last executing test programs: 13.28290286s ago: executing program 3 (id=300): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_POWER_SAVE(r1, 0x0, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) ioperm(0x0, 0x1, 0x8) mincore(&(0x7f00005d0000/0x1000)=nil, 0x1000, &(0x7f0000afaf0a)=""/242) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x7a) clock_gettime(0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="120100002ec6601037210100352a010203010902120001000000000904"], 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x100005) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee6, 0x8031, 0xffffffffffffffff, 0x0) setpgid(r2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x40000}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) bpf$MAP_CREATE(0x141e000000000000, &(0x7f0000000340)=ANY=[@ANYRESHEX=r0, @ANYRESOCT=r4, @ANYBLOB="feffffff00"/20, @ANYBLOB="6d66d63b9352654f3144c6aee6c03557b9903d9c69a625d6519ecb446bf1a3b2851784389517ca365729d4d0241bcd9dfbc16d05fdad74a5d2f3266433e122c6b890ede6fd91881a55ada768d321389d14ee2f35c319", @ANYRES32, @ANYRESDEC=r0], 0x50) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x0, @local}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000004c0)=ANY=[@ANYRES8], 0x184}, 0x1, 0x0, 0x0, 0x10040005}, 0x5f0de513c72a42b3) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) 12.414877502s ago: executing program 4 (id=305): r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x2f, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc38, &(0x7f0000000e40)=ANY=[@ANYBLOB="51497d6c65e24a012769e4f899ed4db5b5c70317333c628052d6d6786b", @ANYRES16, @ANYBLOB="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"]) sendmsg$TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000480)={&(0x7f0000000540)=ANY=[@ANYBLOB="2801000659f2c465d04a8774578ef7ab00614094", @ANYRES16, @ANYBLOB="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"], 0x128}, 0x1, 0x0, 0x0, 0xd7233e60017db287}, 0x0) 10.991406426s ago: executing program 0 (id=308): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x3) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mincore(&(0x7f00005b2000/0x3000)=nil, 0x3000, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) syz_open_dev$sndctrl(0x0, 0x1, 0x6c40) syz_open_dev$sndpcmp(0x0, 0x0, 0xa2c65) futex(0x0, 0x80, 0x0, 0x0, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$swradio(&(0x7f00000000c0), 0x0, 0x2) r2 = syz_open_dev$swradio(&(0x7f0000000380), 0x0, 0x2) ioctl$VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000040)={0xf0f041}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, 0x0) r3 = openat$cuse(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = epoll_create1(0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000440)={0x1, @pix_mp={0x0, 0x0, 0x32314152}}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000004bc0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, r6, {0x18, 0xc099, 0x0, {0x3, 0x100, 0x91d, 0x7f, 0x8, 0x9, 0xd, 0x4, 0x0, 0x8000, 0x3, r7, r8, 0x5, 0x2}}}, 0x78) write$FUSE_ATTR(r3, &(0x7f0000000340)={0x78, 0xffffffffffffffda, 0x0, {0x18, 0xc095, 0x0, {0x3, 0x100, 0x91d, 0xa, 0xb, 0x3, 0x7ff, 0x4, 0x0, 0x8000, 0x3, 0x0, r8, 0x4, 0x42}}}, 0x78) 9.878779197s ago: executing program 0 (id=310): syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x3) prctl$PR_SCHED_CORE(0x3e, 0x800000001, 0x0, 0x2, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) (async) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) (async) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) (async) socket$kcm(0xa, 0x7, 0x0) (async) gettid() r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @mcast1, 0x2}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000004a00)='./file1\x00', &(0x7f0000000180)='efivarfs\x00', 0x10007, 0x0) (async, rerun: 64) r2 = socket$kcm(0x10, 0x3, 0x10) (rerun: 64) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="1400000016000b63d25a80648c2594", 0xf}], 0x1}, 0x0) (async) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_buf(r3, 0x29, 0xca, &(0x7f00000000c0)="44a375a3ec933341edb28a78cc045c964edc01c2b08294cf65515ee45e933b82cbad6407bbb7010f11ed2231f555047ca60b0fa0da4a898022b22617009b76f47ba323915869a77fc67c39667855", 0x4e) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x141940) (async) bind$inet6(0xffffffffffffffff, 0x0, 0x0) (async) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000000)=0x8001, 0x4) (async) listen(0xffffffffffffffff, 0x0) (async) socket$igmp(0x2, 0x3, 0x2) 9.470678803s ago: executing program 3 (id=312): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0xe, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="384a84000000", @ANYRES16=r1, @ANYBLOB="0107000000000000000067000000080001000c0000000c00990009000000290000000800c300000000000800c40000000000"], 0x38}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b5af8fe00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000200850000001400000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x55, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x3c, r6, 0x431, 0x0, 0x3, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x4, 0x1}]}, 0x3c}}, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r3, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0], 0x0, 0xa0, &(0x7f0000000700)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000006c0), &(0x7f0000000300), 0x8, 0x4b, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000003c0)={'syztnl2\x00', &(0x7f0000000dc0)={'sit0\x00', 0x0, 0x8000, 0x1, 0x46c, 0x8, {{0x2d, 0x4, 0x0, 0x2f, 0xb4, 0x68, 0x0, 0x1, 0x4, 0x0, @multicast2, @empty, {[@ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x2a, 0x2, [{0x6, 0x11, "b7dee381c8ce84b2399b59aa52b761"}, {0x5, 0x5, "c07c6d"}, {0x2, 0x3, "81"}, {0x2, 0x7, "b489704a02"}, {0x2, 0x4, "1130"}]}, @timestamp_addr={0x44, 0x14, 0x9c, 0x1, 0x0, [{@multicast1, 0x5}, {@remote, 0x6}]}, @cipso={0x86, 0x4b, 0x3, [{0x7, 0x2}, {0x1, 0x9, "bd28ec16b2416e"}, {0x5, 0x12, "ac01c7cf72f45e8b9eddbb52773485f5"}, {0x7, 0x3, "0f"}, {0x0, 0x12, "842eeaf17ecf21d0efcec7a2f173f1a8"}, {0x0, 0x10, "0cfcb637ed98f66a4e36ff72369d"}, {0x2, 0x3, "b7"}]}, @generic={0x82, 0x10, "8d19635415d2e29f72a9b3ff3851"}]}}}}}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000740)={r0, 0x58, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) getsockname$packet(0xffffffffffffffff, &(0x7f0000000880)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000008c0)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000980)={'ip6_vti0\x00', &(0x7f0000000900)={'syztnl0\x00', 0x0, 0x29, 0x8, 0x7, 0x8, 0xed, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback, 0x8000, 0x7800, 0x10, 0x401}}) r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r12 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r12, 0xc0184800, &(0x7f0000000100)={0x4004, r11}) mmap$dsp(&(0x7f0000fff000/0x1000)=nil, 0x1002, 0x0, 0x11, r13, 0x2000) r14 = syz_open_procfs(0x0, &(0x7f00000021c0)='maps\x00') read$char_usb(r14, &(0x7f0000002280)=""/4150, 0x1036) openat$vnet(0xffffffffffffff9c, &(0x7f0000000c80), 0x2, 0x0) syslog(0x9, 0x0, 0x0) r15 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40800000000000073114102000000008510000002000000b7000000000000009500c200000000ff9500001200000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r15, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd28, 0x0, {0x60, 0x0, 0x0, r17, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_INTERVAL={0x8, 0x3, 0xe}]}}]}, 0x3c}}, 0x0) sendmsg$ETHTOOL_MSG_RINGS_GET(r4, &(0x7f0000000c40)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000ec0)={0x198, r6, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x4014}, 0x4010) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r3, 0x0, 0xe, 0x0, &(0x7f0000000040)="0200ad66890ebbf7eb9f5fd3fda2", 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) 9.231844098s ago: executing program 1 (id=314): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0xc0c81) r0 = syz_io_uring_setup(0x3b, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)=""/183, 0xb7}], 0x1}, 0x0, 0x80002101}) io_uring_enter(r0, 0x1000d81, 0x0, 0x0, 0x0, 0x0) write(r3, &(0x7f0000000200)='~', 0xf5) r5 = fanotify_init(0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0x0, 0x110018, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001740)={&(0x7f0000001600)=ANY=[@ANYBLOB="9feb010018000000010000000000010000000000040000004300000000000000050000000000002e00"/52], 0x0, 0x34, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) syz_emit_vhci(0x0, 0x4) socket$inet6_sctp(0xa, 0x1, 0x84) openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r8 = syz_io_uring_setup(0x3b, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r9, r10, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r12, 0x0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)=""/183, 0xb7}], 0x1}, 0x0, 0x80010120}) io_uring_enter(r8, 0x1000d81, 0x0, 0x0, 0x0, 0x0) write$FUSE_NOTIFY_DELETE(r11, &(0x7f0000000140)={0x29, 0x6, 0x0, {0x7c, 0x5}}, 0x29) accept4$nfc_llcp(r7, &(0x7f0000000240), &(0x7f00000000c0)=0x60, 0x0) ioctl$FIOCLEX(r5, 0x5451) close_range(r5, 0xffffffffffffffff, 0x0) 9.218884541s ago: executing program 3 (id=315): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, 0x0, 0x40c0) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f00000001c0)={0x42, 0x0, &(0x7f0000000180)}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x20, 0x33, &(0x7f0000000880)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, [@printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @snprintf, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @map_val={0x18, 0xb, 0x2, 0x0, 0x1}, @alu={0x7, 0x1, 0xd, 0x2, 0x9, 0x100}, @jmp={0x5, 0x0, 0x7, 0x8, 0x3, 0xfffffffffffffff8, 0x8}, @generic={0xf, 0x0, 0x1, 0x10, 0xfffffffb}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}]}, &(0x7f00000007c0)='GPL\x00', 0x4, 0x45, &(0x7f0000000a40)=""/69, 0x41100, 0x4, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x8, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000ac0)=[{0x4, 0x2, 0x8, 0x9}, {0x2, 0x2, 0xd, 0x2}], 0x10, 0x23a3, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x1d, 0x11, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x13bf2cb7, 0x0, 0x0, 0x0, 0x2}, {}, {}, [@btf_id={0x18, 0x1, 0x3, 0x0, 0x5}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000240)='syzkaller\x00', 0xffffffdf, 0xd4, &(0x7f0000000480)=""/212, 0x41100, 0x10, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000780)={0x1, 0x10, 0x80, 0x59e}, 0x10, 0x0, r5, 0x1, 0x0, &(0x7f0000000bc0)=[{0x0, 0x1, 0x1, 0x8}], 0x10, 0xf, @void, @value}, 0x94) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x2b, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r7, 0xc0d05604, &(0x7f0000000040)={0x1, @raw_data="3485f057f9cc64e58ff9ed9c5847afd13dd44504f015bcdddd957b2c95929bc5e419f274443e3d633129caae948a7a6a8d820a5178fa732c7e18c1eed29c0744e6e16c8292d3d173d40555be111daee91dc4fddc29421d25ecae01dec76238bc6f2c481780cbcb05bf3d2fbea11440d958c197a1682d940d46d33103795eba24fb50f625408c9a77a96a45791ffc48889f92d7215ea979a594fd8f387d684e4ce2fb4cd1c71f12f4dcc33faa9ca81d34ea4118dac11374ec98858e693948dde498b7c960aead5c5b"}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000180)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3}) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, &(0x7f0000000380)={0x0, 0x0, 0x0, &(0x7f0000000200), &(0x7f00000000c0)=[r8], &(0x7f0000000340)}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r3, 0xc02064b9, &(0x7f0000000680)={&(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000640)=[0x0], 0x4, r4, 0xeeeeeeee}) ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, &(0x7f0000000740)={0x400, 0x1, &(0x7f0000000180)=[r4], &(0x7f0000000280)=[0x1, 0xa0b, 0x7, 0x7], &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, r8, r9], &(0x7f0000000700)=[0x4ec, 0xd43, 0xe, 0x7a, 0x7, 0x3, 0x9, 0x8], 0x0, 0x8}) 9.214695711s ago: executing program 4 (id=316): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) syz_open_dev$radio(&(0x7f0000000040), 0x2, 0x2) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f00000000c0)={0x0, 0x1, 0x7, 0xfffffffc, 0x0, 0x4, 0xff7ffffd}) r2 = dup(r0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x8) write$cgroup_int(r4, 0x0, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f00000001c0)={0x1, 0x28, '\x00', 0x1, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r2, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) unshare(0x2c020400) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/mdstat\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r6 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 9.209272851s ago: executing program 0 (id=317): syz_usb_connect(0x0, 0x24, &(0x7f00000006c0)={{0x12, 0x1, 0x0, 0x4b, 0x42, 0xe6, 0x8, 0x1a0a, 0x103, 0xad1d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf6, 0x39, 0xbe}}]}}]}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000340)='rpcgss_svc_unwrap_failed\x00', r3, 0x0, 0x800000fff}, 0x11) r4 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$sock_SIOCGSKNS(r4, 0x894c, &(0x7f0000000240)=0x6) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) mount(&(0x7f0000000300)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000680)='./file0\x00', &(0x7f0000000400)='romfs\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_TIOCINQ(r4, 0x541b, &(0x7f0000000080)) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x6) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) 8.236916431s ago: executing program 3 (id=318): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x2163, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5}]}}}]}, 0x3c}}, 0x0) read(0xffffffffffffffff, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)={0x18, 0x3a, 0x9, 0x0, 0x0, {0x1}, [@nested={0x4}]}, 0x18}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000380)={0x0, 0xfffffffffffffeed, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x24, 0x25, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0x8}}}, 0x24}}, 0x8080) r9 = dup(r0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000200)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x3, 0xffffff23}}) write$UHID_INPUT(r9, &(0x7f0000001040)={0xc, {"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", 0x1000}}, 0x1006) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0xa00, 0x0, 0x101, 0x100}}) 7.001437647s ago: executing program 3 (id=320): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f000000c3c0)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x4, 0x0, 0x0, 0x0, 0x0, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) write$RDMA_USER_CM_CMD_GET_EVENT(r2, 0x0, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073017a31000000000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, 0x0, 0x0) writev(r4, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) 6.31431321s ago: executing program 1 (id=321): ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) syz_io_uring_setup(0x655e, &(0x7f0000000300)={0x0, 0x1609, 0x4, 0x2, 0x1e6}, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xffffffffffffffb6) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYRES8=r2, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES64=r0], 0x50}}, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYRES8=r2, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES64=r0], 0x50}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f00000005c0)) (async) ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f00000005c0)=0x0) syz_clone3(&(0x7f00000006c0)={0x29048800, &(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000400), {0x23}, &(0x7f0000000440)=""/253, 0xfd, &(0x7f0000000540)=""/84, &(0x7f0000000600)=[r6], 0x1}, 0x58) (async) syz_clone3(&(0x7f00000006c0)={0x29048800, &(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000400), {0x23}, &(0x7f0000000440)=""/253, 0xfd, &(0x7f0000000540)=""/84, &(0x7f0000000600)=[r6], 0x1}, 0x58) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x6, &(0x7f0000000000)=0x9, 0x4) (async) setsockopt$inet6_tcp_int(r7, 0x6, 0x6, &(0x7f0000000000)=0x9, 0x4) getsockopt$inet6_tcp_int(r7, 0x6, 0x6, 0x0, &(0x7f00000001c0)) (async) getsockopt$inet6_tcp_int(r7, 0x6, 0x6, 0x0, &(0x7f00000001c0)) r8 = socket(0x1, 0x803, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r5, 0xc010f508, &(0x7f0000000740)={0x401, 0x7fffffff}) socket$inet(0x2, 0x4, 0x2) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r3, 0x8982, &(0x7f0000000640)) (async) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r3, 0x8982, &(0x7f0000000640)) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYRESDEC=r4, @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e00000000000000060001000000000008000500", @ANYRES32=r9, @ANYBLOB="6332887544db3e3b9ae231b1db84c467ed02e63e78e0d15f5ec02f6a6ebdb6a311e09f650ebcdc4cd059450050534eae340f636c13100f31818b0151e0d3eb5a4ae2fc33f564c969"], 0x50}}, 0x2) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'veth1_to_team\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r10}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 5.650572247s ago: executing program 4 (id=325): socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)=@newtaction={0x6c, 0x30, 0x9, 0x4, 0x1000000, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x2, 0x200}, 0x4}}, @TCA_MPLS_TTL={0x5, 0x7, 0x6}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet(0x2, 0x3, 0x5) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a090400000000000000000200fffe0900020073797a32000000000900010073797a30000000004400048024000180090001006d6574610000000014000280080001400000000108000240000000171c000180090001006d617371000000000c000280080002"], 0x98}, 0x1, 0x0, 0x0, 0x24040800}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) open(&(0x7f0000000340)='./file1\x00', 0x4c4c2, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000200)=0x200) r6 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000300)="c99b5738180123", 0x7) r8 = accept4(r7, 0x0, 0x0, 0x0) sendmmsg$alg(r8, 0x0, 0x0, 0x4000) syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r8) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f00000000c0)={0x0, @pix_mp={0x0, 0x0, 0x34325842, 0x0, 0xb, [{}, {0x5, 0xfff}, {0x4, 0x9}, {0x200}, {}, {0x0, 0x8000001}]}}) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) 5.6055654s ago: executing program 2 (id=326): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x12200, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSIFADDR(r1, 0x891c, &(0x7f0000000200)={'geneve1\x00', {0x2, 0x103, @local}}) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pselect6(0x40, &(0x7f0000000040)={0x9, 0x400, 0x200, 0x8, 0x2, 0xb, 0x3300, 0xfb04}, &(0x7f0000000080)={0x0, 0x5, 0x6, 0x5, 0x8, 0x2, 0x100000001, 0x80}, &(0x7f00000000c0)={0x1, 0x2, 0x2, 0x2, 0x7, 0x9, 0x5, 0x8}, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000180)={&(0x7f0000000140)={[0xa7f9]}, 0x8}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000009cfdffff000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES8, @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r7 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106d044fc20000040000010902240001000030000904f8ff040300000009210000000122450009058103"], 0x0) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io(r7, &(0x7f0000000340)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="400a45000000452261639c545d2ce9daa7602630c686377369efa824c337939610aab11207b2908fceb485a8995d91251ffdff9ebab19ba6613600e553d7b27400"/75], 0x0, 0x0, 0x0, 0x0}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES16=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f00000003c0)=ANY=[@ANYRESOCT=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x15, 0x0, 0x0, &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe21, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000380)='qdisc_reset\x00', r8}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r9}, 0x10) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r10, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r11, 0x4048ae9b, &(0x7f0000000300)={0xf0001}) r12 = openat$procfs(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/cgroups\x00', 0x0, 0x0) read$hiddev(r12, &(0x7f0000000280)=""/239, 0xef) bpf$BPF_PROG_WITH_BTFID_LOAD(0x13, &(0x7f0000000480)=@bpf_lsm={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="660a000000000000611185000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000011000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000780)="baf80c66b846c7538c66efbafc0cec8094cd740d0fc71a6766c7442400000800006766c7442402c10000006766c744240600000000670f011424806c05fda8046766c7442400d25dcc146766c7442402792800006766c744240600000000670f011c24660f388098070066b80500000066b961f000000f01d90f09", 0x7b}], 0x1, 0x21, 0x0, 0x0) 5.289384459s ago: executing program 0 (id=327): sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000010ac00008e000000040000000200080002000011000000000000000000006100"], 0x0, 0x2c, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000000a40)=""/92, 0x5c}], 0x1, 0x0, 0x4) openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) getresuid(&(0x7f0000000080), 0x0, 0x0) quotactl_fd$Q_SETQUOTA(r1, 0xffffffff80000801, 0x0, &(0x7f0000000900)={0xa, 0x7fff, 0x23b, 0x3eb, 0x400, 0x8000000000000000, 0x5, 0x400}) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) accept4$llc(r2, 0x0, &(0x7f0000000040), 0x80800) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x2a, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40010002, 0x0) r3 = socket(0xa, 0x40000000002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00', 0x19, 0x2, 0x208, [0x20000600, 0x0, 0x0, 0x20000630, 0x20000660], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0200000005000000000000000000766574683098c76f5f7465616d00000064756d6d79300000000000000000000064756d0004300000000000000000000073797a6b616c6c8279a7e00000000000ffffffffffff000000000000ffffffff7fff00000000000000087000000070000000a000000072656469726563740000000000000000000000000000000000000000000000000800000000000000ffffffff000000000b00000000000000000073797a6b616c6c65723100000000000067726574617030000000000000000000766c616e30000000000000000000000064756d6d7930000000000000000000000180c2000000000000000000aaaaaaaaaabb00000000000000007000000070000000a8000000736e6174000000000000000000000000000000000000000001b700000000000010000000000000000000000000000000ffffffff00000000"]}, 0x280) ioprio_get$uid(0x3, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x2, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000000000000000000000000000021000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000400000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff020000000300000000000000ffff0000000000000000000000000000000062726983676530000000000000000000736974300000000000000000000000007465616d300000000000000000000000aaaaaaaaaaaa000000000000aaaaaaaaaabb0000000000000000d8010000d801000010020000636f6d6d656e7400000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000003f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073746174697374696300000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaa000000ffffffff000000001b0000000000000000007465616d5f736c6176655f310000000069726c616e300000000000000000000069726c616e3000e575dd73000000000073797a6b616c6c6572300000000000000180c2000000000000000000f646793b7b3900000000000000007000000070000000a8000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaa000000ffffffff00000000"]}, 0x3c0) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000407d1e242c0000000000010974687804787c778408040000020300000009210000000122050009907f030000000000"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0022051000000bd32052f2"], 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) socket$l2tp(0x2, 0x2, 0x73) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x480000, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e20, @multicast2}}, [0x4, 0x8, 0xf995, 0x80, 0x10001, 0xfffffffffffffffc, 0x2, 0xa, 0x2, 0xfffffffffffff1b9, 0x80, 0x8000, 0xa77b, 0xb, 0x264d]}, &(0x7f00000000c0)=0x100) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000980)=@assoc_value={r5, 0x9}, 0x8) 4.509711828s ago: executing program 4 (id=328): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, 0x0, 0x40c0) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f00000001c0)={0x42, 0x0, &(0x7f0000000180)}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x20, 0x33, &(0x7f0000000880)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, [@printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @snprintf, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @map_val={0x18, 0xb, 0x2, 0x0, 0x1}, @alu={0x7, 0x1, 0xd, 0x2, 0x9, 0x100}, @jmp={0x5, 0x0, 0x7, 0x8, 0x3, 0xfffffffffffffff8, 0x8}, @generic={0xf, 0x0, 0x1, 0x10, 0xfffffffb}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}]}, &(0x7f00000007c0)='GPL\x00', 0x4, 0x45, &(0x7f0000000a40)=""/69, 0x41100, 0x4, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x8, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000ac0)=[{0x4, 0x2, 0x8, 0x9}, {0x2, 0x2, 0xd, 0x2}], 0x10, 0x23a3, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x1d, 0x11, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x13bf2cb7, 0x0, 0x0, 0x0, 0x2}, {}, {}, [@btf_id={0x18, 0x1, 0x3, 0x0, 0x5}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000240)='syzkaller\x00', 0xffffffdf, 0xd4, &(0x7f0000000480)=""/212, 0x41100, 0x10, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000780)={0x1, 0x10, 0x80, 0x59e}, 0x10, 0x0, r5, 0x1, 0x0, &(0x7f0000000bc0)=[{0x0, 0x1, 0x1, 0x8}], 0x10, 0xf, @void, @value}, 0x94) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x2b, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r7, 0xc0d05604, &(0x7f0000000040)={0x1, @raw_data="3485f057f9cc64e58ff9ed9c5847afd13dd44504f015bcdddd957b2c95929bc5e419f274443e3d633129caae948a7a6a8d820a5178fa732c7e18c1eed29c0744e6e16c8292d3d173d40555be111daee91dc4fddc29421d25ecae01dec76238bc6f2c481780cbcb05bf3d2fbea11440d958c197a1682d940d46d33103795eba24fb50f625408c9a77a96a45791ffc48889f92d7215ea979a594fd8f387d684e4ce2fb4cd1c71f12f4dcc33faa9ca81d34ea4118dac11374ec98858e693948dde498b7c960aead5c5b"}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000180)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3}) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, &(0x7f0000000380)={0x0, 0x0, 0x0, &(0x7f0000000200), &(0x7f00000000c0)=[r8], &(0x7f0000000340)}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r3, 0xc02064b9, &(0x7f0000000680)={&(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000640)=[0x0], 0x4, r4, 0xeeeeeeee}) ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, &(0x7f0000000740)={0x400, 0x1, &(0x7f0000000180)=[r4], &(0x7f0000000280)=[0x1, 0xa0b, 0x7, 0x7], &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, r8, r9], &(0x7f0000000700)=[0x4ec, 0xd43, 0xe, 0x7a, 0x7, 0x3, 0x9, 0x8], 0x0, 0x8}) 4.332862446s ago: executing program 1 (id=329): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = fanotify_init(0x0, 0x0) r1 = open$dir(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) fanotify_mark(r0, 0x641, 0x48001018, r1, 0x0) fanotify_mark(r0, 0x1, 0x103b, r1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 4.178801367s ago: executing program 1 (id=330): r0 = syz_usb_connect(0x3, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x83, 0x4a, 0x6b, 0x20, 0x499, 0x100d, 0x84a2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xc, 0x24, 0x40, 0x7, [{{0x9, 0x4, 0xb8, 0x0, 0x0, 0x8c, 0x8c, 0x2, 0x1}}]}}]}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='blkio.bfq.io_serviced\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x3) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000002180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000002140), 0x106, 0x8}}, 0x20) r6 = syz_usb_connect(0x5, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f00000023c0)={0x0, 0x0, 0x0, 0x0, 0x63}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, &(0x7f0000000600)={0x84, &(0x7f00000001c0)={0x0, 0x17, 0x1, "fb"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102392, 0x18ff8) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000023c0)='cgroup\x00') ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000021c0)={r3, 0xcfa4, {0x0, 0x0, 0x0, 0x2, 0x8000, 0x0, 0x9, 0xb, 0x4, "fc7f705aa757e70792db37870fbc9d505cc2e969fd1e31ab08305c4bedf052a9bcf7ab8d36969f6e09047fc60b1f5869c70953c130e586e018967ceee0ca252a", "3a6862116551bfcf8e8abfcb72e497391105cbb29956db9054ba0f6377a9cef084cd3bd5168456ec9f7fe36ec895100999592428590c95f261519650fcc27d70", "4d58775c1f7a064a671ea9cea2ca738da90e087d1e24425ce8bcaec4baa4c5c3", [0x6, 0x7]}}) 3.918672067s ago: executing program 3 (id=331): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x19, 0x82, 0x30, 0x20, 0x413, 0x6023, 0xece5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x60, 0x2, [{{0x9, 0x4, 0x84, 0x0, 0x1, 0xee, 0x48, 0xb1, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x0, 0x0, 0xb}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000100)={0x14, &(0x7f0000000000)={0x20, 0x7415784aeebb3748, 0x5e, {0x5e, 0x4, "9bceb158587009737c6f393ae7b46648a1b55cd62e6ffecccd9830f09f3f4c0f7a115e4b4d6d2def2e529f6aa6f9649d7026ea04935a3d94fa1c53687d1c84ddead3b7071870e0a5d805be6bb8b08e72d53ad4fcfd26d82c46a799aa"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44b}}}, &(0x7f00000004c0)={0x44, &(0x7f0000000240)={0x20, 0x10, 0xf8, "93f68c9a5dff86c1ef269cc80d5fa83daa0ddf9905c43edeffa09876f45c84cc995919f97eecf717a5ed66556fcea3565eca2f4b95b1b36942e67e89aa5db7649af17ca00edb1454feb2eb25c273727ed54b7370c2a052804b2abd46c936e362ba16f4ea96ce5274e29ac869158c4afcb1cb0afa18cffbd476dd62324879b1607c7468be4abbfd0325d4dd9617bd8680e6599d65f2c86cd6e5b868706209abd1bcb8957f6e3594e290f42b2deb5ca7df754b97e8bd3288ec6aa95e0c32422bf3ae83bc316e5a548b906836fbee1758dd352f4623bcc40092fdfd31f3a705d34c3a7f2d80129a68df7265cf1e16c6305fb7ddeca99c7cd468"}, &(0x7f0000000140)={0x0, 0xa, 0x1, 0xba}, &(0x7f0000000180)={0x0, 0x8, 0x1}, &(0x7f00000001c0)={0x20, 0x81, 0x3, "bd8ffd"}, &(0x7f0000000340)={0x20, 0x82, 0x1, 'm'}, &(0x7f0000000380)=ANY=[@ANYBLOB="5ff6ebe5e55806b27c"], &(0x7f00000003c0)={0x20, 0x84, 0x2, 'zf'}, &(0x7f0000000400)={0x20, 0x85, 0x3, "26dd36"}}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x24, &(0x7f0000000540)={0x0, 0x7, 0xfa, {0xfa, 0x8, "ded016f8690affd3ae4feaedff360872065fc6f2537670f3a3bb685e45a730fe4f83ae01f26fd3b41227ba491564f01ad021661c4651eb828b9bc476fd702ab92b1edbca7bc32f2fdd5880c51df3292cf39d85d8aaff333ffc154807bb6d5cfde6aba2ab154fcba9c178c59b18ec9d05bb89040b357541972781fe852548c6c5f8a1ef5c96aa9d28c4b303fbf2a37cfa59004baabb75b7c1e57c57ada9e5775cb9e5704bb5ffd5514ba9f37ee6b5624171e7083086d882a3dc5ce29f0a06cb2d78006d39c2d80b7aa035dd3215b0b4e219dfa11e1333f2dfea5d5fce2835f62f269beb589e5df34b76e6876bb63a0dff44ecc142993e4e16"}}, &(0x7f0000000640)={0x0, 0x3, 0xd5, @string={0xd5, 0x3, "bec0fb69d3fabd013e11dc466cade11d3cbcc22b33b56b11f227ca9a9be9cf4aae863506fceb605052fd31e2c958306ca5506da85c634707b7adb2b4b3bf313d71e8bcb4293b609a32480227780119e5cc148018f54e27602c769871c4d6096f7baa8ec6e51a26e78514873eae016ec92fe0dbd3311e136eb5a24cf4eb350b654ed0ffc0d17defa204c7b67ac14a689bb292c376c4ace97565a6719fa11536446c54dd76ce680af47773bbe6ba59eec4676bf8421282d63e7e6bac36041263e0f06034fe2a7d889ebc6c6434d0870f8a66adab"}}, &(0x7f0000000440)={0x0, 0x22, 0x19, {[@local=@item_4={0x3, 0x2, 0x2, "ea6558db"}, @local=@item_012={0x0, 0x2, 0x1}, @main=@item_4={0x3, 0x0, 0x9, "55e20f14"}, @local=@item_012={0x2, 0x2, 0x7, '\rZ'}, @local=@item_012={0x0, 0x2, 0x7}, @main=@item_4={0x3, 0x0, 0x8, "7d137921"}, @global=@item_4={0x3, 0x1, 0x1, "fc9af0c3"}]}}, &(0x7f0000000740)={0x0, 0x21, 0x9, {0x9, 0x21, 0xf, 0xa, 0x1, {0x22, 0x7b3}}}}, &(0x7f0000000a40)={0x2c, &(0x7f00000007c0)={0x0, 0x3, 0xcd, "f261472c54c641aa68e77c9d2e7c4a9e4c6f096feb7663b99bf3512fedb732600025e85bb1d64077eeb1ed8cd76d9d5878b743a60d4716f92d2f5f81331182426ab473af344b705669a02126edc4418d8652513e3748d9c56cbde2528e27ada49483ca2067332a6e98487afca7130927b670d02fc1155c216451a3e5be972609272c24fc9f2a507ef61cbd0236b3fddf5494e63256ad57512ca64c92212e00941e25ace845868de15235a8db475749442f6dfac7003d40359c47b9d5a1970eeab4a92f3cf1fe2f74fc7f4242f4"}, &(0x7f00000008c0)={0x0, 0xa, 0x1, 0x69}, &(0x7f0000000900)={0x0, 0x8, 0x1, 0x4d}, &(0x7f0000000940)={0x20, 0x1, 0x9c, "f8b4afff7ba76f0b955f00f5090fcee3a2d9b2379881aec3445d4de4cc3512eeaaabd02365cd4f2fe6503e1d7588c87353d3ece163618501a6d1bb775b30bb5b7b93dbb65109b31f7bc726069bffaa592b9ac0d12afc85c6adf4add8ed27c09a8a5b819cd779ec6667d68cc2c83bc830f51e6733e072bc58121dca5c8688f68a90adca53581d14ed4685b23079ef54233d0547a029d7afd4fc5e2d95"}, &(0x7f0000000a00)={0x20, 0x3, 0x1, 0x5}}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x9, 0x5d032, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000200)={0x0, 0x17, 0x2, "5bfc"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 3.604148638s ago: executing program 4 (id=332): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x419, 0x600, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, 0x0) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x23, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r2, 0x90009427, &(0x7f0000000180)) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7f, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000140)={0x1, @pix={0x0, 0x0, 0x3631564e}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x3, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYRES32=r0, @ANYRES8=r1, @ANYRES16=r3, @ANYRES8=r1], 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x2, "0f580fe0"}]}}, 0x0}, 0x0) 2.455638472s ago: executing program 1 (id=333): socket(0x10, 0x2, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4004, 0xfffffdfc, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4008094) getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x4, 0x0, &(0x7f0000000000)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x9, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800040000000000000000009500000000000000d9ae09117124345ecaf4cafd983b545bafa69c65e68d4929e79ca209d77bfcabe2289f5fda0b0ff60fe5bd79ea3e8e0d0e43b23ff2a35318666646fc15a44099262bad0f59feda28fdfd2adab71fb12b83fab4366f67905005b5fe"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000240)='sched_switch\x00', r7}, 0x18) rt_sigprocmask(0x0, &(0x7f0000000100), 0x0, 0x8) r8 = socket$inet6_dccp(0xa, 0x6, 0x0) connect$inet6(r8, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote, 0x7}, 0x1c) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0xc040}, 0x11) unshare(0x20000400) shutdown(r8, 0x0) r9 = syz_open_dev$dri(0x0, 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r9, 0xc01864c6, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000002c0)={0x35}) openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x80201, 0x0) 2.396675393s ago: executing program 2 (id=334): prlimit64(0x0, 0xe, &(0x7f0000000340)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000004c0)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) r1 = socket(0x2, 0x80805, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) unshare(0x8000000) semget$private(0x0, 0x3, 0x0) semtimedop(0x0, &(0x7f0000000040)=[{0x2, 0x76bb, 0x1000}], 0x1, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x92480, 0x0) r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@o_path={&(0x7f0000000080)='./file0\x00', 0x0, 0x4000, r0}, 0x18) r4 = getuid() getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, r3, {r4, r5}}, './file0\x00'}) unshare(0x8040080) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'team_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) r11 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0x60, r11, 0x809, 0x0, 0x0, {}, [{{0x8, 0x1, r10}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}, {0x8, 0x6, r9}}}]}}]}, 0x60}}, 0x0) r12 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r12, 0xc004500a, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r12, 0xc0045006, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) getpid() openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) 1.263811076s ago: executing program 0 (id=335): dup(0xffffffffffffffff) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0xc008aeba, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) (async) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1, 0x0, 0x0, 0xf5ffffff}, 0x0) (async) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000280)=0x1b) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$TCFLSH(r7, 0x400455c8, 0x1) ioctl$TIOCSETD(r8, 0x5412, &(0x7f0000000140)=0xffffffc0) (async) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000100)) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000040)=0xc0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async) syz_open_dev$vim2m(&(0x7f0000000080), 0x0, 0x2) (async) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000040)=""/17) (async) setresuid(0x0, r9, 0x0) (async) mq_open(&(0x7f0000001e00)=',\x00', 0x40, 0x0, 0x0) 1.120790933s ago: executing program 2 (id=336): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSISO7816(r0, 0xc0285443, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r1 = io_uring_setup(0x1694, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000000000/0x1000)=nil], &(0x7f0000000180)=[0x1], 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$TIOCSISO7816(r0, 0xc0285443, 0x0) (async) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async) io_uring_setup(0x1694, &(0x7f0000000080)) (async) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) (async) move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000000000/0x1000)=nil], &(0x7f0000000180)=[0x1], 0x0, 0x0) (async) 1.051410293s ago: executing program 1 (id=337): r0 = socket$inet_tcp(0x2, 0x1, 0x0) mount$afs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x40050, &(0x7f0000000140)={[{@flock_strict}, {@dyn}, {}, {@flock_local}, {@flock_openafs}, {@flock_strict}, {@flock_openafs}], [{@seclabel}, {@uid_gt={'uid>', 0xffffffffffffffff}}, {@dont_hash}, {@subj_role={'subj_role', 0x3d, '\xbb\xbb\xbb\xbb\xbb\xbb'}}]}) syz_emit_ethernet(0x26, &(0x7f0000000100)={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @val={@void}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x2, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1}}}}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000900)=@mangle={'mangle\x00', 0x44, 0x6, 0x510, 0x3a8, 0x210, 0x138, 0x138, 0x0, 0x478, 0x478, 0x478, 0x478, 0x478, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0xffffffff, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@multicast}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x570) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b70400000000000085000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x1, @remote}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x124}}, 0x0) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) syz_emit_ethernet(0x2c8, &(0x7f0000000200)={@local, @remote, @val={@val={0x88a8, 0x3, 0x1, 0x4}, {0x8100, 0x1, 0x1, 0x4}}, {@ipv6={0x86dd, @tipc_packet={0x8, 0x6, "55b58f", 0x28a, 0x6, 0x1, @remote, @private0, {[@hopopts={0x3c, 0x2, '\x00', [@padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0xfff}, @enc_lim={0x4, 0x1, 0x3}, @ra={0x5, 0x2, 0x1ff}]}, @hopopts={0x84, 0x1, '\x00', [@padn={0x1, 0x1, [0x0]}, @enc_lim={0x4, 0x1, 0x80}, @jumbo={0xc2, 0x4, 0x10001}]}, @hopopts={0x3c, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0x5}]}, @hopopts={0x62, 0x34, '\x00', [@generic={0x1, 0xe1, "43761d37a028241dc6b1be6b24ddfc8c723f376e7df6e44bb5ed1a129ef4a29ffb8ba7454a5a76257b2c67fe4c9df58adf727c9f76e3179438c2546db720b4bda34b2b5e6189dcef4ef43f92f36ab7c1c89b1499643ba03d14f2e34b72d27cd65365cefb772e6e7e66d6fc275bea6842ea68a1c41df8624d1789fc9fcb4e3351ce253329376f6e8e3ee1c95cd702c6e29cf4888b141f9a9a7ed888177c40adb65267e954522b8901520e7da30340014bde37b47e14f80d0f408c82373e58611f94ca61c5cf5a2dfa5296166ea6209f5e8886cf128bf171170735239e30e47ef4af"}, @jumbo={0xc2, 0x4, 0x8}, @generic={0x4, 0xa3, "062d52b472b9b8eea9b56da1eab311979bca4936cc068dc5b80a715d1a30dd37ce4bf86ef7e8198db1afbe45e6785b73010f2a3feceae886dc57b0204cbfa4a1c17ac1654216b77cd40aadf7a3a228557f0e26664ae77f6462f7212c4681d3de2426d751c6429ae87b565ecbc117d2d9bc5bfa34aa30f8d61c4c4afd28bfe0ca15302e345c391c59a5c0a1e06f28072f45fb2eb20ad96146aff70b3c5d0dbe27212f4e"}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, @fragment={0x11, 0x0, 0x1, 0x0, 0x0, 0x5, 0x68}, @hopopts={0x6c, 0x8, '\x00', [@hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x20}}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x28, {0x3, 0x8, 0x12, 0x2, [0x7, 0x2, 0x40, 0x7ff]}}, @pad1]}, @fragment={0x21, 0x0, 0x81, 0x0, 0x0, 0x1d, 0x68}, @fragment={0x0, 0x0, 0x0, 0x0, 0x0, 0x1d, 0x65}], @payload_mcast={{{{{{0x32, 0x0, 0x0, 0x0, 0x0, 0xb, 0x2, 0x2, 0x86cd, 0x0, 0x1, 0x8, 0x2, 0x1, 0x8000, 0x5, 0x4, 0x4e24, 0x4e22}, 0x3, 0x3}, 0x2, 0x2}, 0x2}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, &(0x7f0000000500)={0x1, 0x3, [0xa0b, 0x3e, 0xb1d, 0x535]}) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f00000000c0)={@local}) 860.193129ms ago: executing program 2 (id=338): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000700)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x1) recvmmsg(r1, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f0000000640)=[{0x0}, {&(0x7f0000000900)=""/231, 0x21}, {&(0x7f0000000340)=""/252, 0xfc}, {&(0x7f00000002c0)=""/15, 0xf}, {&(0x7f00000017c0)=""/4096, 0x1000}, {0x0}], 0x6}, 0x101}], 0x1, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b40), 0x2328}}, 0x0) fgetxattr(r1, &(0x7f0000000040)=@random={'osx.', 'skcipher\x00'}, &(0x7f0000000080)=""/53, 0x35) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@map=r2, 0x4, 0x0, 0x7, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000140)=[0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) (async) accept4(r0, 0x0, 0x0, 0x0) (async) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000700)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x1) (async) recvmmsg(r1, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f0000000640)=[{0x0}, {&(0x7f0000000900)=""/231, 0x21}, {&(0x7f0000000340)=""/252, 0xfc}, {&(0x7f00000002c0)=""/15, 0xf}, {&(0x7f00000017c0)=""/4096, 0x1000}, {0x0}], 0x6}, 0x101}], 0x1, 0x0, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b40), 0x2328}}, 0x0) (async) fgetxattr(r1, &(0x7f0000000040)=@random={'osx.', 'skcipher\x00'}, &(0x7f0000000080)=""/53, 0x35) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@map=r2, 0x4, 0x0, 0x7, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000140)=[0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) (async) 859.673143ms ago: executing program 4 (id=339): close(0xffffffffffffffff) r0 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9da, 0x22b, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000440)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, r2, 0x0, 0xfffffffe, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r6 = socket$unix(0x1, 0x2, 0x0) bind$unix(r6, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r7 = socket$unix(0x1, 0x2, 0x0) connect$unix(r7, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) writev(r7, &(0x7f0000000040)=[{&(0x7f0000000000)="d2", 0x1}], 0x1) recvmmsg(r6, &(0x7f0000000300), 0x40000000000049e, 0x1000000000fe, 0x0) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x4, [@var={0xf, 0x0, 0x0, 0xe, 0x5, 0x1}]}, {0x0, [0x0, 0x61]}}, &(0x7f0000000b00)=""/4096, 0x2c, 0x1000, 0x1, 0x7fffffff, 0x10000, @value}, 0x28) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000500)={r3, 0x58, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sched_setscheduler(r4, 0x2, &(0x7f0000000540)=0x2) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x18, 0xc, &(0x7f0000000380)=ANY=[@ANYRESOCT=0x0, @ANYRES64=r7], &(0x7f0000000280)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', r9, @fallback=0xf, r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r10}, 0x10) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000004c0)={0x2c, &(0x7f0000000240)={0x0, 0x0, 0x7, {0x7, 0x0, "c2817842c4"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 650.461297ms ago: executing program 0 (id=340): r0 = syz_open_dev$audion(&(0x7f0000000000), 0x6, 0x80) ioctl$SNDRV_PCM_IOCTL_XRUN(r0, 0x4148, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000600}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELCHAIN={0x28, 0x5, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_DELTABLE={0x160, 0x2, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0xec, 0x6, "d88eff07fafc0f7c4b5af8fe22765b1c7aaec9374766d80ba84a75718d52b4198e7a972e195e8ed40eda6e301533db08ab896a304ce221855ef67e57f0e8878de846d19d8f5b92051ff89cdcc111ae9e765289a4dc725f7be15337512ed44b40049e3bfa69f2004c6592031186b8622eafe0b5872d5f6bd516d4bc8bd1e160d17f3026d351f0ab470b34e56c47b06cd7eca6aca0db18951b3fc00f8fc1d86c3801de69110552d3b53347fd31dfd9747570f5627ad2e374e2bff2cd3d0598df248455205233c8a7c563118c029b544bbeca9a3c03c2c04bd07e3882c433e907f38637fa7d8905cd05"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELCHAIN={0x30, 0x5, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x1e0}}, 0x4048080) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'veth1_macvtap\x00', 0x0}) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001500)={r0, 0x20, &(0x7f00000014c0)={&(0x7f0000000480)=""/4096, 0x1000, 0x0, &(0x7f0000001480)=""/46, 0x2e}}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001580)={0x14, 0x6, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xffffffff}, [@alu={0x4, 0x1, 0x5, 0x6, 0x3, 0xfffffffffffffff8, 0xfffffffffffffff0}, @cb_func={0x18, 0x0, 0x4, 0x0, 0x9e}]}, &(0x7f0000000340)='syzkaller\x00', 0x5, 0x15, &(0x7f0000000380)=""/21, 0x41100, 0x0, '\x00', r1, @lirc_mode2, r0, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x5, 0x7, 0x8, 0x3aa}, 0x10, r2, r0, 0x0, &(0x7f0000001540)=[r0], 0x0, 0x10, 0xe211, @void, @value}, 0x94) (async, rerun: 32) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000001640)={0x0, 0x7, 0xf65, 0xb, 0x2, 0x1200, 0x0, 0xb98, {0x0, @in6={{0xa, 0x4e22, 0x7fff, @private1, 0x10}}, 0x4, 0x3, 0x5a70d831, 0x3, 0xcf9}}, &(0x7f0000001700)=0xb0) (rerun: 32) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000001740)=r5, 0x4) getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000001780)={@private1, 0x0}, &(0x7f00000017c0)=0x14) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001880)=r2, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000001800)=@base={0x19, 0x4, 0x3, 0xfffffff9, 0x18280, r0, 0xe, '\x00', r6, r0, 0x0, 0x3, 0x0, 0x0, @value=r7, @void, @value=r0}, 0x50) (async) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000001900)={0x2, &(0x7f00000018c0)=[{}, {}]}) (async) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000000, 0x1010, r0, 0xa000) (async) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000001940)=0x0) timer_create(0x1, &(0x7f0000001980)={0x0, 0x1c, 0x2, @tid=r8}, &(0x7f00000019c0)=0x0) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000001a00)=0x40004) (async) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000001a40)={0x6}, 0x1) (async) clock_gettime(0x0, &(0x7f0000001a80)={0x0, 0x0}) timer_settime(r9, 0x1, &(0x7f0000001ac0)={{r10, r11+60000000}, {0x77359400}}, &(0x7f0000001b00)) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000001b40)={r0, r0, 0x4, r0}, 0x10) (async, rerun: 32) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000001b80)={0x7, 0x9c80, 0x0, 0x2, 0x4, 0x0, [{0x1, 0x3, 0x2, '\x00', 0x2}, {0x9, 0x14, 0xf815, '\x00', 0x4}, {0xa, 0x401, 0x6, '\x00', 0xc08}, {0x80000000, 0x0, 0xffffffffffffff15, '\x00', 0x802}]}) (rerun: 32) ioctl$EXT4_IOC_SWAP_BOOT(r3, 0x6611) (async) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000001c80)="d12cdf141f028f1e826bb9074aa1e0d0", 0x10) (async, rerun: 64) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000001cc0)=0x2) (rerun: 64) ioctl$sock_qrtr_TIOCOUTQ(r0, 0x5411, &(0x7f0000001d00)) (async) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000001d40)={r4, 0x5}, &(0x7f0000001d80)=0x8) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000001dc0)=0x0) timer_create(0x4, &(0x7f0000001e00)={0x0, 0x6, 0x4, @tid=r12}, &(0x7f0000001e40)) socket$netlink(0x10, 0x3, 0x4) syz_usb_connect$uac1(0x2, 0xc9, &(0x7f0000001e80)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb7, 0x3, 0x1, 0xff, 0x40, 0x6, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xfde7, 0x5}, [@feature_unit={0x11, 0x24, 0x6, 0x4, 0x2, 0x5, [0x2, 0x7, 0x2, 0x4, 0x6], 0x6}, @selector_unit={0xa, 0x24, 0x5, 0x2, 0xc, "a55612b3c0"}, @mixer_unit={0x5, 0x24, 0x4, 0x3, 0xfd}, @output_terminal={0x9, 0x24, 0x3, 0x1, 0x100, 0x5, 0x1, 0x3}, @output_terminal={0x9, 0x24, 0x3, 0x1, 0x5f8, 0x5, 0x6}, @mixer_unit={0x9, 0x24, 0x4, 0x3, 0x3, "26742a9d"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0xa, 0x8}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x5, 0xc, 0x7, "ea"}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x2, 0x9, 0x6, {0x7, 0x25, 0x1, 0x82, 0xd6, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0xa6, 0xfff, 0x60, "e382d7"}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0xf5, 0x3, 0xfe, {0x7, 0x25, 0x1, 0x2, 0x5, 0x2}}}}}}}]}}, &(0x7f00000022c0)={0xa, &(0x7f0000001f80)={0xa, 0x6, 0x200, 0x7, 0x9, 0xb, 0x20, 0x2}, 0x1c, &(0x7f0000001fc0)={0x5, 0xf, 0x1c, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0xa, 0x81, 0x4}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x5, 0x0, 0x8}]}, 0x8, [{0x4, &(0x7f0000002000)=@lang_id={0x4, 0x3, 0x820}}, {0x4, &(0x7f0000002040)=@lang_id={0x4, 0x3, 0x810}}, {0xed, &(0x7f0000002080)=@string={0xed, 0x3, "d15f60f5a9f33e74f8dad6a841b246ff9f418e21688fba8c50c75e5c66ea3efa71cf350a611dd08f567d4f5eddb0accc54e30b3b459536fbb26dc758e796bc320e6aa72fb210343dc3a522217ca8649c9ddda8f43b7fcdcc3a2f5794d598b5781f5bb69deda8fef2bf7342e64113ba24db878d90a1b2e27e3be4f9d3679446b030af19309cabb185c73f1b627d8921a421288a204b858001c1ef32b0140575844e3db591e89ee5a17df2c5528e1159f3201e126a7b8cb46fab129b43dc10fd1163add9d60f4a0f158fce6aab5ea6319b35df85cfb625c4391f34cf83a1b5ac27468b020cf355f2f52b3933"}}, {0x4, &(0x7f0000002180)=@lang_id={0x4, 0x3, 0x42b}}, {0x4, &(0x7f00000021c0)=@lang_id={0x4, 0x3, 0x408}}, {0x4, &(0x7f0000002200)=@lang_id={0x4, 0x3, 0x2c0a}}, {0x4, &(0x7f0000002240)=@lang_id={0x4, 0x3, 0x3009}}, {0x4, &(0x7f0000002280)=@lang_id={0x4, 0x3, 0x448}}]}) 299.820707ms ago: executing program 2 (id=341): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x38, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}], 0x400000000000077, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 0s ago: executing program 2 (id=342): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0xc4) getsockname$ax25(r1, 0x0, &(0x7f0000000000)) r2 = mq_open(&(0x7f0000000080)='m$\x00\xdc\xb7\xb8\xd0>,\xb0\x13\x8b3z>K\x84\x05\x00\x00\x00\x9c\x81\xed\xc2\x00', 0x0, 0x0, 0x0) mq_getsetattr(r2, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xa03e, 0x0, &(0x7f0000006680)) r3 = syz_open_dev$radio(&(0x7f0000000400), 0x2, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r3, 0xc0405665, &(0x7f0000000080)={0x8000, 0x1}) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000340)={0x3, &(0x7f0000000180)=[{0x0, 0x2, 0x9}, {0xfff9, 0x0, 0x1, 0x42}, {0x6, 0x80, 0x4, 0x2}]}, 0x10) quotactl$Q_GETFMT(0xffffffff80000400, &(0x7f0000003180)=@nullb, 0x0, 0x0) r4 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r4, &(0x7f0000000100)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) pidfd_send_signal(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CAP_VM_COPY_ENC_CONTEXT_FROM(0xffffffffffffffff, 0x4068aea3, &(0x7f00000002c0)={0xc5, 0x0, r5}) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000280)={0xa, 0x100, 0xfffffffd}, 0x10) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r9 = dup(r8) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000054d564b"]) r10 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_PARM(r10, 0xc0cc5616, &(0x7f0000000dc0)={0x2}) sendmsg$ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c00", @ANYRES16, @ANYBLOB="470d00000000000700000a0000000400018004000588"], 0x1c}, 0x1, 0x0, 0x0, 0x24000888}, 0x0) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="040e06006220"], 0x9) kernel console output (not intermixed with test programs): [1, 0] type 2 family 0 port 6081 - 0 [ 60.549748][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.591008][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.602363][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.613057][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.623092][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.633859][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.643787][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.829496][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.347721][ T5840] Bluetooth: hci0: command tx timeout [ 61.374977][ T5840] Bluetooth: hci2: command tx timeout [ 61.381229][ T5840] Bluetooth: hci3: command tx timeout [ 61.501202][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.508836][ T54] Bluetooth: hci4: command tx timeout [ 61.514294][ T54] Bluetooth: hci1: command tx timeout [ 61.669473][ T5841] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.682824][ T5841] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.694202][ T5841] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.706067][ T5841] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.816747][ T5917] tap0: tun_chr_ioctl cmd 1074025676 [ 61.822217][ T5917] tap0: owner set to 0 [ 61.832047][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.848183][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.521082][ T25] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 62.605059][ T3492] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.618541][ T3492] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.637592][ T3449] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.671571][ T3449] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.681695][ T25] usb 3-1: Using ep0 maxpacket: 8 [ 62.750933][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 62.800817][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 62.895788][ T25] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 62.908861][ T3492] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.909027][ T25] usb 3-1: can't read configurations, error -61 [ 63.312892][ T5934] xt_CT: You must specify a L4 protocol and not use inversions on it [ 63.424343][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 63.550678][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 63.581240][ T29] kauditd_printk_skb: 38 callbacks suppressed [ 63.581259][ T29] audit: type=1400 audit(1732497832.574:159): avc: denied { ioctl } for pid=5929 comm="syz.3.7" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=7735 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 63.584496][ T5840] Bluetooth: hci0: command tx timeout [ 63.591769][ T3492] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.613656][ T5840] Bluetooth: hci3: command tx timeout [ 63.622784][ T54] Bluetooth: hci2: command tx timeout [ 63.625906][ T5840] Bluetooth: hci1: command tx timeout [ 63.642138][ T5840] Bluetooth: hci4: command tx timeout [ 63.651585][ T25] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 63.697258][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.723757][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.789033][ T29] audit: type=1400 audit(1732497833.184:160): avc: denied { create } for pid=5935 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 63.834308][ T29] audit: type=1400 audit(1732497833.234:161): avc: denied { write } for pid=5935 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 63.950832][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 63.961214][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 64.001081][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 64.010513][ T5913] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 64.053175][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.090279][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.209326][ T29] audit: type=1400 audit(1732497833.554:162): avc: denied { create } for pid=5935 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 64.236386][ T5913] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 64.341051][ T5913] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 64.352719][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 64.665330][ T5913] usb 4-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 64.674477][ T5913] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.700867][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 64.710309][ T5913] usb 4-1: config 0 descriptor?? [ 64.729893][ T9] usb 5-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 64.739795][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.758756][ T29] audit: type=1400 audit(1732497833.574:163): avc: denied { ioctl } for pid=5935 comm="syz.0.1" path="socket:[7829]" dev="sockfs" ino=7829 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 64.787755][ T9] usb 5-1: Product: syz [ 64.792193][ T9] usb 5-1: Manufacturer: syz [ 64.796834][ T9] usb 5-1: SerialNumber: syz [ 64.812384][ T9] usb 5-1: config 0 descriptor?? [ 65.064301][ T5946] usb usb8: usbfs: process 5946 (syz.0.8) did not claim interface 0 before use [ 65.101238][ T29] audit: type=1400 audit(1732497834.454:164): avc: denied { write } for pid=5943 comm="syz.0.8" name="001" dev="devtmpfs" ino=747 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 65.648457][ T29] audit: type=1400 audit(1732497835.044:165): avc: denied { create } for pid=5947 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 65.671424][ T29] audit: type=1400 audit(1732497835.064:166): avc: denied { connect } for pid=5947 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 65.719274][ T9] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 65.805570][ T5956] ieee802154 phy0 wpan0: encryption failed: -22 [ 65.806030][ T29] audit: type=1400 audit(1732497835.134:167): avc: denied { create } for pid=5947 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 65.926309][ T29] audit: type=1400 audit(1732497835.154:168): avc: denied { write } for pid=5947 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 66.959218][ T5913] usb 4-1: string descriptor 0 read error: -71 [ 66.992083][ T5913] usb 4-1: Max retries (5) exceeded reading string descriptor 200 [ 67.012664][ T5913] letsketch 0003:6161:4D15.0001: probe with driver letsketch failed with error -32 [ 67.052481][ T5913] usb 4-1: USB disconnect, device number 2 [ 67.404545][ T5969] Zero length message leads to an empty skb [ 67.990158][ T9] gspca_sunplus: reg_w_riv err -110 [ 67.998042][ T9] sunplus 5-1:0.0: probe with driver sunplus failed with error -110 [ 68.091932][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 68.958721][ T5968] tap0: tun_chr_ioctl cmd 1074025676 [ 68.964131][ T5968] tap0: owner set to 0 [ 68.992931][ T5973] netlink: 'syz.1.15': attribute type 2 has an invalid length. [ 69.001268][ T5973] netlink: 'syz.1.15': attribute type 1 has an invalid length. [ 69.008964][ T5973] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.15'. [ 69.033193][ T29] kauditd_printk_skb: 22 callbacks suppressed [ 69.033208][ T29] audit: type=1400 audit(1732497838.434:191): avc: denied { name_bind } for pid=5972 comm="syz.1.15" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 69.066857][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 69.077618][ T29] audit: type=1400 audit(1732497838.434:192): avc: denied { node_bind } for pid=5972 comm="syz.1.15" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 69.115186][ T9] usb 5-1: USB disconnect, device number 2 [ 69.170098][ T29] audit: type=1400 audit(1732497838.564:193): avc: denied { unlink } for pid=5846 comm="syz-executor" name="file1" dev="tmpfs" ino=25 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 69.251066][ T25] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 69.271391][ T46] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 69.581217][ T25] usb 3-1: Using ep0 maxpacket: 8 [ 69.586591][ T46] usb 1-1: Using ep0 maxpacket: 32 [ 70.101312][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10a!!! [ 70.101344][ T0] NOHZ tick-stop error: local softirq work is pending, handler #4a!!! [ 70.172654][ T29] audit: type=1400 audit(1732497839.054:194): avc: denied { ioctl } for pid=5980 comm="syz.4.17" path="/dev/video36" dev="devtmpfs" ino=1044 ioctlcmd=0x5605 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 70.235209][ T25] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 70.242890][ T25] usb 3-1: can't read configurations, error -61 [ 70.255482][ T46] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 70.264643][ T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.282992][ T46] usb 1-1: config 0 descriptor?? [ 70.390376][ T29] audit: type=1400 audit(1732497839.784:195): avc: denied { write } for pid=5976 comm="syz.3.14" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 70.406863][ T25] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 70.617140][ T46] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 70.677885][ T5990] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2304 sclass=netlink_route_socket pid=5990 comm=syz.4.18 [ 70.790725][ T46] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 70.803750][ T5992] overlayfs: conflicting options: userxattr,redirect_dir=on [ 70.857555][ T29] audit: type=1400 audit(1732497840.254:196): avc: denied { create } for pid=5989 comm="syz.2.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 70.881182][ T5991] capability: warning: `syz.2.19' uses deprecated v2 capabilities in a way that may be insecure [ 70.893809][ T46] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 70.919563][ T29] audit: type=1400 audit(1732497840.314:197): avc: denied { connect } for pid=5976 comm="syz.3.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 70.943565][ T46] usb 1-1: media controller created [ 70.975153][ T46] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 71.005224][ T5913] hid-generic 0005:04F3:FFF9.0002: item fetching failed at offset 0/1 [ 71.015751][ T5913] hid-generic 0005:04F3:FFF9.0002: probe with driver hid-generic failed with error -22 [ 71.036397][ T29] audit: type=1400 audit(1732497840.434:198): avc: denied { read write } for pid=5997 comm="syz.1.20" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 71.060183][ T29] audit: type=1400 audit(1732497840.434:199): avc: denied { open } for pid=5997 comm="syz.1.20" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 71.083176][ C1] vkms_vblank_simulate: vblank timer overrun [ 71.375727][ T25] usb 3-1: device descriptor read/64, error -71 [ 71.383220][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.389783][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.478656][ T29] audit: type=1400 audit(1732497840.874:200): avc: denied { write } for pid=6008 comm="syz.4.22" lport=132 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 71.498818][ C1] vkms_vblank_simulate: vblank timer overrun [ 71.506847][ T25] usb usb3-port1: attempt power cycle [ 71.581521][ T5836] usb 2-1: new low-speed USB device number 2 using dummy_hcd [ 71.623098][ T6012] delete_channel: no stack [ 71.900983][ T46] stb0899_attach: Driver disabled by Kconfig [ 71.907120][ T46] az6027: no front-end attached [ 71.907120][ T46] [ 71.937146][ T46] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 71.960719][ T46] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input5 [ 71.984844][ T46] dvb-usb: schedule remote query interval to 400 msecs. [ 72.012170][ T46] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 72.027879][ T5836] usb 2-1: No LPM exit latency info found, disabling LPM. [ 72.048365][ T5836] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 72.061942][ T25] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 72.166178][ T25] usb 3-1: Using ep0 maxpacket: 8 [ 72.174009][ T5836] usb 2-1: string descriptor 0 read error: -22 [ 72.180287][ T5836] usb 2-1: New USB device found, idVendor=6666, idProduct=8801, bcdDevice= 0.40 [ 72.189483][ T5836] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.207566][ T5836] usbhid 2-1:1.0: couldn't find an input interrupt endpoint [ 72.217391][ T25] usb 3-1: New USB device found, idVendor=1a0a, idProduct=0101, bcdDevice=1b.21 [ 72.227548][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.236238][ T25] usb 3-1: Product: syz [ 72.240428][ T25] usb 3-1: Manufacturer: syz [ 72.246673][ T25] usb 3-1: SerialNumber: syz [ 72.266922][ T8] usb 1-1: USB disconnect, device number 2 [ 72.276751][ T25] usb 3-1: config 0 descriptor?? [ 72.290525][ T25] usb_ehset_test 3-1:0.0: probe with driver usb_ehset_test failed with error -32 [ 72.354851][ T8] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 72.474625][ T5836] usb 2-1: USB disconnect, device number 2 [ 72.526909][ T5913] usb 3-1: USB disconnect, device number 6 [ 72.636498][ T5977] syz.3.14 (5977): drop_caches: 1 [ 72.880575][ T6032] netlink: 4 bytes leftover after parsing attributes in process `syz.2.26'. [ 73.379643][ T6050] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 73.701094][ T25] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 73.880881][ T25] usb 5-1: Using ep0 maxpacket: 32 [ 73.887589][ T25] usb 5-1: unable to get BOS descriptor or descriptor too short [ 73.916890][ T25] usb 5-1: config 1 has an invalid interface number: 40 but max is 0 [ 73.925329][ T25] usb 5-1: config 1 has no interface number 0 [ 73.985235][ T25] usb 5-1: config 1 interface 40 altsetting 3 bulk endpoint 0x1 has invalid maxpacket 1023 [ 73.995563][ T25] usb 5-1: config 1 interface 40 altsetting 3 bulk endpoint 0x4 has invalid maxpacket 1024 [ 74.006154][ T25] usb 5-1: config 1 interface 40 has no altsetting 0 [ 74.171686][ T25] usb 5-1: New USB device found, idVendor=054c, idProduct=0144, bcdDevice=f7.1b [ 74.181882][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.201431][ T25] usb 5-1: Product: syz [ 74.205827][ T25] usb 5-1: Manufacturer: syz [ 74.210512][ T25] usb 5-1: SerialNumber: syz [ 74.273473][ T6050] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 74.300913][ T5913] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 74.371119][ T6050] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 74.472072][ T6072] overlayfs: failed to resolve '': -2 [ 74.497273][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 74.497289][ T29] audit: type=1400 audit(1732497843.894:221): avc: denied { write } for pid=6073 comm="syz.0.36" name="udplite6" dev="proc" ino=4026533408 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 74.530910][ T5913] usb 4-1: Using ep0 maxpacket: 8 [ 74.563569][ T5913] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 74.591316][ T5913] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 74.609667][ T25] usb 5-1: palm_os_4_probe - error -71 getting connection info [ 74.676667][ T29] audit: type=1400 audit(1732497844.064:222): avc: denied { mount } for pid=6073 comm="syz.0.36" name="/" dev="rpc_pipefs" ino=8984 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 74.699486][ C1] vkms_vblank_simulate: vblank timer overrun [ 74.787865][ T25] visor 5-1:1.40: Sony Clie 5.0 converter detected [ 74.959146][ T25] usb 5-1: Sony Clie 5.0 converter now attached to ttyUSB0 [ 75.180769][ T5913] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 75.191082][ T5913] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 75.204127][ T5913] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 75.214308][ T5913] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.239440][ T25] usb 5-1: Sony Clie 5.0 converter now attached to ttyUSB1 [ 75.251456][ T25] usb 5-1: USB disconnect, device number 3 [ 75.270305][ T25] clie_5 ttyUSB0: Sony Clie 5.0 converter now disconnected from ttyUSB0 [ 75.271034][ T6082] SET target dimension over the limit! [ 75.360932][ T25] clie_5 ttyUSB1: Sony Clie 5.0 converter now disconnected from ttyUSB1 [ 75.370198][ T25] visor 5-1:1.40: device disconnected [ 75.514736][ T29] audit: type=1400 audit(1732497844.914:223): avc: denied { create } for pid=6090 comm="syz.4.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 75.635764][ T5913] usb 4-1: usb_control_msg returned -32 [ 75.641486][ T5913] usbtmc 4-1:16.0: can't read capabilities [ 76.197391][ T29] audit: type=1400 audit(1732497845.594:224): avc: denied { sqpoll } for pid=6110 comm="syz.1.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 76.198162][ T5836] usb 4-1: USB disconnect, device number 3 [ 76.216343][ C1] vkms_vblank_simulate: vblank timer overrun [ 76.321214][ T5913] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 76.500938][ T5913] usb 3-1: Using ep0 maxpacket: 16 [ 76.526079][ T899] cfg80211: failed to load regulatory.db [ 77.013536][ T6135] use of bytesused == 0 is deprecated and will be removed in the future, [ 77.022391][ T6135] use the actual size instead. [ 77.118431][ T6135] netlink: 19 bytes leftover after parsing attributes in process `syz.4.48'. [ 78.042922][ T5913] usb 3-1: New USB device found, idVendor=1a0a, idProduct=0104, bcdDevice=dd.d4 [ 78.064137][ T29] audit: type=1400 audit(1732497847.434:225): avc: denied { ioctl } for pid=6137 comm="syz.3.49" path="socket:[8172]" dev="sockfs" ino=8172 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 78.083605][ T6142] netlink: 20 bytes leftover after parsing attributes in process `syz.4.50'. [ 78.088759][ T5913] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.205579][ T5913] usb 3-1: Product: syz [ 78.211597][ T5913] usb 3-1: Manufacturer: syz [ 78.220034][ T5913] usb 3-1: SerialNumber: syz [ 78.224680][ T29] audit: type=1400 audit(1732497847.434:226): avc: denied { write } for pid=6137 comm="syz.3.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 78.224716][ T29] audit: type=1400 audit(1732497847.484:227): avc: denied { create } for pid=6141 comm="syz.4.50" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 78.224746][ T29] audit: type=1400 audit(1732497847.484:228): avc: denied { setopt } for pid=6141 comm="syz.4.50" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 78.284006][ C1] vkms_vblank_simulate: vblank timer overrun [ 78.290133][ T29] audit: type=1400 audit(1732497847.484:229): avc: denied { write } for pid=6141 comm="syz.4.50" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 78.310354][ T29] audit: type=1400 audit(1732497847.484:230): avc: denied { nlmsg_write } for pid=6141 comm="syz.4.50" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 78.388729][ T5913] usb 3-1: config 0 descriptor?? [ 78.415286][ T5913] usb_ehset_test 3-1:0.0: probe with driver usb_ehset_test failed with error -32 [ 79.075444][ T8] usb 3-1: USB disconnect, device number 7 [ 80.060710][ T29] kauditd_printk_skb: 15 callbacks suppressed [ 80.060725][ T29] audit: type=1326 audit(1732497849.454:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6167 comm="syz.2.55" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa07fd7e819 code=0x0 [ 80.161607][ T5913] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 80.324723][ T5913] usb 5-1: Using ep0 maxpacket: 8 [ 80.345559][ T5913] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 80.353657][ T5913] usb 5-1: can't read configurations, error -61 [ 80.502790][ T5913] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 80.571067][ T5836] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 80.662862][ T5913] usb 5-1: Using ep0 maxpacket: 8 [ 80.678665][ T5913] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 80.691332][ T5913] usb 5-1: can't read configurations, error -61 [ 80.698274][ T5913] usb usb5-port1: attempt power cycle [ 80.731061][ T5836] usb 3-1: Using ep0 maxpacket: 16 [ 80.740219][ T5836] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 80.760246][ T5836] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 80.772415][ T5836] usb 3-1: New USB device found, idVendor=0d57, idProduct=e999, bcdDevice=a7.63 [ 80.781655][ T5836] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.789687][ T5836] usb 3-1: Product: syz [ 80.799854][ T5836] usb 3-1: Manufacturer: syz [ 80.809241][ T5836] usb 3-1: SerialNumber: syz [ 80.824488][ T5836] usb 3-1: config 0 descriptor?? [ 80.978090][ T6170] tap0: tun_chr_ioctl cmd 1074025676 [ 81.061647][ T5913] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 81.117854][ T6170] tap0: owner set to 0 [ 81.127211][ T29] audit: type=1400 audit(1732497850.514:247): avc: denied { listen } for pid=6167 comm="syz.2.55" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 81.158626][ T6168] warning: `syz.2.55' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 81.177477][ T5913] usb 5-1: Using ep0 maxpacket: 8 [ 81.184820][ T5913] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 81.192464][ T5913] usb 5-1: can't read configurations, error -61 [ 81.340989][ T5913] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 81.414747][ T5913] usb 5-1: Using ep0 maxpacket: 8 [ 81.426029][ T5913] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 81.440919][ T5913] usb 5-1: can't read configurations, error -61 [ 81.457785][ T5913] usb usb5-port1: unable to enumerate USB device [ 81.466367][ T29] audit: type=1400 audit(1732497850.864:248): avc: denied { mount } for pid=6181 comm="syz.3.57" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 81.498364][ T29] audit: type=1400 audit(1732497850.884:249): avc: denied { remount } for pid=6181 comm="syz.3.57" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 82.153884][ T29] audit: type=1400 audit(1732497851.554:250): avc: denied { unmount } for pid=5833 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 82.306100][ T29] audit: type=1400 audit(1732497851.704:251): avc: denied { mounton } for pid=6196 comm="syz.3.61" path="/10/file0" dev="tmpfs" ino=69 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 82.317647][ T6198] ISOFS: Unable to identify CD-ROM format. [ 82.391673][ T29] audit: type=1400 audit(1732497851.794:252): avc: denied { map } for pid=6200 comm="syz.4.64" path="/dev/radio8" dev="devtmpfs" ino=1008 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 82.453810][ T29] audit: type=1400 audit(1732497851.824:253): avc: denied { create } for pid=6200 comm="syz.4.64" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 82.484875][ T29] audit: type=1400 audit(1732497851.884:254): avc: denied { getopt } for pid=6200 comm="syz.4.64" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 82.568743][ T29] audit: type=1400 audit(1732497851.884:255): avc: denied { getopt } for pid=6200 comm="syz.4.64" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 82.625811][ T5913] usb 3-1: USB disconnect, device number 8 [ 82.705594][ T6208] usb usb8: usbfs: process 6208 (syz.1.62) did not claim interface 0 before use [ 83.815597][ T967] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 84.011035][ T5836] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 85.408971][ T5836] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 85.421222][ T5836] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.429235][ T5836] usb 5-1: Product: syz [ 85.433515][ T5836] usb 5-1: Manufacturer: syz [ 85.438117][ T5836] usb 5-1: SerialNumber: syz [ 85.476006][ T5836] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 85.649885][ T967] usb 1-1: unable to read config index 0 descriptor/all [ 85.656955][ T967] usb 1-1: can't read configurations, error -71 [ 85.686427][ T899] usb 5-1: ath9k_htc: Firmware - ath9k_htc/htc_9271-1.4.0.fw download failed [ 85.699677][ T899] usb 5-1: ath9k_htc: USB layer deinitialized [ 85.720590][ T899] usb 5-1: USB disconnect, device number 8 [ 86.041009][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 86.041066][ T29] audit: type=1400 audit(1732497855.444:259): avc: denied { unmount } for pid=5846 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 86.591975][ T29] audit: type=1400 audit(1732497855.524:260): avc: denied { connect } for pid=6228 comm="syz.0.69" lport=7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 86.698268][ T29] audit: type=1400 audit(1732497856.024:261): avc: denied { read write } for pid=6230 comm="syz.1.70" name="sg0" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 86.791239][ T29] audit: type=1400 audit(1732497856.154:262): avc: denied { setopt } for pid=6241 comm="syz.3.72" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 86.817563][ T6247] netlink: 4 bytes leftover after parsing attributes in process `syz.2.74'. [ 86.832386][ T29] audit: type=1400 audit(1732497856.154:263): avc: denied { bind } for pid=6241 comm="syz.3.72" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 86.852000][ T29] audit: type=1400 audit(1732497856.154:264): avc: denied { bind } for pid=6237 comm="syz.2.74" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 86.871604][ T29] audit: type=1400 audit(1732497856.164:265): avc: denied { read } for pid=6241 comm="syz.3.72" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 86.893740][ T29] audit: type=1400 audit(1732497856.214:266): avc: denied { name_bind } for pid=6237 comm="syz.2.74" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 86.904780][ T6239] mac80211_hwsim hwsim10 wlan1: entered promiscuous mode [ 86.923322][ T29] audit: type=1400 audit(1732497856.214:267): avc: denied { node_bind } for pid=6237 comm="syz.2.74" saddr=fe80::bb src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 86.946274][ T6239] mac80211_hwsim hwsim10 wlan1: entered allmulticast mode [ 87.013803][ T29] audit: type=1400 audit(1732497856.214:268): avc: denied { write } for pid=6241 comm="syz.3.72" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 87.041075][ T9] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 87.413131][ T899] hid-generic 0000:0010:0000.0003: unknown main item tag 0x0 [ 87.461335][ T899] hid-generic 0000:0010:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 87.481207][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 87.563937][ T5886] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 87.575329][ T9] usb 5-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 87.635231][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.682690][ T9] usb 5-1: Product: syz [ 87.701205][ T5886] usb 4-1: device descriptor read/64, error -71 [ 87.719842][ T9] usb 5-1: Manufacturer: syz [ 87.751694][ T9] usb 5-1: SerialNumber: syz [ 87.768904][ T9] usb 5-1: config 0 descriptor?? [ 87.813439][ T9] visor 5-1:0.0: Sony Clie 3.5 converter detected [ 87.960929][ T5886] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 88.130494][ T5886] usb 4-1: device descriptor read/64, error -71 [ 88.306030][ T5886] usb usb4-port1: attempt power cycle [ 88.384140][ T9] usb 5-1: clie_3_5_startup: get interface number failed: -32 [ 88.408880][ T9] visor 5-1:0.0: probe with driver visor failed with error -32 [ 88.420051][ T9] usb 5-1: USB disconnect, device number 9 [ 88.775944][ T5886] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 88.811681][ T5886] usb 4-1: device descriptor read/8, error -71 [ 89.840942][ T5886] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 89.952625][ T5886] usb 4-1: device descriptor read/8, error -71 [ 90.141462][ T5886] usb usb4-port1: unable to enumerate USB device [ 90.270987][ T5913] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 91.620718][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 91.620754][ T29] audit: type=1400 audit(1732497859.974:280): avc: denied { write } for pid=6304 comm="syz.2.91" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 91.650333][ T29] audit: type=1400 audit(1732497859.974:281): avc: denied { open } for pid=6304 comm="syz.2.91" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 91.673961][ T29] audit: type=1400 audit(1732497860.654:282): avc: denied { ioctl } for pid=6304 comm="syz.2.91" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x460f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 91.699008][ T29] audit: type=1400 audit(1732497860.654:283): avc: denied { ioctl } for pid=6304 comm="syz.2.91" path="socket:[9483]" dev="sockfs" ino=9483 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 92.211238][ T5913] usb 2-1: Using ep0 maxpacket: 8 [ 92.219244][ T29] audit: type=1400 audit(1732497861.604:284): avc: denied { ioctl } for pid=6317 comm="syz.4.94" path="/dev/input/event0" dev="devtmpfs" ino=918 ioctlcmd=0x45a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 92.224121][ T5913] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 92.266357][ T5913] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 92.388921][ T29] audit: type=1400 audit(1732497861.764:285): avc: denied { bind } for pid=6296 comm="syz.0.89" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 92.391994][ T5913] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 92.417928][ T5913] usb 2-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 92.431473][ T5913] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 92.441081][ T5913] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.449893][ T5886] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 92.469264][ T5913] usbtmc 2-1:16.0: bulk endpoints not found [ 93.513016][ T5886] usb 4-1: Using ep0 maxpacket: 8 [ 93.574008][ T5886] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 93.583285][ T5886] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.588098][ T899] usb 2-1: USB disconnect, device number 3 [ 93.600262][ T5886] usb 4-1: Product: syz [ 93.605908][ T5886] usb 4-1: Manufacturer: syz [ 93.667411][ T5886] usb 4-1: SerialNumber: syz [ 93.698256][ T6324] Illegal XDP return value 154 on prog (id 22) dev N/A, expect packet loss! [ 93.786824][ T5886] usb 4-1: config 0 descriptor?? [ 94.402698][ T5886] usb 4-1: can't set config #0, error -71 [ 94.413112][ T5886] usb 4-1: USB disconnect, device number 8 [ 94.423823][ T6333] netlink: 12 bytes leftover after parsing attributes in process `syz.1.97'. [ 94.518362][ T6338] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 95.071969][ T5913] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 95.103267][ T29] audit: type=1400 audit(1732497864.454:286): avc: denied { create } for pid=6336 comm="syz.3.98" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 95.122683][ C0] vkms_vblank_simulate: vblank timer overrun [ 95.281571][ T5913] usb 5-1: Using ep0 maxpacket: 32 [ 95.322205][ T5913] usb 5-1: config 9 has an invalid interface number: 62 but max is 0 [ 95.444509][ T5913] usb 5-1: config 9 has no interface number 0 [ 95.463320][ T5913] usb 5-1: New USB device found, idVendor=046d, idProduct=08f6, bcdDevice= 2.0d [ 95.464600][ T29] audit: type=1400 audit(1732497864.454:287): avc: denied { write } for pid=6336 comm="syz.3.98" path="socket:[9596]" dev="sockfs" ino=9596 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 95.477113][ T5913] usb 5-1: New USB device strings: Mfr=2, Product=2, SerialNumber=3 [ 95.501813][ T29] audit: type=1400 audit(1732497864.454:288): avc: denied { nlmsg_read } for pid=6336 comm="syz.3.98" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 95.525273][ T29] audit: type=1400 audit(1732497864.844:289): avc: denied { append } for pid=6355 comm="syz.1.102" name="iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 95.527387][ T5913] usb 5-1: Product: syz [ 95.552138][ T5913] usb 5-1: Manufacturer: syz [ 95.556793][ T5913] usb 5-1: SerialNumber: syz [ 95.642479][ T5913] gspca_main: STV06xx-2.14.0 probing 046d:08f6 [ 95.648740][ T5913] gspca_stv06xx: st6422 sensor detected [ 96.114819][ T5913] STV06xx 5-1:9.62: probe with driver STV06xx failed with error -71 [ 96.128549][ T5913] usb 5-1: unknown interface protocol 0x8e, assuming v1 [ 96.136301][ T5913] usb 5-1: cannot find UAC_HEADER [ 96.183851][ T5913] snd-usb-audio 5-1:9.62: probe with driver snd-usb-audio failed with error -22 [ 96.205722][ T5913] usb 5-1: USB disconnect, device number 10 [ 96.240909][ T8] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 96.391918][ T5886] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 96.399957][ T8] usb 1-1: Using ep0 maxpacket: 8 [ 96.407043][ T8] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 96.423606][ T8] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 96.441818][ T8] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 96.461333][ T5834] udevd[5834]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:9.62/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 96.477930][ T8] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 96.489715][ T8] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 96.515866][ T8] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 96.525294][ T8] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 96.537241][ T8] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 96.569854][ T8] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 96.582150][ T8] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 96.615175][ T5886] usb 4-1: Using ep0 maxpacket: 32 [ 96.621683][ T8] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 96.630039][ T8] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 96.643380][ T8] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 96.669370][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 96.669386][ T29] audit: type=1400 audit(1732497866.064:295): avc: denied { write } for pid=6387 comm="syz.1.110" name="event2" dev="devtmpfs" ino=923 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 96.694598][ T5886] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 96.710825][ T8] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 96.753942][ T8] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 96.771122][ T5886] usb 4-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 96.780006][ T29] audit: type=1400 audit(1732497866.174:296): avc: denied { getopt } for pid=6387 comm="syz.1.110" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 96.780315][ T5886] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.831889][ T8] usb 1-1: string descriptor 0 read error: -22 [ 96.838295][ T8] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 96.854205][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.866767][ T5886] usb 4-1: Product: syz [ 96.873509][ T5886] usb 4-1: Manufacturer: syz [ 97.060134][ T5886] usb 4-1: SerialNumber: syz [ 97.089860][ T5886] usb 4-1: config 0 descriptor?? [ 97.095019][ T8] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 97.105440][ T5886] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 97.628346][ T29] audit: type=1400 audit(1732497867.024:297): avc: denied { getopt } for pid=6397 comm="syz.1.112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 98.623066][ T29] audit: type=1400 audit(1732497867.284:298): avc: denied { create } for pid=6402 comm="syz.2.113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 98.642598][ T29] audit: type=1400 audit(1732497867.284:299): avc: denied { setopt } for pid=6402 comm="syz.2.113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 99.350409][ T6409] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 99.540144][ T29] audit: type=1400 audit(1732497867.464:300): avc: denied { bind } for pid=6397 comm="syz.1.112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 99.731488][ T29] audit: type=1400 audit(1732497868.434:301): avc: denied { create } for pid=6402 comm="syz.2.113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 99.814237][ T5886] gspca_sunplus: reg_r err -71 [ 99.827819][ T29] audit: type=1400 audit(1732497868.744:302): avc: denied { mount } for pid=6379 comm="syz.0.107" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 99.876935][ T29] audit: type=1400 audit(1732497869.204:303): avc: denied { create } for pid=6411 comm="syz.2.116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 99.950629][ T6416] 9pnet_fd: Insufficient options for proto=fd [ 100.060291][ T29] audit: type=1400 audit(1732497869.454:304): avc: denied { ioctl } for pid=6420 comm="syz.3.117" path="socket:[9805]" dev="sockfs" ino=9805 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 100.390873][ T967] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 100.520981][ T967] usb 2-1: device descriptor read/64, error -71 [ 100.901218][ T967] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 100.984235][ T8] usb 1-1: USB disconnect, device number 5 [ 101.131063][ T967] usb 2-1: device descriptor read/64, error -71 [ 101.174371][ T5886] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 101.193725][ T5886] usb 4-1: USB disconnect, device number 9 [ 101.241699][ T967] usb usb2-port1: attempt power cycle [ 101.777912][ T5913] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 101.820969][ T967] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 101.859683][ T967] usb 2-1: device descriptor read/8, error -71 [ 102.300751][ T6455] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 102.321254][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 102.321270][ T29] audit: type=1400 audit(1732497871.694:313): avc: denied { write } for pid=6449 comm="syz.2.124" name="map_files" dev="proc" ino=9844 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 102.354997][ T29] audit: type=1400 audit(1732497871.694:314): avc: denied { add_name } for pid=6449 comm="syz.2.124" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 102.375574][ T29] audit: type=1400 audit(1732497871.694:315): avc: denied { create } for pid=6449 comm="syz.2.124" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=file permissive=1 [ 102.396001][ T29] audit: type=1400 audit(1732497871.694:316): avc: denied { associate } for pid=6449 comm="syz.2.124" name="file0" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 102.430908][ T5913] usb 5-1: Using ep0 maxpacket: 8 [ 102.437900][ T5913] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.455062][ T5913] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 102.466424][ T5913] usb 5-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 102.475896][ T5913] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.508904][ T5913] usb 5-1: config 0 descriptor?? [ 102.551042][ T967] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 102.591997][ T967] usb 2-1: device descriptor read/8, error -71 [ 102.712269][ T967] usb usb2-port1: unable to enumerate USB device [ 103.137804][ T5913] hid-picolcd 0003:04D8:F002.0004: unknown main item tag 0x2 [ 103.156903][ T5913] hid-picolcd 0003:04D8:F002.0004: item fetching failed at offset 6/7 [ 103.171316][ T5913] hid-picolcd 0003:04D8:F002.0004: device report parse failed [ 103.178864][ T5913] hid-picolcd 0003:04D8:F002.0004: probe with driver hid-picolcd failed with error -22 [ 103.267200][ T5913] usb 5-1: USB disconnect, device number 11 [ 103.648381][ T6481] usb usb8: usbfs: process 6481 (syz.1.129) did not claim interface 0 before use [ 103.657923][ T6481] FAULT_INJECTION: forcing a failure. [ 103.657923][ T6481] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 103.671429][ T6481] CPU: 1 UID: 0 PID: 6481 Comm: syz.1.129 Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0 [ 103.681679][ T6481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 103.691752][ T6481] Call Trace: [ 103.695033][ T6481] [ 103.697962][ T6481] dump_stack_lvl+0x16c/0x1f0 [ 103.702663][ T6481] should_fail_ex+0x497/0x5b0 [ 103.707354][ T6481] _copy_to_user+0x32/0xd0 [ 103.711786][ T6481] simple_read_from_buffer+0xd0/0x160 [ 103.717170][ T6481] proc_fail_nth_read+0x198/0x270 [ 103.722208][ T6481] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 103.727769][ T6481] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 103.733324][ T6481] vfs_read+0x1df/0xbe0 [ 103.737488][ T6481] ? __fget_files+0x1fc/0x3a0 [ 103.742170][ T6481] ? __pfx___mutex_lock+0x10/0x10 [ 103.747207][ T6481] ? __pfx_vfs_read+0x10/0x10 [ 103.751893][ T6481] ? __fget_files+0x206/0x3a0 [ 103.756580][ T6481] ksys_read+0x12b/0x250 [ 103.760824][ T6481] ? __pfx_ksys_read+0x10/0x10 [ 103.765596][ T6481] do_syscall_64+0xcd/0x250 [ 103.770103][ T6481] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.776008][ T6481] RIP: 0033:0x7f860397d25c [ 103.780421][ T6481] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 103.800051][ T6481] RSP: 002b:00007f86046e0030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 103.808471][ T6481] RAX: ffffffffffffffda RBX: 00007f8603b36160 RCX: 00007f860397d25c [ 103.816446][ T6481] RDX: 000000000000000f RSI: 00007f86046e00a0 RDI: 0000000000000007 [ 103.824418][ T6481] RBP: 00007f86046e0090 R08: 0000000000000000 R09: 0000000000000000 [ 103.832389][ T6481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 103.840393][ T6481] R13: 0000000000000000 R14: 00007f8603b36160 R15: 00007ffc102a6298 [ 103.848382][ T6481] [ 103.970005][ T29] audit: type=1400 audit(1732497873.264:317): avc: denied { rename } for pid=5191 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 104.031813][ T29] audit: type=1400 audit(1732497873.264:318): avc: denied { unlink } for pid=5191 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 104.133375][ T29] audit: type=1400 audit(1732497873.264:319): avc: denied { create } for pid=5191 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 104.194373][ T6489] netlink: 16 bytes leftover after parsing attributes in process `syz.4.134'. [ 104.214908][ T6489] netlink: 16 bytes leftover after parsing attributes in process `syz.4.134'. [ 104.293689][ T29] audit: type=1400 audit(1732497873.694:320): avc: denied { ioctl } for pid=6492 comm="syz.4.135" path="socket:[10883]" dev="sockfs" ino=10883 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 104.300968][ T5913] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 104.336610][ T899] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 104.477333][ T6479] netlink: 4 bytes leftover after parsing attributes in process `syz.3.131'. [ 104.486582][ T6479] netlink: 'syz.3.131': attribute type 1 has an invalid length. [ 104.652423][ T5913] usb 1-1: Using ep0 maxpacket: 16 [ 104.666385][ T5913] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.692525][ T5913] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.719639][ T5913] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 104.757906][ T5913] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 104.815739][ T5913] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.857284][ T5913] usb 1-1: config 0 descriptor?? [ 105.010915][ T899] usb 3-1: Using ep0 maxpacket: 32 [ 105.019770][ T899] usb 3-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 105.029898][ T899] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.040080][ T899] usb 3-1: Product: syz [ 105.045062][ T899] usb 3-1: Manufacturer: syz [ 105.049716][ T899] usb 3-1: SerialNumber: syz [ 105.075429][ T899] usb 3-1: config 0 descriptor?? [ 105.186446][ T29] audit: type=1400 audit(1732497874.554:321): avc: denied { mount } for pid=6496 comm="syz.4.136" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 105.721019][ T967] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 105.734164][ T5913] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 105.748649][ T29] audit: type=1400 audit(1732497875.144:322): avc: denied { unmount } for pid=5846 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 105.751664][ T5913] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 105.787625][ T5913] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 105.795049][ T5913] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 105.803491][ T5913] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 105.810839][ T5913] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 105.818076][ T5913] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 105.825406][ T5913] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 105.832751][ T5913] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 105.839988][ T5913] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 105.859089][ T5913] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0005/input/input6 [ 106.151779][ T5836] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 106.169398][ T5913] microsoft 0003:045E:07DA.0005: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 106.202696][ T967] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.213845][ T967] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 106.223707][ T967] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 106.237818][ T967] usb 4-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 106.249705][ T967] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.286223][ T967] usb 4-1: config 0 descriptor?? [ 106.315603][ T5836] usb 5-1: New USB device found, idVendor=0547, idProduct=0080, bcdDevice=67.51 [ 106.332069][ T5836] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.340421][ T5836] usb 5-1: Product: syz [ 106.351308][ T5836] usb 5-1: Manufacturer: syz [ 106.358797][ T5836] usb 5-1: SerialNumber: syz [ 106.369993][ T5836] usb 5-1: config 0 descriptor?? [ 106.381490][ T5836] usbtest 5-1:0.0: EZ-USB device [ 106.389910][ T5836] usbtest 5-1:0.0: high-speed {control bulk-in bulk-out} tests (+alt) [ 106.586694][ T5913] usb 5-1: USB disconnect, device number 12 [ 106.714799][ T6499] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 106.837467][ T967] gt683r_led 0003:1770:FF00.0006: item fetching failed at offset 1/5 [ 106.846293][ T967] gt683r_led 0003:1770:FF00.0006: hid parsing failed [ 107.051801][ T899] peak_usb 3-1:0.0 can0: unable to request usb[type=2 value=5] err=-71 [ 107.302849][ T967] gt683r_led 0003:1770:FF00.0006: probe with driver gt683r_led failed with error -22 [ 107.314827][ T967] usb 4-1: USB disconnect, device number 10 [ 107.432296][ T899] peak_usb 3-1:0.0: probe with driver peak_usb failed with error -71 [ 107.449188][ T899] usb 3-1: USB disconnect, device number 9 [ 107.521823][ T6525] FAULT_INJECTION: forcing a failure. [ 107.521823][ T6525] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 107.544215][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 107.544230][ T29] audit: type=1326 audit(1732497876.944:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6528 comm="syz.0.145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f628a37e819 code=0x7ffc0000 [ 107.574468][ T6525] CPU: 0 UID: 0 PID: 6525 Comm: syz.1.143 Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0 [ 107.584745][ T6525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 107.594818][ T6525] Call Trace: [ 107.595349][ T29] audit: type=1326 audit(1732497876.974:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6528 comm="syz.0.145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f628a37e819 code=0x7ffc0000 [ 107.598086][ T6525] [ 107.598115][ T6525] dump_stack_lvl+0x16c/0x1f0 [ 107.622595][ T29] audit: type=1326 audit(1732497876.974:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6528 comm="syz.0.145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f628a37d1b0 code=0x7ffc0000 [ 107.624172][ T6525] should_fail_ex+0x497/0x5b0 [ 107.624204][ T6525] _copy_to_user+0x32/0xd0 [ 107.628916][ T29] audit: type=1326 audit(1732497876.974:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6528 comm="syz.0.145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f628a37d1b0 code=0x7ffc0000 [ 107.651992][ T6525] simple_read_from_buffer+0xd0/0x160 [ 107.652025][ T6525] proc_fail_nth_read+0x198/0x270 [ 107.652050][ T6525] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 107.652078][ T6525] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 107.652102][ T6525] vfs_read+0x1df/0xbe0 [ 107.652122][ T6525] ? __fget_files+0x1fc/0x3a0 [ 107.652140][ T6525] ? __pfx___mutex_lock+0x10/0x10 [ 107.652166][ T6525] ? __pfx_vfs_read+0x10/0x10 [ 107.652190][ T6525] ? __fget_files+0x206/0x3a0 [ 107.652217][ T6525] ksys_read+0x12b/0x250 [ 107.675086][ T29] audit: type=1326 audit(1732497876.974:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6528 comm="syz.0.145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f628a37e819 code=0x7ffc0000 [ 107.684420][ T6525] ? __pfx_ksys_read+0x10/0x10 [ 107.684457][ T6525] do_syscall_64+0xcd/0x250 [ 107.684478][ T6525] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.684506][ T6525] RIP: 0033:0x7f860397d25c [ 107.684523][ T6525] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 107.684539][ T6525] RSP: 002b:00007f86046f4030 EFLAGS: 00000246 [ 107.690983][ T29] audit: type=1326 audit(1732497876.974:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6528 comm="syz.0.145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7f628a37e819 code=0x7ffc0000 [ 107.694880][ T6525] ORIG_RAX: 0000000000000000 [ 107.694890][ T6525] RAX: ffffffffffffffda RBX: 00007f8603b36080 RCX: 00007f860397d25c [ 107.694904][ T6525] RDX: 000000000000000f RSI: 00007f86046f40a0 RDI: 0000000000000005 [ 107.700528][ T29] audit: type=1326 audit(1732497876.974:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6528 comm="syz.0.145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f628a37e819 code=0x7ffc0000 [ 107.705942][ T6525] RBP: 00007f86046f4090 R08: 0000000000000000 R09: 0000000000000000 [ 107.705955][ T6525] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 107.705966][ T6525] R13: 0000000000000001 R14: 00007f8603b36080 R15: 00007ffc102a6298 [ 107.705990][ T6525] [ 107.899106][ T29] audit: type=1326 audit(1732497876.974:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6528 comm="syz.0.145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f628a37e819 code=0x7ffc0000 [ 107.922501][ T29] audit: type=1326 audit(1732497876.974:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6528 comm="syz.0.145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f628a37e819 code=0x7ffc0000 [ 107.946334][ T29] audit: type=1326 audit(1732497876.974:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6528 comm="syz.0.145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f628a37e819 code=0x7ffc0000 [ 108.369708][ T6557] netlink: 'syz.3.153': attribute type 21 has an invalid length. [ 108.461901][ T5882] usb 1-1: reset high-speed USB device number 6 using dummy_hcd [ 108.618184][ T6562] usb usb8: usbfs: process 6562 (syz.4.152) did not claim interface 0 before use [ 109.100886][ T5882] usb 1-1: device descriptor read/64, error -71 [ 109.197317][ T6566] netlink: 12 bytes leftover after parsing attributes in process `syz.3.155'. [ 109.248216][ T6569] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.271059][ T6569] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.370999][ T5882] usb 1-1: reset high-speed USB device number 6 using dummy_hcd [ 109.452843][ T5836] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 109.521245][ T5882] usb 1-1: device descriptor read/64, error -71 [ 109.622659][ T5836] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 109.664615][ T5836] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 109.719362][ T5836] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 109.753068][ T6578] process 'syz.4.158' launched './file0' with NULL argv: empty string added [ 109.756807][ T5836] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 109.772957][ T5836] usb 4-1: SerialNumber: syz [ 109.794094][ T5882] usb 1-1: reset high-speed USB device number 6 using dummy_hcd [ 110.434533][ T5882] usb 1-1: device descriptor read/8, error -71 [ 110.699472][ T5836] usb 4-1: invalid UAC_HEADER (v1) [ 110.764569][ T5882] usb 1-1: reset high-speed USB device number 6 using dummy_hcd [ 110.839551][ T5882] usb 1-1: device descriptor read/8, error -71 [ 110.975313][ T46] usb 1-1: USB disconnect, device number 6 [ 110.983126][ T5836] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 110.997972][ T5836] usb 4-1: USB disconnect, device number 11 [ 111.091181][ T6594] usb usb8: usbfs: process 6594 (syz.2.160) did not claim interface 0 before use [ 112.291013][ T6611] vivid-006: disconnect [ 112.314173][ T25] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 112.516330][ T6597] vivid-006: reconnect [ 112.663531][ T5834] udevd[5834]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 113.500846][ T25] usb 3-1: device descriptor read/64, error -71 [ 113.755673][ T6620] kvm: pic: non byte write [ 113.780724][ T6620] kvm: pic: non byte write [ 113.798248][ T6620] kvm: pic: non byte write [ 113.812723][ T6620] kvm: pic: non byte write [ 113.829288][ T6620] kvm: pic: non byte write [ 113.847068][ T6620] kvm: pic: non byte write [ 113.866809][ T6620] kvm: pic: non byte write [ 113.880979][ T6620] kvm: pic: non byte write [ 113.897253][ T6620] kvm: pic: non byte write [ 113.924566][ T6620] kvm: pic: non byte write [ 114.731041][ T5913] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 114.821121][ T25] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 115.041383][ T46] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 115.157424][ T6657] netlink: 24 bytes leftover after parsing attributes in process `syz.3.179'. [ 115.201430][ T5913] usb 5-1: device descriptor read/64, error -71 [ 115.209022][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 115.209036][ T29] audit: type=1400 audit(1732497884.604:343): avc: denied { create } for pid=6655 comm="syz.3.179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 115.221533][ T46] usb 1-1: device descriptor read/64, error -71 [ 115.245553][ T29] audit: type=1400 audit(1732497884.604:344): avc: denied { setopt } for pid=6655 comm="syz.3.179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 115.360999][ T5836] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 115.441265][ T5913] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 115.511984][ T46] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 115.527544][ T29] audit: type=1400 audit(1732497884.924:345): avc: denied { name_bind } for pid=6659 comm="syz.3.180" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 115.551297][ T5836] usb 2-1: Using ep0 maxpacket: 8 [ 115.558311][ T5836] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.572944][ T5836] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.582850][ T5913] usb 5-1: device descriptor read/64, error -71 [ 115.587611][ T5836] usb 2-1: New USB device found, idVendor=09da, idProduct=0006, bcdDevice= 0.00 [ 115.607326][ T5836] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.616858][ T29] audit: type=1400 audit(1732497885.014:346): avc: denied { search } for pid=5191 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 115.661470][ T46] usb 1-1: device descriptor read/64, error -71 [ 115.674758][ T5836] usb 2-1: config 0 descriptor?? [ 115.781169][ T46] usb usb1-port1: attempt power cycle [ 115.781321][ T5913] usb usb5-port1: attempt power cycle [ 116.133612][ T5913] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 116.150202][ T46] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 116.172707][ T5913] usb 5-1: device descriptor read/8, error -71 [ 116.215370][ T6664] capability: warning: `syz.1.178' uses 32-bit capabilities (legacy support in use) [ 116.232193][ T46] usb 1-1: device descriptor read/8, error -71 [ 116.410924][ T5913] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 116.451399][ T5913] usb 5-1: device descriptor read/8, error -71 [ 116.487896][ T5836] usbhid 2-1:0.0: can't add hid device: -71 [ 116.499413][ T46] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 116.507162][ T29] audit: type=1400 audit(1732497885.894:347): avc: denied { write } for pid=6667 comm="syz.3.181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 116.536145][ T5836] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 116.556063][ T5836] usb 2-1: USB disconnect, device number 8 [ 116.569588][ T46] usb 1-1: device descriptor read/8, error -71 [ 116.581535][ T5913] usb usb5-port1: unable to enumerate USB device [ 116.642955][ T29] audit: type=1400 audit(1732497886.044:349): avc: denied { bind } for pid=6669 comm="syz.1.182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 116.701205][ T46] usb usb1-port1: unable to enumerate USB device [ 116.720188][ T29] audit: type=1400 audit(1732497886.044:348): avc: denied { bind } for pid=6669 comm="syz.1.182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 116.760150][ T6673] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.811556][ T6673] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.021750][ T6676] usb usb8: usbfs: process 6676 (syz.3.183) did not claim interface 0 before use [ 117.035949][ T29] audit: type=1400 audit(1732497886.434:350): avc: denied { create } for pid=6669 comm="syz.1.182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 118.027655][ T6697] usb usb8: usbfs: process 6697 (syz.0.185) did not claim interface 0 before use [ 118.835931][ T6706] bridge1: entered allmulticast mode [ 118.853698][ T6706] netlink: 'syz.0.193': attribute type 1 has an invalid length. [ 119.364909][ T9] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 119.426454][ T29] audit: type=1400 audit(1732497888.824:351): avc: denied { ioctl } for pid=6707 comm="syz.2.194" path="/dev/rtc0" dev="devtmpfs" ino=921 ioctlcmd=0x7014 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 119.431076][ T5913] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 119.520999][ T5882] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 119.540877][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 119.547534][ T9] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 119.577497][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 119.593596][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 119.605679][ T9] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 119.619447][ T9] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 119.629109][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.637327][ T5913] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 119.647060][ T5913] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.660124][ T5913] usb 5-1: config 0 descriptor?? [ 119.665193][ T967] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 119.675615][ T5882] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 119.686689][ T5882] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 119.700293][ T5882] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 119.709615][ T5882] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 119.718093][ T5882] usb 4-1: Product: syz [ 119.722341][ T5882] usb 4-1: Manufacturer: syz [ 119.744256][ T5882] hub 4-1:4.0: USB hub found [ 119.820883][ T967] usb 3-1: Using ep0 maxpacket: 16 [ 119.827615][ T967] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 119.839556][ T967] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 119.851204][ T967] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 119.862636][ T9] usb 2-1: usb_control_msg returned -71 [ 119.868225][ T9] usbtmc 2-1:16.0: can't read capabilities [ 119.870916][ T5836] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 119.886607][ T967] usb 3-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 119.898733][ T9] usb 2-1: USB disconnect, device number 9 [ 119.904728][ T967] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.922560][ T967] usb 3-1: Product: syz [ 119.927422][ T967] usb 3-1: Manufacturer: syz [ 119.933197][ T967] usb 3-1: SerialNumber: syz [ 119.942432][ T967] usb 3-1: config 0 descriptor?? [ 119.948925][ T6708] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 119.956356][ T5882] hub 4-1:4.0: config failed, hub doesn't have any ports! (err -19) [ 119.965061][ T967] hub 3-1:0.0: bad descriptor, ignoring hub [ 119.972254][ T967] hub 3-1:0.0: probe with driver hub failed with error -5 [ 119.996819][ T967] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input7 [ 120.064456][ T5836] usb 1-1: Using ep0 maxpacket: 8 [ 120.074183][ T5836] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 120.085498][ T5836] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 120.095396][ T5836] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.160135][ T29] audit: type=1400 audit(1732497890.554:352): avc: denied { map } for pid=6694 comm="syz.4.190" path="/proc/133/pagemap" dev="proc" ino=11580 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 121.184228][ T29] audit: type=1400 audit(1732497890.554:353): avc: denied { execute } for pid=6694 comm="syz.4.190" path="/proc/133/pagemap" dev="proc" ino=11580 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 121.207038][ C0] vkms_vblank_simulate: vblank timer overrun [ 121.215650][ T5913] usb 5-1: Cannot set autoneg [ 121.223126][ T5194] usb 3-1: reset high-speed USB device number 12 using dummy_hcd [ 121.223373][ T5913] MOSCHIP usb-ethernet driver 5-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 121.249732][ T5194] usb 3-1: device reset changed ep0 maxpacket size! [ 121.256629][ T5913] usb 5-1: USB disconnect, device number 17 [ 121.263014][ T967] usb 3-1: USB disconnect, device number 12 [ 121.490982][ T967] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 121.640953][ T967] usb 3-1: Using ep0 maxpacket: 8 [ 121.660474][ T967] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 121.670695][ T967] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.680497][ T967] usb 3-1: Product: syz [ 121.685070][ T967] usb 3-1: Manufacturer: syz [ 121.689829][ T967] usb 3-1: SerialNumber: syz [ 121.699647][ T967] usb 3-1: config 0 descriptor?? [ 121.851252][ T5913] usb 4-1: USB disconnect, device number 12 [ 121.960959][ T29] audit: type=1400 audit(1732497891.354:354): avc: denied { write } for pid=6717 comm="syz.2.197" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 122.001980][ T967] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 122.295757][ T5913] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 122.431165][ T5913] usb 5-1: device descriptor read/64, error -71 [ 122.738018][ T6738] netlink: 16 bytes leftover after parsing attributes in process `syz.1.204'. [ 122.747063][ T6738] netlink: 16 bytes leftover after parsing attributes in process `syz.1.204'. [ 123.175468][ T25] usb 1-1: USB disconnect, device number 11 [ 123.213501][ T5836] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 123.299099][ T29] audit: type=1400 audit(1732497892.694:355): avc: denied { listen } for pid=6741 comm="syz.3.205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 123.311640][ T5913] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 123.364229][ T29] audit: type=1400 audit(1732497892.764:356): avc: denied { accept } for pid=6741 comm="syz.3.205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 123.421091][ T5836] usb 2-1: Using ep0 maxpacket: 16 [ 123.427742][ T5836] usb 2-1: config 0 has no interfaces? [ 123.435140][ T5836] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 123.444927][ T5836] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.453159][ T5836] usb 2-1: Product: syz [ 123.457740][ T5836] usb 2-1: Manufacturer: syz [ 123.461138][ T5913] usb 5-1: device descriptor read/64, error -71 [ 123.463244][ T5836] usb 2-1: SerialNumber: syz [ 123.481462][ T5836] usb 2-1: config 0 descriptor?? [ 123.581210][ T5913] usb usb5-port1: attempt power cycle [ 123.670927][ T25] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 123.681638][ T6719] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.692273][ T6719] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.764359][ T967] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 123.777665][ T967] usb 3-1: USB disconnect, device number 13 [ 123.840914][ T25] usb 1-1: Using ep0 maxpacket: 8 [ 123.850015][ T25] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 123.867034][ T25] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 123.876875][ T25] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 123.886986][ T25] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 123.900265][ T25] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 123.909431][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.922340][ T5913] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 123.951781][ T5913] usb 5-1: device descriptor read/8, error -71 [ 124.124066][ T25] usb 1-1: usb_control_msg returned -32 [ 124.125386][ T6749] vivid-002: disconnect [ 124.129659][ T25] usbtmc 1-1:16.0: can't read capabilities [ 124.147694][ T25] usb 1-1: USB disconnect, device number 12 [ 124.165615][ T6750] vivid-002: reconnect [ 124.191004][ T5913] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 124.225734][ T5913] usb 5-1: device descriptor read/8, error -71 [ 124.361154][ T5913] usb usb5-port1: unable to enumerate USB device [ 124.980221][ T29] audit: type=1400 audit(1732497894.374:357): avc: denied { read } for pid=6766 comm="syz.0.210" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 125.002513][ T29] audit: type=1400 audit(1732497894.374:358): avc: denied { open } for pid=6766 comm="syz.0.210" path="/39/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 125.051421][ T6767] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 125.101558][ T29] audit: type=1400 audit(1732497894.414:359): avc: denied { mounton } for pid=6766 comm="syz.0.210" path="/39/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 125.123908][ C0] vkms_vblank_simulate: vblank timer overrun [ 125.289542][ T29] audit: type=1400 audit(1732497894.684:360): avc: denied { map } for pid=6772 comm="syz.2.215" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 125.319866][ T6773] Trying to write to read-only block-device nullb0 [ 125.330384][ T29] audit: type=1400 audit(1732497894.684:361): avc: denied { execute } for pid=6772 comm="syz.2.215" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 125.366493][ T6773] netlink: 8 bytes leftover after parsing attributes in process `syz.2.215'. [ 125.503050][ T5882] usb 2-1: USB disconnect, device number 10 [ 125.562456][ T9] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 125.570148][ T5913] usb 5-1: new full-speed USB device number 22 using dummy_hcd [ 125.725268][ T5913] usb 5-1: unable to get BOS descriptor or descriptor too short [ 125.733750][ T9] usb 1-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 125.744957][ T9] usb 1-1: config 253 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 125.756548][ T9] usb 1-1: config 253 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 1032, setting to 64 [ 125.768077][ T5913] usb 5-1: not running at top speed; connect to a high speed hub [ 125.777038][ T9] usb 1-1: config 253 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 125.792259][ T5913] usb 5-1: config 129 has an invalid interface number: 135 but max is 0 [ 125.800639][ T5913] usb 5-1: config 129 has an invalid interface number: 5 but max is 0 [ 125.812021][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 125.821157][ T5886] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 125.828805][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 125.837013][ T5913] usb 5-1: config 129 descriptor has 1 excess byte, ignoring [ 125.845169][ T9] usb 1-1: SerialNumber: syz [ 125.850229][ T5913] usb 5-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 125.860493][ T5913] usb 5-1: config 129 has no interface number 0 [ 125.867169][ T5913] usb 5-1: config 129 has no interface number 1 [ 125.867330][ T6776] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 125.873555][ T5913] usb 5-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 125.898013][ T5913] usb 5-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 125.909500][ T5882] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 125.918937][ T5913] usb 5-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 125.932855][ T5913] usb 5-1: config 129 interface 135 has no altsetting 0 [ 125.940138][ T5913] usb 5-1: config 129 interface 5 has no altsetting 0 [ 125.949629][ T5913] usb 5-1: string descriptor 0 read error: -22 [ 125.956010][ T5913] usb 5-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.62 [ 125.965324][ T5913] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.980293][ T5913] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 125.987504][ T5913] usb 5-1: MIDIStreaming interface descriptor not found [ 125.994583][ T5886] usb 3-1: Using ep0 maxpacket: 8 [ 126.003572][ T5886] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 126.016873][ T5886] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 126.032855][ T5886] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.087934][ T5882] usb 2-1: config 9 has an invalid interface number: 75 but max is 0 [ 126.099592][ T5882] usb 2-1: config 9 has no interface number 0 [ 126.111644][ T9] rndis_host 1-1:253.0: RNDIS init failed, -71 [ 126.119102][ T9] rndis_host 1-1:253.0: probe with driver rndis_host failed with error -71 [ 126.128331][ T5882] usb 2-1: config 9 interface 75 altsetting 2 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 126.149279][ T9] usb 1-1: USB disconnect, device number 13 [ 126.158743][ T5882] usb 2-1: config 9 interface 75 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 126.179999][ T5882] usb 2-1: config 9 interface 75 altsetting 2 endpoint 0xC has invalid wMaxPacketSize 0 [ 126.196618][ T5882] usb 2-1: config 9 interface 75 altsetting 2 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 126.207100][ T5836] usb 5-1: USB disconnect, device number 22 [ 126.209079][ T6788] overlayfs: failed to resolve './file1': -2 [ 126.236865][ T5882] usb 2-1: config 9 interface 75 altsetting 2 bulk endpoint 0x5 has invalid maxpacket 16 [ 126.251626][ T5882] usb 2-1: config 9 interface 75 has no altsetting 0 [ 126.265191][ T5882] usb 2-1: New USB device found, idVendor=1608, idProduct=0201, bcdDevice=91.07 [ 126.274648][ T5882] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.283042][ T5882] usb 2-1: Product: 狆⦾圎꘮铬⻒쏡紐ὰ쟳ꎵ᛹莰伺錹✄ꊃ [ 126.299049][ T5882] usb 2-1: Manufacturer: ᐄ [ 126.304707][ T5882] usb 2-1: SerialNumber: ࠊ [ 126.333532][ T6784] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 126.472298][ T6791] overlayfs: failed to resolve './file1': -2 [ 126.721372][ T5882] io_ti 2-1:9.75: required endpoints missing [ 126.733127][ T5882] usb 2-1: USB disconnect, device number 11 [ 126.753608][ T6789] udevd[6789]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:129.5/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 126.905903][ T6798] x_tables: ip_tables: osf match: only valid for protocol 6 [ 128.988199][ T9] usb 3-1: USB disconnect, device number 14 [ 129.442813][ T967] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 129.552317][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 129.552333][ T29] audit: type=1400 audit(1732497898.944:363): avc: denied { read } for pid=6823 comm="syz.1.226" name="usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 129.583340][ T29] audit: type=1400 audit(1732497898.944:364): avc: denied { open } for pid=6823 comm="syz.1.226" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 129.600983][ T967] usb 5-1: Using ep0 maxpacket: 8 [ 129.617167][ T967] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 129.627722][ T967] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 129.878807][ T967] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 129.891739][ T967] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 129.906494][ T967] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 129.915840][ T967] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.141029][ T967] usb 5-1: GET_CAPABILITIES returned 8 [ 130.150071][ T967] usbtmc 5-1:16.0: can't read capabilities [ 131.969556][ T6844] 9pnet_virtio: no channels available for device [ 132.187400][ T6848] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 132.225136][ T6848] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 132.621288][ T6854] netlink: 165 bytes leftover after parsing attributes in process `syz.3.234'. [ 132.841322][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.847754][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.061358][ T5882] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 133.191081][ T25] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 133.261302][ T5882] usb 3-1: Using ep0 maxpacket: 16 [ 133.289214][ T5882] usb 3-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 133.300624][ T5882] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.311101][ T5882] usb 3-1: Product: syz [ 133.320188][ T5882] usb 3-1: Manufacturer: syz [ 133.325783][ T5882] usb 3-1: SerialNumber: syz [ 133.335172][ T5882] usb 3-1: config 0 descriptor?? [ 133.342885][ T5882] ssu100 3-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 133.362365][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.373719][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 133.383624][ T25] usb 4-1: New USB device found, idVendor=0458, idProduct=0153, bcdDevice= 0.00 [ 133.393546][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.403627][ T25] usb 4-1: config 0 descriptor?? [ 133.550899][ T967] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 133.701032][ T967] usb 2-1: Using ep0 maxpacket: 8 [ 133.707620][ T967] usb 2-1: config 16 has an invalid interface number: 54 but max is 0 [ 133.716520][ T967] usb 2-1: config 16 has no interface number 0 [ 133.722798][ T967] usb 2-1: config 16 interface 54 has no altsetting 0 [ 133.729660][ T967] usb 2-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice=86.ce [ 133.738784][ T967] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.755605][ T967] pxrc 2-1:16.54: Could not find endpoint [ 133.812109][ T29] audit: type=1400 audit(1732497903.204:365): avc: denied { connect } for pid=6853 comm="syz.3.234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 133.833083][ T29] audit: type=1400 audit(1732497903.204:366): avc: denied { connect } for pid=6853 comm="syz.3.234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 133.855803][ T6854] bond0: entered promiscuous mode [ 133.866382][ T6854] bond_slave_0: entered promiscuous mode [ 133.872576][ T6854] bond_slave_1: entered promiscuous mode [ 133.923885][ T25] usbhid 4-1:0.0: can't add hid device: -71 [ 133.930564][ T25] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 133.946475][ T25] usb 4-1: USB disconnect, device number 13 [ 133.985639][ T6863] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.000756][ T6863] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.471113][ T25] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 134.487640][ T5882] ssu100 3-1:0.0: probe with driver ssu100 failed with error -110 [ 134.652517][ T25] usb 4-1: Using ep0 maxpacket: 8 [ 134.689190][ T5882] usb 3-1: USB disconnect, device number 15 [ 134.696456][ T25] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 134.748740][ T25] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 134.808264][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.216565][ T6881] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 135.371070][ T6806] usbtmc 5-1:16.0: usbtmc_ioctl_request failed -110 [ 135.751524][ T6882] vivid-000: disconnect [ 135.965682][ T6886] usbtmc 5-1:16.0: usbtmc_ioctl_request failed -32 [ 136.066050][ T967] usb 5-1: USB disconnect, device number 23 [ 136.641399][ T29] audit: type=1400 audit(1732497905.774:367): avc: denied { map } for pid=6889 comm="syz.4.242" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 136.820972][ T29] audit: type=1400 audit(1732497905.814:368): avc: denied { nlmsg_write } for pid=6890 comm="syz.2.243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 136.841476][ C0] vkms_vblank_simulate: vblank timer overrun [ 136.904207][ T6878] vivid-000: reconnect [ 136.923622][ T5882] usb 2-1: USB disconnect, device number 12 [ 137.142350][ T29] audit: type=1400 audit(1732497906.544:369): avc: denied { module_load } for pid=6903 comm="syz.4.247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 137.162101][ T6906] Invalid ELF header type: 2 != 1 [ 137.187636][ T6907] Invalid ELF header type: 2 != 1 [ 137.221313][ T25] usb 4-1: USB disconnect, device number 14 [ 137.361003][ T29] audit: type=1400 audit(1732497906.764:370): avc: denied { watch watch_reads } for pid=6908 comm="syz.0.248" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=1072 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 137.411797][ T6917] mmap: syz.0.248 (6917) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 138.181425][ T6932] netlink: 80 bytes leftover after parsing attributes in process `syz.0.254'. [ 138.310957][ T5836] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 138.368195][ T29] audit: type=1400 audit(1732497908.766:371): avc: denied { getopt } for pid=6931 comm="syz.0.254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 138.492404][ T5836] usb 2-1: Using ep0 maxpacket: 8 [ 138.503129][ T5836] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 138.535451][ T5836] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 138.720325][ T5836] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 138.730876][ T5836] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 138.744022][ T5836] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 138.753477][ T5836] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.927695][ T29] audit: type=1400 audit(1732497909.276:372): avc: denied { ioctl } for pid=6940 comm="syz.3.257" path="socket:[12731]" dev="sockfs" ino=12731 ioctlcmd=0x8941 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 139.121444][ T5836] usb 2-1: GET_CAPABILITIES returned 8 [ 139.132141][ T5836] usbtmc 2-1:16.0: can't read capabilities [ 139.338509][ T5836] usb 2-1: USB disconnect, device number 13 [ 140.032018][ T967] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 140.210887][ T29] audit: type=1400 audit(1732497910.586:373): avc: denied { write } for pid=6966 comm="syz.3.265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 140.690838][ T967] usb 3-1: Using ep0 maxpacket: 16 [ 140.704771][ T967] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.730874][ T967] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 140.740694][ T967] usb 3-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 140.761807][ T967] usb 3-1: config 0 interface 0 has no altsetting 0 [ 140.768467][ T967] usb 3-1: New USB device found, idVendor=056a, idProduct=002a, bcdDevice= 0.00 [ 140.777653][ T967] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.811648][ T967] usb 3-1: config 0 descriptor?? [ 141.080885][ T5836] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 141.481809][ T967] wacom 0003:056A:002A.0007: Unknown device_type for 'HID 056a:002a'. Assuming pen. [ 141.496733][ T967] wacom 0003:056A:002A.0007: hidraw0: USB HID v0.00 Device [HID 056a:002a] on usb-dummy_hcd.2-1/input0 [ 141.510548][ T967] input: Wacom Intuos5 M Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:002A.0007/input/input8 [ 141.516409][ T5836] usb 2-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 141.532012][ T5836] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.552092][ T5836] usb 2-1: config 0 descriptor?? [ 141.566488][ T5836] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 141.684147][ T5885] usb 3-1: USB disconnect, device number 16 [ 141.792242][ T29] audit: type=1400 audit(1732497912.176:374): avc: denied { getopt } for pid=6975 comm="syz.1.267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 142.274427][ T5836] gp8psk: usb in 138 operation failed. [ 142.310896][ T5836] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 142.355879][ T5836] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 142.389287][ T5836] usb 2-1: media controller created [ 142.463930][ T29] audit: type=1400 audit(1732497912.866:375): avc: denied { mounton } for pid=6983 comm="syz.3.269" path="/proc/216/task" dev="proc" ino=12854 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 142.585739][ T5836] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 142.612657][ T5836] gp8psk_fe: Frontend attached [ 142.621491][ T5836] usb 2-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 142.632220][ T5836] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 142.682382][ T5836] gp8psk: usb in 138 operation failed. [ 142.687896][ T5836] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 142.689601][ T29] audit: type=1400 audit(1732497913.086:376): avc: denied { setopt } for pid=6983 comm="syz.3.269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 142.710818][ T5836] gp8psk: found Genpix USB device pID = 203 (hex) [ 142.753496][ T29] audit: type=1400 audit(1732497913.086:377): avc: denied { read } for pid=6983 comm="syz.3.269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 142.781011][ T5836] usb 2-1: USB disconnect, device number 14 [ 142.916088][ T5836] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 143.517647][ T7001] bond0: entered promiscuous mode [ 143.523813][ T7001] bond_slave_0: entered promiscuous mode [ 143.532224][ T7001] bond_slave_1: entered promiscuous mode [ 143.774642][ T5882] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 143.800877][ T967] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 143.931849][ T5882] usb 3-1: Using ep0 maxpacket: 8 [ 143.951861][ T5882] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 143.961931][ T967] usb 5-1: Using ep0 maxpacket: 16 [ 143.979566][ T967] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 144.010977][ T5886] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 144.018822][ T5882] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 144.028911][ T967] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 144.043652][ T5882] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 144.063843][ T967] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 144.080813][ T5882] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 144.104112][ T967] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 144.120847][ T5882] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 144.140104][ T967] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.148232][ T5882] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.277025][ T967] usb 5-1: config 0 descriptor?? [ 144.284446][ T7001] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 144.442853][ T5886] usb 4-1: config 4 has an invalid interface number: 231 but max is 0 [ 144.498733][ T5882] usb 3-1: GET_CAPABILITIES returned 8 [ 144.504741][ T5882] usbtmc 3-1:16.0: can't read capabilities [ 144.720916][ T967] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 144.729907][ T967] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 144.741093][ T5886] usb 4-1: config 4 has no interface number 0 [ 144.748668][ T5886] usb 4-1: config 4 interface 231 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 25 [ 144.774351][ T967] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 144.787111][ T5882] usb 3-1: USB disconnect, device number 17 [ 144.795553][ T29] audit: type=1400 audit(1732497915.186:378): avc: denied { ioctl } for pid=7020 comm="syz.1.281" path="socket:[12199]" dev="sockfs" ino=12199 ioctlcmd=0x8b32 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 144.825427][ T7025] vivid-000: disconnect [ 144.835145][ T967] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 144.974288][ T5886] usb 4-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 145.215410][ T967] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 145.234907][ T5886] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.246772][ T967] microsoft 0003:045E:07DA.0008: unknown main item tag 0x2 [ 145.248329][ T7018] vivid-000: reconnect [ 145.259944][ T967] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 145.267852][ T5886] usb 4-1: Product: syz [ 145.272639][ T5886] usb 4-1: Manufacturer: syz [ 145.277267][ T5886] usb 4-1: SerialNumber: syz [ 145.281948][ T967] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 145.289217][ T967] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 145.297382][ T967] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 145.304720][ T967] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 145.312052][ T967] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 145.319285][ T967] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 145.326682][ T967] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 145.333991][ T967] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 145.341277][ T967] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 145.348498][ T967] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 145.355776][ T967] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 145.366273][ T967] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 145.374273][ T967] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 145.382161][ T967] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 145.389434][ T967] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 145.396755][ T967] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 145.404047][ T967] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 145.411364][ T967] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 145.420261][ T967] microsoft 0003:045E:07DA.0008: No inputs registered, leaving [ 145.435345][ T5886] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 145.450407][ T967] microsoft 0003:045E:07DA.0008: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 145.462208][ T967] microsoft 0003:045E:07DA.0008: no inputs found [ 145.468618][ T967] microsoft 0003:045E:07DA.0008: could not initialize ff, continuing anyway [ 145.520173][ T967] usb 5-1: USB disconnect, device number 24 [ 145.746693][ T7032] NILFS (loop0): device size too small [ 145.782430][ T29] audit: type=1400 audit(1732497916.166:379): avc: denied { ioctl } for pid=7005 comm="syz.3.275" path="socket:[12937]" dev="sockfs" ino=12937 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 145.883790][ T29] audit: type=1400 audit(1732497916.276:380): avc: denied { mount } for pid=7036 comm="syz.2.285" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 145.935033][ T29] audit: type=1400 audit(1732497916.336:381): avc: denied { unmount } for pid=5831 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 146.123392][ T967] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 146.140932][ T46] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 146.194514][ T5886] vp7045: USB control message 'out' went wrong. [ 146.201424][ T5886] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 146.217481][ T5886] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 146.229469][ T5886] usb 4-1: USB disconnect, device number 15 [ 146.292810][ T967] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 146.308852][ T967] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 146.319347][ T967] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 146.334063][ T967] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.349217][ T967] usb 5-1: config 0 descriptor?? [ 146.354445][ T5913] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 146.410923][ T46] usb 2-1: Using ep0 maxpacket: 8 [ 146.418967][ T46] usb 2-1: New USB device found, idVendor=046d, idProduct=0896, bcdDevice=3a.11 [ 146.428087][ T46] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.436129][ T46] usb 2-1: Product: syz [ 146.440274][ T46] usb 2-1: Manufacturer: syz [ 146.444937][ T46] usb 2-1: SerialNumber: syz [ 146.471747][ T46] usb 2-1: config 0 descriptor?? [ 146.575776][ T46] gspca_main: vc032x-2.14.0 probing 046d:0896 [ 146.980924][ T5913] usb 3-1: Using ep0 maxpacket: 8 [ 146.981849][ T7042] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 146.992132][ T5913] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 147.034591][ T5913] usb 3-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 147.067446][ T5913] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 147.083852][ T5913] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.117267][ T5913] usbtmc 3-1:16.0: bulk endpoints not found [ 147.187751][ T967] pyra 0003:1E7D:2CF6.0009: unbalanced collection at end of report description [ 147.198345][ T967] pyra 0003:1E7D:2CF6.0009: parse failed [ 147.204551][ T967] pyra 0003:1E7D:2CF6.0009: probe with driver pyra failed with error -22 [ 147.406990][ T5885] usb 5-1: USB disconnect, device number 25 [ 147.470988][ T967] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 147.623298][ T967] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.634318][ T967] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 147.644244][ T967] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 147.657102][ T967] usb 4-1: New USB device found, idVendor=17ef, idProduct=60b5, bcdDevice= 0.00 [ 147.666177][ T967] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.676141][ T967] usb 4-1: config 0 descriptor?? [ 148.138991][ T967] hid (null): unknown global tag 0xc [ 148.147354][ T967] lenovo 0003:17EF:60B5.000A: unknown global tag 0xc [ 148.154153][ T967] lenovo 0003:17EF:60B5.000A: item 0 1 1 12 parsing failed [ 148.161918][ T967] lenovo 0003:17EF:60B5.000A: hid_parse failed [ 148.168140][ T967] lenovo 0003:17EF:60B5.000A: probe with driver lenovo failed with error -22 [ 148.392936][ T7085] vivid-008: disconnect [ 148.394026][ T46] gspca_vc032x: reg_w err -71 [ 148.402284][ T46] vc032x 2-1:0.0: probe with driver vc032x failed with error -71 [ 148.705015][ T46] usb 2-1: USB disconnect, device number 15 [ 148.764402][ T7083] vivid-008: reconnect [ 148.785596][ T5885] usb 4-1: USB disconnect, device number 16 [ 149.081294][ T7095] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 149.171078][ T46] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 149.221349][ T5885] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 149.378928][ T46] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 149.393965][ T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.409110][ T967] usb 3-1: USB disconnect, device number 18 [ 149.433565][ T46] usb 1-1: config 0 descriptor?? [ 149.460840][ T5885] usb 4-1: Using ep0 maxpacket: 16 [ 149.490917][ T5885] usb 4-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 149.500018][ T5885] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.521022][ T5885] usb 4-1: Product: syz [ 149.525260][ T5885] usb 4-1: Manufacturer: syz [ 149.538618][ T5885] usb 4-1: SerialNumber: syz [ 149.553736][ T5885] usb 4-1: config 0 descriptor?? [ 149.572813][ T5885] as10x_usb: device has been detected [ 149.578657][ T5885] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 149.634374][ T5885] usb 4-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 149.690970][ T46] [drm] vendor descriptor length:6 data:06 5f 00 00 00 00 00 00 00 00 00 [ 149.726350][ T46] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 149.750413][ T5885] as10x_usb: error during firmware upload part1 [ 149.758265][ T5885] Registered device Sky IT Digital Key (green led) [ 150.045628][ T29] audit: type=1400 audit(1732497920.446:382): avc: denied { read write } for pid=7091 comm="syz.0.299" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 150.100002][ T7090] random: crng reseeded on system resumption [ 150.111016][ T29] audit: type=1400 audit(1732497920.446:383): avc: denied { open } for pid=7091 comm="syz.0.299" path="/63/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 150.133865][ T29] audit: type=1400 audit(1732497920.496:384): avc: denied { write } for pid=7089 comm="syz.3.300" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 150.322156][ T46] [drm:udl_init] *ERROR* Selecting channel failed [ 150.380872][ T29] audit: type=1400 audit(1732497920.496:385): avc: denied { open } for pid=7089 comm="syz.3.300" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 150.405059][ T5913] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 150.450899][ T46] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 150.457981][ T46] [drm] Initialized udl on minor 2 [ 150.466157][ T46] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 150.476124][ T46] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 150.503030][ T5885] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 150.515107][ T5885] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 150.523762][ T5885] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 150.531758][ T46] usb 1-1: USB disconnect, device number 14 [ 150.541913][ T967] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 150.577867][ T5913] usb 5-1: Using ep0 maxpacket: 16 [ 150.584448][ T5913] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 150.596709][ T5913] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 150.607938][ T5913] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 150.618232][ T5913] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 150.642512][ T5913] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 150.661744][ T5913] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 150.678444][ T5913] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 150.694293][ T967] usb 3-1: Using ep0 maxpacket: 8 [ 150.705369][ T967] usb 3-1: config 0 has an invalid descriptor of length 231, skipping remainder of the config [ 150.718963][ T5913] usb 5-1: Manufacturer: syz [ 150.725394][ T967] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 150.802668][ T5913] usb 5-1: config 0 descriptor?? [ 150.826092][ T967] usb 3-1: New USB device found, idVendor=0e9c, idProduct=0700, bcdDevice= 0.00 [ 150.843527][ T967] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 150.853062][ T967] usb 3-1: Product: syz [ 150.857394][ T967] usb 3-1: SerialNumber: syz [ 150.870121][ T967] usb 3-1: config 0 descriptor?? [ 151.089354][ T29] audit: type=1400 audit(1732497921.486:386): avc: denied { unmount } for pid=5842 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 151.147979][ T7115] vivid-002: disconnect [ 151.497082][ T7113] vivid-002: reconnect [ 151.506434][ T5913] rc_core: IR keymap rc-hauppauge not found [ 151.514208][ T5913] Registered IR keymap rc-empty [ 151.519894][ T5913] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 151.553053][ T5913] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 151.670673][ T5913] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 151.751060][ T7103] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 151.757976][ T7103] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 151.798664][ T7103] vhci_hcd vhci_hcd.0: Device attached [ 151.805342][ T5913] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input11 [ 151.837648][ T5913] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 151.861007][ T5913] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 151.880957][ T5913] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 152.001376][ T7103] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.020948][ T5886] vhci_hcd: vhci_device speed not set [ 152.107104][ T7117] vivid-000: disconnect [ 152.115730][ T7103] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.140936][ T5913] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 152.153134][ T5886] usb 37-1: new full-speed USB device number 2 using vhci_hcd [ 152.184672][ T5913] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 152.202167][ T5913] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 152.220952][ T5913] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 152.240940][ T5913] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 152.260880][ T5913] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 152.268853][ T46] usb 4-1: USB disconnect, device number 17 [ 152.280454][ T46] Unregistered device Sky IT Digital Key (green led) [ 152.280889][ T5913] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 152.282082][ T46] as10x_usb: device has been disconnected [ 152.302281][ T5913] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 152.360439][ T5913] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 152.380164][ T5913] usb 5-1: USB disconnect, device number 26 [ 152.425252][ T7121] netlink: 4 bytes leftover after parsing attributes in process `syz.2.304'. [ 152.630401][ T7139] fuse: Unknown parameter '' [ 152.658987][ T7139] fuse: Unknown parameter 'grd' [ 152.664966][ T7121] veth1_macvtap: left promiscuous mode [ 152.677016][ T29] audit: type=1400 audit(1732497923.076:387): avc: denied { connect } for pid=7138 comm="syz.1.311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 152.697705][ T29] audit: type=1400 audit(1732497923.076:388): avc: denied { append } for pid=7138 comm="syz.1.311" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 152.881287][ T7100] vivid-000: reconnect [ 152.886027][ T5836] usb 3-1: USB disconnect, device number 19 [ 152.897898][ T7120] vhci_hcd: connection reset by peer [ 152.953184][ T3492] vhci_hcd: stop threads [ 152.957988][ T3492] vhci_hcd: release socket [ 152.972976][ T3492] vhci_hcd: disconnect device [ 153.098530][ T29] audit: type=1400 audit(1732497923.496:389): avc: denied { read } for pid=7153 comm="syz.1.314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 153.118641][ T29] audit: type=1400 audit(1732497923.496:390): avc: denied { write } for pid=7153 comm="syz.1.314" path="socket:[13199]" dev="sockfs" ino=13199 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 153.280857][ T46] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 154.200823][ T46] usb 1-1: Using ep0 maxpacket: 8 [ 155.064720][ T46] usb 1-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=ad.1d [ 155.078256][ T29] audit: type=1400 audit(1732497925.476:391): avc: denied { accept } for pid=7153 comm="syz.1.314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 155.096529][ T46] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.176018][ T46] usb 1-1: Product: syz [ 155.180585][ T46] usb 1-1: Manufacturer: syz [ 155.274737][ T46] usb 1-1: SerialNumber: syz [ 155.298158][ T7168] vivid-004: disconnect [ 155.333817][ T46] usb 1-1: config 0 descriptor?? [ 155.393079][ T46] usb_ehset_test 1-1:0.0: probe with driver usb_ehset_test failed with error -32 [ 155.721899][ T7171] MTD: Attempt to mount non-MTD device "/dev/nbd0" [ 155.731199][ T7171] syz.0.317: attempt to access beyond end of device [ 155.731199][ T7171] nbd0: rw=0, sector=0, nr_sectors = 2 limit=0 [ 155.826209][ T7170] lo speed is unknown, defaulting to 1000 [ 155.844748][ T7170] lo speed is unknown, defaulting to 1000 [ 155.860423][ T7170] lo speed is unknown, defaulting to 1000 [ 155.877265][ T7172] netlink: 'syz.3.320': attribute type 4 has an invalid length. [ 156.136891][ T46] lo speed is unknown, defaulting to 1000 [ 156.146464][ T7170] infiniband sz1: set active [ 156.156564][ T7170] infiniband sz1: added lo [ 156.225965][ T7170] RDS/IB: sz1: added [ 156.242127][ T7170] smc: adding ib device sz1 with port count 1 [ 156.280387][ T7170] smc: ib device sz1 port 1 has pnetid [ 156.316495][ T967] lo speed is unknown, defaulting to 1000 [ 156.347492][ T7170] lo speed is unknown, defaulting to 1000 [ 156.682904][ T7188] netlink: 4 bytes leftover after parsing attributes in process `syz.1.321'. [ 156.791660][ T46] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 156.830927][ T5885] usb 1-1: USB disconnect, device number 15 [ 157.438409][ T29] audit: type=1400 audit(1732497927.836:392): avc: denied { accept } for pid=7196 comm="syz.0.327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 157.511537][ T5886] vhci_hcd: vhci_device speed not set [ 157.523956][ T7188] team0: Port device team_slave_1 removed [ 157.541046][ T46] usb 3-1: Using ep0 maxpacket: 16 [ 157.555996][ T46] usb 3-1: config 0 has an invalid interface number: 248 but max is 0 [ 157.565789][ T46] usb 3-1: config 0 has no interface number 0 [ 157.673053][ T7170] lo speed is unknown, defaulting to 1000 [ 157.710942][ T46] usb 3-1: config 0 interface 248 altsetting 255 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 157.738822][ T46] usb 3-1: config 0 interface 248 altsetting 255 endpoint 0x81 has invalid wMaxPacketSize 0 [ 157.760840][ T46] usb 3-1: config 0 interface 248 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 157.793558][ T46] usb 3-1: config 0 interface 248 has no altsetting 0 [ 157.804210][ T7198] ebtables: ebtables: counters copy to user failed while replacing table [ 157.834456][ T7170] lo speed is unknown, defaulting to 1000 [ 157.893304][ T46] usb 3-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 157.906379][ T46] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 157.920949][ T5885] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 157.944991][ T46] usb 3-1: Manufacturer: syz [ 157.952894][ T46] usb 3-1: config 0 descriptor?? [ 157.967920][ T7170] lo speed is unknown, defaulting to 1000 [ 158.058322][ T7170] lo speed is unknown, defaulting to 1000 [ 158.093509][ T5885] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 158.107134][ T5885] usb 1-1: can't read configurations, error -61 [ 158.231016][ T5836] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 158.261037][ T5885] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 158.400874][ T5836] usb 2-1: Using ep0 maxpacket: 32 [ 158.442757][ T967] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 158.487921][ T5885] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 158.500850][ T5885] usb 1-1: can't read configurations, error -61 [ 158.507575][ T5885] usb usb1-port1: attempt power cycle [ 158.549107][ T7209] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.557721][ T7209] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.967436][ T29] audit: type=1400 audit(1732497929.356:393): avc: denied { relabelfrom } for pid=7185 comm="syz.2.326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 158.987736][ T29] audit: type=1400 audit(1732497929.356:394): avc: denied { relabelto } for pid=7185 comm="syz.2.326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 159.007188][ C0] vkms_vblank_simulate: vblank timer overrun [ 159.013942][ T967] usb 4-1: Using ep0 maxpacket: 32 [ 159.020513][ T967] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 159.029129][ T967] usb 4-1: config 0 has no interface number 0 [ 159.037577][ T967] usb 4-1: config 0 interface 132 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 159.049882][ T5882] usb 3-1: USB disconnect, device number 20 [ 159.066441][ T967] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 159.070821][ T5836] usb 2-1: unable to get BOS descriptor or descriptor too short [ 159.076915][ T967] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.083367][ T46] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 159.092204][ T967] usb 4-1: Product: syz [ 159.108175][ T967] usb 4-1: Manufacturer: syz [ 159.113299][ T5836] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 159.113341][ T967] usb 4-1: SerialNumber: syz [ 159.122328][ T5836] usb 2-1: can't read configurations, error -71 [ 159.135718][ T967] usb 4-1: config 0 descriptor?? [ 159.142806][ T7211] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 159.154532][ T967] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 159.165029][ T967] em28xx 4-1:0.132: Video interface 132 found: bulk [ 159.211046][ T5885] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 159.235690][ T5885] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 159.244422][ T5885] usb 1-1: can't read configurations, error -61 [ 159.272303][ T46] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 159.284176][ T46] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 159.295407][ T46] usb 5-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 159.304554][ T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.314107][ T46] usb 5-1: config 0 descriptor?? [ 159.401060][ T5885] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 159.436493][ T5885] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 159.444199][ T5885] usb 1-1: can't read configurations, error -61 [ 159.450781][ T5885] usb usb1-port1: unable to enumerate USB device [ 159.555301][ T967] em28xx 4-1:0.132: unknown em28xx chip ID (147) [ 159.821428][ T29] audit: type=1400 audit(1732497930.226:395): avc: denied { read } for pid=7213 comm="syz.4.332" name="btrfs-control" dev="devtmpfs" ino=1309 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 159.854582][ T46] samsung 0003:0419:0600.000C: unknown main item tag 0x2 [ 160.451202][ T29] audit: type=1400 audit(1732497930.246:396): avc: denied { open } for pid=7213 comm="syz.4.332" path="/dev/btrfs-control" dev="devtmpfs" ino=1309 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 160.475175][ C0] vkms_vblank_simulate: vblank timer overrun [ 160.502574][ T46] samsung 0003:0419:0600.000C: hidraw0: USB HID v0.00 Device [HID 0419:0600] on usb-dummy_hcd.4-1/input0 [ 160.839680][ T29] audit: type=1400 audit(1732497930.246:397): avc: denied { ioctl } for pid=7213 comm="syz.4.332" path="/dev/btrfs-control" dev="devtmpfs" ino=1309 ioctlcmd=0x9427 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 160.842891][ T46] usb 5-1: USB disconnect, device number 27 [ 161.024502][ T29] audit: type=1400 audit(1732497931.426:398): avc: denied { execmod } for pid=7210 comm="syz.3.331" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=13285 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 161.065960][ T29] audit: type=1400 audit(1732497931.426:399): avc: denied { execute } for pid=7210 comm="syz.3.331" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=13285 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 161.079065][ T7230] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 161.092023][ C0] vkms_vblank_simulate: vblank timer overrun [ 161.093169][ T967] em28xx 4-1:0.132: failed to read eeprom (err=-110) [ 161.129930][ T7230] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 161.155044][ T967] em28xx 4-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-110] [ 161.384707][ T967] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 161.392650][ T967] em28xx 4-1:0.132: analog set to bulk mode. [ 161.400055][ T8] em28xx 4-1:0.132: Registering V4L2 extension [ 161.770012][ T8] em28xx 4-1:0.132: reading from i2c device at 0x4a failed: couldn't get the received message from the bridge (error=-5) [ 161.784410][ T5882] usb 4-1: USB disconnect, device number 18 [ 161.790732][ T5882] em28xx 4-1:0.132: Disconnecting em28xx [ 161.791119][ T46] usb 5-1: new low-speed USB device number 28 using dummy_hcd [ 161.860970][ T967] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 161.908519][ T8] em28xx 4-1:0.132: Config register raw data: 0xffffffed [ 161.915913][ T8] em28xx 4-1:0.132: AC97 chip type couldn't be determined [ 161.933309][ T8] em28xx 4-1:0.132: No AC97 audio processor [ 162.013405][ T46] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 162.024817][ T46] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 162.034949][ T46] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 162.037177][ T8] usb 4-1: Decoder not found [ 162.083337][ T46] usb 5-1: New USB device found, idVendor=09da, idProduct=022b, bcdDevice= 0.00 [ 162.122128][ T967] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 162.133930][ T967] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 162.139317][ T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.167741][ T8] em28xx 4-1:0.132: failed to create media graph [ 162.176799][ T967] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 162.188976][ T967] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.198035][ T8] em28xx 4-1:0.132: V4L2 device video103 deregistered [ 162.225794][ T46] usb 5-1: config 0 descriptor?? [ 162.623863][ T967] usb 1-1: Product: 忑琾꣖뉁ｆ䆟↎轨貺읐属慨콱ਵᵡ运絖幏냝첬㬋镅זּ液壇雧㊼樎⾧Ⴒ㴴ꗃ™꡼鱤缻쳍⼺鑗飕碵嬟鶶꣭玿ፁⒺ蟛邍늡绢폹鑧끆꼰〙ꮜ薱㿇戛襽ꐡ⠡₊蕋ƀ뀲Ԕ葵㵎醵黨ꇥ勅ᆎḠ樒豻澴ካ䎛ნᇽ굣훙䨏ᔏ캏꭪Ꙟ鬱쾅▶㧄㐟菏떡➬譆ం嗳㤫 [ 162.657441][ C0] vkms_vblank_simulate: vblank timer overrun [ 162.674253][ T8] em28xx 4-1:0.132: Remote control support is not available for this card. [ 163.461787][ T5882] em28xx 4-1:0.132: Closing input extension [ 163.468135][ T5882] ================================================================== [ 163.476185][ T5882] BUG: KASAN: slab-use-after-free in media_device_unregister+0x59f/0x5c0 [ 163.484593][ T5882] Read of size 8 at addr ffff88802ae38210 by task kworker/0:3/5882 [ 163.492464][ T5882] [ 163.494780][ T5882] CPU: 0 UID: 0 PID: 5882 Comm: kworker/0:3 Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0 [ 163.505172][ T5882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 163.515213][ T5882] Workqueue: usb_hub_wq hub_event [ 163.520226][ T5882] Call Trace: [ 163.523496][ T5882] [ 163.526418][ T5882] dump_stack_lvl+0x116/0x1f0 [ 163.531083][ T5882] print_report+0xc3/0x620 [ 163.535509][ T5882] ? __virt_addr_valid+0x5e/0x590 [ 163.540519][ T5882] ? __phys_addr+0xc6/0x150 [ 163.545009][ T5882] kasan_report+0xd9/0x110 [ 163.549410][ T5882] ? media_device_unregister+0x59f/0x5c0 [ 163.555031][ T5882] ? media_device_unregister+0x59f/0x5c0 [ 163.560656][ T5882] media_device_unregister+0x59f/0x5c0 [ 163.566113][ T5882] em28xx_release_resources+0xb2/0x2d0 [ 163.571603][ T5882] em28xx_usb_disconnect+0x1de/0x610 [ 163.576877][ T5882] usb_unbind_interface+0x1e8/0x970 [ 163.582065][ T5882] ? kernfs_find_ns+0x2ee/0x3f0 [ 163.586902][ T5882] ? __pfx_usb_unbind_interface+0x10/0x10 [ 163.592629][ T5882] device_remove+0x122/0x170 [ 163.597215][ T5882] device_release_driver_internal+0x44a/0x610 [ 163.603271][ T5882] bus_remove_device+0x22f/0x420 [ 163.608284][ T5882] device_del+0x396/0x9f0 [ 163.612602][ T5882] ? __pfx_device_del+0x10/0x10 [ 163.617445][ T5882] ? kobject_put+0x210/0x5a0 [ 163.622018][ T5882] usb_disable_device+0x36c/0x7f0 [ 163.627027][ T5882] usb_disconnect+0x2e1/0x920 [ 163.631695][ T5882] hub_event+0x1da5/0x4e10 [ 163.636109][ T5882] ? lock_acquire+0x2f/0xb0 [ 163.640606][ T5882] ? __pfx_hub_event+0x10/0x10 [ 163.645377][ T5882] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 163.651032][ T5882] ? rcu_is_watching+0x12/0xc0 [ 163.655797][ T5882] ? trace_lock_acquire+0x146/0x1e0 [ 163.660987][ T5882] ? process_one_work+0x921/0x1ba0 [ 163.666086][ T5882] ? lock_acquire+0x2f/0xb0 [ 163.670584][ T5882] ? process_one_work+0x921/0x1ba0 [ 163.675707][ T5882] process_one_work+0x9c5/0x1ba0 [ 163.680635][ T5882] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 163.686254][ T5882] ? __pfx_process_one_work+0x10/0x10 [ 163.691608][ T5882] ? rcu_is_watching+0x12/0xc0 [ 163.696360][ T5882] ? assign_work+0x1a0/0x250 [ 163.700940][ T5882] worker_thread+0x6c8/0xf00 [ 163.705548][ T5882] ? __pfx_worker_thread+0x10/0x10 [ 163.710641][ T5882] kthread+0x2c1/0x3a0 [ 163.714799][ T5882] ? _raw_spin_unlock_irq+0x23/0x50 [ 163.719986][ T5882] ? __pfx_kthread+0x10/0x10 [ 163.724564][ T5882] ret_from_fork+0x45/0x80 [ 163.728965][ T5882] ? __pfx_kthread+0x10/0x10 [ 163.733542][ T5882] ret_from_fork_asm+0x1a/0x30 [ 163.738297][ T5882] [ 163.741295][ T5882] [ 163.743627][ T5882] Allocated by task 8: [ 163.747669][ T5882] kasan_save_stack+0x33/0x60 [ 163.752328][ T5882] kasan_save_track+0x14/0x30 [ 163.756986][ T5882] __kasan_kmalloc+0xaa/0xb0 [ 163.761559][ T5882] em28xx_v4l2_init+0x114/0x4050 [ 163.766482][ T5882] em28xx_init_extension+0x137/0x200 [ 163.771749][ T5882] request_module_async+0x61/0x70 [ 163.776768][ T5882] process_one_work+0x9c5/0x1ba0 [ 163.781683][ T5882] worker_thread+0x6c8/0xf00 [ 163.786249][ T5882] kthread+0x2c1/0x3a0 [ 163.790298][ T5882] ret_from_fork+0x45/0x80 [ 163.794693][ T5882] ret_from_fork_asm+0x1a/0x30 [ 163.799441][ T5882] [ 163.801752][ T5882] Freed by task 8: [ 163.805445][ T5882] kasan_save_stack+0x33/0x60 [ 163.810104][ T5882] kasan_save_track+0x14/0x30 [ 163.814774][ T5882] kasan_save_free_info+0x3b/0x60 [ 163.819793][ T5882] __kasan_slab_free+0x51/0x70 [ 163.824542][ T5882] kfree+0x14f/0x4b0 [ 163.828417][ T5882] em28xx_v4l2_init+0x22a4/0x4050 [ 163.833442][ T5882] em28xx_init_extension+0x137/0x200 [ 163.838708][ T5882] request_module_async+0x61/0x70 [ 163.843712][ T5882] process_one_work+0x9c5/0x1ba0 [ 163.848626][ T5882] worker_thread+0x6c8/0xf00 [ 163.853211][ T5882] kthread+0x2c1/0x3a0 [ 163.857260][ T5882] ret_from_fork+0x45/0x80 [ 163.861657][ T5882] ret_from_fork_asm+0x1a/0x30 [ 163.866403][ T5882] [ 163.868704][ T5882] The buggy address belongs to the object at ffff88802ae38000 [ 163.868704][ T5882] which belongs to the cache kmalloc-8k of size 8192 [ 163.882745][ T5882] The buggy address is located 528 bytes inside of [ 163.882745][ T5882] freed 8192-byte region [ffff88802ae38000, ffff88802ae3a000) [ 163.896632][ T5882] [ 163.898950][ T5882] The buggy address belongs to the physical page: [ 163.905345][ T5882] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2ae38 [ 163.914078][ T5882] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 163.922548][ T5882] ksm flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 163.930432][ T5882] page_type: f5(slab) [ 163.934391][ T5882] raw: 00fff00000000040 ffff88801b042280 ffffea0000aab600 dead000000000003 [ 163.942950][ T5882] raw: 0000000000000000 0000000080020002 00000001f5000000 0000000000000000 [ 163.951522][ T5882] head: 00fff00000000040 ffff88801b042280 ffffea0000aab600 dead000000000003 [ 163.960179][ T5882] head: 0000000000000000 0000000080020002 00000001f5000000 0000000000000000 [ 163.968822][ T5882] head: 00fff00000000003 ffffea0000ab8e01 ffffffffffffffff 0000000000000000 [ 163.977655][ T5882] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 163.986298][ T5882] page dumped because: kasan: bad access detected [ 163.992687][ T5882] page_owner tracks the page as allocated [ 163.998372][ T5882] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 5516, tgid 5516 (dhcpcd-run-hook), ts 30824229622, free_ts 30767479849 [ 164.017886][ T5882] post_alloc_hook+0x2d1/0x350 [ 164.022635][ T5882] get_page_from_freelist+0xfce/0x2f80 [ 164.028071][ T5882] __alloc_pages_noprof+0x223/0x25a0 [ 164.033331][ T5882] alloc_pages_mpol_noprof+0x2c9/0x610 [ 164.038765][ T5882] new_slab+0x2c9/0x410 [ 164.042898][ T5882] ___slab_alloc+0xdac/0x1880 [ 164.047545][ T5882] __slab_alloc.constprop.0+0x56/0xb0 [ 164.052893][ T5882] __kmalloc_cache_noprof+0x2b4/0x300 [ 164.058236][ T5882] audit_log_d_path+0xce/0x1e0 [ 164.062973][ T5882] common_lsm_audit+0x3d3/0x2210 [ 164.067883][ T5882] slow_avc_audit+0x17d/0x210 [ 164.072540][ T5882] avc_has_perm+0x18d/0x1c0 [ 164.077016][ T5882] inode_has_perm+0x168/0x1d0 [ 164.081671][ T5882] selinux_file_open+0x314/0x430 [ 164.086580][ T5882] security_file_open+0xa5/0x1e0 [ 164.091489][ T5882] do_dentry_open+0x57e/0x1ea0 [ 164.096227][ T5882] page last free pid 5512 tgid 5512 stack trace: [ 164.102525][ T5882] free_unref_page+0x661/0x1080 [ 164.107359][ T5882] __put_partials+0x14c/0x170 [ 164.112032][ T5882] qlist_free_all+0x4e/0x120 [ 164.116593][ T5882] kasan_quarantine_reduce+0x195/0x1e0 [ 164.122027][ T5882] __kasan_slab_alloc+0x69/0x90 [ 164.126852][ T5882] __kmalloc_noprof+0x199/0x400 [ 164.131680][ T5882] tomoyo_realpath_from_path+0xb9/0x720 [ 164.137198][ T5882] tomoyo_path_number_perm+0x248/0x590 [ 164.142632][ T5882] security_path_chmod+0x121/0x2c0 [ 164.147722][ T5882] chmod_common+0x16d/0x460 [ 164.152198][ T5882] __x64_sys_chmod+0x108/0x1c0 [ 164.156936][ T5882] do_syscall_64+0xcd/0x250 [ 164.161411][ T5882] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.167283][ T5882] [ 164.169580][ T5882] Memory state around the buggy address: [ 164.175201][ T5882] ffff88802ae38100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 164.183237][ T5882] ffff88802ae38180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 164.191270][ T5882] >ffff88802ae38200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 164.199299][ T5882] ^ [ 164.203857][ T5882] ffff88802ae38280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 164.211928][ T5882] ffff88802ae38300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 164.219973][ T5882] ================================================================== [ 164.228606][ T967] usb 1-1: Manufacturer: ࠐ [ 164.233740][ T967] usb 1-1: SerialNumber: Ы [ 164.258401][ T29] audit: type=1400 audit(1732497933.176:400): avc: denied { mount } for pid=7240 comm="syz.4.339" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 164.273390][ T46] a4tech 0003:09DA:022B.000D: item fetching failed at offset 5/7 [ 164.289120][ T46] a4tech 0003:09DA:022B.000D: parse failed [ 164.295264][ T46] a4tech 0003:09DA:022B.000D: probe with driver a4tech failed with error -22 [ 164.295448][ T5882] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 164.295461][ T5882] CPU: 0 UID: 0 PID: 5882 Comm: kworker/0:3 Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0 [ 164.295485][ T5882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 164.295502][ T5882] Workqueue: usb_hub_wq hub_event [ 164.295526][ T5882] Call Trace: [ 164.295533][ T5882] [ 164.295540][ T5882] dump_stack_lvl+0x3d/0x1f0 [ 164.295572][ T5882] panic+0x71d/0x800 [ 164.295600][ T5882] ? __pfx_panic+0x10/0x10 [ 164.295630][ T5882] ? preempt_schedule_thunk+0x1a/0x30 [ 164.295651][ T5882] ? preempt_schedule_common+0x44/0xc0 [ 164.295690][ T5882] check_panic_on_warn+0xab/0xb0 [ 164.295709][ T5882] end_report+0x117/0x180 [ 164.295734][ T5882] kasan_report+0xe9/0x110 [ 164.295757][ T5882] ? media_device_unregister+0x59f/0x5c0 [ 164.295788][ T5882] ? media_device_unregister+0x59f/0x5c0 [ 164.295821][ T5882] media_device_unregister+0x59f/0x5c0 [ 164.295852][ T5882] em28xx_release_resources+0xb2/0x2d0 [ 164.295881][ T5882] em28xx_usb_disconnect+0x1de/0x610 [ 164.295908][ T5882] usb_unbind_interface+0x1e8/0x970 [ 164.295931][ T5882] ? kernfs_find_ns+0x2ee/0x3f0 [ 164.295953][ T5882] ? __pfx_usb_unbind_interface+0x10/0x10 [ 164.295979][ T5882] device_remove+0x122/0x170 [ 164.296005][ T5882] device_release_driver_internal+0x44a/0x610 [ 164.296038][ T5882] bus_remove_device+0x22f/0x420 [ 164.296063][ T5882] device_del+0x396/0x9f0 [ 164.296089][ T5882] ? __pfx_device_del+0x10/0x10 [ 164.296115][ T5882] ? kobject_put+0x210/0x5a0 [ 164.296137][ T5882] usb_disable_device+0x36c/0x7f0 [ 164.296162][ T5882] usb_disconnect+0x2e1/0x920 [ 164.296185][ T5882] hub_event+0x1da5/0x4e10 [ 164.296214][ T5882] ? lock_acquire+0x2f/0xb0 [ 164.296239][ T5882] ? __pfx_hub_event+0x10/0x10 [ 164.296261][ T5882] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 164.296284][ T5882] ? rcu_is_watching+0x12/0xc0 [ 164.296311][ T5882] ? trace_lock_acquire+0x146/0x1e0 [ 164.296338][ T5882] ? process_one_work+0x921/0x1ba0 [ 164.296361][ T5882] ? lock_acquire+0x2f/0xb0 [ 164.296381][ T5882] ? process_one_work+0x921/0x1ba0 [ 164.296404][ T5882] process_one_work+0x9c5/0x1ba0 [ 164.296429][ T5882] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 164.296452][ T5882] ? __pfx_process_one_work+0x10/0x10 [ 164.296472][ T5882] ? rcu_is_watching+0x12/0xc0 [ 164.296501][ T5882] ? assign_work+0x1a0/0x250 [ 164.296522][ T5882] worker_thread+0x6c8/0xf00 [ 164.296548][ T5882] ? __pfx_worker_thread+0x10/0x10 [ 164.296569][ T5882] kthread+0x2c1/0x3a0 [ 164.296593][ T5882] ? _raw_spin_unlock_irq+0x23/0x50 [ 164.296619][ T5882] ? __pfx_kthread+0x10/0x10 [ 164.296645][ T5882] ret_from_fork+0x45/0x80 [ 164.296664][ T5882] ? __pfx_kthread+0x10/0x10 [ 164.296695][ T5882] ret_from_fork_asm+0x1a/0x30 [ 164.296727][ T5882] [ 164.304213][ T5882] Kernel Offset: disabled