last executing test programs: 13.402475737s ago: executing program 0 (id=486): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000012c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x6, 0xa, 0x9, 0xfff0, 0xf1}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x1, 0xb, 0xa, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {}, {0x18, 0x6, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 12.717468421s ago: executing program 0 (id=488): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$setregs(0xd, r3, 0x2, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r3, 0x200, &(0x7f0000000080)={0x0, 0x30}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000480)=0x7) connect$unix(0xffffffffffffffff, 0x0, 0x0) r5 = socket$kcm(0x2b, 0x1, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x48) write$cgroup_devices(r7, &(0x7f00000002c0)=ANY=[@ANYBLOB='c 8:', @ANYRESOCT=r7], 0x9) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) sendmsg$NFC_CMD_DEV_DOWN(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)={0x1c, r8, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r6) sendmsg$inet(r5, &(0x7f0000000840)={&(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10, 0x0, 0x0, &(0x7f0000001c80)=ANY=[], 0x2f8}, 0x20000080) setsockopt$sock_attach_bpf(r5, 0x6, 0x19, &(0x7f0000000200)=r5, 0x21) 11.632639335s ago: executing program 0 (id=492): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0)={0x0}, 0x0) prlimit64(r1, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000140)='./file0\x00') r3 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000000)={0x2, @sdr={0x0, 0xfff}}) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f00000002c0)={0x2, @pix={0x4, 0x0, 0x30383653, 0x1, 0x800, 0x4, 0x5, 0x2, 0x0, 0x4, 0x1, 0x6}}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="fc00000019000100ff01000000000000e0000002000000000000000000000000ac14140d00000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000007000000000000000000000000000000ffffff7f000000000000000000000000020000000000000000000000000000000000000000000003090000000000000000000000000000000000000d8f6608b44e6b8d1869460000000000000100"], 0xfc}}, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x1000000) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r8 = syz_io_uring_setup(0xcf5, &(0x7f0000000200)={0x0, 0x4200082f, 0x20000, 0x1, 0x125, 0x0, r4}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000180)=0x4, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f0000000100)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r7, 0xc000000, &(0x7f0000000000)=[{0x0}], 0x1, 0x12}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) io_uring_enter(r8, 0x847ba, 0x0, 0xe, 0x0, 0x0) 9.808782454s ago: executing program 0 (id=498): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="120100002eab5a40401c3405cc6d010203010902120001000000000904"], 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000740)={0x34, &(0x7f00000004c0)={0x40, 0xe, 0x4, "dd811857"}, 0x0, 0x0, &(0x7f0000000640)={0x20, 0x0, 0x27, {0x25, "0ae3aebee3aec13119e75f962af6667f7d942d9f859588acffada278b9714ffad296b9d23b"}}, &(0x7f00000006c0)={0x20, 0x1, 0x1, 0x80}, &(0x7f0000000700)={0x20, 0x0, 0x1, 0x7}}) 8.825273222s ago: executing program 1 (id=505): socket$nl_xfrm(0x10, 0x3, 0x6) socket$kcm(0x11, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x4000080) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r0, &(0x7f0000000900)="9d8d645e53b6183d874f9e93a18dd009a09560ff682bd07dc3d28385a8f3f9e18418950d4dfe49f13a19e24320444a7d6c121741ba3dc510dba4f980bbd9a315544fa0a1622d949faba79788908354e467989e8458e6f5f76e0e4e781bfca4c928c956321dd514877569805db6602f1584a8bd051f13bad882bea021ffb5ce918a1f87f1d439ec93772d6ecaaf8891f7678f2037ccced78ea5c1aa805f1b9f5a2c3974c5124cac5e163d9b6f5b998c1c7263fa2331d1241523986dccbd4e1f32b2f521380a2ea4732132264de6d26ce40177a780df98cbf94b96d900a2dfc5c877db675ebb1d7cbc398ca422ddbadc24ee6f3bf036f62cdb056502a6b657ff95930ea668649ad0003afe9a912179ce61631b3dab94642d2768f1f22299deb9eddb917fc0076b74406149024514d07417c6007e8cd4dc4e2295be71f412044b52b1ce32aac048cad9c413a8c19528dc1b432fe7f9fda7182a47243af427a76ede78aa5c6ef75ea1f48e2e9e9d203d4760a1ff6a0119b39a2458a050f9519d4bbd821684ef8356985e8f5b8d86346f428788fc374e7eaa0c2a2ef8478a13b4a56d0821201c37a0066fb9f5cc583005b9f71b67daa300311066bacbf43630a8388aff734a568a123a48ba1344a5500e5c6f8cef539617cd3970ffb873579a3b76bd529f1626d1f90543b2a0190df38bb1e8b6fc9bfc5c42693814665679e78ed8adce4d23b8725416101ae4113fee000cb92b32c6a74851a6c4af4625f28810ec16834a1589063af1bf0b29aa57e06dddc0fddf408fab63c536d5afd9ba5a71f9e534f99e5ea9c1eaaaad710ef30a37df0f87978894333850f4feac3740a3b010da7c250d060c8046cab40d0527234d4b4b28366bc7d5899948ddbfac66c848ef0f842eab95248e9d064c0ec4247483f0aa0cad7ca970365e474fe73cf79cf8c70fc7a015caa273ce41723453632cf5b809584d227f7e98e8ec41494518b0b8a8adbaf5ead6529451b116fab06529b653bffdd6d98f8322265305bdc0ff69f4a70dea414fcc63d149c564c834f24b8f7495cd9ccafa1e3f652cd3270935800ee0d5598afcaa41c150dac263408d77a61b5c77e2c3644dda1b8c333a36c30ce893140ce133827dde34d896d35c498bf6dda965a27cc77e2872fcedaf9dcb89614c758cf62ad769ac05a4fb9e27b421b82c1761f1322b03cc9ea586d15f7d2ffb6ed63c639cee97d9eea8f3934045e60b15eca5c13ebe002467c09815712165cee2af784f9e5db9f7227701ca9a3de588503c84c490f4986aa26e7b63d4c5a30157cdf82e433a1b64496392a1990b2a46b910d9a16429736308f71d8e78824a26f25f21829546b973c0905b20c2ef751eb0064eaf831874f0b58ef8779cafd02bcf075a212e79e07c73c49fc240d6845877fda649d1ab59ea06b907ec5031299a0e1fa2f8cbc241a8531ad241302b569d4581dcc944f27799f25593b97ea7681ba74d6cde9c8f58840ac4c4be3aa90e6273a64e549c47c7232f423406604c9c210eabe3d6a2343bd6c2ae72ab013ce2af32467bcfa8cbf0769f9156e35424", 0x45c) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x1c}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = creat(&(0x7f0000000400)='./bus\x00', 0x0) r3 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) truncate(&(0x7f00000000c0)='./bus\x00', 0x9472) lsetxattr$security_ima(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000180), &(0x7f0000000540)=ANY=[@ANYBLOB="0416"], 0x2, 0x0) r4 = dup3(r3, r2, 0x0) sendmsg$rds(r4, 0x0, 0x95) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) finit_module(r2, 0x0, 0x2) 7.209837767s ago: executing program 0 (id=506): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, 0x0) open(0x0, 0x1a1342, 0x0) socket$kcm(0x2, 0xa, 0x2) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00222200000096010028193dab0da83a81070900be0035e957120800000b00000400abf3fbaacc043b823336fd03ce9bf3e30bb50ffbca4478f2b353b483c2adeb2f17e07aef1f3d2551f166bfcc1d7f77387ae28945f3c73054b2ac724ca0926acf34736886c7ac390fa2215c5c3fad81a9877a1b8933c311318cc4e3d6c7ab2a1692766ad392bc1b0fdcb27efaa30ce70912b8"], 0x0}, 0x0) 6.424886271s ago: executing program 3 (id=509): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x8, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000200)={0x2, @win={{0x80000000, 0x9a28, 0x4}, 0x6, 0x7, &(0x7f00000001c0)={{0x6, 0x8, 0xf, 0x101}, &(0x7f0000000140)={{0x80000001, 0xb3e7, 0x8, 0x1000}, &(0x7f00000000c0)={{0x3, 0x800, 0x696, 0x2}}}}, 0x1, &(0x7f00000003c0)="bee81377807053135fb26d29f88acbeb654dd330afdc7573e1212cfbaf2479437182b8fc7404945fd3052726e944301202b07bc5439197a1eb0bdc75dec0de6a1ed3c000b45454785eedc437f14e9c336fd5d519a21f01d04eae636e98a088ab1d73f17185eccd543665470376d4649a4887b7591e5e76ebb441235e06e9f08c7ba327ebb05a720202db18ce546b8439a72d078f6136456e7122ea4e0099d920a1b6050cd11d4ab613d0f0a3171b748a07219ed39d7b9c0e8d7cbd3c883d478ba346a5e0a04ef2a1430111ba48886e186a8d3b3a87c9134eb0c02525d37bbc0c988c5cfb191a3acad7aea5e5b5ce1ed5c3f7ed5c27"}}) r3 = syz_open_dev$video(&(0x7f00000010c0), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r3, 0xc040565f, &(0x7f0000000200)={0x2, 0x100, 0x1, {0x0, 0x0, 0x7fe, 0x81}}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r4 = openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='projid_map\x00') read$dsp(r4, &(0x7f0000000300)=""/79, 0x4f) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r5, &(0x7f0000000e00)=[{{&(0x7f0000000180)={0xa, 0x4e23, 0x5, @private2, 0x42}, 0x1c, &(0x7f00000039c0)=[{&(0x7f0000000040)="eb", 0x1}], 0x1}}, {{&(0x7f0000003f00)={0xa, 0x4e23, 0xe, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffffe}, 0x1c, &(0x7f0000003f80)=[{&(0x7f0000003f40)="d8", 0x1}], 0x1}}], 0x2, 0x20040944) listen(r5, 0xfff) accept(r5, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r7, 0x3b87, 0x0) connect$inet(r6, &(0x7f0000000380)={0x2, 0x0, @remote}, 0x10) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x6, 0x0) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x810) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='jfs\x00', 0x1a0c000, 0x0) 6.115941744s ago: executing program 1 (id=510): prlimit64(0x0, 0xe, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732600000000002020207b1af8ff00"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, 0x0, 0x0, 0x68034) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000080)={0x84, @private=0xa010100, 0x15, 0x3, 'lblcr\x00', 0x25, 0x5, 0x72}, 0x2c) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = shmget$private(0x0, 0x2000, 0x4, &(0x7f0000ffb000/0x2000)=nil) r3 = shmat(r2, &(0x7f0000ff1000/0x3000)=nil, 0x400c) shmctl$IPC_RMID(r2, 0x0) socket(0x10, 0x3, 0x0) shmdt(r3) mlock2(&(0x7f0000381000/0x4000)=nil, 0x4000, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, 0x0, 0x40000014) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) 6.115568203s ago: executing program 4 (id=511): openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x121000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f00000001c0), 0x841, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r5 = io_uring_setup(0x1195, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES8=r3], 0x50) io_uring_enter(r5, 0x2219, 0xcf74, 0x16, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x2, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8080000000000000, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.788349952s ago: executing program 2 (id=512): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="010000000201000004000000030000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x8, 0xdd, 0x40}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000d80)={0x0, &(0x7f0000000bc0)=""/63, &(0x7f0000000c00), &(0x7f0000000c80)="1b9b44ccc45e03645807392d039b7deb5b54e83a88206da84dad42f09f0a4c8a72dfd360b3c722c747503250e6c8037179b84daa5814a87700e79504f192a06e01641bf557f7533f4657f6d82fd7845ae025c4dd38563bde20d6fb39dc66f45d54e1c38f10eb609caa635302f69430473aee2d4eebf485fa4b816e29cd6e2b6e23b79c858b08ecd2fcc43c0df1c3a26c27d9a59cd85e723b85662aecbfc1b88ee5437125ab833cd620f88fca3caee8bdf2d0a24dad2e68c7554aa1d2", 0xfff, r0}, 0x38) close(0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) chown(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000007c0)=ANY=[], 0x150}, 0x1, 0x0, 0x0, 0x20000000}, 0x4084) recvmmsg(r5, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000500)=""/254, 0xfe}, {&(0x7f00000000c0)=""/50, 0x32}], 0x2}, 0x3f}], 0x1, 0x60, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000dc0)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.623854s ago: executing program 4 (id=513): ioperm(0x6, 0x88, 0x8) r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) clock_gettime(0x0, &(0x7f0000000040)) (async) timer_settime(r2, 0x0, &(0x7f0000000280)={{0x77359400}, {0x77359400}}, 0x0) listen(r0, 0x0) (async) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r3, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {0x0, 0x0, 0x0, 0x3}}) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1e7d, 0x2c2e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0xc, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x2000, 0x3, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0xff}}}}}]}}]}}, 0x0) syz_usb_control_io(r4, 0x0, 0x0) (async) syz_usb_control_io$hid(r4, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x0, "3a89d7ed"}]}}, 0x0}, 0x0) (async) socket$kcm(0x29, 0x7, 0x0) (async) syz_usb_control_io(r4, &(0x7f0000000240)={0x2c, &(0x7f00000000c0)={0x0, 0x23, 0x40, {0x40, 0x30, "80862268c9e47fb56fd1740b19d4aef09b0c0be2caf4700450a1d4d7b5bf612b84f69d23282005e01fe02b9147e6fb9e427dd4bca7944c59ba01555df34b"}}, &(0x7f00000008c0)=ANY=[@ANYBLOB="00039100000091038ca2c405585e80f9bc4f8b71f77b9ab54326b2e73d273684e104b3c82ab3f6cf940fcb5d50f07bf0e50946c1e270ecfb0d3fa9acbb49525fa1d00e1a1026731c5bcb2d3d448d3ab6f16f92ee8606016b8024a500492cf8acc8ecc2f58af400c965494d2bfeb71ebeb77fd8e23eeb838006f86062f6afc5610562059b0ed1c9bc45e76bfed4feb9ca17343224dcc6c0855686ae160f54aaba9b631cfcca2ff231edd32a88919954d099328d1096addddce39b1c29de525cdc0ee26d8f3a1d1ec3311da8f184db2b2c8116cc28dfd7202ab00e749823f1ac993aee"], &(0x7f0000000140)={0x0, 0xf, 0x30, {0x5, 0xf, 0x30, 0x2, [@generic={0x24, 0x10, 0x3, "3fa81918085d628684c3679974800d83d80fbcb3e681e01bcb27462267fe49a6b2"}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0xb, 0x4, 0x9}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x6, 0x4, 0x0, 0x8, "325f902b", "eee7fdaf"}}, &(0x7f0000000200)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6, 0x80, 0x0, 0x8, 0x1, 0xe, 0x3}}}, &(0x7f0000000800)={0x84, &(0x7f0000000380)={0x40, 0x14, 0x7c, "4accb47f6514b043fa53ffd50d4ea6c9b3787a998dfdb7670127211278d8b82f2b8ceb318e5abbfd4cfa1597dd2f1d4ba4b93a30fb81749b2baaf4d1bb370a58196afa0769b121efcc60ce48049dbc6431358c7f527fb52a0bd76a10df8c777e59a2f36472afd551ce0db0a41d030c0be434e204a3d0533d6e99dcfe"}, &(0x7f0000000440)={0x0, 0xa, 0x1, 0xf7}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0x9}, &(0x7f00000004c0)={0x20, 0x0, 0x4, {0x0, 0x3}}, &(0x7f0000000500)={0x20, 0x0, 0x8, {0x200, 0x80, [0xf00f]}}, &(0x7f0000000540)={0x40, 0x7, 0x2, 0x3}, &(0x7f0000000580)={0x40, 0x9, 0x1, 0x2}, &(0x7f00000005c0)={0x40, 0xb, 0x2, "f715"}, &(0x7f0000000600)={0x40, 0xf, 0x2, 0xfffb}, &(0x7f0000000640)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000680)={0x40, 0x17, 0x6, @multicast}, &(0x7f00000006c0)={0x40, 0x19, 0x2, "96e8"}, &(0x7f0000000700)={0x40, 0x1a, 0x2, 0x1}, &(0x7f0000000740)={0x40, 0x1c, 0x1, 0x6}, &(0x7f0000000780)={0x40, 0x1e, 0x1, 0x9}, &(0x7f00000007c0)={0x40, 0x21, 0x1, 0x5}}) (async) accept4(r0, 0x0, 0x0, 0x0) 4.602055454s ago: executing program 3 (id=514): r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, &(0x7f0000000000)=0x1) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0x191, 0x1, 0x0, 0xdd9f83, 0x1, 0x9, 0xf3, 0x2, 0x5, 0x722, 0x4000013, 0x7, 0x7f, 0x3f, 0xb763599953cb091d, {0x0, 0x6fd8e84b}, 0x3, 0xed}}) 4.548733276s ago: executing program 3 (id=515): r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, &(0x7f0000000000)=0x1) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0x191, 0x1, 0x0, 0xdd9f83, 0x1, 0x9, 0xf3, 0x2, 0x5, 0x722, 0x4000013, 0x7, 0x7f, 0x3f, 0xb763599953cb091d, {0x0, 0x6fd8e84b}, 0x3, 0xed}}) (fail_nth: 3) 4.268487411s ago: executing program 3 (id=516): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f0002000000"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, 0x0) r2 = gettid() openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) syz_open_procfs$namespace(r2, &(0x7f0000000040)='ns/mnt\x00') ppoll(&(0x7f00000007c0)=[{r1, 0x4040}], 0x1, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0d, &(0x7f0000000040)) 4.179007646s ago: executing program 2 (id=517): socketpair$unix(0x1, 0x5, 0x0, 0x0) fsopen(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x501000) fchmodat(r0, &(0x7f0000000140)='./cgroup.net/devices.allow\x00', 0x48) openat$dsp(0xffffffffffffff9c, 0x0, 0x442, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, 0x0, 0x4000000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r2}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) timer_getoverrun(r3) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) fstat(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r4, r4) lstat(&(0x7f0000000900)='./file0\x00', &(0x7f0000000940)) read$FUSE(r0, &(0x7f0000003580)={0x2020}, 0x2036) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) mount$9p_tcp(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x2008401, &(0x7f0000000300)=ANY=[@ANYBLOB="7472616e733d7463702c706f72743d3078303030303030303030303030346532312c00236ce8a4bfd8fa229a2b654690bd2adeaf060c80f27aaf7017e97a5920d884d3e54c99219904871299073038be63426d494d1f1343ff6fc22c2fe757ccf5a38921087de9ab5183da70133c434e4d2c3e8c7a81ac08fe1f32d4c21e89c52e9a129103b26f889a8e6a82a1eeb2683243ebde0f70fcd18e4842a7fe9759f31ad4bb125633f8c9c8a5da21f7bc8ac2f9d03708e0198018633c6d8ebb2ecf5f5cf2013ca6b1e9e3150521a0bae5066c65102a5c06b331ab1e0b50191fbd4e4e0a9d97dc"]) statx(r0, 0x0, 0x0, 0x800, &(0x7f0000000400)) stat(0x0, &(0x7f0000003500)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) getgroups(0x0, 0x0) 4.160975617s ago: executing program 1 (id=518): socket$nl_route(0x10, 0x3, 0x0) keyctl$negate(0xd, 0x0, 0xfffffffffffffffe, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbefb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000700)=@abs={0x0, 0x0, 0x10000}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_settime(0x100000000000017, &(0x7f0000000000)={0x8000000000000001, 0x3}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_open_dev$I2C(&(0x7f0000000180), 0x19a, 0x200) ioctl$I2C_SLAVE(r4, 0x703, 0x4) 3.148301549s ago: executing program 4 (id=519): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r1 = syz_io_uring_setup(0x66e, &(0x7f0000000240)={0x0, 0xfffffffe, 0x10100, 0x0, 0x351}, &(0x7f0000000380), &(0x7f0000000200)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000180)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x75, 0x0, @fd=r1, 0x4, 0x0, 0x0, 0x5, 0x0, {0x2}}) io_uring_enter(r1, 0x2645, 0x0, 0x8, 0x0, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x1, 0x0) (async) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r6, {0xa, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f0000000400)={{0x0, 0x0, 0x9, 0x2, 0xaf}, 0xa, 0x2, 'id1\x00', 'timer1\x00', 0x0, 0x5, 0x5, 0x3, 0xffffd0e2}) socket(0x400000000010, 0x3, 0x0) (async) socket(0x400000000010, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, 0x0, 0x0) fsetxattr$security_ima(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2) (async) fsetxattr$security_ima(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r7, 0xaf01, 0x0) r8 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r7, 0x4004af07, &(0x7f0000000240)=r8) ioctl$VHOST_SET_VRING_KICK(r7, 0x4008af20, &(0x7f0000000040)={0x1, r8}) ioctl$VHOST_SET_VRING_ADDR(r7, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r7, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/231, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) (async) ioctl$VHOST_SET_VRING_ADDR(r7, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/231, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r7, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x78, &(0x7f0000000600)=""/120}]}) ioctl$VHOST_SET_VRING_ERR(r7, 0x4008af22, &(0x7f00000002c0)={0x1, r8}) ioctl$VHOST_VSOCK_SET_RUNNING(r7, 0x4004af61, &(0x7f0000000000)=0x1) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r7, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2d8d}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2d8d}, 0x94) 3.146392489s ago: executing program 2 (id=520): r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@getchain={0x54, 0x66, 0x100, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xf}, {0x0, 0xc}, {0x0, 0xf}}, [{0x8, 0xb, 0x6}, {0x8, 0xb, 0x401}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0xe7da}, {0x8, 0xb, 0x36}, {0x8, 0xb, 0x800}]}, 0x54}}, 0x400c0) getsockname$packet(r0, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000700)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="0000000000000000280012800b000100697036746e6c00001800028014000300ff020000000000000000000000000001"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="9800000010000104fcffffff0000000000000000", @ANYRES32=r2, @ANYBLOB="0025000000000000780012800b000100697036746e6c00006800028006000f000300"], 0x98}, 0x1, 0x0, 0x0, 0x40001}, 0x20004090) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff000000000300000000000000000000000200000000000000000000000000000a03000000000000000000001002"], 0x0, 0x56}, 0x20) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000f80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r8 = socket$nl_generic(0x10, 0x3, 0x10) add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f0000000080)="0000000000000002ff69000000000001000000c000000002000200861fa72e5b01504104bfeacdd5a9007d167c71e3b8a93aa64d957a684161c833020a6da8881fb79e110483bfadf224a22c76ecc7a56843a85f7df51293f0eb84ef8f0f07342db3b0e5a5647b7bed1fbf069ca713670adf7d9fb6d2600fd9c1981fe9f095cfe9d2fe1e1e34f6096bf02543747b2c792890f07c0da0fa25e6101062e6c9176a70e41698814a213711764f88495994cfd8a57c1e13f6b5298e7ab3a2bfb58dde34d58536633c27882e51ced17d67999b00094461", 0xd4, 0xffffffffffffffff) sendmsg$nl_generic(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000002e00010026bdf000fcdbdf250400000008000c00", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f00000000c0)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'lblc\x00', 0x20, 0x400000, 0x4}, 0x2c) r9 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r9, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r10, 0x84, 0x15, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r10, 0x84, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) 3.123120695s ago: executing program 0 (id=521): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9c5c2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0xb}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1100000004000000040000000900000000000000", @ANYRES32, @ANYBLOB="00000007000000000000000000000000000000006388d654283b8a1ee358bd0ecd7e8e02199b031be04d8a62bc57cfa0ed161c38cb2b30c14618e4c814ddb8d7a5c3b7df46bb07a861916f17ec7cfe28b147408cea04d92fcd1f19947299b5ef37a3386ee4d810f4dbac9aa1786898432861d272d6f31fe7bde1700429f11f240254398623a98a544d7bcb505928db60804ffb410cef1eb735533029e93a5eecb40b100e529cc43e510169150a1ebb621cc73bdf90244e9e4295bf78e709f8707475f288d8b2bf918164b9c5d442a669c30a5b1aefe86d15cce1422bea8e4f1ce5f803f28eb4956a36e76dd2ecef9bd317d954e48a30f8", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000002800000040000000100000000000000", @ANYRES32=r3, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r4}, &(0x7f0000000840), &(0x7f0000000880)=r3, 0x2000000}, 0x20) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x3, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) shutdown(r0, 0x1) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000280)={0xffffffffffffffff, r0, 0x1, 0x0, 0x0, 0x48, 0x1, 0x5, 0xa, 0x8, 0x1, 0x2, 'syz0\x00'}) r5 = socket(0x10, 0x3, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYRES64=r0, @ANYRES16=r0, @ANYRES32], 0x40}}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) eventfd(0x8000) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) mount(&(0x7f0000000100)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000280)='erofs\x00', 0x0, 0x0) 2.871324373s ago: executing program 1 (id=522): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r5, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000643200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007041af64090aac40d6600000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) unshare(0x26020480) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r7, &(0x7f0000002300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r7, &(0x7f0000001200)={0x50, 0x0, r8, {0x7, 0x27, 0x0, 0x500000}}, 0x50) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='system.posix_acl_access\x00', 0x0, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48815}, 0xc840) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r9) read$FUSE(r7, &(0x7f0000004340)={0x2020}, 0x2020) 2.436161042s ago: executing program 4 (id=523): openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x121000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f00000001c0), 0x841, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r5 = io_uring_setup(0x1195, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES8=r3], 0x50) io_uring_enter(r5, 0x2219, 0xcf74, 0x16, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x2, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8080000000000000, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.712294768s ago: executing program 1 (id=524): socketpair$nbd(0x1, 0x1, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000040)=0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000580)={{r0}, r2, 0x8, @inherit={0x80, &(0x7f0000000240)={0x1, 0x7, 0x9, 0x1, {0x10, 0x6, 0x2, 0x8000, 0x4}, [0x115ff983, 0x2, 0x100000001, 0x0, 0xd, 0x0, 0x1000]}}, @name="71d266e9d8b83dac280c01047bcf3e4c7adc2bc9b49076a90f6104841a1433ee6367a9c9f2755f13eb49c25c8600bc5fc0e7a8b5bd781efd744898be90c8edb0bb7ce147d7ced7a1c0433074f93c0b06d7d1c9c267a5233ee368c781cc7257c40bda57e0f07d397e4cdc906f54a4143074f2da52147e8832a863ba5b9330c90db1fcaf485ff31f49681cafeb89eea3b133e976630a383b9f2d44eac6c7ffb3fde8e633fe951e29a2ee57fde5797c20a9e0390f946f612d488d00d7a09986bbcad10043c20f63ffc74ae7152b2ef8e04b6d1af46c5744328838360e011eff407e0d66f51a5dc59de7d5bd9bded28a6ba176159d45466acca9a02168a7b86aee61bf82d7aa4ae2b2e2f4e3a3f613242e1f6855ba3a0b5978589f77bfa4cd99485fa4154a321fa3c9cf894184714c7e43a11a52b72fb5387975937b4f26e5d99bf9b1259fea536d06fa74a8c88ea1aec484ad5ad9123df71824a5d5b4be8d2be1ed5c0673b5ba4eb930b89c02712e44112871b2a0ad007f56e08c75d3608ee6983fd02ad4584a79b642d9191ea6a2693641e2941c8b61aab07b1497f57766cc43927d75ff1990c8099ec4edd941b3894a24dbf7ffb7a94c02e901ed6ec686fe23f5ed426a5197381d0d366fe81de954aac22f712bc4213b14d5474e54c716f00d8749fee8956f6f7050c515bb81477f490f68a25b06ebe72667ada44ff1ba159974f26bced1281aea9db21f5caaba4e493d85baa5c840820fe2ebda562e62b56f3c5defe0bb197ebb9545b6a05bfba4901d4909c1abe9cd2d7b0354085e54151b71676722db0fa1c0d5d2d69e17a4cdc21c2d3d0ce36d79a37be905677f97481136561344b2cb7ba34130a6d92f8dcb775bc988d0274630f8c992bc211d866233758f1b7b93235f92422a4ed259604b45592679e091d068772b8a71d8af6e9019f2bec3dbf359384b71be450beeb372d21a64463767beb407ec078c6ea6b30b4d55ff33d7f035e3ca4fc5925dc26a9a2e97e7c8957ecf206bc570f0cb7c4db2625bbfdeb98bb841847df1f739ddb5b9a24171c062f2ceab0f9e95b0dc8280fb7c32f59ba1f024158a15bfaa89c86ddbbf79ae02003d325662779d8abff53075191b3ec97cb52c3f4a59ca000684274300dc56515c38004c07f4cc53b7be5a3b239e843f231e7186b502399f33dbe8bfb6928705ad6845db4b61f73a7e5681932f829e04e757c6205b975f8cfb7ba4c567798c114e4f0c44d442b8f04aa7c9d62b1c7114bbefcb0fff820a172e6d9cc9034dc7474b30cc9cd526bd7a75b733fc44f67fc66433ffd763ecd45300795d3214c74c98d519ea725df1467203981a95602f21d8fcf1b678e5bf8909fe9debc533bf07a0e1d76f8cc456c599f2eba903d9ffc2bb20dff7866244df8f976de684f444efdb691b3668bd9914e76ea0aaf94c1fb670d9f2bbd749d38c6ef18f0cca205829f5534b3d27fe8c022e7010c691d0acbc185398764f6399e686a7a84adb38488c698d9ef1401492a71ec81c7434ca49da3fe6cba7719dcc0987d4ff3da44b8b41df450e0697ee62a68890edf08234a9fd55d7d5823079fd8053e538a5cbd0b53c44cd27dad5024772b5bb5d301302c5696ccd68cdc7d919f8594c464c5af4752533c0a4bdf88a03d612758283b73b6ab4ea225ad28d71a7fd5b911985f61871348ca9d1aca2534cf13bd397c16f696bda904aa1958db38d9820a2906492f02ab7f1ff4222ae41787caa2784ff1e3ac3da8334043702ceeea597f25336ee5c0078a24df1486eb2edb6b73e05fe0076b307cbcec35382d97bde20d522137c14b066eed898a6c2c45160fa15a59a591f208b00e5892e0877c41e5ff0dbaaf529b774519623b8e115d48ab102f55bac37f82745f546e075be0689e0fc7ed617753c093c31b576b70f327de50954fbbad64127e2d06a2391acae0d3050fec8affce2abfe92092be5a71688404916aebee60e7eb9f9f967252ecd487839e2a130f05916c5a5cdb4d5bca66cb017a7826ff878b44952312a73fbc3a20aed5e423949c270625268361dee68e27bb213acb578b7761be36ff2083ab2d9ecb7785d29e9f57d29df56e569d06b7ee3c86b6790ae623e72e1cb5222304c8faa18c34d026c020a25b400a00c298b691b4f264f7be5dbc6dcd54cc9ab5b8640b6309c3813c7c24bdce5b935b07320eee1b9efb773ac358863e08e118c824d5b5e98006ace1827c06cd85415f25f3c5d114b9ade83f4eb7395318ea91b26f463211fe87950f026d390602bae9d0fd3edf781a67722362cace32eec8cc08b9ba16e75151f1b12ff367a2d0d92221dafdc7d40168f995cb9fbff9709598f7e8e9c2fe994f1e70772780c58eb3a7bb7d6ec1095ae176c7aca98fd914d3f52a2c62d40b0554bcefb3957fa5858c919d5a24c32f7dee177e347184737d599af1b6fbcc8b457de7d6ab4fb4443be45f44fac68954ae78b5fee52624a91ad1ebf82c8c5ca2914c55b05d495ff179ec4dd25075f042d9b7b896d21ec2d80868e12b426e7fb35d51c68ec1a6870ae82ef1cf84cc1144ef20ba17fa152957d7b47e83e0c4090721e81a89d642788a6023c5204fef882e2971ea491f3abf4711057e3e104d3506481893b846c8dc08779fd5b08dcaba2261ee9ef03f8f2a254b4ad8819edf3c21994238bd29d1a847bd5af5111eb96b613106f3f3b9e001c035b1509e63b0fcd59eb0bb851d10b91224fea6e6308409f24444029df2eb86e523860f88240b7e98e6bc58da88306cab208044f841fab3795ab0f210f221b27647cea76c7e3d39c30c08edd5a8e46aa5163bb40c5a3af05de6316c48ce86ef53dabe373c29825a278eb187bb8051807184682da65ee79dc71ac84bed3b91de7304111bfa1c7114d6370d5c54bde833f96b6a47c7b96a2990ee28a951f63364be0a08a29cfd238788cab1cf597fccb32ec63e41754bcef08fcd9ae300adcd70853f8256c9f93a910452f9a8aa79c195ff5111c806f4a202376b3fc6f174a48630d502558e14993dc3e5f31b0b14ed5d85c8a6521a807cfadb2d107d0c15b00fa128c61319e6c492eb67ede8867fc0bd971194e7445444c5a67386f00a4c4673c20cc6a1063c72a5f889d95314fb3bf199901d670cc6f37388f068efcb9546735b73fc98feb258d214db4c62221469d4935f79e0726a36014b3c05aeb97558dddb3aaf23acf62d39899d04a1d3704f5c6e078269a49afa8ba508f5792465103aa55579824a0932e2931bd7a7ff72bb37540fa5be762edf9082b44e7b80d6325ba142f66c0ec375e57f0ed5ff44a1aa7790a2595dad537678360180b0b47f9465ce00a2266e01987191dc235b3049fdbeea717d54a73fe98d6acc0b807ab93ca99e68323d0a7574555f8931be9897fbaf6e5fc6d1ea4a35de1cf4a01b05204e45353a372a32de99842cb3479a534e8e4a6fd4fdf663096ef2bc6d523707c12f07ce9c8fd2f791994b1dcf073f36c3285efb61d2773ed0f69517d718d9829425613cd4789ef5ebf3251ccb3926099d3d9e30b6690db7b81dca131bdf402c12262a1a54a0084433570baffbf79abbca2e6b02d9e1956430f02f8dddaf92a4cef7248fe4171a9da01983726161cff164c1bb6b259a61d434ccac4d441df8aa2135318f12a7022ca35892ac9ba224147530e761ed0702b649b3d3dba06b1ebddb810e524ed995772fad9e06e7894c31060015ea262e5875559f6f9c6a280096d22860c30b8d77711854cfc46818504e62ed260508b009e674af0543782283b4dbfcb9a966f263cf0dd1ce98deb3f98ad1d37d0b637bac7601df2941c7a6583820cf1379f22bb7ff9d9a7345b6060ca0d9572e68e06486d79993c0b64d95f8b3eb4959240db7609bd80eba7b0af213ee7ff1ab29e326932f72d6de522d48453bc99ceec6f6c982f47c4b0931f10455bfeccfcd4baf3bf45c98f90d8f26fbf1d7024de077c98af7c1d6d6f8a95720c49dd0b080c49d5b13d181239283eb413d5547d82d2f67be99142d16e18799b6300d13f5d880f903197c62b493deb23a5b996d431c220110a3f8e3733d70d0524e8f0d27ef05d4b88e3071bb52a6fc60bda14140a56b63b87861a848328b6402277342098c7068ba039640b8e77402e3992680be9e790b64bedd6c6a1e14197767255f439d5c02c4afc7358617d0298f68791f37917dbd89e9be1e8370f56512d6a235efa984f746c2f7e92af53f514680b5dd72f596ab1d6f0c4bfef359f80c3e80af8ab7a8fadfa1bad1a62bbf2b1607443cc526e5510d6961b8f70381a9c7ab83ba040cb3b4fd3c8c637f077684281c26eef49e59cb722385f5d416dc866622b50f5139524a40c9c8b86beecfc220b368b341fd653d3c50ffd4b6406dcd015aca92d608d39865764131f729fd56d9e252334e002d30f1574cd37e649fc64cf625b7d855e603a674d4f912f10b2062f70d8631b7d31cff463e4a053dc418cc5212730cabdaf5c58cbd2e548586995cbc48b883989f177ae6b6eee365732636f80e6768107b700e2af8813035ce8f382542a65da5ec35983bcf74d38d0f5965c07e792521c7ac15ff3f5d8e1fdb2d75a9a8caa6a2b5126ec7eb5ca8ef6d47b194e3a30377fe46b503e3ab51426b7c7bb10a8d59342eab5e9ebf8c904f0a632490d917a9d08a610d837b40d248cb27f1ffcc52dd8dfeef7cfcca16d6b4cd7c80c8e57e0d5d7ebe5249cd29b69a54628f1a0e0e58853719badc91d772e6e9c1e61f235a6e6bd08bc06bc3d6a3087db6023d2467719d0fad1b69e29c4b292b01bc99cf11f089bf59255de045d0fd8b8bc823f863a8501f70fb684babe1bc583be500d7ce06f6452e30c0d761dc891905462199fa902c03999ee9b9d40fdc1f4cd969c04e810481a220e7597b82b217bd71c06551739a219c14071e7bceb11620ddc7326a95638a94b3c8bd7ac77a8960170711bf1e9095701477a777800983dd44f8fbb247171b6f15f508a4342cf240e0e815a2417c73630582704dc9656bd2e3a1105e1ab536e35b15d435a4606899cb9db010a9178e044acba1feb1d7bdde0e9425abfc528545b274d5e51c1606140d46a65863a4089c2d6e95bc1d008260a11fb998b6017006bb65ae37f322020fc92a5bf87143ccedf53224cada24a2355195f7287435520cd997cd61a3b1ad531dd378b3b05a45318cbb43c45cbd73e1be7d23599cfa9a503ac420b79ab18e88ef5db419cb6c33817f20958da24a562a6010c47ff363c4790fd02ba0fe0d32e92f2b9d0e5eae4582f97dbac7d0228864a397884da7699dd800f8f0216cc9d17927db4d6412687079eae212b2b88b8345c2297a1e6ae9866afcd1a5fc0d16a2e0999da17f4ae62e9655dce3fc19a7432948ff4f8db2ccec819e0e03a08397f4940826576df3f6eadf2f1a8aa7c2a3c9ce5a4a06d54270b3a4038a19201e8cf52387b76ecc5ea164e40dadc17ed4796dc7b8e0f9a9d061fabda00109e70e888d0e21ab9d12ccd4bcdea56ae24e870d852690923205c90ba4da7170830713955ca4351de8d4b66314cef993bea416613e3e1bf35186113f18a78b49d50a5eb120030bbc8b8bded414452ccc9b939e747364a812a822859bf803ed42f748962ff058578488461d0300dfd2f26c66ca291eff82ee4d9d980e076ad0d9c39bb56bae4098ac0b309dc6da99405ca4e1e"}) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x18) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x8480, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r7, 0x3b87, &(0x7f0000000080)={0x18, 0x1, 0x0, 0x0, r8}) ioctl$IOMMU_IOAS_MAP(r7, 0x3b85, &(0x7f0000000040)={0x28, 0x2, r8, 0x0, &(0x7f0000000140)="a3", 0x1, 0x4}) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r6, 0x54a3) fchdir(r0) write$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8943, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001680)={0x10ac, 0x40, 0x1, 0x7fffc, 0x804, {0x1}, [@nested={0x101c, 0xcb, 0x0, 0x1, [@nested={0x4, 0x8}, @typed={0x14, 0xae, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @generic="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"]}, @generic="be72598524e0ee3905e7504f14aeff538bb7c1f0a2a94c22c8bbaa4c99753262abd75f2287d7d5d18d4f7c9c228be87c082ff790cbc4fed56b5278d98263613aa81a5130e45834cc6b27e37d561f9ace8d3707d4b75d530355fb08a982f42ae7e39dbeedf119559736872bba2fa0", @typed={0xc, 0x2, 0x0, 0x0, @u64=0x4}]}, 0x10ac}, 0x1, 0x0, 0x0, 0x404c861}, 0x4008094) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r3) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) 1.397936625s ago: executing program 2 (id=525): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000000)=ANY=[@ANYBLOB="6e61740000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000300"/104], 0x68) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000640)=0x46) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f00000006c0)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000680), 0xffffffffffffffff, 0x0, 0x0, 0x1}}, 0x20) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x99b}}, './file1\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1, 0xe, &(0x7f0000001a40)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x84da, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1}, 0x10}, 0x94) openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x141, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x9, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="e0ceb7948822070000000000000000000000000000950000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @cgroup_sock=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x11c0, 0x80000) open$dir(&(0x7f0000000000)='./file4\x00', 0x2601, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file4\x00', &(0x7f0000000380)={0x8c641, 0x0, 0x12}, 0x18) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x100000d) open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000300), &(0x7f0000000100), 0x8, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendto$inet6(r1, 0x0, 0x0, 0x24008000, &(0x7f00000001c0)={0xa, 0x2, 0x20398, @empty, 0xffffffff}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='vegas', 0x5) shutdown(r1, 0x1) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x80000) socket$can_bcm(0x1d, 0x2, 0x2) 1.124439317s ago: executing program 4 (id=526): pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r0, &(0x7f00000002c0)=ANY=[], 0x200002e6) fcntl$setpipe(r0, 0x407, 0x1) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) keyctl$negate(0xd, 0x0, 0xfffffffffffffffe, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, 0x2}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_SET(r4, 0x0, 0x8811) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000700)=@abs={0x0, 0x0, 0x10000}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, &(0x7f0000000480)={0x0, 0x2, [0x1f0, 0x80000100, 0xb16, 0x146]}) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)={0x1c, 0x7, 0x6, 0x401, 0x0, 0x0, {0x1, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48000}, 0x4000080) landlock_restrict_self(0xffffffffffffffff, 0x5) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000002280)=@newlink={0x44, 0x10, 0x403, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x4}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACSEC_INC_SCI={0x5}, @IFLA_MACSEC_SCB={0x5, 0xb, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24008000}, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000004c0)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003402e60000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x60044084) 495.493908ms ago: executing program 3 (id=527): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="306d54f2", @ANYRES16=r2, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r4, @ANYBLOB="08002600940900000400b8000800b70099000000"], 0x30}}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="6a68000028bd7088c000fedb020085318300000000080001003400000008", @ANYRES32=0x0, @ANYBLOB="0c0099000600000032000000"], 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) r5 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) fcntl$setsig(r5, 0xa, 0x21) fcntl$setlease(r5, 0x400, 0x1) creat(&(0x7f0000000100)='./file0\x00', 0x0) close_range(r5, 0xffffffffffffffff, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x1, 0x1, 0x1000, 0x1000, &(0x7f0000fe6000/0x1000)=nil}) ioctl$KVM_RUN(r6, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, r6, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, 0x0}], 0x1, 0x7a, 0x0, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000440)={0x6a8, r2, 0x400, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x2a39f8de, 0x6d}}}}, [@NL80211_ATTR_TID_CONFIG={0x680, 0x11d, 0x0, 0x1, [{0x644, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x148, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xa4, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x2, 0xe2, 0xfffc, 0x6, 0x7, 0x6400, 0x2]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x401, 0x6, 0x7, 0x8, 0x1, 0x7fff, 0x7f, 0x4]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x5, 0x48, 0x4, 0x2, 0x48, 0x30, 0x9, 0x0, 0x1b, 0x6, 0x3, 0x9, 0x16, 0x22, 0x2, 0x2, 0x24, 0x18, 0x1b, 0x24]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xe2, 0x3, 0x0, 0xfffa, 0x6, 0x0, 0x5, 0x1000]}}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x9, 0x5, 0x6, 0x0, 0x48, 0x18, 0x16, 0x18, 0x6c, 0x12, 0x4, 0x2, 0x12, 0x24, 0x5, 0x6, 0x5, 0xc, 0x4, 0x18, 0x3, 0x12, 0x5a, 0x1, 0x36]}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x3, 0x5, 0x6, 0x1b, 0x0, 0x16, 0xb, 0x6c, 0x6c, 0xc, 0x48, 0x18, 0x16, 0x2]}]}, @NL80211_BAND_5GHZ={0x4}, @NL80211_BAND_6GHZ={0x9c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x6, 0x6, 0xb6e1, 0x440, 0x0, 0x800, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0xa, 0x67f, 0x3, 0xa3, 0x1, 0x80, 0xd]}}, @NL80211_TXRATE_HT={0x3e, 0x2, [{0x3, 0x3}, {0x3, 0x1}, {0x2, 0x7}, {0x0, 0x1}, {0x5, 0x3}, {0x1, 0x4}, {0x6, 0x2}, {0x2, 0x7}, {0x5, 0x1}, {0x2, 0x6}, {0x4, 0x5}, {0x5, 0x6}, {0x0, 0x2}, {0x5, 0x4}, {0x6, 0x3}, {0x5, 0x1}, {0x0, 0x8}, {0x2, 0x9}, {0x0, 0x4}, {0x2, 0x9}, {0x3, 0x1}, {0x4, 0x3}, {0x3, 0x5}, {0x5, 0x9}, {0x0, 0x6}, {0x7, 0x7}, {0x1}, {0x6, 0x5}, {0x0, 0xa}, {0x2, 0x5}, {0x5, 0x8}, {0x4, 0x5}, {0x1, 0x4}, {0x5, 0x7}, {0x4, 0x3}, {0x2, 0xa}, {0x5, 0x2}, {0x1, 0x3}, {0x4, 0x6}, {0x2, 0x8}, {0x2, 0x4}, {0x0, 0x3}, {0x5, 0x1}, {0x5, 0x4}, {0x0, 0x7}, {0x1, 0x2}, {0x0, 0x8}, {0x1, 0x6}, {0x1, 0xa}, {0x0, 0x2}, {0x6, 0x2}, {0x1, 0x1}, {0x5, 0x4}, {0x2}, {0x1, 0x1}, {0x1}, {0x2, 0x5}, {0x7, 0x2}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x97e4, 0x0, 0x6, 0x1000, 0xb42, 0x3, 0xde34, 0x3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x6, 0xdae2, 0x9, 0x943, 0x2, 0x101, 0x1]}}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x210, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x50, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x21, 0x1, [0x5, 0xc, 0x24, 0x1b, 0x1b, 0x2, 0x77, 0x6c, 0x60, 0xc, 0x30, 0x36, 0x30, 0x7, 0x12, 0x3, 0x6, 0xb, 0x60, 0xb, 0x3, 0x3, 0x9, 0x1b, 0x1, 0x30, 0x6c, 0x16, 0x30]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x36, 0x12, 0xc, 0x48, 0x6c, 0x24, 0x5, 0x1b, 0x1, 0x16, 0xc, 0x16, 0x48, 0x18e9fa9a1545b8de, 0xc, 0x1b, 0x6c, 0x5b4eddc150ae8a02, 0xb, 0x3]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x5c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x20, 0x2, [{0x7, 0x7}, {0x5, 0x5}, {0x3, 0x9}, {0x7}, {0x3, 0x3}, {0x7}, {0x7, 0x7}, {0x6, 0xb}, {0x0, 0x7}, {0x2, 0x8}, {0x0, 0x6}, {0x0, 0x8}, {0x5, 0x9}, {0x6, 0x7}, {0x1, 0xa}, {0x2, 0x7}, {0x0, 0x5}, {0x3, 0x2}, {0x1, 0x2}, {0x1, 0x7}, {0x6, 0x3}, {0x3, 0xa}, {0x3, 0x1}, {0x1}, {0x2, 0x6}, {0x5, 0x5}, {0x2, 0x4}, {0x1, 0x9}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x2, 0xfff9, 0x40, 0x5, 0x2, 0xa, 0x7]}}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x48, 0x6, 0x24, 0x24, 0x48, 0x14, 0x62, 0xb, 0x16, 0x12, 0x9, 0x1b, 0x60, 0x1, 0x1, 0x9, 0x34, 0x36, 0x3, 0x16, 0x6, 0xd5649324a34538c8, 0x1]}]}, @NL80211_BAND_6GHZ={0x1c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x17, 0x1, [0x0, 0x12, 0x1, 0x18, 0xc, 0x3, 0x3, 0x4, 0x36, 0x18, 0x1, 0x60, 0x3, 0x16, 0x30, 0x30, 0x2, 0x12, 0x4]}]}, @NL80211_BAND_5GHZ={0x3c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x19, 0x2, [{0x4}, {}, {0x2, 0x8}, {0x2, 0x1}, {0x1, 0xa}, {0x0, 0x5}, {0x7, 0x1}, {0x1, 0x8}, {0x0, 0x7}, {0x6, 0x4}, {0x2, 0x8}, {0x2}, {0x4, 0x8}, {0x4}, {0x1, 0x3}, {0x5}, {0x6, 0x2}, {0x1, 0x6}, {0x5, 0x9}, {0x1, 0x8}, {0x6, 0x9}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x1, 0x2, 0x200, 0xc000, 0x745, 0xe, 0x200]}}]}, @NL80211_BAND_2GHZ={0x60, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3e, 0x2, [{0x1}, {0x1, 0x3}, {0x7, 0x5}, {0x0, 0x1}, {0x4, 0x3}, {0x1, 0x1}, {0x1, 0x2}, {0x7, 0x3}, {0x6, 0x7}, {0x7, 0x8}, {0x0, 0x7}, {0x0, 0x1}, {0x6, 0xa}, {0x2, 0x1}, {0x0, 0x4}, {0x1, 0x6}, {0x3, 0x4}, {0x0, 0x8}, {0x0, 0x5}, {0x5, 0x5}, {0x7, 0x9}, {0x4, 0x2}, {0x7, 0x7}, {0x3, 0x1}, {0x7, 0xa}, {0x5, 0x2}, {0x6, 0x2}, {0x5, 0x9}, {0x2, 0x4}, {0x4, 0xa}, {0x5, 0x9}, {0x7, 0x5}, {0x6, 0x9}, {0x7, 0x8}, {0x7, 0xa}, {0x6, 0x8}, {0x5, 0x4}, {0x7, 0x3}, {0x3, 0x3}, {0x0, 0x8}, {0x5, 0x1}, {0x5, 0x2}, {0x7, 0x8}, {0x6, 0x9}, {0x1, 0x6}, {0x1, 0x9}, {0x6, 0xa}, {0x1, 0x8}, {0x2, 0x7}, {0x4, 0x2}, {0x1}, {0x5, 0x3}, {0x0, 0x6}, {0x3, 0x9}, {0x5, 0x5}, {0x1, 0x5}, {0x3, 0x5}, {0x3, 0x9}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x4, 0x36, 0x2, 0x60, 0xc, 0x16, 0x6c, 0x36, 0x45, 0x6, 0x18, 0x60, 0x16, 0x2, 0x1, 0x30]}]}, @NL80211_BAND_60GHZ={0x58, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x5, 0x4, 0xf7f, 0x9, 0x7, 0x1, 0x100]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0xe, 0x1, 0x62, 0xa0d0, 0xe305, 0x8, 0x3]}}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x4, 0x1}, {0x5, 0x2}, {0x0, 0x6}, {0x4, 0x1}, {0x0, 0x1}, {0x2, 0x3}, {0x1, 0x5}, {0x2, 0x1}, {0x0, 0x7}, {0x6, 0x2}, {0x2, 0x4}, {0x7, 0x6}, {0x0, 0x8}, {0x2, 0xa}, {}, {}, {0x2, 0x8}, {0x5, 0x8}, {0x6, 0x1}, {0x4, 0x3}, {0x4, 0xa}, {0x2, 0x8}, {0x1, 0x5}, {0x3, 0x5}, {0x1, 0x1}, {0x4, 0x1}, {0x5, 0x3}, {0x6, 0x2}, {0x1, 0x4}, {0x1, 0x1}, {0x6, 0x4}, {0x3, 0x3}]}]}, @NL80211_BAND_2GHZ={0x50, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x20, 0x1, [0x12, 0x12, 0x60, 0x3, 0x36, 0x36, 0x24, 0x2, 0x31977d9be6dcd326, 0x0, 0x5, 0x2, 0xc, 0x27, 0x5, 0x1, 0x2, 0x36, 0x16, 0x4d, 0xb, 0x60, 0x36, 0x36, 0x1b, 0xb, 0x3, 0x36]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff, 0x5, 0x9, 0x6, 0x748b, 0x5, 0x8, 0x8]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x9, 0x2, 0x80, 0x8001, 0x3, 0x1]}}, @NL80211_TXRATE_LEGACY={0x4}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x56}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x2e0, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xe4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x0, 0x9, 0x4, 0x2, 0x480, 0x100, 0x40]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x2d, 0x2, [{0x5, 0x1}, {0x6, 0x4}, {0x0, 0x6}, {0x3}, {0x7, 0x8}, {0x3}, {0x0, 0x3}, {0x1, 0x1}, {0x5, 0x8}, {0x1, 0x6}, {0x1}, {0x0, 0x2}, {0x1, 0x6}, {}, {0x1, 0xa}, {0x5, 0x5}, {0x4, 0x7}, {0x2, 0x6}, {0x6, 0x8}, {0x4, 0x6}, {0x0, 0x1}, {0x0, 0xa}, {0x1, 0x2}, {0x5, 0xa}, {0x4, 0x4}, {0x4, 0x7}, {0x5, 0x4}, {0x7, 0xa}, {0x7, 0x5}, {0x6, 0x2}, {0x4, 0x4}, {0x4, 0x3}, {0x1, 0x9}, {0x1, 0x6}, {0x6}, {0x5, 0x7}, {0x0, 0x6}, {0x7, 0x8}, {0x1, 0xa}, {0x1, 0x9}, {0x2, 0xa}]}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x30, 0x3, 0x1b, 0x1, 0x60, 0x1b, 0x60, 0x36, 0x5, 0x30, 0x60, 0x0, 0x12, 0x12, 0x6f, 0x12, 0x4, 0x6c, 0x2c, 0x36, 0x36, 0x24, 0x3, 0x48, 0xb, 0x6]}, @NL80211_TXRATE_HT={0x42, 0x2, [{0x6, 0x5}, {0x2, 0x2}, {0x3, 0x3}, {0x1, 0x6}, {0x7, 0x2}, {0x6, 0x6}, {0x3, 0x7}, {0x1, 0x9}, {0x5, 0x4}, {0x6, 0x2}, {0x3, 0x8}, {0x5, 0x7}, {0x4, 0x8}, {0x1, 0x8}, {0x1}, {0x0, 0x1}, {0x6, 0xa}, {0x4, 0x4}, {0x4, 0x4}, {0x1, 0xa}, {0x0, 0x2}, {0x2, 0x3}, {0x7, 0xa}, {0x6, 0x8}, {0x0, 0x2}, {0x0, 0x3}, {0x6, 0x3}, {0x3, 0x4}, {0x4}, {0x0, 0x5}, {0x5}, {0x5, 0x3}, {0x3, 0x7}, {0x3, 0x4}, {0x3, 0x5}, {0x7, 0x8}, {0x0, 0x3}, {}, {0x2, 0x5}, {0x0, 0x5}, {0x6, 0x4}, {0x7, 0x2}, {0x7, 0x7}, {0x0, 0x9}, {}, {0x0, 0x7}, {0x4, 0x1}, {0x4, 0x1}, {0x2}, {0x2, 0x7}, {0x7, 0x2}, {0x0, 0x6}, {0x5, 0x7}, {0x0, 0x3}, {0x4, 0x5}, {0x1, 0x6}, {0x1, 0x2}, {0x7, 0x7}, {0x3, 0x5}, {0x1, 0x7}, {0x0, 0x9}, {0x0, 0x9}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x1b, 0x36, 0x12, 0x18, 0x1, 0x18, 0x12, 0x9, 0x18, 0x48, 0x6, 0x36, 0x6, 0x3, 0x4, 0x12, 0x2, 0x32, 0x36, 0x25cb05a8999aa677, 0x1, 0x16, 0x21, 0x6c, 0x9, 0x36, 0x3679d2c9347f73ef, 0x2]}]}, @NL80211_BAND_5GHZ={0x58, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x1, 0x3, 0xc, 0x5, 0x4, 0x6c, 0x36, 0x3, 0xc, 0x4, 0x16, 0x36, 0x6, 0x36, 0x36, 0x1, 0x16, 0x24, 0x13, 0x16, 0x3, 0x18]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xb801, 0x0, 0x4, 0x7, 0x7ff, 0xe, 0x3, 0x40]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x276, 0x8, 0x1000, 0xfff9, 0x8, 0x7c, 0x5, 0x9]}}]}, @NL80211_BAND_5GHZ={0xec, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x7, 0x8, 0x3, 0xa62c, 0x8, 0x5, 0x100]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x4, 0x7}, {0x7, 0x4}, {0x3}, {0x4, 0x1}, {0x6, 0x4}, {0x6, 0x4}, {0x6, 0x7}, {0x3, 0x4}, {0x3, 0x2}, {0x7, 0xa}, {0x2, 0x3}, {0x5, 0x9}, {0x7}, {0x6, 0xa}, {0x3}, {0x0, 0x9}, {0x3, 0x3}, {0x0, 0x8}, {0x1, 0x5}, {0x7, 0x7}, {0x6, 0x7}, {0x4}, {0x4, 0x5}, {0x2, 0x1}, {0x7, 0x3}, {0x1, 0x9}, {0x4, 0x4}, {0x0, 0xa}, {0x2, 0x2}, {0x3, 0x9}, {0x2, 0x3}, {0x6, 0x4}, {0x4, 0x6}, {0x1, 0x6}, {0x1, 0x4}, {0x1, 0x2}, {0x2, 0x8}, {0x3, 0x9}, {0x7, 0x6}, {0x3, 0x4}, {0x3, 0x3}, {0x7, 0x5}, {0x4, 0x6}, {0x1, 0x9}, {0x1, 0xa}, {0x4, 0x2}, {0x7, 0x5}, {0x1, 0x4}, {0x6}, {0x3, 0x4}, {0x6, 0x8}, {0x0, 0x7}, {0x0, 0x5}, {0x2, 0x4}, {0x4}, {0x2, 0x5}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x8001, 0x4fc, 0xa, 0x9, 0x89ad, 0xcef7, 0x9]}}, @NL80211_TXRATE_HT={0x22, 0x2, [{0x5, 0x3}, {0x1, 0x7}, {0x5, 0x1}, {0x0, 0x5}, {0x4, 0x1}, {0x1, 0x7}, {0x0, 0x2}, {0x4, 0x6}, {0x7, 0x4}, {0x3, 0x2}, {0x2, 0x4}, {0x1}, {0x1, 0x9}, {0x2, 0x9}, {0x1, 0x1}, {0x3, 0x6}, {0x2, 0x5}, {0x1, 0x3}, {0x0, 0x5}, {0x1, 0x7}, {0x3, 0x5}, {0x3, 0xa}, {0x5, 0x3}, {0x1, 0x2}, {0x4, 0x2}, {0x5, 0x7}, {0x3, 0x1}, {0x2, 0x8}, {0x5, 0x8}, {0x7, 0x8}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x9}, {0x4, 0x6}, {0x7, 0x8}, {0x5, 0x6}, {0x3, 0x9}, {}, {0x4, 0x6}, {0x5, 0x8}, {0x3, 0x3}, {0x6, 0x8}, {0x1, 0x1}, {0x1, 0x8}, {0x1, 0x8}, {0x6, 0x8}, {0x0, 0x2}, {0x5, 0x1}, {0x0, 0x6}, {0x6, 0x7}, {0x0, 0x3}, {0x2, 0x7}, {0x6, 0x6}, {0x3, 0xa}, {0x5}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x21, 0x2, [{0x7, 0x2}, {0x1, 0x5}, {0x1, 0x9}, {0x1, 0x8}, {0x5}, {0x2, 0x7}, {0x2, 0x7}, {0x5, 0x9}, {0x1, 0xa}, {0x0, 0xa}, {0x6, 0x2}, {0x4, 0x4}, {0x7, 0x3}, {0x3, 0x4}, {0x5}, {0x7, 0xa}, {0x3, 0x1}, {0x1, 0x4}, {0x1, 0x6}, {0x2, 0x9}, {0x7, 0x6}, {0x4, 0x5}, {0x1}, {0x6, 0x1}, {0x2, 0x1}, {0x7, 0x7}, {0x4, 0x5}, {}, {0x2, 0x7}]}]}, @NL80211_BAND_5GHZ={0xb4, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x2, 0x4, 0x81, 0x7ff, 0xffc0, 0x1, 0x100]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x1c, 0x2, [{0x3, 0x6}, {0x4, 0x2}, {0x2, 0x3}, {0x5, 0x2}, {0x1, 0x6}, {0x2, 0x9}, {0x1, 0x4}, {0x6, 0x7}, {}, {0x5, 0x5}, {0x5}, {0x6, 0x1}, {0x1, 0x5}, {0x1, 0x5}, {0x5, 0x6}, {0x6, 0x4}, {0x3, 0x6}, {0x3, 0x6}, {0x4}, {0x1, 0x9}, {0x7, 0x8}, {0x5}, {0x4}, {0x2, 0x9}]}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0xc, 0x12, 0x16, 0x36, 0x12, 0x12, 0x33, 0x18, 0x60, 0x4, 0x36, 0x16, 0x60, 0x5, 0x30, 0x48, 0x6c, 0x18, 0x9, 0x48]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0x8, 0x1, 0x3, 0x1ff, 0xff, 0x8, 0x400]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xff, 0x8000, 0x7, 0x401, 0x6, 0x8, 0x9, 0x6]}}, @NL80211_TXRATE_HT={0x13, 0x2, [{0x5, 0x6}, {0x0, 0x7}, {0x5, 0x5}, {0x4, 0x2}, {0x1, 0x5}, {0x1, 0x3}, {0x0, 0x5}, {0x1, 0x4}, {0x4, 0x2}, {0x4, 0x5}, {0x4, 0x3}, {0x0, 0x6}, {0x6, 0x7}, {0x4, 0x4}, {0x1}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x2, 0x3, 0x6, 0x9, 0x7ff, 0x5, 0x2]}}]}]}]}, {0x4}, {0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3ff}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}]}]}, 0x6a8}, 0x1, 0x0, 0x0, 0x80}, 0x40000) 367.468704ms ago: executing program 2 (id=528): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x1c8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0xc00, 0x0, 0x0}, 0x50) 359.540173ms ago: executing program 1 (id=529): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) syz_open_dev$video(&(0x7f0000000100), 0x3, 0x2000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) write$dsp(0xffffffffffffffff, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb62", 0x1c) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8801}, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000020030005007217440502000000e0000001"], 0x40}}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) 257.149049ms ago: executing program 2 (id=530): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) pread64(r0, &(0x7f00000001c0)=""/200, 0xc8, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r0}, &(0x7f0000000000), &(0x7f0000000040)=r0}, 0x20) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000340), &(0x7f0000000380)=0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb01001800000000000000"], 0x0, 0x26}, 0x28) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x1000, 0x3, 0x1}, 0x18, 0x0) landlock_restrict_self(r2, 0x700) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="100025bd700006001a004e210000050006005e00000014001f0020010000000000000000100206001d0000000000"], 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x880) syz_open_dev$usbfs(&(0x7f0000000100), 0xb, 0x10ea00) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r4 = fanotify_init(0x200, 0x0) fanotify_mark(r4, 0x1, 0x4800100b, r3, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x0) sendfile(r3, r5, 0x0, 0x4) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmmsg(r6, &(0x7f00000020c0)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x2041, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) io_uring_enter(r0, 0xd2, 0xb49c, 0xb099c49d816d266d, &(0x7f0000000140)={[0x10]}, 0x8) r7 = add_key$fscrypt_v1(&(0x7f0000000380), &(0x7f00000003c0)={'fscrypt:', @desc4}, &(0x7f0000000400)={0x0, "24d31a04abcb4277062fd2861f1012377b0ef20847ccbfde85f70e8d4da6179f55fe4986bbdd1294be2a2d8e91456c48a5b2e4019b693400bf59303dd67f12be", 0x13}, 0x48, 0xffffffffffffffff) keyctl$unlink(0x9, r7, r7) r8 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r8, 0x40345410, &(0x7f0000000080)={{0x0, 0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r8, 0x80605414, &(0x7f00000000c0)) 105.323287ms ago: executing program 4 (id=531): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, 0x0) open(0x0, 0x1a1342, 0x0) socket$kcm(0x2, 0xa, 0x2) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00222200000096010028193dab0da83a81070900be0035e957120800000b00000400abf3fbaacc043b823336fd03ce9bf3e30bb50ffbca4478f2b353b483c2adeb2f17e07aef1f3d2551f166bfcc1d7f77387ae28945f3c73054b2ac724ca0926acf34736886c7ac390fa2215c5c3fad81a9877a1b8933c311318cc4e3d6c7ab2a1692766ad392bc1b0fdcb27efaa30ce70912b8"], 0x0}, 0x0) 0s ago: executing program 3 (id=532): socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x10, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0xa4000021) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x21800, 0x0) socket$nl_route(0x10, 0x3, 0x0) add_key$user(&(0x7f0000000200), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @thr={&(0x7f0000000100), 0x0}}, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup3(r4, 0xffffffffffffffff, 0x0) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r5, r3, &(0x7f00000000c0)=0x58, 0x5) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000d7"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r6, 0xffffffffffffffff}, 0x0, &(0x7f00000005c0)}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000600)=ANY=[@ANYRES32=r7, @ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r8}, 0x10) utimes(0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}) kernel console output (not intermixed with test programs): it: type=1400 audit(1767324308.139:241): avc: denied { ioctl } for pid=6400 comm="syz.4.119" path="socket:[10150]" dev="sockfs" ino=10150 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 113.487461][ T5935] usb 2-1: Using ep0 maxpacket: 16 [ 113.506321][ T5935] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.521711][ T5935] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.620957][ T5935] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 113.654463][ T5935] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 113.673828][ T5935] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.575060][ T5935] usb 2-1: config 0 descriptor?? [ 114.608732][ T30] audit: type=1400 audit(1767324309.309:242): avc: denied { create } for pid=6404 comm="syz.2.121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 114.897502][ T5973] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 115.001995][ T5935] microsoft 0003:045E:07DA.0003: nested delimiters [ 115.008754][ T5935] microsoft 0003:045E:07DA.0003: item 0 4 2 10 parsing failed [ 115.016542][ T5935] microsoft 0003:045E:07DA.0003: parse failed [ 115.022688][ T5935] microsoft 0003:045E:07DA.0003: probe with driver microsoft failed with error -22 [ 115.128800][ T5973] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.167640][ T5973] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.198655][ T5973] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 115.233562][ T5973] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.260167][ T5935] usb 2-1: USB disconnect, device number 5 [ 115.294092][ T5973] usb 1-1: config 0 descriptor?? [ 115.714642][ T6416] batadv_slave_1: entered promiscuous mode [ 115.859848][ T30] audit: type=1400 audit(1767324310.559:243): avc: denied { connect } for pid=6417 comm="syz.4.123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 116.655538][ T6415] batadv_slave_1: left promiscuous mode [ 116.771652][ T5973] usbhid 1-1:0.0: can't add hid device: -32 [ 116.800555][ T5973] usbhid 1-1:0.0: probe with driver usbhid failed with error -32 [ 116.823926][ T5973] usb 1-1: USB disconnect, device number 4 [ 117.082067][ T30] audit: type=1400 audit(1767324311.759:244): avc: denied { open } for pid=6423 comm="syz.3.125" path="/dev/ptyqa" dev="devtmpfs" ino=129 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 117.221036][ T30] audit: type=1400 audit(1767324311.759:245): avc: denied { ioctl } for pid=6423 comm="syz.3.125" path="/dev/ptyqa" dev="devtmpfs" ino=129 ioctlcmd=0x5404 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 117.828397][ T30] audit: type=1400 audit(1767324312.399:246): avc: denied { unlink } for pid=6429 comm="syz.2.127" name="#1" dev="tmpfs" ino=186 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 118.018234][ T6435] netlink: 'syz.1.126': attribute type 21 has an invalid length. [ 118.162758][ T30] audit: type=1400 audit(1767324312.859:247): avc: denied { unmount } for pid=5824 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 118.238728][ T6436] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 118.470252][ T30] audit: type=1400 audit(1767324313.169:248): avc: denied { create } for pid=6437 comm="syz.0.128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 118.652372][ T6435] netlink: 444 bytes leftover after parsing attributes in process `syz.1.126'. [ 118.715460][ T6435] openvswitch: netlink: Flow key attr not present in new flow. [ 119.105125][ T30] audit: type=1400 audit(1767324313.799:249): avc: denied { mounton } for pid=6459 comm="syz.0.133" path="/22/file0" dev="tmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 119.138351][ T30] audit: type=1400 audit(1767324313.839:250): avc: denied { mount } for pid=6459 comm="syz.0.133" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 119.530780][ T6466] netlink: 'syz.3.134': attribute type 4 has an invalid length. [ 119.538771][ T6466] netlink: 152 bytes leftover after parsing attributes in process `syz.3.134'. [ 119.585104][ T6466] .`: renamed from bond0 (while UP) [ 121.414831][ T30] audit: type=1400 audit(1767324316.109:251): avc: denied { connect } for pid=6470 comm="syz.4.136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 121.440514][ T6479] netlink: 28 bytes leftover after parsing attributes in process `syz.4.136'. [ 121.817144][ T30] audit: type=1400 audit(1767324316.139:252): avc: denied { shutdown } for pid=6470 comm="syz.4.136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 121.858640][ T30] audit: type=1400 audit(1767324316.219:253): avc: denied { read write } for pid=6476 comm="syz.3.137" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 121.963127][ T30] audit: type=1400 audit(1767324316.219:254): avc: denied { open } for pid=6476 comm="syz.3.137" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 122.130761][ T6473] erofs (device loop4): cannot find valid erofs superblock [ 122.198290][ T30] audit: type=1400 audit(1767324316.849:255): avc: denied { unmount } for pid=5823 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 122.570238][ T6493] netlink: 'syz.3.139': attribute type 4 has an invalid length. [ 122.577981][ T6493] netlink: 152 bytes leftover after parsing attributes in process `syz.3.139'. [ 122.997501][ T6013] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 123.075154][ T30] audit: type=1400 audit(1767324317.769:256): avc: denied { create } for pid=6496 comm="syz.4.143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 123.113054][ T30] audit: type=1400 audit(1767324317.799:257): avc: denied { setopt } for pid=6496 comm="syz.4.143" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 123.133961][ T30] audit: type=1400 audit(1767324317.799:258): avc: denied { connect } for pid=6496 comm="syz.4.143" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 123.155344][ T30] audit: type=1400 audit(1767324317.799:259): avc: denied { write } for pid=6496 comm="syz.4.143" laddr=fe80::80db:edff:feb2:6f53 lport=58 faddr=ff02::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 123.178991][ T6013] usb 1-1: config 1 has an invalid interface number: 7 but max is 0 [ 123.194715][ T6013] usb 1-1: config 1 has no interface number 0 [ 123.207858][ T6013] usb 1-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 123.238248][ T6013] usb 1-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 123.260686][ T6013] usb 1-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.302240][ T6013] usb 1-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 123.312484][ T6013] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.327442][ T6013] usb 1-1: Product: syz [ 123.337538][ T6013] usb 1-1: Manufacturer: syz [ 123.347531][ T6013] usb 1-1: SerialNumber: syz [ 123.366517][ T6490] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 123.481639][ T30] audit: type=1400 audit(1767324318.179:260): avc: denied { create } for pid=6498 comm="syz.2.144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 123.502905][ T10] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 123.507670][ T30] audit: type=1400 audit(1767324318.199:261): avc: denied { write } for pid=6498 comm="syz.2.144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 123.587555][ T30] audit: type=1400 audit(1767324318.279:262): avc: denied { watch watch_reads } for pid=6489 comm="syz.0.138" path="/23" dev="tmpfs" ino=136 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 123.608437][ T6490] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 123.677498][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 123.684554][ T10] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 123.692876][ T10] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 123.702761][ T5924] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 123.710704][ T10] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 123.720747][ T10] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 123.730877][ T10] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 123.744321][ T10] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 123.753507][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.829449][ T6013] sierra_net 1-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.0-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:01:07 [ 123.897481][ T5924] usb 4-1: Using ep0 maxpacket: 16 [ 123.904742][ T5924] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.916705][ T5924] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 123.929076][ T5924] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 123.943122][ T5924] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 123.952496][ T5924] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.969875][ T10] usb 2-1: GET_CAPABILITIES returned 0 [ 123.974696][ T30] audit: type=1400 audit(1767324318.669:263): avc: denied { mounton } for pid=6506 comm="syz.4.146" path="/31/file0" dev="tmpfs" ino=180 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 123.975518][ T10] usbtmc 2-1:16.0: can't read capabilities [ 123.998704][ T6507] fuse: Invalid rootmode [ 124.006863][ T5924] usb 4-1: config 0 descriptor?? [ 124.040872][ T6013] sierra_net 1-1:1.7 wwan0: Submit SYNC failed -71 [ 124.079167][ T6013] sierra_net 1-1:1.7 wwan0: Send SYNC failed, status -71 [ 124.107740][ T6013] sierra_net 1-1:1.7 wwan0: Submit SYNC failed -71 [ 124.127628][ T6013] sierra_net 1-1:1.7 wwan0: Send SYNC failed, status -71 [ 124.159880][ T6013] usb 1-1: USB disconnect, device number 5 [ 124.192220][ T6013] sierra_net 1-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.0-1, Sierra Wireless USB-to-WWAN Modem [ 124.196947][ T30] audit: type=1400 audit(1767324318.889:264): avc: denied { search } for pid=5485 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 124.247019][ T6495] usbtmc 2-1:16.0: usb_control_msg returned -71 [ 124.256495][ T5846] usb 2-1: USB disconnect, device number 6 [ 124.285264][ T30] audit: type=1400 audit(1767324318.929:265): avc: denied { search } for pid=5485 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 124.349086][ T6013] sierra_net 1-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19 [ 124.367631][ T5973] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 124.519280][ T5924] microsoft 0003:045E:07DA.0004: nested delimiters [ 124.531358][ T5924] microsoft 0003:045E:07DA.0004: item 0 4 2 10 parsing failed [ 124.539148][ T5973] usb 5-1: Using ep0 maxpacket: 32 [ 124.550166][ T5924] microsoft 0003:045E:07DA.0004: parse failed [ 124.550324][ T5973] usb 5-1: config 0 has an invalid interface number: 110 but max is 0 [ 124.556340][ T5924] microsoft 0003:045E:07DA.0004: probe with driver microsoft failed with error -22 [ 124.569975][ T5973] usb 5-1: config 0 has no interface number 0 [ 124.681691][ T5973] usb 5-1: config 0 interface 110 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 124.709111][ T5973] usb 5-1: config 0 interface 110 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 124.746102][ T5973] usb 5-1: config 0 interface 110 altsetting 0 endpoint 0x8B has invalid maxpacket 28739, setting to 1024 [ 124.759192][ T6521] xt_CT: You must specify a L4 protocol and not use inversions on it [ 124.775795][ T5973] usb 5-1: config 0 interface 110 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 124.785518][ T5924] usb 4-1: USB disconnect, device number 8 [ 124.803311][ T5973] usb 5-1: config 0 interface 110 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 124.813691][ T5973] usb 5-1: config 0 interface 110 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 124.825130][ T5973] usb 5-1: config 0 interface 110 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 124.859954][ T5973] usb 5-1: New USB device found, idVendor=04fc, idProduct=0231, bcdDevice=6f.a9 [ 124.869817][ T5973] usb 5-1: New USB device strings: Mfr=1, Product=237, SerialNumber=2 [ 124.890010][ T5973] usb 5-1: Product: syz [ 124.894334][ T5973] usb 5-1: Manufacturer: syz [ 124.907474][ T5973] usb 5-1: SerialNumber: syz [ 124.953218][ T6530] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 124.968011][ T5973] usb 5-1: config 0 descriptor?? [ 124.989485][ T6509] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 125.013548][ T5973] spcp8x5 5-1:0.110: SPCP8x5 converter detected [ 125.045587][ T5973] usb 5-1: SPCP8x5 converter now attached to ttyUSB0 [ 125.235903][ T6013] usb 5-1: USB disconnect, device number 8 [ 125.313839][ T6013] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 125.384326][ T6013] spcp8x5 5-1:0.110: device disconnected [ 126.119769][ T6565] netlink: 'syz.1.155': attribute type 4 has an invalid length. [ 126.127646][ T6565] netlink: 152 bytes leftover after parsing attributes in process `syz.1.155'. [ 126.163808][ T6565] .`: renamed from bond0 (while UP) [ 126.434746][ T6563] netlink: 4 bytes leftover after parsing attributes in process `syz.0.156'. [ 126.453579][ T6567] fuse: Invalid rootmode [ 127.699192][ T6598] netlink: 24 bytes leftover after parsing attributes in process `syz.1.165'. [ 128.116334][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 128.116352][ T30] audit: type=1400 audit(1767324322.779:285): avc: denied { getopt } for pid=6600 comm="syz.2.166" lport=44116 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 128.719089][ T30] audit: type=1400 audit(1767324323.419:286): avc: denied { ioctl } for pid=6605 comm="syz.3.167" path="socket:[11503]" dev="sockfs" ino=11503 ioctlcmd=0xf50b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 128.825498][ T30] audit: type=1400 audit(1767324323.419:287): avc: denied { execmod } for pid=6605 comm="syz.3.167" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=10971 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 129.032722][ T6617] fuse: Invalid rootmode [ 129.046536][ T30] audit: type=1400 audit(1767324323.419:288): avc: denied { execute } for pid=6605 comm="syz.3.167" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=10971 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 129.228467][ T30] audit: type=1400 audit(1767324323.579:289): avc: denied { ioctl } for pid=6615 comm="syz.3.168" path="socket:[10989]" dev="sockfs" ino=10989 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 130.326589][ T6637] netlink: 'syz.2.171': attribute type 4 has an invalid length. [ 130.335512][ T6637] netlink: 152 bytes leftover after parsing attributes in process `syz.2.171'. [ 131.057632][ T30] audit: type=1400 audit(1767324325.729:290): avc: denied { create } for pid=6652 comm="syz.0.177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 131.197726][ T6661] netlink: 48 bytes leftover after parsing attributes in process `syz.2.180'. [ 131.297426][ T6664] netlink: 56 bytes leftover after parsing attributes in process `syz.2.180'. [ 132.050650][ T30] audit: type=1400 audit(1767324326.749:291): avc: denied { mount } for pid=6660 comm="syz.2.180" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 132.395090][ T6669] ISOFS: Unable to identify CD-ROM format. [ 132.522775][ T6672] fuse: Bad value for 'rootmode' [ 132.670545][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.677139][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.938245][ T30] audit: type=1400 audit(1767324327.639:292): avc: denied { write } for pid=6679 comm="syz.4.185" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 132.985291][ T6682] input input5: cannot allocate more than FF_MAX_EFFECTS effects [ 132.991438][ T30] audit: type=1400 audit(1767324327.679:293): avc: denied { ioctl } for pid=6679 comm="syz.4.185" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 133.035471][ T30] audit: type=1400 audit(1767324327.719:294): avc: denied { setopt } for pid=6679 comm="syz.4.185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 133.060850][ T89] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 133.239345][ T89] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 133.281033][ T89] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 133.322071][ T89] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 133.366632][ T89] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.402025][ T89] hub 3-1:1.0: bad descriptor, ignoring hub [ 133.417456][ T89] hub 3-1:1.0: probe with driver hub failed with error -5 [ 133.447483][ T5846] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 133.634921][ T5846] usb 4-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 133.649259][ T5846] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.657424][ T5846] usb 4-1: Product: syz [ 133.661591][ T5846] usb 4-1: Manufacturer: syz [ 133.721819][ T6690] netlink: 'syz.1.188': attribute type 4 has an invalid length. [ 133.729709][ T6690] netlink: 152 bytes leftover after parsing attributes in process `syz.1.188'. [ 134.094574][ T5846] usb 4-1: SerialNumber: syz [ 134.102575][ T5846] usb 4-1: config 0 descriptor?? [ 134.119131][ T5846] i2c-tiny-usb 4-1:0.0: version 6d.cc found at bus 004 address 009 [ 134.173018][ T6013] usb 3-1: USB disconnect, device number 5 [ 134.588028][ T6013] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 134.818402][ T5846] i2c i2c-1: failure reading functionality [ 134.839433][ T5846] i2c i2c-1: connected i2c-tiny-usb device [ 134.855372][ T6013] usb 3-1: config 0 has no interfaces? [ 134.858450][ T5846] usb 4-1: USB disconnect, device number 9 [ 134.867755][ T6013] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 134.871571][ T6704] fuse: Bad value for 'rootmode' [ 134.877009][ T6013] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.934347][ T6705] netlink: 28 bytes leftover after parsing attributes in process `syz.4.192'. [ 135.290836][ T6013] usb 3-1: Product: syz [ 135.295116][ T6013] usb 3-1: Manufacturer: syz [ 135.299968][ T6013] usb 3-1: SerialNumber: syz [ 135.306966][ T6013] usb 3-1: config 0 descriptor?? [ 135.442739][ T6708] netlink: 'syz.1.195': attribute type 12 has an invalid length. [ 135.450752][ T6708] netlink: 'syz.1.195': attribute type 29 has an invalid length. [ 135.458773][ T6708] netlink: 148 bytes leftover after parsing attributes in process `syz.1.195'. [ 135.458902][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 135.458913][ T30] audit: type=1400 audit(1767324330.129:296): avc: denied { ioctl } for pid=6706 comm="syz.1.195" path="socket:[11693]" dev="sockfs" ino=11693 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 135.777143][ T5901] usb 3-1: USB disconnect, device number 6 [ 135.855416][ T6716] netlink: 8 bytes leftover after parsing attributes in process `syz.2.199'. [ 135.943073][ T6719] xt_CT: You must specify a L4 protocol and not use inversions on it [ 135.946255][ T30] audit: type=1400 audit(1767324330.639:297): avc: denied { write } for pid=6715 comm="syz.2.199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 136.621015][ T6730] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 136.691138][ T6731] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 137.020281][ T6735] netlink: 'syz.2.201': attribute type 4 has an invalid length. [ 137.028191][ T6735] netlink: 152 bytes leftover after parsing attributes in process `syz.2.201'. [ 138.047912][ T6750] fuse: Bad value for 'rootmode' [ 138.087458][ T5826] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 138.252884][ T30] audit: type=1400 audit(1767324332.889:298): avc: denied { append } for pid=6753 comm="syz.2.207" name="ubi_ctrl" dev="devtmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 138.285765][ T5826] usb 4-1: Using ep0 maxpacket: 16 [ 138.287067][ T6756] netlink: 'syz.2.207': attribute type 1 has an invalid length. [ 138.300489][ T6756] netlink: 'syz.2.207': attribute type 2 has an invalid length. [ 138.308525][ T6756] netlink: 'syz.2.207': attribute type 1 has an invalid length. [ 138.316481][ T6756] netlink: 'syz.2.207': attribute type 3 has an invalid length. [ 138.316974][ T5826] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 138.325993][ T6756] netlink: 4 bytes leftover after parsing attributes in process `syz.2.207'. [ 139.084776][ T5882] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 139.106601][ T5826] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 139.125207][ T30] audit: type=1400 audit(1767324332.899:299): avc: denied { bind } for pid=6753 comm="syz.2.207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 139.219710][ T5826] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 139.252920][ T30] audit: type=1400 audit(1767324333.429:300): avc: denied { create } for pid=6757 comm="syz.4.208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 139.359565][ T5826] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 139.381188][ T5826] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.405884][ T5826] usb 4-1: Product: syz [ 139.429101][ T5882] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 139.457519][ T30] audit: type=1400 audit(1767324333.429:301): avc: denied { getopt } for pid=6757 comm="syz.4.208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 139.488376][ T5826] usb 4-1: Manufacturer: syz [ 139.495608][ T5826] usb 4-1: SerialNumber: syz [ 139.503583][ T5882] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.566506][ T5882] usb 2-1: Product: syz [ 139.576534][ T5882] usb 2-1: Manufacturer: syz [ 139.590345][ T5882] usb 2-1: SerialNumber: syz [ 139.631259][ T5882] usb 2-1: config 0 descriptor?? [ 139.641066][ T5882] i2c-tiny-usb 2-1:0.0: version 6d.cc found at bus 002 address 007 [ 139.791054][ T30] audit: type=1400 audit(1767324334.489:302): avc: denied { execute } for pid=6743 comm="syz.3.204" name="file2" dev="tmpfs" ino=198 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 139.814125][ T6744] process 'syz.3.204' launched './file2' with NULL argv: empty string added [ 140.187471][ T30] audit: type=1400 audit(1767324334.869:303): avc: denied { execute_no_trans } for pid=6743 comm="syz.3.204" path="/34/file2" dev="tmpfs" ino=198 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 140.280251][ T30] audit: type=1400 audit(1767324334.979:304): avc: denied { create } for pid=6743 comm="syz.3.204" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 140.678149][ T5882] i2c i2c-1: failure reading functionality [ 140.710170][ T5882] i2c i2c-1: connected i2c-tiny-usb device [ 140.811704][ T5882] usb 2-1: USB disconnect, device number 7 [ 140.865161][ T6779] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 140.872669][ T5826] usb 4-1: 0:2 : does not exist [ 141.025084][ T5826] usb 4-1: 1:0: cannot get min/max values for control 4 (id 1) [ 141.106104][ T5826] usb 4-1: USB disconnect, device number 10 [ 141.107628][ T5901] usb 5-1: new low-speed USB device number 9 using dummy_hcd [ 141.323541][ T5901] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 141.331253][ T5901] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 141.366505][ T5901] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 141.441727][ T5901] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 141.526818][ T5901] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 141.567504][ T5901] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 141.575006][ T5901] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 141.605663][ T5901] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 141.647532][ T5901] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 141.679830][ T5901] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 141.719997][ T5901] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 141.732084][ T5901] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 141.764565][ T5901] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 141.843760][ T5901] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 141.925410][ T5901] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 142.029266][ T5901] usb 5-1: string descriptor 0 read error: -22 [ 142.058420][ T5901] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 142.079225][ T5901] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.154857][ T5901] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 142.178786][ T6797] fuse: Unknown parameter 'use00000000000000000000' [ 142.499270][ T30] audit: type=1400 audit(1767324337.199:305): avc: denied { create } for pid=6782 comm="syz.4.216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 142.921365][ T6807] netlink: 16 bytes leftover after parsing attributes in process `syz.2.222'. [ 143.392244][ T30] audit: type=1400 audit(1767324338.089:306): avc: denied { create } for pid=6811 comm="syz.0.224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 143.433078][ T30] audit: type=1400 audit(1767324338.089:307): avc: denied { read } for pid=6811 comm="syz.0.224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 143.580612][ T6814] trusted_key: encrypted_key: keylen parameter is missing [ 143.784777][ T6824] FAULT_INJECTION: forcing a failure. [ 143.784777][ T6824] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 143.836567][ T6824] CPU: 1 UID: 0 PID: 6824 Comm: syz.2.227 Not tainted syzkaller #0 PREEMPT(full) [ 143.836590][ T6824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 143.836598][ T6824] Call Trace: [ 143.836604][ T6824] [ 143.836609][ T6824] dump_stack_lvl+0x16c/0x1f0 [ 143.836634][ T6824] should_fail_ex+0x512/0x640 [ 143.836663][ T6824] _copy_from_iter+0x2a4/0x16c0 [ 143.836689][ T6824] ? __alloc_skb+0x220/0x410 [ 143.836709][ T6824] ? __alloc_skb+0x35d/0x410 [ 143.836731][ T6824] ? __pfx__copy_from_iter+0x10/0x10 [ 143.836753][ T6824] ? netlink_autobind.isra.0+0x158/0x370 [ 143.836782][ T6824] netlink_sendmsg+0x820/0xdd0 [ 143.836805][ T6824] ? __pfx_netlink_sendmsg+0x10/0x10 [ 143.836833][ T6824] ____sys_sendmsg+0xa5d/0xc30 [ 143.836855][ T6824] ? copy_msghdr_from_user+0x10a/0x160 [ 143.836871][ T6824] ? __pfx_____sys_sendmsg+0x10/0x10 [ 143.836909][ T6824] ___sys_sendmsg+0x134/0x1d0 [ 143.836928][ T6824] ? __pfx____sys_sendmsg+0x10/0x10 [ 143.836971][ T6824] __sys_sendmsg+0x16d/0x220 [ 143.836989][ T6824] ? __pfx___sys_sendmsg+0x10/0x10 [ 143.837020][ T6824] do_syscall_64+0xcd/0xf80 [ 143.837042][ T6824] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.837059][ T6824] RIP: 0033:0x7f1519d8f749 [ 143.837073][ T6824] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 143.837088][ T6824] RSP: 002b:00007f151ac7e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 143.837104][ T6824] RAX: ffffffffffffffda RBX: 00007f1519fe5fa0 RCX: 00007f1519d8f749 [ 143.837115][ T6824] RDX: 0000000004004804 RSI: 0000200000000280 RDI: 0000000000000003 [ 143.837124][ T6824] RBP: 00007f151ac7e090 R08: 0000000000000000 R09: 0000000000000000 [ 143.837134][ T6824] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 143.837143][ T6824] R13: 00007f1519fe6038 R14: 00007f1519fe5fa0 R15: 00007ffe6bcab638 [ 143.837166][ T6824] [ 144.423000][ T6829] comedi comedi0: Minor 3 could not be opened [ 144.763059][ T6032] usb 5-1: USB disconnect, device number 9 [ 145.354390][ T30] audit: type=1400 audit(1767324339.989:308): avc: denied { setopt } for pid=6831 comm="syz.4.229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 145.420190][ T30] audit: type=1400 audit(1767324339.989:309): avc: denied { write } for pid=6831 comm="syz.4.229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 145.444245][ T5935] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 145.500426][ T6840] netlink: 'syz.2.230': attribute type 4 has an invalid length. [ 145.509887][ T6840] netlink: 152 bytes leftover after parsing attributes in process `syz.2.230'. [ 145.626604][ T6842] fuse: Unknown parameter 'use00000000000000000000' [ 145.657721][ T5935] usb 1-1: Using ep0 maxpacket: 16 [ 145.666422][ T5935] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 145.681082][ T5935] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 145.694692][ T5935] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 145.760510][ T5935] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 145.810420][ T5935] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.854396][ T5935] usb 1-1: config 0 descriptor?? [ 146.002327][ T30] audit: type=1400 audit(1767324340.699:310): avc: denied { append } for pid=6843 comm="syz.4.232" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 146.427690][ T5935] microsoft 0003:045E:07DA.0005: nested delimiters [ 146.443218][ T5935] microsoft 0003:045E:07DA.0005: item 0 4 2 10 parsing failed [ 146.458149][ T5935] microsoft 0003:045E:07DA.0005: parse failed [ 146.464424][ T5935] microsoft 0003:045E:07DA.0005: probe with driver microsoft failed with error -22 [ 146.582315][ T5935] usb 1-1: USB disconnect, device number 6 [ 146.767460][ T6032] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 146.932977][ T30] audit: type=1326 audit(1767324341.549:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6857 comm="syz.1.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb327d8f749 code=0x7ffc0000 [ 147.027476][ T6032] usb 5-1: Using ep0 maxpacket: 32 [ 147.051076][ T6032] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 147.068657][ T6032] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.369452][ T30] audit: type=1326 audit(1767324341.549:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6857 comm="syz.1.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb327d8f749 code=0x7ffc0000 [ 147.392812][ T6032] usb 5-1: Product: syz [ 147.392789][ T30] audit: type=1326 audit(1767324341.549:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6857 comm="syz.1.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb327d8f749 code=0x7ffc0000 [ 147.392849][ T30] audit: type=1326 audit(1767324341.549:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6857 comm="syz.1.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb327d8f749 code=0x7ffc0000 [ 147.449837][ T6032] usb 5-1: Manufacturer: syz [ 147.464611][ T6032] usb 5-1: SerialNumber: syz [ 147.482787][ T6032] usb 5-1: config 0 descriptor?? [ 147.502183][ T6032] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 147.666863][ T30] audit: type=1326 audit(1767324341.549:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6857 comm="syz.1.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb327d8f749 code=0x7ffc0000 [ 147.691100][ T30] audit: type=1326 audit(1767324341.549:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6857 comm="syz.1.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb327d8f749 code=0x7ffc0000 [ 147.715182][ T30] audit: type=1326 audit(1767324341.549:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6857 comm="syz.1.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb327d8f749 code=0x7ffc0000 [ 147.741928][ T30] audit: type=1326 audit(1767324341.549:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6857 comm="syz.1.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb327d8f749 code=0x7ffc0000 [ 147.795663][ T30] audit: type=1326 audit(1767324341.549:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6857 comm="syz.1.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb327d8f749 code=0x7ffc0000 [ 148.428388][ T30] audit: type=1326 audit(1767324341.549:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6857 comm="syz.1.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb327d8f749 code=0x7ffc0000 [ 148.454514][ T30] audit: type=1326 audit(1767324341.549:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6857 comm="syz.1.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb327d8f749 code=0x7ffc0000 [ 148.479159][ T30] audit: type=1326 audit(1767324341.549:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6857 comm="syz.1.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=51 compat=0 ip=0x7fb327d8f749 code=0x7ffc0000 [ 148.505339][ T30] audit: type=1326 audit(1767324341.549:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6857 comm="syz.1.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb327d8f749 code=0x7ffc0000 [ 148.554484][ T30] audit: type=1326 audit(1767324341.549:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6857 comm="syz.1.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb327d8f749 code=0x7ffc0000 [ 149.134371][ T5973] usb 2-1: new low-speed USB device number 8 using dummy_hcd [ 149.595834][ T6032] gspca_ov534_9: reg_w failed -110 [ 149.772150][ T5973] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 149.801902][ T5973] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 149.833650][ T5973] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 149.869754][ T5973] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 149.900479][ T5973] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 149.911752][ T6032] gspca_ov534_9: Unknown sensor 0000 [ 149.911881][ T6032] ov534_9 5-1:0.0: probe with driver ov534_9 failed with error -22 [ 149.914294][ T6884] SET target dimension over the limit! [ 150.052384][ T5973] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 150.085533][ T5973] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 150.493286][ T5973] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 150.505617][ T5973] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 150.525147][ T5973] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 150.539926][ T5973] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 150.571149][ T5973] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 150.602241][ T5973] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 150.633697][ T5973] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 150.656120][ T6889] fuse: Unknown parameter 'use00000000000000000000' [ 150.711645][ T6032] usb 5-1: USB disconnect, device number 10 [ 150.718628][ T5973] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 150.816497][ T5973] usb 2-1: string descriptor 0 read error: -22 [ 150.835388][ T5973] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 150.894954][ T5973] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.931766][ T5973] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 151.277467][ T6032] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 151.434810][ T6032] usb 5-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 151.468960][ T6032] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.507747][ T6032] usb 5-1: Product: syz [ 151.512027][ T6032] usb 5-1: Manufacturer: syz [ 151.526840][ T6032] usb 5-1: SerialNumber: syz [ 151.553295][ T6032] usb 5-1: config 0 descriptor?? [ 151.713225][ T6904] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6904 comm=syz.2.249 [ 151.725827][ T6904] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2560 sclass=netlink_tcpdiag_socket pid=6904 comm=syz.2.249 [ 151.738645][ T6904] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2563 sclass=netlink_tcpdiag_socket pid=6904 comm=syz.2.249 [ 151.751369][ T6904] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2566 sclass=netlink_tcpdiag_socket pid=6904 comm=syz.2.249 [ 151.785035][ T6032] i2c-tiny-usb 5-1:0.0: version 6d.cc found at bus 005 address 011 [ 152.555528][ T6032] i2c i2c-1: failure reading functionality [ 152.565267][ T6032] i2c i2c-1: connected i2c-tiny-usb device [ 152.588837][ T6032] usb 5-1: USB disconnect, device number 11 [ 153.002162][ T30] kauditd_printk_skb: 47 callbacks suppressed [ 153.002176][ T30] audit: type=1400 audit(1767324347.699:372): avc: denied { ioctl } for pid=6913 comm="syz.3.254" path="socket:[12562]" dev="sockfs" ino=12562 ioctlcmd=0x89f2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 153.050943][ T30] audit: type=1400 audit(1767324347.749:373): avc: denied { bind } for pid=6913 comm="syz.3.254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 153.228372][ T5826] usb 2-1: USB disconnect, device number 8 [ 153.325519][ T6922] netlink: 'syz.0.255': attribute type 4 has an invalid length. [ 153.333333][ T6922] netlink: 152 bytes leftover after parsing attributes in process `syz.0.255'. [ 153.839203][ T6926] fuse: Unknown parameter 'user_i00000000000000000000' [ 154.476563][ T6934] __vm_enough_memory: pid: 6934, comm: syz.0.258, bytes: 4503599627366400 not enough memory for the allocation [ 154.828355][ T5826] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 154.829369][ T6013] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 155.001125][ T5826] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 155.017562][ T5826] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.057548][ T6013] usb 1-1: Using ep0 maxpacket: 16 [ 155.088203][ T6013] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 155.130984][ T5826] usb 2-1: Product: syz [ 155.136546][ T5826] usb 2-1: Manufacturer: syz [ 155.157614][ T5826] usb 2-1: SerialNumber: syz [ 155.162674][ T6013] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 155.194316][ T5826] usb 2-1: config 0 descriptor?? [ 155.224340][ T6013] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 155.248737][ T5826] i2c-tiny-usb 2-1:0.0: version 6d.cc found at bus 002 address 009 [ 155.257116][ T6013] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 155.260585][ T6944] capability: warning: `syz.3.263' uses deprecated v2 capabilities in a way that may be insecure [ 155.375763][ T30] audit: type=1400 audit(1767324350.069:374): avc: denied { create } for pid=6943 comm="syz.3.263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 155.398005][ T30] audit: type=1400 audit(1767324350.069:375): avc: denied { bind } for pid=6943 comm="syz.3.263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 155.410450][ T6013] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.610392][ T6013] usb 1-1: config 0 descriptor?? [ 155.667650][ T5882] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 155.743600][ T5826] (null): failure reading functionality [ 155.830692][ T5882] usb 4-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 155.852245][ T5882] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.865030][ T5882] usb 4-1: Product: syz [ 155.870173][ T5882] usb 4-1: Manufacturer: syz [ 155.880369][ T5882] usb 4-1: SerialNumber: syz [ 155.891298][ T5882] usb 4-1: config 0 descriptor?? [ 155.904241][ T5882] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 155.948383][ T5826] i2c i2c-1: failure reading functionality [ 155.971330][ T5826] i2c i2c-1: connected i2c-tiny-usb device [ 155.995325][ T5826] usb 2-1: USB disconnect, device number 9 [ 156.037928][ T6013] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 156.064754][ T6013] microsoft 0003:045E:07DA.0006: ignoring exceeding usage max [ 156.097075][ T6013] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0006/input/input6 [ 156.374095][ T6013] microsoft 0003:045E:07DA.0006: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 156.862505][ T6013] usb 1-1: USB disconnect, device number 7 [ 157.229838][ T5882] gspca_sunplus: reg_w_riv err -71 [ 157.235045][ T5882] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 157.272414][ T5882] usb 4-1: USB disconnect, device number 11 [ 157.607498][ T5935] usb 3-1: new low-speed USB device number 7 using dummy_hcd [ 157.617518][ T5882] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 157.727478][ T6013] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 157.760089][ T5935] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 157.774268][ T5935] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 157.787845][ T5935] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 157.788350][ T5882] usb 5-1: Using ep0 maxpacket: 8 [ 157.805820][ T5935] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 157.805862][ T5935] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 157.806721][ T5935] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 157.822386][ T5882] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 157.849336][ T5882] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 157.863681][ T5882] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 157.878878][ T5882] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 157.887522][ T6013] usb 1-1: Using ep0 maxpacket: 8 [ 157.892199][ T5882] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 157.898666][ T6013] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 157.909174][ T5882] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.935537][ T5935] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 157.951673][ T6013] usb 1-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 157.965707][ T5935] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 157.977848][ T6013] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 157.986924][ T6013] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.995563][ T5935] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 158.006910][ T5935] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 158.039423][ T5935] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 158.050386][ T6013] usbtmc 1-1:16.0: bulk endpoints not found [ 158.058724][ T5935] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 158.071782][ T5935] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 158.083690][ T5935] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 158.095007][ T5935] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 158.114403][ T5935] usb 3-1: string descriptor 0 read error: -22 [ 158.122378][ T5935] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 158.132172][ T5935] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.134547][ T5882] usb 5-1: usb_control_msg returned -32 [ 158.168951][ T5882] usbtmc 5-1:16.0: can't read capabilities [ 158.469825][ T5935] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux1 [ 158.587852][ C1] usbtmc 5-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 158.600949][ T6961] usbtmc 5-1:16.0: Unable to send data, error -71 [ 158.672851][ T5935] usb 3-1: USB disconnect, device number 7 [ 158.787549][ T5882] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 158.947461][ T5882] usb 2-1: Using ep0 maxpacket: 16 [ 158.960113][ T5882] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 158.977486][ T5882] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 158.999091][ T5882] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 159.022294][ T5882] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 159.047481][ T5882] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.067783][ T5882] usb 2-1: config 0 descriptor?? [ 159.560506][ C0] usbtmc 5-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 159.723748][ T5882] microsoft 0003:045E:07DA.0007: nested delimiters [ 159.740347][ T5935] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 159.937705][ T5935] usb 3-1: Using ep0 maxpacket: 16 [ 159.961744][ T5935] usb 3-1: config 1 has an invalid interface number: 105 but max is 0 [ 160.014576][ T5935] usb 3-1: config 1 has no interface number 0 [ 160.069375][ T5935] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 160.123280][ T5935] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 160.140852][ T5935] usb 3-1: config 1 interface 105 has no altsetting 0 [ 160.155989][ T5935] usb 3-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 160.174780][ T5935] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.185990][ T5935] usb 3-1: Product: syz [ 160.194314][ T5935] usb 3-1: Manufacturer: syz [ 160.205074][ T5935] usb 3-1: SerialNumber: syz [ 160.254751][ T6991] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 160.263349][ T6991] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 160.617186][ T10] usb 5-1: USB disconnect, device number 12 [ 161.119341][ T5882] microsoft 0003:045E:07DA.0007: item 0 4 2 10 parsing failed [ 161.136532][ T5882] microsoft 0003:045E:07DA.0007: parse failed [ 161.136817][ T5935] aqc111 3-1:1.105: probe with driver aqc111 failed with error -71 [ 161.142995][ T5882] microsoft 0003:045E:07DA.0007: probe with driver microsoft failed with error -22 [ 161.164954][ T5882] usb 2-1: USB disconnect, device number 10 [ 161.214911][ T6013] usb 1-1: USB disconnect, device number 8 [ 161.270690][ T5935] usb 3-1: USB disconnect, device number 8 [ 162.597802][ T10] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 162.628212][ T30] audit: type=1326 audit(1767324357.329:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7009 comm="syz.1.283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb327d8f749 code=0x7ffc0000 [ 162.677920][ T7012] fuse: Unknown parameter 'grou00000000000000000000' [ 162.691864][ T30] audit: type=1326 audit(1767324357.329:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7009 comm="syz.1.283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb327d8f749 code=0x7ffc0000 [ 162.746335][ T30] audit: type=1326 audit(1767324357.369:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7009 comm="syz.1.283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb327d8f749 code=0x7ffc0000 [ 162.784264][ T10] usb 5-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 162.788375][ T30] audit: type=1326 audit(1767324357.379:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7009 comm="syz.1.283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=193 compat=0 ip=0x7fb327d8f749 code=0x7ffc0000 [ 162.802313][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.817555][ T30] audit: type=1326 audit(1767324357.379:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7009 comm="syz.1.283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb327d8f749 code=0x7ffc0000 [ 162.850192][ T30] audit: type=1326 audit(1767324357.379:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7009 comm="syz.1.283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb327d8f749 code=0x7ffc0000 [ 162.873872][ T30] audit: type=1326 audit(1767324357.379:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7009 comm="syz.1.283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb327d8f749 code=0x7ffc0000 [ 162.897693][ T30] audit: type=1326 audit(1767324357.379:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7009 comm="syz.1.283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb327d8f749 code=0x7ffc0000 [ 162.921604][ T30] audit: type=1326 audit(1767324357.379:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7009 comm="syz.1.283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb327d8f749 code=0x7ffc0000 [ 162.968289][ T10] usb 5-1: Product: syz [ 162.972991][ T10] usb 5-1: Manufacturer: syz [ 162.977685][ T10] usb 5-1: SerialNumber: syz [ 162.999535][ T10] usb 5-1: config 0 descriptor?? [ 163.009560][ T10] i2c-tiny-usb 5-1:0.0: version 6d.cc found at bus 005 address 013 [ 163.168046][ T7022] netlink: 'syz.2.285': attribute type 4 has an invalid length. [ 163.175779][ T7022] netlink: 152 bytes leftover after parsing attributes in process `syz.2.285'. [ 163.906225][ T30] audit: type=1326 audit(1767324357.379:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7009 comm="syz.1.283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb327d8f749 code=0x7ffc0000 [ 164.153946][ T10] (null): failure reading functionality [ 164.915005][ T10] i2c i2c-1: failure reading functionality [ 164.999361][ T10] i2c i2c-1: connected i2c-tiny-usb device [ 165.009762][ T10] usb 5-1: USB disconnect, device number 13 [ 165.082279][ T7039] xt_bpf: check failed: parse error [ 165.208174][ T6013] IPVS: starting estimator thread 0... [ 165.324809][ T7045] IPVS: using max 43 ests per chain, 103200 per kthread [ 165.410996][ T7051] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 166.018975][ T7059] netlink: 4220 bytes leftover after parsing attributes in process `syz.4.295'. [ 166.472678][ T7058] mmap: syz.0.294 (7058) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 166.701858][ T7063] fuse: Unknown parameter 'grou00000000000000000000' [ 166.939865][ T7073] syzkaller0: entered promiscuous mode [ 166.949651][ T7073] syzkaller0: entered allmulticast mode [ 166.967567][ T5889] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 166.972467][ T7071] netlink: 'syz.1.300': attribute type 33 has an invalid length. [ 167.009176][ T7071] netlink: 36 bytes leftover after parsing attributes in process `syz.1.300'. [ 167.222911][ T5889] usb 5-1: config 1 interface 0 altsetting 192 bulk endpoint 0x1 has invalid maxpacket 1024 [ 167.365839][ T5889] usb 5-1: config 1 interface 0 altsetting 192 bulk endpoint 0x82 has invalid maxpacket 32 [ 167.604463][ T5889] usb 5-1: config 1 interface 0 has no altsetting 0 [ 167.615696][ T5889] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 167.625564][ T5889] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.640150][ T5889] usb 5-1: Product: Р [ 167.644547][ T5889] usb 5-1: Manufacturer: 烚靥駫啭僃얈ⴒ [ 167.651834][ T5889] usb 5-1: SerialNumber: ⬀욍歋孼类誕楌稨珇꾁ᏸ脛硜옙墻儥鳾⒫쾖䛝촊愫協젋윤嬸陕꣊曑ドẩ矠퍄잌瀖ﬕᐐ횎瓈ֹꀁ療໲ꙸ㹇ㄵ秀䴭জ뀇텺烁䮀醴᳜楟□㵒ᠳᝀʼn➎痟쐕妔䯬搀졺䐕鄹쾼鷆戚佰橛槹쳿ꎶ镓鎸脾휥➔Ę캩⎍廳突橥 [ 167.699220][ T7067] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 167.714990][ T7067] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 167.935977][ T5882] libceph: connect (1)[c::]:6789 error -101 [ 167.970431][ T5882] libceph: mon0 (1)[c::]:6789 connect error [ 168.015144][ T7095] ceph: No mds server is up or the cluster is laggy [ 168.266615][ T5882] libceph: connect (1)[c::]:6789 error -101 [ 168.279500][ T30] kauditd_printk_skb: 145 callbacks suppressed [ 168.279516][ T30] audit: type=1400 audit(1767324362.979:531): avc: denied { create } for pid=7066 comm="syz.4.298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 168.279891][ T7067] block nbd4: NBD_DISCONNECT [ 168.307809][ T5882] libceph: mon0 (1)[c::]:6789 connect error [ 168.520881][ T5889] usblp 5-1:1.0: usblp0: USB Bidirectional printer dev 14 if 0 alt 192 proto 3 vid 0x0525 pid 0xA4A8 [ 168.532879][ T30] audit: type=1400 audit(1767324363.169:532): avc: denied { mounton } for pid=7090 comm="syz.3.304" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=68 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 168.771437][ T5846] libceph: connect (1)[c::]:6789 error -101 [ 168.790519][ T5846] libceph: mon0 (1)[c::]:6789 connect error [ 168.886586][ T5889] usb 5-1: USB disconnect, device number 14 [ 169.270248][ T5889] usblp0: removed [ 169.449665][ T7113] fuse: Unknown parameter 'group_i00000000000000000000' [ 170.113995][ T10] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 170.149263][ T5889] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 170.232473][ T7133] netlink: 'syz.4.316': attribute type 4 has an invalid length. [ 170.240249][ T7133] netlink: 152 bytes leftover after parsing attributes in process `syz.4.316'. [ 170.337489][ T5889] usb 1-1: Using ep0 maxpacket: 8 [ 170.646627][ T5889] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 170.669852][ T5889] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.703196][ T5889] pvrusb2: Hardware description: Terratec Grabster AV400 [ 170.717673][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 170.724718][ T10] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 170.724851][ T5889] pvrusb2: ********** [ 170.735783][ T10] usb 2-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 170.739380][ T5889] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 170.755577][ T10] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 170.776310][ T5889] pvrusb2: Important functionality might not be entirely working. [ 170.784306][ T5889] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 170.791122][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.795941][ T5889] pvrusb2: ********** [ 170.809506][ T10] usbtmc 2-1:16.0: bulk endpoints not found [ 170.898029][ T2340] pvrusb2: Invalid write control endpoint [ 170.964867][ T2340] pvrusb2: Invalid write control endpoint [ 170.972517][ T2340] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 170.985468][ T30] audit: type=1400 audit(1767324365.679:533): avc: denied { read } for pid=7136 comm="syz.4.317" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 170.985512][ T30] audit: type=1400 audit(1767324365.679:534): avc: denied { open } for pid=7136 comm="syz.4.317" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 170.985543][ T30] audit: type=1400 audit(1767324365.689:535): avc: denied { ioctl } for pid=7136 comm="syz.4.317" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4611 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 170.985654][ T2340] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 170.985671][ T2340] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 170.985679][ T2340] pvrusb2: Device being rendered inoperable [ 170.991709][ T7125] syz.2.315 (7125) used greatest stack depth: 19688 bytes left [ 171.005364][ T2340] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 171.005409][ T2340] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 171.018706][ T2340] pvrusb2: Attached sub-driver cx25840 [ 171.018744][ T2340] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 171.018752][ T2340] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 171.118738][ T7127] pvrusb2: Attempted to execute control transfer when device not ok [ 171.119199][ T30] audit: type=1326 audit(1767324365.819:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7124 comm="syz.0.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1a358f749 code=0x7ffc0000 [ 171.133336][ T7138] netlink: 'syz.4.317': attribute type 1 has an invalid length. [ 171.134233][ T7138] netlink: 'syz.4.317': attribute type 2 has an invalid length. [ 171.142364][ T30] audit: type=1326 audit(1767324365.819:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7124 comm="syz.0.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1a358f749 code=0x7ffc0000 [ 171.142393][ T30] audit: type=1326 audit(1767324365.819:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7124 comm="syz.0.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7ff1a358f749 code=0x7ffc0000 [ 171.142413][ T30] audit: type=1326 audit(1767324365.819:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7124 comm="syz.0.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1a358f749 code=0x7ffc0000 [ 171.142433][ T30] audit: type=1326 audit(1767324365.819:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7124 comm="syz.0.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1a358f749 code=0x7ffc0000 [ 171.477968][ T7146] JFS: discard option not supported on device [ 171.479888][ T7146] Mount JFS Failure: -22 [ 171.479932][ T7146] jfs_mount failed w/return code = -22 [ 172.285902][ T7155] fuse: Unknown parameter 'group_i00000000000000000000' [ 172.581971][ T7161] xt_CT: You must specify a L4 protocol and not use inversions on it [ 173.139202][ T7165] "syz.3.323" (7165) uses obsolete ecb(arc4) skcipher [ 173.305851][ T5935] usb 2-1: USB disconnect, device number 11 [ 173.654921][ T5935] usb 1-1: USB disconnect, device number 9 [ 173.854655][ T5901] usb 3-1: new low-speed USB device number 9 using dummy_hcd [ 173.946098][ T7185] netlink: 'syz.1.328': attribute type 4 has an invalid length. [ 173.954074][ T7185] netlink: 152 bytes leftover after parsing attributes in process `syz.1.328'. [ 174.363342][ T5901] usb 3-1: device descriptor read/64, error -71 [ 174.371109][ T30] kauditd_printk_skb: 34 callbacks suppressed [ 174.371122][ T30] audit: type=1400 audit(1767324369.069:575): avc: denied { bind } for pid=7183 comm="syz.4.329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 174.397179][ T30] audit: type=1400 audit(1767324369.069:576): avc: denied { name_bind } for pid=7183 comm="syz.4.329" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 174.420341][ T30] audit: type=1400 audit(1767324369.069:577): avc: denied { node_bind } for pid=7183 comm="syz.4.329" saddr=ff02::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 174.530687][ T7187] 9p: Bad value for 'wfdno' [ 174.957752][ T5901] usb 3-1: new low-speed USB device number 10 using dummy_hcd [ 175.138425][ T7193] fuse: Unknown parameter 'group_i00000000000000000000' [ 175.147648][ T5901] usb 3-1: device descriptor read/64, error -71 [ 175.280203][ T5901] usb usb3-port1: attempt power cycle [ 175.557457][ T89] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 175.617445][ T5901] usb 3-1: new low-speed USB device number 11 using dummy_hcd [ 175.656387][ T5901] usb 3-1: device descriptor read/8, error -71 [ 175.709212][ T5924] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 175.737486][ T89] usb 2-1: Using ep0 maxpacket: 8 [ 175.749790][ T89] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 175.770250][ T89] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 175.790546][ T89] usb 2-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 175.808216][ T89] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 175.833862][ T89] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 175.857497][ T89] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.870136][ T89] usbtmc 2-1:16.0: bulk endpoints not found [ 175.887596][ T5924] usb 4-1: Using ep0 maxpacket: 8 [ 175.901066][ T5924] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 175.918286][ T5901] usb 3-1: new low-speed USB device number 12 using dummy_hcd [ 175.926016][ T5924] usb 4-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 175.947601][ T5924] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 175.970677][ T5901] usb 3-1: device descriptor read/8, error -71 [ 176.007551][ T5924] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.018219][ T5924] usbtmc 4-1:16.0: bulk endpoints not found [ 176.078304][ T5901] usb usb3-port1: unable to enumerate USB device [ 176.460876][ T7217] netlink: 92 bytes leftover after parsing attributes in process `syz.0.340'. [ 176.567513][ T30] audit: type=1400 audit(1767324371.239:578): avc: denied { write } for pid=7218 comm="syz.4.341" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 176.607532][ T30] audit: type=1400 audit(1767324371.239:579): avc: denied { ioctl } for pid=7218 comm="syz.4.341" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 176.796472][ T7224] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 176.803777][ C1] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 177.605876][ T30] audit: type=1400 audit(1767324372.299:580): avc: denied { read write } for pid=7230 comm="syz.2.343" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 177.631255][ T30] audit: type=1400 audit(1767324372.329:581): avc: denied { open } for pid=7230 comm="syz.2.343" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 178.468831][ T7238] fuse: Unknown parameter 'group_id00000000000000000000' [ 178.479729][ T30] audit: type=1400 audit(1767324372.329:582): avc: denied { ioctl } for pid=7230 comm="syz.2.343" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 178.557676][ T30] audit: type=1400 audit(1767324372.409:583): avc: denied { remount } for pid=7228 comm="syz.0.342" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 178.681414][ T5935] usb 4-1: USB disconnect, device number 12 [ 178.748635][ T5924] usb 2-1: USB disconnect, device number 12 [ 178.778159][ T30] audit: type=1400 audit(1767324373.459:584): avc: denied { mount } for pid=7250 comm="syz.3.349" name="/" dev="ramfs" ino=13185 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 178.860062][ T7253] netlink: 'syz.4.345': attribute type 4 has an invalid length. [ 178.867833][ T7253] netlink: 152 bytes leftover after parsing attributes in process `syz.4.345'. [ 179.565418][ T30] audit: type=1400 audit(1767324373.469:585): avc: denied { execute } for pid=7250 comm="syz.3.349" path="/file1" dev="ramfs" ino=13187 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 180.078560][ T7268] xt_CT: You must specify a L4 protocol and not use inversions on it [ 180.586864][ T30] audit: type=1400 audit(1767324375.279:586): avc: denied { mount } for pid=7272 comm="syz.4.355" name="/" dev="hugetlbfs" ino=14358 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 180.613126][ T5924] libceph: connect (1)[c::]:6789 error -101 [ 180.626695][ T5924] libceph: mon0 (1)[c::]:6789 connect error [ 180.655628][ T30] audit: type=1400 audit(1767324375.329:587): avc: denied { create } for pid=7272 comm="syz.4.355" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=blk_file permissive=1 [ 180.710803][ T30] audit: type=1400 audit(1767324375.349:588): avc: denied { unmount } for pid=5814 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 180.732177][ T7279] fuse: Unknown parameter 'group_id00000000000000000000' [ 180.748689][ T7274] ceph: No mds server is up or the cluster is laggy [ 180.838722][ T7283] FAULT_INJECTION: forcing a failure. [ 180.838722][ T7283] name failslab, interval 1, probability 0, space 0, times 0 [ 180.878369][ T30] audit: type=1400 audit(1767324375.569:589): avc: denied { mount } for pid=7282 comm="syz.4.358" name="/" dev="configfs" ino=1232 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 180.907647][ T7283] CPU: 0 UID: 0 PID: 7283 Comm: syz.0.356 Not tainted syzkaller #0 PREEMPT(full) [ 180.907670][ T7283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 180.907680][ T7283] Call Trace: [ 180.907686][ T7283] [ 180.907692][ T7283] dump_stack_lvl+0x16c/0x1f0 [ 180.907716][ T7283] should_fail_ex+0x512/0x640 [ 180.907739][ T7283] ? kmem_cache_alloc_noprof+0x62/0x770 [ 180.907758][ T7283] should_failslab+0xc2/0x120 [ 180.907779][ T7283] kmem_cache_alloc_noprof+0x83/0x770 [ 180.907795][ T7283] ? getname_flags.part.0+0x4c/0x550 [ 180.907841][ T7283] ? getname_flags.part.0+0x4c/0x550 [ 180.907854][ T7283] getname_flags.part.0+0x4c/0x550 [ 180.907871][ T7283] getname_flags+0x93/0xf0 [ 180.907889][ T7283] __x64_sys_mknod+0x74/0xb0 [ 180.907911][ T7283] do_syscall_64+0xcd/0xf80 [ 180.907932][ T7283] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.907947][ T7283] RIP: 0033:0x7ff1a358f749 [ 180.907960][ T7283] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 180.907975][ T7283] RSP: 002b:00007ff1a44a2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 180.907989][ T7283] RAX: ffffffffffffffda RBX: 00007ff1a37e5fa0 RCX: 00007ff1a358f749 [ 180.908000][ T7283] RDX: 000000000000077b RSI: 0000000000006000 RDI: 0000200000000000 [ 180.908009][ T7283] RBP: 00007ff1a44a2090 R08: 0000000000000000 R09: 0000000000000000 [ 180.908018][ T7283] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 180.908027][ T7283] R13: 00007ff1a37e6038 R14: 00007ff1a37e5fa0 R15: 00007fff45df66f8 [ 180.908049][ T7283] [ 180.976087][ T30] audit: type=1400 audit(1767324375.599:590): avc: denied { search } for pid=7282 comm="syz.4.358" name="/" dev="configfs" ino=1232 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 181.237565][ T5924] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 181.265601][ T30] audit: type=1400 audit(1767324375.819:591): avc: denied { read } for pid=7259 comm="syz.3.352" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 181.329271][ T30] audit: type=1400 audit(1767324375.819:592): avc: denied { open } for pid=7259 comm="syz.3.352" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 181.354965][ T30] audit: type=1400 audit(1767324375.819:593): avc: denied { ioctl } for pid=7259 comm="syz.3.352" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 181.412888][ T7297] comedi comedi2: rti800: I/O port conflict (0x7,16) [ 181.427480][ T5924] usb 2-1: Using ep0 maxpacket: 8 [ 181.506320][ T7298] netlink: 'syz.4.362': attribute type 4 has an invalid length. [ 181.514194][ T7298] netlink: 152 bytes leftover after parsing attributes in process `syz.4.362'. [ 181.538235][ T5924] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 181.846994][ T5924] usb 2-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 181.866726][ T30] audit: type=1400 audit(1767324375.899:594): avc: denied { write } for pid=7259 comm="syz.3.352" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 181.919858][ T5924] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 181.951400][ T5924] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.027828][ T5924] usbtmc 2-1:16.0: bulk endpoints not found [ 182.237479][ T5882] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 182.437442][ T5882] usb 1-1: Using ep0 maxpacket: 32 [ 182.455161][ T5882] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 182.487712][ T5882] usb 1-1: New USB device found, idVendor=044e, idProduct=121e, bcdDevice= 0.00 [ 182.514771][ T5882] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.544414][ T5882] usb 1-1: config 0 descriptor?? [ 182.982250][ T5882] hid-alps 0003:044E:121E.0008: unknown main item tag 0x0 [ 182.994096][ T5882] hid-alps 0003:044E:121E.0008: unknown main item tag 0x0 [ 183.003007][ T5882] hid-alps 0003:044E:121E.0008: unknown main item tag 0x0 [ 183.017287][ T5882] hid-alps 0003:044E:121E.0008: unknown main item tag 0x0 [ 183.034726][ T5882] hid-alps 0003:044E:121E.0008: unknown main item tag 0x0 [ 183.047543][ T5924] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 183.074534][ T5882] hid-alps 0003:044E:121E.0008: hidraw0: USB HID v0.95 Device [HID 044e:121e] on usb-dummy_hcd.0-1/input0 [ 183.197443][ T5924] usb 4-1: device descriptor read/64, error -71 [ 183.298613][ T7316] fuse: Unknown parameter 'group_id00000000000000000000' [ 183.443083][ T5924] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 183.711903][ T5924] usb 4-1: device descriptor read/64, error -71 [ 183.838691][ T5924] usb usb4-port1: attempt power cycle [ 184.063594][ T10] usb 2-1: USB disconnect, device number 13 [ 184.567617][ T5924] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 184.588337][ T5924] usb 4-1: device descriptor read/8, error -71 [ 184.809346][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 184.809361][ T30] audit: type=1400 audit(1767324379.509:598): avc: denied { ioctl } for pid=7341 comm="syz.4.376" path="/dev/binderfs/binder0" dev="binder" ino=10 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 184.842179][ T5924] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 184.850492][ T10] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 184.858437][ T30] audit: type=1400 audit(1767324379.509:599): avc: denied { set_context_mgr } for pid=7341 comm="syz.4.376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 184.879027][ T30] audit: type=1400 audit(1767324379.539:600): avc: denied { map } for pid=7341 comm="syz.4.376" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 184.887607][ T5882] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 184.903162][ T30] audit: type=1400 audit(1767324379.539:601): avc: denied { call } for pid=7341 comm="syz.4.376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 184.933955][ T5924] usb 4-1: device descriptor read/8, error -71 [ 184.984264][ T5901] usb 1-1: USB disconnect, device number 10 [ 185.059600][ T5924] usb usb4-port1: unable to enumerate USB device [ 185.072933][ T5882] usb 3-1: Using ep0 maxpacket: 16 [ 185.168016][ T30] audit: type=1400 audit(1767324379.869:602): avc: denied { write } for pid=7345 comm="syz.0.378" name="binder0" dev="binder" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 185.307493][ T10] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 185.332835][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.353645][ T10] usb 2-1: Product: syz [ 185.411216][ T7349] ntfs3(nullb0): Primary boot signature is not NTFS. [ 185.422031][ T7349] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 185.474572][ T10] usb 2-1: Manufacturer: syz [ 185.497081][ T10] usb 2-1: SerialNumber: syz [ 185.514549][ T7352] netlink: 'syz.4.377': attribute type 4 has an invalid length. [ 185.522371][ T7352] netlink: 152 bytes leftover after parsing attributes in process `syz.4.377'. [ 185.582808][ T10] usb 2-1: config 0 descriptor?? [ 185.648800][ T10] i2c-tiny-usb 2-1:0.0: version 6d.cc found at bus 002 address 014 [ 185.834146][ T5882] usb 3-1: config index 0 descriptor too short (expected 2066, got 18) [ 185.905955][ T5882] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 186.062671][ T5882] usb 3-1: New USB device strings: Mfr=1, Product=253, SerialNumber=2 [ 186.081815][ T5882] usb 3-1: Product: syz [ 186.097420][ T5882] usb 3-1: Manufacturer: syz [ 186.102080][ T5882] usb 3-1: SerialNumber: syz [ 186.120569][ T5882] usb 3-1: config 0 descriptor?? [ 186.348319][ T10] i2c i2c-1: failure reading functionality [ 186.357893][ T5882] usb 3-1: USB disconnect, device number 13 [ 186.358868][ T10] i2c i2c-1: connected i2c-tiny-usb device [ 186.396952][ T10] usb 2-1: USB disconnect, device number 14 [ 186.420451][ T7359] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 186.496712][ T7362] fuse: Bad value for 'user_id' [ 186.511899][ T7362] fuse: Bad value for 'user_id' [ 186.613020][ T7366] input: syz1 as /devices/virtual/input/input7 [ 187.199627][ T5901] libceph: connect (1)[c::]:6789 error -101 [ 187.205850][ T5901] libceph: mon0 (1)[c::]:6789 connect error [ 187.237144][ T7377] syzkaller0: entered promiscuous mode [ 187.242689][ T7377] syzkaller0: entered allmulticast mode [ 187.397470][ T5901] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 187.474412][ T10] libceph: connect (1)[c::]:6789 error -101 [ 187.513289][ T30] audit: type=1326 audit(1767324382.209:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7384 comm="syz.4.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57d8f8f749 code=0x7ffc0000 [ 187.514204][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 187.717634][ T5901] usb 3-1: Using ep0 maxpacket: 8 [ 187.834163][ T5924] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 187.850956][ T5901] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 187.877665][ T5901] usb 3-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 187.879883][ T30] audit: type=1326 audit(1767324382.249:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7384 comm="syz.4.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7f57d8f8f749 code=0x7ffc0000 [ 187.907610][ T5901] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 187.993230][ T5901] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.084529][ T30] audit: type=1326 audit(1767324382.249:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7384 comm="syz.4.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57d8f8f749 code=0x7ffc0000 [ 188.139187][ T5901] usbtmc 3-1:16.0: bulk endpoints not found [ 188.147406][ T5924] usb 1-1: Using ep0 maxpacket: 32 [ 188.161014][ T30] audit: type=1326 audit(1767324382.249:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7384 comm="syz.4.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7f57d8f8f749 code=0x7ffc0000 [ 188.166507][ T5924] usb 1-1: no configurations [ 188.214291][ T5924] usb 1-1: can't read configurations, error -22 [ 188.254942][ T30] audit: type=1326 audit(1767324382.249:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7384 comm="syz.4.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57d8f8f749 code=0x7ffc0000 [ 188.390725][ T5924] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 188.417850][ T5901] libceph: connect (1)[c::]:6789 error -101 [ 188.424938][ T5901] libceph: mon0 (1)[c::]:6789 connect error [ 188.557579][ T5924] usb 1-1: Using ep0 maxpacket: 32 [ 188.564024][ T5924] usb 1-1: no configurations [ 188.569708][ T5924] usb 1-1: can't read configurations, error -22 [ 188.578623][ T5924] usb usb1-port1: attempt power cycle [ 188.677665][ T5901] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 188.804480][ T7401] fuse: Bad value for 'user_id' [ 188.810923][ T7401] fuse: Bad value for 'user_id' [ 188.817651][ T5901] usb 4-1: device descriptor read/64, error -71 [ 188.946513][ T5924] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 188.977766][ T5924] usb 1-1: Using ep0 maxpacket: 32 [ 188.983853][ T5924] usb 1-1: no configurations [ 188.997458][ T10] usb 5-1: new low-speed USB device number 15 using dummy_hcd [ 189.011233][ T5924] usb 1-1: can't read configurations, error -22 [ 189.412968][ T5901] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 189.498727][ T10] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 189.506204][ T10] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 189.517049][ T10] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 189.528900][ T10] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 189.540150][ T10] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 189.551735][ T5901] usb 4-1: device descriptor read/64, error -71 [ 189.558026][ T5924] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 189.565715][ T7370] ceph: No mds server is up or the cluster is laggy [ 189.573597][ T10] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 189.581213][ T10] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 189.594362][ T10] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 189.607506][ T10] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 189.619190][ T10] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 189.637587][ T10] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 189.645329][ T10] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 189.668335][ T5901] usb usb4-port1: attempt power cycle [ 189.675370][ T10] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 189.687219][ T10] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 189.698526][ T10] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 189.777929][ T10] usb 5-1: string descriptor 0 read error: -22 [ 189.786787][ T10] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 189.796542][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.824837][ T10] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 189.954211][ T5924] usb 1-1: device descriptor read/8, error -71 [ 190.160840][ T5901] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 190.169835][ T5924] usb usb1-port1: unable to enumerate USB device [ 190.243102][ T7410] geneve2: entered promiscuous mode [ 190.627303][ T5978] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 55493 - 0 [ 190.641258][ T5978] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 55493 - 0 [ 190.665892][ T5978] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 55493 - 0 [ 190.678713][ T5817] usb 3-1: USB disconnect, device number 14 [ 190.704235][ T5978] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 55493 - 0 [ 190.718990][ T5901] usb 4-1: device descriptor read/8, error -71 [ 190.999337][ T5924] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 191.075280][ T5822] Bluetooth: hci1: command 0x0406 tx timeout [ 191.097807][ T5822] Bluetooth: hci3: command 0x0406 tx timeout [ 191.097884][ T52] Bluetooth: hci4: command 0x0406 tx timeout [ 191.110146][ T52] Bluetooth: hci2: command 0x0406 tx timeout [ 191.211449][ T7437] bridge0: port 3(gretap0) entered blocking state [ 191.219122][ T7437] bridge0: port 3(gretap0) entered disabled state [ 191.227031][ T7437] gretap0: entered allmulticast mode [ 191.246433][ T7437] gretap0: entered promiscuous mode [ 191.255554][ T7437] bridge0: port 3(gretap0) entered blocking state [ 191.262388][ T7437] bridge0: port 3(gretap0) entered forwarding state [ 192.116163][ T5924] usb 1-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 192.126690][ T5924] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.408280][ T5924] usb 1-1: Product: syz [ 192.412487][ T5924] usb 1-1: Manufacturer: syz [ 192.417488][ T5924] usb 1-1: SerialNumber: syz [ 192.425729][ T5924] usb 1-1: config 0 descriptor?? [ 192.434286][ T5924] i2c-tiny-usb 1-1:0.0: version 6d.cc found at bus 001 address 015 [ 192.754227][ T89] usb 5-1: USB disconnect, device number 15 [ 192.912013][ T7442] fuse: Bad value for 'user_id' [ 192.933442][ T7442] fuse: Bad value for 'user_id' [ 193.254355][ T5924] i2c i2c-1: failure reading functionality [ 193.290977][ T5924] i2c i2c-1: connected i2c-tiny-usb device [ 193.303230][ T5924] usb 1-1: USB disconnect, device number 15 [ 194.035198][ T7452] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.113973][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.124120][ T7452] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.134155][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.827692][ T5889] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 194.950817][ T7452] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.459639][ T5889] usb 3-1: Using ep0 maxpacket: 8 [ 195.713567][ T5889] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 195.738578][ T7452] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.748857][ T5889] usb 3-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 195.777938][ T5889] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 195.787004][ T5889] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.810753][ T5889] usbtmc 3-1:16.0: bulk endpoints not found [ 195.877704][ T5978] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.902849][ T5978] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.927771][ T5978] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.948672][ T5978] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.044035][ T7471] fuse: Unknown parameter '0x0000000000000004' [ 196.067482][ T5817] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 196.208067][ T5817] usb 2-1: device descriptor read/64, error -71 [ 196.321669][ T5901] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 196.378092][ T10] usb 5-1: new low-speed USB device number 16 using dummy_hcd [ 196.467762][ T5817] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 196.506343][ T5901] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 196.523157][ T5901] usb 4-1: config 0 interface 0 has no altsetting 0 [ 196.537255][ T5901] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 196.556582][ T5901] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 196.573767][ T5901] usb 4-1: Product: syz [ 196.583361][ T5901] usb 4-1: Manufacturer: syz [ 196.588849][ T5901] usb 4-1: SerialNumber: syz [ 196.593611][ T10] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 196.603256][ T5901] usb 4-1: config 0 descriptor?? [ 196.608393][ T5817] usb 2-1: device descriptor read/64, error -71 [ 196.616290][ T10] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 196.626936][ T7481] fuse: Bad value for 'fd' [ 196.628889][ T10] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 196.646477][ T5901] usb 4-1: selecting invalid altsetting 0 [ 196.656699][ T10] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 196.670377][ T30] kauditd_printk_skb: 32 callbacks suppressed [ 196.670394][ T30] audit: type=1400 audit(1767324391.359:640): avc: denied { connect } for pid=7482 comm="syz.0.416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 196.709657][ T10] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 196.728349][ T10] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 196.736477][ T10] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 196.750586][ T5817] usb usb2-port1: attempt power cycle [ 196.788177][ T10] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 196.803142][ T10] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 196.867557][ T10] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 196.959150][ T10] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 197.030691][ T10] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 197.118248][ T5817] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 197.167026][ T5826] usb 4-1: USB disconnect, device number 21 [ 197.174425][ T10] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 197.192554][ T10] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 197.204556][ T10] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 197.225226][ T5817] usb 2-1: device descriptor read/8, error -71 [ 197.244271][ T10] usb 5-1: string descriptor 0 read error: -22 [ 197.263392][ T10] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 197.314375][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.374317][ T10] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 198.219679][ T7503] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 198.623716][ T30] audit: type=1400 audit(1767324392.929:641): avc: denied { map } for pid=7498 comm="syz.1.420" path="socket:[14787]" dev="sockfs" ino=14787 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 198.913568][ T5960] usb 5-1: USB disconnect, device number 16 [ 198.944016][ T7509] usb 3-1: USB disconnect, device number 15 [ 198.988813][ T7513] fuse: Unknown parameter '0x0000000000000004' [ 199.091907][ T7518] fuse: Bad value for 'fd' [ 199.110229][ T30] audit: type=1400 audit(1767324393.809:642): avc: denied { block_suspend } for pid=7514 comm="syz.2.425" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 199.255969][ T30] audit: type=1400 audit(1767324393.939:643): avc: denied { connect } for pid=7514 comm="syz.2.425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 200.847149][ T30] audit: type=1400 audit(1767324395.539:644): avc: denied { name_bind } for pid=7536 comm="syz.2.432" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 200.955493][ T30] audit: type=1400 audit(1767324395.539:645): avc: denied { create } for pid=7536 comm="syz.2.432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 201.018306][ T30] audit: type=1400 audit(1767324395.539:646): avc: denied { ioctl } for pid=7536 comm="syz.2.432" path="socket:[14840]" dev="sockfs" ino=14840 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 201.043177][ T30] audit: type=1400 audit(1767324395.539:647): avc: denied { connect } for pid=7536 comm="syz.2.432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 201.063160][ T30] audit: type=1400 audit(1767324395.539:648): avc: denied { write } for pid=7536 comm="syz.2.432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 201.137573][ T7544] nbd4: detected capacity change from 0 to 63 [ 201.152212][ T7546] block nbd4: NBD_DISCONNECT [ 201.164928][ T7546] block nbd4: Disconnected due to user request. [ 201.203851][ T7546] block nbd4: shutting down sockets [ 201.268705][ C0] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 201.278396][ C0] Buffer I/O error on dev nbd4, logical block 0, async page read [ 201.287419][ C0] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 201.297009][ C0] Buffer I/O error on dev nbd4, logical block 1, async page read [ 201.304802][ C0] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 201.314255][ C0] Buffer I/O error on dev nbd4, logical block 2, async page read [ 201.322050][ C0] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 201.331598][ C0] Buffer I/O error on dev nbd4, logical block 3, async page read [ 201.340948][ T6222] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 201.351977][ T6222] Buffer I/O error on dev nbd4, logical block 0, async page read [ 201.363761][ T6222] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 201.377250][ T6222] Buffer I/O error on dev nbd4, logical block 1, async page read [ 201.385381][ T6222] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 201.395168][ T6222] Buffer I/O error on dev nbd4, logical block 2, async page read [ 201.486477][ T6222] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 201.528405][ T6222] Buffer I/O error on dev nbd4, logical block 3, async page read [ 201.536914][ T6222] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 201.546972][ T6222] Buffer I/O error on dev nbd4, logical block 0, async page read [ 201.555189][ T6222] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 201.565095][ T6222] Buffer I/O error on dev nbd4, logical block 1, async page read [ 201.573681][ T6222] ldm_validate_partition_table(): Disk read failed. [ 201.581026][ T6222] Dev nbd4: unable to read RDB block 0 [ 201.586967][ T6222] nbd4: unable to read partition table [ 201.599331][ T6222] ldm_validate_partition_table(): Disk read failed. [ 201.606351][ T6222] Dev nbd4: unable to read RDB block 0 [ 201.611504][ T7549] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 201.623823][ T30] audit: type=1400 audit(1767324396.219:649): avc: denied { create } for pid=7547 comm="syz.4.434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 201.669627][ T6222] nbd4: unable to read partition table [ 201.729611][ T30] audit: type=1400 audit(1767324396.219:650): avc: denied { ioctl } for pid=7547 comm="syz.4.434" path="socket:[16077]" dev="sockfs" ino=16077 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 201.811911][ T7555] fuse: Unknown parameter '0x0000000000000004' [ 201.857682][ T30] audit: type=1400 audit(1767324396.309:651): avc: denied { read write } for pid=7547 comm="syz.4.434" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 201.883011][ T30] audit: type=1400 audit(1767324396.309:652): avc: denied { open } for pid=7547 comm="syz.4.434" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 201.907636][ T30] audit: type=1400 audit(1767324396.359:653): avc: denied { write } for pid=7547 comm="syz.4.434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 201.907834][ T24] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 201.992289][ T7557] fuse: Bad value for 'fd' [ 202.007505][ T5817] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 202.119881][ T30] audit: type=1400 audit(1767324396.809:654): avc: denied { create } for pid=7560 comm="syz.4.440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 202.137615][ T24] usb 2-1: device descriptor read/64, error -71 [ 202.167481][ T5817] usb 3-1: Using ep0 maxpacket: 8 [ 202.180811][ T5817] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 202.194614][ T5817] usb 3-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 202.214335][ T5817] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 202.380274][ T5817] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.394054][ T5817] usbtmc 3-1:16.0: bulk endpoints not found [ 202.457553][ T24] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 202.467472][ T5960] usb 4-1: new low-speed USB device number 22 using dummy_hcd [ 202.512831][ T30] audit: type=1400 audit(1767324397.209:655): avc: denied { getopt } for pid=7566 comm="syz.0.441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 202.631905][ T30] audit: type=1400 audit(1767324397.319:656): avc: denied { shutdown } for pid=7566 comm="syz.0.441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 202.671331][ T5889] libceph: connect (1)[c::]:6789 error -101 [ 202.677529][ T24] usb 2-1: device descriptor read/64, error -71 [ 202.684562][ T5889] libceph: mon0 (1)[c::]:6789 connect error [ 202.732610][ T5960] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 202.740208][ T5960] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 202.765464][ T5960] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 202.787830][ T24] usb usb2-port1: attempt power cycle [ 202.807507][ T5960] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 202.832251][ T5960] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 202.949655][ T5889] libceph: connect (1)[c::]:6789 error -101 [ 202.955740][ T5889] libceph: mon0 (1)[c::]:6789 connect error [ 202.968093][ T5960] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 202.975599][ T5960] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 202.998553][ T5960] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 203.043141][ T5960] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 203.072775][ T5960] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 203.100007][ T5960] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 203.116277][ T5960] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 203.127607][ T5960] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 203.137618][ T24] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 203.139588][ T5960] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 203.159529][ T5960] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 203.171955][ T24] usb 2-1: device descriptor read/8, error -71 [ 203.174235][ T5960] usb 4-1: string descriptor 0 read error: -22 [ 203.190768][ T5960] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 203.200943][ T5960] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.220444][ T5960] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 203.340706][ T7567] ceph: No mds server is up or the cluster is laggy [ 203.457525][ T24] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 203.499979][ T24] usb 2-1: device descriptor read/8, error -71 [ 203.792260][ T24] usb usb2-port1: unable to enumerate USB device [ 203.863551][ T5826] usb 4-1: USB disconnect, device number 22 [ 204.043890][ T7591] fuse: Unknown parameter 'fd0x0000000000000004' [ 204.090345][ T30] audit: type=1400 audit(1767324398.789:657): avc: denied { read write } for pid=7592 comm="syz.0.448" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 204.202813][ T7593] tracefs: Bad value for 'mode' [ 204.210773][ T30] audit: type=1400 audit(1767324398.789:658): avc: denied { open } for pid=7592 comm="syz.0.448" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 204.234219][ T7599] fuse: Bad value for 'fd' [ 204.238372][ T30] audit: type=1400 audit(1767324398.899:659): avc: denied { mount } for pid=7592 comm="syz.0.448" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 204.447472][ T7603] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 204.447506][ T5960] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 205.498705][ T5960] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 205.506871][ T5960] usb 2-1: config 0 has no interface number 0 [ 205.515477][ T5960] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 205.525709][ T5960] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.534942][ T5960] usb 2-1: Product: syz [ 205.539992][ T5960] usb 2-1: Manufacturer: syz [ 205.544683][ T5960] usb 2-1: SerialNumber: syz [ 205.571133][ T5817] usb 3-1: USB disconnect, device number 16 [ 205.579713][ T5960] usb 2-1: config 0 descriptor?? [ 205.742826][ T5826] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 205.786156][ T5960] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 205.900810][ T5960] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 206.341162][ T5960] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 206.367255][ T5960] usb 2-1: media controller created [ 206.375357][ T5826] usb 4-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 206.385440][ T5826] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.393821][ T5826] usb 4-1: Product: syz [ 206.406145][ T5826] usb 4-1: Manufacturer: syz [ 206.408580][ T5960] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 206.417582][ T5826] usb 4-1: SerialNumber: syz [ 206.430586][ T5826] usb 4-1: config 0 descriptor?? [ 206.450586][ T5826] i2c-tiny-usb 4-1:0.0: version 6d.cc found at bus 004 address 023 [ 206.508102][ T5960] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 206.867694][ T5960] usb 2-1: USB disconnect, device number 23 [ 207.067642][ T5826] i2c i2c-2: failure reading functionality [ 207.080859][ T5826] i2c i2c-2: connected i2c-tiny-usb device [ 207.097655][ T10] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 207.113491][ T5826] usb 4-1: USB disconnect, device number 23 [ 207.154218][ T7634] fuse: Unknown parameter 'fd0x0000000000000004' [ 207.192804][ T7635] warning: `syz.4.457' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 207.243975][ T7638] fuse: Bad value for 'fd' [ 207.268903][ T10] usb 3-1: device descriptor read/64, error -71 [ 207.885882][ T10] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 208.048374][ T10] usb 3-1: device descriptor read/64, error -71 [ 208.714968][ T10] usb usb3-port1: attempt power cycle [ 209.048094][ T7661] FAULT_INJECTION: forcing a failure. [ 209.048094][ T7661] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 209.061449][ T7661] CPU: 0 UID: 0 PID: 7661 Comm: syz.2.470 Not tainted syzkaller #0 PREEMPT(full) [ 209.061473][ T7661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 209.061484][ T7661] Call Trace: [ 209.061490][ T7661] [ 209.061496][ T7661] dump_stack_lvl+0x16c/0x1f0 [ 209.061522][ T7661] should_fail_ex+0x512/0x640 [ 209.061552][ T7661] _copy_from_user+0x2e/0xd0 [ 209.061577][ T7661] move_addr_to_kernel+0x65/0x170 [ 209.061603][ T7661] __sys_sendto+0x1be/0x520 [ 209.061628][ T7661] ? __pfx___sys_sendto+0x10/0x10 [ 209.061671][ T7661] ? ksys_write+0x1ac/0x250 [ 209.061692][ T7661] ? __pfx_ksys_write+0x10/0x10 [ 209.061715][ T7661] __x64_sys_sendto+0xe0/0x1c0 [ 209.061739][ T7661] ? do_syscall_64+0x91/0xf80 [ 209.061759][ T7661] ? lockdep_hardirqs_on+0x7c/0x110 [ 209.061779][ T7661] do_syscall_64+0xcd/0xf80 [ 209.061801][ T7661] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.061818][ T7661] RIP: 0033:0x7f1519d8f749 [ 209.061832][ T7661] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 209.061848][ T7661] RSP: 002b:00007f151ac7e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 209.061864][ T7661] RAX: ffffffffffffffda RBX: 00007f1519fe5fa0 RCX: 00007f1519d8f749 [ 209.061874][ T7661] RDX: 0000000000000001 RSI: 00002000000004c0 RDI: 0000000000000003 [ 209.061884][ T7661] RBP: 00007f151ac7e090 R08: 0000200000000140 R09: 000000000000001c [ 209.061893][ T7661] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 209.061903][ T7661] R13: 00007f1519fe6038 R14: 00007f1519fe5fa0 R15: 00007ffe6bcab638 [ 209.061925][ T7661] [ 209.310298][ T7663] bridge0: port 3(gretap0) entered blocking state [ 209.317445][ T7663] bridge0: port 3(gretap0) entered disabled state [ 209.324545][ T7663] gretap0: entered allmulticast mode [ 209.336579][ T7663] gretap0: entered promiscuous mode [ 209.343533][ T7663] bridge0: port 3(gretap0) entered blocking state [ 209.350085][ T7663] bridge0: port 3(gretap0) entered forwarding state [ 209.436115][ T5960] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 209.839836][ T5960] usb 4-1: Using ep0 maxpacket: 8 [ 209.846734][ T5960] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 209.895050][ T5960] usb 4-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 209.939281][ T5960] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 209.979397][ T5960] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.007973][ T7665] fuse: Unknown parameter 'fd0x0000000000000004' [ 210.112675][ T5960] usbtmc 4-1:16.0: bulk endpoints not found [ 210.443015][ T7672] veth2: entered promiscuous mode [ 210.463284][ T7672] veth2: entered allmulticast mode [ 211.747042][ T5826] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 211.757808][ T5846] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 212.136969][ T10] usb 4-1: USB disconnect, device number 24 [ 212.198679][ T5846] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 212.210130][ T5846] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 212.220511][ T5846] usb 1-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 212.230626][ T5846] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.240864][ T5846] usb 1-1: config 0 descriptor?? [ 212.247547][ T5889] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 212.275324][ T5826] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 212.285331][ T5826] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.293503][ T5826] usb 2-1: Product: syz [ 212.297838][ T5826] usb 2-1: Manufacturer: syz [ 212.302481][ T5826] usb 2-1: SerialNumber: syz [ 212.308887][ T5826] usb 2-1: config 0 descriptor?? [ 212.318021][ T5826] i2c-tiny-usb 2-1:0.0: version 6d.cc found at bus 002 address 024 [ 212.407472][ T5889] usb 5-1: Using ep0 maxpacket: 16 [ 212.413951][ T5889] usb 5-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 212.423808][ T5889] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.459387][ T5889] usb 5-1: config 0 descriptor?? [ 212.472493][ T5889] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 212.487616][ T10] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 212.649886][ T10] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 212.666045][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.729178][ T10] usb 4-1: config 0 descriptor?? [ 212.913493][ T7698] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.954998][ T7698] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.003142][ T10] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 213.210585][ T7721] ieee802154 phy0 wpan0: encryption failed: -22 [ 213.310778][ T10] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 213.357610][ T10] [drm] Initialized udl on minor 2 [ 213.409941][ T5826] i2c i2c-1: failure reading functionality [ 213.454089][ T5889] gspca_sonixj: reg_w1 err -110 [ 213.523893][ T5846] hid-steam 0003:28DE:1142.0009: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.0-1/input0 [ 214.114970][ T10] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 1 failed err ffffffb9 [ 214.180737][ T10] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 214.214319][ T5817] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 214.369103][ T10] usb 4-1: USB disconnect, device number 25 [ 214.389067][ T5817] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 214.743885][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 214.743924][ T30] audit: type=1400 audit(1767324407.279:663): avc: denied { setopt } for pid=7712 comm="syz.2.484" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 215.125022][ T30] audit: type=1400 audit(1767324407.379:664): avc: denied { bind } for pid=7702 comm="syz.4.481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 215.173020][ T30] audit: type=1400 audit(1767324407.909:665): avc: denied { write } for pid=7719 comm="syz.0.485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 215.199616][ T30] audit: type=1400 audit(1767324409.069:666): avc: denied { bind } for pid=7702 comm="syz.4.481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 215.211263][ T5889] sonixj 5-1:0.0: probe with driver sonixj failed with error -110 [ 215.254766][ T30] audit: type=1400 audit(1767324409.079:667): avc: denied { node_bind } for pid=7702 comm="syz.4.481" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 215.281871][ T5826] i2c i2c-1: connected i2c-tiny-usb device [ 215.372216][ T5826] usb 2-1: USB disconnect, device number 24 [ 215.394495][ T5846] hid-steam 0003:28DE:1142.0009: Steam wireless receiver connected [ 215.552866][ T5889] usb 5-1: USB disconnect, device number 17 [ 215.574536][ T5846] hid-steam 0003:28DE:1142.000A: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.0-1/input0 [ 215.645730][ T5846] usb 1-1: USB disconnect, device number 16 [ 215.857837][ T5826] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 215.972560][ T30] audit: type=1400 audit(1767324410.669:668): avc: denied { setopt } for pid=7748 comm="syz.2.493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 215.979479][ T5846] hid-steam 0003:28DE:1142.0009: Steam wireless receiver disconnected [ 216.030272][ T7744] fido_id[7744]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 216.050056][ T7743] netlink: 68 bytes leftover after parsing attributes in process `syz.0.492'. [ 216.084083][ T5826] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 216.093259][ T5826] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.111966][ T5826] usb 2-1: Product: syz [ 216.123585][ T5826] usb 2-1: Manufacturer: syz [ 216.145945][ T5826] usb 2-1: SerialNumber: syz [ 216.162299][ T5826] usb 2-1: config 0 descriptor?? [ 216.828871][ T5826] i2c-tiny-usb 2-1:0.0: version 6d.cc found at bus 002 address 025 [ 217.445229][ T30] audit: type=1400 audit(1767324412.139:669): avc: denied { module_request } for pid=7759 comm="syz.3.500" kmod="net-pf-10-proto-127-type-0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 217.472310][ T7764] netlink: 20 bytes leftover after parsing attributes in process `syz.4.499'. [ 217.637455][ T5846] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 217.661957][ T5826] i2c i2c-1: failure reading functionality [ 217.730619][ T5826] i2c i2c-1: connected i2c-tiny-usb device [ 217.827755][ T10] IPVS: starting estimator thread 0... [ 217.850587][ T5826] usb 2-1: USB disconnect, device number 25 [ 217.917781][ T7770] IPVS: using max 54 ests per chain, 129600 per kthread [ 217.997137][ T5846] usb 1-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 218.007426][ T5846] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.023883][ T5846] usb 1-1: Product: syz [ 218.030069][ T5846] usb 1-1: Manufacturer: syz [ 218.065633][ T5846] usb 1-1: SerialNumber: syz [ 218.095548][ T5846] usb 1-1: config 0 descriptor?? [ 218.107488][ T10] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 218.109222][ T5846] i2c-tiny-usb 1-1:0.0: version 6d.cc found at bus 001 address 017 [ 218.307427][ T6229] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 218.321854][ T30] audit: type=1400 audit(1767324669.015:670): avc: denied { create } for pid=7778 comm="syz.3.504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 218.395276][ T10] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 218.794791][ T5846] i2c i2c-1: failure reading functionality [ 219.145238][ T5846] i2c i2c-1: connected i2c-tiny-usb device [ 219.275085][ T5846] usb 1-1: USB disconnect, device number 17 [ 219.743174][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.766717][ T30] audit: type=1400 audit(1767324670.456:671): avc: denied { module_load } for pid=7781 comm="syz.1.505" path="/91/bus" dev="tmpfs" ino=503 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 219.790138][ T7784] Invalid ELF header magic: != ELF [ 219.798001][ T10] usb 3-1: config 0 descriptor?? [ 219.887257][ T6229] usb 5-1: Using ep0 maxpacket: 8 [ 219.898895][ T6229] usb 5-1: unable to get BOS descriptor or descriptor too short [ 219.913417][ T6229] usb 5-1: config 4 has an invalid interface number: 147 but max is 0 [ 219.928314][ T6229] usb 5-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 219.967228][ T6229] usb 5-1: config 4 has no interface number 0 [ 219.989879][ T6229] usb 5-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 220.014061][ T6229] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.042748][ T10] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 220.050292][ T6229] usb 5-1: Product: syz [ 220.071033][ T6229] usb 5-1: Manufacturer: Э [ 220.087290][ T6229] usb 5-1: SerialNumber: syz [ 220.371572][ T10] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 220.452252][ T6229] uvcvideo 5-1:4.147: Found UVC 0.00 device syz (04f2:b746) [ 220.467603][ T10] [drm] Initialized udl on minor 2 [ 220.483387][ T6229] uvcvideo 5-1:4.147: No valid video chain found. [ 220.508314][ T6229] usb 5-1: USB disconnect, device number 18 [ 220.731060][ T10] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 1 failed err ffffffb9 [ 220.767654][ T10] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 220.778985][ T6229] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 220.817350][ T6229] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 220.826684][ T10] usb 3-1: USB disconnect, device number 20 [ 221.040672][ T7801] Mount JFS Failure: -5 [ 221.066019][ T6229] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 221.287390][ T6229] usb 1-1: Using ep0 maxpacket: 16 [ 221.307526][ T6229] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 221.319271][ T6229] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 221.339636][ T6229] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 221.351416][ T6229] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.382270][ T6229] usb 1-1: config 0 descriptor?? [ 222.530635][ T30] audit: type=1400 audit(1767324673.226:672): avc: denied { listen } for pid=7811 comm="syz.4.513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 222.571977][ T7818] FAULT_INJECTION: forcing a failure. [ 222.571977][ T7818] name failslab, interval 1, probability 0, space 0, times 0 [ 222.584977][ T7818] CPU: 0 UID: 0 PID: 7818 Comm: syz.3.515 Not tainted syzkaller #0 PREEMPT(full) [ 222.585009][ T7818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 222.585015][ T7818] Call Trace: [ 222.585020][ T7818] [ 222.585024][ T7818] dump_stack_lvl+0x16c/0x1f0 [ 222.585041][ T7818] should_fail_ex+0x512/0x640 [ 222.585057][ T7818] ? __kmalloc_noprof+0xca/0x910 [ 222.585074][ T7818] should_failslab+0xc2/0x120 [ 222.585089][ T7818] __kmalloc_noprof+0xeb/0x910 [ 222.585105][ T7818] ? video_usercopy+0x1a0/0x16c0 [ 222.585119][ T7818] ? video_usercopy+0x1a0/0x16c0 [ 222.585130][ T7818] ? do_vfs_ioctl+0x128/0x14f0 [ 222.585142][ T7818] video_usercopy+0x1a0/0x16c0 [ 222.585154][ T7818] ? __pfx___video_do_ioctl+0x10/0x10 [ 222.585165][ T7818] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 222.585180][ T7818] ? __pfx_video_usercopy+0x10/0x10 [ 222.585200][ T7818] v4l2_ioctl+0x1bd/0x250 [ 222.585212][ T7818] ? __pfx_v4l2_ioctl+0x10/0x10 [ 222.585228][ T7818] __x64_sys_ioctl+0x18e/0x210 [ 222.585240][ T7818] do_syscall_64+0xcd/0xf80 [ 222.585255][ T7818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.585266][ T7818] RIP: 0033:0x7ff90b58f749 [ 222.585275][ T7818] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 222.585285][ T7818] RSP: 002b:00007ff90c4be038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 222.585295][ T7818] RAX: ffffffffffffffda RBX: 00007ff90b7e5fa0 RCX: 00007ff90b58f749 [ 222.585306][ T7818] RDX: 0000200000000380 RSI: 00000000c0845657 RDI: 0000000000000003 [ 222.585312][ T7818] RBP: 00007ff90c4be090 R08: 0000000000000000 R09: 0000000000000000 [ 222.585317][ T7818] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 222.585323][ T7818] R13: 00007ff90b7e6038 R14: 00007ff90b7e5fa0 R15: 00007fffb4770508 [ 222.585336][ T7818] [ 222.906874][ T6229] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 223.047033][ T6032] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 223.081172][ T6229] usb 5-1: Using ep0 maxpacket: 16 [ 223.084107][ T5889] usb 1-1: USB disconnect, device number 18 [ 223.088022][ T6229] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 223.106961][ T6229] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 223.117078][ T6229] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.133528][ T6229] usb 5-1: config 0 descriptor?? [ 223.228794][ T6032] usb 4-1: Using ep0 maxpacket: 8 [ 223.280728][ T6032] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 223.300283][ T6032] usb 4-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 223.447210][ T6032] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 223.922017][ T6032] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.922117][ T6229] usbhid 5-1:0.0: can't add hid device: -71 [ 223.957594][ T6032] usbtmc 4-1:16.0: bulk endpoints not found [ 223.967329][ T6229] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 224.003794][ T7830] binder: 7829:7830 ioctl c0306201 0 returned -14 [ 224.014016][ T6229] usb 5-1: USB disconnect, device number 19 [ 224.036216][ T7833] netlink: 92 bytes leftover after parsing attributes in process `syz.2.520'. [ 224.627645][ T6032] IPVS: starting estimator thread 0... [ 224.716686][ T7845] IPVS: using max 43 ests per chain, 103200 per kthread [ 224.881518][ T7853] netlink: 28 bytes leftover after parsing attributes in process `syz.0.521'. [ 225.146508][ T7855] erofs (device loop0): cannot find valid erofs superblock [ 226.042805][ T7867] netlink: 4220 bytes leftover after parsing attributes in process `syz.1.524'. [ 226.535841][ T7869] netlink: 'syz.4.526': attribute type 4 has an invalid length. [ 226.543738][ T7869] netlink: 152 bytes leftover after parsing attributes in process `syz.4.526'. [ 226.607625][ T5889] usb 4-1: USB disconnect, device number 26 [ 227.229248][ T30] audit: type=1400 audit(1767324677.926:673): avc: denied { watch watch_reads } for pid=7878 comm="syz.2.530" path="pipe:[5247]" dev="pipefs" ino=5247 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 227.255721][ T7884] [ 227.258078][ T7884] ====================================================== [ 227.265104][ T7884] WARNING: possible circular locking dependency detected [ 227.272126][ T7884] syzkaller #0 Not tainted [ 227.276541][ T7884] ------------------------------------------------------ [ 227.283570][ T7884] syz.2.530/7884 is trying to acquire lock: [ 227.289506][ T7884] ffff88802b3680a0 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xe1/0x12d0 [ 227.298144][ T7884] [ 227.298144][ T7884] but task is already holding lock: [ 227.305507][ T7884] ffff88807d4b5868 (&pipe->mutex){+.+.}-{4:4}, at: pipe_lock+0x64/0x80 [ 227.313883][ T7884] [ 227.313883][ T7884] which lock already depends on the new lock. [ 227.313883][ T7884] [ 227.324265][ T7884] [ 227.324265][ T7884] the existing dependency chain (in reverse order) is: [ 227.333269][ T7884] [ 227.333269][ T7884] -> #3 (&pipe->mutex){+.+.}-{4:4}: [ 227.340719][ T7884] __mutex_lock+0x1aa/0x1ca0 [ 227.345842][ T7884] anon_pipe_write+0x15d/0x1bd0 [ 227.351200][ T7884] __kernel_write_iter+0x720/0xb10 [ 227.356807][ T7884] __kernel_write+0xf5/0x140 [ 227.361905][ T7884] autofs_notify_daemon+0x4db/0xd60 [ 227.367595][ T7884] autofs_wait+0x10f3/0x1ac0 [ 227.372944][ T7884] autofs_mount_wait+0x132/0x3c0 [ 227.378563][ T7884] autofs_d_automount+0x4b2/0x960 [ 227.384182][ T7884] __traverse_mounts+0x1b9/0x830 [ 227.389618][ T7884] step_into_slowpath+0x772/0xf50 [ 227.395149][ T7884] path_lookupat+0x627/0xc40 [ 227.400255][ T7884] filename_lookup+0x224/0x5f0 [ 227.405528][ T7884] kern_path+0x35/0x50 [ 227.410213][ T7884] lookup_bdev+0xd8/0x280 [ 227.415092][ T7884] resume_store+0x1d6/0x490 [ 227.420130][ T7884] kobj_attr_store+0x58/0x80 [ 227.425241][ T7884] sysfs_kf_write+0xf2/0x150 [ 227.430441][ T7884] kernfs_fop_write_iter+0x3af/0x570 [ 227.436237][ T7884] vfs_write+0x7d3/0x11d0 [ 227.441088][ T7884] ksys_write+0x12a/0x250 [ 227.445910][ T7884] do_syscall_64+0xcd/0xf80 [ 227.450931][ T7884] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.457334][ T7884] [ 227.457334][ T7884] -> #2 (&sbi->pipe_mutex){+.+.}-{4:4}: [ 227.465171][ T7884] __mutex_lock+0x1aa/0x1ca0 [ 227.470269][ T7884] autofs_notify_daemon+0x4a6/0xd60 [ 227.475982][ T7884] autofs_wait+0x10f3/0x1ac0 [ 227.481163][ T7884] autofs_mount_wait+0x132/0x3c0 [ 227.486610][ T7884] autofs_d_automount+0x4b2/0x960 [ 227.492133][ T7884] __traverse_mounts+0x1b9/0x830 [ 227.497567][ T7884] step_into_slowpath+0x772/0xf50 [ 227.503083][ T7884] path_lookupat+0x627/0xc40 [ 227.508163][ T7884] filename_lookup+0x224/0x5f0 [ 227.513431][ T7884] kern_path+0x35/0x50 [ 227.518011][ T7884] lookup_bdev+0xd8/0x280 [ 227.522865][ T7884] resume_store+0x1d6/0x490 [ 227.527864][ T7884] kobj_attr_store+0x58/0x80 [ 227.532968][ T7884] sysfs_kf_write+0xf2/0x150 [ 227.538150][ T7884] kernfs_fop_write_iter+0x3af/0x570 [ 227.543935][ T7884] vfs_write+0x7d3/0x11d0 [ 227.548764][ T7884] ksys_write+0x12a/0x250 [ 227.553600][ T7884] do_syscall_64+0xcd/0xf80 [ 227.558612][ T7884] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.565016][ T7884] [ 227.565016][ T7884] -> #1 (&of->mutex){+.+.}-{4:4}: [ 227.572288][ T7884] __mutex_lock+0x1aa/0x1ca0 [ 227.577376][ T7884] kernfs_seq_start+0x4f/0x2a0 [ 227.582640][ T7884] seq_read_iter+0x2c1/0x12d0 [ 227.587809][ T7884] kernfs_fop_read_iter+0x46c/0x610 [ 227.593617][ T7884] copy_splice_read+0x618/0xc20 [ 227.598981][ T7884] do_splice_read+0x285/0x370 [ 227.604158][ T7884] splice_direct_to_actor+0x2a1/0xa30 [ 227.610037][ T7884] do_splice_direct+0x174/0x240 [ 227.615379][ T7884] do_sendfile+0xb06/0xe50 [ 227.620292][ T7884] __x64_sys_sendfile64+0x1d8/0x220 [ 227.625986][ T7884] do_syscall_64+0xcd/0xf80 [ 227.630984][ T7884] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.637627][ T7884] [ 227.637627][ T7884] -> #0 (&p->lock){+.+.}-{4:4}: [ 227.644639][ T7884] __lock_acquire+0x1669/0x2890 [ 227.649994][ T7884] lock_acquire+0x179/0x330 [ 227.655010][ T7884] __mutex_lock+0x1aa/0x1ca0 [ 227.660221][ T7884] seq_read_iter+0xe1/0x12d0 [ 227.665322][ T7884] kernfs_fop_read_iter+0x46c/0x610 [ 227.671115][ T7884] copy_splice_read+0x618/0xc20 [ 227.676463][ T7884] do_splice_read+0x285/0x370 [ 227.681635][ T7884] splice_file_to_pipe+0x109/0x120 [ 227.687259][ T7884] do_sendfile+0x400/0xe50 [ 227.692208][ T7884] __x64_sys_sendfile64+0x1d8/0x220 [ 227.697921][ T7884] do_syscall_64+0xcd/0xf80 [ 227.702918][ T7884] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.709429][ T7884] [ 227.709429][ T7884] other info that might help us debug this: [ 227.709429][ T7884] [ 227.719735][ T7884] Chain exists of: [ 227.719735][ T7884] &p->lock --> &sbi->pipe_mutex --> &pipe->mutex [ 227.719735][ T7884] [ 227.732318][ T7884] Possible unsafe locking scenario: [ 227.732318][ T7884] [ 227.739838][ T7884] CPU0 CPU1 [ 227.745287][ T7884] ---- ---- [ 227.750641][ T7884] lock(&pipe->mutex); [ 227.754773][ T7884] lock(&sbi->pipe_mutex); [ 227.761793][ T7884] lock(&pipe->mutex); [ 227.768448][ T7884] lock(&p->lock); [ 227.772242][ T7884] [ 227.772242][ T7884] *** DEADLOCK *** [ 227.772242][ T7884] [ 227.780441][ T7884] 1 lock held by syz.2.530/7884: [ 227.785515][ T7884] #0: ffff88807d4b5868 (&pipe->mutex){+.+.}-{4:4}, at: pipe_lock+0x64/0x80 [ 227.794181][ T7884] [ 227.794181][ T7884] stack backtrace: [ 227.800045][ T7884] CPU: 1 UID: 0 PID: 7884 Comm: syz.2.530 Not tainted syzkaller #0 PREEMPT(full) [ 227.800058][ T7884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 227.800065][ T7884] Call Trace: [ 227.800071][ T7884] [ 227.800076][ T7884] dump_stack_lvl+0x116/0x1f0 [ 227.800091][ T7884] print_circular_bug+0x275/0x340 [ 227.800105][ T7884] check_noncircular+0x146/0x160 [ 227.800117][ T7884] __lock_acquire+0x1669/0x2890 [ 227.800129][ T7884] ? __alloc_frozen_pages_noprof+0x292/0x2430 [ 227.800142][ T7884] lock_acquire+0x179/0x330 [ 227.800153][ T7884] ? seq_read_iter+0xe1/0x12d0 [ 227.800167][ T7884] ? __pfx___might_resched+0x10/0x10 [ 227.800177][ T7884] __mutex_lock+0x1aa/0x1ca0 [ 227.800191][ T7884] ? seq_read_iter+0xe1/0x12d0 [ 227.800203][ T7884] ? do_splice_read+0x285/0x370 [ 227.800217][ T7884] ? do_sendfile+0x400/0xe50 [ 227.800228][ T7884] ? __x64_sys_sendfile64+0x1d8/0x220 [ 227.800242][ T7884] ? do_syscall_64+0xcd/0xf80 [ 227.800254][ T7884] ? seq_read_iter+0xe1/0x12d0 [ 227.800267][ T7884] ? __pfx___mutex_lock+0x10/0x10 [ 227.800282][ T7884] ? alloc_pages_bulk_noprof+0xac5/0x1410 [ 227.800293][ T7884] ? seq_read_iter+0xe1/0x12d0 [ 227.800305][ T7884] seq_read_iter+0xe1/0x12d0 [ 227.800318][ T7884] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 227.800330][ T7884] kernfs_fop_read_iter+0x46c/0x610 [ 227.800347][ T7884] copy_splice_read+0x618/0xc20 [ 227.800361][ T7884] ? __pfx_try_to_wake_up+0x10/0x10 [ 227.800377][ T7884] ? __pfx_copy_splice_read+0x10/0x10 [ 227.800392][ T7884] ? __fget_files+0x204/0x3c0 [ 227.800406][ T7884] ? __pfx_copy_splice_read+0x10/0x10 [ 227.800420][ T7884] do_splice_read+0x285/0x370 [ 227.800434][ T7884] splice_file_to_pipe+0x109/0x120 [ 227.800450][ T7884] do_sendfile+0x400/0xe50 [ 227.800462][ T7884] ? __pfx_do_sendfile+0x10/0x10 [ 227.800473][ T7884] ? __pfx___seccomp_filter+0x10/0x10 [ 227.800489][ T7884] __x64_sys_sendfile64+0x1d8/0x220 [ 227.800504][ T7884] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 227.800520][ T7884] ? __secure_computing+0x28e/0x3b0 [ 227.800535][ T7884] do_syscall_64+0xcd/0xf80 [ 227.800547][ T7884] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.800559][ T7884] RIP: 0033:0x7f1519d8f749 [ 227.800568][ T7884] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 227.800578][ T7884] RSP: 002b:00007f151ac5d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 227.800588][ T7884] RAX: ffffffffffffffda RBX: 00007f1519fe6090 RCX: 00007f1519d8f749 [ 227.800594][ T7884] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000000 [ 227.800600][ T7884] RBP: 00007f1519e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 227.800606][ T7884] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 227.800611][ T7884] R13: 00007f1519fe6128 R14: 00007f1519fe6090 R15: 00007ffe6bcab638 [ 227.800620][ T7884] [ 228.376255][ T30] audit: type=1400 audit(1767324679.067:674): avc: denied { read } for pid=7878 comm="syz.2.530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 228.656280][ T10] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 228.826193][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 228.832792][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 228.843874][ T10] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 228.852866][ T10] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 228.862011][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.870939][ T10] usb 5-1: config 0 descriptor?? [ 230.146771][ T10] usb 5-1: USB disconnect, device number 20