last executing test programs: 2m1.651321164s ago: executing program 3 (id=23): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x800000000, 0xf, &(0x7f0000006680)) munlock(&(0x7f00006ea000/0x2000)=nil, 0x2000) migrate_pages(0x0, 0x5, 0x0, &(0x7f0000000080)=0x272) syz_usb_connect(0x0, 0x3f, &(0x7f00000002c0)=ANY=[@ANYRESHEX=0x0], 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x800000000, 0xf, &(0x7f0000006680)) (async) munlock(&(0x7f00006ea000/0x2000)=nil, 0x2000) (async) migrate_pages(0x0, 0x5, 0x0, &(0x7f0000000080)=0x272) (async) syz_usb_connect(0x0, 0x3f, &(0x7f00000002c0)=ANY=[@ANYRESHEX=0x0], 0x0) (async) 1m58.506729063s ago: executing program 3 (id=31): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x10) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)={&(0x7f00000013c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x24000080}, 0x8040) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000500)=0x8) setsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000040)={r5, 0x7f, 0x0, 0x3}, 0x10) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r2, 0x84, 0x79, &(0x7f0000000440)={r5, 0x75f5, 0x3}, 0x8) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) sendto$packet(r7, &(0x7f00000002c0)="05031400d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @multicast}, 0x14) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x40d, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r11, 0x10}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x84}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x8}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r12, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010000100"/20, @ANYRES32=r13, @ANYBLOB="000000004300060014001680100001800c0003"], 0x3c}}, 0x45040) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000180)=0x0, &(0x7f0000000200)=0x4) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000240)={0x17c, r6, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0xc0}, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) r16 = syz_usbip_server_init(0x4) syz_usb_connect(0x1, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100001ddf8208c00712152230000000010902"], 0x0) write$usbip_server(r16, &(0x7f00000004c0)=ANY=[@ANYBLOB="0000000300000001eaffff1f0100000100000000000000"], 0x30) bind$inet6(0xffffffffffffffff, 0x0, 0x0) 1m55.156494838s ago: executing program 3 (id=41): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, r2, 0x200, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x66}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x37}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x64}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x59}]}, 0x50}, 0x1, 0x0, 0x0, 0x20040001}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="580000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000002800128009000100766c616e00000000180002800c0002001f0000001f000000060001"], 0x58}, 0x1, 0x0, 0x0, 0x20000604}, 0x0) 1m54.996967521s ago: executing program 3 (id=44): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x8000002}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3a, &(0x7f00000003c0)=0xe03, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x2200c041, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0), 0x4) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r1, 0x0) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f0000000000)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @val={0x3a, [0x2c, 0x30]}}}}]}) setpgid(0x0, r1) symlink(&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)='./file1\x00') 1m54.873616969s ago: executing program 3 (id=46): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000380)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x3) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000780)={0xe, {0xa, 0x0, 0x87, 0x1000, "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"}}, 0x100c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0x40045304, &(0x7f0000000700)) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3) syz_emit_vhci(&(0x7f00000004c0)=ANY=[@ANYBLOB="04ff110204786aef15f807521fe63bbb907cddd611"], 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x3, 0x0, 0x2, 0x0, 0xb}) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) r7 = fcntl$dupfd(0xffffffffffffffff, 0x406, r6) ioctl$SNDCTL_DSP_SPEED(r7, 0x40047459, 0x0) r8 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r8, 0x4048aec9, &(0x7f0000000380)={0x2, 0x0, @ioapic={0x3000, 0x5e7c, 0x3ff, 0x9, 0x0, [{0x2, 0xff, 0xa, '\x00', 0x8b}, {0xfa, 0x3, 0x7c, '\x00', 0x2a}, {0xf7, 0x6, 0x0, '\x00', 0xb9}, {0x1, 0x6, 0x9, '\x00', 0x8}, {0x6, 0x31, 0x7f, '\x00', 0x18}, {0x3, 0x99, 0x2, '\x00', 0x24}, {0xb, 0x81, 0xff, '\x00', 0x7f}, {0x3, 0x97, 0x8, '\x00', 0xf}, {0x7, 0x5, 0xbb}, {0x1, 0x7, 0x6, '\x00', 0x7}, {0xe, 0x1, 0x81, '\x00', 0x5}, {0x5, 0x40, 0x9, '\x00', 0x2}, {0x5, 0x6, 0xea, '\x00', 0x2}, {0x0, 0x5, 0x1b, '\x00', 0x4}, {0xd3, 0x6d, 0x7, '\x00', 0x80}, {0x2, 0x9, 0x0, '\x00', 0xec}, {0x5a, 0x46}, {0x9, 0x5, 0xa}, {0x6, 0x3, 0x9f, '\x00', 0x8a}, {0x4, 0x4, 0x8, '\x00', 0x8}, {0x66, 0xf9, 0x9e, '\x00', 0x6}, {0x0, 0xfa, 0x6}, {0x10, 0x4, 0x6, '\x00', 0x1}, {0x9, 0x7, 0x0, '\x00', 0x2}]}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 1m53.984614644s ago: executing program 3 (id=50): r0 = socket(0x2, 0x3, 0xff) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000180)=0x2002, 0x4) (async) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r1) (async) openat$rtc(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) (async) ioctl$VIDIOC_TRY_DECODER_CMD(0xffffffffffffffff, 0xc0585605, 0x0) (async) writev(0xffffffffffffffff, 0x0, 0x0) (async) r3 = syz_open_dev$video4linux(&(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_S_CTRL(r3, 0xc0405627, &(0x7f0000000080)) (async) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)={0x14, r2, 0x301, 0x70bd26, 0x0, {0x2b}}, 0x14}}, 0x2044) (async) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000200)={0x2, 0x1, @loopback}, 0x10) sendmmsg$unix(r0, &(0x7f0000002fc0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)="643c87cf2bd21d995e613d73613b1e78334efea0", 0x14}], 0x1}}], 0x1, 0x0) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0x4b, 0xec, 0x2, 0x20, 0x6a2, 0x3, 0xb48c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x9, 0x0, 0x0, 0xc9, 0xc8, 0xb7}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) (async) syz_usb_control_io$uac1(r5, 0x0, 0x0) (async) syz_usb_control_io$uac1(r5, 0x0, 0x0) (async) syz_usb_control_io$uac1(r5, 0x0, 0x0) (async) syz_usb_control_io(r5, 0x0, 0x0) (async) openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0) (async) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) read$FUSE(r6, 0x0, 0x0) (async) r7 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000005c0), 0x28300, 0x0) ioctl$IOCTL_START_ACCEL_DEV(r7, 0x40096102, &(0x7f0000000940)={{}, 0x6}) ioctl$NS_GET_OWNER_UID(r6, 0xb704, &(0x7f0000000000)) 1m53.974804349s ago: executing program 32 (id=50): r0 = socket(0x2, 0x3, 0xff) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000180)=0x2002, 0x4) (async) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r1) (async) openat$rtc(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) (async) ioctl$VIDIOC_TRY_DECODER_CMD(0xffffffffffffffff, 0xc0585605, 0x0) (async) writev(0xffffffffffffffff, 0x0, 0x0) (async) r3 = syz_open_dev$video4linux(&(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_S_CTRL(r3, 0xc0405627, &(0x7f0000000080)) (async) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)={0x14, r2, 0x301, 0x70bd26, 0x0, {0x2b}}, 0x14}}, 0x2044) (async) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000200)={0x2, 0x1, @loopback}, 0x10) sendmmsg$unix(r0, &(0x7f0000002fc0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)="643c87cf2bd21d995e613d73613b1e78334efea0", 0x14}], 0x1}}], 0x1, 0x0) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0x4b, 0xec, 0x2, 0x20, 0x6a2, 0x3, 0xb48c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x9, 0x0, 0x0, 0xc9, 0xc8, 0xb7}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) (async) syz_usb_control_io$uac1(r5, 0x0, 0x0) (async) syz_usb_control_io$uac1(r5, 0x0, 0x0) (async) syz_usb_control_io$uac1(r5, 0x0, 0x0) (async) syz_usb_control_io(r5, 0x0, 0x0) (async) openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0) (async) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) read$FUSE(r6, 0x0, 0x0) (async) r7 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000005c0), 0x28300, 0x0) ioctl$IOCTL_START_ACCEL_DEV(r7, 0x40096102, &(0x7f0000000940)={{}, 0x6}) ioctl$NS_GET_OWNER_UID(r6, 0xb704, &(0x7f0000000000)) 15.829836825s ago: executing program 4 (id=357): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x41, 0x3f, 0x5f, 0x20, 0x61d, 0xc150, 0xce6f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x33, 0x0, 0x1, 0x18, 0x70, 0xfd, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x4}}]}}]}}]}}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d9, 0xa055, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4}}}}]}}]}}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000900)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163300c", 0x8) accept4(r1, 0x0, 0x0, 0x800) r2 = openat$selinux_policy(0xffffff9c, &(0x7f0000001400), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r2, 0x0) readv(r2, &(0x7f0000000500)=[{&(0x7f0000000040)=""/60, 0x3c}, {&(0x7f0000001440)=""/4096, 0x1000}], 0x2) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xa8, &(0x7f00000000c0)=ANY=[@ANYRES8=r2, @ANYBLOB="b2c2b21b0c706c377af3d742a6ca9f210871030bbed988417a467f77f61d92ed71426895590e9da1ffe36c183806e6faa41c5f58fce640babd9971bb05b987a8f52856a2fa37b549d28198ca6cac39000000000000"]) add_key(&(0x7f0000000040)='dns_resolver\x00', 0x0, &(0x7f0000000380)="3a94", 0x2, 0xfffffffffffffffb) syz_usb_control_io(r0, 0x0, 0x0) 13.453683007s ago: executing program 2 (id=365): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, 0x0, 0x0) fanotify_init(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$sndpcmp(&(0x7f0000000140), 0x1ff, 0x40000) ioctl$SNDRV_PCM_IOCTL_FORWARD(r4, 0x40084149, &(0x7f0000000280)=0x3) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = syz_io_uring_setup(0x10d, &(0x7f0000000980)={0x0, 0x5885, 0x80}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x7, 0x0, 0x0, 0x8}) io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000340)=0x926, 0x4) recvfrom$packet(r0, 0x0, 0x0, 0x2000, 0x0, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x400, 0x80) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x200000c, 0x0, 0x10000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 12.021138135s ago: executing program 4 (id=367): r0 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) syz_open_dev$radio(&(0x7f0000000100), 0x3, 0x2) r2 = syz_io_uring_setup(0x417a, &(0x7f0000000340)={0x0, 0x0, 0x10100, 0x0, 0xffffffff}, &(0x7f0000000540)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4004, @fd_index=0x4, 0x0, 0x0}) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="7472616e733d66642c7266646e6f3dd56c91cb83ec94c8afbe1916", @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB=',\x00']) io_uring_enter(r2, 0x567, 0x20, 0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) syz_genetlink_get_family_id$devlink(0x0, r1) r7 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r7, 0x84, 0x17, &(0x7f0000000200), 0xc) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) setsockopt$nfc_llcp_NFC_LLCP_RW(0xffffffffffffffff, 0x118, 0x0, &(0x7f0000000240)=0x5, 0x4) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x40046207, 0x0) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0}) dup3(r10, r9, 0x0) syz_io_uring_setup(0x5714, &(0x7f00000004c0)={0x0, 0x72a2, 0x800, 0x3, 0x3c9, 0x0, r2}, &(0x7f0000000040), &(0x7f00000001c0)) ppoll(&(0x7f0000000280)=[{r9, 0x4000}], 0x1, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000080)={0x18, 0x0, &(0x7f0000000400)=[@request_death, @increfs={0x40046304, 0x2}], 0xfc, 0x0, 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1fa60000) 11.531911004s ago: executing program 2 (id=368): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1044, 0x7a4d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x9, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x9, 0xb0, 0xfd, [{{0x9, 0x4, 0x0, 0xfe, 0x2, 0x7, 0x1, 0x2, 0xf9, "", {{{0x9, 0x5, 0x1, 0x2, 0x5ff, 0x0, 0x5e, 0x5}}}}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x201, 0x17, 0x1, 0x3, 0x40}, 0x5, &(0x7f0000000140)={0x5, 0xf, 0x5}, 0x2, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x401}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0xc09}}]}) r3 = socket(0x8000000010, 0x2, 0x0) write(r3, &(0x7f00000002c0)="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", 0xfc) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r4, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x0, @dev}, 0x0, {0x2, 0x0, @multicast1=0xe000cc02}}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r5, 0x4048aecb, &(0x7f0000000380)={0x4, 0x0, [{0x80000007, 0x4, 0x0, 0x7fff, 0x27, 0x7, 0x5}, {0x40000001, 0x8, 0x2, 0xffffffff, 0x7fffffff, 0x5, 0x10001}, {0xb, 0xe5f, 0x1, 0x7, 0xdf4, 0x6, 0x80000001}, {0x0, 0x201, 0x5, 0x4, 0x80000000, 0x0, 0xffffffff}]}) 11.195959828s ago: executing program 0 (id=371): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000049c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x1370, 0x98, 0x1200, 0x1200, 0x0, 0x0, 0x1370, 0x1370, 0x1370, 0x1370, 0x1370, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'gretap0\x00', {}, {}, 0xff}, 0x0, 0x10a0, 0x10c8, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x0, './cgroup.net/syz1\x00', 0x4, {0x8}}}]}, @ECN={0x28}}, {{@ip={@loopback, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60}}, {{@ip={@broadcast, @empty, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x1468) 11.109838181s ago: executing program 0 (id=372): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$iommufd(0xffffff9c, &(0x7f00000000c0), 0x2002, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_HWPT_ALLOC$NONE(r2, 0x3b89, &(0x7f0000000180)={0x28, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r2, 0x3ba0, &(0x7f0000000000)={0x48, 0x1, 0x0, 0x0, 0x5, 0x29}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000980)={0x48, 0x5, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(0xffffffffffffffff, 0x3ba0, &(0x7f0000000540)={0x48}) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(r0, 0x3ba0, &(0x7f00000002c0)={0x48, 0x3, r3, 0x0, 0xb7, 0x7f, &(0x7f0000000200)="ac4f61910439ff44e790f69620921deda8383d8b9d979ec05568a6cb9188365a7fbb7edb5aa97576b51b2d65db7faead85641741ddcde973b31852ce070b44707cf535850f80dbf233cb2bf23643fb27f15a79b4b374cf6f64a0e6c12528ec705219c7701f13204b6977c8816f823ab62f168f84ca4886d83ff19a75c9edb8"}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000100)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="200617"], 0x0, 0x0, 0x0, 0x0}, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001400010000000000000000c903000080080002"], 0x1c}], 0x1, 0x0, 0x0, 0x100}, 0x0) 10.852813473s ago: executing program 5 (id=374): r0 = syz_usb_connect(0x0, 0x35e, &(0x7f0000000880)={{0x12, 0x1, 0x250, 0xfe, 0x62, 0x27, 0x40, 0x4b4, 0x861f, 0x1474, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x34c, 0x1, 0x3, 0x9, 0x40, 0x7, [{{0x9, 0x4, 0x8c, 0xe0, 0x8, 0xcc, 0x25, 0x3d, 0x4, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x80}, {0xd, 0x24, 0xf, 0x1, 0x3, 0xfffb, 0xd, 0x4}}], [{{0x9, 0x5, 0x7, 0x0, 0x200, 0x79, 0x3, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x6, 0x1}]}}, {{0x9, 0x5, 0x4, 0x2, 0x8, 0x18, 0x30, 0xb, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x15, 0x3}]}}, {{0x9, 0x5, 0x4, 0x0, 0x40, 0x0, 0xfe, 0x25, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0xff}]}}, {{0x9, 0x5, 0xa, 0x0, 0x10, 0x4, 0x1, 0x9, [@generic={0x17, 0x10, "b7143a707068e6ae9efd5138314a942ff13d10797d"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x5ff, 0x0, 0x8a, 0x6, [@generic={0xc0, 0x21, "b08ca6b1fb9ee0c040091017f04047f81c02fbfc3bdc0d568f57c11932be91a5e0bf2345c214b08c018578f0ad3f001dedd2cdddb1efe9e0a57dc59b589099d8ad5b1f6c1b3b448e0c7b9badcf602351c2a745afd65c3e9fd62ff35441d3fcd1e4922fb49eaea33b3d644f41b8867b976fd63c8ec59c3ae217073cbe2f2e543818bed3cd48bb235dba452f3391d5b239526b99dc43734c32c77a686e92d25e463448988a4a7b177b025f88799767b1f6b90440b2bc047939ebc97522c2b5"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x30, 0xdc9}]}}, {{0x9, 0x5, 0x80, 0x2, 0x10, 0x9, 0x2, 0xc4, [@generic={0x68, 0x10, "914e844c15ef77b7ae75a39a5d618dbdd41308b9318bad9f9872cc2de40da072e7e63c43d5316cd2789999dafd49e90fa78318b8c27c0867205c3ed95eac36d18a61a97ce64070874ccc31c6e05651a23935a413669114506551aab0ad483c67c03f87a27167"}, @generic={0x9e, 0x30, "c9faa1ba78cad3bcdee8ae15b6c4f34f0987d0553b78d37685b18b42038f76cbca8dcbd27f847ec699951a114463c72525c27f1501badaf6bbeb383d24510d0602c8f311c1b95898b12cafce835453249fcd7db8e4b741cabcecbeb6ffefc19e79f5d1917d93fff39a29692ccd45bf0060c7bff61f789ca86b30134354e0c253c5ea3f031644dc599fb14cbb3390c18cb80a322788a88d470146c566"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x40, 0x3, 0x78, 0xe7, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xfb, 0x1e}, @generic={0xd9, 0xc, "cb66a5be079ef64f6b1340c78a9dc28b0a52e196a7e66956b74901a169bd61c3f338c64c03326af0b6585357018680bf736322830120ffed88d6e22d604c1dab92df24abc3c642c679c8fa3510565966a54363627a2be434f39165e55c6c5832d9e505b05656d27042c1d291e038527c823b6bc1947bc3283cfa5609c60d929debc866cb5e71bf91b773e18603347c2718074bb25bf0e107c9da3724ffe5b6acbec7677224502a000430945895a958cb08414873878f86a83cbb337d11625c7925f229fbc8d3af92211532a29ad97f629187b402cadfb0"}]}}, {{0x9, 0x5, 0x9, 0x6, 0x8, 0x7, 0x2, 0x8, [@generic={0x2, 0xb}]}}]}}]}}]}}, &(0x7f0000001100)={0xa, &(0x7f0000000e00)={0xa, 0x6, 0x200, 0x5, 0x9, 0x8, 0x10, 0x1}, 0x2b, &(0x7f0000000e40)={0x5, 0xf, 0x2b, 0x4, [@wireless={0xb, 0x10, 0x1, 0x2, 0xd4, 0xe, 0x9, 0x40, 0x6}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x5, 0x40, 0x0, 0x8}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x9, 0xa}, @ext_cap={0x7, 0x10, 0x2, 0xa, 0x0, 0x9, 0xb9c4}]}, 0x9, [{0x3d, &(0x7f0000000e80)=@string={0x3d, 0x3, "b8dac53fc04ec5d4a5f00bd1c57149e6fd66aea15e3dd2a4a504920972138c676fd0eb701f00ae35f112231290073221e67a340c9f23ce4e491c8b"}}, {0x4, &(0x7f0000000ec0)=@lang_id={0x4, 0x3, 0x444}}, {0x4, &(0x7f0000000f00)=@lang_id={0x4, 0x3, 0x200a}}, {0x4, &(0x7f0000000f40)=@lang_id={0x4, 0x3, 0x80e7}}, {0x4, &(0x7f0000000f80)=@lang_id={0x4}}, {0x4f, &(0x7f0000000fc0)=@string={0x4f, 0x3, "1982978dcf2776576e6f407c43ebe3c451693595df2bf9e9137cec199d1a8724fe1bfba0db0bf90f197560567e82bbd59b18b7bc87674d4fb038bebac6dc3591c4269801c2e70f4ff1d95770df"}}, {0x4, &(0x7f0000001040)=@lang_id={0x4}}, {0x4, &(0x7f0000001080)=@lang_id={0x4, 0x3, 0x816}}, {0x4, &(0x7f00000010c0)=@lang_id={0x4, 0x3, 0x449}}]}) syz_usb_disconnect(r0) socket$pppoe(0x18, 0x1, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000001500)={[0x100, 0xa840, 0x4, 0x0, 0x8, 0x1, 0x101, 0x2, 0x4, 0x7, 0xfffffffffffffffd, 0x2, 0xb, 0x0, 0x100, 0xfffffffffffffffc], 0x1000, 0x10000}) bpf$MAP_CREATE(0x0, &(0x7f0000001600)=@bloom_filter={0x1e, 0x5, 0x7, 0x7, 0x8000, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x3, 0xd, @value, @void, @void, @value}, 0x50) socket(0x25, 0x5, 0x6) 9.961625115s ago: executing program 4 (id=375): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) msgrcv(0x0, 0x0, 0x0, 0x0, 0x86b1b18158a7cb82) socket$netlink(0x10, 0x3, 0x0) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x44f, 0xb65d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000b80)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x5, {[@main=@item_4]}}, 0x0}, 0x0) r5 = syz_open_dev$hidraw(&(0x7f0000002300), 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000002300), 0x6, 0x101001) syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) ioctl$HIDIOCGRDESC(r5, 0x90044802, &(0x7f0000000bc0)={0x85e, "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"}) ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x802c550a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) connect$inet(0xffffffffffffffff, &(0x7f00000006c0)={0x2, 0x0, @dev}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f00000003c0)={0x2, &(0x7f0000000240)=[{0x3ff, 0x8, 0x33, 0x6}, {0xb, 0x2, 0xc7, 0x2}]}, 0x10) pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r8, 0x0, 0x10500, 0x0) process_mrelease(0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) 8.587771767s ago: executing program 2 (id=376): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000008100)={0x0, 0x0, &(0x7f00000080c0)={&(0x7f0000000000)={0x24, 0x2, 0x3, 0x801, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0xf}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000880}, 0x4000) listen(r0, 0x4000000) 8.130753835s ago: executing program 0 (id=377): mq_timedsend(0xffffffffffffffff, 0x0, 0x1800, 0x6, 0x0) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, &(0x7f0000000280)={{0x4, 0x4}, {0xa, 0x6}, 0xa}) r0 = getpid() r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) preadv(0xffffffffffffffff, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYRES64=r0], 0x0, 0x50, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0xffffff26) ioctl$KVM_RUN(r3, 0xae80, 0x0) 7.954130773s ago: executing program 5 (id=378): mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000ffe000/0x1000)=nil) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x202000, 0x100) openat2(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 7.78312637s ago: executing program 5 (id=379): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, 0x0, 0x0) (async) socket$unix(0x1, 0x1, 0x0) fanotify_init(0x0, 0x0) r1 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x6, 0x2) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r1) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) r5 = syz_open_dev$sndpcmp(&(0x7f0000000140), 0x1ff, 0x40000) (async) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000021c0)='clear_refs\x00') write$yama_ptrace_scope(r6, &(0x7f0000000040)='2\x00', 0x2) (async) ioctl$SNDRV_PCM_IOCTL_FORWARD(r5, 0x40084149, &(0x7f0000000280)=0x3) (async) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) r7 = syz_io_uring_setup(0x109, &(0x7f0000000980)={0x0, 0x5885, 0x100, 0x0, 0x3d5}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x104, &(0x7f0000000240)=0xf, 0x0, 0x4) (async) syz_io_uring_submit(r8, r9, &(0x7f00000001c0)=@IORING_OP_POLL_REMOVE={0x7, 0x7c, 0x0, 0x0, 0x0, 0x1}) (async) io_uring_enter(r7, 0x3516, 0x0, 0x0, 0x0, 0x0) (async) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000340)=0x926, 0x4) ioctl$DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, &(0x7f0000000180)={0x8, r5, 0x1}) (async) recvfrom$packet(r0, 0x0, 0x0, 0x2000, 0x0, 0x0) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x80000, 0x0) 7.645652352s ago: executing program 2 (id=380): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000580)=ANY=[@ANYBLOB="4030e1000000e1"], 0x0, 0x0, 0x0, 0x0}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f000005c000/0x4000)=nil, 0x4000, 0xd) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) listen(r3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r5, r4, 0x7, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r5, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r3}, 0x20) sendmmsg(r2, &(0x7f0000002640)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000e00)=[{0x0}, {&(0x7f0000001140)="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", 0xc400}], 0x2}}], 0x2, 0x0) write$UHID_INPUT(r1, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0xb00) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) semtimedop(0x0, &(0x7f00000000c0)=[{0x2, 0x4}], 0x1, &(0x7f0000000100)={0x0, 0x989680}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x2, 0xf, &(0x7f0000000880)=@ringbuf={{}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x76}}, {{0x6, 0x0, 0x2, 0x9, 0x0, 0x6, 0xe7030000}, {0x4, 0x0, 0x0, 0x6}}, [], {{0x4, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x2}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r6, 0x84, 0x7f, 0x0, 0x0) open(0x0, 0x145542, 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x5, 0x0, 0x10, [{{0x9, 0x4, 0x0, 0x4, 0x2, 0x7, 0x1, 0x1, 0x92, "", {{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0x0, 0x39, 0x2}}, [{{0x9, 0x5, 0x82, 0x2, 0x8, 0x0, 0x7, 0xd}}]}}}]}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x250, 0x5, 0x4, 0x7f, 0xff, 0x8}, 0x51, &(0x7f0000000080)={0x5, 0xf, 0x51, 0x6, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x2, 0x5, 0x2, 0x6, 0xfffa}, @wireless={0xb, 0x10, 0x1, 0x2, 0x0, 0x2, 0x40, 0x0, 0x2}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "a9ef365533b7c567f4bb1e9e5b0186fe"}, @ss_container_id={0x14, 0x10, 0x4, 0xbe, "28310886720a6900066806fcd7db343a"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x38, 0x0, 0xfe, 0x1, 0x8}]}, 0x4, [{0x9e, &(0x7f0000000180)=@string={0x9e, 0x3, "f6d5d885f71dea07ec5aa1ed6d28672d473348db71645aa97f595a5c608b7372dbe538864b16db6ece13f28ae71c9d541ef6d24ca7588b81c485f06c954857e7cab31302b90860a83667317c6c0fb5df1463673001ba63bff79c1353cb4457f5be3325d77cb7ad2fbf557161a370355a282e11b19324c298d55469c444dcc4000ed5912e7744d4c08547db10f2086cbae98e3f12b658442e36f1a1e8"}}, {0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x3009}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x41c}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x861}}]}) 7.506734994s ago: executing program 1 (id=381): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r4, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000100)=0xff) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="ffffffff", @ANYRES16=0x0, @ANYBLOB="040000000000000000002e"], 0x1c}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x0, 0x5}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdd, 0x0, r7}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r8}, 0x10) r9 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000700)={'veth0\x00'}) 7.499555865s ago: executing program 0 (id=382): r0 = timerfd_create(0x9, 0x0) timerfd_settime(r0, 0x1, &(0x7f0000000080)={{}, {0x0, 0x3938700}}, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x200, 0x100) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100), 0x5d9882, 0x0) timerfd_gettime(r1, &(0x7f0000000140)) bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0x20000400) syz_usb_connect(0x0, 0x5e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c291492099042a102d850102030109024c0001000010000904100002e51de5000b2402010302057ff49bfd052406000105240002000d0900010500000009000700080624037f000109050602ff03000000090582"], 0x0) 6.996463763s ago: executing program 5 (id=383): r0 = socket$caif_seqpacket(0x25, 0x5, 0x1) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xb6e7, 0x0, 0x3}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0) read$FUSE(r7, &(0x7f0000000200)={0x2020}, 0x2020) lseek(r7, 0xfffffffffffffffa, 0x1) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x40, 0x1}) io_uring_enter(r1, 0x47f9, 0x0, 0x0, 0x0, 0x0) 6.721836253s ago: executing program 4 (id=384): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000049c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x1408, 0x98, 0x123f, 0x1200, 0x0, 0x0, 0x1370, 0x1370, 0x1370, 0x1370, 0x1370, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'gretap0\x00', {}, {}, 0xff}, 0x0, 0x10a0, 0x10c8, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x0, './cgroup.net/syz1\x00', 0x4, {0x8}}}]}, @ECN={0x28}}, {{@ip={@loopback, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60}}, {{@ip={@broadcast, @empty, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x1468) 6.702208707s ago: executing program 4 (id=385): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x161200, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x13) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000001500)=ANY=[@ANYRES64=0x0, @ANYRESHEX, @ANYRES16=r0, @ANYRES64=0x0, @ANYRES8=r0, @ANYRES32, @ANYBLOB="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"], 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="00000700000035da084f"], 0x0, 0x0, 0x0, 0x0}) 6.528440701s ago: executing program 1 (id=386): open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x130) r0 = fanotify_init(0x0, 0x2) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(r0, 0x455, 0x40000008, r1, 0x0) fanotify_mark(r0, 0x41, 0x8000038, r1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x140, 0x4c, 0x1a, 0x140, 0x73, 0x250, 0x258, 0x258, 0x250, 0x258, 0x3, 0x0, {[{{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x0, 0x41, 0x4, 0x8}}, @common=@icmp6={{0x28}, {0x11, "998d"}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x800, 'syz0\x00', {0x8}}}}, {{@ipv6={@local, @mcast1, [0xffffff00, 0xffffffff, 0xffffffff], [0x0, 0xffffff00, 0x0, 0xffffffff], 'pimreg\x00', 'macvlan1\x00', {0xff}, {}, 0x67, 0xd, 0x2}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x819e, 0x0, 0xfffff801, 0x3, 0xfffffff9, 0x9, 0x7, 0xb]}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r6 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0xfffd) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) fsopen(&(0x7f0000000100)='btrfs\x00', 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x402982, 0x0) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) ioctl$UI_SET_EVBIT(r8, 0x40045564, 0x11) 4.80490398s ago: executing program 1 (id=387): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$TIOCNOTTY(r1, 0x5422) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socketpair(0x1e, 0x80005, 0xfffffffb, &(0x7f0000000100)={0x0, 0x0}) close(r7) setsockopt$sock_attach_bpf(r8, 0x10f, 0x87, &(0x7f0000000180), 0x127) recvmsg(r8, &(0x7f0000002840)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001700)=""/4096, 0x1000}, {&(0x7f0000000240)=""/127, 0x7f}], 0x2, &(0x7f0000002740)=""/211, 0xd3}, 0x40002001) ioctl$int_in(r6, 0x40000000af01, 0x0) syz_io_uring_setup(0x5169, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x1, 0x1a8}, 0x0, 0x0) syz_io_uring_setup(0x2292, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x2d2}, 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x3, 0x10000, 0x0, 0x3}, 0x0, &(0x7f0000002840)={0xff, 0x7f}, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(r6, 0xaf02, 0x0) bind$inet6(r5, &(0x7f00000001c0)={0xa, 0x4e22}, 0x1c) 4.637223188s ago: executing program 5 (id=388): r0 = socket$inet6(0xa, 0x80000, 0x0) sendmmsg$inet6(r0, &(0x7f0000000a00)=[{{&(0x7f0000000380)={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x2e}, 0x9}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e24, 0x5, @empty, 0x47}, 0x1c, 0x0, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="24000000000000002900000032000000ff020000000000000000000000000001", @ANYRES32=0x0, @ANYBLOB=' \x00\x00\x00'], 0x28}}], 0x2, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) ioctl$CEC_DQEVENT(r1, 0xc0506107, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) ioctl$CEC_DQEVENT(r1, 0xc0506107, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x290100, 0x0) getpid() socket(0x10, 0x3, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000180)='freezer.self_freezing\x00', 0x0, 0x0) preadv2(r4, &(0x7f0000000040)=[{&(0x7f0000000100)=""/65, 0x77}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={0xffffffffffffffff, 0x0, 0x0, 0x1000, 0x0, &(0x7f0000001700)=""/4096, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) 4.569722986s ago: executing program 2 (id=389): mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000ffe000/0x1000)=nil) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x202000, 0x100) openat2(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 3.768011609s ago: executing program 0 (id=390): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000808500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000006a47266b62e4c4d0cb653992325cc4fe0000009500400000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0xe1a4718e3bab2e9c, @private=0xa010102, 0x4e21, 0x1, 'lblcr\x00', 0x2, 0x9, 0x10}, 0x2c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1345, 0x3008, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) bind$802154_raw(0xffffffffffffffff, &(0x7f00000001c0)={0x24, @none={0x0, 0x2}}, 0x14) syz_usb_control_io$hid(r2, &(0x7f0000001440)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x0, "0e93a0ba"}]}}, 0x0}, 0x0) 3.282316276s ago: executing program 5 (id=391): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0x0) (async) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r1, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) (async, rerun: 64) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) (rerun: 64) io_uring_setup(0x7e1c, &(0x7f0000000080)={0x0, 0x893f, 0x40, 0x2, 0xfffffffc}) (async, rerun: 32) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) (async, rerun: 32) close_range(r1, 0xffffffffffffffff, 0x0) accept$unix(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000"], 0x1e4}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x409, 0x0, 0x0, {0x7}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_BASE={0x8}, @NFTA_PAYLOAD_SREG={0x8}, @NFTA_PAYLOAD_OFFSET={0x8}, @NFTA_PAYLOAD_CSUM_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_CSUM_TYPE={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}]}, @NFT_MSG_DELRULE={0x118, 0x8, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @inner={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @objref={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @xfrm={{0x9}, @void}}, {0x18, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8}]}}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @fib={{0x8}, @void}}, {0x14, 0x1, 0x0, 0x1, @synproxy={{0xd}, @void}}, {0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x83}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x83}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x94}]}}}]}, @NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_USERDATA={0x1c, 0x7, 0x1, 0x0, "8e82c433f732c35ce43f3bc6fa84093ec35057a675eeb105"}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}]}], {0x14}}, 0x1b4}}, 0x1) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, 0x3, 0x6, 0x5, 0x0, 0x0, {0xa, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040006}, 0xc015) (async, rerun: 64) r3 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r3) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x24}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x4c, r4, 0x4, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x65}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x58}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x62}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x4040) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r7, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4) (async, rerun: 64) setsockopt$SO_TIMESTAMP(r7, 0x1, 0x3f, &(0x7f00000000c0)=0x1, 0x4) (rerun: 64) setsockopt$inet6_buf(r7, 0x29, 0x3e, &(0x7f00002cef88)="d84f7398", 0x4) sendto$inet6(r7, &(0x7f0000000800)="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", 0x5ad, 0x0, &(0x7f0000000080)={0xa, 0x5e20, 0x0, @mcast2}, 0x1c) (async) recvmmsg(r7, &(0x7f0000001340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 32) setsockopt$inet6_int(r7, 0x29, 0xb, 0x0, 0x0) (rerun: 32) 3.209940664s ago: executing program 4 (id=392): setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1600000000000000040000000100000000000000", @ANYRES32=0x1, @ANYBLOB="000000000000f39499afd69000000000000000000000e9ffffff", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000002c0)="26262e0f01ca360f23e90f20e06635000040000f22e064660f388153020f2114660fae740e0f011a0f01546866b9800000c054247a7a30670f01c3", 0x3b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$inet_udplite(0x2, 0x2, 0x88) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000401e04012800000000000109022400010000000009040100010300000009210000000122070009058103"], 0x0) ioctl$KVM_NMI(r4, 0xae9a) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r5, &(0x7f00000001c0)={0x14, &(0x7f0000000500)={0x20, 0x28, 0xa2, {0xa2, 0xb, "47a468c1fb56fd4a2625992afe97504bcb6b685b4f6e6c78f94b6e7e15aec50cfa73cddc359cbc4e039f625e7a8b4b60bd7e133686295846aad809943d13831620a24c60b6cf12f3158c6d871fa5d060b51f958f44b6ae6231167a3dcaf43957d885ff3778afbacbf8cf53c2e53a864871662a263632db064579ab9fb17887f6b94480c087981fcb54ae1d249a8e0daf1a47050362b621e33da981fbe80badcc"}}, 0x0}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x2000c044) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000300)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r6, 0xc02c5341, &(0x7f00000000c0)) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) set_mempolicy(0x4005, &(0x7f0000000040)=0x1001, 0x4) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a09040000000000000000020000002400048020000180080001006f73660014000280080003400000090008000140000000040900010073797a30000000000900020073797a32"], 0x78}, 0x1, 0x0, 0x0, 0x1}, 0x0) 3.194748388s ago: executing program 1 (id=393): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000140)={'macsec0\x00', @random="010000201000"}) (async) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000500000008000600", @ANYRES32, @ANYBLOB="08000300", @ANYRES32=r2], 0x34}, 0x1, 0x0, 0x0, 0x40400b0}, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) (async) r3 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFBR(r3, 0x8940, &(0x7f0000000080)=@generic={0x2, 0x8, 0x3}) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x14, r5, 0x100, 0x70ad2b, 0x25dfdbff, {0x5}}, 0x14}}, 0x200488c0) 3.108095754s ago: executing program 2 (id=394): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) pread64(r0, &(0x7f0000001440)=""/126, 0x7e, 0x805) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000062d14406d0470084761000000010902120001000000000904"], 0x0) 2.94985986s ago: executing program 1 (id=395): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000049c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x1408, 0x98, 0x1200, 0x123f, 0x0, 0x0, 0x1370, 0x1370, 0x1370, 0x1370, 0x1370, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'gretap0\x00', {}, {}, 0xff}, 0x0, 0x10a0, 0x10c8, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x0, './cgroup.net/syz1\x00', 0x4, {0x8}}}]}, @ECN={0x28}}, {{@ip={@loopback, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60}}, {{@ip={@broadcast, @empty, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x1468) 2.901204382s ago: executing program 1 (id=396): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x59, 0x77, 0xc, 0x40, 0x9c0, 0x203, 0xd332, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xfa, 0x10, 0xc9}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) getpgrp(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = dup(0xffffffffffffffff) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(0x0, r1) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x8, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) clock_gettime(0x7, &(0x7f0000000040)) clock_settime(0x0, &(0x7f0000000280)={0x77359400}) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x4000, 0x0) ioctl$TCXONC(r3, 0x540a, 0x3) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000002900)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x4044000}, 0x8000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(r1, &(0x7f0000000240)='./bus\x00', 0x147) mkdir(&(0x7f0000000200)='./file0\x00', 0x4c) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) r5 = inotify_init1(0x800) inotify_add_watch(r5, &(0x7f0000000000)='./bus\x00', 0x10000014) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x10, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='illinois\x00', 0x9) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x4001, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xd}, 0x1c) write$binfmt_script(r4, &(0x7f0000000080), 0x76e5467) 0s ago: executing program 0 (id=397): capset(&(0x7f00000000c0)={0x19980330}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0xfffffffe, 0x2}) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5393, &(0x7f0000000000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x2, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_SET_IRQCHIP(r5, 0x8208ae63, &(0x7f0000000500)={0x2, 0x0, @pic={0xf8, 0xf9, 0x0, 0xff, 0xfc, 0x0, 0x84, 0x4, 0x6, 0x85, 0x6, 0x99, 0xc6, 0x6, 0x40, 0xfb}}) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000170006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca4198904000500080006"], 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) getitimer(0x1, &(0x7f0000000400)) kernel console output (not intermixed with test programs): =1400 audit(1735647606.509:264): avc: denied { create } for pid=6124 comm="syz.2.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 74.849269][ T5860] sony 0003:12BA:0100.0001: item fetching failed at offset 1/5 [ 74.849912][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 74.870543][ T5860] sony 0003:12BA:0100.0001: parse failed [ 74.879329][ T5860] sony 0003:12BA:0100.0001: probe with driver sony failed with error -22 [ 74.890777][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 74.924725][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 74.948606][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 74.982986][ T12] veth1_macvtap: left promiscuous mode [ 74.994165][ T12] veth0_macvtap: left promiscuous mode [ 75.001930][ T12] veth1_vlan: left promiscuous mode [ 75.007735][ T12] veth0_vlan: left promiscuous mode [ 75.013335][ T5825] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 75.250797][ T5825] Bluetooth: hci1: command tx timeout [ 75.300470][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 75.318089][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 75.358223][ T9] usb 2-1: USB disconnect, device number 2 [ 75.561891][ T1207] vhci_hcd: vhci_device speed not set [ 75.683322][ T9] usb 1-1: USB disconnect, device number 3 [ 76.223672][ T6148] netlink: 'syz.1.64': attribute type 10 has an invalid length. [ 76.231371][ T6148] netlink: 32 bytes leftover after parsing attributes in process `syz.1.64'. [ 76.416753][ T12] team0 (unregistering): Port device team_slave_1 removed [ 76.448900][ T12] team0 (unregistering): Port device team_slave_0 removed [ 76.459102][ T867] cfg80211: failed to load regulatory.db [ 76.968649][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 76.968665][ T29] audit: type=1400 audit(1735647608.759:283): avc: denied { ioctl } for pid=6152 comm="syz.2.66" path="socket:[8973]" dev="sockfs" ino=8973 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 77.013975][ T6077] team0: Port device team_slave_1 added [ 77.044943][ T6148] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 77.056142][ T6148] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 77.065101][ T6148] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 77.073923][ T6148] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 77.148559][ T6077] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.159778][ T6077] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.243752][ T6077] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.258424][ T29] audit: type=1400 audit(1735647609.059:284): avc: denied { connect } for pid=6156 comm="syz.1.67" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 77.299865][ T29] audit: type=1400 audit(1735647609.059:285): avc: denied { name_connect } for pid=6156 comm="syz.1.67" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 77.320699][ C1] vkms_vblank_simulate: vblank timer overrun [ 77.326920][ T29] audit: type=1400 audit(1735647609.079:286): avc: denied { write } for pid=6158 comm="syz.0.68" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 77.347407][ T29] audit: type=1400 audit(1735647609.079:287): avc: denied { create } for pid=6158 comm="syz.0.68" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 77.355217][ T5825] Bluetooth: hci1: command tx timeout [ 77.367330][ T29] audit: type=1400 audit(1735647609.079:288): avc: denied { write } for pid=6158 comm="syz.0.68" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 77.397623][ T29] audit: type=1400 audit(1735647609.189:289): avc: denied { write } for pid=6160 comm="syz.4.69" name="net" dev="proc" ino=9346 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 77.420785][ T6077] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.427738][ T6077] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.453660][ C1] vkms_vblank_simulate: vblank timer overrun [ 77.460621][ T6077] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.480486][ T29] audit: type=1400 audit(1735647609.189:290): avc: denied { add_name } for pid=6160 comm="syz.4.69" name="pfkey" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 77.500506][ T29] audit: type=1400 audit(1735647609.189:291): avc: denied { create } for pid=6160 comm="syz.4.69" name="pfkey" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=file permissive=1 [ 77.520208][ C1] vkms_vblank_simulate: vblank timer overrun [ 77.526595][ T29] audit: type=1400 audit(1735647609.189:292): avc: denied { associate } for pid=6160 comm="syz.4.69" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 77.609855][ T46] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 77.697831][ T6077] hsr_slave_0: entered promiscuous mode [ 77.743672][ T6077] hsr_slave_1: entered promiscuous mode [ 77.762017][ T46] usb 2-1: unable to get BOS descriptor or descriptor too short [ 77.773785][ T46] usb 2-1: config 13 has an invalid interface number: 50 but max is 3 [ 77.816254][ T46] usb 2-1: config 13 has an invalid descriptor of length 0, skipping remainder of the config [ 77.840638][ T6077] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.850462][ T6077] Cannot create hsr debugfs directory [ 78.049621][ T5892] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 78.333473][ T5892] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 78.349191][ T5892] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 78.454001][ T46] usb 2-1: config 13 has 1 interface, different from the descriptor's value: 4 [ 78.463764][ T46] usb 2-1: config 13 has no interface number 0 [ 78.470687][ T46] usb 2-1: config 13 interface 50 altsetting 4 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 78.484192][ T46] usb 2-1: config 13 interface 50 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 78.497435][ T46] usb 2-1: config 13 interface 50 has no altsetting 0 [ 78.518964][ T46] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=a9.e8 [ 78.528227][ T46] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.539266][ T46] usb 2-1: Product: syz [ 78.544996][ T46] usb 2-1: Manufacturer: syz [ 78.549720][ T46] usb 2-1: SerialNumber: syz [ 78.665286][ T5892] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 78.680831][ T5892] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.715562][ T5892] usb 1-1: config 0 descriptor?? [ 79.013159][ T6077] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 79.044649][ T6077] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 79.117741][ T6077] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 79.140525][ T5858] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 79.400047][ T5858] usb 5-1: config 3 has an invalid interface number: 140 but max is 0 [ 79.420465][ T6077] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 79.427475][ T5825] Bluetooth: hci1: command tx timeout [ 79.427844][ T5858] usb 5-1: config 3 has no interface number 0 [ 79.500854][ T5858] usb 5-1: config 3 interface 140 altsetting 224 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 79.512410][ T5858] usb 5-1: config 3 interface 140 altsetting 224 bulk endpoint 0x4 has invalid maxpacket 8 [ 79.554542][ T5858] usb 5-1: config 3 interface 140 altsetting 224 has a duplicate endpoint with address 0x4, skipping [ 79.568679][ T5858] usb 5-1: config 3 interface 140 altsetting 224 endpoint 0x8 has invalid maxpacket 1535, setting to 64 [ 79.580191][ T5858] usb 5-1: config 3 interface 140 altsetting 224 has an invalid descriptor for endpoint zero, skipping [ 79.591754][ T5858] usb 5-1: config 3 interface 140 altsetting 224 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 79.603322][ T5858] usb 5-1: config 3 interface 140 altsetting 224 bulk endpoint 0x9 has invalid maxpacket 8 [ 79.613496][ T5858] usb 5-1: config 3 interface 140 has no altsetting 0 [ 79.648260][ T5892] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 79.691146][ T5858] usb 5-1: New USB device found, idVendor=04b4, idProduct=861f, bcdDevice=14.74 [ 79.700305][ T5858] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.708312][ T5858] usb 5-1: Product:   [ 79.724316][ T5858] usb 5-1: Manufacturer: ф [ 79.729026][ T5858] usb 5-1: SerialNumber: 胧 [ 79.751857][ T5892] cp2112 0003:10C4:EA90.0002: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 79.752370][ T6185] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 79.799218][ T6185] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 79.826921][ T6197] capability: warning: `syz.2.75' uses 32-bit capabilities (legacy support in use) [ 79.891428][ T6185] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 80.530712][ T6077] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.547505][ T6077] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.548626][ T5858] usb 5-1: USB disconnect, device number 4 [ 80.581164][ T6077] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 80.591806][ T6077] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 80.612107][ T6176] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.619307][ T6176] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.629031][ T6176] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.636173][ T6176] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.639152][ T6142] usb 2-1: Failed to submit usb control message: -71 [ 80.657213][ T46] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 80.743865][ T6142] usb 2-1: unable to send the bmi data to the device: -71 [ 80.873706][ T6209] netlink: 'syz.2.76': attribute type 10 has an invalid length. [ 80.881946][ T6209] netlink: 32 bytes leftover after parsing attributes in process `syz.2.76'. [ 80.971429][ T46] usb 2-1: USB disconnect, device number 3 [ 81.025104][ T6142] usb 2-1: unable to get target info from device [ 81.131982][ T6142] usb 2-1: could not get target info (-71) [ 81.183654][ T6142] usb 2-1: could not probe fw (-71) [ 81.448628][ T5892] cp2112 0003:10C4:EA90.0002: error requesting version [ 81.618068][ T5892] cp2112 0003:10C4:EA90.0002: probe with driver cp2112 failed with error -71 [ 81.664494][ T6077] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.696960][ T5892] usb 1-1: USB disconnect, device number 4 [ 81.992795][ T6236] Cannot find add_set index 0 as target [ 82.038022][ T6236] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 82.060486][ T5892] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 82.090417][ T6241] netlink: 76 bytes leftover after parsing attributes in process `syz.2.80'. [ 82.188162][ T6077] veth0_vlan: entered promiscuous mode [ 82.231998][ T5892] usb 1-1: too many configurations: 240, using maximum allowed: 8 [ 82.248654][ T6077] veth1_vlan: entered promiscuous mode [ 82.255154][ T5892] usb 1-1: invalid descriptor for config index 0: type = 0x2, length = 8 [ 82.302460][ T5892] usb 1-1: can't read configurations, error -22 [ 82.335685][ T6077] veth0_macvtap: entered promiscuous mode [ 82.364212][ T6077] veth1_macvtap: entered promiscuous mode [ 82.370252][ T46] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 82.399344][ T6077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.414567][ T6077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.425960][ T6077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.449212][ T6077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.467893][ T6077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.478775][ T6077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.489853][ T5892] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 82.493857][ T6077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.516370][ T6077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.526648][ T46] usb 5-1: device descriptor read/64, error -71 [ 82.546409][ T6077] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.569957][ T1207] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 82.587065][ T6077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.603590][ T6077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.615537][ T6077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.631107][ T6077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.644608][ T6077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.658118][ T6077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.669503][ T6077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.681025][ T5892] usb 1-1: too many configurations: 240, using maximum allowed: 8 [ 82.681259][ T6077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.700625][ T6077] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.704642][ T5892] usb 1-1: invalid descriptor for config index 0: type = 0x2, length = 8 [ 82.720542][ T6077] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.731115][ T6077] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.736830][ T5892] usb 1-1: can't read configurations, error -22 [ 82.749543][ T6077] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.761994][ T1207] usb 3-1: config 3 has an invalid interface number: 140 but max is 0 [ 82.771439][ T46] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 82.772260][ T5892] usb usb1-port1: attempt power cycle [ 82.779253][ T1207] usb 3-1: config 3 has no interface number 0 [ 82.792445][ T6077] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.801795][ T1207] usb 3-1: config 3 interface 140 altsetting 224 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 82.822449][ T1207] usb 3-1: config 3 interface 140 altsetting 224 bulk endpoint 0x4 has invalid maxpacket 8 [ 82.836362][ T1207] usb 3-1: config 3 interface 140 altsetting 224 has a duplicate endpoint with address 0x4, skipping [ 82.885125][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 82.885142][ T29] audit: type=1400 audit(1735647614.669:298): avc: denied { rename } for pid=5172 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 82.913628][ T1207] usb 3-1: config 3 interface 140 altsetting 224 endpoint 0x8 has invalid maxpacket 1535, setting to 64 [ 82.917207][ T139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.924827][ T1207] usb 3-1: config 3 interface 140 altsetting 224 has an invalid descriptor for endpoint zero, skipping [ 82.924857][ T1207] usb 3-1: config 3 interface 140 altsetting 224 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 82.959157][ T1207] usb 3-1: config 3 interface 140 altsetting 224 bulk endpoint 0x9 has invalid maxpacket 8 [ 82.969643][ T1207] usb 3-1: config 3 interface 140 has no altsetting 0 [ 82.975282][ T139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.981178][ T1207] usb 3-1: New USB device found, idVendor=04b4, idProduct=861f, bcdDevice=14.74 [ 82.993744][ T1207] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.997700][ T29] audit: type=1400 audit(1735647614.669:299): avc: denied { unlink } for pid=5172 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 83.019813][ T1207] usb 3-1: Product:   [ 83.029844][ T46] usb 5-1: device descriptor read/64, error -71 [ 83.051120][ T139] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.051449][ T1207] usb 3-1: Manufacturer: ф [ 83.068028][ T139] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.074023][ T1207] usb 3-1: SerialNumber: 胧 [ 83.087081][ T29] audit: type=1400 audit(1735647614.669:300): avc: denied { create } for pid=5172 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 83.112228][ T6249] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 83.126721][ T6249] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 83.140494][ T46] usb usb5-port1: attempt power cycle [ 83.154575][ T6249] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 83.173869][ T29] audit: type=1400 audit(1735647614.889:301): avc: denied { mounton } for pid=6077 comm="syz-executor" path="/root/syzkaller.pQX2Wp/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 83.201127][ T5892] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 83.245342][ T5892] usb 1-1: too many configurations: 240, using maximum allowed: 8 [ 83.270790][ T5892] usb 1-1: invalid descriptor for config index 0: type = 0x2, length = 8 [ 83.289803][ T5892] usb 1-1: can't read configurations, error -22 [ 83.298969][ T29] audit: type=1400 audit(1735647614.919:302): avc: denied { mount } for pid=6077 comm="syz-executor" name="/" dev="gadgetfs" ino=6804 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 83.430081][ T5892] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 83.466242][ T29] audit: type=1400 audit(1735647615.259:303): avc: denied { write } for pid=6273 comm="syz.1.84" name="001" dev="devtmpfs" ino=745 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 83.489706][ T46] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 83.510092][ T1207] usb 3-1: USB disconnect, device number 7 [ 83.530506][ T46] usb 5-1: device descriptor read/8, error -71 [ 83.714660][ T5892] usb 1-1: too many configurations: 240, using maximum allowed: 8 [ 83.728980][ T5892] usb 1-1: invalid descriptor for config index 0: type = 0x2, length = 8 [ 83.755660][ T5892] usb 1-1: can't read configurations, error -22 [ 84.732461][ T5892] usb usb1-port1: unable to enumerate USB device [ 84.823129][ T46] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 84.852483][ T46] usb 5-1: device descriptor read/8, error -71 [ 84.961058][ T46] usb usb5-port1: unable to enumerate USB device [ 85.460581][ T6297] netlink: 'syz.0.88': attribute type 10 has an invalid length. [ 85.468251][ T6297] netlink: 32 bytes leftover after parsing attributes in process `syz.0.88'. [ 85.739924][ T25] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 85.839860][ T867] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 85.902503][ T25] usb 3-1: Using ep0 maxpacket: 8 [ 85.919636][ T25] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 85.949227][ T25] usb 3-1: can't read configurations, error -22 [ 85.989819][ T867] usb 5-1: Using ep0 maxpacket: 16 [ 86.000128][ T867] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 86.023101][ T867] usb 5-1: config 0 interface 0 has no altsetting 0 [ 86.045820][ T867] usb 5-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 86.086166][ T867] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.100217][ T25] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 86.115731][ T867] usb 5-1: config 0 descriptor?? [ 86.239992][ T5860] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 86.271259][ T25] usb 3-1: Using ep0 maxpacket: 8 [ 86.287237][ T25] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 86.308541][ T25] usb 3-1: can't read configurations, error -22 [ 86.326324][ T25] usb usb3-port1: attempt power cycle [ 86.403047][ T5860] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 33, using maximum allowed: 30 [ 86.425239][ T5860] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 86.452496][ T5860] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 86.471216][ T5860] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 33 [ 86.488199][ T5860] usb 2-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 86.499716][ T5860] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.516005][ T5860] usb 2-1: config 0 descriptor?? [ 86.546794][ T867] waterforce 0003:1044:7A4D.0003: unknown main item tag 0x0 [ 86.566629][ T867] waterforce 0003:1044:7A4D.0003: unknown main item tag 0x0 [ 86.610655][ T867] waterforce 0003:1044:7A4D.0003: unknown main item tag 0x0 [ 86.618035][ T867] waterforce 0003:1044:7A4D.0003: unknown main item tag 0x0 [ 86.629213][ T867] waterforce 0003:1044:7A4D.0003: unknown main item tag 0x0 [ 86.643569][ T867] waterforce 0003:1044:7A4D.0003: hidraw0: USB HID v0.05 Device [HID 1044:7a4d] on usb-dummy_hcd.4-1/input0 [ 86.679909][ T25] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 86.730636][ T25] usb 3-1: Using ep0 maxpacket: 8 [ 86.744542][ T25] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 86.751140][ T29] audit: type=1400 audit(1735647618.539:304): avc: denied { accept } for pid=6327 comm="syz.5.94" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 86.765937][ T25] usb 3-1: can't read configurations, error -22 [ 86.775346][ T867] waterforce 0003:1044:7A4D.0003: fw version request failed with -38 [ 86.829263][ T867] usb 5-1: USB disconnect, device number 9 [ 86.940032][ T25] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 86.990499][ T25] usb 3-1: Using ep0 maxpacket: 8 [ 87.004962][ T25] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 87.028219][ T25] usb 3-1: can't read configurations, error -22 [ 87.053429][ T25] usb usb3-port1: unable to enumerate USB device [ 87.187799][ T29] audit: type=1400 audit(1735647618.929:305): avc: denied { module_load } for pid=6333 comm="syz.5.95" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 87.223055][ T5860] usbhid 2-1:0.0: can't add hid device: -71 [ 87.249168][ T5860] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 87.492698][ T5860] usb 2-1: USB disconnect, device number 4 [ 87.874336][ T6345] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=6345 comm=syz.4.96 [ 87.946647][ T29] audit: type=1400 audit(1735647619.739:306): avc: denied { set_context_mgr } for pid=6350 comm="syz.5.98" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 88.656192][ T6362] netlink: 4 bytes leftover after parsing attributes in process `syz.0.101'. [ 88.665806][ T6362] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 88.673891][ T6362] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 88.798625][ T29] audit: type=1400 audit(1735647620.429:307): avc: denied { ioctl } for pid=6361 comm="syz.0.101" path="socket:[10164]" dev="sockfs" ino=10164 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 88.853718][ T6362] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 88.861673][ T6362] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 88.889823][ T29] audit: type=1400 audit(1735647620.629:308): avc: denied { search } for pid=5172 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 89.172975][ T29] audit: type=1400 audit(1735647620.959:309): avc: denied { mount } for pid=6372 comm="syz.1.102" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 89.310222][ T6382] netlink: 24 bytes leftover after parsing attributes in process `syz.2.103'. [ 89.320175][ T6382] netlink: 264 bytes leftover after parsing attributes in process `syz.2.103'. [ 89.329427][ T6382] netlink: 64 bytes leftover after parsing attributes in process `syz.2.103'. [ 89.723715][ T6390] netlink: 8 bytes leftover after parsing attributes in process `syz.4.104'. [ 91.352204][ T6382] syz.2.103 (6382): drop_caches: 2 [ 91.917121][ T6400] veth1_macvtap: left promiscuous mode [ 91.958847][ T6400] macsec0: entered promiscuous mode [ 92.277682][ T29] audit: type=1400 audit(1735647624.039:310): avc: denied { read write } for pid=6407 comm="syz.4.112" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 92.387829][ T29] audit: type=1400 audit(1735647624.039:311): avc: denied { open } for pid=6407 comm="syz.4.112" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 92.629847][ T29] audit: type=1400 audit(1735647624.039:312): avc: denied { ioctl } for pid=6407 comm="syz.4.112" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 92.654684][ T1207] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 93.579012][ T6420] netlink: 8 bytes leftover after parsing attributes in process `syz.2.110'. [ 93.602326][ T6420] vlan2: entered allmulticast mode [ 93.808961][ T1207] usb 5-1: config 3 has an invalid interface number: 140 but max is 0 [ 93.817389][ T1207] usb 5-1: config 3 has an invalid interface association descriptor of length 2, skipping [ 93.822217][ T867] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 93.828025][ T1207] usb 5-1: config 3 has no interface number 0 [ 93.841776][ T1207] usb 5-1: config 3 interface 140 altsetting 224 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 93.855498][ T1207] usb 5-1: config 3 interface 140 altsetting 224 bulk endpoint 0x4 has invalid maxpacket 8 [ 93.865592][ T1207] usb 5-1: config 3 interface 140 altsetting 224 has a duplicate endpoint with address 0x4, skipping [ 93.949623][ T1207] usb 5-1: config 3 interface 140 altsetting 224 endpoint 0x8 has invalid maxpacket 1535, setting to 64 [ 93.961174][ T1207] usb 5-1: config 3 interface 140 altsetting 224 has an invalid descriptor for endpoint zero, skipping [ 93.963552][ T29] audit: type=1400 audit(1735647625.759:313): avc: denied { read write } for pid=6435 comm="syz.1.114" name="sg0" dev="devtmpfs" ino=756 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 93.973394][ T1207] usb 5-1: config 3 interface 140 altsetting 224 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 94.008625][ T1207] usb 5-1: config 3 interface 140 altsetting 224 bulk endpoint 0x9 has invalid maxpacket 8 [ 94.018824][ T1207] usb 5-1: config 3 interface 140 has no altsetting 0 [ 94.019272][ T6443] sg_write: data in/out 11/14 bytes for SCSI command 0x0-- guessing data in; [ 94.019272][ T6443] program syz.1.114 not setting count and/or reply_len properly [ 94.076823][ T29] audit: type=1400 audit(1735647625.759:314): avc: denied { open } for pid=6435 comm="syz.1.114" path="/dev/sg0" dev="devtmpfs" ino=756 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 94.120442][ T867] usb 1-1: Using ep0 maxpacket: 16 [ 94.135491][ T867] usb 1-1: unable to get BOS descriptor or descriptor too short [ 94.148837][ T867] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 94.162217][ T867] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.236648][ T1207] usb 5-1: New USB device found, idVendor=04b4, idProduct=861f, bcdDevice=14.74 [ 94.256753][ T1207] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.265409][ T29] audit: type=1400 audit(1735647626.059:315): avc: denied { accept } for pid=6447 comm="syz.5.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 94.266306][ T6450] netlink: 12 bytes leftover after parsing attributes in process `syz.5.115'. [ 94.306756][ T867] usb 1-1: Product: syz [ 94.306934][ T1207] usb 5-1: Product:   [ 94.315925][ T867] usb 1-1: Manufacturer: syz [ 94.322353][ T1207] usb 5-1: Manufacturer: ф [ 94.322434][ T867] usb 1-1: SerialNumber: syz [ 94.532135][ T1207] usb 5-1: SerialNumber: 胧 [ 95.369502][ T6411] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 95.390608][ T29] audit: type=1400 audit(1735647627.079:316): avc: denied { write } for pid=6451 comm="syz.2.117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 95.827978][ T6466] netlink: 32 bytes leftover after parsing attributes in process `syz.5.118'. [ 95.888014][ T1207] usb 5-1: can't set config #3, error -71 [ 96.067997][ T29] audit: type=1400 audit(1735647627.849:317): avc: denied { create } for pid=6465 comm="syz.5.118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 96.097701][ T867] usb 1-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 96.138153][ T29] audit: type=1400 audit(1735647627.849:318): avc: denied { bind } for pid=6465 comm="syz.5.118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 96.165054][ T29] audit: type=1400 audit(1735647627.859:319): avc: denied { write } for pid=6465 comm="syz.5.118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 96.185821][ T1207] usb 5-1: USB disconnect, device number 10 [ 96.228978][ T867] usb 1-1: USB disconnect, device number 9 [ 96.332933][ T6474] netlink: 'syz.1.119': attribute type 29 has an invalid length. [ 96.341953][ T6474] netlink: 'syz.1.119': attribute type 29 has an invalid length. [ 96.711764][ T6486] netlink: 8 bytes leftover after parsing attributes in process `syz.2.122'. [ 97.360787][ T29] audit: type=1400 audit(1735647628.929:320): avc: denied { ioctl } for pid=6476 comm="syz.4.123" path="socket:[11396]" dev="sockfs" ino=11396 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 97.450709][ C1] vkms_vblank_simulate: vblank timer overrun [ 97.456618][ T5806] udevd[5806]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 97.461391][ T6484] tty tty28: ldisc open failed (-12), clearing slot 27 [ 97.548641][ T6479] xt_CT: No such helper "snmp" [ 97.646742][ T6490] netlink: 4 bytes leftover after parsing attributes in process `syz.0.121'. [ 98.061160][ T29] audit: type=1400 audit(1735647629.849:321): avc: denied { ioctl } for pid=6494 comm="syz.2.125" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x3ba0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 98.073893][ T6498] Zero length message leads to an empty skb [ 98.096154][ T1207] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 98.468235][ T1207] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 98.477466][ T1207] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.486639][ T1207] usb 5-1: Product: syz [ 98.491109][ T1207] usb 5-1: Manufacturer: syz [ 98.495748][ T1207] usb 5-1: SerialNumber: syz [ 98.507914][ T1207] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 100.951176][ T9] usb 5-1: USB disconnect, device number 11 [ 101.002586][ T5860] usb 5-1: ath9k_htc: Firmware - ath9k_htc/htc_9271-1.4.0.fw download failed [ 101.014748][ T9] usb 5-1: ath9k_htc: USB layer deinitialized [ 101.208302][ T29] audit: type=1400 audit(1735647632.999:322): avc: denied { unmount } for pid=5819 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 101.275102][ T6520] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 101.316960][ T6520] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 101.320031][ T25] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 101.383310][ T29] audit: type=1400 audit(1735647633.179:323): avc: denied { ioctl } for pid=6530 comm="syz.1.132" path="socket:[11518]" dev="sockfs" ino=11518 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 101.509856][ T25] usb 3-1: Using ep0 maxpacket: 32 [ 101.528431][ T25] usb 3-1: unable to get BOS descriptor or descriptor too short [ 101.545232][ T25] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 101.559485][ T25] usb 3-1: can't read configurations, error -71 [ 101.590066][ T9] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 101.699929][ T46] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 101.742301][ T9] usb 5-1: config 3 has an invalid interface number: 140 but max is 0 [ 101.751399][ T9] usb 5-1: config 3 has an invalid interface association descriptor of length 2, skipping [ 101.765116][ T9] usb 5-1: config 3 has no interface number 0 [ 101.783398][ T9] usb 5-1: config 3 interface 140 altsetting 224 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 101.794938][ T9] usb 5-1: config 3 interface 140 altsetting 224 bulk endpoint 0x4 has invalid maxpacket 8 [ 101.813630][ T9] usb 5-1: config 3 interface 140 altsetting 224 has a duplicate endpoint with address 0x4, skipping [ 101.828415][ T9] usb 5-1: config 3 interface 140 altsetting 224 endpoint 0x8 has invalid maxpacket 1535, setting to 64 [ 101.840443][ T9] usb 5-1: config 3 interface 140 altsetting 224 has an invalid descriptor for endpoint zero, skipping [ 101.853137][ T9] usb 5-1: config 3 interface 140 altsetting 224 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 101.864854][ T9] usb 5-1: config 3 interface 140 altsetting 224 bulk endpoint 0x9 has invalid maxpacket 8 [ 101.873867][ T46] usb 2-1: config 4 has an invalid interface number: 87 but max is 0 [ 101.875524][ T9] usb 5-1: config 3 interface 140 has no altsetting 0 [ 101.887367][ T46] usb 2-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 101.892755][ T9] usb 5-1: New USB device found, idVendor=04b4, idProduct=861f, bcdDevice=14.74 [ 101.910752][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.927703][ T9] usb 5-1: Product:   [ 101.933882][ T9] usb 5-1: Manufacturer: ф [ 101.934725][ T6540] netlink: 'syz.0.134': attribute type 10 has an invalid length. [ 101.938680][ T9] usb 5-1: SerialNumber: 胧 [ 101.954485][ T46] usb 2-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 101.956460][ T6522] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 101.971279][ T6522] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 101.989176][ T46] usb 2-1: config 4 has no interface number 0 [ 101.989515][ T6522] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 102.002256][ T46] usb 2-1: config 4 interface 87 altsetting 8 endpoint 0x5 has invalid maxpacket 1023, setting to 64 [ 102.039304][ T29] audit: type=1400 audit(1735647633.829:324): avc: denied { mounton } for pid=6539 comm="syz.0.134" path="/syzcgroup/unified/syz0" dev="cgroup2" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 102.059591][ T6540] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.077670][ T46] usb 2-1: config 4 interface 87 altsetting 8 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 102.104611][ T6540] team0: Port device bond0 added [ 102.105625][ T46] usb 2-1: config 4 interface 87 altsetting 8 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 102.120889][ T46] usb 2-1: config 4 interface 87 altsetting 8 has a duplicate endpoint with address 0x2, skipping [ 102.132137][ T46] usb 2-1: config 4 interface 87 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 102.143031][ T46] usb 2-1: config 4 interface 87 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 102.153994][ T46] usb 2-1: config 4 interface 87 has no altsetting 0 [ 102.175498][ T46] usb 2-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice=8b.57 [ 102.184782][ T46] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.193021][ T46] usb 2-1: Product: Т [ 102.197242][ T46] usb 2-1: Manufacturer: 稱项煄貮㠨棃횵汮ꍾ㲤㝫湽箂ꥮ㶪롴쾅덵잋⋢㎇图䞗푋펅೓矩₦⃉䱀풆뜷閕섐Ή市ﺛ䥠㵽췅껲物齓ᩐꊀ흹薅뽝䀗涽⯢洢或爕瓮Ꝉ嬨╫툻柚鵢㏭⠑潁㍯૊ᆭ“폒邝篙ਲ⫑ [ 102.223427][ T46] usb 2-1: SerialNumber: 郙繪(笉趚쀤㨒帋蘠㶂ό쓤᰽䭼䱫἞됝ꪜ뭡⩪㺟瞊⼵뗮餟ꗔ軩₵➅혏쪣ꚭ鷮匿Ȫ姅䋟뷴޸⤛䜭鿄侉墬又恄秉얿䃋籮䂀埐 [ 102.300215][ T9] usb 5-1: USB disconnect, device number 12 [ 102.421657][ T6531] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 102.434181][ T6531] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 102.446721][ T6531] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 102.460639][ T6531] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 102.546820][ T6552] netlink: 8 bytes leftover after parsing attributes in process `syz.2.135'. [ 102.959068][ T46] pxrc 2-1:4.87: Could not find endpoint [ 103.005553][ T46] usb 2-1: USB disconnect, device number 5 [ 103.207326][ T29] audit: type=1326 audit(1735647634.999:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6557 comm="syz.0.136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f3190385d29 code=0x7ffc0000 [ 103.234105][ T6558] audit: audit_backlog=65 > audit_backlog_limit=64 [ 103.247990][ T29] audit: type=1326 audit(1735647634.999:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6557 comm="syz.0.136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f3190385d29 code=0x7ffc0000 [ 103.250056][ T6558] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 103.284154][ T6558] audit: backlog limit exceeded [ 103.313900][ T29] audit: type=1326 audit(1735647634.999:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6557 comm="syz.0.136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f3190385d29 code=0x7ffc0000 [ 103.329431][ T6558] overlay: filesystem on ./bus not supported as upperdir [ 103.370549][ T29] audit: type=1326 audit(1735647634.999:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6557 comm="syz.0.136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f3190385d29 code=0x7ffc0000 [ 103.610302][ T6572] loop6: detected capacity change from 0 to 524287999 [ 103.649145][ C0] I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 103.663447][ C0] I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 103.684674][ T6142] loop: Write error at byte offset 1, length 4096. [ 103.711027][ C1] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 103.721102][ C1] Buffer I/O error on dev loop6, logical block 0, lost async page write [ 103.823713][ C0] I/O error, dev loop6, sector 524287744 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 103.844564][ C0] I/O error, dev loop6, sector 524287744 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 103.854491][ C0] Buffer I/O error on dev loop6, logical block 65535968, async page read [ 103.969884][ T9] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 104.058220][ T5825] Bluetooth: hci4: unexpected Set CIG Parameters response data [ 104.120661][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 104.132027][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.147439][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.198779][ T9] usb 1-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 104.210103][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.222264][ T9] usb 1-1: config 0 descriptor?? [ 104.230614][ T867] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 104.300050][ T5892] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 104.400235][ T867] usb 3-1: Using ep0 maxpacket: 16 [ 104.408258][ T867] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.426738][ T867] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 104.471914][ T5892] usb 5-1: Using ep0 maxpacket: 32 [ 104.486572][ T5892] usb 5-1: config 0 has an invalid interface number: 150 but max is 0 [ 104.505105][ T867] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 104.524485][ T5892] usb 5-1: config 0 has no interface number 0 [ 104.530954][ T5892] usb 5-1: New USB device found, idVendor=17cc, idProduct=baff, bcdDevice=e1.1f [ 104.540411][ T867] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.551587][ T5892] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.561355][ T867] usb 3-1: config 0 descriptor?? [ 104.569584][ T867] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 104.579846][ T5892] usb 5-1: config 0 descriptor?? [ 104.777428][ T9] playstation 0003:054C:05C4.0004: hidraw0: USB HID v0.00 Device [HID 054c:05c4] on usb-dummy_hcd.0-1/input0 [ 104.831123][ T46] usb 2-1: new low-speed USB device number 6 using dummy_hcd [ 105.121791][ T46] usb 2-1: New USB device found, idVendor=0424, idProduct=7800, bcdDevice=e9.41 [ 105.223863][ T46] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.481511][ T46] usb 2-1: config 0 descriptor?? [ 105.658964][ T46] lan78xx 2-1:0.0 (unnamed net_device) (uninitialized): USB bus speed not supported [ 105.668599][ T46] lan78xx 2-1:0.0: probe with driver lan78xx failed with error -5 [ 105.751568][ T5892] usb 5-1: string descriptor 0 read error: -71 [ 105.794560][ T5892] snd-usb-caiaq 5-1:0.150: can't set alt interface. [ 105.837727][ T5891] usb 2-1: USB disconnect, device number 6 [ 105.849864][ T46] usb 3-1: USB disconnect, device number 14 [ 105.966028][ T5892] usb 5-1: unable to init card! (ret=-5) [ 106.031127][ T5892] snd-usb-caiaq 5-1:0.150: probe with driver snd-usb-caiaq failed with error -5 [ 106.033669][ T5892] usb 5-1: USB disconnect, device number 13 [ 106.683402][ T6573] kvm: emulating exchange as write [ 107.833669][ T9] playstation 0003:054C:05C4.0004: Failed to retrieve feature with reportID 18: -71 [ 107.843273][ T9] playstation 0003:054C:05C4.0004: Failed to retrieve DualShock4 pairing info: -71 [ 107.849919][ T5858] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 107.853224][ T9] playstation 0003:054C:05C4.0004: Failed to get MAC address from DualShock4 [ 107.898908][ T9] playstation 0003:054C:05C4.0004: Failed to create dualshock4. [ 107.917602][ T9] playstation 0003:054C:05C4.0004: probe with driver playstation failed with error -71 [ 107.931571][ T9] usb 1-1: USB disconnect, device number 10 [ 108.031437][ T5858] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 108.040444][ T5858] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 108.220552][ T5825] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 108.229156][ T5825] Bluetooth: hci4: Injecting HCI hardware error event [ 108.244487][ T5825] Bluetooth: hci4: hardware error 0x00 [ 108.683104][ T5858] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 108.709662][ T5858] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 108.720796][ T5858] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 108.821064][ T5858] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 108.855324][ T5858] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 108.867342][ T6643] netlink: 'syz.1.153': attribute type 1 has an invalid length. [ 108.899985][ T5858] usb 6-1: Product: syz [ 108.915486][ T5858] usb 6-1: Manufacturer: syz [ 108.945051][ T5858] cdc_wdm 6-1:1.0: skipping garbage [ 108.951260][ T5858] cdc_wdm 6-1:1.0: skipping garbage [ 108.958575][ T5858] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 108.964963][ T5858] cdc_wdm 6-1:1.0: Unknown control protocol [ 109.072170][ T6643] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 109.188771][ T62] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 109.189267][ T6643] 8021q: adding VLAN 0 to HW filter on device bond1 [ 109.332225][ T1097] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 109.626084][ T5858] usb 3-1: new low-speed USB device number 15 using dummy_hcd [ 110.159817][ T5858] usb 3-1: Invalid ep0 maxpacket: 32 [ 110.374162][ T29] kauditd_printk_skb: 72 callbacks suppressed [ 110.374203][ T29] audit: type=1400 audit(1735647642.169:401): avc: denied { create } for pid=6656 comm="syz.1.156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 110.556268][ T29] audit: type=1400 audit(1735647642.179:402): avc: denied { connect } for pid=6656 comm="syz.1.156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 110.575844][ C1] vkms_vblank_simulate: vblank timer overrun [ 110.585551][ T5858] usb 3-1: new low-speed USB device number 16 using dummy_hcd [ 110.596754][ T29] audit: type=1400 audit(1735647642.389:403): avc: denied { create } for pid=6659 comm="syz.0.157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 110.745440][ T6657] netlink: 12 bytes leftover after parsing attributes in process `syz.1.156'. [ 110.769901][ T5825] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 110.890115][ T5858] usb 3-1: Invalid ep0 maxpacket: 32 [ 110.898700][ T5858] usb usb3-port1: attempt power cycle [ 110.922059][ T29] audit: type=1400 audit(1735647642.689:404): avc: denied { create } for pid=6656 comm="syz.1.156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 110.941370][ C1] vkms_vblank_simulate: vblank timer overrun [ 111.058452][ T6634] netlink: 52 bytes leftover after parsing attributes in process `syz.4.152'. [ 111.151108][ T5860] usb 6-1: USB disconnect, device number 2 [ 111.284651][ T6673] netlink: 16 bytes leftover after parsing attributes in process `syz.5.158'. [ 111.310082][ T5858] usb 3-1: new low-speed USB device number 17 using dummy_hcd [ 111.330448][ T5858] usb 3-1: Invalid ep0 maxpacket: 32 [ 111.469949][ T5858] usb 3-1: new low-speed USB device number 18 using dummy_hcd [ 111.505240][ T5858] usb 3-1: Invalid ep0 maxpacket: 32 [ 111.529294][ T5858] usb usb3-port1: unable to enumerate USB device [ 112.376067][ T29] audit: type=1400 audit(1735647644.169:405): avc: denied { write } for pid=6688 comm="syz.5.160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 112.669946][ T9] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 112.794370][ T29] audit: type=1400 audit(1735647644.589:406): avc: denied { execute } for pid=6699 comm="syz.4.163" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=11193 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 112.824278][ T9] usb 6-1: not running at top speed; connect to a high speed hub [ 112.832546][ T5891] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 112.851557][ T9] usb 6-1: config 1 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 600, setting to 64 [ 112.863256][ T9] usb 6-1: config 1 interface 0 altsetting 8 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 112.878025][ T9] usb 6-1: config 1 interface 0 has no altsetting 0 [ 112.886893][ T9] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 112.906200][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.920091][ T9] usb 6-1: Product: 㞒啯뭃Ϣ腐Ⴟ揰ᾌ䄝⯎鍝섴㠁㓻낍⭲綺몚䙷ⷯꏞ뜱蚽巉鷄瀇ꮧ﷋佪륈奦脺峎㳰㵕ꞗ졨蚗墔㫹娰⯆皉衠됏䍗⹿ᙻ沼䮁垢莎ഛ뮝͈뭧Ú㔒ʃ栌蚇㐂⋊丵艀㺤⥞轭∌⤪鮙䩐튱ⳝ簵霉⁻坱 [ 112.989704][ T9] usb 6-1: Manufacturer: ఄ [ 112.990212][ T5891] usb 3-1: Using ep0 maxpacket: 16 [ 113.001082][ T9] usb 6-1: SerialNumber: ꭾ搛㛙Ỳ睁耐媭䗙坔陟쌄徲珝貽痡뉫ﴖ⠭䪼䟼擦좭특䩲♃袯섣㩑쳗廵懴츝刎⫼韊蕌簥碨䇿늡⬋墧挏į猉㷵䬪畋ᬘ叒⎍Ģ沨素傾踼碏晗⑦♰䞰䕏ɢ [ 113.029855][ T5892] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 113.044638][ T5891] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.056846][ T5891] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 113.074526][ T6689] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 113.083224][ T5891] usb 3-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 113.103461][ T5891] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.127403][ T5891] usb 3-1: config 0 descriptor?? [ 113.204145][ T5892] usb 2-1: Using ep0 maxpacket: 16 [ 113.224850][ T5892] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.286632][ T5892] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.299926][ T5892] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 113.316061][ T5892] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 113.325434][ T5892] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.505461][ T29] audit: type=1400 audit(1735647645.289:407): avc: denied { bind } for pid=6694 comm="syz.2.162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 113.525740][ C1] vkms_vblank_simulate: vblank timer overrun [ 114.038732][ T5892] usb 2-1: config 0 descriptor?? [ 114.603250][ T5892] microsoft 0003:045E:07DA.0005: ignoring exceeding usage max [ 114.623453][ T5892] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0005/input/input6 [ 114.684280][ T9] usb 6-1: bad CDC descriptors [ 114.705022][ T5891] usbhid 3-1:0.0: can't add hid device: -71 [ 114.711189][ T5891] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 114.754912][ T6733] program syz.4.168 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 114.772404][ T9] usb 6-1: USB disconnect, device number 3 [ 114.790760][ T5891] usb 3-1: USB disconnect, device number 19 [ 114.828960][ T29] audit: type=1400 audit(1735647646.619:408): avc: denied { read } for pid=6736 comm="syz.2.170" dev="sockfs" ino=11215 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 114.829358][ T6738] 9pnet_fd: Insufficient options for proto=fd [ 114.903611][ T5892] microsoft 0003:045E:07DA.0005: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 114.941933][ T29] audit: type=1400 audit(1735647646.659:409): avc: denied { execute } for pid=6736 comm="syz.2.170" path="/37/cpu.stat" dev="tmpfs" ino=223 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 115.017101][ T5892] usb 2-1: USB disconnect, device number 7 [ 115.029955][ T25] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 115.035484][ T29] audit: type=1400 audit(1735647646.669:410): avc: denied { setopt } for pid=6736 comm="syz.2.170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 115.067932][ T6746] tc_dump_action: action bad kind [ 115.202567][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.221150][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.231043][ T25] usb 1-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 115.240171][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.254980][ T25] usb 1-1: config 0 descriptor?? [ 115.471993][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 115.472014][ T29] audit: type=1400 audit(1735647647.269:415): avc: denied { write } for pid=6760 comm="syz.5.175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 115.582221][ T29] audit: type=1400 audit(1735647647.309:416): avc: denied { sqpoll } for pid=6760 comm="syz.5.175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 115.672188][ T29] audit: type=1400 audit(1735647647.319:417): avc: denied { getopt } for pid=6760 comm="syz.5.175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 115.990419][ T5891] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 116.149378][ T29] audit: type=1400 audit(1735647647.939:418): avc: denied { create } for pid=6784 comm="syz.1.181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 116.153643][ T6785] SELinux: policydb version 1392057088 does not match my version range 15-33 [ 116.169369][ T5891] usb 6-1: Using ep0 maxpacket: 16 [ 116.178370][ T6785] SELinux: failed to load policy [ 116.203340][ T5891] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 116.219845][ T5891] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 116.230482][ T29] audit: type=1400 audit(1735647647.939:419): avc: denied { load_policy } for pid=6784 comm="syz.1.181" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 116.290311][ T5891] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 116.366832][ T5891] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 116.377383][ T5891] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.431262][ T5891] usb 6-1: Product: syz [ 116.466648][ T5891] usb 6-1: Manufacturer: syz [ 116.490175][ T5891] usb 6-1: SerialNumber: syz [ 116.783540][ T25] usbhid 1-1:0.0: can't add hid device: -71 [ 116.789915][ T25] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 116.830033][ T25] usb 1-1: USB disconnect, device number 11 [ 117.801483][ T6805] syzkaller0: entered allmulticast mode [ 117.821166][ T5891] usb 6-1: 0:2 : does not exist [ 117.829251][ T5891] usb 6-1: 1:0: cannot get min/max values for control 4 (id 1) [ 117.860409][ T29] audit: type=1400 audit(1735647649.619:420): avc: denied { read write } for pid=6804 comm="syz.0.185" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 117.924571][ T29] audit: type=1400 audit(1735647649.619:421): avc: denied { open } for pid=6804 comm="syz.0.185" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 117.987316][ T6805] syzkaller0 (unregistering): left allmulticast mode [ 118.038426][ T5891] usb 6-1: USB disconnect, device number 4 [ 118.181434][ T25] libceph: connect (1)[c::]:6789 error -101 [ 118.227517][ T25] libceph: mon0 (1)[c::]:6789 connect error [ 118.249413][ T29] audit: type=1326 audit(1735647650.039:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6818 comm="syz.0.187" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3190385d29 code=0x0 [ 118.318575][ T6815] ceph: No mds server is up or the cluster is laggy [ 118.331088][ T25] libceph: connect (1)[c::]:6789 error -101 [ 118.337142][ T25] libceph: mon0 (1)[c::]:6789 connect error [ 118.344997][ T5806] udevd[5806]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 118.375310][ T29] audit: type=1400 audit(1735647650.159:423): avc: denied { ioctl } for pid=6813 comm="syz.4.186" path="/dev/usbmon1" dev="devtmpfs" ino=717 ioctlcmd=0x9203 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 118.424094][ T6831] input: syz0 as /devices/virtual/input/input7 [ 120.036012][ T29] audit: type=1400 audit(1735647651.829:424): avc: denied { write } for pid=6856 comm="syz.2.194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 120.259913][ T5892] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 120.279817][ T25] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 120.429934][ T5892] usb 5-1: Using ep0 maxpacket: 8 [ 120.461234][ T5892] usb 5-1: unable to get BOS descriptor or descriptor too short [ 120.490044][ T5892] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 120.498751][ T5892] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 120.564368][ T5892] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 120.627234][ T25] usb 3-1: config 21 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.648144][ T6875] netlink: 8 bytes leftover after parsing attributes in process `syz.5.196'. [ 121.171908][ T5892] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 121.186777][ T5892] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.197769][ T5892] usb 5-1: Product: syz [ 121.205980][ T5892] usb 5-1: Manufacturer: syz [ 121.210984][ T5892] usb 5-1: SerialNumber: syz [ 122.214965][ T25] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 122.229795][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.264829][ T25] usb 3-1: Product: syz [ 122.293981][ T25] usb 3-1: Manufacturer: syz [ 122.298635][ T25] usb 3-1: SerialNumber: syz [ 122.822958][ T29] audit: type=1400 audit(1735647654.619:425): avc: denied { ioctl } for pid=6903 comm="syz.0.199" path="socket:[12616]" dev="sockfs" ino=12616 ioctlcmd=0x89ef scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 123.561539][ T5892] usb 5-1: 0:2 : does not exist [ 123.622362][ T29] audit: type=1400 audit(1735647654.779:426): avc: denied { setopt } for pid=6901 comm="syz.5.198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 123.734522][ T5892] usb 5-1: USB disconnect, device number 14 [ 123.943337][ T5804] udevd[5804]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 124.102688][ T6920] xt_connbytes: Forcing CT accounting to be enabled [ 124.120721][ T6920] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 124.240049][ T25] cdc_ncm 3-1:21.0: MAC-Address: 42:42:42:42:42:42 [ 124.246645][ T25] cdc_ncm 3-1:21.0: setting rx_max = 16384 [ 124.440805][ T25] cdc_ncm 3-1:21.0: setting tx_max = 88 [ 124.470148][ T5825] Bluetooth: hci1: ISO packet for unknown connection handle 768 [ 124.480643][ T25] cdc_ncm 3-1:21.0 eth5: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 124.523701][ T25] usb 3-1: USB disconnect, device number 20 [ 124.530492][ T25] cdc_ncm 3-1:21.0 eth5: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM (NO ZLP) [ 124.960055][ T29] audit: type=1400 audit(1735647656.759:427): avc: denied { read } for pid=6937 comm="syz.1.209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 125.122150][ T29] audit: type=1400 audit(1735647656.909:428): avc: denied { remount } for pid=6944 comm="syz.2.211" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 125.180445][ T29] audit: type=1400 audit(1735647656.949:429): avc: denied { map } for pid=6944 comm="syz.2.211" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 125.271815][ T29] audit: type=1400 audit(1735647656.949:430): avc: denied { execute } for pid=6944 comm="syz.2.211" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 125.442135][ T9] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 125.543751][ T29] audit: type=1400 audit(1735647657.329:431): avc: denied { shutdown } for pid=6928 comm="syz.4.206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 125.615600][ T6963] netlink: 156 bytes leftover after parsing attributes in process `syz.2.214'. [ 125.759564][ T9] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 125.769407][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.779538][ T9] usb 1-1: config 0 descriptor?? [ 125.787971][ T9] cp210x 1-1:0.0: cp210x converter detected [ 126.400684][ T25] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 126.575809][ T9] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 126.594810][ T25] usb 2-1: Using ep0 maxpacket: 16 [ 126.625166][ T25] usb 2-1: config 0 has an invalid interface number: 214 but max is 0 [ 126.645259][ T25] usb 2-1: config 0 has no interface number 0 [ 126.657694][ T25] usb 2-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 126.724783][ T25] usb 2-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 126.741850][ T46] IPVS: starting estimator thread 0... [ 126.747678][ T6977] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 126.766393][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.785712][ T29] audit: type=1400 audit(1735647658.579:432): avc: denied { getopt } for pid=6976 comm="syz.5.220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 126.816183][ T25] usb 2-1: Product: syz [ 126.826278][ T25] usb 2-1: Manufacturer: syz [ 126.828473][ T9] usb 1-1: cp210x converter now attached to ttyUSB0 [ 126.830992][ T29] audit: type=1400 audit(1735647658.579:433): avc: denied { read } for pid=6976 comm="syz.5.220" path="socket:[12815]" dev="sockfs" ino=12815 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 126.908348][ T25] usb 2-1: SerialNumber: syz [ 126.950139][ T6980] IPVS: using max 28 ests per chain, 67200 per kthread [ 126.980716][ T25] usb 2-1: config 0 descriptor?? [ 127.223320][ T6985] netlink: 'syz.2.222': attribute type 39 has an invalid length. [ 127.303107][ T29] audit: type=1400 audit(1735647659.089:434): avc: denied { shutdown } for pid=6987 comm="syz.5.224" lport=7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 127.313303][ T6988] syz.5.224 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 127.624690][ T46] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 128.553639][ T46] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.588506][ T46] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 128.690700][ T46] usb 5-1: New USB device found, idVendor=1345, idProduct=3008, bcdDevice= 0.00 [ 128.904720][ T5860] usb 1-1: USB disconnect, device number 12 [ 128.933368][ T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.965229][ T5860] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 129.106527][ T7004] netlink: 4 bytes leftover after parsing attributes in process `syz.0.227'. [ 129.140110][ T25] usbtouchscreen 2-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 129.157730][ T46] usb 5-1: config 0 descriptor?? [ 129.429510][ T5860] cp210x 1-1:0.0: device disconnected [ 129.483878][ T25] usb 2-1: USB disconnect, device number 8 [ 129.623033][ T6999] netlink: 112 bytes leftover after parsing attributes in process `syz.5.226'. [ 129.645931][ T6999] netlink: 1280 bytes leftover after parsing attributes in process `syz.5.226'. [ 129.704279][ T46] sony 0003:1345:3008.0006: hiddev0,hidraw0: USB HID v80.00 Device [HID 1345:3008] on usb-dummy_hcd.4-1/input0 [ 129.743811][ T46] sony 0003:1345:3008.0006: failed to claim input [ 130.206424][ T7018] block device autoloading is deprecated and will be removed. [ 130.232117][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 130.236500][ T29] audit: type=1400 audit(1735647662.019:436): avc: denied { mounton } for pid=7015 comm="syz.1.231" path="/51/file0" dev="tmpfs" ino=292 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 130.242623][ T5891] usb 5-1: USB disconnect, device number 15 [ 130.291065][ T7018] syz.5.232: attempt to access beyond end of device [ 130.291065][ T7018] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 130.401766][ T7023] netlink: 16 bytes leftover after parsing attributes in process `syz.0.233'. [ 130.855297][ T29] audit: type=1400 audit(1735647662.649:437): avc: denied { bind } for pid=7028 comm="syz.2.234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 130.918894][ T7033] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.946437][ T7040] usb usb8: usbfs: interface 0 claimed by hub while 'syz.5.236' sets config #0 [ 130.956584][ T29] audit: type=1400 audit(1735647662.729:438): avc: denied { append } for pid=7031 comm="syz.5.236" name="001" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 131.049836][ T7033] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 131.102429][ T7032] netlink: 'syz.2.234': attribute type 1 has an invalid length. [ 131.235180][ T29] audit: type=1400 audit(1735647663.029:439): avc: denied { map } for pid=7046 comm="syz.1.238" path="/dev/dlm_plock" dev="devtmpfs" ino=96 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 131.928285][ T29] audit: type=1400 audit(1735647663.649:440): avc: denied { create } for pid=7061 comm="syz.1.241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 132.005442][ T29] audit: type=1400 audit(1735647663.659:441): avc: denied { bind } for pid=7061 comm="syz.1.241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 132.061872][ T29] audit: type=1400 audit(1735647663.659:442): avc: denied { setopt } for pid=7061 comm="syz.1.241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 132.169896][ T5891] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 132.215027][ T7068] netlink: 12 bytes leftover after parsing attributes in process `syz.0.243'. [ 132.313491][ T7068] netlink: 12 bytes leftover after parsing attributes in process `syz.0.243'. [ 132.369646][ T5891] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.389528][ T5891] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 132.409849][ T5891] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 132.422811][ T5891] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 132.432088][ T5891] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.472192][ T5891] usb 2-1: config 0 descriptor?? [ 132.676511][ T29] audit: type=1400 audit(1735647664.419:443): avc: denied { lock } for pid=7071 comm="syz.4.247" path="socket:[13443]" dev="sockfs" ino=13443 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 132.817747][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.824174][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.002857][ T5891] usbhid 2-1:0.0: can't add hid device: -71 [ 133.008877][ T5891] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 133.025879][ T5891] usb 2-1: USB disconnect, device number 9 [ 133.181114][ T29] audit: type=1400 audit(1735647664.979:444): avc: denied { watch watch_reads } for pid=7083 comm="syz.4.248" path="/proc/164/task" dev="proc" ino=13460 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 133.463668][ T25] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 134.103722][ T25] usb 5-1: New USB device found, idVendor=0c72, idProduct=0012, bcdDevice=22.96 [ 134.162319][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.181072][ T25] usb 5-1: Product: syz [ 134.189891][ T25] usb 5-1: Manufacturer: syz [ 134.199877][ T25] usb 5-1: SerialNumber: syz [ 134.209490][ T25] usb 5-1: config 0 descriptor?? [ 134.243572][ T29] audit: type=1400 audit(1735647666.039:445): avc: denied { read write } for pid=7098 comm="syz.0.252" name="btrfs-control" dev="devtmpfs" ino=1309 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 134.604936][ T7106] sg_write: data in/out 8192/1 bytes for SCSI command 0xf2-- guessing data in; [ 134.604936][ T7106] program syz.5.256 not setting count and/or reply_len properly [ 134.643141][ T46] libceph: connect (1)[c::]:6789 error -101 [ 134.649303][ T46] libceph: mon0 (1)[c::]:6789 connect error [ 134.693995][ T7114] netlink: 4 bytes leftover after parsing attributes in process `syz.2.255'. [ 134.879797][ T7104] ceph: No mds server is up or the cluster is laggy [ 134.879834][ T5891] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 134.907795][ T7086] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.972336][ T7086] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.991957][ T46] libceph: connect (1)[c::]:6789 error -101 [ 134.998095][ T46] libceph: mon0 (1)[c::]:6789 connect error [ 135.169358][ T7086] kvm: kvm [7083]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x800 [ 135.230202][ T25] peak_usb 5-1:0.0: PEAK-System PCAN-USB FD v0 fw v0.0.0 (1 channels) [ 136.195584][ T7127] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 136.204634][ T7127] overlayfs: missing 'lowerdir' [ 136.943151][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 136.943167][ T29] audit: type=1400 audit(1735647668.739:450): avc: denied { read } for pid=7128 comm="syz.5.260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 137.110984][ T25] peak_usb 5-1:0.0 can0: unable to request usb[type=2 value=5] err=-71 [ 137.131667][ T25] peak_usb 5-1:0.0: unable to tell PCAN-USB FD driver is loaded (err -71) [ 137.216478][ T25] peak_usb 5-1:0.0: probe with driver peak_usb failed with error -71 [ 137.282488][ T25] usb 5-1: USB disconnect, device number 16 [ 137.530696][ T7138] netlink: 'syz.4.264': attribute type 1 has an invalid length. [ 137.624552][ T29] audit: type=1400 audit(1735647669.409:451): avc: denied { shutdown } for pid=7135 comm="syz.2.263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 137.674479][ T7138] bond1: entered promiscuous mode [ 137.683125][ T7138] 8021q: adding VLAN 0 to HW filter on device bond1 [ 137.997678][ T29] audit: type=1400 audit(1735647669.449:452): avc: denied { setopt } for pid=7135 comm="syz.2.263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 138.632000][ T7150] mkiss: ax0: crc mode is auto. [ 139.813466][ T7162] SELinux: Context system_u: is not valid (left unmapped). [ 140.077504][ T29] audit: type=1400 audit(1735647671.869:453): avc: denied { bind } for pid=7165 comm="syz.4.271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 140.207032][ T7172] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 140.216069][ T7172] overlayfs: missing 'lowerdir' [ 140.681473][ T5860] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 140.873568][ T5860] usb 3-1: Using ep0 maxpacket: 8 [ 140.999449][ T5860] usb 3-1: config 0 has an invalid interface number: 63 but max is 0 [ 141.037346][ T5860] usb 3-1: config 0 has no interface number 0 [ 141.045750][ T5860] usb 3-1: New USB device found, idVendor=f65e, idProduct=3868, bcdDevice=c6.17 [ 141.070404][ T5860] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.121614][ T5860] usb 3-1: config 0 descriptor?? [ 141.169246][ T5860] usb-storage 3-1:0.63: USB Mass Storage device detected [ 141.379963][ T5887] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 141.529811][ T5887] usb 1-1: Using ep0 maxpacket: 8 [ 141.591407][ T5887] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 141.626563][ T5887] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.637503][ T5860] usb 3-1: USB disconnect, device number 22 [ 141.725393][ T5887] usb 1-1: Product: syz [ 141.824187][ T5887] usb 1-1: Manufacturer: syz [ 141.879897][ T5887] usb 1-1: SerialNumber: syz [ 142.121004][ T5887] usb 1-1: config 0 descriptor?? [ 142.385179][ T7177] netlink: 8 bytes leftover after parsing attributes in process `syz.1.272'. [ 142.632362][ T5887] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 142.675391][ T7198] netlink: 36 bytes leftover after parsing attributes in process `syz.2.278'. [ 142.982285][ T29] audit: type=1400 audit(1735647674.799:454): avc: denied { mounton } for pid=7199 comm="syz.4.279" path="/proc/194/task" dev="proc" ino=13745 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 143.203562][ T29] audit: type=1400 audit(1735647675.036:455): avc: denied { setopt } for pid=7209 comm="syz.1.281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 143.208644][ T7210] overlay: filesystem on ./bus not supported as upperdir [ 143.262598][ T7210] evm: overlay not supported [ 143.275839][ T7211] overlay: Bad value for 'nfs_export' [ 143.353407][ T29] audit: type=1800 audit(1735647675.087:456): pid=7210 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.281" name="bus" dev="overlay" ino=333 res=0 errno=0 [ 143.597214][ T29] audit: type=1800 audit(1735647675.097:457): pid=7211 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.281" name="bus" dev="overlay" ino=333 res=0 errno=0 [ 143.634315][ T29] audit: type=1804 audit(1735647675.128:458): pid=7210 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.281" name="/newroot/57/bus/file0/bus" dev="overlay" ino=333 res=1 errno=0 [ 143.738065][ T29] audit: type=1800 audit(1735647675.416:459): pid=7215 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.282" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 143.829273][ T29] audit: type=1400 audit(1735647675.581:460): avc: denied { map } for pid=7216 comm="syz.2.283" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 143.977068][ T5887] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 144.002868][ T5887] usb 1-1: USB disconnect, device number 13 [ 144.151228][ T7222] netlink: 16 bytes leftover after parsing attributes in process `syz.4.285'. [ 144.198243][ T29] audit: type=1400 audit(1735647676.055:461): avc: denied { read } for pid=7221 comm="syz.4.285" path="socket:[14414]" dev="sockfs" ino=14414 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 144.403954][ T7225] sp0: Synchronizing with TNC [ 144.404059][ T5860] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 144.454405][ T7225] hsr0: entered promiscuous mode [ 144.559954][ T5860] usb 3-1: device descriptor read/64, error -71 [ 144.755507][ T5825] Bluetooth: hci0: Unknown advertising packet type: 0x11 [ 144.755576][ T5825] Bluetooth: hci0: Unknown advertising packet type: 0x17 [ 144.764568][ T5825] Bluetooth: hci0: Unknown advertising packet type: 0x1d [ 144.771628][ T5825] Bluetooth: hci0: Malformed LE Event: 0x0d [ 144.788405][ T7225] bond0: (slave bond_slave_1): Releasing backup interface [ 144.813089][ T5860] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 145.092573][ T7239] mmap: syz.5.291 (7239) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 145.373067][ T7244] netlink: 28 bytes leftover after parsing attributes in process `syz.1.293'. [ 145.389660][ T7244] netlink: 88 bytes leftover after parsing attributes in process `syz.1.293'. [ 145.680269][ T5860] usb 3-1: device descriptor read/64, error -71 [ 145.707107][ T29] audit: type=1800 audit(1735647677.605:462): pid=7249 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.294" name="SYSV00000000" dev="hugetlbfs" ino=3 res=0 errno=0 [ 145.787291][ T7252] xfrm1: entered allmulticast mode [ 145.998096][ T7261] syz.4.297[7261] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 145.998185][ T7261] syz.4.297[7261] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 146.010266][ T7261] syz.4.297[7261] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 146.031261][ T29] audit: type=1400 audit(1735647677.933:463): avc: denied { ioctl } for pid=7260 comm="syz.4.297" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 146.047943][ T5860] usb usb3-port1: attempt power cycle [ 146.172679][ T7265] capability: warning: `syz.0.298' uses deprecated v2 capabilities in a way that may be insecure [ 147.523138][ T5825] Bluetooth: hci3: Unknown advertising packet type: 0x11 [ 147.523213][ T5825] Bluetooth: hci3: Unknown advertising packet type: 0x17 [ 147.532648][ T5825] Bluetooth: hci3: Unknown advertising packet type: 0x1d [ 147.541136][ T5825] Bluetooth: hci3: Malformed LE Event: 0x0d [ 147.942036][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 147.942055][ T29] audit: type=1400 audit(1735647679.878:469): avc: denied { mount } for pid=7285 comm="syz.2.306" name="/" dev="rpc_pipefs" ino=13895 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 147.994914][ T25] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 148.059953][ T7290] netlink: 'syz.2.306': attribute type 4 has an invalid length. [ 148.146152][ T29] audit: type=1400 audit(1735647680.093:470): avc: denied { write } for pid=7282 comm="syz.1.303" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 148.175550][ T25] usb 5-1: Using ep0 maxpacket: 32 [ 148.196482][ T25] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 148.199734][ T29] audit: type=1400 audit(1735647680.103:471): avc: denied { ioctl } for pid=7282 comm="syz.1.303" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 148.238666][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.245534][ T29] audit: type=1400 audit(1735647680.144:472): avc: denied { listen } for pid=7285 comm="syz.2.306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 148.273257][ T29] audit: type=1400 audit(1735647680.144:473): avc: denied { accept } for pid=7285 comm="syz.2.306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 148.310779][ T25] usb 5-1: config 0 descriptor?? [ 148.343420][ T29] audit: type=1400 audit(1735647680.276:474): avc: denied { ioctl } for pid=7295 comm="syz.5.307" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 148.546854][ T25] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 148.560154][ T25] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 148.566886][ T29] audit: type=1800 audit(1735647680.511:475): pid=7303 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.309" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 148.571515][ T25] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 148.591022][ C0] vkms_vblank_simulate: vblank timer overrun [ 148.651005][ T25] usb 5-1: media controller created [ 148.699967][ T25] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 148.709798][ T5858] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 148.713599][ T29] audit: type=1400 audit(1735647680.685:476): avc: denied { unmount } for pid=5820 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 148.737736][ C0] vkms_vblank_simulate: vblank timer overrun [ 148.788436][ T25] az6027: usb out operation failed. (-71) [ 148.812170][ T25] az6027: usb out operation failed. (-71) [ 148.818583][ T25] stb0899_attach: Driver disabled by Kconfig [ 148.824581][ T25] az6027: no front-end attached [ 148.824581][ T25] [ 148.833202][ T25] az6027: usb out operation failed. (-71) [ 148.839830][ T25] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 148.849731][ T25] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input9 [ 148.889976][ T25] dvb-usb: schedule remote query interval to 400 msecs. [ 148.897678][ T25] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 148.910524][ T25] usb 5-1: USB disconnect, device number 17 [ 148.936035][ T5858] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 148.964314][ T5858] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 148.976121][ T5858] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 148.994886][ T5858] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 149.009226][ T5858] usb 2-1: SerialNumber: syz [ 149.030446][ T7305] block device autoloading is deprecated and will be removed. [ 149.110026][ T25] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 149.327051][ T7300] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.360046][ T7300] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.532709][ T7321] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 149.956770][ T5858] usb 2-1: invalid UAC_HEADER (v1) [ 150.181549][ T29] audit: type=1400 audit(1735647682.052:477): avc: denied { connect } for pid=7319 comm="syz.4.314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 150.195254][ T5858] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 Dec 31 12:21:22 syzkaller kern.notice kernel: [ [ 150.253395][ T29] audit: type=1404 audit(1735647682.072:478): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 150.181549][ T29] audit: type=1400 audit(1735647682.052:477): avc: denied { connect } for pid=7319 comm="syz.4.314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 Dec 31 12:21:22 syzkaller kern.err kernel: [ 150.195254][ T5858] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 Dec 31 12:21:22 syzkaller kern.notice kernel: [ 150.253395][ T29] audit: type=1404 audit(1735647682.072:478): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 150.409861][ T5858] usb 2-1: USB disconnect, device number 10 Dec 31 12:21:22 syzkaller kern.info kernel: [ 150.409861][ T5858] usb 2-1: USB disconnect, device number 10 [ 150.572321][ T7333] netlink: 28 bytes leftover after parsing attributes in process `syz.0.315'. [ 150.617736][ T7333] netlink: 88 bytes leftover after parsing attributes in process `syz.0.315'. [ 150.731631][ T5806] udevd[5806]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 152.872965][ T29] kauditd_printk_skb: 53 callbacks suppressed [ 152.879214][ T29] audit: type=1400 audit(1735647684.911:532): avc: denied { ioctl } for pid=7348 comm="syz.4.320" path="/dev/video7" dev="devtmpfs" ino=949 ioctlcmd=0x5629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 153.271909][ T29] audit: type=1800 audit(1735647684.921:533): pid=7354 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.320" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 153.335828][ T29] audit: type=1400 audit(1735647684.972:534): avc: denied { sys_module } for pid=7348 comm="syz.4.320" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 153.356821][ T29] audit: type=1400 audit(1735647684.972:535): avc: denied { module_load } for pid=7348 comm="syz.4.320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 153.539433][ T29] audit: type=1400 audit(1735647685.439:536): avc: denied { create } for pid=7352 comm="syz.1.321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 153.721968][ T29] audit: type=1400 audit(1735647685.460:537): avc: denied { map_create } for pid=7352 comm="syz.1.321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 153.784081][ T29] audit: type=1400 audit(1735647685.460:538): avc: denied { map_read map_write } for pid=7352 comm="syz.1.321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 153.876935][ T29] audit: type=1400 audit(1735647685.734:539): avc: denied { ioctl } for pid=7352 comm="syz.1.321" path="socket:[14060]" dev="sockfs" ino=14060 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 153.993178][ T29] audit: type=1400 audit(1735647685.988:540): avc: denied { create } for pid=7346 comm="syz.5.319" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 154.064591][ T29] audit: type=1400 audit(1735647685.988:541): avc: denied { map } for pid=7346 comm="syz.5.319" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=14062 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 154.101341][ T7358] netlink: 596 bytes leftover after parsing attributes in process `syz.4.322'. [ 158.899380][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 158.899399][ T29] audit: type=1400 audit(1735647690.970:548): avc: denied { read append } for pid=7377 comm="syz.5.326" name="v4l-subdev5" dev="devtmpfs" ino=945 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 158.929962][ T29] audit: type=1400 audit(1735647690.970:549): avc: denied { open } for pid=7377 comm="syz.5.326" path="/dev/v4l-subdev5" dev="devtmpfs" ino=945 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 158.953413][ T29] audit: type=1400 audit(1735647691.001:550): avc: denied { create } for pid=7377 comm="syz.5.326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 158.972828][ T29] audit: type=1400 audit(1735647691.001:551): avc: denied { setopt } for pid=7377 comm="syz.5.326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 158.992219][ T29] audit: type=1400 audit(1735647691.031:552): avc: denied { write } for pid=7376 comm="syz.0.327" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 159.015238][ T29] audit: type=1400 audit(1735647691.031:553): avc: denied { ioctl } for pid=7376 comm="syz.0.327" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 159.150873][ T5891] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 159.227869][ T29] audit: type=1400 audit(1735647691.354:554): avc: denied { create } for pid=7381 comm="syz.1.328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 159.256596][ T7382] random: crng reseeded on system resumption [ 159.257133][ T29] audit: type=1400 audit(1735647691.385:555): avc: denied { connect } for pid=7381 comm="syz.1.328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 159.289925][ T29] audit: type=1400 audit(1735647691.385:556): avc: denied { ioctl } for pid=7381 comm="syz.1.328" path="socket:[14750]" dev="sockfs" ino=14750 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 159.339126][ T5891] usb 1-1: Using ep0 maxpacket: 8 [ 159.376700][ T5891] usb 1-1: New USB device found, idVendor=0c45, idProduct=613b, bcdDevice=c4.6d [ 159.414452][ T5891] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.439122][ T5891] usb 1-1: Product: syz [ 159.451578][ T5891] usb 1-1: Manufacturer: syz [ 159.463756][ T5891] usb 1-1: SerialNumber: syz [ 159.475132][ T5891] usb 1-1: config 0 descriptor?? [ 159.488494][ T5891] gspca_main: sonixj-2.14.0 probing 0c45:613b [ 159.498886][ T29] audit: type=1400 audit(1735647691.385:557): avc: denied { write } for pid=7381 comm="syz.1.328" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 159.750195][ T5891] gspca_sonixj: reg_r err -71 [ 159.755547][ T5891] sonixj 1-1:0.0: probe with driver sonixj failed with error -71 [ 159.784514][ T5891] usb 1-1: USB disconnect, device number 14 [ 160.071752][ T5858] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 160.080076][ T5860] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 160.270164][ T5860] usb 6-1: Using ep0 maxpacket: 32 [ 160.275856][ T5858] usb 5-1: Using ep0 maxpacket: 16 [ 160.344466][ T5860] usb 6-1: config 1 has an invalid interface number: 236 but max is 0 [ 160.401167][ T5860] usb 6-1: config 1 has no interface number 0 [ 160.433403][ T5860] usb 6-1: config 1 interface 236 altsetting 2 bulk endpoint 0x5 has invalid maxpacket 1024 [ 160.450560][ T5858] usb 5-1: unable to get BOS descriptor or descriptor too short [ 160.510304][ T5860] usb 6-1: config 1 interface 236 has no altsetting 0 [ 160.528797][ T5858] usb 5-1: config 5 has an invalid interface number: 12 but max is 0 [ 160.546962][ T5858] usb 5-1: config 5 has no interface number 0 [ 160.566540][ T5858] usb 5-1: config 5 interface 12 has no altsetting 0 [ 160.574214][ T5860] usb 6-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=aa.6a [ 160.600349][ T5860] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.608494][ T5858] usb 5-1: New USB device found, idVendor=15a4, idProduct=1001, bcdDevice=43.a7 [ 160.636064][ T5858] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.644179][ T5860] usb 6-1: Product: syz [ 160.653505][ T5858] usb 5-1: Product: syz [ 160.658340][ T5860] usb 6-1: Manufacturer: syz [ 160.667958][ T5858] usb 5-1: Manufacturer: syz [ 160.672546][ T5858] usb 5-1: SerialNumber: syz [ 160.681398][ T5860] usb 6-1: SerialNumber: syz [ 160.693782][ T7388] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 160.778471][ T5860] ti_usb_3410_5052 6-1:1.236: TI USB 5052 2 port adapter converter detected [ 161.355641][ T7394] netlink: 52 bytes leftover after parsing attributes in process `syz.2.332'. [ 161.468149][ T25] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 161.949835][ T25] usb 2-1: Using ep0 maxpacket: 16 [ 162.216848][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.256225][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 162.292388][ T25] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 162.328969][ T25] usb 2-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 162.347538][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.365774][ T25] usb 2-1: config 0 descriptor?? [ 163.137022][ T25] shield 0003:0955:7214.0007: unknown main item tag 0x0 [ 163.144819][ T25] shield 0003:0955:7214.0007: unknown main item tag 0x0 [ 163.152327][ T25] shield 0003:0955:7214.0007: unknown main item tag 0x0 [ 163.160158][ T25] shield 0003:0955:7214.0007: unknown main item tag 0x0 [ 163.163630][ T7422] netlink: 52 bytes leftover after parsing attributes in process `syz.0.338'. [ 163.167303][ T25] shield 0003:0955:7214.0007: unknown main item tag 0x0 [ 163.265162][ T25] input: HID 0955:7214 Haptics as /devices/virtual/input/input10 [ 163.701118][ T25] shield 0003:0955:7214.0007: Registered Thunderstrike controller [ 163.730384][ T25] shield 0003:0955:7214.0007: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.1-1/input0 [ 163.937519][ T25] usb 2-1: USB disconnect, device number 11 [ 163.987738][ T1207] shield 0003:0955:7214.0007: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 163.999723][ T1207] shield 0003:0955:7214.0007: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 164.011345][ T1207] shield 0003:0955:7214.0007: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 164.012445][ T7428] tmpfs: Bad value for 'mpol' [ 164.022698][ T1207] shield 0003:0955:7214.0007: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 164.037178][ T29] kauditd_printk_skb: 23 callbacks suppressed [ 164.037192][ T29] audit: type=1400 audit(1735647696.178:581): avc: denied { mounton } for pid=7420 comm="syz.4.339" path="/68/file0" dev="tmpfs" ino=384 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 164.041337][ T5858] usb 5-1: USB disconnect, device number 18 [ 164.141709][ T5891] usb 6-1: USB disconnect, device number 5 [ 165.317281][ T29] audit: type=1400 audit(1735647696.752:582): avc: denied { read } for pid=7432 comm="syz.0.341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 165.830801][ T29] audit: type=1400 audit(1735647698.011:583): avc: denied { read write } for pid=7441 comm="syz.2.343" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 165.890062][ T29] audit: type=1400 audit(1735647698.011:584): avc: denied { open } for pid=7441 comm="syz.2.343" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 165.913482][ T29] audit: type=1400 audit(1735647698.011:585): avc: denied { mounton } for pid=7441 comm="syz.2.343" path="/66/file0" dev="tmpfs" ino=379 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 166.048534][ T7447] netlink: 4 bytes leftover after parsing attributes in process `syz.2.343'. [ 166.065425][ T7447] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 166.119952][ T29] audit: type=1400 audit(1735647698.061:586): avc: denied { mount } for pid=7441 comm="syz.2.343" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 166.174821][ T7453] pimreg: entered allmulticast mode [ 166.205422][ T7453] netlink: 36 bytes leftover after parsing attributes in process `syz.5.346'. [ 166.227582][ T29] audit: type=1400 audit(1735647698.232:587): avc: denied { read write } for pid=7441 comm="syz.2.343" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 166.291536][ T29] audit: type=1400 audit(1735647698.232:588): avc: denied { open } for pid=7441 comm="syz.2.343" path="/dev/uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 166.357025][ T29] audit: type=1400 audit(1735647698.232:589): avc: denied { ioctl } for pid=7441 comm="syz.2.343" path="socket:[14965]" dev="sockfs" ino=14965 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 166.426398][ T29] audit: type=1400 audit(1735647698.242:590): avc: denied { ioctl } for pid=7441 comm="syz.2.343" path="socket:[14966]" dev="sockfs" ino=14966 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 167.510222][ T7470] netlink: 277 bytes leftover after parsing attributes in process `syz.4.353'. [ 167.604969][ T5887] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 167.800986][ T5887] usb 2-1: Using ep0 maxpacket: 16 [ 167.848883][ T5887] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 167.856747][ T5858] libceph: connect (1)[c::]:6789 error -101 [ 167.865827][ T5887] usb 2-1: config 0 has no interface number 0 [ 167.871200][ T5858] libceph: mon0 (1)[c::]:6789 connect error [ 167.874185][ T5887] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 167.880384][ T7470] ceph: No mds server is up or the cluster is laggy [ 167.898080][ T5887] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 167.907103][ T7467] netlink: 52 bytes leftover after parsing attributes in process `syz.2.352'. [ 167.917416][ T5887] usb 2-1: config 0 interface 41 has no altsetting 0 [ 168.013217][ T5887] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 168.097717][ T5887] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.105849][ T5887] usb 2-1: Product: syz [ 168.110648][ T5887] usb 2-1: Manufacturer: syz [ 168.117061][ T5887] usb 2-1: SerialNumber: syz [ 168.153169][ T5887] usb 2-1: config 0 descriptor?? [ 168.158718][ T7465] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 168.165986][ T7465] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 168.229680][ T1207] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 168.418897][ T1207] usb 3-1: Using ep0 maxpacket: 16 [ 168.439394][ T7465] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 168.484691][ T7489] input: syz0 as /devices/virtual/input/input11 [ 168.485340][ T1207] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 168.512484][ T7465] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 168.637548][ T1207] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 168.725339][ T1207] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 168.745238][ T1207] usb 3-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 168.801175][ T1207] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.831611][ T1207] usb 3-1: config 0 descriptor?? [ 169.021676][ T29] kauditd_printk_skb: 15 callbacks suppressed [ 169.021692][ T29] audit: type=1400 audit(1735647701.221:606): avc: denied { write } for pid=7464 comm="syz.1.351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 169.078491][ T5887] Error reading MAC address [ 169.097824][ T7465] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 169.105295][ T7465] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 169.133266][ T5891] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 169.284913][ T1207] shield 0003:0955:7214.0008: unknown main item tag 0x0 [ 169.292218][ T5891] usb 5-1: Using ep0 maxpacket: 32 [ 169.294176][ T5891] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 169.311153][ T1207] shield 0003:0955:7214.0008: unknown main item tag 0x0 [ 169.322407][ T5891] usb 5-1: config 0 has no interface number 0 [ 169.354450][ T5891] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 169.373597][ T5891] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.396500][ T5891] usb 5-1: Product: syz [ 169.400752][ T5891] usb 5-1: Manufacturer: syz [ 169.425974][ T5891] usb 5-1: SerialNumber: syz [ 169.446869][ T5891] usb 5-1: config 0 descriptor?? [ 169.468366][ T5891] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 169.478269][ T1207] shield 0003:0955:7214.0008: unknown main item tag 0x0 [ 169.485851][ T1207] shield 0003:0955:7214.0008: unknown main item tag 0x0 [ 169.497297][ T1207] shield 0003:0955:7214.0008: unknown main item tag 0x0 [ 169.505930][ T1207] input: HID 0955:7214 Haptics as /devices/virtual/input/input12 [ 169.525972][ T1207] shield 0003:0955:7214.0008: Registered Thunderstrike controller [ 169.533947][ T1207] shield 0003:0955:7214.0008: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.2-1/input0 [ 169.939104][ T29] audit: type=1400 audit(1735647701.814:607): avc: denied { create } for pid=7497 comm="syz.5.359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 170.182993][ T5887] sr9700 2-1:0.41 (unnamed net_device) (uninitialized): Error reading MAC address [ 170.217520][ T29] audit: type=1400 audit(1735647701.824:608): avc: denied { bind } for pid=7497 comm="syz.5.359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 170.243472][ T29] audit: type=1400 audit(1735647701.824:609): avc: denied { accept } for pid=7497 comm="syz.5.359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 170.262962][ T29] audit: type=1400 audit(1735647701.824:610): avc: denied { write } for pid=7497 comm="syz.5.359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 170.313534][ T7494] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.330377][ T25] shield 0003:0955:7214.0008: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 170.337115][ T7494] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.344900][ T25] shield 0003:0955:7214.0008: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 170.371815][ T1207] usb 3-1: USB disconnect, device number 26 [ 170.381108][ T25] shield 0003:0955:7214.0008: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 170.393927][ T25] shield 0003:0955:7214.0008: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 170.406881][ T29] audit: type=1400 audit(1735647702.578:611): avc: denied { setopt } for pid=7493 comm="syz.4.357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 170.431288][ T7492] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.441387][ T7492] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.658552][ T29] audit: type=1400 audit(1735647702.869:612): avc: denied { read write } for pid=7507 comm="syz.2.362" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 170.698406][ T1207] usb 2-1: USB disconnect, device number 12 [ 170.723961][ T29] audit: type=1400 audit(1735647702.899:613): avc: denied { open } for pid=7507 comm="syz.2.362" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 170.763633][ T5891] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 170.789609][ T29] audit: type=1400 audit(1735647702.899:614): avc: denied { append } for pid=7507 comm="syz.2.362" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 170.820286][ T29] audit: type=1400 audit(1735647702.970:615): avc: denied { write } for pid=7493 comm="syz.4.357" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 170.834520][ T5891] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 171.023411][ T5857] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 171.036078][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 171.038823][ T1207] usb 5-1: USB disconnect, device number 19 [ 171.053926][ T1207] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 171.098839][ T1207] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 171.119853][ T1207] quatech2 5-1:0.51: device disconnected [ 171.212491][ T5857] usb 6-1: Using ep0 maxpacket: 16 [ 171.334830][ T5857] usb 6-1: config index 0 descriptor too short (expected 34961, got 36) [ 171.361759][ T5857] usb 6-1: config 54 has too many interfaces: 136, using maximum allowed: 32 [ 171.417655][ T5857] usb 6-1: config 54 has an invalid interface descriptor of length 4, skipping [ 171.591271][ T5857] usb 6-1: config 54 has an invalid descriptor of length 1, skipping remainder of the config [ 172.519906][ T5857] usb 6-1: config 54 has 0 interfaces, different from the descriptor's value: 136 [ 172.534317][ T5857] usb 6-1: New USB device found, idVendor=1b96, idProduct=060c, bcdDevice= 0.00 [ 172.543700][ T5857] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.085990][ T7544] 9pnet_fd: Insufficient options for proto=fd [ 173.161514][ T7545] binder: 7543:7545 ioctl c0306201 20000080 returned -14 [ 173.169909][ T5857] usb 6-1: string descriptor 0 read error: -71 [ 173.178051][ T5857] usb 6-1: USB disconnect, device number 6 [ 173.522022][ T5891] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 173.673116][ T5891] usb 3-1: Using ep0 maxpacket: 16 [ 173.684190][ T5891] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 173.704191][ T5891] usb 3-1: config 0 interface 0 has no altsetting 0 [ 173.716548][ T5891] usb 3-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 173.734508][ T5891] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.755428][ T5891] usb 3-1: config 0 descriptor?? [ 173.771022][ T5887] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 173.951642][ T5887] usb 1-1: Using ep0 maxpacket: 16 [ 174.328916][ T5857] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 174.542669][ T5891] waterforce 0003:1044:7A4D.0009: unknown main item tag 0x0 [ 174.550140][ T5891] waterforce 0003:1044:7A4D.0009: unknown main item tag 0x0 [ 174.557573][ T5891] waterforce 0003:1044:7A4D.0009: unknown main item tag 0x0 [ 174.557874][ T5857] usb 2-1: Using ep0 maxpacket: 16 [ 174.565662][ T5891] waterforce 0003:1044:7A4D.0009: unknown main item tag 0x0 [ 174.577542][ T5891] waterforce 0003:1044:7A4D.0009: unknown main item tag 0x0 [ 174.586252][ T5887] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 174.597688][ T5892] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 174.604009][ T5857] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 174.606670][ T5887] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 174.626901][ T5891] waterforce 0003:1044:7A4D.0009: hidraw0: USB HID v0.05 Device [HID 1044:7a4d] on usb-dummy_hcd.2-1/input0 [ 174.629415][ T5857] usb 2-1: config 0 interface 0 has no altsetting 0 [ 174.671022][ T5857] usb 2-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 174.674558][ T5887] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 174.681155][ T5857] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.701734][ T5887] usb 1-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 174.701797][ T5887] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.721704][ T5857] usb 2-1: config 0 descriptor?? [ 174.746767][ T7547] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.761609][ T7547] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.773335][ T7547] netlink: 'syz.2.368': attribute type 12 has an invalid length. [ 174.909876][ T5891] waterforce 0003:1044:7A4D.0009: fw version request failed with -38 [ 174.935790][ T5887] usb 1-1: config 0 descriptor?? [ 174.950391][ T5892] usb 6-1: config 3 has an invalid interface number: 140 but max is 0 [ 174.968755][ T1207] usb 3-1: USB disconnect, device number 27 [ 175.159891][ T5892] usb 6-1: config 3 has an invalid interface association descriptor of length 2, skipping [ 175.182261][ T5892] usb 6-1: config 3 has no interface number 0 [ 175.381626][ T5129] Bluetooth: hci3: command 0x0406 tx timeout [ 175.390606][ T5129] Bluetooth: hci0: command 0x0406 tx timeout [ 175.514157][ T5857] waterforce 0003:1044:7A4D.000A: unknown main item tag 0x0 [ 175.521693][ T5857] waterforce 0003:1044:7A4D.000A: unknown main item tag 0x0 [ 175.529095][ T5857] waterforce 0003:1044:7A4D.000A: item fetching failed at offset 2/5 [ 175.537618][ T5857] waterforce 0003:1044:7A4D.000A: hid parse failed with -22 [ 175.542110][ T5892] usb 6-1: config 3 interface 140 altsetting 224 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 175.545206][ T5857] waterforce 0003:1044:7A4D.000A: probe with driver waterforce failed with error -22 [ 175.559915][ T5891] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 175.584373][ T5892] usb 6-1: config 3 interface 140 altsetting 224 bulk endpoint 0x4 has invalid maxpacket 8 [ 175.596036][ T5892] usb 6-1: config 3 interface 140 altsetting 224 has a duplicate endpoint with address 0x4, skipping [ 175.608424][ T5892] usb 6-1: config 3 interface 140 altsetting 224 endpoint 0x8 has invalid maxpacket 1535, setting to 64 [ 175.621322][ T5892] usb 6-1: config 3 interface 140 altsetting 224 has an invalid descriptor for endpoint zero, skipping [ 175.633010][ T5892] usb 6-1: config 3 interface 140 altsetting 224 bulk endpoint 0x9 has invalid maxpacket 8 [ 175.644819][ T5892] usb 6-1: config 3 interface 140 has no altsetting 0 [ 175.653635][ T5892] usb 6-1: New USB device found, idVendor=04b4, idProduct=861f, bcdDevice=14.74 [ 175.662800][ T5892] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.671700][ T5892] usb 6-1: Product:   [ 175.676079][ T5892] usb 6-1: Manufacturer: ф [ 175.680649][ T5892] usb 6-1: SerialNumber: 胧 [ 175.688520][ T7559] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 175.696536][ T7559] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 175.704300][ T7559] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 175.741566][ T5887] shield 0003:0955:7214.000B: unknown main item tag 0x0 [ 175.751479][ T5887] shield 0003:0955:7214.000B: unknown main item tag 0x0 [ 175.760572][ T7560] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.761400][ T5891] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 175.769291][ T7560] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.782642][ T5887] shield 0003:0955:7214.000B: unknown main item tag 0x0 [ 175.811330][ T5891] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 175.811859][ T7560] random: crng reseeded on system resumption [ 175.825395][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 175.825429][ T29] audit: type=1400 audit(1735647708.041:628): avc: denied { read } for pid=7556 comm="syz.1.373" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 175.867547][ T5887] shield 0003:0955:7214.000B: unknown main item tag 0x0 [ 175.878569][ T5887] shield 0003:0955:7214.000B: unknown main item tag 0x0 [ 175.888452][ T5891] usb 5-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 175.910346][ T29] audit: type=1400 audit(1735647708.041:629): avc: denied { ioctl } for pid=7556 comm="syz.1.373" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 175.948250][ T5887] input: HID 0955:7214 Haptics as /devices/virtual/input/input14 [ 175.958973][ T5891] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.043741][ T5891] usb 5-1: config 0 descriptor?? [ 176.051872][ T5892] usb 6-1: USB disconnect, device number 7 [ 176.076602][ T5887] shield 0003:0955:7214.000B: Registered Thunderstrike controller [ 176.106921][ T5887] shield 0003:0955:7214.000B: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.0-1/input0 [ 176.159288][ T7570] netlink: 8 bytes leftover after parsing attributes in process `syz.2.376'. [ 176.168429][ T7570] netlink: 24 bytes leftover after parsing attributes in process `syz.2.376'. [ 176.184614][ T9] shield 0003:0955:7214.000B: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 176.200784][ T5887] usb 1-1: USB disconnect, device number 15 [ 176.212073][ T9] shield 0003:0955:7214.000B: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 176.230868][ T9] shield 0003:0955:7214.000B: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 176.247919][ T9] shield 0003:0955:7214.000B: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 176.478485][ T5891] hid-thrustmaster 0003:044F:B65D.000C: unknown main item tag 0x0 [ 176.491590][ T5891] hid-thrustmaster 0003:044F:B65D.000C: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.4-1/input0 [ 176.504424][ T5891] hid-thrustmaster 0003:044F:B65D.000C: Wrong number of endpoints? [ 176.736375][ T29] audit: type=1400 audit(1735647708.974:630): avc: denied { write } for pid=7562 comm="syz.4.375" name="hidraw0" dev="devtmpfs" ino=2917 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 176.788749][ T29] audit: type=1400 audit(1735647709.025:631): avc: denied { execute } for pid=7574 comm="syz.5.378" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=15169 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 177.113579][ T5887] usb 2-1: USB disconnect, device number 13 [ 177.183914][ T29] audit: type=1400 audit(1735647709.426:632): avc: denied { wake_alarm } for pid=7583 comm="syz.0.382" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 177.803779][ C0] hid-thrustmaster 0003:044F:B65D.000C: URB to get model id failed with error -71 [ 177.851993][ T5892] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 177.871600][ T1207] usb 5-1: USB disconnect, device number 20 [ 177.920336][ T7592] xt_cgroup: xt_cgroup: no path or classid specified [ 178.161869][ T9] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 178.195667][ T29] audit: type=1400 audit(1735647710.439:633): avc: denied { watch_mount } for pid=7600 comm="syz.1.386" path="/76" dev="tmpfs" ino=426 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 178.220473][ T29] audit: type=1400 audit(1735647710.439:634): avc: denied { watch watch_reads } for pid=7600 comm="syz.1.386" path="/76" dev="tmpfs" ino=426 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 179.186061][ T5892] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 179.196939][ T5892] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 179.561185][ T1207] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 179.708634][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 179.710727][ T1207] usb 5-1: device descriptor read/64, error -71 [ 179.714313][ T5892] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 179.730013][ T5892] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 179.791649][ T5892] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 179.801285][ T9] usb 1-1: config 0 has an invalid interface number: 16 but max is 0 [ 179.809404][ T9] usb 1-1: config 0 has no interface number 0 [ 179.816269][ T5892] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 179.824455][ T5892] usb 3-1: Manufacturer: syz [ 179.829807][ T9] usb 1-1: config 0 interface 16 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 179.840079][ T9] usb 1-1: config 0 interface 16 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 179.852207][ T5892] usb 3-1: config 0 descriptor?? [ 179.937924][ T9] usb 1-1: New USB device found, idVendor=0499, idProduct=102a, bcdDevice=85.2d [ 179.947145][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.955308][ T9] usb 1-1: Product: syz [ 179.959522][ T9] usb 1-1: Manufacturer: syz [ 179.964328][ T9] usb 1-1: SerialNumber: syz [ 180.012086][ T9] usb 1-1: config 0 descriptor?? [ 180.040132][ T7584] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 180.090444][ T1207] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 180.092913][ T5892] usbhid 3-1:0.0: can't add hid device: -71 [ 180.107795][ T9] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 180.115684][ T9] usb 1-1: invalid MIDI in EP 0 [ 180.699505][ T29] audit: type=1400 audit(1735647712.505:635): avc: denied { read write } for pid=7605 comm="syz.1.387" name="vhost-net" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 180.775594][ T29] audit: type=1400 audit(1735647712.505:636): avc: denied { open } for pid=7605 comm="syz.1.387" path="/dev/vhost-net" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 180.778222][ T5892] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 180.799956][ T1207] usb 5-1: device descriptor read/64, error -71 [ 180.860871][ T29] audit: type=1400 audit(1735647712.555:637): avc: denied { ioctl } for pid=7605 comm="syz.1.387" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 181.020059][ T1207] usb usb5-port1: attempt power cycle [ 181.449741][ T5892] usb 3-1: USB disconnect, device number 28 [ 181.478542][ T9] snd-usb-audio 1-1:0.16: probe with driver snd-usb-audio failed with error -22 [ 181.550606][ T29] audit: type=1400 audit(1735647713.798:638): avc: denied { create } for pid=7621 comm="syz.1.393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 181.570290][ T29] audit: type=1400 audit(1735647713.798:639): avc: denied { ioctl } for pid=7621 comm="syz.1.393" path="socket:[15687]" dev="sockfs" ino=15687 ioctlcmd=0x8940 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 181.572370][ T9] usb 1-1: USB disconnect, device number 16 [ 181.625380][ T1207] usb usb5-port1: Cannot enable. Maybe the USB cable is bad? [ 181.775589][ T1207] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 181.800232][ T1207] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 181.809252][ T1207] usb 5-1: config 0 has no interface number 0 [ 181.815475][ T1207] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 181.826618][ T1207] usb 5-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 181.836147][ T1207] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.855855][ T1207] usb 5-1: config 0 descriptor?? [ 181.964986][ T5892] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 181.975535][ T9] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 182.034787][ T5887] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 182.126444][ T5892] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 182.135708][ T5892] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.144899][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 182.156332][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 182.166965][ T5892] usb 3-1: config 0 descriptor?? [ 182.173341][ T9] usb 1-1: New USB device found, idVendor=1345, idProduct=3008, bcdDevice= 0.00 [ 182.184720][ T5892] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 182.191123][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.201408][ T9] usb 1-1: config 0 descriptor?? [ 182.216619][ T5887] usb 2-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 182.225932][ T5887] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.241025][ T5887] usb 2-1: config 0 descriptor?? [ 182.249941][ T5887] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 182.269845][ T1207] prodikeys 0003:041E:2801.000D: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.4-1/input1 [ 182.283206][ T1207] hid_prodikeys: hid-prodikeys: failed to find output report [ 182.283206][ T1207] [ 182.395462][ T5892] usb 3-1: USB disconnect, device number 29 [ 182.458582][ T5887] gp8psk: usb in 128 operation failed. [ 184.478144][ T5887] gp8psk: usb in 137 operation failed. [ 184.497656][ T5887] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 184.522034][ T5887] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 184.550414][ T5887] usb 2-1: media controller created [ 184.591082][ T5887] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 184.647858][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 184.667353][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 184.721600][ T5887] gp8psk_fe: Frontend attached [ 184.733490][ T9] usb 1-1: USB disconnect, device number 17 [ 184.745496][ T5887] usb 2-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 184.771487][ T5887] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 184.820998][ T5887] gp8psk: usb in 138 operation failed. [ 184.853490][ T5887] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 184.867702][ T5887] gp8psk: found Genpix USB device pID = 203 (hex) [ 184.924194][ T6468] udevd[6468]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.16/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 287.483529][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 287.490515][ C0] rcu: 1-...0: (4 ticks this GP) idle=612c/1/0x4000000000000000 softirq=21714/21723 fqs=5145 [ 287.502542][ C0] rcu: hardirqs softirqs csw/system [ 287.508962][ C0] rcu: number: 0 0 0 [ 287.515373][ C0] rcu: cputime: 0 0 0 ==> 52500(ms) [ 287.523265][ C0] rcu: (detected by 0, t=10502 jiffies, g=17033, q=1674 ncpus=2) [ 287.531088][ C0] Sending NMI from CPU 0 to CPUs 1: [ 287.531123][ C1] NMI backtrace for cpu 1 [ 287.531148][ C1] CPU: 1 UID: 0 PID: 7639 Comm: syz.1.396 Not tainted 6.13.0-rc5-syzkaller-00004-gccb98ccef0e5 #0 [ 287.531170][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 287.531185][ C1] RIP: 0010:hlock_class+0xb/0x130 [ 287.531218][ C1] Code: 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 b8 00 00 00 00 00 fc ff df 53 <48> 89 fb 48 83 c7 20 48 89 fa 48 c1 ea 03 0f b6 04 02 84 c0 74 08 [ 287.531236][ C1] RSP: 0018:ffffc90000a18bd8 EFLAGS: 00000046 [ 287.531254][ C1] RAX: dffffc0000000000 RBX: 0000000000080000 RCX: 0000000000000000 [ 287.531267][ C1] RDX: 0000000000000000 RSI: ffff88807c732f04 RDI: ffff88807c732f20 [ 287.531279][ C1] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000001 [ 287.531291][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000002 [ 287.531303][ C1] R13: ffff88807c732440 R14: 0000000000000070 R15: ffff88807c732f20 [ 287.531315][ C1] FS: 00007ffa80c6c6c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 287.531335][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 287.531348][ C1] CR2: 0000000020019680 CR3: 000000002732c000 CR4: 00000000003526f0 [ 287.531360][ C1] Call Trace: [ 287.531367][ C1] [ 287.531376][ C1] ? nmi_cpu_backtrace+0x1d8/0x390 [ 287.531400][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 287.531419][ C1] ? nmi_handle+0x1ac/0x5d0 [ 287.531441][ C1] ? hlock_class+0xb/0x130 [ 287.531466][ C1] ? default_do_nmi+0x6a/0x160 [ 287.531484][ C1] ? exc_nmi+0x170/0x1e0 [ 287.531501][ C1] ? end_repeat_nmi+0xf/0x53 [ 287.531533][ C1] ? hlock_class+0xb/0x130 [ 287.531558][ C1] ? hlock_class+0xb/0x130 [ 287.531584][ C1] ? hlock_class+0xb/0x130 [ 287.531609][ C1] [ 287.531615][ C1] [ 287.531621][ C1] __lock_acquire+0x410/0x3c40 [ 287.531646][ C1] ? lock_acquire.part.0+0x11b/0x380 [ 287.531667][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 287.531689][ C1] ? advance_sched+0x6d2/0xc60 [ 287.531709][ C1] lock_acquire.part.0+0x11b/0x380 [ 287.531730][ C1] ? __hrtimer_run_queues+0x2be/0xae0 [ 287.531758][ C1] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 287.531780][ C1] ? rcu_is_watching+0x12/0xc0 [ 287.531806][ C1] ? trace_lock_acquire+0x14e/0x1f0 [ 287.531834][ C1] ? __hrtimer_run_queues+0x2be/0xae0 [ 287.531864][ C1] ? lock_acquire+0x2f/0xb0 [ 287.531883][ C1] ? __hrtimer_run_queues+0x2be/0xae0 [ 287.531909][ C1] ? __pfx_advance_sched+0x10/0x10 [ 287.531927][ C1] _raw_spin_lock_irq+0x36/0x50 [ 287.531948][ C1] ? __hrtimer_run_queues+0x2be/0xae0 [ 287.531972][ C1] __hrtimer_run_queues+0x2be/0xae0 [ 287.532001][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 287.532027][ C1] ? read_tsc+0x9/0x20 [ 287.532055][ C1] hrtimer_interrupt+0x392/0x8e0 [ 287.532086][ C1] __sysvec_apic_timer_interrupt+0x10f/0x400 [ 287.532110][ C1] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 287.532133][ C1] [ 287.532139][ C1] [ 287.532144][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 287.532172][ C1] RIP: 0010:finish_task_switch.isra.0+0x220/0xcc0 [ 287.532196][ C1] Code: a9 0a 00 00 44 8b 0d 93 9c f6 0e 45 85 c9 0f 85 c0 01 00 00 48 89 df e8 ae f8 ff ff e8 c9 eb 38 00 fb 65 48 8b 1d 80 0b 9b 7e <48> 8d bb f8 15 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 [ 287.532213][ C1] RSP: 0018:ffffc9000dfd7710 EFLAGS: 00000206 [ 287.532228][ C1] RAX: 0000000000000987 RBX: ffff88807c732440 RCX: 1ffffffff20bde71 [ 287.532240][ C1] RDX: 0000000000000000 RSI: ffffffff8b6cd9e0 RDI: ffffffff8bd1ede0 [ 287.532253][ C1] RBP: ffffc9000dfd7758 R08: 0000000000000001 R09: 0000000000000001 [ 287.532265][ C1] R10: ffffffff905f36d7 R11: 0000000000000000 R12: ffff8880b873f9e0 [ 287.532278][ C1] R13: ffff88801d6d4880 R14: ffff8880216a6180 R15: ffff8880b863ebc0 [ 287.532297][ C1] ? __switch_to+0x749/0x1190 [ 287.532323][ C1] __schedule+0xe60/0x5ad0 [ 287.532345][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 287.532370][ C1] ? __pfx___schedule+0x10/0x10 [ 287.532390][ C1] ? schedule+0x298/0x350 [ 287.532410][ C1] ? __pfx_lock_release+0x10/0x10 [ 287.532432][ C1] ? lock_acquire+0x2f/0xb0 [ 287.532451][ C1] ? schedule+0x1fd/0x350 [ 287.532472][ C1] schedule+0xe7/0x350 [ 287.532492][ C1] schedule_timeout+0x244/0x280 [ 287.532511][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 287.532534][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 287.532556][ C1] __wait_for_common+0x3e1/0x600 [ 287.532580][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 287.532600][ C1] ? __pfx___wait_for_common+0x10/0x10 [ 287.532624][ C1] ? lockdep_init_map_type+0x16d/0x7d0 [ 287.532646][ C1] ? generic_exec_single+0xbb/0x390 [ 287.532675][ C1] rdmsr_safe_on_cpu+0x1de/0x210 [ 287.532698][ C1] ? __pfx_rdmsr_safe_on_cpu+0x10/0x10 [ 287.532721][ C1] ? __pfx___rdmsr_safe_on_cpu+0x10/0x10 [ 287.532743][ C1] ? __might_fault+0x13b/0x190 [ 287.532769][ C1] ? __pfx_lock_release+0x10/0x10 [ 287.532795][ C1] ? _copy_to_user+0x48/0xd0 [ 287.532824][ C1] msr_read+0x19e/0x250 [ 287.532849][ C1] ? __pfx_msr_read+0x10/0x10 [ 287.532879][ C1] ? bpf_lsm_file_permission+0x9/0x10 [ 287.532904][ C1] ? security_file_permission+0x71/0x210 [ 287.532931][ C1] ? __pfx_msr_read+0x10/0x10 [ 287.532955][ C1] vfs_read+0x1df/0xbe0 [ 287.532974][ C1] ? __fget_files+0x1fc/0x3a0 [ 287.532994][ C1] ? __pfx_lock_release+0x10/0x10 [ 287.533015][ C1] ? __pfx_vfs_read+0x10/0x10 [ 287.533031][ C1] ? do_futex+0x123/0x350 [ 287.533049][ C1] ? lock_acquire+0x2f/0xb0 [ 287.533068][ C1] ? __fget_files+0x40/0x3a0 [ 287.533088][ C1] ? __fget_files+0x206/0x3a0 [ 287.533109][ C1] ksys_read+0x12b/0x250 [ 287.533126][ C1] ? __pfx_ksys_read+0x10/0x10 [ 287.533144][ C1] ? syscall_user_dispatch+0x7a/0x130 [ 287.533172][ C1] do_syscall_64+0xcd/0x250 [ 287.533198][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.533223][ C1] RIP: 0033:0x7ffa7fd85d29 [ 287.533242][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 287.533260][ C1] RSP: 002b:00007ffa80c6c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 287.533277][ C1] RAX: ffffffffffffffda RBX: 00007ffa7ff75fa0 RCX: 00007ffa7fd85d29 [ 287.533289][ C1] RDX: 0000000000018ff8 RSI: 0000000020019680 RDI: 0000000000000005 [ 287.533301][ C1] RBP: 00007ffa7fe01b08 R08: 0000000000000000 R09: 0000000000000000 [ 287.533313][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 287.533325][ C1] R13: 0000000000000000 R14: 00007ffa7ff75fa0 R15: 00007ffc7fcbb988 [ 287.533342][ C1]