T30] audit: type=1400 audit(1754996097.988:358): avc: denied { search } for pid=7032 comm="syz.2.345" name="/" dev="configfs" ino=1167 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 147.266633][ T48] stb0899_attach: Driver disabled by Kconfig [ 147.272648][ T48] az6027: no front-end attached [ 147.272648][ T48] [ 147.306697][ T48] az6027: usb out operation failed. (-71) [ 147.316297][ T30] audit: type=1400 audit(1754996097.988:359): avc: denied { search } for pid=7032 comm="syz.2.345" name="/" dev="configfs" ino=1167 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 147.342496][ T48] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 147.366366][ T48] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input19 [ 147.389832][ T48] dvb-usb: schedule remote query interval to 400 msecs. [ 147.397254][ T30] audit: type=1400 audit(1754996097.988:360): avc: denied { search } for pid=7032 comm="syz.2.345" name="/" dev="configfs" ino=1167 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 147.420061][ T48] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 147.439055][ T48] usb 5-1: USB disconnect, device number 7 [ 147.446051][ T30] audit: type=1400 audit(1754996098.218:361): avc: denied { create } for pid=7040 comm="syz.3.350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 147.518771][ T48] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 147.630312][ T7056] input: syz0 as /devices/virtual/input/input20 [ 148.477368][ T7100] netlink: 204 bytes leftover after parsing attributes in process `syz.1.376'. [ 148.489416][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 148.489431][ T30] audit: type=1400 audit(1754996099.348:367): avc: denied { create } for pid=7101 comm="syz.2.377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 148.529354][ T30] audit: type=1400 audit(1754996099.358:368): avc: denied { sys_admin } for pid=7101 comm="syz.2.377" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 148.997279][ T30] audit: type=1400 audit(1754996099.848:369): avc: denied { map } for pid=7110 comm="syz.1.380" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 149.079394][ T30] audit: type=1400 audit(1754996099.848:370): avc: denied { execute } for pid=7110 comm="syz.1.380" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 149.171365][ T7117] SELinux: failed to load policy [ 149.177889][ T30] audit: type=1400 audit(1754996100.028:371): avc: denied { load_policy } for pid=7112 comm="syz.2.381" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 149.323187][ T7122] netlink: 204 bytes leftover after parsing attributes in process `syz.4.384'. [ 149.798293][ T7133] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 150.852892][ T48] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 150.940568][ T2029] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 151.035271][ T48] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 151.053931][ T48] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 151.085815][ T48] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 151.102962][ T48] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.116268][ T2029] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 151.135173][ T7159] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 151.140671][ T2029] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 151.153898][ T48] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 151.177734][ T2029] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 151.200496][ T2029] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 151.232832][ T2029] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 151.281473][ T2029] usb 3-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 151.302863][ T2029] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.314926][ T2029] usb 3-1: Product: syz [ 151.319110][ T2029] usb 3-1: Manufacturer: syz [ 151.340911][ T2029] usb 3-1: SerialNumber: syz [ 151.351191][ T2029] usb 3-1: config 0 descriptor?? [ 151.456214][ T5962] usb 5-1: USB disconnect, device number 8 [ 151.533328][ T2029] rc_core: IR keymap rc-imon-rsc not found [ 151.539196][ T2029] Registered IR keymap rc-empty [ 151.576450][ T2029] rc rc0: iMON Station as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 151.606942][ T2029] input: iMON Station as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input22 [ 151.627806][ T2029] imon_raw 3-1:0.0: probe with driver imon_raw failed with error -90 [ 151.681423][ T2029] usb 3-1: USB disconnect, device number 11 [ 151.740823][ T7187] netlink: 204 bytes leftover after parsing attributes in process `syz.1.410'. [ 152.113715][ T5922] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 152.372834][ T5922] usb 1-1: Using ep0 maxpacket: 32 [ 152.407040][ T5922] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 152.428584][ T5922] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 152.452671][ T5922] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 152.469698][ T5922] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.488106][ T5922] usb 1-1: Product: syz [ 152.502986][ T5922] usb 1-1: Manufacturer: syz [ 152.509068][ T5922] usb 1-1: SerialNumber: syz [ 153.116021][ T7189] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 154.105265][ T7218] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 154.333586][ T5922] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 154.340078][ T5922] cdc_ncm 1-1:1.0: dwNtbInMaxSize=8 is too small. Using 2048 [ 154.363595][ T5922] cdc_ncm 1-1:1.0: setting rx_max = 2048 [ 154.476052][ T7229] overlayfs: failed to set uuid (98/file0, err=-1); falling back to uuid=null. [ 154.513224][ T7229] overlayfs: failed to verify upper root origin [ 154.537788][ T7089] Set syz1 is full, maxelem 65536 reached [ 154.555790][ T5922] cdc_ncm 1-1:1.0: setting tx_max = 88 [ 154.620812][ T5922] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 154.645691][ T30] audit: type=1400 audit(1754996105.508:372): avc: denied { relabelfrom } for pid=7231 comm="syz.2.424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 154.672438][ T5922] usb 1-1: USB disconnect, device number 11 [ 154.673060][ T30] audit: type=1400 audit(1754996105.528:373): avc: denied { relabelto } for pid=7231 comm="syz.2.424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 154.683370][ T5922] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP) [ 154.852996][ T5962] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 155.012879][ T48] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 155.020652][ T5987] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 155.030174][ T5962] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 155.039985][ T5962] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 155.051724][ T5962] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 155.060803][ T5962] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.069665][ T5962] usb 4-1: Product: syz [ 155.073952][ T5962] usb 4-1: Manufacturer: syz [ 155.078551][ T5962] usb 4-1: SerialNumber: syz [ 155.085493][ T5962] usb 4-1: config 0 descriptor?? [ 155.091127][ T7234] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 155.099792][ T7234] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 155.112997][ T9] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 155.159149][ T7250] input: syz1 as /devices/virtual/input/input23 [ 155.183071][ T48] usb 5-1: Using ep0 maxpacket: 16 [ 155.188332][ T5987] usb 2-1: Using ep0 maxpacket: 16 [ 155.196178][ T48] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 155.209610][ T48] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 155.209746][ T5987] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 155.229878][ T5987] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 155.240797][ T5987] usb 2-1: config 0 has no interface number 0 [ 155.249504][ T48] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 155.258882][ T48] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.267195][ T48] usb 5-1: Product: syz [ 155.273321][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 155.274490][ T48] usb 5-1: Manufacturer: syz [ 155.283182][ T5987] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 155.286564][ T9] usb 3-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=c4.6d [ 155.292495][ T5987] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.318560][ T48] usb 5-1: SerialNumber: syz [ 155.323785][ T7234] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 155.324793][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.331066][ T7234] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 155.349367][ T48] usb 5-1: config 0 descriptor?? [ 155.354605][ T5987] usb 2-1: Product: syz [ 155.361543][ T9] usb 3-1: Product: syz [ 155.362457][ T48] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 155.372699][ T9] usb 3-1: Manufacturer: syz [ 155.376400][ T5987] usb 2-1: Manufacturer: syz [ 155.386401][ T48] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 155.394481][ T9] usb 3-1: SerialNumber: syz [ 155.394776][ T5987] usb 2-1: SerialNumber: syz [ 155.409245][ T5987] usb 2-1: config 0 descriptor?? [ 155.411859][ T9] usb 3-1: config 0 descriptor?? [ 155.416985][ T5987] usb 2-1: Found UVC 0.00 device syz (046d:08f3) [ 155.423510][ T9] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 155.432848][ T5987] usb 2-1: No valid video chain found. [ 155.503658][ T7255] netlink: 204 bytes leftover after parsing attributes in process `syz.0.435'. [ 155.873432][ T2029] usb 2-1: USB disconnect, device number 8 [ 156.199422][ T7268] netlink: 'syz.0.440': attribute type 1 has an invalid length. [ 156.207729][ T7268] netlink: 128 bytes leftover after parsing attributes in process `syz.0.440'. [ 156.217182][ T7268] netlink: 'syz.0.440': attribute type 2 has an invalid length. [ 156.225015][ T7268] netlink: 'syz.0.440': attribute type 1 has an invalid length. [ 156.281907][ T48] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 156.289049][ T48] em28xx 5-1:0.0: Config register raw data: 0xfe [ 156.297278][ T48] em28xx 5-1:0.0: I2S Audio (3 sample rate(s)) [ 156.305071][ T48] em28xx 5-1:0.0: No AC97 audio processor [ 156.678433][ T5962] dm9601 4-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 156.694385][ T5962] dm9601 4-1:0.0 eth1: register 'dm9601' at usb-dummy_hcd.3-1, Davicom DM96xx USB 10/100 Ethernet, 6e:00:00:00:00:00 [ 156.712639][ T5962] usb 4-1: USB disconnect, device number 9 [ 156.718861][ T48] usb 5-1: USB disconnect, device number 9 [ 156.726255][ T5962] dm9601 4-1:0.0 eth1: unregister 'dm9601' usb-dummy_hcd.3-1, Davicom DM96xx USB 10/100 Ethernet [ 156.864853][ T9] gspca_sonixj: reg_w1 err -71 [ 156.869786][ T9] sonixj 3-1:0.0: probe with driver sonixj failed with error -71 [ 156.880114][ T9] usb 3-1: USB disconnect, device number 12 [ 157.227817][ T30] audit: type=1400 audit(1754996108.088:374): avc: denied { setopt } for pid=7280 comm="syz.3.445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 157.322465][ T7283] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 157.437027][ T30] audit: type=1400 audit(1754996108.298:375): avc: denied { mounton } for pid=7288 comm="syz.1.449" path="/proc/275/task" dev="proc" ino=15487 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 157.491783][ T7294] loop8: detected capacity change from 0 to 7 [ 157.501591][ T7294] Dev loop8: unable to read RDB block 7 [ 157.508466][ T7294] loop8: unable to read partition table [ 157.516542][ T7294] loop8: partition table beyond EOD, truncated [ 157.528006][ T7294] loop_reread_partitions: partition scan of loop8 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 157.528006][ T7294] ) failed (rc=-5) [ 157.667429][ T7307] syz.3.455: attempt to access beyond end of device [ 157.667429][ T7307] nbd3: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 157.695730][ T7307] hfsplus: unable to find HFS+ superblock [ 157.733015][ T9] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 157.742867][ T5922] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 157.904454][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 157.921658][ T9] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 157.943096][ T5922] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 157.953238][ T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 157.964155][ T5922] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.981704][ T5922] usb 5-1: config 0 descriptor?? [ 157.988332][ T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 158.002068][ T9] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 158.021627][ T9] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 158.031322][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.271171][ T9] usb 3-1: GET_CAPABILITIES returned 0 [ 158.288251][ T9] usbtmc 3-1:16.0: can't read capabilities [ 158.393567][ T7329] loop7: detected capacity change from 0 to 16384 [ 158.403232][ T10] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 158.512285][ T48] usb 3-1: USB disconnect, device number 13 [ 158.584556][ T10] usb 1-1: config 0 has an invalid interface number: 128 but max is 0 [ 158.596876][ T10] usb 1-1: config 0 has no interface number 0 [ 158.614292][ T7332] loop7: detected capacity change from 16384 to 0 [ 158.622862][ C0] I/O error, dev loop7, sector 8704 op 0x0:(READ) flags 0x80700 phys_seg 13 prio class 2 [ 158.648919][ T10] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 158.666486][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.675035][ T10] usb 1-1: Product: syz [ 158.679249][ T10] usb 1-1: Manufacturer: syz [ 158.687790][ T10] usb 1-1: SerialNumber: syz [ 158.695627][ T10] usb 1-1: config 0 descriptor?? [ 158.713688][ T7336] netlink: 204 bytes leftover after parsing attributes in process `syz.3.467'. [ 159.198667][ T7341] netlink: 204 bytes leftover after parsing attributes in process `syz.2.469'. [ 159.273974][ T7343] input: syz0 as /devices/virtual/input/input24 [ 159.293894][ T5922] usb 5-1: Cannot set autoneg [ 159.301305][ T5922] MOSCHIP usb-ethernet driver 5-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 159.678748][ T5922] usb 5-1: USB disconnect, device number 10 [ 159.880821][ T30] audit: type=1400 audit(1754996110.738:376): avc: denied { watch } for pid=7357 comm="syz.1.477" path="/114/file0/control" dev="afs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 159.912919][ T10] usb 1-1: non-Atmel transceiver xxxxe6de [ 160.111395][ T10] usb 1-1: Firmware version (0.0) predates our first public release. [ 160.120144][ T30] audit: type=1400 audit(1754996110.978:377): avc: denied { read } for pid=7370 comm="syz.4.482" path="socket:[15693]" dev="sockfs" ino=15693 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 160.120758][ T10] usb 1-1: Please update to version 0.2 or newer [ 160.163560][ T10] usb 1-1: atusb_probe: initialization failed, error = -19 [ 160.190157][ T10] usb 1-1: USB disconnect, device number 12 [ 160.398642][ T30] audit: type=1400 audit(1754996111.258:378): avc: denied { create } for pid=7378 comm="syz.2.485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 160.421116][ T30] audit: type=1400 audit(1754996111.278:379): avc: denied { connect } for pid=7378 comm="syz.2.485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 160.503055][ T2029] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 160.672892][ T2029] usb 4-1: Using ep0 maxpacket: 32 [ 160.682572][ T2029] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 160.694872][ T2029] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 160.709782][ T30] audit: type=1400 audit(1754996111.568:380): avc: denied { write } for pid=7381 comm="syz.0.486" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 160.710092][ T2029] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 160.743698][ T2029] usb 4-1: config 1 has no interface number 0 [ 160.749825][ T2029] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 160.761459][ T2029] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 160.774698][ T2029] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 160.783827][ T2029] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.806157][ T2029] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 160.812199][ T7384] syz.0.487 (7384) used obsolete PPPIOCDETACH ioctl [ 161.014698][ T2029] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached [ 161.193418][ T10] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 161.278237][ T7404] netlink: 'syz.2.494': attribute type 5 has an invalid length. [ 161.352953][ T5962] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 161.375254][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 161.398479][ T10] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 161.413009][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.436428][ T10] usb 2-1: config 0 descriptor?? [ 161.484374][ T48] usb 4-1: USB disconnect, device number 10 [ 161.491665][ T48] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 161.536004][ T5962] usb 5-1: Using ep0 maxpacket: 32 [ 161.542672][ T5962] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 161.558229][ T5962] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 161.569269][ T5962] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 161.582018][ T5962] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.592234][ T5962] usb 5-1: config 0 descriptor?? [ 161.654623][ T10] usbhid 2-1:0.0: can't add hid device: -71 [ 161.660675][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 161.686107][ T10] usb 2-1: USB disconnect, device number 9 [ 161.707607][ T30] audit: type=1400 audit(1754996112.568:381): avc: denied { name_connect } for pid=7420 comm="syz.0.502" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 161.872235][ T30] audit: type=1400 audit(1754996112.728:382): avc: denied { map } for pid=7425 comm="syz.2.504" path="socket:[15777]" dev="sockfs" ino=15777 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 161.916407][ T7428] netlink: 204 bytes leftover after parsing attributes in process `syz.2.505'. [ 162.093011][ T48] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 162.127547][ T5962] hid_parser_main: 3 callbacks suppressed [ 162.127703][ T5962] ft260 0003:0403:6030.0008: unknown main item tag 0x7 [ 162.244026][ T5962] ft260 0003:0403:6030.0008: chip code: 6424 8183 [ 162.261781][ T48] usb 2-1: Using ep0 maxpacket: 32 [ 162.315060][ T48] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.333150][ T48] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 162.346232][ T48] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.357158][ T48] usb 2-1: config 0 descriptor?? [ 162.367418][ T48] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 162.374822][ T7431] serio: Serial port ptm0 [ 162.380357][ T48] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 162.419428][ T7433] input: syz1 as /devices/virtual/input/input25 [ 162.453624][ T5962] ft260 0003:0403:6030.0008: uart interface is not supported [ 162.493294][ T7438] syz_tun: entered allmulticast mode [ 162.498709][ T30] audit: type=1400 audit(1754996113.358:383): avc: denied { block_suspend } for pid=7435 comm="syz.3.508" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 162.529686][ T7437] syz_tun: left allmulticast mode [ 162.659874][ T5962] usb 5-1: USB disconnect, device number 11 [ 162.745178][ T7447] netlink: 204 bytes leftover after parsing attributes in process `syz.3.513'. [ 162.997761][ T7452] netlink: 4 bytes leftover after parsing attributes in process `syz.0.514'. [ 163.177328][ T7459] netlink: 204 bytes leftover after parsing attributes in process `syz.2.517'. [ 163.767669][ T7479] netlink: 204 bytes leftover after parsing attributes in process `syz.4.525'. [ 163.883241][ T2029] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 164.523273][ T5962] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 164.534770][ T9] usb 2-1: USB disconnect, device number 10 [ 164.546034][ T9] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 164.582889][ T2029] usb 4-1: Using ep0 maxpacket: 32 [ 164.591602][ T2029] usb 4-1: config 0 interface 0 has no altsetting 0 [ 164.682405][ T30] audit: type=1400 audit(1754996115.538:384): avc: denied { write } for pid=7491 comm="syz.1.529" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 164.723171][ T2029] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 164.733670][ T2029] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.741683][ T2029] usb 4-1: Product: syz [ 164.746190][ T2029] usb 4-1: Manufacturer: syz [ 164.750812][ T2029] usb 4-1: SerialNumber: syz [ 164.782283][ T2029] usb 4-1: config 0 descriptor?? [ 164.840727][ T5962] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 164.852334][ T5962] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 164.862681][ T5962] usb 3-1: config 0 interface 0 has no altsetting 0 [ 164.871713][ T5962] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 164.880822][ T5962] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.903827][ T5962] usb 3-1: config 0 descriptor?? [ 164.924664][ T7497] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 165.007902][ T7501] netlink: 12 bytes leftover after parsing attributes in process `syz.4.532'. [ 165.029802][ T7501] netlink: 12 bytes leftover after parsing attributes in process `syz.4.532'. [ 165.039735][ T154] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 165.048620][ T154] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 165.058620][ T154] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 165.070953][ T154] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 165.152639][ T7506] netlink: 'syz.4.535': attribute type 2 has an invalid length. [ 165.160762][ T7506] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.535'. [ 165.170593][ T7506] nbd: must specify a device to reconfigure [ 165.305771][ T2029] gs_usb 4-1:0.0: Configuring for 2 interfaces [ 166.004169][ T5962] usb 3-1: string descriptor 0 read error: -22 [ 166.122961][ T9] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 166.273232][ T5962] uclogic 0003:256C:006D.0009: interface is invalid, ignoring [ 166.283039][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 166.294179][ T5962] usb 3-1: USB disconnect, device number 14 [ 166.320165][ T9] usb 5-1: New USB device found, idVendor=10b9, idProduct=8000, bcdDevice=c0.fa [ 166.345259][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.355276][ T9] usb 5-1: Product: syz [ 166.359491][ T9] usb 5-1: Manufacturer: syz [ 166.364391][ T9] usb 5-1: SerialNumber: syz [ 166.378544][ T9] usb 5-1: config 0 descriptor?? [ 166.633587][ T2029] usb 4-1: USB disconnect, device number 11 [ 167.132001][ T30] audit: type=1400 audit(1754996117.988:385): avc: denied { accept } for pid=7545 comm="syz.2.549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 167.185066][ T5962] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 167.278036][ T7554] netlink: 204 bytes leftover after parsing attributes in process `syz.2.552'. [ 167.363175][ T5962] usb 1-1: Using ep0 maxpacket: 8 [ 167.419812][ T5962] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 167.432210][ T5962] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 167.747152][ T5962] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 167.769224][ T5962] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 167.787144][ T5962] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 167.802492][ T5962] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.818585][ T5962] usbtmc 1-1:16.0: bulk endpoints not found [ 167.838528][ T7557] overlayfs: failed to decode file handle (len=6, type=251, flags=0, err=-22) [ 168.135564][ T5990] usb 1-1: USB disconnect, device number 13 [ 168.141579][ T5962] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 168.296918][ T5962] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 168.307638][ T5962] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 168.311278][ T9] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 168.322274][ T5962] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 168.341246][ T5962] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.346407][ T9] dvb_usb_af9015 5-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 168.367801][ T9] usb 5-1: USB disconnect, device number 12 [ 168.572270][ T5962] usb 3-1: usb_control_msg returned -32 [ 168.578033][ T5962] usbtmc 3-1:16.0: can't read capabilities [ 168.913013][ T9] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 169.096291][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 169.107483][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 169.117740][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 169.131803][ T9] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 169.141255][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.151782][ T9] usb 1-1: config 0 descriptor?? [ 169.170170][ T7582] netlink: 204 bytes leftover after parsing attributes in process `syz.1.564'. [ 169.374295][ T7591] input: syz1 as /devices/virtual/input/input26 [ 169.589373][ T9] plantronics 0003:047F:FFFF.000A: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 169.717214][ T30] audit: type=1400 audit(1754996120.578:386): avc: denied { read } for pid=7597 comm="syz.4.571" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 169.808390][ T5990] usb 1-1: USB disconnect, device number 14 [ 169.926793][ T30] audit: type=1400 audit(1754996120.578:387): avc: denied { open } for pid=7597 comm="syz.4.571" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 170.544693][ T7608] netlink: 4 bytes leftover after parsing attributes in process `syz.3.575'. [ 170.553761][ T7608] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 170.589713][ T7608] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 170.733674][ T9] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 170.894709][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 170.901275][ T9] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 170.910126][ T9] usb 2-1: config 0 has no interface number 0 [ 170.917328][ T9] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 170.918025][ T5962] usb 3-1: USB disconnect, device number 15 [ 170.927631][ T9] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 170.944650][ T9] usb 2-1: config 0 interface 41 has no altsetting 0 [ 170.952897][ T10] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 170.961465][ T9] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 170.971178][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.979471][ T9] usb 2-1: Product: syz [ 170.984408][ T9] usb 2-1: Manufacturer: syz [ 170.989008][ T9] usb 2-1: SerialNumber: syz [ 170.996296][ T9] usb 2-1: config 0 descriptor?? [ 171.001725][ T7606] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 171.009288][ T7606] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 171.136917][ T10] usb 4-1: config 0 has an invalid interface number: 120 but max is 0 [ 171.146887][ T10] usb 4-1: config 0 has no interface number 0 [ 171.153570][ T10] usb 4-1: config 0 interface 120 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 171.165358][ T10] usb 4-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 171.174935][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.196184][ T10] usb 4-1: config 0 descriptor?? [ 171.206457][ T10] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.120/input/input27 [ 171.237990][ T7606] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 171.247907][ T7606] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 171.273145][ T7624] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 171.650708][ T10] usb 4-1: USB disconnect, device number 12 [ 171.665573][ T9] Error reading MAC address [ 171.676906][ T7606] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 171.685564][ T7606] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 171.863773][ T7641] evm: overlay not supported [ 172.345413][ T9] sr9700 2-1:0.41 eth1: register 'sr9700' at usb-dummy_hcd.1-1, CoreChip SR9700 USB Ethernet, d6:2e:d9:6f:2e:b1 [ 172.360518][ T9] usb 2-1: USB disconnect, device number 11 [ 172.367428][ T9] sr9700 2-1:0.41 eth1: unregister 'sr9700' usb-dummy_hcd.1-1, CoreChip SR9700 USB Ethernet [ 172.393876][ T5990] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 172.402839][ T10] usb 5-1: new low-speed USB device number 13 using dummy_hcd [ 172.554561][ T10] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 172.562660][ T10] usb 5-1: config 0 has no interface number 0 [ 172.563523][ T5990] usb 3-1: Using ep0 maxpacket: 16 [ 172.569474][ T10] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 172.582202][ T5990] usb 3-1: config 6 has an invalid interface number: 59 but max is 0 [ 172.589493][ T10] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 172.604520][ T5990] usb 3-1: config 6 has no interface number 0 [ 172.607990][ T10] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 172.619966][ T5990] usb 3-1: config 6 interface 59 has no altsetting 0 [ 172.620213][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.643741][ T30] audit: type=1400 audit(1754996123.498:388): avc: denied { read } for pid=7662 comm="syz.3.596" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 172.652495][ T5990] usb 3-1: New USB device found, idVendor=0698, idProduct=6b82, bcdDevice=d3.eb [ 172.665794][ C0] vkms_vblank_simulate: vblank timer overrun [ 172.667195][ T30] audit: type=1400 audit(1754996123.498:389): avc: denied { open } for pid=7662 comm="syz.3.596" path="/109/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 172.680570][ T5990] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.685873][ T7664] block device autoloading is deprecated and will be removed. [ 172.710515][ T5990] usb 3-1: Product: syz [ 172.713242][ T10] usb 5-1: config 0 descriptor?? [ 172.719723][ T5990] usb 3-1: Manufacturer: syz [ 172.737246][ T7654] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 172.745786][ T5990] usb 3-1: SerialNumber: syz [ 172.751269][ T10] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 172.968959][ T10] usb 5-1: USB disconnect, device number 13 [ 173.001561][ T5990] usb 3-1: USB disconnect, device number 16 [ 173.198327][ T7677] 9pnet_fd: p9_fd_create_tcp (7677): problem connecting socket to 127.0.0.1 [ 173.820733][ T7690] netlink: 20 bytes leftover after parsing attributes in process `syz.3.606'. [ 173.853853][ T10] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 173.979669][ T30] audit: type=1400 audit(1754996124.838:390): avc: denied { bind } for pid=7694 comm="syz.3.608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 173.999501][ C0] vkms_vblank_simulate: vblank timer overrun [ 174.024747][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 174.041359][ T10] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 174.061193][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.081044][ T10] usb 5-1: config 0 descriptor?? [ 174.093901][ T10] pwc: Askey VC010 type 2 USB webcam detected. [ 174.163027][ T2029] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 174.222716][ T30] audit: type=1400 audit(1754996125.078:391): avc: denied { create } for pid=7699 comm="syz.3.610" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 174.263200][ T30] audit: type=1400 audit(1754996125.088:392): avc: denied { read } for pid=7699 comm="syz.3.610" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 174.292328][ T30] audit: type=1400 audit(1754996125.088:393): avc: denied { open } for pid=7699 comm="syz.3.610" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 174.333070][ T2029] usb 3-1: Using ep0 maxpacket: 32 [ 174.340259][ T30] audit: type=1400 audit(1754996125.088:394): avc: denied { ioctl } for pid=7699 comm="syz.3.610" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 ioctlcmd=0x9405 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 174.370656][ T30] audit: type=1400 audit(1754996125.118:395): avc: denied { unlink } for pid=5846 comm="syz-executor" name="file0" dev="tmpfs" ino=618 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 174.395123][ T2029] usb 3-1: config 32 has an invalid interface number: 40 but max is 0 [ 174.403396][ T2029] usb 3-1: config 32 has no interface number 0 [ 174.409680][ T2029] usb 3-1: config 32 interface 40 has no altsetting 0 [ 174.419309][ T2029] usb 3-1: New USB device found, idVendor=050d, idProduct=1203, bcdDevice=60.3f [ 174.443559][ T2029] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.452824][ T2029] usb 3-1: Product: syz [ 174.458098][ T2029] usb 3-1: Manufacturer: syz [ 174.464714][ T2029] usb 3-1: SerialNumber: syz [ 174.477980][ T2029] belkin_sa 3-1:32.40: Belkin / Peracom / GoHubs USB Serial Adapter converter detected [ 174.493742][ T2029] usb 3-1: bcdDevice: 603f, bfc: 0 [ 174.501163][ T2029] usb 3-1: Belkin / Peracom / GoHubs USB Serial Adapter converter now attached to ttyUSB0 [ 174.521235][ T10] pwc: recv_control_msg error -32 req 02 val 2b00 [ 174.531453][ T10] pwc: recv_control_msg error -32 req 02 val 2700 [ 174.538866][ T10] pwc: recv_control_msg error -32 req 02 val 2c00 [ 174.546190][ T10] pwc: recv_control_msg error -32 req 04 val 1000 [ 174.553252][ T10] pwc: recv_control_msg error -32 req 04 val 1300 [ 174.560754][ T10] pwc: recv_control_msg error -32 req 04 val 1400 [ 174.620688][ T30] audit: type=1400 audit(1754996125.478:396): avc: denied { execute } for pid=7706 comm="syz.1.613" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=17149 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 174.697853][ T7693] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.713550][ T7693] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.737122][ T30] audit: type=1400 audit(1754996125.598:397): avc: denied { append } for pid=7692 comm="syz.2.607" name="event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 174.778918][ T2029] usb 3-1: USB disconnect, device number 17 [ 174.793555][ T2029] belkin ttyUSB0: Belkin / Peracom / GoHubs USB Serial Adapter converter now disconnected from ttyUSB0 [ 174.809696][ T10] pwc: recv_control_msg error -71 req 02 val 2100 [ 174.821544][ T10] pwc: recv_control_msg error -71 req 04 val 1500 [ 174.834722][ T2029] belkin_sa 3-1:32.40: device disconnected [ 174.843589][ T10] pwc: recv_control_msg error -71 req 02 val 2500 [ 174.858793][ T10] pwc: recv_control_msg error -71 req 02 val 2400 [ 174.865878][ T10] pwc: recv_control_msg error -71 req 02 val 2600 [ 174.882291][ T10] pwc: recv_control_msg error -71 req 02 val 2900 [ 174.889452][ T10] pwc: recv_control_msg error -71 req 02 val 2800 [ 174.908231][ T10] pwc: recv_control_msg error -71 req 04 val 1100 [ 174.915224][ T10] pwc: recv_control_msg error -71 req 04 val 1200 [ 174.926647][ T10] pwc: Registered as video103. [ 174.941291][ T10] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input28 [ 174.967863][ T10] usb 5-1: USB disconnect, device number 14 [ 175.536700][ T7731] netlink: 204 bytes leftover after parsing attributes in process `syz.3.621'. [ 176.480610][ T1155] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 176.594399][ T1155] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 176.680898][ T1155] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 176.789215][ T1155] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 177.145872][ T1155] bridge_slave_1: left allmulticast mode [ 177.152025][ T1155] bridge_slave_1: left promiscuous mode [ 177.161722][ T1155] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.196933][ T1155] bridge_slave_0: left allmulticast mode [ 177.213242][ T1155] bridge_slave_0: left promiscuous mode [ 177.219179][ T1155] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.932082][ T5849] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 177.945259][ T5849] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 177.956358][ T5849] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 177.964026][ T5849] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 177.971468][ T5849] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 177.985128][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 177.985139][ T30] audit: type=1400 audit(1754996128.838:411): avc: denied { mounton } for pid=7762 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 178.612223][ T1155] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 178.641719][ T1155] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 178.651195][ T1155] bond0 (unregistering): Released all slaves [ 178.701212][ T7768] netlink: 204 bytes leftover after parsing attributes in process `syz.3.636'. [ 178.770362][ T7762] wg1 speed is unknown, defaulting to 1000 [ 179.376163][ T7762] chnl_net:caif_netlink_parms(): no params data found [ 179.449692][ T7784] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 179.512575][ T1155] hsr_slave_0: left promiscuous mode [ 179.518554][ T1155] hsr_slave_1: left promiscuous mode [ 179.524826][ T1155] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 179.539396][ T1155] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 179.564015][ T1155] pim6reg (unregistering): left allmulticast mode [ 179.855477][ T7798] netlink: 12 bytes leftover after parsing attributes in process `syz.1.642'. [ 180.043819][ T5849] Bluetooth: hci1: command tx timeout [ 180.303025][ T1155] team0 (unregistering): Port device team_slave_1 removed [ 180.343261][ T1155] team0 (unregistering): Port device team_slave_0 removed [ 180.531779][ T30] audit: type=1400 audit(1754996131.388:412): avc: denied { map } for pid=7806 comm="syz.1.646" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 180.568518][ T30] audit: type=1400 audit(1754996131.388:413): avc: denied { call } for pid=7806 comm="syz.1.646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 180.589378][ T30] audit: type=1400 audit(1754996131.388:414): avc: denied { transfer } for pid=7806 comm="syz.1.646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 180.926438][ T7762] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.934894][ T7762] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.942180][ T7762] bridge_slave_0: entered allmulticast mode [ 180.952141][ T7762] bridge_slave_0: entered promiscuous mode [ 180.962524][ T7762] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.032444][ T7762] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.040329][ T7762] bridge_slave_1: entered allmulticast mode [ 181.050329][ T7762] bridge_slave_1: entered promiscuous mode [ 181.129245][ T7762] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 181.141432][ T7762] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 181.220143][ T7762] team0: Port device team_slave_0 added [ 181.241583][ T7762] team0: Port device team_slave_1 added [ 181.308500][ T7762] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 181.322046][ T7762] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 181.352119][ T7762] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 181.365104][ T7762] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 181.372147][ T7762] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 181.409004][ T7762] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 181.444223][ T7762] hsr_slave_0: entered promiscuous mode [ 181.450368][ T7762] hsr_slave_1: entered promiscuous mode [ 181.459750][ T7762] debugfs: 'hsr0' already exists in 'hsr' [ 181.465929][ T7762] Cannot create hsr debugfs directory [ 181.598752][ T1155] IPVS: stop unused estimator thread 0... [ 181.732242][ T7762] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 181.742197][ T7762] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 181.756121][ T7762] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 181.766088][ T7762] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 181.789661][ T7762] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.796810][ T7762] bridge0: port 2(bridge_slave_1) entered forwarding state [ 181.861903][ T7762] 8021q: adding VLAN 0 to HW filter on device bond0 [ 181.877533][ T1155] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.892473][ T7762] 8021q: adding VLAN 0 to HW filter on device team0 [ 181.908828][ T3458] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.916012][ T3458] bridge0: port 1(bridge_slave_0) entered forwarding state [ 181.934400][ T3458] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.941483][ T3458] bridge0: port 2(bridge_slave_1) entered forwarding state [ 181.975962][ T7762] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 182.019041][ T30] audit: type=1400 audit(1754996132.878:415): avc: denied { sys_module } for pid=7762 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 182.094233][ T7762] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 182.123248][ T5849] Bluetooth: hci1: command tx timeout [ 182.205476][ T5987] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 182.376616][ T5987] usb 4-1: Using ep0 maxpacket: 16 [ 182.382389][ T7762] veth0_vlan: entered promiscuous mode [ 182.389502][ T5987] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 182.398286][ T5987] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 182.400866][ T7762] veth1_vlan: entered promiscuous mode [ 182.409720][ T5987] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 182.428181][ T5987] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 182.437642][ T5987] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.445637][ T7762] veth0_macvtap: entered promiscuous mode [ 182.450273][ T7762] veth1_macvtap: entered promiscuous mode [ 182.453726][ T5987] usb 4-1: Product: syz [ 182.461868][ T5987] usb 4-1: Manufacturer: syz [ 182.467479][ T5987] usb 4-1: SerialNumber: syz [ 182.472188][ T7762] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 182.487802][ T7762] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 182.499994][ T1155] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.509243][ T3458] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.519547][ T3458] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.530348][ T3458] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.584630][ T5962] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 182.589867][ T1155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.600631][ T1155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.628706][ T3458] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.637794][ T3458] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.656040][ T30] audit: type=1400 audit(1754996133.518:416): avc: denied { mounton } for pid=7762 comm="syz-executor" path="/root/syzkaller.8VOYvc/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 182.776395][ T5962] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 182.796518][ T5962] usb 2-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 182.807569][ T5962] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.845398][ T5962] usb 2-1: config 0 descriptor?? [ 182.894352][ T5987] usb 4-1: 0:2 : does not exist [ 183.209289][ T30] audit: type=1400 audit(1754996133.908:417): avc: denied { write } for pid=7862 comm="syz.2.659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 183.391999][ T30] audit: type=1400 audit(1754996134.218:418): avc: denied { ioctl } for pid=7836 comm="syz.3.654" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 183.429521][ T30] audit: type=1400 audit(1754996134.248:419): avc: denied { read write } for pid=5850 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 183.473296][ T5962] usbhid 2-1:0.0: can't add hid device: -71 [ 183.489401][ T5962] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 183.498376][ T30] audit: type=1400 audit(1754996134.248:420): avc: denied { open } for pid=5850 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 183.500693][ T5962] usb 2-1: USB disconnect, device number 12 [ 183.615581][ T30] audit: type=1400 audit(1754996134.248:421): avc: denied { ioctl } for pid=5850 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 183.699875][ T30] audit: type=1400 audit(1754996134.398:422): avc: denied { read write } for pid=7867 comm="syz.2.660" name="vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 183.806027][ T30] audit: type=1400 audit(1754996134.398:423): avc: denied { open } for pid=7867 comm="syz.2.660" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 183.845838][ T30] audit: type=1400 audit(1754996134.398:424): avc: denied { ioctl } for pid=7867 comm="syz.2.660" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 183.879689][ T30] audit: type=1400 audit(1754996134.468:425): avc: denied { read } for pid=7870 comm="syz.2.661" dev="nsfs" ino=4026532891 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 183.902608][ T30] audit: type=1400 audit(1754996134.468:426): avc: denied { open } for pid=7870 comm="syz.2.661" path="net:[4026532891]" dev="nsfs" ino=4026532891 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 184.204998][ T5849] Bluetooth: hci1: command tx timeout [ 184.761432][ T5987] usb 4-1: USB disconnect, device number 13 [ 185.610939][ T5922] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 185.640432][ T5922] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 185.798331][ T5864] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 185.812993][ T5864] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 185.823130][ T5864] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 185.833269][ T5864] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 185.841882][ T5864] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 186.176401][ T7910] chnl_net:caif_netlink_parms(): no params data found [ 186.284218][ T5849] Bluetooth: hci1: command tx timeout [ 186.291015][ T7924] bridge: RTM_NEWNEIGH with invalid ether address [ 186.671307][ T7936] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 186.692117][ T7910] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.700178][ T7910] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.717547][ T7910] bridge_slave_0: entered allmulticast mode [ 186.762548][ T7910] bridge_slave_0: entered promiscuous mode [ 186.779482][ T7910] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.795183][ T7910] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.802493][ T7910] bridge_slave_1: entered allmulticast mode [ 186.812120][ T7910] bridge_slave_1: entered promiscuous mode [ 186.875394][ T7910] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 186.897285][ T7910] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 186.906572][ T5987] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 186.982871][ T7910] team0: Port device team_slave_0 added [ 187.010149][ T7910] team0: Port device team_slave_1 added [ 187.084193][ T5987] usb 3-1: Using ep0 maxpacket: 16 [ 187.120276][ T5987] usb 3-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85 [ 187.150300][ T5987] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.191055][ T5987] usb 3-1: Product: syz [ 187.255793][ T5987] usb 3-1: Manufacturer: syz [ 187.321104][ T5987] usb 3-1: SerialNumber: syz [ 187.588476][ T5987] usb 3-1: config 0 descriptor?? [ 187.620713][ T5987] usb 3-1: selecting invalid altsetting 1 [ 187.627597][ T7910] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 187.651002][ T5987] technisat-usb2: could not set alternate setting to 0 [ 187.658481][ T7910] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.684912][ T7910] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 187.693715][ T7950] overlayfs: statfs failed on './file0' [ 187.737191][ T7910] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 187.753066][ T7910] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.812055][ T7910] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 187.851841][ T5987] technisat-usb2: firmware version: 0.0 [ 187.863881][ T5987] dvb-usb: found a 'Technisat SkyStar USB HD (DVB-S/S2)' in warm state. [ 187.884369][ T5849] Bluetooth: hci5: command tx timeout [ 187.938453][ T7910] hsr_slave_0: entered promiscuous mode [ 187.949810][ T7910] hsr_slave_1: entered promiscuous mode [ 187.956389][ T7910] debugfs: 'hsr0' already exists in 'hsr' [ 187.962129][ T7910] Cannot create hsr debugfs directory [ 188.701159][ T2029] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 188.719291][ T7938] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.743238][ T7938] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.746710][ T5987] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 188.770942][ T5987] dvbdev: DVB: registering new adapter (Technisat SkyStar USB HD (DVB-S/S2)) [ 188.775737][ T30] kauditd_printk_skb: 67 callbacks suppressed [ 188.775756][ T30] audit: type=1400 audit(1754996139.638:494): avc: denied { bind } for pid=7955 comm="syz.1.688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 188.781354][ T5987] usb 3-1: media controller created [ 188.811768][ T5987] technisat-usb2: i2c-error: out failed 53 = -22 [ 188.897887][ T5987] dvb-usb: MAC address reading failed. [ 188.925306][ T2029] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 189.003058][ T30] audit: type=1400 audit(1754996139.678:495): avc: denied { setopt } for pid=7955 comm="syz.1.688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 189.039287][ T7910] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 189.049701][ T2029] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 189.050548][ T5987] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 189.110450][ T2029] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 189.112872][ T7910] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 189.122975][ T30] audit: type=1400 audit(1754996139.678:496): avc: denied { accept } for pid=7955 comm="syz.1.688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 189.153182][ T2029] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.234036][ T30] audit: type=1400 audit(1754996139.678:497): avc: denied { write } for pid=7955 comm="syz.1.688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 189.253826][ T30] audit: type=1400 audit(1754996139.678:498): avc: denied { read } for pid=7955 comm="syz.1.688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 189.280019][ T2029] usb 4-1: config 0 descriptor?? [ 189.485005][ T7910] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 189.530456][ T7910] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 189.708430][ T5987] DVB: Unable to find symbol stv090x_attach() [ 189.735682][ T5987] dvb-usb: no frontend was attached by 'Technisat SkyStar USB HD (DVB-S/S2)' [ 189.791779][ T30] audit: type=1400 audit(1754996140.648:499): avc: denied { open } for pid=7953 comm="syz.3.690" path="/dev/ptyqb" dev="devtmpfs" ino=130 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 189.817194][ T2029] cp2112 0003:10C4:EA90.000C: unknown main item tag 0x0 [ 189.983591][ T2029] cp2112 0003:10C4:EA90.000C: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 189.987290][ T5849] Bluetooth: hci5: command tx timeout [ 190.003858][ T30] audit: type=1400 audit(1754996140.648:500): avc: denied { watch } for pid=7977 comm="syz.1.694" path="/163/control" dev="tmpfs" ino=907 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 190.027862][ T30] audit: type=1400 audit(1754996140.778:501): avc: denied { read } for pid=7981 comm="syz.2.695" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 190.052528][ T30] audit: type=1400 audit(1754996140.778:502): avc: denied { open } for pid=7981 comm="syz.2.695" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 190.122990][ T5987] rc_core: IR keymap rc-technisat-usb2 not found [ 190.125516][ T7910] 8021q: adding VLAN 0 to HW filter on device bond0 [ 190.140858][ T5987] Registered IR keymap rc-empty [ 190.153607][ T2029] cp2112 0003:10C4:EA90.000C: Part Number: 0x00 Device Version: 0x00 [ 190.156256][ T5987] rc rc0: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 190.176272][ T5987] input: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input29 [ 190.193565][ T30] audit: type=1400 audit(1754996141.048:503): avc: denied { read } for pid=5203 comm="acpid" name="event4" dev="devtmpfs" ino=2926 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 190.222169][ T7910] 8021q: adding VLAN 0 to HW filter on device team0 [ 190.259208][ T5987] dvb-usb: schedule remote query interval to 100 msecs. [ 190.270001][ T5987] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully initialized and connected. [ 190.281808][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.288962][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 190.304367][ T5987] usb 3-1: USB disconnect, device number 18 [ 190.341777][ T3458] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.345415][ T5987] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully deinitialized and disconnected. [ 190.348982][ T3458] bridge0: port 2(bridge_slave_1) entered forwarding state [ 190.643088][ T5987] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 190.770711][ T7954] cp2112 0003:10C4:EA90.000C: Multi-message I2C transactions not supported [ 190.806499][ T7910] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 190.812975][ T2029] cp2112 0003:10C4:EA90.000C: error reading lock byte: -71 [ 190.826790][ T2029] usb 4-1: USB disconnect, device number 14 [ 190.841025][ T5987] usb 3-1: Using ep0 maxpacket: 8 [ 190.854744][ T5987] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 190.864290][ T5987] usb 3-1: config 0 has no interface number 0 [ 190.870414][ T5987] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 190.918872][ T5987] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 190.928691][ T5987] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.941542][ T5987] usb 3-1: config 0 descriptor?? [ 190.962596][ T5987] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 191.170205][ T7910] veth0_vlan: entered promiscuous mode [ 191.181170][ T7910] veth1_vlan: entered promiscuous mode [ 191.209121][ T7910] veth0_macvtap: entered promiscuous mode [ 191.240620][ T7910] veth1_macvtap: entered promiscuous mode [ 191.281456][ T7910] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 191.288217][ T5987] usb 3-1: USB disconnect, device number 19 [ 191.292551][ T7910] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 191.325210][ T1155] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.340302][ T1155] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.351151][ T1155] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.361642][ T1155] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.422286][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.441326][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.478955][ T73] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.487962][ T73] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.054163][ T5849] Bluetooth: hci5: command tx timeout [ 192.270548][ T8019] tipc: Started in network mode [ 192.277256][ T8019] tipc: Node identity 7f000001, cluster identity 4711 [ 192.297690][ T8019] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 192.308264][ T8019] tipc: Enabled bearer , priority 10 [ 192.345328][ T8019] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 192.359582][ T8019] tipc: Enabled bearer , priority 10 [ 192.384355][ T8011] delete_channel: no stack [ 192.434634][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 192.572923][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 192.713451][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 192.853118][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 192.993019][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 193.132919][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 193.272887][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 193.414192][ T9] tipc: Node number set to 2130706433 [ 193.552916][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 193.832924][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 193.981608][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.987992][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.123188][ T5849] Bluetooth: hci5: command tx timeout [ 194.911777][ T5962] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 195.496210][ T30] kauditd_printk_skb: 40 callbacks suppressed [ 195.496227][ T30] audit: type=1400 audit(1754996402.351:544): avc: denied { create } for pid=8081 comm="syz.2.726" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 195.523234][ T5962] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 195.548234][ T5962] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 195.562938][ T5962] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 196.051957][ T5849] Bluetooth: hci2: command 0x0406 tx timeout [ 196.059983][ T5863] Bluetooth: hci3: command 0x0406 tx timeout [ 196.066276][ T5962] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 196.095519][ T30] audit: type=1400 audit(1754996402.641:545): avc: denied { create } for pid=8083 comm="syz.5.727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 196.138003][ T5962] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.222728][ T5962] usb 7-1: config 0 descriptor?? [ 196.263557][ T30] audit: type=1400 audit(1754996402.641:546): avc: denied { connect } for pid=8083 comm="syz.5.727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 196.347007][ T30] audit: type=1400 audit(1754996402.641:547): avc: denied { write } for pid=8083 comm="syz.5.727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 196.352226][ T9] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 196.378473][ T30] audit: type=1400 audit(1754996402.941:548): avc: denied { ioctl } for pid=8081 comm="syz.2.726" path="socket:[21328]" dev="sockfs" ino=21328 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 196.562464][ T30] audit: type=1400 audit(1754996403.422:549): avc: denied { read } for pid=8091 comm="syz.5.729" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 196.620094][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 196.620094][ T30] audit: type=1400 audit(1754996403.422:550): avc: denied { open } for pid=8091 comm="syz.5.729" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 196.620138][ T30] audit: type=1400 audit(1754996403.422:551): avc: denied { ioctl } for pid=8091 comm="syz.5.729" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x64b2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 196.653181][ T9] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 196.743546][ T5962] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 196.755966][ T9] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 196.811557][ T9] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 196.839160][ T9] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 196.858088][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 196.869219][ T9] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 196.882823][ T9] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 196.891316][ T9] usb 4-1: Product: syz [ 196.899765][ T9] usb 4-1: Manufacturer: syz [ 196.908986][ T9] usb 4-1: SerialNumber: syz [ 196.919559][ T9] usb 4-1: config 0 descriptor?? [ 196.928038][ T9] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 197.133439][ T9] ldusb 4-1:0.0: LD USB Device #1 now attached to major 180 minor 1 [ 197.429102][ C0] plantronics 0003:047F:FFFF.000D: hid_field_extract() called with n (132) > 32! (syz.6.721) [ 197.444242][ T8108] netlink: 204 bytes leftover after parsing attributes in process `syz.2.734'. [ 197.481333][ C0] net_ratelimit: 3 callbacks suppressed [ 197.481352][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 197.529827][ T30] audit: type=1400 audit(1754996404.382:552): avc: denied { create } for pid=8106 comm="syz.1.735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 198.351343][ T5962] usb 7-1: reset high-speed USB device number 2 using dummy_hcd [ 198.360299][ C1] raw-gadget.0 gadget.6: ignoring, device is not running [ 198.415020][ T30] audit: type=1400 audit(1754996404.412:553): avc: denied { connect } for pid=8106 comm="syz.1.735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 198.434424][ C0] vkms_vblank_simulate: vblank timer overrun [ 198.520779][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 199.560319][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 199.603691][ T5922] usb 4-1: USB disconnect, device number 15 [ 199.644983][ T5922] ldusb 4-1:0.0: LD USB Device #1 now disconnected [ 200.599740][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 200.651344][ T5987] usb 7-1: USB disconnect, device number 2 [ 200.874657][ T8133] batman_adv: batadv0: Adding interface: dummy0 [ 200.881238][ T8133] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 200.906425][ C0] vkms_vblank_simulate: vblank timer overrun [ 200.968102][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 200.968117][ T30] audit: type=1400 audit(1754996407.824:555): avc: denied { ioctl } for pid=8132 comm="syz.1.741" path="socket:[21479]" dev="sockfs" ino=21479 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 201.003245][ T8133] batman_adv: batadv0: Interface activated: dummy0 [ 201.028959][ T8138] netlink: 'syz.1.741': attribute type 10 has an invalid length. [ 201.219701][ T8137] batadv0: mtu less than device minimum [ 201.237840][ T8137] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 201.249562][ T8137] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 201.270868][ T8137] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 201.287771][ T8137] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 201.299733][ T8137] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 201.383788][ T8138] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 201.420620][ T8138] batadv0: entered promiscuous mode [ 201.435772][ T8138] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 201.708678][ T30] audit: type=1400 audit(1754996408.564:556): avc: denied { setattr } for pid=8143 comm="syz.3.744" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 201.885636][ T30] audit: type=1400 audit(1754996408.744:557): avc: denied { bind } for pid=8147 comm="syz.2.746" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 202.204663][ T30] audit: type=1400 audit(1754996409.064:558): avc: denied { read write } for pid=8150 comm="syz.3.745" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 202.493650][ T5922] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 202.679390][ C0] net_ratelimit: 16 callbacks suppressed [ 202.679416][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 202.713974][ T30] audit: type=1400 audit(1754996409.064:559): avc: denied { open } for pid=8150 comm="syz.3.745" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 202.908739][ T5922] usb 6-1: Using ep0 maxpacket: 32 [ 203.020742][ T5922] usb 6-1: config 0 has an invalid interface number: 136 but max is 0 [ 203.073529][ T5922] usb 6-1: config 0 has no interface number 0 [ 203.114722][ T5922] usb 6-1: config 0 interface 136 altsetting 0 has an endpoint descriptor with address 0xAD, changing to 0x8D [ 203.158518][ T5922] usb 6-1: config 0 interface 136 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 203.177225][ T5922] usb 6-1: config 0 interface 136 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 0 [ 203.203623][ T5922] usb 6-1: config 0 interface 136 altsetting 0 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 203.221017][ T5922] usb 6-1: config 0 interface 136 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 203.245869][ T5922] usb 6-1: New USB device found, idVendor=0763, idProduct=1021, bcdDevice=8e.c0 [ 203.281605][ T30] audit: type=1804 audit(1754996410.125:560): pid=8159 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.1.749" name="/newroot/179/file1" dev="fuse" ino=1 res=1 errno=0 [ 203.309375][ T30] audit: type=1804 audit(1754996410.135:561): pid=8158 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.749" name="/newroot/179/file1" dev="fuse" ino=1 res=1 errno=0 [ 203.333510][ T30] audit: type=1800 audit(1754996410.135:562): pid=8158 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.749" name="/" dev="fuse" ino=1 res=0 errno=0 [ 203.363646][ T5922] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.423914][ T5922] usb 6-1: config 0 descriptor?? [ 203.436649][ T30] audit: type=1400 audit(1754996410.295:563): avc: denied { read } for pid=8161 comm="syz.2.752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 203.446153][ T5922] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 203.718174][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 204.454822][ T30] audit: type=1400 audit(1754996411.236:564): avc: denied { mount } for pid=8160 comm="syz.3.750" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 204.546501][ T5922] snd-usb-audio 6-1:0.136: probe with driver snd-usb-audio failed with error -2 [ 204.757654][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 204.830495][ T8170] syzkaller0: entered promiscuous mode [ 204.836944][ T8170] syzkaller0: entered allmulticast mode [ 204.848973][ T8151] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 204.857343][ T8151] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 205.184480][ T8151] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 205.209164][ T8151] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 205.797165][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 206.080000][ T5922] usb 6-1: USB disconnect, device number 2 [ 206.160122][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 206.160143][ T30] audit: type=1400 audit(1754996412.986:569): avc: denied { read } for pid=8188 comm="syz.5.757" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 206.257051][ T30] audit: type=1400 audit(1754996412.986:570): avc: denied { open } for pid=8188 comm="syz.5.757" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 206.818433][ T30] audit: type=1400 audit(1754996413.187:571): avc: denied { create } for pid=8184 comm="syz.6.755" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 206.837845][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 206.965568][ T30] audit: type=1400 audit(1754996413.187:572): avc: denied { write } for pid=8184 comm="syz.6.755" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 207.626132][ T5922] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 207.875591][ T5922] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 207.886809][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 207.915999][ T5922] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 207.944976][ T5922] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 207.961959][ T5922] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.995753][ T8197] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 208.006179][ T8197] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 208.020654][ T5922] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 208.087437][ T30] audit: type=1400 audit(1754996414.947:573): avc: denied { read } for pid=8200 comm="syz.5.760" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 208.150845][ T30] audit: type=1400 audit(1754996414.947:574): avc: denied { open } for pid=8200 comm="syz.5.760" path="/dev/uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 208.259765][ T30] audit: type=1400 audit(1754996415.128:575): avc: denied { write } for pid=8203 comm="syz.5.761" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 208.622643][ T5962] usb 7-1: USB disconnect, device number 3 [ 208.915605][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 209.955389][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 210.653320][ T30] audit: type=1400 audit(1754996417.519:576): avc: denied { write } for pid=8219 comm="syz.6.766" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 210.998379][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 211.059619][ T5987] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 211.256402][ T5987] usb 6-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 211.274408][ T5987] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 211.287564][ T5987] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 211.299263][ T5987] usb 6-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 211.308543][ T5987] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.324107][ T8218] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 211.549231][ T8185] netlink: 204 bytes leftover after parsing attributes in process `syz.2.756'. [ 211.809497][ T30] audit: type=1400 audit(1754996418.669:577): avc: denied { getopt } for pid=8223 comm="syz.6.767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 212.005963][ T30] audit: type=1400 audit(1754996418.869:578): avc: denied { create } for pid=8231 comm="syz.3.770" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 212.032352][ T30] audit: type=1400 audit(1754996418.899:579): avc: denied { write } for pid=8231 comm="syz.3.770" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 212.051852][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 212.060930][ T30] audit: type=1400 audit(1754996418.899:580): avc: denied { read } for pid=8231 comm="syz.3.770" name="video7" dev="devtmpfs" ino=949 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 212.084012][ T5922] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 212.091939][ T30] audit: type=1400 audit(1754996418.899:581): avc: denied { open } for pid=8231 comm="syz.3.770" path="/dev/video7" dev="devtmpfs" ino=949 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 212.118096][ T30] audit: type=1400 audit(1754996418.899:582): avc: denied { ioctl } for pid=8231 comm="syz.3.770" path="/dev/video7" dev="devtmpfs" ino=949 ioctlcmd=0x5605 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 212.263926][ T5922] usb 2-1: Using ep0 maxpacket: 8 [ 212.270700][ T5922] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 212.283467][ T5922] usb 2-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 212.283827][ T1207] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 212.292662][ T5922] usb 2-1: New USB device strings: Mfr=241, Product=1, SerialNumber=3 [ 212.301663][ T5962] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 212.316491][ T5922] usb 2-1: Product: syz [ 212.320997][ T5922] usb 2-1: Manufacturer: syz [ 212.325739][ T5922] usb 2-1: SerialNumber: syz [ 212.331943][ T5922] usb 2-1: config 0 descriptor?? [ 212.341641][ T5922] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 212.465514][ T5962] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 212.546862][ T5962] usb 4-1: New USB device found, idVendor=0471, idProduct=0303, bcdDevice=e5.df [ 212.556259][ T1207] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 212.570506][ T5962] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.578985][ T1207] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 212.591745][ T1207] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 212.601708][ T5962] usb 4-1: config 0 descriptor?? [ 212.608482][ T1207] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.618976][ T5962] pwc: Philips PCA646VC USB webcam detected. [ 212.628327][ T8234] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 212.636136][ T8234] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 212.646826][ T1207] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 212.827314][ T5962] pwc: send_video_command error -71 [ 212.832599][ T5962] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 212.842983][ T5962] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71 [ 212.866367][ T5962] usb 4-1: USB disconnect, device number 16 [ 213.006625][ T30] audit: type=1400 audit(1754996419.870:583): avc: denied { read } for pid=8239 comm="syz.6.773" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 213.046659][ T30] audit: type=1400 audit(1754996419.870:584): avc: denied { open } for pid=8239 comm="syz.6.773" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 213.071026][ T30] audit: type=1400 audit(1754996419.900:585): avc: denied { ioctl } for pid=8239 comm="syz.6.773" path="/dev/rtc0" dev="devtmpfs" ino=921 ioctlcmd=0x7003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 213.096408][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 213.266988][ T1207] usb 3-1: USB disconnect, device number 20 [ 213.819655][ T5922] gspca_zc3xx: reg_w_i err -71 [ 214.122984][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 214.239342][ T5987] aiptek 6-1:17.0: Aiptek tried all speeds, no sane response [ 214.728431][ T5922] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 214.731244][ T5987] aiptek 6-1:17.0: probe with driver aiptek failed with error -22 [ 214.742725][ T5922] gspca_zc3xx 2-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 214.751848][ T30] audit: type=1400 audit(1754996421.611:586): avc: denied { read write } for pid=8249 comm="syz.2.776" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 214.754472][ T5987] usb 6-1: USB disconnect, device number 3 [ 214.776038][ T5922] usb 2-1: USB disconnect, device number 13 [ 215.152487][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 215.470493][ T8259] input: syz1 as /devices/virtual/input/input32 [ 215.504826][ T8261] netlink: 204 bytes leftover after parsing attributes in process `syz.5.778'. [ 216.191945][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 216.838123][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 216.838139][ T30] audit: type=1400 audit(1754996423.702:608): avc: denied { read write } for pid=5846 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 216.918406][ T30] audit: type=1400 audit(1754996423.742:609): avc: denied { read write } for pid=8279 comm="syz.5.784" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 216.966417][ T30] audit: type=1400 audit(1754996423.762:610): avc: denied { read } for pid=8279 comm="syz.5.784" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 216.998249][ T30] audit: type=1400 audit(1754996423.772:611): avc: denied { read write } for pid=5858 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 217.113163][ T30] audit: type=1400 audit(1754996423.782:612): avc: denied { read write } for pid=7762 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 217.137680][ T30] audit: type=1400 audit(1754996423.832:613): avc: denied { read write } for pid=8281 comm="syz.1.786" name="swradio3" dev="devtmpfs" ino=995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 217.231428][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 217.286582][ T30] audit: type=1400 audit(1754996423.832:614): avc: denied { read } for pid=8281 comm="syz.1.786" name="media1" dev="devtmpfs" ino=933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 217.316981][ T30] audit: type=1400 audit(1754996423.862:615): avc: denied { prog_load } for pid=8284 comm="syz.3.785" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 217.389669][ T30] audit: type=1400 audit(1754996423.862:616): avc: denied { map_create } for pid=8284 comm="syz.3.785" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 217.414082][ T30] audit: type=1400 audit(1754996423.922:617): avc: denied { allowed } for pid=8281 comm="syz.1.786" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 218.271555][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 219.310376][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 220.349945][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 221.399432][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 222.055097][ T30] kauditd_printk_skb: 150 callbacks suppressed [ 222.055116][ T30] audit: type=1400 audit(1754996428.924:768): avc: denied { read write } for pid=5858 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 222.149703][ T30] audit: type=1400 audit(1754996428.994:769): avc: denied { create } for pid=8380 comm="syz.1.821" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 222.195878][ T30] audit: type=1400 audit(1754996428.994:770): avc: denied { prog_load } for pid=8380 comm="syz.1.821" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 222.237293][ T30] audit: type=1400 audit(1754996429.105:771): avc: denied { read } for pid=8380 comm="syz.1.821" dev="nsfs" ino=4026532800 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 222.358858][ T30] audit: type=1400 audit(1754996429.225:772): avc: denied { read write } for pid=7910 comm="syz-executor" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 222.428842][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 222.446615][ T30] audit: type=1400 audit(1754996429.275:773): avc: denied { create } for pid=8383 comm="syz.6.822" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 222.469363][ T30] audit: type=1400 audit(1754996429.275:774): avc: denied { prog_load } for pid=8383 comm="syz.6.822" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 222.490817][ T30] audit: type=1400 audit(1754996429.285:775): avc: denied { read } for pid=8383 comm="syz.6.822" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=0 [ 222.518020][ T30] audit: type=1400 audit(1754996429.285:776): avc: denied { read } for pid=8383 comm="syz.6.822" name="iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 222.544006][ T30] audit: type=1400 audit(1754996429.295:777): avc: denied { read write } for pid=5850 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 223.196752][ T5864] Bluetooth: hci6: command 0x1003 tx timeout [ 223.204385][ T51] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 223.468473][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 224.507829][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 225.547303][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 225.822377][ T8466] netlink: 32 bytes leftover after parsing attributes in process `syz.2.853'. [ 226.586939][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 226.772823][ T8480] netlink: 12 bytes leftover after parsing attributes in process `syz.6.858'. [ 227.084757][ T30] kauditd_printk_skb: 181 callbacks suppressed [ 227.084774][ T30] audit: type=1400 audit(1754996433.957:959): avc: denied { read } for pid=8487 comm="syz.1.863" dev="nsfs" ino=4026532800 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 227.166375][ T30] audit: type=1400 audit(1754996433.987:960): avc: denied { allowed } for pid=8489 comm="syz.5.861" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 227.195528][ T30] audit: type=1400 audit(1754996433.997:961): avc: denied { create } for pid=8491 comm="syz.3.864" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 227.275188][ T30] audit: type=1400 audit(1754996433.997:962): avc: denied { create } for pid=8491 comm="syz.3.864" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 227.363371][ T30] audit: type=1400 audit(1754996433.997:963): avc: denied { read write } for pid=8491 comm="syz.3.864" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=0 [ 227.388076][ T30] audit: type=1400 audit(1754996433.997:964): avc: denied { create } for pid=8491 comm="syz.3.864" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 227.409814][ T30] audit: type=1400 audit(1754996433.997:965): avc: denied { create } for pid=8491 comm="syz.3.864" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 227.440433][ T30] audit: type=1400 audit(1754996433.997:966): avc: denied { create } for pid=8491 comm="syz.3.864" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 227.491336][ T30] audit: type=1400 audit(1754996433.997:967): avc: denied { read write } for pid=8491 comm="syz.3.864" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=0 [ 227.518574][ T30] audit: type=1400 audit(1754996434.017:968): avc: denied { read write } for pid=5846 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 227.612125][ T51] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:201' [ 227.622111][ T51] CPU: 1 UID: 0 PID: 51 Comm: kworker/u9:0 Not tainted 6.17.0-rc1-syzkaller-00004-g53e760d89498 #0 PREEMPT(full) [ 227.622141][ T51] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 227.622153][ T51] Workqueue: hci5 hci_rx_work [ 227.622185][ T51] Call Trace: [ 227.622191][ T51] [ 227.622198][ T51] dump_stack_lvl+0x16c/0x1f0 [ 227.622218][ T51] sysfs_warn_dup+0x7f/0xa0 [ 227.622240][ T51] sysfs_create_dir_ns+0x24b/0x2b0 [ 227.622264][ T51] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 227.622285][ T51] ? find_held_lock+0x2b/0x80 [ 227.622310][ T51] ? do_raw_spin_unlock+0x172/0x230 [ 227.622330][ T51] kobject_add_internal+0x2c4/0x9b0 [ 227.622352][ T51] kobject_add+0x16e/0x240 [ 227.622370][ T51] ? __pfx_kobject_add+0x10/0x10 [ 227.622389][ T51] ? do_raw_spin_unlock+0x172/0x230 [ 227.622407][ T51] ? kobject_put+0xab/0x5a0 [ 227.622431][ T51] device_add+0x288/0x1aa0 [ 227.622452][ T51] ? __pfx_dev_set_name+0x10/0x10 [ 227.622476][ T51] ? __pfx_device_add+0x10/0x10 [ 227.622499][ T51] ? mgmt_send_event_skb+0x2fb/0x460 [ 227.622533][ T51] hci_conn_add_sysfs+0x17e/0x230 [ 227.622552][ T51] le_conn_complete_evt+0x1075/0x1d70 [ 227.622578][ T51] ? preempt_count_sub+0x150/0x160 [ 227.622604][ T51] ? find_held_lock+0x2b/0x80 [ 227.622625][ T51] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 227.622649][ T51] ? hci_event_packet+0x459/0x11c0 [ 227.622678][ T51] ? __mutex_unlock_slowpath+0x163/0x800 [ 227.622701][ T51] hci_le_conn_complete_evt+0x23c/0x370 [ 227.622733][ T51] hci_le_meta_evt+0x354/0x5e0 [ 227.622761][ T51] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 227.622791][ T51] hci_event_packet+0x682/0x11c0 [ 227.622819][ T51] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 227.622849][ T51] ? __pfx_hci_event_packet+0x10/0x10 [ 227.622878][ T51] ? kcov_remote_start+0x3c9/0x6d0 [ 227.622898][ T51] ? lockdep_hardirqs_on+0x7c/0x110 [ 227.622922][ T51] hci_rx_work+0x2c5/0x16b0 [ 227.622951][ T51] ? rcu_is_watching+0x12/0xc0 [ 227.622977][ T51] process_one_work+0x9cc/0x1b70 [ 227.623017][ T51] ? __pfx_process_one_work+0x10/0x10 [ 227.623046][ T51] ? assign_work+0x1a0/0x250 [ 227.623069][ T51] worker_thread+0x6c8/0xf10 [ 227.623103][ T51] ? __pfx_worker_thread+0x10/0x10 [ 227.623124][ T51] kthread+0x3c5/0x780 [ 227.623147][ T51] ? __pfx_kthread+0x10/0x10 [ 227.623167][ T51] ? rcu_is_watching+0x12/0xc0 [ 227.623189][ T51] ? __pfx_kthread+0x10/0x10 [ 227.623209][ T51] ret_from_fork+0x5d7/0x6f0 [ 227.623226][ T51] ? __pfx_kthread+0x10/0x10 [ 227.623242][ T51] ret_from_fork_asm+0x1a/0x30 [ 227.623273][ T51] [ 227.623319][ T51] kobject: kobject_add_internal failed for hci5:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 227.636181][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 227.650569][ T51] Bluetooth: hci5: failed to register connection device [ 227.940454][ T8515] IPv6: Can't replace route, no match found [ 228.665730][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 229.705183][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 230.091548][ T8557] sch_tbf: burst 151 is lower than device syzkaller0 mtu (1514) ! [ 230.754618][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 231.516219][ T8598] trusted_key: encrypted_key: key user:syz not found [ 231.784121][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 232.149167][ T30] kauditd_printk_skb: 178 callbacks suppressed [ 232.149183][ T30] audit: type=1400 audit(1754996439.019:1147): avc: denied { read write } for pid=7910 comm="syz-executor" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 232.346773][ T30] audit: type=1400 audit(1754996439.110:1148): avc: denied { read write } for pid=5850 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 232.624043][ T30] audit: type=1400 audit(1754996439.120:1149): avc: denied { prog_load } for pid=8615 comm="syz.6.907" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 232.662891][ T30] audit: type=1400 audit(1754996439.120:1150): avc: denied { execmem } for pid=8615 comm="syz.6.907" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 232.688978][ T30] audit: type=1400 audit(1754996439.140:1151): avc: denied { read append } for pid=8617 comm="syz.2.906" name="iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 232.775878][ T8621] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 232.782581][ T8621] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 232.820462][ T8621] vhci_hcd vhci_hcd.0: Device attached [ 232.827486][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 232.875820][ T8623] vhci_hcd: connection closed [ 232.936144][ T49] vhci_hcd: stop threads [ 232.936289][ T30] audit: type=1400 audit(1754996439.140:1152): avc: denied { prog_load } for pid=8617 comm="syz.2.906" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 232.942086][ T49] vhci_hcd: release socket [ 232.979653][ T49] vhci_hcd: disconnect device [ 232.988324][ T30] audit: type=1400 audit(1754996439.140:1153): avc: denied { read write } for pid=8617 comm="syz.2.906" name="vhost-net" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=0 [ 233.013472][ T30] audit: type=1400 audit(1754996439.140:1154): avc: denied { read } for pid=8617 comm="syz.2.906" dev="nsfs" ino=4026532891 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 233.013504][ T5922] vhci_hcd: vhci_device speed not set [ 233.036956][ T30] audit: type=1400 audit(1754996439.140:1155): avc: denied { read } for pid=8617 comm="syz.2.906" dev="nsfs" ino=4026532891 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 233.269286][ T30] audit: type=1400 audit(1754996439.140:1156): avc: denied { bpf } for pid=8617 comm="syz.2.906" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 233.863082][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 234.913124][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 235.942369][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 255.375478][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.381779][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 262.408868][ T5864] sched: DL replenish lagged too much [ 303.512743][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 341.619058][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 341.626023][ C1] rcu: 0-...!: (1 ticks this GP) idle=17d4/1/0x4000000000000000 softirq=32600/32601 fqs=745 [ 341.636976][ C1] rcu: (detected by 1, t=10502 jiffies, g=25357, q=228 ncpus=2) [ 341.644694][ C1] Sending NMI from CPU 1 to CPUs 0: [ 341.644721][ C0] NMI backtrace for cpu 0 [ 341.644735][ C0] CPU: 0 UID: 0 PID: 8657 Comm: syz.5.921 Not tainted 6.17.0-rc1-syzkaller-00004-g53e760d89498 #0 PREEMPT(full) [ 341.644751][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 341.644759][ C0] RIP: 0010:hlock_class+0x15/0x70 [ 341.644782][ C0] Code: 00 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f b7 47 20 66 25 ff 1f 0f b7 c0 48 0f a3 05 4d af 45 14 73 15 <48> 8d 04 80 48 8d 04 80 48 8d 04 c5 60 09 dd 95 c3 cc cc cc cc 8b [ 341.644794][ C0] RSP: 0018:ffffc90000007c30 EFLAGS: 00000003 [ 341.644806][ C0] RAX: 0000000000000dc2 RBX: ffff888028ab8af0 RCX: 00000000fc7df733 [ 341.644814][ C0] RDX: 6a2f3cac979e8055 RSI: 00000000189cfc66 RDI: ffff888028ab8af0 [ 341.644823][ C0] RBP: 0000000000000000 R08: 6a2f3cac979e8055 R09: 0000000000000001 [ 341.644832][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: ffff888028ab8af0 [ 341.644839][ C0] R13: ffff888028ab8000 R14: 000000007d78e87a R15: 0000000000000003 [ 341.644847][ C0] FS: 00005555854b9500(0000) GS:ffff8881246bc000(0000) knlGS:0000000000000000 [ 341.644861][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 341.644870][ C0] CR2: 0000001b32117ff8 CR3: 000000002bac0000 CR4: 00000000003526f0 [ 341.644878][ C0] DR0: 0000040000000000 DR1: 000000000000064f DR2: 0000000000000006 [ 341.644886][ C0] DR3: 0000000000000006 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 341.644894][ C0] Call Trace: [ 341.644899][ C0] [ 341.644904][ C0] __lock_acquire+0xb97/0x1ce0 [ 341.644927][ C0] ? do_raw_spin_lock+0x12c/0x2b0 [ 341.644942][ C0] lock_acquire+0x179/0x350 [ 341.644960][ C0] ? advance_sched+0xd9/0xc80 [ 341.644977][ C0] ? do_raw_spin_unlock+0x172/0x230 [ 341.644991][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 341.645012][ C0] ? __pfx_advance_sched+0x10/0x10 [ 341.645027][ C0] _raw_spin_lock+0x2e/0x40 [ 341.645043][ C0] ? advance_sched+0xd9/0xc80 [ 341.645058][ C0] advance_sched+0xd9/0xc80 [ 341.645074][ C0] ? find_held_lock+0x2b/0x80 [ 341.645090][ C0] ? do_raw_spin_unlock+0x172/0x230 [ 341.645104][ C0] ? __pfx_advance_sched+0x10/0x10 [ 341.645119][ C0] __hrtimer_run_queues+0x202/0xad0 [ 341.645141][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 341.645156][ C0] ? read_tsc+0x9/0x20 [ 341.645175][ C0] hrtimer_interrupt+0x397/0x8e0 [ 341.645194][ C0] __sysvec_apic_timer_interrupt+0x10b/0x3f0 [ 341.645210][ C0] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 341.645230][ C0] [ 341.645235][ C0] [ 341.645239][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 341.645253][ C0] RIP: 0010:finish_task_switch.isra.0+0x22a/0xc10 [ 341.645271][ C0] Code: fb 09 00 00 44 8b 05 69 5c 22 0f 45 85 c0 0f 85 be 01 00 00 4c 89 e7 e8 a4 f6 ff ff e8 bf 6e 3a 00 fb 65 48 8b 1d fe 34 4d 12 <48> 8d bb 18 16 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 [ 341.645283][ C0] RSP: 0018:ffffc9000bf27a30 EFLAGS: 00000202 [ 341.645292][ C0] RAX: 00000000000057ad RBX: ffff888028ab8000 RCX: ffffffff81c378cf [ 341.645301][ C0] RDX: 0000000000000000 RSI: ffffffff8de4f175 RDI: ffffffff8c162480 [ 341.645309][ C0] RBP: ffffc9000bf27a78 R08: 0000000000000001 R09: 0000000000000001 [ 341.645317][ C0] R10: ffffffff90ab3597 R11: 0000000000000000 R12: ffff8880b843a300 [ 341.645325][ C0] R13: ffff888034e04880 R14: ffff8880b843a300 R15: ffff8880b843b170 [ 341.645336][ C0] ? trace_irq_enable.constprop.0+0x2f/0x120 [ 341.645353][ C0] ? __switch_to+0x7a5/0x11a0 [ 341.645369][ C0] __schedule+0x1198/0x5de0 [ 341.645387][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 341.645411][ C0] ? __pfx___schedule+0x10/0x10 [ 341.645431][ C0] ? find_held_lock+0x2b/0x80 [ 341.645446][ C0] ? schedule+0x2d7/0x3a0 [ 341.645464][ C0] schedule+0xe7/0x3a0 [ 341.645482][ C0] do_nanosleep+0x21a/0x570 [ 341.645500][ C0] ? __pfx_do_nanosleep+0x10/0x10 [ 341.645517][ C0] ? __asan_memset+0x23/0x50 [ 341.645535][ C0] ? __hrtimer_setup+0x176/0x280 [ 341.645549][ C0] hrtimer_nanosleep+0x155/0x380 [ 341.645565][ C0] ? __pfx_hrtimer_nanosleep+0x10/0x10 [ 341.645581][ C0] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 341.645595][ C0] ? get_timespec64+0x147/0x240 [ 341.645613][ C0] ? __pfx_get_timespec64+0x10/0x10 [ 341.645631][ C0] common_nsleep+0xa1/0xd0 [ 341.645649][ C0] __x64_sys_clock_nanosleep+0x34a/0x4a0 [ 341.645666][ C0] ? __pfx___x64_sys_clock_nanosleep+0x10/0x10 [ 341.645683][ C0] do_syscall_64+0xcd/0x4c0 [ 341.645698][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.645710][ C0] RIP: 0033:0x7fb48f3c14a5 [ 341.645722][ C0] Code: 24 0c 89 3c 24 48 89 4c 24 18 e8 f6 54 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 8b 74 24 0c 8b 3c 24 b8 e6 00 00 00 0f 05 <44> 89 c7 48 89 04 24 e8 4f 55 ff ff 48 8b 04 24 48 83 c4 28 f7 d8 [ 341.645734][ C0] RSP: 002b:00007ffc8ab027f0 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 341.645745][ C0] RAX: ffffffffffffffda RBX: 00007fb48f5b5fa0 RCX: 00007fb48f3c14a5 [ 341.645753][ C0] RDX: 00007ffc8ab02830 RSI: 0000000000000000 RDI: 0000000000000000 [ 341.645761][ C0] RBP: 00007fb48f5b7da0 R08: 0000000000000000 R09: 00007fb49012b000 [ 341.645769][ C0] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000003a0a8 [ 341.645777][ C0] R13: 00007fb48f5b6180 R14: ffffffffffffffff R15: 00007ffc8ab02970 [ 341.645790][ C0] [ 341.646715][ C1] rcu: rcu_preempt kthread starved for 9006 jiffies! g25357 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 342.167738][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 342.177697][ C1] rcu: RCU grace-period kthread stack dump: [ 342.183566][ C1] task:rcu_preempt state:R running task stack:28672 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 342.197045][ C1] Call Trace: [ 342.200314][ C1] [ 342.203233][ C1] __schedule+0x1190/0x5de0 [ 342.207754][ C1] ? __pfx___schedule+0x10/0x10 [ 342.212604][ C1] ? find_held_lock+0x2b/0x80 [ 342.217272][ C1] ? schedule+0x2d7/0x3a0 [ 342.221608][ C1] schedule+0xe7/0x3a0 [ 342.225669][ C1] schedule_timeout+0x123/0x290 [ 342.230511][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 342.235876][ C1] ? __pfx_process_timeout+0x10/0x10 [ 342.241156][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 342.246956][ C1] ? prepare_to_swait_event+0xf5/0x480 [ 342.252413][ C1] rcu_gp_fqs_loop+0x1ea/0xb00 [ 342.257168][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 342.262442][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 342.267374][ C1] ? rcu_is_watching+0x12/0xc0 [ 342.272130][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 342.277941][ C1] rcu_gp_kthread+0x270/0x380 [ 342.282609][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 342.287793][ C1] ? rcu_is_watching+0x12/0xc0 [ 342.292550][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 342.297736][ C1] ? __kthread_parkme+0x19e/0x250 [ 342.302762][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 342.307954][ C1] kthread+0x3c5/0x780 [ 342.312014][ C1] ? __pfx_kthread+0x10/0x10 [ 342.316681][ C1] ? rcu_is_watching+0x12/0xc0 [ 342.321442][ C1] ? __pfx_kthread+0x10/0x10 [ 342.326023][ C1] ret_from_fork+0x5d7/0x6f0 [ 342.330600][ C1] ? __pfx_kthread+0x10/0x10 [ 342.335177][ C1] ret_from_fork_asm+0x1a/0x30 [ 342.340223][ C1] [ 342.343240][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 342.349551][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.17.0-rc1-syzkaller-00004-g53e760d89498 #0 PREEMPT(full) [ 342.361168][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 342.371211][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 342.376844][ C1] Code: ac 62 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d b3 c2 16 00 fb f4 4c 0d 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 342.396441][ C1] RSP: 0018:ffffc90000197df8 EFLAGS: 000002c2 [ 342.402495][ C1] RAX: 000000000093c8d1 RBX: 0000000000000001 RCX: ffffffff8b934c29 [ 342.410454][ C1] RDX: 0000000000000000 RSI: ffffffff8de4f175 RDI: ffffffff8c162480 [ 342.418414][ C1] RBP: ffffed1003c56488 R08: 0000000000000001 R09: ffffed10170a6655 [ 342.426477][ C1] R10: ffff8880b85332ab R11: 0000000000000000 R12: 0000000000000001 [ 342.434435][ C1] R13: ffff88801e2b2440 R14: ffffffff90ab3590 R15: 0000000000000000 [ 342.442393][ C1] FS: 0000000000000000(0000) GS:ffff8881247bc000(0000) knlGS:0000000000000000 [ 342.451317][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 342.457895][ C1] CR2: 00007fc1f15254b5 CR3: 0000000056eba000 CR4: 00000000003526f0 [ 342.465858][ C1] DR0: 0000040000000000 DR1: 000000000000064f DR2: 0000000000000006 [ 342.473818][ C1] DR3: 0000000000000006 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 342.481775][ C1] Call Trace: [ 342.485041][ C1] [ 342.487957][ C1] default_idle+0x13/0x20 [ 342.492280][ C1] default_idle_call+0x6d/0xb0 [ 342.497032][ C1] do_idle+0x391/0x510 [ 342.501112][ C1] ? __pfx_do_idle+0x10/0x10 [ 342.505698][ C1] ? trace_sched_exit_tp+0x2f/0x120 [ 342.510889][ C1] cpu_startup_entry+0x4f/0x60 [ 342.515645][ C1] start_secondary+0x21d/0x2b0 [ 342.520408][ C1] ? __pfx_start_secondary+0x10/0x10 [ 342.525692][ C1] common_startup_64+0x13e/0x148 [ 342.530638][ C1]