last executing test programs: 12m15.133170985s ago: executing program 1 (id=153): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x10, &(0x7f0000006680)) (async) r0 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r0, 0x0, 0x0, 0x6c, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r1 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2, 0x0, 0xffffffffffffffff}, 0x18) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) (async) prlimit64(0x0, 0xe, 0x0, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async) r6 = syz_genetlink_get_family_id$gtp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$GTP_CMD_ECHOREQ(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000380)={&(0x7f00000001c0)={0x1c, r6, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@GTPA_FAMILY={0x5, 0xd, 0x26}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x4040090) (async) r7 = fsopen(&(0x7f0000001240)='nfsd\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r8, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x34, r9, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_PAUSE_TX={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040800}, 0x24004) (async) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) 12m14.585443441s ago: executing program 1 (id=154): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)='a', 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="30000000030000008400000001000000000000000c00"/39, @ANYRES32=0x0], 0x30}], 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) syz_80211_inject_frame(&(0x7f00000002c0)=@broadcast, &(0x7f0000000300)=ANY=[@ANYBLOB="d400d600088fa5f69e00"], 0xa) r3 = syz_io_uring_setup(0x23c, &(0x7f0000000740)={0x0, 0x1c2c, 0x10100, 0x2, 0x315}, &(0x7f0000000500), 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) io_uring_enter(r3, 0x2ded, 0x4000, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000007c0)={0x2020}, 0x2020) symlink(0x0, &(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) quotactl$Q_QUOTAOFF(0xffffffff80000301, &(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, 0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000004c00)=""/102392, 0x18ff8) 12m12.052436891s ago: executing program 1 (id=161): r0 = epoll_create1(0x80000) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, 0x0) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f00000000c0)="1a00000082000000", 0x8) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) pwrite64(r3, &(0x7f0000000080)='3', 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x80000000005, 0x100000001000087}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x14, &(0x7f0000000040)=0x6) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) setreuid(0xee01, 0xee01) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f0000000080)={0xa}, 0x1) sendto$inet6(r2, &(0x7f0000000180)="d4", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x80000001, @loopback, 0x9}, 0x1c) r5 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000002200)={0x36, 0x8001, 0xa, 0xc, 0xff, 0x81}) ioctl$DRM_IOCTL_GEM_FLINK(r5, 0xc008640a, &(0x7f0000000300)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r5, 0xc010640b, &(0x7f0000000140)={r6}) close_range(r0, 0xffffffffffffffff, 0x0) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f00000003c0)) 12m9.892231249s ago: executing program 1 (id=165): socket$inet6(0xa, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f00000001c0)={'ipvlan1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}}) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000240)=r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x1901) move_mount(r4, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x1000, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000340)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x10a5840, 0x0) move_mount(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', r4, 0x0, 0x355) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) 12m8.523509192s ago: executing program 1 (id=167): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) syz_init_net_socket$netrom(0x6, 0x5, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r4 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) r5 = openat$dir(0xffffffffffffff9c, 0x0, 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r4, 0x1, &(0x7f0000000340)={0x2000, r5}, 0x0) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r4, 0x0) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r6, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r7}) ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaba0180c20000000806000108400604"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) r8 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x40, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r9, {0x0, 0x2}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_MEMORY_LIMIT={0x4, 0x9, 0x1}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840) 12m8.12398669s ago: executing program 1 (id=170): socket$inet6(0xa, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) socket$inet6_udplite(0xa, 0x2, 0x88) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) bpf$MAP_CREATE(0xb00000000000000, &(0x7f0000004080)=ANY=[@ANYBLOB="1e000000040000000400000022bf000000000000", @ANYRES32, @ANYBLOB="0000000000342dae58595d18a300000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000004"], 0x48) 12m7.597416878s ago: executing program 32 (id=170): socket$inet6(0xa, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) socket$inet6_udplite(0xa, 0x2, 0x88) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) bpf$MAP_CREATE(0xb00000000000000, &(0x7f0000004080)=ANY=[@ANYBLOB="1e000000040000000400000022bf000000000000", @ANYRES32, @ANYBLOB="0000000000342dae58595d18a300000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000004"], 0x48) 12.359939201s ago: executing program 2 (id=2336): r0 = socket$inet6_sctp(0xa, 0x4, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, 0x0, 0x0) setreuid(0xee01, 0xee01) r1 = syz_open_dev$sndpcmp(&(0x7f0000000500), 0xb, 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(r1, 0x80044100, 0x800000000000000) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x3, 0x6, 0x8}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 11.19288013s ago: executing program 5 (id=2338): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"}) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, &(0x7f0000000400)=0x1000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$netlink(0x10, 0x3, 0x15) sendmsg$nl_route_sched(r2, &(0x7f0000007000)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000001380)=@newtaction={0xcc8, 0x30, 0x400, 0x70bd26, 0x25dfdbfe, {}, [{0x34c, 0x1, [@m_tunnel_key={0x158, 0x17, 0x0, 0x0, {{0xf}, {0x64, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e21}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x9, 0x928e, 0x10000000, 0x0, 0x101}, 0x2}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x6, 0x101, 0x20000007, 0x4, 0x5}, 0x2}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @loopback}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @multicast1}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x5}]}, {0xc8, 0x6, "a4f881af725b947f4581c36048270499b2e22991d26f88361d7ea394ff1618365e52345a9cd9c4c8efa9519091bc4012f40e634b9c1b002f3b52ad4e96b955ff16b4516b0ec7a4bbfd6e238a659cae006112a771e22d7cc4b6e628be1d7d025fc766dca93a6fa1fc4267833bcc429f2f123c2b7d41f9ae90c5fdf2ca141652dbcb09fa66ddb65f89e4a83ac76bcb168a119e4c8328ab9e219a5f2865a74486d4313624003d37ac7baca94037f7251909654c09496216027babf1ca86065b59a75f4b2848"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x5, 0x2}}}}, @m_ife={0x104, 0x1b, 0x0, 0x0, {{0x8}, {0x4}, {0xdb, 0x6, "58f1bd67d066d5266ec8cd7e65effae6a478b1d10178cd20fae3dc0850824ef1c75ba3bb20c78e7abd392e8e8abbd5db6a489fff961d8f4d99ac5877bab4bbc99e9c88dbebccde1587f59c967bac1270649efaa6074947140b08ca818b1223e9ad18e09af1f454a400f75d787bb6886bfb8af42b709c1f9614d224feff9f924cad6da4ed0694563f84ca83d23af55c396cd1766a5eb63fddb8900438db84770802ecfb91c247e5970506f0448b842696abcedcfcc757f36d7e32a479ad8863c8e891af5d837440e61b32fada6ced3968447bda59e4d9b3"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0xec, 0x9, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x5, 0x8, 0x0, 0x1, 0x3ff}, 0x1}}]}, {0xa7, 0x6, "fd93c420c9d3e49e4dcb804f25b8fc293ae91491e07c9f6e0a732b803403bfd7bbf7552239fd8191459791256470a549e953d6c5fb7ac81682208c5a048a59ead14c61a7063aa3b2fe77a23660a37ffde48f733a041b673ee003cfc16dfab17ef4287cf0fa915a8705c9837bd541f90c6778d83cb99e3b4295e9f1fb63fd66e580b9af4d2e1a00372b91add85a6c5344115340cee329c0eaf901d53488f90a64087e02"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0xf3c551f1281b3df2, 0x1}}}}]}, {0x968, 0x1, [@m_ife={0x888, 0x12, 0x0, 0x0, {{0x8}, {0x68, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xfffffff9, 0x8, 0x10000000, 0xd0, 0x1}, 0x1}}, @TCA_IFE_DMAC={0xa, 0x3, @broadcast}, @TCA_IFE_SMAC={0xa, 0x4, @remote}, @TCA_IFE_TYPE={0x6, 0x5, 0x4}, @TCA_IFE_SMAC={0xa}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x10000000, 0x7}}}]}, {0x7fc, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_skbedit={0xdc, 0x19, 0x0, 0x0, {{0xc}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x6}, @TCA_SKBEDIT_MARK={0x8}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x42}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0xd}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xe, 0x9}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x3}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x7}]}, {0x78, 0x6, "584fca6ae9e4744a146ca7e57a8e29658f083ab96fe5cee60a6a2c74fbac7e26c7d9faece792faf639c2c60433cfafd10b6012264f272715aec8351d461e70d29b21d388412f46ed4dfa3f1085a767c6a23824e22efca1afd8d1f5b74273b3e5fc60f9ea4a95839bb742f0d7af6eeb8e5c616459"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}, 0xcc8}, 0x1, 0x0, 0x0, 0x800}, 0x181) r3 = getpid() sched_setscheduler(r3, 0x2, 0x0) migrate_pages(r3, 0x100, 0x0, &(0x7f0000000280)=0x5) mkdirat(0xffffffffffffff9c, 0x0, 0x88) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000080)='./file1\x00') r4 = bpf$MAP_CREATE(0x0, &(0x7f0000007040)=ANY=[@ANYBLOB="160000000000000004000000ffff000000000000", @ANYRES32=0x1, @ANYBLOB="0000001800"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000110000000000000000baf51a7f5e2f68002a523fcaf86d08abe453872a200d5751a3173f28126f86492c"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001280)=[r4]}, 0x80) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x7, 0x0, r4}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0x2, r5}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x5, r5}, 0x38) r6 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$inet6(0xa, 0x80002, 0x3a) openat2$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)={0x0, 0x20}, 0x18) ioctl$DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, &(0x7f0000000100)={0x4}) gettid() r7 = fsopen(&(0x7f00000001c0)='nilfs2\x00', 0x0) close(r7) 11.185471112s ago: executing program 2 (id=2339): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x2) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x2000, 0xa) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r2) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000380)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010029bd7000fcdbdf252100000008000300", @ANYRES32=r4, @ANYBLOB='$\x00-'], 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xd69a2f78c25132c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe2$watch_queue(0x0, 0x80) r8 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r8, 0x84, 0x76, &(0x7f0000000140)=@assoc_value, 0x8) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r10, 0x29, 0x2e, 0x0, 0x0) close_range(r9, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2b06, 0x0, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) 11.09502957s ago: executing program 0 (id=2340): socket$nl_route(0x10, 0x3, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x10000014, &(0x7f0000000140), 0x111, 0x9}}, 0x20) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1002) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) socket$inet6_sctp(0xa, 0x5, 0x84) socket$igmp(0x2, 0x3, 0x2) bind$inet(0xffffffffffffffff, 0x0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0x2, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0xa, 0x0, 0x0, @mcast2}}}, 0x48) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000000)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x3}}, 0x10) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000001, 0x13, 0xffffffffffffffff, 0xfffff000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 9.665443522s ago: executing program 0 (id=2341): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="400000001a000100fdffffff0300000002000000", @ANYRES32=0x0, @ANYBLOB="0000000014000100ff0200000000000000000000000000010800020004fff500080002"], 0x40}}, 0x4004000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000280)={0x400007fff, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) r4 = accept4$unix(r2, &(0x7f0000000200), &(0x7f00000000c0)=0x6e, 0x80800) sendmmsg$unix(r4, &(0x7f00000bd000), 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x100000000, 0x8, 0x0, 0x3}, 0x0) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') r6 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x400246}, &(0x7f0000000340)=0x0, &(0x7f00000006c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x0, 0x0, r6, 0x1, 0x0, 0x0, 0x2}) io_uring_enter(r6, 0x4c6e, 0xc67a, 0xc, 0x0, 0x0) io_uring_enter(r6, 0x627, 0x4c1, 0x43, 0x0, 0x0) lseek(r5, 0x1000000, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) io_uring_setup(0x1de0, &(0x7f0000000440)) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) 9.587486261s ago: executing program 2 (id=2343): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8001, 0xc95a, 0xf, 0x8, 0x7fffffff, 0x2, 0x7, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x7, 0x3, 0x0, 0x5, 0x24, 0xb, 0x7, 0x3c5a, 0x1, 0x24, 0x6, 0x1, 0x5, 0xffffffff, 0xe661, 0x4, 0x7, 0x89d2, 0x8, 0x4c74, 0x80000000, 0x40000, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0xd, 0x407, 0x5, 0x3e, 0x8f, 0x4006, 0x6, 0x80000000, 0x0, 0x4, 0x8, 0x400, 0x80, 0x0, 0x4, 0x7, 0x8, 0x4, 0xfffffffe, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c3, 0x9, 0xfffffffc, 0x2, 0x0, 0x0, 0x5, 0x2f, 0x10, 0x312, 0x20d, 0xea4, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a7c, 0x420, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0x4000000b, 0x4, 0x20009, 0x8, 0x9, 0x9, 0x4a, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x9, 0x5, 0x3, 0x8, 0x1, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x8004, 0x5, 0xfffffefe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x2, 0x8000, 0x9, 0x5, 0x0, 0x1ef, 0x5, 0xa, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x9, 0x7ff, 0x800003, 0x200, 0x7e, 0x7, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0xa9, 0x5, 0x9, 0xac8, 0x2000bf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x0, 0x0, 0x5, 0x1c, 0x120000, 0xffffff49, 0x2004, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x4, 0x6, 0x806, 0x6, 0x0, 0xb9, 0xce7, 0x9, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x1, 0x8000002, 0x5, 0xe7, 0x6, 0x16, 0xfffffffe, 0x80000003, 0x6, 0x1, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0xfd, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0xffffffff, 0x5, 0x5, 0x8, 0x30b1d693, 0x5, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x2, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021940000000c0a01030000000000000000070000000900020073797a31000000000900010073797a30000000006800038064000080080003400000000258000b80200001800a00010071756f7461000000100002800c0001"], 0x118}}, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) (async) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) r2 = signalfd4(0xffffffffffffffff, &(0x7f00000003c0)={[0x1fffffffff]}, 0x8, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000100)={@private0, 0x0}, &(0x7f0000000140)=0x14) setsockopt$inet6_mreq(r4, 0x29, 0x1c, &(0x7f0000000180)={@mcast1, r5}, 0x14) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4138ae84, &(0x7f0000000080)=@x86={0x6, 0xa, 0x7, 0x0, 0x3, 0x8d, 0xce, 0x1c, 0x89, 0xa0, 0x7, 0x8, 0x0, 0x8000, 0xb, 0x2, 0x8, 0x2, 0x1, '\x00', 0x9, 0x3fb}) landlock_add_rule$LANDLOCK_RULE_NET_PORT(0xffffffffffffffff, 0x2, 0x0, 0x0) (async) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) (async) connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) (async) sendto$inet(r7, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0x0, 0x8001}]}, 0x10) (async) recvfrom$inet(r7, &(0x7f0000000080)=""/8, 0xfffffffffffffc4f, 0x760, 0x0, 0xfffffffffffffd25) openat$full(0xffffffffffffff9c, 0x0, 0x2fb71da98128d4bd, 0x0) (async) readv(r1, &(0x7f0000000240)=[{&(0x7f0000000040)=""/84, 0x9000}], 0x1) close_range(r0, 0xffffffffffffffff, 0x0) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) 9.020529094s ago: executing program 5 (id=2346): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x48141, 0x0) fcntl$setlease(r2, 0x400, 0x1) fcntl$getflags(r2, 0x401) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000300"/14], &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r3, &(0x7f0000000300), &(0x7f0000000000)=""/10, 0x2}, 0x20) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x103182, 0x0) ioctl$SIOCGETSGCNT(0xffffffffffffffff, 0x89a0, &(0x7f0000000200)={@rand_addr=0x64010100, @empty}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x121403, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40081271, &(0x7f0000000980)=0x4000) mount(&(0x7f0000000000)=@nullb, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='cramfs\x00', 0x800, 0x0) r5 = syz_clone(0x88200200, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="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"/420], &(0x7f0000000100)='GPL\x00'}, 0x48) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r7, 0x400455c8, 0x0) bind$bt_hci(r6, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) r8 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r8, 0x1, 0x54, 0x0, 0x0) setpgid(0x0, r5) 8.867882963s ago: executing program 2 (id=2347): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x48141, 0x0) fcntl$setlease(r2, 0x400, 0x1) fcntl$getflags(r2, 0x401) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000300"/14], &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r3, &(0x7f0000000300), &(0x7f0000000000)=""/10, 0x2}, 0x20) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x103182, 0x0) ioctl$SIOCGETSGCNT(0xffffffffffffffff, 0x89a0, &(0x7f0000000200)={@rand_addr=0x64010100, @empty}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x121403, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40081271, &(0x7f0000000980)=0x4000) mount(&(0x7f0000000000)=@nullb, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='cramfs\x00', 0x800, 0x0) r5 = syz_clone(0x88200200, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="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"/420], &(0x7f0000000100)='GPL\x00'}, 0x48) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r7, 0x400455c8, 0x0) bind$bt_hci(r6, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) r8 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r8, 0x1, 0x54, 0x0, 0x0) setpgid(0x0, r5) 7.137314458s ago: executing program 0 (id=2350): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x3}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xffffff9e}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x23}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}]}], {0x14, 0x10}}, 0xa4}}, 0x4) 6.757123606s ago: executing program 4 (id=2351): socket$nl_route(0x10, 0x3, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x10000014, &(0x7f0000000140), 0x111, 0x9}}, 0x20) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1002) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) socket$inet6_sctp(0xa, 0x5, 0x84) socket$igmp(0x2, 0x3, 0x2) bind$inet(0xffffffffffffffff, 0x0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0x2, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0xa, 0x0, 0x0, @mcast2}}}, 0x48) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000000)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x3}}, 0x10) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000001, 0x13, 0xffffffffffffffff, 0xfffff000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 6.704933385s ago: executing program 0 (id=2352): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000280)={0x400007fff, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000027c0)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000380)=""/249, 0xf9}], 0x1, &(0x7f00000004c0)=""/64, 0x40}, 0x1b53}, {{&(0x7f0000000580), 0x80, &(0x7f0000000ac0), 0x0, &(0x7f0000000980)=""/44, 0x2c}, 0x2}, {{0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000000b40)=""/71, 0x47}, {&(0x7f00000007c0)=""/223, 0xdf}, {&(0x7f0000000600)=""/164, 0xa4}, {&(0x7f0000000d80)=""/226, 0xe2}, {&(0x7f0000000500)=""/6, 0x6}], 0x5}, 0x3}, {{&(0x7f00000006c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000001100)=[{&(0x7f0000000fc0)=""/131, 0x83}, {&(0x7f0000000740)=""/102, 0x66}], 0x2, &(0x7f0000000540)=""/41, 0x29}}, {{&(0x7f0000001200)=@x25, 0x80, 0xffffffffffffffff, 0x0, &(0x7f0000001280)=""/50, 0x32}, 0x800}, {{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000002940)=""/246, 0xf6}, {&(0x7f00000013c0)=""/201, 0xc9}, {&(0x7f00000014c0)=""/114, 0x72}, {&(0x7f0000002600)=""/207, 0xcf}], 0x4, &(0x7f0000002700)=""/148, 0x94}, 0x1c12000}], 0x6, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xfffffffffffffe4d}, 0x40080) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x100000000, 0x8, 0x0, 0x3}, 0x0) creat(&(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x40) r2 = landlock_create_ruleset(&(0x7f00000000c0)={0x40, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000300)={0x8061, 0x3, 0x1}, 0x18, 0x1) landlock_restrict_self(r3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) io_uring_setup(0x2c4b, &(0x7f0000003c40)={0x0, 0xaaf5, 0x100, 0x2}) r4 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c000090400000207010100090501020002"], 0x0) syz_usb_control_io$printer(r4, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pwritev2(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)="ec", 0x1}], 0x1, 0xfffff, 0x0, 0x0) 5.324188135s ago: executing program 4 (id=2355): ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$netlink(0x10, 0x3, 0x15) sendmsg$nl_route_sched(r1, &(0x7f0000007000)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x181) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) migrate_pages(r2, 0x100, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x88) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000007040)=ANY=[@ANYBLOB="160000000000000004000000ffff000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001280)=[r3]}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000004000000040000000700000000000000", @ANYRES32=r3, @ANYBLOB="34007346b1e6513b9d5300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$inet6(0xa, 0x80002, 0x3a) openat2$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)={0x0, 0x20}, 0x18) gettid() r4 = fsopen(&(0x7f00000001c0)='nilfs2\x00', 0x0) close(r4) 4.843279984s ago: executing program 4 (id=2356): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=@newtaction={0xe98, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0xe84, 0x1, [@m_gact={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x1, 0x4, 0x790434c2, 0x8}, 0x2, 0xa8}, [{0x7, 0x1, 0xfffffff9, 0x9, 0x67fb, 0x7}, {0x100, 0x80000000, 0x2, 0x3027, 0x7fff, 0x8}, {0x80000000, 0x36b, 0xd, 0x517, 0x1, 0x800}, {0x8, 0xfffffff4, 0x6140e1a4, 0x9, 0x95b9, 0x6}, {0x9, 0x4, 0x6, 0xfff, 0x4, 0x10001}, {0x401, 0x6, 0xfdd, 0xc0, 0x4, 0xb}, {0x26000000, 0x31400000, 0x5, 0x401, 0x8000, 0x3}, {0x9, 0x5, 0x1, 0x6, 0xae8, 0x8}, {0x10, 0x1, 0x4, 0x4, 0x2, 0x5}, {0x21, 0x101, 0x7, 0xffffffff, 0x4, 0x6}, {0x9, 0x5, 0x4, 0x0, 0x7, 0x9}, {0x5, 0x3, 0x1, 0x3, 0x4, 0x401}, {0xfffffff9, 0x6, 0xfffffffa, 0x7, 0x7, 0x3d}, {0x0, 0x7, 0x0, 0xff, 0x6, 0x5}, {0x5, 0xfffffffb, 0x1, 0xfffffe01, 0x8, 0x1}, {0x7fff, 0x200, 0x1, 0xae0a, 0x4, 0x7ff}, {0x3, 0x9, 0x8, 0x1, 0x2, 0x4}, {0x8, 0x0, 0x275, 0x7ff, 0xb, 0xffffff23}, {0x66, 0x0, 0x7, 0x400000, 0x1, 0x3}, {0x1, 0x8, 0x8, 0x3ff, 0x3f5, 0x8}, {0x7ff, 0x1, 0xffff, 0x6, 0x0, 0xfffffdbe}, {0x8001, 0x1ff, 0x0, 0x7, 0xe00, 0xf406}, {0x3, 0x18, 0x6, 0x2, 0x1, 0x1}, {0xae, 0x80000001, 0x51, 0x5, 0x9, 0x82c}, {0x6e, 0x9, 0x4, 0x2, 0x2, 0x81}, {0x9, 0x7fffffff, 0x5, 0x8, 0x80000001, 0x362}, {0x7, 0x1, 0x7, 0xf, 0x7ff, 0x6}, {0xe655, 0x1, 0x2da, 0x6, 0xfffffff8, 0xd389}, {0x0, 0x9, 0xd5e, 0xaa7c, 0x10001, 0x37}, {0x5, 0x0, 0x37, 0x8, 0x5, 0x4}, {0x3, 0x0, 0x3ff, 0x100, 0x4, 0x200}, {0x0, 0xcb8, 0xffff8000, 0x3, 0x2}, {0x6, 0x0, 0xfff, 0x4, 0x400, 0x7}, {0x28000, 0xf, 0x9, 0x3, 0xdd, 0xffffff86}, {0x5, 0x5, 0x80000000, 0x4, 0x70a, 0x8}, {0x1ff, 0x2e390d2b, 0x4, 0x4, 0x2, 0x6}, {0x4, 0xffffffe4, 0x8, 0x80000001, 0x3d5, 0x9}, {0x6, 0x40, 0x6, 0x1c000000, 0xffffffff, 0x1000}, {0x0, 0x0, 0xb1, 0x1, 0x6, 0x10001}, {0xd, 0x4f, 0x900, 0x3, 0x400, 0x9}, {0x1, 0x3, 0x7, 0xa, 0xff, 0x6}, {0x7dd, 0xc4, 0x62182213, 0x8, 0x3, 0x8f4c}, {0x36b, 0xb6, 0xfffffffd, 0x5f60be42, 0x8, 0x9}, {0x2, 0x3, 0x7, 0x3, 0x5, 0x3}, {0x6, 0x7182, 0x55b, 0xf0b, 0x4, 0x6}, {0x9, 0xc3c, 0xffffffb2, 0xf, 0x1000, 0x2f}, {0xc7, 0x962b, 0x1, 0x8, 0x1, 0x3ff}, {0xfffffffe, 0x800, 0x1, 0x6, 0x0, 0xa7a}, {0x6, 0x8, 0xe, 0x6, 0x8000, 0x7}, {0x0, 0x6, 0x40, 0x6, 0x0, 0x3}, {0xf, 0x0, 0x6, 0xc2, 0x6}, {0x700, 0x6, 0x6, 0xaa06, 0x2, 0x2}, {0x6, 0x0, 0xfffffffe, 0x101, 0x9, 0x4}, {0xffffff4d, 0x5, 0x2, 0x3, 0xbba8, 0x2}, {0x7, 0x70, 0x4, 0x9}, {0x7, 0x8000, 0x9, 0x1000, 0x3, 0x7f}, {0x2, 0x8, 0x9, 0x1000, 0x5, 0xffff}, {0x9, 0x1, 0x5a, 0x8, 0x3, 0x1}, {0x5, 0x836, 0x7f, 0x8, 0x8b59, 0x5}, {0x1ff, 0x7, 0x400, 0x9, 0x8, 0xd}, {0x5, 0x2, 0x7, 0x6, 0x8, 0x1}, {0x400, 0x5, 0x7, 0x0, 0x7, 0x8}, {0x3, 0xd, 0x1, 0x4, 0x5}, {0x0, 0xb23, 0x101, 0x7, 0x0, 0x4}, {0x9, 0x9146, 0x0, 0x5, 0x80000001, 0x7}, {0x6925, 0x1c0b92e, 0x2, 0x39, 0x9d6, 0x5}, {0xf, 0xf, 0x1, 0x5c665eda, 0x9, 0x2}, {0x0, 0x9, 0x401, 0x0, 0x7ba, 0x9}, {0xffffffb6, 0x4, 0x6, 0x8, 0x20, 0xc}, {0x8, 0xf, 0x8, 0x1, 0x48, 0x3}, {0x9, 0x0, 0x9c4, 0x400, 0x9, 0xc0000000}, {0x6, 0xc, 0x1, 0x6, 0x3, 0x7}, {0x8, 0x8153, 0x8000, 0x6, 0x9, 0x7}, {0x1ff, 0x80000001, 0x4, 0x6, 0xc, 0x7}, {0x7ff, 0x9, 0x3, 0xe3f6, 0x3b5, 0x4}, {0x3, 0x7, 0xd376, 0x3, 0x2d3, 0x1}, {0x2, 0xffff, 0x10000, 0x6, 0x0, 0x1}, {0x80000000, 0x6, 0x8, 0x7, 0x8, 0x7}, {0xc390, 0xfead, 0x8001, 0x1ff, 0x7, 0x3}, {0x1, 0x7fff, 0x210e, 0xf, 0x1, 0x7}, {0x2, 0xfffffc01, 0xffffff92, 0x2d447236, 0x1, 0x5}, {0x4, 0x6, 0xff, 0x7, 0x5, 0x9}, {0xfffffffe, 0x6, 0x57, 0x3, 0x8000, 0x800}, {0x8, 0xf, 0x7, 0x3, 0x8000, 0x400}, {0x2, 0x7, 0xb9ab, 0x81, 0x2, 0x2}, {0x100, 0x7, 0x0, 0x6, 0x8001, 0x1}, {0x7ff, 0xfffffffc, 0x0, 0x5, 0x7f, 0xee3}, {0x7000000, 0x4, 0xfffffff7, 0x3, 0x9, 0x5}, {0x8, 0x5, 0x7, 0xfffffffe, 0x5, 0x74e}, {0x9, 0x5, 0xfc000000, 0x5, 0xfffffff8, 0x4}, {0x8, 0x7, 0xe, 0x8000, 0xffff0000, 0x2}, {0x401b, 0x9, 0x96, 0xf2a, 0x400, 0x8}, {0x2, 0xb, 0x6, 0xea1, 0xf, 0x90d2}, {0x800, 0x8, 0xc04, 0xffffffff, 0x3, 0x7}, {0x4, 0x8, 0x3ff, 0x7fffffff, 0x3ef, 0x3}, {0xa, 0x7, 0x1, 0x3, 0xffffffff, 0xa}, {0xf, 0x6, 0x1, 0xeb4, 0x0, 0xbb}, {0x8000, 0x10, 0x9dc, 0x9, 0x2f, 0x9}, {0x9, 0xa572, 0x6, 0x7, 0x5}, {0x8, 0x5, 0x2, 0x9, 0x9f, 0x7}, {0xa2fd, 0x80000001, 0x4, 0x0, 0x4, 0xffff}, {0x8, 0x80, 0x2, 0xa, 0x5, 0x3ff}, {0x8d0, 0x6, 0x2, 0x80000000, 0x8001, 0xffffffff}, {0x0, 0x4, 0x0, 0xfffffffe, 0x8, 0x2}, {0x9, 0x101, 0x0, 0x1, 0x100, 0x2}, {0x7, 0x5cbd, 0x10000, 0x4, 0x7, 0x92ff}, {0x5, 0x6, 0x4, 0x9, 0x5, 0x9}, {0x9, 0xfffff98b, 0x8, 0x9, 0x2, 0x3}, {0x3, 0xff, 0x9, 0x6, 0x6, 0x10001}, {0x4, 0xffff, 0x8000, 0x3, 0x81, 0x20000}, {0x1, 0x1, 0x6, 0x7, 0x1, 0x4000}, {0x7ff, 0x3ff, 0xe40a, 0x7, 0x3, 0x10001}, {0xb, 0xd, 0x9, 0x30, 0x7, 0x7}, {0xa, 0x7f, 0x5, 0x9, 0xc, 0x9}, {0x1, 0x1, 0x6, 0x7b19, 0x80000, 0x4}, {0x1, 0x9, 0x0, 0x7f, 0x7, 0xf69a}, {0x0, 0x9, 0x8, 0x7, 0x4b, 0x3}, {0x51, 0x3, 0x2ed, 0xff, 0xfffffffd, 0x401}, {0x6, 0x1, 0x0, 0xdac7, 0x3, 0xd}, {0x6, 0x6, 0x0, 0xfffffff7, 0x8, 0x3}, {0x806e, 0x9e, 0x80, 0xffffffff, 0xfffff000, 0xfffffff8}, {0x4, 0x7ff, 0x8, 0x9, 0x0, 0x73deaf7e}, {0x29, 0x6, 0x4, 0xf, 0xffffc754}, {0x4, 0x1, 0x10001, 0x3, 0x9e5, 0x538}, {0xa, 0x1, 0xffffffff, 0x8, 0x100, 0x4}, {0x4, 0x0, 0x8000, 0x1, 0x4, 0xfffff7cb}, {0x400, 0x200, 0x100000, 0x1c, 0x800, 0x1c00}, {0x3, 0x81, 0xe, 0x6, 0x4, 0x7}], [{0x3, 0x1}, {0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3}, {0x2}, {0x5}, {}, {0x3}, {0x5, 0x1}, {0x3}, {0x1}, {0x4}, {0x4}, {0x2}, {0x2}, {0x4, 0x1}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x4}, {0x4}, {0x7}, {0x0, 0x1}, {0x4}, {0x3}, {0x6, 0x1}, {0x5}, {0x4}, {0x3}, {0x4}, {0x5}, {0x2, 0x1}, {0x2}, {0x4, 0x1}, {0x5}, {0x2, 0x1}, {0x5}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x2}, {0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3}, {0x4}, {0x3}, {0x1}, {0x0, 0x1}, {0x1}, {0x1}, {0x5}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x6c25a6da58bcaee9}, {0x226d596e0d911f29}, {0x2}, {0x1}, {0x1}, {0x4}, {0x4}, {0x3}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {0x2}, {0x2}, {0x2, 0x1}, {0x0, 0x1}, {0x4}, {0x2}, {0x0, 0x1}, {0x1}, {0x6}, {0x2, 0x1}, {0x5}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x2}, {0x4, 0x1}, {}, {0x4, 0x1}, {0x1}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x3}, {0x3}, {0x3}, {0x2}, {0x0, 0x1}, {0xd, 0x1}, {0x0, 0x1}, {0x3}, {0x3}, {}, {0x6, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x4}, {0x5}, {0x3}, {0x2}]}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xe98}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 4.830196653s ago: executing program 2 (id=2357): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x48141, 0x0) fcntl$setlease(r2, 0x400, 0x1) fcntl$getflags(r2, 0x401) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000300"/14], &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r3, &(0x7f0000000300), &(0x7f0000000000)=""/10, 0x2}, 0x20) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x103182, 0x0) socket(0x1, 0x1, 0x0) ioctl$SIOCGETSGCNT(0xffffffffffffffff, 0x89a0, &(0x7f0000000200)={@rand_addr=0x64010100, @empty}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x121403, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40081271, &(0x7f0000000980)=0x4000) mount(&(0x7f0000000000)=@nullb, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='cramfs\x00', 0x800, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000180000003d030100000000009500f000000000006926000000000000bf67000000000000560602000f0200006706000020000000620a00fe0ee60000bf250000000000002d350000000000006507000002080000070700004c0000001f75000000000000bf54000000000000070400000400f9ffcd35010000000000ce040000000000001c000000000000009500000000000000db13d5d8b741f2cdaabc8383c8f56bb5df3083d20f8c2bf304000000815dcf0066d7ded3c5c49a08a503ea6d54f7f3125a8200578ac0836d6454745e70a27444003c5b20451b624db6f5320e9befc1e00b8b32917c4d30d16b7edb732bc3ac330b16c442aff70d27659bc58e296b16750c5577c848754b4894b07f15bab1c640a5c0c4fd62f9db829b301ef67fd2b2736f3af0c54af2412313b17c4c8081c4ed0572261960e227d34cfbfdb247bc2351c9d8363a8cb18b7330604da78b0aba47545f9a25a80dd7d28a5ae41824f611dd2de6dd581c52698f9542a444a8a3969946faded5275c00"/420], &(0x7f0000000100)='GPL\x00'}, 0x48) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r6, 0x400455c8, 0x0) bind$bt_hci(r5, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x54, 0x0, 0x0) setpgid(0x0, 0x0) 4.651936866s ago: executing program 4 (id=2358): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x10200) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000240)={0x2, 0x5, 0x40003}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000340)={0x8, 0x8169, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000280)={0x40, 0x403, 0xc}) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000600), 0xc0800, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 4.496538589s ago: executing program 4 (id=2359): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000000)=0xc) ioctl$EVIOCGRAB(r0, 0x40044590, 0x0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_control_io(r1, 0x0, &(0x7f0000000880)={0x84, &(0x7f0000000480)={0x40, 0xf, 0x3, "f343a0"}, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20, 0x0, 0x4, {0x81f12256a32180f, 0x4}}, 0x0, 0x0, &(0x7f0000000640)={0x40, 0xb, 0x2, "23a2"}, &(0x7f0000000680)={0x40, 0xf, 0x2, 0x1ff}, 0x0, 0x0, 0x0, &(0x7f0000000780)={0x40, 0x1a, 0x2, 0x5}, 0x0, 0x0, 0x0}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000001040)=@mangle={'mangle\x00', 0x2, 0x6, 0x8b0, 0x5b0, 0x3a8, 0x2b8, 0x0, 0x3a8, 0x7e0, 0x7e0, 0x7e0, 0x7e0, 0x7e0, 0x6, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x39}, @private1, [0x0, 0x0, 0xffffffff, 0xffffff00], [], 'pimreg0\x00', 'macvtap0\x00', {}, {}, 0x6, 0x0, 0x2}, 0x0, 0x290, 0x2b8, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x2f, 0x0, 0xe, 0x0, 0x3ff, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @private1={0xfc, 0x1, '\x00', 0x1}, @private0, [0xffffff00, 0xff000000, 0xff, 0xff000000], [0xffffffff, 0xff, 0xff000000, 0xffffff00], [0x0, 0x0, 0xff000000, 0xff000000], 0x1001, 0xb10}}, @common=@inet=@hashlimit3={{0x158}, {'team_slave_1\x00', {0xf76, 0xff, 0x20, 0x7, 0xb, 0xaeae, 0x7f, 0x6b1d1c17, 0x80, 0x78}, {0x8}}}]}, @HL={0x28}}, {{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @dev, [], [], 'veth1_macvtap\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0x0, 0x0, 0x22}, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@empty, @ipv4=@rand_addr=0x64010101, 0x18, 0xfc, 0x7ff}}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x0, 0x0, 0xffffff00, 0xffffff00], [0x0, 0x0, 0xffffffff], 'dummy0\x00', 'bond_slave_0\x00', {}, {}, 0x0, 0x2, 0x0, 0x28}, 0x0, 0xa8, 0x118, 0x48000000}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x1ff, 0x8, 0x4, 0x1, 0x0, "52146ee9ae44b62f269737ed481b837e8196a5702a25a4409e992b2c65fd4ce47d5510261c8694c511bcdcbca881691621e9e9f5a9cc6d7b009686f0fdb6fdc2"}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv4=@loopback}}}, {{@uncond, 0x0, 0x208, 0x230, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @private0, @private0, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, @mcast1, @dev={0xfe, 0x80, '\x00', 0x22}, @private1, @empty, @loopback, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xf}}, @dev={0xfe, 0x80, '\x00', 0x10}, @ipv4={'\x00', '\xff\xff', @rand_addr=0xfffffff8}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0]}}]}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x5}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x910) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x2f, 0xf, 0x9, 0x3, 0x46, @local, @private2, 0x20, 0x7800, 0xf, 0x1}}) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/reserved_size', 0x121a02, 0x130) sendmsg$IPSET_CMD_GET_BYINDEX(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x34, 0xf, 0x6, 0x401, 0x0, 0x0, {0xa, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x2}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x10044090}, 0x800) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0}, 0x2020) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x4000004) syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_fuse_handle_req(r4, &(0x7f00000083c0)="4e5350994ebf71ce3049a58c5d050078bf16b0757a4c27b455e2a547739587dd3380b5df8f40a0696c5bd6cdb672cffe4d870c5c90ca92095b9ebf3e92fe31d8cd74275d857d34a74f7eecc7fac15e2f148d4e9d47bb45b858bbf078999970d180f28d7b2cefd92635d45a563d9229c9fd770efdc0848e52fa5efd9ada5c94a1ba94b4b7c7507f8b0819bb20910f9f50a83a010abbe126dd9f6a7b84eab6b0d5ce78d2ade77a5f7e4e997df1d03ffab4b4c945d803e4457909013127a98769c938c237f37263bc509a42bc56ff2dbf80e847e2c407009eef94f18e1e59069d62298fdbadae007ffbdf403c5049a4530ac0abecceb5608da02754c9a575af52c0b7e41226e2d642a814861c4310c935bcbae413516dde2132652b39c7aa0218a6ce65dabb4494965209ce879ba7e7e59039db5c1d36d6a7f86d72dd59954fd6f46124a2506b245a0db11aa89d2feb312a6596ea2fecaa7b6021f37a255f628da7ff6b6c36b514d3b6be34e505f9dac6acfb888198004699fb350ac93431533554658c4957df36703591438d6488bc03dd8290a75ebb367a481a50e79a46b04d005649cabd79e5c6326c066bc2b6fc5febb87ef66d832ef31a16c2a450a0b990fb549a5d810c928d1a81fa1dc795db2607ac7d46cb5716b68acdeb00987e429fe6a394632c83b43336e7b51d9cfdb50e83d8c6ba1784d9f74c16b476e048e65e7ac0af683b347d7377ac1795422e00e5bd8da9b313af83abb3348861116de7a99959169b7dff9f7d9b7a6d107f2e76670a6214a419bf8298f80eb570fa29264ba57a383c5ec5836ce33104ecaf1aec76e311280a1d2c8bd7abff3a5a242e6a637f7db63038ef5d78aca9c680d72b60da4dbeb0e1e683ddc82898647c589a81b8f92db06711d8a0af05560cd77fa7005283db71e8da21713fccd450822062b994d152aaed2cdcf0dec9c60617e15ba4df628da4e71279bf9d1eee5c7f055c27cddfdd45f9225d5d5529ef7119e2e3c9838e7362971e069be487797e949b24297de19c61340d1cd7a2bfa3880b91a71e934720a59e1e0ea992d2a1633a0852ad8addfcab73a291e35745e694a6471f429b124305886c1f79f67c78de3f3ec998c91e7fc59d26766cd446f6f0de603f2c6892e13cdaa37d9e8e118d098b6986ccd991993ec152193e7d77394b05b99e7d310c506707f1be52249438fba9615f6dad2ec7244fedf36e34ec311b7d6bee64271d6491079e161190ded7e28e2ada4307a9b2986c267b1a30d2f720ff23408011f1d589ce9ee77f981c7833656ccf7df5b3a87ec253ff7c7ef1e67ceeb10c93e3fa683cdadad65850ffbc402b7744e94cdecef9db9d264c755c53d36278df23d4c9685fdefa69f7588a33b8a64b35191ee81abcb9765577d175cb06e31c582807ff7243bfef44961fbc0f8a235242f51ee991ea621803d4dcfed90d26f004b299425bf219f6d185fe6e088ae44601b03defada18794feac93787696a5d419f09f769bc590f43d2df6a131f6895da2de120c2644685e57b1d476c6aba5881e954fb2575356452b118b942cb02b4ea0fcf8f1bbb9a23b6e32c9d0accd3dd861452a3ad77b38fe709e216974932deb5397fd8033ff0e073d93ac0b4be762bca0424d69bd57b22ba914133f87671a29498b268c2911e793215463ca2164e38059456107dcb29beedfd6277e2b41a11d1c6f1361b19875c9384f04f9c53c1856d71f360a8fafe05f7aef750ec0cf2bfcfa971c017ad071b69a18fdaf970b384d4c889cfa5a0397dbe89543a5c6302645d6edf959aa60709ce0225fe6c3266c7ef62157ac8e78fddcd8a1f2ca5b58128218d19276885515775326aeeee0226cc810843eb05144bf8e2fe3340cf60b32cafd96d23cd7d0d3adcbdfec9a2a3d88307c362633b1c5637608ea8476d900b3f836a9734b5ecaf5e82983577128d3f74b903b0e3bf64326c1b564ae42aeeb0c07702b63a9ff74a2af6b45e5185a53f36c17bc29dfbc0ea28ca5cca43a15d751e9887ad3e6a87faacb6a278c4c8a8d21b9a77b9776f33102a6e645e99cc5cbc543ed0674282c2b9f8e5d14c2599aa9ac8f81438c77f2b9368bdac82edcdc5366f39adec9e9a3fbd55b79abc16d2ebff26b7d0c88f18b486e5836333575e3fc7808cb423b44781c57965767862922b4ff32d9bae76296843a46f430211c27ef9db168430026a5691623284dfd459dbdd1f1a6ec9bfad666507e6eacb1e2a7866da2e12e6d596d0bbb150500590013d9288af20596447f97bf1744eb9cfb244d8fca269b1fb71e14de664be4e95d83fff1b8abcfebcf3e78c1c66d28f260fb0c19f9fbcd2abbdd7dd7246e49dc25d954bf25f810a2ff6f9069dfdc62e7170fe3b0964b2ac95024256dfa3e7a426be5bb5f707fd82c2b3afec5d5dcf5bbb8fcb6dbc1b59f6c5330966c70d8b016956903a4278817414ba3652a102d7e7e37ecc79400267fc3bf7601c0731f87d479c33f100735e748874155267f708cea49d549e93cf7a398b20373dc90ad9afd56d9c77cd24e2c4a18f7130b366c7fe5b26bc4d11ca1ed1b98fa0b4d7396f82ae6593f4575d19f4d8fd586c991129e5cbe15c8bacc89c3ee15ca471dea966b5c48ede0d3ba2a7e28c75c04e6a4aa49a61f4e391ffe78eb5e40a5ef349f3aa4d15f2291cc86ec7e47ae301bf0b6083dae44b695820a893d46732553ef15ed1c16d28268d52a7e3a7e7c009d0c0708a356d3310c1ebcbcca4d7acf433e34bfc9fc115498142dcc725e7a16879c75e4c2f01c6c98b39619f3248bf530e6ee593467e38cf4026cfdc4db6296565722d587f3c580750b1453ecc141c0461495551297d88ae034acbd4f5e80ce198e6640c4c1e9501529988109cef006eb2090a6fcd974d7f60290b78f1a8ce3051ac2d69636c3219f0a6ad8c254764396a1684b2fd9805b1853525f2e640e513197283cc4d4073ac033e0539a88f08aabe1423cd40b8a7e073437d812b57a5d39a0531dcbe13f4466e89efc66c2a1e4b39a3e0b3073c9d44e6cf9b85f4df5c4e03628d05bc0f94ec04234c9eca4ed17463f190406834b02888728f625371cda75d15ec19efebd59f00ab659eb94eb88bcb2110862a369ad599610c1530fcc118f5b82205bc5215fe3623ac8ec297d8ff4eee75ace20731c5d505e6605c26203b7f754164c9463f0a6eefe3a2880b8e06e7bc66bb2adcc1a3f9b0325f5ec31d12a25f1f73c2aa6bb3a7680d786a082a63b13cce1822fa6a4b085a871ae3409eecbc1fd8661b5d52bb2b8b72f23e24a225075f272ed2ba0c6c5c693811a0ef8db6da7cfe7c966c647f0187ad223eedb1012a5b7af103e98464ac768c79b21ca45b12a52cf261de0d367442cda71c4b8ee39c94ded1b22ba06c13836cb467ebab4efea07bdf1e3de8da56a0ee6d4f848011253cc21fac10700003513d3167b7a73e0d752b861c49814bc5410ebe53a0264f76068c91ee6ec9e2daa343482b2f0f06e605c5aaf81f2a3cd570efc2094b4bc452f9526f1bbe7b22b694fb8109a5a987fabf6250912d6099e67da9cac79e8b6f2cce4702d1f17cbc5d06c38b8a48155ec758369c185ded839fb58cd736fbb74105fe5baf44e7e3ed06843f23601b60a43b1f88fd29e9b3f58479f9b95392a39d5ba1a31ee4441ca2d1fb57c0a8678a07a724b7a65b2ab16d1da197f435bce3ef003fce27fa2f0a67c9dd6c930a4bcf59e79e57b010000006fe34972958c28b56642d14ea89bf4d7d6f7fcbcf4fda8bd08fc9fe424de4359112b11f81fbdc1505658363697713ff6e1f8ca3c4be34a79993a9091f6017cda6c7489ae5c07062555231427c3eb42a049f42d22a060983b044a7d34ab5d2b5386cca79af72396a48aad6b8dcd7855410fc6106e4a165994f26efff1e7ea0aa8f560333b5dfdb2a0d899b0fda955155f90c75effd3c9535d88508e836feb7807d57b2a57cca42d3d08fe7de60d2a33376f49bdacdd3f814bd0927f417f15ad62a10b302f1cb390aaf82b0bc6af46bbf990b6ada45ef83ce13029d167c65134e7b82b59ddfdc367e61c40defd2732ccebb1d4000f6c742df964e1fb390c255d2b1dfc745c6ab34af8096b5b67aa179e3f341854f7a69f7bf47664c832037ec7a78f8e27209e3f20f833fb6e8c0fc4a40920a5ad2b0618982ff72540009d5db82f0f5bcaed2a27f35d1e50eaa0cf8e48c7a2d43c25d0264db750a7f33b44a4bfaae576cf9ee7594ed204513899566564ed8bbc97ed18b1d8868f926a5c70ac06fbac1eade46792186be7bf8ffa3301239edd093449b7d77192782b5111c14169d2b4a1b3443ad62e4abdf11aac6a5b89a5b20ab0ad0abd949b9d64582c67ffce018e7e46de4091fcc77a65b971fc67c8d9cbf0c341ca764b1056ee5014d9865059616a525a1d46ae2fad159afe86dd1df9b8246411827e19535ca0aa9f83050b06e70aa2737f27e93d584a9cef878a642e9361efaa5d20bd8da901fa2e064656f686d3b3ea31d1d850ae9196b7764548f5c6450a32a717e09b6b7e75d43fbbda76e43a24f186d5578933f408bfa28e0435cde525fb91e71d92d704cc5a9b5e3db7aaec46d2b1f8dcb3f921f69bd7397c96a1e132c39c8f1656cea4365c779abf76199cb5b6aada022edec5c901cdafa2e7f3765af9c8b20cb1a6785085fcb0dc901367b89051bdfdc6b68c5215fd04e2b3c7e1c454a4d21132953b25c50995af0f7159a5a8d0a1621f4808f126a5bd40ddc79fed90f49925ee367a57a05c070fbe39fe2c213e7c1724a907ecfa69efe6e021c06a262471a4377f3c9809e9fee4f375e27c31b6afbb2151da86b7cab63c7b4fa4b77fb30172b9d0d78b1c0535ec0639c4910b5eeecbb5b8b5c8aa74c140e7ad347812e36db3097a7ff85c09ab2c0020202307f50efefcdb497b9c060ca68c4be54a9165b4cebc6b2e2e14e5ffb9213142418faedcdf26fd326b7672399e71cfffe3ed712ced5317c254f9199ee10c24c802d102bd8749513d3145201ca4e01bc7c8bbcf430afa541ec5665f86dfb143be648521bb0f2b029018201444787f644f8c88b79e754e6ea9c797babdaec72a9680abadf3a41684cdd57c2b6e833acc0846be5aa927f1b1b36562d2acb9ecfb758455230d050daec6748ba280a5edc86d48e3f8af0f8f4ffb18ae3cd3c19a82d504a4fd52bb62289ae8026572a497fe268f87ef4b4b5886aa07eeb698b7cbf99683f710afc9ed1f8a488883ce0eb8f7fd055b82a9fe21a409caa231c41ba151008e9658919c611e157d7f3926a5e4248532a6860e615b9c86e9fea212128d96ed58c9b84ef22706071eb69f492e4d8321ed9faf6c6a8928f86172bdc930244583ea15be497d9ce4ae79cb3e6293a8512ffaa9e8e358f3c7c7117001fb92891a40b84f9126cc3def5cde67f463bbac9668b9f56c3e4ee72fceebb47e52fc226bab213d8193516e7064459fd1365350a95c5a1c3ac44a73bbba2a4c17ebe49dd781bff1995cd706b77bb533117594ad63566f4c0730beab85ff4c713b7f10b95480fe99a0f676c51ca11116b21e87887b462aa9770e85509e4e60f198148115f0a3ce6028516a946178d1acacf7767f6be7277891369eff67762aa58f928d48b7231e44d899cea8289003349117a53d61bc27b207fdc91c9db61e677d1e1a1bc6a1b6e8564130b335233db4b5de8d62324e6d0ccb2b08c2ff922324eb8c506711142d4b8d7a21223ef0a3d534fdb0de58be95cd827152f71bdd0a82766b62b4c87536f0b7e7df343c4263187da887de6e65d11d0360e2376c1d71c367ae85edeed8f767d24c644b1a9b455ded1dc3cc224f99936a6ee66931c45e5e3db2427719ab2d5cd9c20d9bb0ec004b69bccb00649f3d8e34a3572c257de114b9f027d76bc7db9007175cc03b9e2061b6b3fe7409e009b5371544e56fe438cbd361e5b11efbf2d79d1c250a1e73ca8c601c4f4d1e3761290950421c48c7daa45965e472f5ef3c4b8597444dc5dc01cd25358055b5000617f3e7291da3413e3f0853b1271366612405c35ff1b785b984d921b518425628a533a29ab65d3c11f44c6daa86f8b6457ebb9419274c481aa6f3fa4547641670aff58b9cc62c0993d49a509f02dee755ee5f1fd2710c995c43a91c4f873afa1bbdff19427cba2641052a8f361ecbc72e8a6cf587e83f8bd3110c95fb080edc77a6d43cd58c447b0e02261e4109500c6458dce70acb17aa8f9dc1d15b94a61354164031b5d563c25d0246fc45e6401cefceb501e1468903e5d677759dbe3f24bd48ce55ff8b8f26529fb3b2d669202a1e8a498984b449b4830a0126b18f0e78182c9ce78fe0c448c0e27845b926cfde28fa85e156fa98fefaeb19ed1247c9643b447b4342c94c114d3c4c35eed4d5b49aa70e6aad45bfb557f15e8fdb2d6e3d10d8338a13fe3f187751985b37a5bb10b750f79e36fc2e2ee9bdecc3ed156e202ed7b45a94809d77edaa398042fc6a825a4848c334c557303d24eb3f8e01be06995ceb283c70272b00da61c3381628f0e372fe2fcc779ff7daf7e4b7f2686c39d3fab674b8867b62b0bf9d5cfd0c1d3b270521f55f147de75142ffd7fc9ac7e5dae7ca2fdf26a9222d060823852409dd040cfd1f66f218c6dbdaaacddab34b123af22f97384d64fac64d84fd638c96378c8f9532a11927d48440bc777ff8b8b9be88f930f3b579a713c0bc449dca3a3bd5f2efa98240ccc594299e44451dc60c6c5c9edd0d7b777912b3dc40c57e0ea5f4425cd7047e686c7304f04ba9f7b5de6ad2bd524f1d29f8802a524441fa286015adf4589431710aa4d76de8a956dc1d39c0a13abb7fc309d24222d036e204ab6bb46ef8a7595d9e4512e0b9d5f8fd719a4e3072e1d806967045789c67a1681f2a9f1f4b19f4f5e1afdafc17db7a6d5196161499e62ab4b0ec27648f3eeb1fb2b78f8ecf9b05cf9509a3b9e2a361238deb1c91bdbc8b1d11bbeb939fd9da811cd439069da0ecc00665d72357aac01f259a0325409b201859cc0569e0eba67a7a9ca7e8b78078d9370bd3e37f0571680ede60cb6bbfe69435d6ab5efd80cf051d119a7004fc0b600844d49218d844de8f521524a47ee50229c7da25e42a8639b5db225e7f23967f5d4f8a297aff04a3cbedc2985b6393a5ba0b26b6c7b4ca22d369b35b410799d1ad02825104d34f73408db1948438597931ed1c1c260e78340517bfa2f734537dbdf5ec303518ff4640efe7f7b1c2f46babdb9247ce8eabad9718a8b9ddb7a18d5e87ced554c9d6de78f85d293349590c6c32483534bc968b24a28eb54b9515589d6dd8eb51a5ad0b4d896ce92250397cbc404323fcdf0ee47ed634e0c58213bc5b35a72b21a098e11b79c061430dc817c1e0c79a5b6ed3b002979933f1b83a17f250b1bd5c4958df4d75531ca03efbda89f6a92fe08c23ad9014ff562a7f3dcde578d6825b9847b5df04dbca4f2aa52d8e0f4cf8183ce121e39b50358a9796acde0372a8ff97769874a80ab997cd889145aad4888c06963c2f5b82f53a748a6729fbc79d35c06d84e05c62e44ff78040e56ebfc6efcf0d8b49337d5a17c4041f0d5a8b616244d585a162b69db073accd9071d12df5b326a43b834bbffc2f2a60deafcbddf1c6438a1769d6fb09fbe1990e89da12164ef237f326edb5be64bb64b143a030de8a99b3c5e543c871cb581e2be090a92134aa587701f864907cadd7c1ce20fcf8f5dc7f7ecd06a6c19d89a92ca0ad4393c208b80bba990c7a3702a9c79bddde75d5db244719ac32191b6ceb041ab541fb47680a97dc0422b8a50d91e32cb08cd341b0b099aca5bd12b69d4f89d10b755b351a6489180b786a3bebac926532a4a2d85b07bce6c090d1aaaff079e36d5394a612f1351b90c13a0fa6bf9d188d548dfe6fa51a9026edb52009c03ed45ac51d05c58a957bcc67e05a588985ba00d79f33ae9cdd5f5721d9fdc72ee6e880708be87e8a60c3c035c146f2091d1b9a4c2cfa56f292fe1ba62290d4e56c05669291bbe917f3cac51802a2cc8e9c90dadfe666c233c5a5bb71ee17deec51ce60c73f57bf9ecb84873afcc44815131810c6c1217bea485ef9aa2785e859b25315ef8aa3a274982786e45d622ae831fb76010d69a181b069e4cc55d4436edb10d1119b0c6000c6d5cff7c72f740a59dc0507e7a952b69403c62673f122c9d1264fac6ce2262e86cd8d6a402672f88530fc2d16f31736dd497a4e853253ac8d5aff8d1376895e9f5519b2490cc2a2412ba0c99cec855f668837310035e92fb646486de1b0acffb91ae7516df3eeef381456b55e65baa58e71461c928687e699d2b21814805591382e95e1b970aaa53259917f070281f2336b7d570249d838b3f1a32753c336864e15f4561badf8fee034a29c52ff3fca7456ae140f83e3b2fd5b57c9aef3f20c664200d235f236ec47dd2fc20b14dc6000812237aea992d987e5460679e8c5b76d931ef6d951e6c7087e3106b6ce2db9de6f228fdf3ffc38710c0e8d5000a195a79d1fa2301038f5b27c40b09c34c025e5099d40c2204ea0eae985263c9101cab88d6857a320c9e497f22348a24861a5fb8d734e08cad09f9933748ff01eab22f17756f58688dc1b486a397563ee9ad0784b8833cdb5f7c6bcf76d9c1105f71c3c6aabefd70dc6cd5c66d31caf916145ac5ed7fa070b4277c0448ab1eb78c943be9aeab0587d321a4bcb7754f070881178f8be668b686124899fac252519f4b60ec42db766a908755040463125c26850177402a977246d36d23afac0a11889d54640bd8f6f670d686cfd33f6fc5d90cf6cbd63d9d0fd201dd4c74dbbab899f3c23c0b7e37ea0b2aff421327200d0da58b5893a4186ae3652cc6e11c2c2a0e52184a3872532acce98c94cebf4f31333663a620f0dba0ffd89c3124380075bd28caa6d449a050b3661b8fbaf4747b77c4928b1378fdc8c7a7b38ade1aeec44bdfacc8271d0b132b2029b0f3582f9919f5c8cd543abc9caf6b82b197cd482c3ef61a64743506342bf50a3c1ff544563bb8b2002911ee1fad698f4ac133ffed5bfe81239c918207a03c7a8bd71a0a502aea78d38e970e3ab2abf754b598acb79cf276792aa08724d0ba24f2a694912ab795b3f45f52dec50d9bfbc99ae27e1d2c2216afec6709d6513a64b29ef58255bbe18478c5d4f15f74ea63a1e15487752eec8fd019f1d4a7aa25277664754bd2d7cd3a7a018b92c56d965a1974885363757286da9e055ef7fac17876f0a64c1026a597733b897a9155ecbf420159ae8e5209aa83a3544fff1fb4566f2d54f95e3bbd30dcca5f24397e4bd47ff01292f0d6fe9dd47a810e0c25382fa69b4987d1afd9b69ef125110ad6b240eaa9c85829a2646f9ab7874bc02bfa8346cc9190943e9d46b44880670b1e2aa3a29e83be5472d7418885a353faade6e8b18f4b588607bbb758588d1e2f11a9dfa1c4d61be50249f1ee32e6ff8c0c7722aaec1bc79654a4772efc578bd6a14c79abcc77a4e09c8b6c6ea35cd3ab31e35268fb55db843176f8042f8ce7be0ddd4ead6dbdad0ef9e7cb2323db5cc48119a72b27306b8ff6366c0bc682a85ab9e2cf2238b6d6eb2e38a97d5577e6334cb2aa6e7c86e489e876f9d7053577a5cb57f52812fab7c4bd7b19a34c228ffb67dcac9281612f778b58c580c140542200fd00cb3ad81d93420df93c5af2493f646d8de797102fa0a65247317882fbf171520f00b2c7638623b823ff11444fdde453570f99f9099b60061a908b83383ba8b82bb78edd074dccf9342afdf8d11a6129ba6ea7030f3629056264f1736c2b926171b6dc7e1fa455a473de656390495f3b6ad2f9f46f35eacb075628ff739ef78f28ba683448068c7f18fb63f28ba7dbbb78999100dde0a94e8b8570817c7114c13e139ceb333782b29a84a5b19497fa785915c7680dd7f972cb59ba22161f60886e5cb3c3e808726cbf96bc4da78914eee565c6d9d18e70d22cf8c0244cf3cf488c3550eaa400bc0f26d64e0f1bc8d0301a841d954073a641f3ef883d81f4d5db8e9df708e64e640b38df7295f7fe573863653086bae5507c880ab7fdb7a6c5ce77027ffa7395233d3ce536d77ae6c2e9c8ffb6fee78a3bcb3b5f888bd595caa3a5586948776b950a89cde4db8247ffff27491c882b430afdd60e7a22324f6635a9aa7139f3e624c6d9ece60f7f8153b2080cf0544fbf8e1c436503766e670b902604ab521e11aa5a65cedd64cfaf898ac5f55c08c87693c323517bcb0d99c28f5e072d4f6540c7ead70138d47c1a67fd72bd6ef5613af33a0af311c3d0a631ca2a2dfbe35d1021eb610e40b9be128683235a788b5a4cacf99babee382458d59e8aa1dd7bba7e09dd30c055a3df8ed721a1778b2c6ed587a403566325cd19962edd7831caa44a6b716517bad502130e7cf6a5ce5288dc84c0170f622ae0b1e1166a9c2c0771d91df9f9dd82ae210469602ce38964746c1c1d04321aae7d464eb801dbea7ec39505457e778208774d72673626c998b002c46a9b4b1e390d9344f0ca62212a1b6d41043a2100b35196bce42d40caa0ea9a486bf8526fd1f0f0d362c2cac463ea7377a20b54b9435442ca529fc00da4fd7e27c4eaf14215a06857b54254c26346956fd7fe215a5ce57ec38cedf50a3c759e563a4fd87494f00e7bd9b44f3b7e99c6ef67187056a21d2fe1ac9d24125b1947eb293189fdc448b591af4d9b8eb091d6bbb5e50fae79d000044e282bb2ab6c63cc9562b151c214e45015354e62be63e1881238b907f7bdb791ff44a4e03fa29dbd26db2f49d0f4729b7cd9ba69a65b0b493466d35d09b3f590c67c31660d95e2ab4af2c9f1df91f04ce5a57dde2d75206b42e3423126774d76593c2f713ae279d7092506b513fd5d18f0f52d3fafd7141dfd4a0de1063754dba865faf8dc0f6be9d90ef21ec86a275533f6ad4b4e360dc775413f29eab8b3daac6279b9abfe163ea2f183e09ed91ef67fbb090875109288a182cfdcc46d90678efe5edceda6518335e678438cac4bb47d376f3f0e12aa55301735d7f42653c073d6a4a37b2e17d332dc1be6b50918c007b14886307cc39250e81efecd63d24067a49994572725a9df1760caac13a28f5255556b27ec245e93969b85cdec7cd1c2d2a433d3f9572b93054a7ce8adff81bc1d30884d5fc4791e251bd907e37af5bec74235c3e2f804e4e0450b715289942b7859ad207bafcfec1b586dc15e7911fe6d20aa3d02fcd47e9956780e300d7c53c17dfa15754deb4c20efebc7270bda0fa6b37fc88c6be4250cac38c1b8186b364482026ab52d65d3a691903fccc39772277011bfaa421adba76bed9731077bec885ce88d40f36bbd2a839c67dc4b862c968491b877d4fd13fc90f8da57a29121e12f78e85af765cd66e72ba513593fe1cdf20019985b065d828707d8e509c6834eab188deea5c9ee97955f4b07d37b6fc7beed73be94887d423a349f35bb8782bc670ceaec870d97f061bda02ae73f6d575f81e0b6326eae6c1b3085cc584686120e12dd9ad8ce44036bec8a189f9", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x3fffffffffffe, {0x0, 0x200000000, 0xffffffffffffffff, 0x4, 0x6, 0x0, {0x0, 0x10001, 0x200000000000, 0xd, 0x0, 0x100, 0x10000, 0x2, 0x80000000, 0x0, 0xd, r6, 0x0, 0x7, 0xa0}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r4, &(0x7f0000004300)={0x50, 0x0, r5, {0x7, 0x26, 0x8, 0xfffffffff323ca46, 0x0, 0xfffc, 0x6, 0x5d3186cc, 0x0, 0x0, 0x1, 0x10001}}, 0x50) creat(&(0x7f00000000c0)='./file0/file0\x00', 0x0) creat(&(0x7f00000001c0)='./file0/file0\x00', 0x108) read$FUSE(r4, &(0x7f0000002100)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r4, &(0x7f0000000040)={0x10, 0xffffffffffffffda, r7}, 0x10) syz_fuse_handle_req(r4, &(0x7f0000004380)="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", 0x2000, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={0x90, 0x0, 0x9, {0x5, 0x0, 0x9, 0x8b, 0xf5, 0x1ff, {0x3, 0x2, 0x2, 0x7, 0x0, 0x80000001, 0x7, 0x641d4d1, 0x6, 0xc000, 0x6, r6, r8, 0x57c, 0x81}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.451348984s ago: executing program 5 (id=2360): mount$tmpfs(0x0, &(0x7f0000000180)='./cgroup\x00', &(0x7f0000000000), 0x3200841, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) r1 = getpid() r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) r3 = getpid() sched_setscheduler(r3, 0x2, 0x0) sched_setaffinity(r3, 0x0, 0x0) prlimit64(r3, 0xe, &(0x7f0000000040)={0xa, 0x85}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r5, &(0x7f0000000040)="18000000010005", 0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000340)={{0xfffffffe, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x2, 0x4, r1, 0x0, 0x0, 'syz1\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc1105518, &(0x7f0000000c40)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x3}, 0x0, [0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x2, 0xfffffffffffffffe, 0xfffffffffffffffc, 0x0, 0x4, 0xf, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x8, 0x7, 0x0, 0x7, 0x7ff, 0xfffffffe, 0x6, 0x3e, 0x8000000001, 0x0, 0x100000001, 0x0, 0xfffffffffffffffc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7, 0x2, 0x2, 0x0, 0x0, 0xfffffffffffffffd, 0x108000000000000, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x4, 0x40000000000, 0x0, 0x40, 0xfffffffffffffffc, 0x0, 0x0, 0xffffffffffffffff, 0xfffdfffa, 0xfffffffffffffffd, 0x401, 0x2, 0xfffffffc, 0x6, 0x0, 0x0, 0x400000000000, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x1000, 0x0, 0x6000000, 0xfffffffd, 0x0, 0x5, 0x80000000000000, 0x8, 0x0, 0x8, 0x4, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, 0xfff, 0x80000000, 0x0, 0x0, 0x0, 0x5, 0x7, 0x0, 0x4]}) 2.9081199s ago: executing program 5 (id=2362): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{0x0}, {0x0}, {0x0}], 0x3}}], 0x1, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e21, @remote}, 0x10) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000480)}], 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRESHEX=r0, @ANYRES32=r0, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRESOCT=0x0], 0x68, 0x4000000}}], 0x1, 0x40000) ioctl$sock_ifreq(0xffffffffffffffff, 0x891e, &(0x7f0000000200)={'bond0\x00', @ifru_names='vlan0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000002c0)="36c1fefc4a84cb34adfedaf4648e", 0xe}], 0x1, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"], 0x2c8}}], 0x1, 0x810) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 2.848953325s ago: executing program 0 (id=2363): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000003c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d34, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x3}}}}}]}}]}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000300)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a21820fffff5bab003a0000002058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100030c100000000000224e0000", 0x58}], 0x1) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x8, {0x8, 0x0, "392cdaab4a73"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 2.591300858s ago: executing program 3 (id=2364): r0 = epoll_create1(0x80000) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f00000000c0)="1a00000082000000", 0x8) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x80000000005, 0x100000001000087}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x14, &(0x7f0000000040)=0x6) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000200), 0x0) setreuid(0xee01, 0xee01) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r3, 0x84, 0x15, &(0x7f0000000080)={0xa}, 0x1) sendto$inet6(r3, &(0x7f0000000180)="d4", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x80000001, @loopback, 0x9}, 0x1c) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x20004, r1, 0x2}) r6 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r6, 0xc008640a, &(0x7f0000000300)={r7, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r6, 0xc010640b, &(0x7f0000000140)={r8}) close_range(r0, 0xffffffffffffffff, 0x0) r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, 0x0) 2.555258275s ago: executing program 5 (id=2365): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x10000014, &(0x7f0000000140), 0x111, 0x9}}, 0x20) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1002) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$igmp(0x2, 0x3, 0x2) bind$inet(0xffffffffffffffff, 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0x2, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0xa, 0x0, 0x0, @mcast2}, r3}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(r2, 0x0, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000440)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000600)=[{0x10, 0x0, [0x1, 0x6, 0x3, 0x2, 0x9, 0x6, 0x4b, 0x2, 0xfff, 0x1, 0x5, 0x0, 0x40d4, 0x0, 0x0, 0x2105]}, {0x18, 0x0, [0x7fff, 0x3c, 0x4, 0x2, 0xa, 0x2, 0xbebc, 0x4, 0x7ff, 0x8, 0x7, 0x1, 0x80, 0x1, 0x4, 0x7ff]}, {0x20, 0x0, [0x1, 0x2, 0x4e5, 0x5, 0x7ff, 0x9, 0x80, 0x62, 0x1, 0xfffffff4, 0x43, 0x1, 0x7e, 0x9ba9df3, 0x99f2, 0x1]}], r3, 0x1, 0x1, 0xd8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x4000000, @empty}, {0xa, 0x0, 0x0, @private2, 0x4000}, r5, 0xfffffffc}}, 0x48) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000000)={0x7, 0x8, 0xfa00, {r3, 0x3}}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r6 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000001, 0x13, r6, 0xfffff000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 1.784693444s ago: executing program 2 (id=2366): mount$nfs4(&(0x7f0000000000)='^&:^\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={[], [{@appraise}]}) syz_usb_connect(0x2, 0x47, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000a3233910daa658744d2d010203010902350001082f10000904df0003080662ff09050c02200006060309050710003e8fad6702af03"], 0x0) 1.662497196s ago: executing program 3 (id=2367): ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$netlink(0x10, 0x3, 0x15) sendmsg$nl_route_sched(r1, &(0x7f0000007000)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x181) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) migrate_pages(r2, 0x100, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x88) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000007040)=ANY=[@ANYBLOB="160000000000000004000000ffff000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001280)=[r3]}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000004000000040000000700000000000000", @ANYRES32=r3, @ANYBLOB="34007346b1e6513b9d5300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$inet6(0xa, 0x80002, 0x3a) openat2$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)={0x0, 0x20}, 0x18) gettid() r4 = fsopen(&(0x7f00000001c0)='nilfs2\x00', 0x0) close(r4) 1.383454204s ago: executing program 5 (id=2368): r0 = syz_usb_connect(0x6, 0x24, &(0x7f0000000180)=ANY=[], 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='sched_switch\x00', r2, 0x0, 0x36}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfec8d000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f00000000c0)=0x80000001, 0x4) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) pipe(&(0x7f00000000c0)) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000340)=@filter={'filter\x00', 0x42, 0x4, 0x2c8, 0xffffffff, 0x198, 0x198, 0x0, 0xffffffff, 0xffffffff, 0x230, 0x230, 0x230, 0xffffffff, 0x4, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00, 0x0, 'syz_tun\x00', 'syzkaller1\x00', {}, {}, 0x6, 0x1, 0x4c}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@ip={@multicast2, @remote, 0x0, 0x0, 'veth1_macvtap\x00', 'tunl0\x00'}, 0x0, 0xa0, 0x100, 0x0, {0x60010000}, [@common=@ah={{0x30}, {[0x1]}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @empty, 0x0, 0x9, [0x16, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x100]}}}, {{@uncond, 0x0, 0x70, 0x98, 0x0, {0x88}}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x3, 0x3d}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x328) socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) mount(0x0, 0x0, &(0x7f00000002c0)='configfs\x00', 0x2808000, 0x0) 1.114676546s ago: executing program 3 (id=2369): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x10200) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000240)={0x2, 0x5, 0x40003}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000340)={0x8, 0x8169, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000280)={0x40, 0x403, 0xc}) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 513.255815ms ago: executing program 3 (id=2370): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0xfd, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000300)='kmem_cache_free\x00', r1}, 0x18) tkill(0x0, 0x16) (async) tkill(0x0, 0x16) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x9c000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) (async) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r2 = gettid() timer_create(0x1, &(0x7f0000000080)={0x0, 0x21, 0x4, @tid=r2}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) (async) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) (async) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r4, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r4, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x8a05f664f2838ee, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x840) 233.229027ms ago: executing program 4 (id=2371): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2181) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x40201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a58000000060a010400000000000000000a0000010900010073797a31000000002c0004802800018007000100637400001c0002800500030001000000080002400000000c08000140000000090900020073797a320000000014000000110001"], 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) write$tun(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="001c86dd2000100003004000000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000188"], 0xffe) 232.917979ms ago: executing program 0 (id=2372): r0 = landlock_create_ruleset(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007918480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r6, @ANYRES32, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f0000000080)=r4}, 0x20) sendmsg$inet(r5, &(0x7f0000000500)={0x0, 0x4003e80, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0) landlock_restrict_self(r0, 0x5) connect$inet6(0xffffffffffffffff, 0x0, 0x0) 200.43027ms ago: executing program 3 (id=2373): r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pwritev2(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)="ec", 0x1}], 0x1, 0xfffff, 0x0, 0x0) 0s ago: executing program 3 (id=2374): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r1 = getpid() r2 = fsmount(r0, 0x0, 0x80) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x90, 0xfffffffffffffffe, 0x4000000a74e, {0x1, 0x0, 0x0, 0xffff, 0xfffffff8, 0x84, {0x2, 0x5, 0x7, 0x75, 0xffd, 0xffff, 0x7d59, 0x7fff, 0x4, 0x2000, 0x7f, r3, r4, 0x78002, 0xff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_GETINFO(0xffffffff80000501, &(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, r3, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f0000000040)={0x6, 0x4, {r1}, {r3}, 0xff}) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r9, &(0x7f0000000a40)=[{{&(0x7f0000000340)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f00000008c0)=[{&(0x7f0000000440)="03f60cd4208efe3ba06981e2a681e4098b99c8682bc66289f290877209fe0288518e9cf4aba4b707a31e140647236bd9845682b5f2ce3722ae79f6cee58292157eef0eb97a013dfc305b8755630470819aa94d91459be37b05c49c2f4c52d702081ad082a9e917133cfb3aa97a70a8774172ba754ff0cf8f9647c8b069d958be45abec7b0691a5259e2d6ff46d8df1e26405545a2cb19c497b9241332b6e5485e412d1e75eb5197f3636c90660ada50a6d9fb867fd7fc382c7c1d8c154e10f249c7b55415bf38b62dd4b8c17b3f936437801f5baec41bfe8e4029b77abe4985b544ea7c8f7f57ead844479bf21640b", 0xef}, {&(0x7f0000000240)="34f2d53db97e6fea7c8fa550db6f8d5dd3fda51930b4d0d1a9088b6aacaa2be3c4fc69", 0x23}, {&(0x7f0000000580)="20b5947e08c682e57e71ee4b021d12145b8bf0344195d0f46420aaea7e2382bb6291445e4e0cd8caa4436b724fba4f200e736b05167910bb48bc6d44316d5747e5e9a7d1afa211fb1f21ec02057df4c0564189e6e18064c25b5249a842413dc401cebf5e5517817549fade5b9b86642b2cc58ceefbd31f0dbdb21bb911a66b6537eb703c28a3e83e57ad3951", 0x8c}, {&(0x7f0000000640)="095a88902f9861a2ca2e3aafa2aedbd5002b9a0305f510001d4b966c2d4aa5dad72ff08056", 0x25}, {&(0x7f0000000680)="316ff02b96cd5454e2b703b8c26c48bd4efefa542233ee6d4b05821c2ef646ca52c562ea085bde77b879853d8942daebdbf6c5a30671ea67f5952092374a2c3591072d69221d70bdad312ab2a82ef1e3e1b32ee68f65bdf2be8eb745e55796cf17ced66379f227f35585066e1deef3277797ada6c6582f07b4b81e02a812ee2acdd9f0a3ee21b224a7111e151bc46d6813b2", 0x92}, {&(0x7f0000000740)="d330a9f8b167cb4d5294ac9d94e88918c96706e750ddb393e5e308b550f846f44dfa48e0e215d40681c1f005cccbb0d129d2a812a4239371708ee99dfccc6c96bb4fa29cc1be40d441982483e8a53e7fedf66f2acef7b7dc816f63aae5ffbc598bc6ef11fb66437e759d884290050bbc1d1934711ef8a0ea2f59e5d8dd5c6c31287279f31027f8264f5d2b2253", 0x8d}, {&(0x7f0000000800)="d3d037e9de47b5479c4bccae64964948bd755eadee428b9e36e8e4587baf2ca186346c2eb66ee2e6185a51d10c5c6ec516a9d39af8be4265a265345be3a8e8d3d025a5d7c12a2ef1c9eff22365759f5a6f71d4779affc69081fab3409acca07b0311ae769f35ada8f8ee5db82baced49075266f579ba27a086711793f67651fa6b", 0x81}], 0x7, &(0x7f0000000a80)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES32=r9, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r1, @ANYRES32=r7, @ANYRES32=r4, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r9, @ANYBLOB="000000e71b000000000000000100000dbb00000dab8cc1c200", @ANYRES32=r6, @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32=r9, @ANYRES32=r0, @ANYRES32=r2, @ANYRES32=r8, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00'], 0xb0, 0x4004011}}], 0x1, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec80fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xcc000007, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r12, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r12, 0x0) ioctl$KVM_X86_SETUP_MCE(r12, 0x4008ae9c, &(0x7f0000000000)={0x4, 0xa13ca8e5839881ae, 0x4}) sendmmsg$inet6(r11, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) r13 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r13, 0x1, 0x41, &(0x7f0000000080)=0x454a, 0x4) kernel console output (not intermixed with test programs): .4.1948" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 721.059990][ T9716] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 721.109976][T12452] Bluetooth: hci5: command 0x1003 tx timeout [ 721.180516][ T5809] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 721.370136][ T5927] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 721.450296][ T9716] usb 5-1: Using ep0 maxpacket: 8 [ 721.560218][ T5927] usb 3-1: device descriptor read/64, error -71 [ 721.740695][ T9716] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 721.797637][ T9716] usb 5-1: config 179 has no interface number 0 [ 721.820836][ T5927] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 721.840144][ T9716] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 721.887539][ T9716] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 722.000031][ T5927] usb 3-1: device descriptor read/64, error -71 [ 722.080116][ T9716] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 722.096082][ T9716] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 722.138050][ T9716] usb 5-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 722.151858][ T9716] usb 5-1: config 179 interface 65 has no altsetting 0 [ 722.178055][ T9716] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 722.188079][ T9716] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 722.196877][ T5927] usb usb3-port1: attempt power cycle [ 722.217746][ T9716] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input29 [ 722.653592][ T9716] usb 5-1: USB disconnect, device number 36 [ 722.739997][ T5927] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 722.771621][ T5927] usb 3-1: device descriptor read/8, error -71 [ 722.970939][ T5819] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 723.059951][ T5927] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 723.095494][ T5927] usb 3-1: device descriptor read/8, error -71 [ 723.220212][ T5927] usb usb3-port1: unable to enumerate USB device [ 724.581319][T13797] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 726.009704][ T30] kauditd_printk_skb: 71 callbacks suppressed [ 726.009719][ T30] audit: type=1400 audit(2000002362.085:4557): avc: denied { watch watch_reads } for pid=13809 comm="syz.3.1965" path="/416/file1" dev="tmpfs" ino=2208 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=lnk_file permissive=1 [ 726.410203][ T30] audit: type=1400 audit(2000002362.095:4558): avc: denied { watch } for pid=13809 comm="syz.3.1965" path="/416" dev="tmpfs" ino=2203 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 726.458631][T13816] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1965'. [ 726.763926][ T30] audit: type=1400 audit(2000002362.095:4559): avc: denied { create } for pid=13809 comm="syz.3.1965" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 726.785120][ T30] audit: type=1400 audit(2000002362.535:4560): avc: denied { create } for pid=13809 comm="syz.3.1965" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 726.815412][ T30] audit: type=1400 audit(2000002362.535:4561): avc: denied { create } for pid=13809 comm="syz.3.1965" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 726.930406][ T30] audit: type=1400 audit(2000002362.535:4562): avc: denied { write } for pid=13809 comm="syz.3.1965" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 727.027875][ T30] audit: type=1400 audit(2000002362.535:4563): avc: denied { nlmsg_write } for pid=13809 comm="syz.3.1965" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 727.179920][ T30] audit: type=1400 audit(2000002362.555:4564): avc: denied { write } for pid=13809 comm="syz.3.1965" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 727.365096][ T30] audit: type=1400 audit(2000002363.445:4565): avc: denied { create } for pid=13820 comm="syz.0.1967" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 727.412414][T13823] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 727.419809][T13823] cramfs: wrong magic [ 727.579794][ T6073] Bluetooth: hci5: Frame reassembly failed (-84) [ 727.586698][ T30] audit: type=1400 audit(2000002363.465:4566): avc: denied { write } for pid=13820 comm="syz.0.1967" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 728.399924][T13833] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 728.408776][T13833] cramfs: wrong magic [ 729.660135][ T5819] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 730.107999][T13853] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1975'. [ 730.117194][T13853] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1975'. [ 730.135812][T13853] futex_wake_op: syz.3.1975 tries to shift op by 32; fix this program [ 730.149295][T13853] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1975'. [ 730.158356][T13853] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1975'. [ 730.269554][T13854] netlink: 164 bytes leftover after parsing attributes in process `syz.5.1974'. [ 730.365154][T13854] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1974'. [ 731.113547][ T30] kauditd_printk_skb: 48 callbacks suppressed [ 731.113558][ T30] audit: type=1400 audit(2000002367.195:4615): avc: denied { create } for pid=13856 comm="syz.0.1976" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 731.184478][ T30] audit: type=1400 audit(2000002367.225:4616): avc: denied { ioctl } for pid=13856 comm="syz.0.1976" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=41815 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 731.282956][ T6073] Bluetooth: hci5: Frame reassembly failed (-84) [ 731.315254][ T30] audit: type=1400 audit(2000002367.225:4617): avc: denied { write } for pid=13856 comm="syz.0.1976" name="comedi4" dev="devtmpfs" ino=1280 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 731.453915][ T30] audit: type=1400 audit(2000002367.225:4618): avc: denied { allowed } for pid=13856 comm="syz.0.1976" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 731.493631][ T30] audit: type=1400 audit(2000002367.225:4619): avc: denied { map } for pid=13856 comm="syz.0.1976" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=41816 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 731.679934][ T30] audit: type=1400 audit(2000002367.225:4620): avc: denied { read write } for pid=13856 comm="syz.0.1976" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=41816 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 731.709025][ T30] audit: type=1400 audit(2000002367.395:4621): avc: denied { watch watch_reads } for pid=13858 comm="syz.3.1978" path="/419/file1" dev="tmpfs" ino=2224 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=lnk_file permissive=1 [ 731.746990][T13861] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1978'. [ 732.223306][ T30] audit: type=1400 audit(2000002367.395:4622): avc: denied { watch } for pid=13858 comm="syz.3.1978" path="/419" dev="tmpfs" ino=2219 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 732.245767][ T30] audit: type=1400 audit(2000002367.825:4623): avc: denied { create } for pid=13858 comm="syz.3.1978" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 732.265542][ T30] audit: type=1400 audit(2000002367.825:4624): avc: denied { create } for pid=13858 comm="syz.3.1978" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 732.521005][ T977] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 732.674273][ T977] usb 1-1: Using ep0 maxpacket: 16 [ 732.680925][ T977] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 732.693026][ T977] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 732.709419][ T977] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 732.731673][ T977] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 732.741787][ T977] usb 1-1: Product: syz [ 732.749840][ T977] usb 1-1: Manufacturer: syz [ 732.773588][T13879] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1980'. [ 732.779988][ T977] usb 1-1: SerialNumber: syz [ 732.820541][T13879] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1980'. [ 732.821545][ T977] usb 1-1: config 0 descriptor?? [ 732.906008][ T977] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 732.915979][ T977] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 733.352984][ T5819] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 733.356737][ T5809] Bluetooth: hci5: command 0x1003 tx timeout [ 733.905145][ T977] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 733.932191][ T977] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 733.949344][ T977] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 733.983989][ T977] em28xx 1-1:0.0: No AC97 audio processor [ 734.022117][ T977] usb 1-1: USB disconnect, device number 38 [ 734.029137][ T977] em28xx 1-1:0.0: Disconnecting em28xx [ 734.052071][ T977] em28xx 1-1:0.0: Freeing device [ 734.219249][T13897] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 734.516352][T13893] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13893 comm=syz.4.1989 [ 734.690162][ T24] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 734.761815][T13910] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 734.808164][T13910] cramfs: wrong magic [ 734.917617][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 734.922923][ T36] Bluetooth: hci5: Frame reassembly failed (-84) [ 734.931411][ T24] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 734.939575][ T24] usb 4-1: config 0 has no interface number 0 [ 734.950217][ T24] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 734.977636][ T24] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 734.992556][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 735.075070][ T24] usb 4-1: Product: syz [ 735.087091][ T24] usb 4-1: Manufacturer: syz [ 735.091835][ T24] usb 4-1: SerialNumber: syz [ 735.226253][ T24] usb 4-1: config 0 descriptor?? [ 735.449262][ T24] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 735.473401][ T24] em28xx 4-1:0.132: Video interface 132 found: [ 735.826927][ T24] em28xx 4-1:0.132: unknown em28xx chip ID (0) [ 736.408119][ T24] em28xx 4-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=0) [ 736.427335][ T24] em28xx 4-1:0.132: board has no eeprom [ 736.587982][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 736.588000][ T30] audit: type=1400 audit(2000002372.665:4647): avc: denied { execute_no_trans } for pid=13933 comm="syz.4.1997" path="/397/file0" dev="tmpfs" ino=2119 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 736.618009][ C0] vkms_vblank_simulate: vblank timer overrun [ 736.640092][ T30] audit: type=1400 audit(2000002372.715:4648): avc: denied { read } for pid=13933 comm="syz.4.1997" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 736.664552][ T30] audit: type=1400 audit(2000002372.715:4649): avc: denied { open } for pid=13933 comm="syz.4.1997" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 736.690047][ C0] vkms_vblank_simulate: vblank timer overrun [ 736.950108][ T5819] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 737.572673][ T24] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 737.581340][ T24] em28xx 4-1:0.132: analog set to bulk mode. [ 737.587805][ T5888] em28xx 4-1:0.132: Registering V4L2 extension [ 737.688118][ T5888] em28xx 4-1:0.132: failed to trigger read from i2c address 0x4a (error=-5) [ 737.698044][ T5888] em28xx 4-1:0.132: failed to trigger read from i2c address 0x48 (error=-5) [ 737.711395][ T5888] em28xx 4-1:0.132: failed to trigger read from i2c address 0x42 (error=-5) [ 737.728673][ T30] audit: type=1400 audit(2000002373.725:4650): avc: denied { create } for pid=13941 comm="syz.2.2000" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 737.752661][ T5888] em28xx 4-1:0.132: failed to trigger read from i2c address 0x40 (error=-5) [ 737.827814][ T30] audit: type=1400 audit(2000002373.735:4651): avc: denied { read } for pid=13941 comm="syz.2.2000" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 737.916216][ T5927] usb 4-1: USB disconnect, device number 39 [ 738.130703][ T30] audit: type=1400 audit(2000002373.735:4652): avc: denied { open } for pid=13941 comm="syz.2.2000" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 738.154854][ T30] audit: type=1400 audit(2000002373.735:4653): avc: denied { ioctl } for pid=13941 comm="syz.2.2000" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 738.200756][ T5927] em28xx 4-1:0.132: Disconnecting em28xx [ 738.222910][ T30] audit: type=1400 audit(2000002373.865:4654): avc: denied { ioctl } for pid=13941 comm="syz.2.2000" path="socket:[42692]" dev="sockfs" ino=42692 ioctlcmd=0x89eb scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 738.292094][ T30] audit: type=1400 audit(2000002373.865:4655): avc: denied { ioctl } for pid=13941 comm="syz.2.2000" path="socket:[41981]" dev="sockfs" ino=41981 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 738.332215][ T30] audit: type=1400 audit(2000002373.985:4656): avc: denied { unmount } for pid=5807 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 738.452561][T13954] netlink: 'syz.4.2002': attribute type 4 has an invalid length. [ 738.556257][ T5888] em28xx 4-1:0.132: Config register raw data: 0xffffffed [ 738.565081][ T5888] em28xx 4-1:0.132: AC97 chip type couldn't be determined [ 738.573141][ T5888] em28xx 4-1:0.132: No AC97 audio processor [ 738.580029][ T9716] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 738.588029][ T5888] usb 4-1: Decoder not found [ 738.663516][ T5888] em28xx 4-1:0.132: failed to create media graph [ 738.682837][ T5888] em28xx 4-1:0.132: V4L2 device video103 deregistered [ 738.759907][ T9716] usb 6-1: Using ep0 maxpacket: 16 [ 738.840950][ T9716] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 738.852701][ T9716] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 738.971251][T13966] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2005'. [ 739.000299][T13966] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2005'. [ 739.009695][T13966] bridge_slave_1: left allmulticast mode [ 739.015425][T13966] bridge_slave_1: left promiscuous mode [ 739.022271][T13966] bridge0: port 2(bridge_slave_1) entered disabled state [ 739.333658][ T9716] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 739.342845][ T9716] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 739.351027][ T9716] usb 6-1: Product: syz [ 739.356286][ T9716] usb 6-1: Manufacturer: syz [ 739.363399][ T9716] usb 6-1: SerialNumber: syz [ 739.396272][ T9716] usb 6-1: config 0 descriptor?? [ 739.413898][ T9716] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 739.426626][ T9716] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 739.441199][ T5888] em28xx 4-1:0.132: Remote control support is not available for this card. [ 739.473172][ T5927] em28xx 4-1:0.132: Closing input extension [ 739.493139][ T5927] em28xx 4-1:0.132: Freeing device [ 740.046109][ T9716] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 740.052479][ T9716] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 740.070458][ T9716] em28xx 6-1:0.0: AC97 chip type couldn't be determined [ 740.091122][ T9716] em28xx 6-1:0.0: No AC97 audio processor [ 740.126585][ T9716] usb 6-1: USB disconnect, device number 36 [ 740.143914][ T9716] em28xx 6-1:0.0: Disconnecting em28xx [ 740.151412][ T9716] em28xx 6-1:0.0: Freeing device [ 740.495810][T13984] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 740.505345][T13984] cramfs: wrong magic [ 740.668495][ T6073] Bluetooth: hci5: Frame reassembly failed (-84) [ 741.410161][ T5812] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 741.609908][ T5812] usb 3-1: Using ep0 maxpacket: 8 [ 741.951612][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 741.951651][ T30] audit: type=1400 audit(2000002377.805:4662): avc: denied { create } for pid=13996 comm="syz.0.2014" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 741.989287][ T5812] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 742.110760][ T5812] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 742.205480][ T30] audit: type=1400 audit(2000002377.835:4663): avc: denied { firmware_load } for pid=13996 comm="syz.0.2014" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 742.234010][ C0] vkms_vblank_simulate: vblank timer overrun [ 742.261441][ T5812] usb 3-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 742.359839][ T30] audit: type=1400 audit(2000002378.435:4664): avc: denied { create } for pid=14003 comm="syz.3.2016" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 742.399804][ T5812] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 742.418995][ T30] audit: type=1400 audit(2000002378.465:4665): avc: denied { bind } for pid=14003 comm="syz.3.2016" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 742.447142][ T30] audit: type=1400 audit(2000002378.465:4666): avc: denied { setopt } for pid=14003 comm="syz.3.2016" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 742.466642][ T5812] usb 3-1: Product: syz [ 742.466665][ T5812] usb 3-1: Manufacturer: syz [ 742.466687][ T5812] usb 3-1: SerialNumber: syz [ 742.482143][ T5812] usb 3-1: config 0 descriptor?? [ 742.488900][ T30] audit: type=1400 audit(2000002378.465:4667): avc: denied { accept } for pid=14003 comm="syz.3.2016" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 742.509724][ T30] audit: type=1400 audit(2000002378.465:4668): avc: denied { write } for pid=14003 comm="syz.3.2016" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 742.544592][ T5812] powermate 3-1:0.0: probe with driver powermate failed with error -5 [ 742.770022][T12452] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 742.821393][ T30] audit: type=1400 audit(2000002378.475:4669): avc: denied { read } for pid=14003 comm="syz.3.2016" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 742.841067][ T30] audit: type=1400 audit(2000002378.565:4670): avc: denied { write } for pid=14003 comm="syz.3.2016" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 743.729641][ T30] audit: type=1400 audit(2000002379.805:4671): avc: denied { module_request } for pid=13989 comm="syz.2.2012" kmod="fs-" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 744.590024][ T9716] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 744.645435][T14036] tipc: Trying to set illegal importance in message [ 744.659143][T14036] ipt_REJECT: TCP_RESET invalid for non-tcp [ 745.082347][ T24] usb 3-1: USB disconnect, device number 50 [ 745.180101][ T9716] usb 1-1: Using ep0 maxpacket: 16 [ 745.189626][ T9716] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 745.210263][ T9716] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 745.239103][ T9716] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 745.251371][ T9716] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 745.267714][ T9716] usb 1-1: Product: syz [ 745.279342][ T9716] usb 1-1: Manufacturer: syz [ 745.286402][ T9716] usb 1-1: SerialNumber: syz [ 745.297028][ T9716] usb 1-1: config 0 descriptor?? [ 745.313136][ T9716] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 745.323379][ T5875] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 745.333825][ T9716] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 745.395797][T14046] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 745.406587][T14046] cramfs: wrong magic [ 745.694103][ T5875] usb 4-1: Using ep0 maxpacket: 32 [ 745.709226][ T5875] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 745.719379][ T5875] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 745.736149][ T5875] usb 4-1: config 0 descriptor?? [ 745.767123][T14051] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 745.774955][T14051] cramfs: wrong magic [ 745.959305][ T6378] Bluetooth: hci5: Frame reassembly failed (-84) [ 745.965151][ T5875] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 745.979500][ T5875] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 745.990884][ T5875] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 746.070670][ T5875] usb 4-1: media controller created [ 746.095474][ T5875] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 746.173683][ T5875] az6027: usb out operation failed. (-71) [ 746.182592][ T5875] az6027: usb out operation failed. (-71) [ 746.189051][ T5875] stb0899_attach: Driver disabled by Kconfig [ 746.195198][ T5875] az6027: no front-end attached [ 746.195198][ T5875] [ 746.203284][ T9716] em28xx 1-1:0.0: chip ID is em2870 [ 746.209430][ T5875] az6027: usb out operation failed. (-71) [ 746.226406][ T5875] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 746.249371][ T5875] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input30 [ 746.355190][ T5875] dvb-usb: schedule remote query interval to 400 msecs. [ 746.362816][ T5875] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 746.386444][ T5875] usb 4-1: USB disconnect, device number 40 [ 746.415500][ T847] usb 1-1: USB disconnect, device number 39 [ 746.425074][ T847] em28xx 1-1:0.0: Disconnecting em28xx [ 746.431594][ T847] em28xx 1-1:0.0: Freeing device [ 746.501980][ T5875] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 747.000369][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.000013][T12452] Bluetooth: hci5: command 0x1003 tx timeout [ 748.036094][ T5819] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 748.204136][T14070] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2032'. [ 748.313338][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 748.313354][ T30] audit: type=1400 audit(2000002384.395:4678): avc: denied { create } for pid=14069 comm="syz.4.2033" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 748.344002][ T30] audit: type=1400 audit(2000002384.425:4679): avc: denied { connect } for pid=14069 comm="syz.4.2033" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 749.391536][T14077] netlink: 'syz.0.2032': attribute type 1 has an invalid length. [ 749.465641][ T30] audit: type=1326 audit(2000002385.545:4680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14078 comm="syz.2.2035" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f308998f6c9 code=0x0 [ 749.488482][ C0] vkms_vblank_simulate: vblank timer overrun [ 750.522975][ T30] audit: type=1400 audit(2000002386.005:4681): avc: denied { read } for pid=14090 comm="syz.5.2037" name="event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 750.549162][T14090] delete_channel: no stack [ 750.564683][ T30] audit: type=1400 audit(2000002386.005:4682): avc: denied { open } for pid=14090 comm="syz.5.2037" path="/dev/input/event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 750.636751][ T30] audit: type=1400 audit(2000002386.015:4683): avc: denied { ioctl } for pid=14090 comm="syz.5.2037" path="/dev/input/event0" dev="devtmpfs" ino=918 ioctlcmd=0x4501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 750.663485][ T30] audit: type=1400 audit(2000002386.095:4684): avc: denied { create } for pid=14090 comm="syz.5.2037" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 750.689969][ T24] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 750.840754][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 750.847674][ T24] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 751.044782][ T24] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 751.065270][ T24] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 751.075273][ T5888] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 751.089923][ T24] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 751.115554][ T24] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 751.134986][ T847] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 751.154161][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 751.221315][ T30] audit: type=1400 audit(2000002387.295:4685): avc: denied { bind } for pid=14078 comm="syz.2.2035" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 751.287765][ T5888] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 751.302072][ T5888] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 751.432931][ T24] usb 1-1: GET_CAPABILITIES returned 0 [ 751.458410][ T847] usb 6-1: Using ep0 maxpacket: 32 [ 751.458420][ T5888] usb 5-1: New USB device found, idVendor=1d34, idProduct=0004, bcdDevice= 0.00 [ 751.465891][ T847] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 751.487410][T14104] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 751.499015][ T847] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 751.508270][ T24] usbtmc 1-1:16.0: can't read capabilities [ 751.594914][ T5888] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 751.666908][T14089] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14089 comm=syz.0.2036 [ 751.691498][ T5888] usb 5-1: config 0 descriptor?? [ 751.691498][ T847] usb 6-1: config 0 descriptor?? [ 751.776789][ T30] audit: type=1326 audit(2000002387.855:4686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14087 comm="syz.0.2036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b8218f6c9 code=0x7ffc0000 [ 751.800306][ C0] vkms_vblank_simulate: vblank timer overrun [ 751.810523][ T30] audit: type=1326 audit(2000002387.885:4687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14087 comm="syz.0.2036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b8218f6c9 code=0x7ffc0000 [ 751.834011][ C0] vkms_vblank_simulate: vblank timer overrun [ 751.916778][ T847] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 751.936450][ T847] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 751.947878][ T847] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 751.990060][ T847] usb 6-1: media controller created [ 752.039817][ T847] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 752.108308][ T5888] usbhid 5-1:0.0: can't add hid device: -71 [ 752.130167][ T5888] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 752.142538][ T847] az6027: usb out operation failed. (-71) [ 752.149572][ T5888] usb 5-1: USB disconnect, device number 37 [ 752.158656][ T847] az6027: usb out operation failed. (-71) [ 752.169274][ T847] stb0899_attach: Driver disabled by Kconfig [ 752.180914][ T847] az6027: no front-end attached [ 752.180914][ T847] [ 752.195139][ T847] az6027: usb out operation failed. (-71) [ 752.202652][ T847] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 752.225097][ T847] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input31 [ 752.248476][ T847] dvb-usb: schedule remote query interval to 400 msecs. [ 752.263629][ T847] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 752.286427][ T847] usb 6-1: USB disconnect, device number 37 [ 752.440433][ T847] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 752.870910][ T847] usb 1-1: USB disconnect, device number 40 [ 752.910887][ T9716] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 753.874694][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 753.886622][ T30] audit: type=1400 audit(2000002389.935:4704): avc: denied { create } for pid=14119 comm="syz.5.2047" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 753.929933][ T9716] usb 3-1: Using ep0 maxpacket: 16 [ 753.958909][ T9716] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 753.978182][T14125] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 753.985566][T14125] cramfs: wrong magic [ 754.011821][ T9716] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 754.097097][ T24] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 754.137201][ T30] audit: type=1400 audit(2000002390.195:4705): avc: denied { setopt } for pid=14128 comm="syz.3.2049" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 754.423814][ T24] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 754.424448][ T9716] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 754.439990][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 754.455045][ T1006] Bluetooth: hci5: Frame reassembly failed (-84) [ 754.463173][ T9716] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 754.466809][ T24] usb 1-1: Product: syz [ 754.475658][ T9716] usb 3-1: Product: syz [ 754.476494][ T30] audit: type=1400 audit(2000002390.245:4706): avc: denied { bind } for pid=14128 comm="syz.3.2049" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 754.479809][ T9716] usb 3-1: Manufacturer: syz [ 754.479833][ T9716] usb 3-1: SerialNumber: syz [ 754.482832][ T9716] usb 3-1: config 0 descriptor?? [ 754.560032][ T24] usb 1-1: Manufacturer: syz [ 754.567253][ T24] usb 1-1: SerialNumber: syz [ 754.579597][T14139] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2051'. [ 754.799821][ T30] audit: type=1400 audit(2000002390.655:4707): avc: denied { name_connect } for pid=14136 comm="syz.3.2051" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 754.802614][ T9716] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 754.857324][ T9716] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 754.875963][ T24] usb 1-1: config 0 descriptor?? [ 755.055789][T14144] sp0: Synchronizing with TNC [ 755.212608][T14144] sp0: Found TNC [ 755.325659][ T30] audit: type=1400 audit(2000002390.655:4708): avc: denied { accept } for pid=14136 comm="syz.3.2051" lport=44163 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 755.448051][ T9716] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 755.462809][ T9716] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 755.510562][ T9716] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 755.547877][ T9716] em28xx 3-1:0.0: No AC97 audio processor [ 755.557996][ T30] audit: type=1400 audit(2000002391.225:4709): avc: denied { read } for pid=5479 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 755.698133][T14147] syzkaller1: entered promiscuous mode [ 755.705848][T14147] syzkaller1: entered allmulticast mode [ 755.727012][ T9716] usb 3-1: USB disconnect, device number 51 [ 755.888400][ T9716] em28xx 3-1:0.0: Disconnecting em28xx [ 755.895291][ T30] audit: type=1400 audit(2000002391.235:4710): avc: denied { search } for pid=5479 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 755.929386][ T24] usb 1-1: non-Atmel transceiver xxxxbb54 [ 755.932095][ T9716] em28xx 3-1:0.0: Freeing device [ 756.064782][ T30] audit: type=1400 audit(2000002391.235:4711): avc: denied { search } for pid=5479 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 756.109516][ T30] audit: type=1400 audit(2000002391.235:4712): avc: denied { search } for pid=5479 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 756.131378][ C1] vkms_vblank_simulate: vblank timer overrun [ 756.141793][T14117] overlayfs: failed to resolve './file0': -2 [ 756.160683][ T30] audit: type=1400 audit(2000002391.235:4713): avc: denied { read } for pid=5479 comm="dhcpcd" name="n129" dev="tmpfs" ino=7406 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 756.182398][ C1] vkms_vblank_simulate: vblank timer overrun [ 756.295822][ T24] usb 1-1: Firmware version (0.0) predates our first public release. [ 756.440964][ T24] usb 1-1: Please update to version 0.2 or newer [ 756.639890][ T5819] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 756.680359][ T24] usb 1-1: atusb_probe: initialization failed, error = -19 [ 756.746832][ T24] usb 1-1: USB disconnect, device number 41 [ 756.792531][T14160] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 756.802307][ T5875] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 756.959985][ T5875] usb 6-1: Using ep0 maxpacket: 32 [ 756.975339][ T5875] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 757.055895][ T5875] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 757.169970][ T5888] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 757.773615][ T5888] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 757.876043][ T5888] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 757.885339][ T5888] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 757.893908][ T5875] usb 6-1: config 0 descriptor?? [ 757.899143][ T5888] usb 3-1: Product: syz [ 757.904236][ T5888] usb 3-1: Manufacturer: syz [ 757.908824][ T5888] usb 3-1: SerialNumber: syz [ 758.126408][ T5888] usb 3-1: config 0 descriptor?? [ 758.137200][ T5875] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 758.157211][ T5875] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 758.170197][ T5875] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 758.802428][ T5875] usb 6-1: media controller created [ 758.834432][ T5888] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 758.902263][ T5875] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 758.953815][ T5875] az6027: usb out operation failed. (-71) [ 758.969956][ T5875] az6027: usb out operation failed. (-71) [ 758.981967][ T5875] stb0899_attach: Driver disabled by Kconfig [ 758.995716][ T5875] az6027: no front-end attached [ 758.995716][ T5875] [ 759.016391][ T5875] az6027: usb out operation failed. (-71) [ 759.028218][ T5875] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 759.043906][T11963] udevd[11963]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 759.092506][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 759.092522][ T30] audit: type=1400 audit(2000002395.175:4716): avc: denied { map } for pid=14168 comm="syz.4.2059" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 759.137646][ T5875] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input32 [ 759.187675][ T30] audit: type=1400 audit(2000002395.175:4717): avc: denied { execute } for pid=14168 comm="syz.4.2059" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 759.326313][ T5875] dvb-usb: schedule remote query interval to 400 msecs. [ 759.333722][ T5875] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 759.350176][ T5875] usb 6-1: USB disconnect, device number 38 [ 759.378640][ T30] audit: type=1400 audit(2000002395.425:4718): avc: denied { relabelfrom } for pid=14149 comm="syz.2.2054" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 759.398518][ C1] vkms_vblank_simulate: vblank timer overrun [ 759.409686][ T30] audit: type=1400 audit(2000002395.425:4719): avc: denied { relabelto } for pid=14149 comm="syz.2.2054" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 759.429438][ C1] vkms_vblank_simulate: vblank timer overrun [ 759.447858][ T30] audit: type=1400 audit(2000002395.445:4720): avc: denied { ioctl } for pid=14149 comm="syz.2.2054" path="socket:[44452]" dev="sockfs" ino=44452 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 759.449100][T11963] udevd[11963]: setting mode of /dev/input/event4 to 020660 failed: No such file or directory [ 759.666319][T11963] udevd[11963]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 759.667979][ T5875] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 759.731855][T14187] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 759.738886][T14187] cramfs: wrong magic [ 761.129944][ T5875] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 761.433714][ T5875] usb 6-1: Using ep0 maxpacket: 16 [ 761.445349][ T5875] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 761.456972][ T5875] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 761.484079][ T5875] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 761.498992][ T5875] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 761.548503][ T5875] usb 6-1: Product: syz [ 761.556099][ T5875] usb 6-1: Manufacturer: syz [ 761.566029][ T5875] usb 6-1: SerialNumber: syz [ 761.592895][ T5875] usb 6-1: config 0 descriptor?? [ 761.622192][ T5875] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 761.645004][ T5875] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 761.927655][ T30] audit: type=1400 audit(2000002398.005:4721): avc: denied { open } for pid=14206 comm="syz.4.2067" path="/dev/ptyqd" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 761.951310][ C1] vkms_vblank_simulate: vblank timer overrun [ 762.105300][ T30] audit: type=1400 audit(2000002398.165:4722): avc: denied { write } for pid=14212 comm="syz.0.2069" path="socket:[44496]" dev="sockfs" ino=44496 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 762.129153][ C1] vkms_vblank_simulate: vblank timer overrun [ 762.242386][ T5875] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 762.250957][ T5875] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 762.258086][ T5875] em28xx 6-1:0.0: AC97 chip type couldn't be determined [ 762.265375][ T5875] em28xx 6-1:0.0: No AC97 audio processor [ 762.430354][ T847] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 762.441335][ T5875] usb 6-1: USB disconnect, device number 39 [ 762.545900][ T5875] em28xx 6-1:0.0: Disconnecting em28xx [ 762.587595][ T5875] em28xx 6-1:0.0: Freeing device [ 762.640235][ T847] usb 1-1: Using ep0 maxpacket: 8 [ 762.648122][ T847] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 762.656872][ T847] usb 1-1: config 179 has no interface number 0 [ 762.680054][ T24] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 762.695392][ T847] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 762.739545][ T847] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 762.858969][ T847] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 762.859723][ T24] usb 5-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 762.879971][ T847] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 762.880156][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 763.059961][ T847] usb 1-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 763.084326][ T24] usb 5-1: Product: syz [ 763.088482][ T24] usb 5-1: Manufacturer: syz [ 763.101780][ T847] usb 1-1: config 179 interface 65 has no altsetting 0 [ 763.132222][ T24] usb 5-1: SerialNumber: syz [ 763.143345][ T847] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 763.157634][ T24] usb 5-1: config 0 descriptor?? [ 763.184745][ T847] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 763.200858][ T24] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 763.214689][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 763.246065][ T24] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 763.377184][ T24] usb 5-1: media controller created [ 763.403308][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 764.080144][ T30] audit: type=1400 audit(2000002655.567:4723): avc: denied { read write } for pid=14222 comm="syz.5.2071" name="vhost-net" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 764.365968][ T847] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input33 [ 764.465107][ T30] audit: type=1400 audit(2000002655.567:4724): avc: denied { open } for pid=14222 comm="syz.5.2071" path="/dev/vhost-net" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 764.519972][ T30] audit: type=1400 audit(2000002655.567:4725): avc: denied { ioctl } for pid=14222 comm="syz.5.2071" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 764.550702][ T24] DVB: Unable to find symbol mt352_attach() [ 764.557306][ T30] audit: type=1400 audit(2000002656.027:4726): avc: denied { append } for pid=14206 comm="syz.4.2067" name="i2c-1" dev="devtmpfs" ino=3726 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 764.709047][ T24] DVB: Unable to find symbol nxt6000_attach() [ 764.715658][ T30] audit: type=1400 audit(2000002656.687:4727): avc: denied { append } for pid=14212 comm="syz.0.2069" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 764.750321][ T24] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 764.827595][ T24] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input34 [ 764.830159][ T30] audit: type=1400 audit(2000002656.687:4728): avc: denied { mac_admin } for pid=14212 comm="syz.0.2069" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 764.924890][ T24] dvb-usb: schedule remote query interval to 1000 msecs. [ 764.982322][ T30] audit: type=1400 audit(2000002656.687:4729): avc: denied { relabelto } for pid=14212 comm="syz.0.2069" name=E91F7189591E9233614B dev="tmpfs" ino=2178 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sock_file permissive=1 trawcon="system_u:object_r:memory_device_t:s0" [ 765.012792][ T24] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 765.068600][ T24] dvb-usb: bulk message failed: -22 (7/0) [ 765.076665][ T24] dvb-usb: bulk message failed: -22 (7/0) [ 765.120082][ T30] audit: type=1400 audit(2000002656.687:4730): avc: denied { associate } for pid=14212 comm="syz.0.2069" name=E91F7189591E9233614B dev="tmpfs" ino=2178 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:memory_device_t:s0" [ 765.149127][ T30] audit: type=1400 audit(2000002657.207:4731): avc: denied { mount } for pid=14241 comm="syz.5.2074" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 766.074085][ T24] dvb-usb: bulk message failed: -22 (7/0) [ 766.081189][ T24] dvb-usb: error while querying for an remote control event. [ 766.212057][ T30] audit: type=1400 audit(2000002658.297:4732): avc: denied { sys_module } for pid=14244 comm="syz.5.2075" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 766.492165][ T847] usb 5-1: USB disconnect, device number 38 [ 766.662611][ T847] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 767.638137][ T30] audit: type=1400 audit(2000002659.717:4733): avc: denied { create } for pid=14256 comm="syz.4.2077" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 767.844500][ T5875] usb 3-1: USB disconnect, device number 52 [ 767.900162][ T847] usb 1-1: USB disconnect, device number 42 [ 767.960405][ T5888] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 769.049714][ T5888] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 769.059598][ T5888] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 769.069276][ T5888] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 769.080255][ T5888] usb 5-1: config 220 has no interface number 2 [ 769.086509][ T5888] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 769.099994][ T5888] usb 5-1: config 220 interface 0 has no altsetting 0 [ 769.106763][ T5888] usb 5-1: config 220 interface 76 has no altsetting 0 [ 769.113971][ T5888] usb 5-1: config 220 interface 1 has no altsetting 0 [ 769.122807][ T5888] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 769.134705][ T5888] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 769.143150][ T5888] usb 5-1: Product: syz [ 769.147305][ T5888] usb 5-1: Manufacturer: syz [ 769.156340][ T5888] usb 5-1: SerialNumber: syz [ 769.248919][T14271] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14271 comm=syz.2.2081 [ 769.659624][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 769.659639][ T30] audit: type=1400 audit(2000002661.737:4738): avc: denied { write } for pid=14256 comm="syz.4.2077" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 769.900097][ T847] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 770.009958][T14288] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2086'. [ 770.153961][ T847] usb 6-1: Using ep0 maxpacket: 32 [ 770.235372][ T847] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 770.252040][ T847] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 770.420598][ T847] usb 6-1: config 0 descriptor?? [ 770.964289][ T847] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 771.001628][ T847] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 771.004606][ T5888] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 771.011777][ T847] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 771.027688][ T847] usb 6-1: media controller created [ 771.046474][ T847] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 771.175906][ T5888] uvcvideo 5-1:220.0: No valid video chain found. [ 771.190404][ T5888] usb 5-1: selecting invalid altsetting 0 [ 771.285212][ T5888] usb 5-1: selecting invalid altsetting 0 [ 771.489402][ T847] az6027: usb out operation failed. (-71) [ 771.514691][ T847] az6027: usb out operation failed. (-71) [ 771.531957][ T5888] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 771.540591][ T847] stb0899_attach: Driver disabled by Kconfig [ 771.550214][ T847] az6027: no front-end attached [ 771.550214][ T847] [ 771.557852][ T847] az6027: usb out operation failed. (-71) [ 771.587959][ T847] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 771.615972][ T5888] usb 5-1: USB disconnect, device number 39 [ 771.623745][ T847] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input35 [ 771.667936][ T847] dvb-usb: schedule remote query interval to 400 msecs. [ 771.681146][ T847] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 771.712536][ T847] usb 6-1: USB disconnect, device number 40 [ 771.721851][ T30] audit: type=1400 audit(2000002663.797:4739): avc: denied { name_bind } for pid=14297 comm="syz.4.2088" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 772.208689][ T847] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 772.560414][ T30] audit: type=1400 audit(2000002664.627:4740): avc: denied { create } for pid=14309 comm="syz.2.2092" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 772.647090][ T30] audit: type=1400 audit(2000002664.707:4741): avc: denied { bind } for pid=14309 comm="syz.2.2092" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 772.766250][T14318] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 772.775800][T14318] cramfs: wrong magic [ 772.867888][ T30] audit: type=1400 audit(2000002664.707:4742): avc: denied { listen } for pid=14309 comm="syz.2.2092" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 772.912692][ T6378] Bluetooth: hci5: Frame reassembly failed (-84) [ 772.920049][ T30] audit: type=1400 audit(2000002664.707:4743): avc: denied { accept } for pid=14309 comm="syz.2.2092" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 772.950196][ T30] audit: type=1400 audit(2000002664.947:4744): avc: denied { listen } for pid=14309 comm="syz.2.2092" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 772.969753][ C0] vkms_vblank_simulate: vblank timer overrun [ 772.976765][ T30] audit: type=1400 audit(2000002664.947:4745): avc: denied { name_bind } for pid=14309 comm="syz.2.2092" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 772.998917][ T30] audit: type=1400 audit(2000002664.947:4746): avc: denied { node_bind } for pid=14309 comm="syz.2.2092" saddr=224.0.0.2 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 773.021112][ C0] vkms_vblank_simulate: vblank timer overrun [ 774.663754][T14338] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 774.674497][T14338] cramfs: wrong magic [ 774.726814][ T30] audit: type=1400 audit(2000002666.807:4747): avc: denied { getopt } for pid=14339 comm="syz.3.2101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 774.870058][T12452] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 775.838216][ T30] audit: type=1400 audit(2000002667.907:4748): avc: denied { read open } for pid=14354 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 776.207564][ T30] audit: type=1400 audit(2000002667.907:4749): avc: denied { getattr } for pid=14354 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 776.336474][ T30] audit: type=1400 audit(2000002668.207:4750): avc: denied { add_name } for pid=14351 comm="dhcpcd-run-hook" name="resolv.conf.sl0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 776.420002][ T30] audit: type=1400 audit(2000002668.207:4751): avc: denied { create } for pid=14351 comm="dhcpcd-run-hook" name="resolv.conf.sl0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 776.469691][ T30] audit: type=1400 audit(2000002668.207:4752): avc: denied { write } for pid=14351 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.sl0.link" dev="tmpfs" ino=7594 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 776.578457][ T5875] usb 5-1: new full-speed USB device number 40 using dummy_hcd [ 776.757415][ T30] audit: type=1400 audit(2000002668.207:4753): avc: denied { append } for pid=14351 comm="dhcpcd-run-hook" name="resolv.conf.sl0.link" dev="tmpfs" ino=7594 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 776.832487][ T30] audit: type=1400 audit(2000002668.247:4754): avc: denied { bind } for pid=14362 comm="syz.4.2104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 776.874781][ T30] audit: type=1400 audit(2000002668.247:4755): avc: denied { name_bind } for pid=14362 comm="syz.4.2104" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 776.903732][ T5875] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 776.929898][ T5875] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 20490, setting to 64 [ 776.936067][ T30] audit: type=1400 audit(2000002668.247:4756): avc: denied { node_bind } for pid=14362 comm="syz.4.2104" saddr=fe80::aa src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 777.011953][ T5875] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 777.049998][ T5875] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 777.113392][ T5875] usb 5-1: SerialNumber: syz [ 777.239099][T14363] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 777.251895][ T5875] cdc_acm 5-1:1.0: skipping garbage [ 777.258484][ T5875] cdc_acm 5-1:1.0: probe with driver cdc_acm failed with error -12 [ 777.510249][T14363] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2104'. [ 777.668712][ T5875] usb 5-1: USB disconnect, device number 40 [ 778.331933][ T5875] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 779.312725][ T5875] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 779.323828][ T5875] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 779.349650][ T5875] usb 6-1: New USB device found, idVendor=1d34, idProduct=0004, bcdDevice= 0.00 [ 779.372580][ T5875] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 779.420581][ T5875] usb 6-1: config 0 descriptor?? [ 780.087451][ T5875] usbhid 6-1:0.0: can't add hid device: -71 [ 780.403229][ T5875] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 780.432228][ T5875] usb 6-1: USB disconnect, device number 41 [ 781.587684][T14449] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2119'. [ 781.602634][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 781.602646][ T30] audit: type=1400 audit(2000002673.667:4761): avc: denied { ioctl } for pid=14445 comm="syz.5.2119" path="socket:[45091]" dev="sockfs" ino=45091 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 782.562718][T14465] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 782.572604][T14465] cramfs: wrong magic [ 782.602756][T14464] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 782.610540][T14464] cramfs: wrong magic [ 782.874919][ T7148] Bluetooth: hci5: Frame reassembly failed (-84) [ 783.221694][T14479] FAULT_INJECTION: forcing a failure. [ 783.221694][T14479] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 783.577701][T14482] vxfs: WRONG superblock magic 00000000 at 1 [ 783.585483][T14482] vxfs: WRONG superblock magic 00000000 at 8 [ 783.591679][T14482] vxfs: can't find superblock. [ 783.716371][T14479] CPU: 0 UID: 0 PID: 14479 Comm: syz.4.2123 Not tainted syzkaller #0 PREEMPT(full) [ 783.716401][T14479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 783.716414][T14479] Call Trace: [ 783.716422][T14479] [ 783.716431][T14479] dump_stack_lvl+0x16c/0x1f0 [ 783.716466][T14479] should_fail_ex+0x512/0x640 [ 783.716495][T14479] _copy_from_user+0x2e/0xd0 [ 783.716530][T14479] kstrtouint_from_user+0xd6/0x1d0 [ 783.716559][T14479] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 783.716589][T14479] ? __lock_acquire+0xb8a/0x1c90 [ 783.716621][T14479] proc_fail_nth_write+0x83/0x220 [ 783.716646][T14479] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 783.716678][T14479] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 783.716701][T14479] vfs_write+0x2a0/0x11d0 [ 783.716727][T14479] ? __pfx___mutex_lock+0x10/0x10 [ 783.716749][T14479] ? __pfx_vfs_write+0x10/0x10 [ 783.716777][T14479] ? __fget_files+0x20e/0x3c0 [ 783.716808][T14479] ksys_write+0x12a/0x250 [ 783.716829][T14479] ? __pfx_ksys_write+0x10/0x10 [ 783.716859][T14479] do_syscall_64+0xcd/0xfa0 [ 783.716881][T14479] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 783.716902][T14479] RIP: 0033:0x7f135278e17f [ 783.716920][T14479] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 783.716940][T14479] RSP: 002b:00007f1353629030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 783.716960][T14479] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f135278e17f [ 783.716974][T14479] RDX: 0000000000000001 RSI: 00007f13536290a0 RDI: 0000000000000006 [ 783.716987][T14479] RBP: 00007f1353629090 R08: 0000000000000000 R09: 0000000000000000 [ 783.717000][T14479] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 783.717013][T14479] R13: 00007f13529e6218 R14: 00007f13529e6180 R15: 00007ffc96cddf68 [ 783.717042][T14479] [ 783.904326][ C0] vkms_vblank_simulate: vblank timer overrun [ 784.001699][T14480] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 784.418431][ T30] audit: type=1400 audit(2000002676.497:4762): avc: denied { create } for pid=14487 comm="syz.2.2126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 784.440013][ T5875] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 784.602198][T14497] netlink: 'syz.2.2129': attribute type 4 has an invalid length. [ 784.620204][ T5875] usb 1-1: Using ep0 maxpacket: 32 [ 784.627521][ T5875] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 784.638030][ T5875] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 784.656302][ T5875] usb 1-1: config 0 descriptor?? [ 784.870117][T12452] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 785.355351][ T5875] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 785.364520][ T5875] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 785.375227][ T5875] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 785.430543][ T5875] usb 1-1: media controller created [ 785.489199][ T5875] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 785.628966][ T5875] az6027: usb out operation failed. (-71) [ 785.646077][ T5875] az6027: usb out operation failed. (-71) [ 785.655590][ T5875] stb0899_attach: Driver disabled by Kconfig [ 785.668958][ T5875] az6027: no front-end attached [ 785.668958][ T5875] [ 785.709766][ T5875] az6027: usb out operation failed. (-71) [ 785.715742][ T5875] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 785.842023][ T5875] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input36 [ 785.887265][T14515] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 785.897407][ T5875] dvb-usb: schedule remote query interval to 400 msecs. [ 786.305997][ T5875] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 786.358961][ T5875] usb 1-1: USB disconnect, device number 43 [ 786.498215][T14523] sp0: Synchronizing with TNC [ 786.537895][T14523] sp0: Found TNC [ 786.921938][ T5875] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 787.024050][T14527] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14527 comm=syz.3.2140 [ 787.207245][T14532] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 787.215655][T14532] cramfs: wrong magic [ 789.864960][T14564] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2147'. [ 790.519976][ T9716] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 790.683496][ T30] audit: type=1400 audit(2000002682.767:4763): avc: denied { write } for pid=14572 comm="syz.4.2150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 790.729617][ T9716] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 790.797147][ T9716] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 790.834779][ T9716] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 790.875276][ T9716] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 790.888359][ T9716] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 790.904830][ T9716] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 790.926231][ T9716] usb 4-1: config 0 descriptor?? [ 791.288484][ T9716] hdpvr 4-1:0.0: firmware version 0x0 dated [ 791.306758][ T9716] hdpvr 4-1:0.0: untested firmware, the driver might not work. [ 791.667917][T14567] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 791.937359][T14567] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 792.064174][T14600] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2149'. [ 792.078471][T14600] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2149'. [ 792.199923][ T30] audit: type=1400 audit(2000002684.277:4764): avc: denied { create } for pid=14566 comm="syz.3.2149" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 793.505698][T14601] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 794.304544][ T9716] hdpvr 4-1:0.0: device init failed [ 794.310011][ T9716] hdpvr 4-1:0.0: probe with driver hdpvr failed with error -12 [ 794.322849][ T9716] usb 4-1: USB disconnect, device number 41 [ 795.350982][ T30] audit: type=1400 audit(2000002687.437:4765): avc: denied { unlink } for pid=5807 comm="syz-executor" name="file0" dev="tmpfs" ino=2424 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 795.493523][ T30] audit: type=1400 audit(2000002687.517:4766): avc: denied { create } for pid=14607 comm="syz.0.2158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 795.972977][ T30] audit: type=1400 audit(2000002687.617:4767): avc: denied { getopt } for pid=14607 comm="syz.0.2158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 796.228198][ T30] audit: type=1400 audit(2000002687.707:4768): avc: denied { write } for pid=14616 comm="syz.5.2162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 796.689747][ T30] audit: type=1400 audit(2000002687.827:4769): avc: denied { create } for pid=14622 comm="syz.3.2161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 796.784280][ T30] audit: type=1400 audit(2000002687.837:4770): avc: denied { connect } for pid=14622 comm="syz.3.2161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 796.843790][ T30] audit: type=1400 audit(2000002687.837:4771): avc: denied { setopt } for pid=14622 comm="syz.3.2161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 796.870250][T14650] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 796.878979][T14650] cramfs: wrong magic [ 796.917983][ T30] audit: type=1400 audit(2000002688.137:4772): avc: denied { create } for pid=14627 comm="syz.2.2165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 797.185554][ T7145] Bluetooth: hci5: Frame reassembly failed (-84) [ 797.651304][T14663] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2173'. [ 797.663013][T14664] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2173'. [ 798.377780][ T30] audit: type=1400 audit(2000002690.447:4773): avc: denied { watch } for pid=14669 comm="syz.0.2175" path="/426/file1" dev="tmpfs" ino=2259 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 798.400799][ C0] vkms_vblank_simulate: vblank timer overrun [ 799.027739][ T30] audit: type=1400 audit(2000002690.447:4774): avc: denied { watch_sb watch_reads } for pid=14669 comm="syz.0.2175" path="/426/file1" dev="tmpfs" ino=2259 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 799.190258][ T5819] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 800.657215][T14690] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 801.365096][T14700] FAULT_INJECTION: forcing a failure. [ 801.365096][T14700] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 801.437224][T14700] CPU: 1 UID: 0 PID: 14700 Comm: syz.4.2185 Not tainted syzkaller #0 PREEMPT(full) [ 801.437254][T14700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 801.437265][T14700] Call Trace: [ 801.437273][T14700] [ 801.437281][T14700] dump_stack_lvl+0x16c/0x1f0 [ 801.437317][T14700] should_fail_ex+0x512/0x640 [ 801.437343][T14700] _copy_from_iter+0x29f/0x1720 [ 801.437369][T14700] ? __alloc_skb+0x200/0x380 [ 801.437393][T14700] ? __pfx__copy_from_iter+0x10/0x10 [ 801.437416][T14700] ? netlink_autobind.isra.0+0x158/0x370 [ 801.437452][T14700] netlink_sendmsg+0x820/0xdd0 [ 801.437483][T14700] ? __pfx_netlink_sendmsg+0x10/0x10 [ 801.437529][T14700] ____sys_sendmsg+0xa98/0xc70 [ 801.437550][T14700] ? copy_msghdr_from_user+0x10a/0x160 [ 801.437572][T14700] ? __pfx_____sys_sendmsg+0x10/0x10 [ 801.437599][T14700] ___sys_sendmsg+0x134/0x1d0 [ 801.437631][T14700] ? __pfx____sys_sendmsg+0x10/0x10 [ 801.437652][T14700] ? __lock_acquire+0x622/0x1c90 [ 801.437701][T14700] __sys_sendmsg+0x16d/0x220 [ 801.437726][T14700] ? __pfx___sys_sendmsg+0x10/0x10 [ 801.437753][T14700] do_syscall_64+0xcd/0xfa0 [ 801.437765][T14700] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 801.437777][T14700] RIP: 0033:0x7f135278f6c9 [ 801.437787][T14700] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 801.437797][T14700] RSP: 002b:00007f135366b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 801.437809][T14700] RAX: ffffffffffffffda RBX: 00007f13529e5fa0 RCX: 00007f135278f6c9 [ 801.437816][T14700] RDX: 0000000020004080 RSI: 00002000000003c0 RDI: 0000000000000003 [ 801.437823][T14700] RBP: 00007f135366b090 R08: 0000000000000000 R09: 0000000000000000 [ 801.437830][T14700] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 801.437837][T14700] R13: 00007f13529e6038 R14: 00007f13529e5fa0 R15: 00007ffc96cddf68 [ 801.437852][T14700] [ 801.670150][T14706] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 802.134075][T14719] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 802.141993][T14719] cramfs: wrong magic [ 802.300093][ T5888] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 802.323257][ T30] audit: type=1400 audit(2000002694.407:4775): avc: denied { unlink } for pid=14721 comm="syz.3.2188" name="#7" dev="tmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 802.522748][ T30] audit: type=1400 audit(2000002694.407:4776): avc: denied { mount } for pid=14721 comm="syz.3.2188" name="/" dev="overlay" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 802.561055][T14724] evm: overlay not supported [ 802.586033][ T30] audit: type=1400 audit(2000002694.657:4777): avc: denied { unmount } for pid=5807 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 802.596948][ T5888] usb 3-1: Using ep0 maxpacket: 16 [ 802.642412][ T5888] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 802.659683][ T5888] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 802.696148][ T30] audit: type=1400 audit(2000002694.657:4778): avc: denied { unmount } for pid=5807 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 802.715775][ C0] vkms_vblank_simulate: vblank timer overrun [ 802.792984][ T5888] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 804.064785][ T5888] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 804.080109][ T5888] usb 3-1: Product: syz [ 804.084275][ T5888] usb 3-1: Manufacturer: syz [ 804.124298][ T5888] usb 3-1: SerialNumber: syz [ 804.141974][ T5888] usb 3-1: config 0 descriptor?? [ 804.152354][ T5888] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 804.174513][ T5888] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 804.627539][T14745] netlink: 'syz.4.2194': attribute type 4 has an invalid length. [ 804.828500][ T5888] em28xx 3-1:0.0: chip ID is em2870 [ 805.621932][ T5888] usb 3-1: USB disconnect, device number 53 [ 805.643314][ T5888] em28xx 3-1:0.0: Disconnecting em28xx [ 805.664477][ T5888] em28xx 3-1:0.0: Freeing device [ 806.271703][ T9716] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 806.347910][ T30] audit: type=1400 audit(2000002698.427:4779): avc: denied { listen } for pid=14768 comm="syz.0.2202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 806.350710][T14769] netlink: 'syz.0.2202': attribute type 1 has an invalid length. [ 806.369646][ T30] audit: type=1400 audit(2000002698.427:4780): avc: denied { setopt } for pid=14768 comm="syz.0.2202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 806.400472][T14769] bond2: entered promiscuous mode [ 806.405756][T14769] 8021q: adding VLAN 0 to HW filter on device bond2 [ 806.470053][ T9716] usb 4-1: Using ep0 maxpacket: 32 [ 806.500875][ T9716] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 806.762549][ T9716] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 806.895697][ T9716] usb 4-1: config 0 descriptor?? [ 807.771624][ T9716] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 807.860417][ T9716] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 807.919970][ T847] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 808.100017][ T9716] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 808.220090][ T9716] usb 4-1: media controller created [ 808.284562][ T30] audit: type=1400 audit(2000002700.367:4781): avc: denied { read write } for pid=14786 comm="syz.0.2208" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 808.313317][ T9716] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 808.331642][ T30] audit: type=1400 audit(2000002700.367:4782): avc: denied { open } for pid=14786 comm="syz.0.2208" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 808.356589][ T9716] az6027: usb out operation failed. (-71) [ 808.371402][ T9716] az6027: usb out operation failed. (-71) [ 808.377582][ T9716] stb0899_attach: Driver disabled by Kconfig [ 808.422708][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.487636][ T9716] az6027: no front-end attached [ 808.487636][ T9716] [ 808.495268][ T30] audit: type=1400 audit(2000002700.447:4783): avc: denied { connect } for pid=14786 comm="syz.0.2208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 808.515014][ C0] vkms_vblank_simulate: vblank timer overrun [ 808.522311][ T9716] az6027: usb out operation failed. (-71) [ 808.528030][ T9716] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 808.537466][ T9716] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input37 [ 808.555293][ T847] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 808.630453][T14794] tipc: Trying to set illegal importance in message [ 808.644066][T14794] ipt_REJECT: TCP_RESET invalid for non-tcp [ 808.694267][ T847] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 808.749979][ T9716] dvb-usb: schedule remote query interval to 400 msecs. [ 808.889586][ T9716] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 808.916511][ T847] usb 5-1: New USB device found, idVendor=1d34, idProduct=0004, bcdDevice= 0.00 [ 809.006071][ T847] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 809.025298][ T9716] usb 4-1: USB disconnect, device number 42 [ 809.051215][ T847] usb 5-1: config 0 descriptor?? [ 809.126503][ T9716] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 809.476549][ T847] hid-led 0003:1D34:0004.0014: item fetching failed at offset 5/7 [ 809.489519][ T847] hid-led 0003:1D34:0004.0014: probe with driver hid-led failed with error -22 [ 809.520953][ T9716] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 809.560366][ T5888] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 809.740311][ T5888] usb 1-1: Using ep0 maxpacket: 32 [ 809.794231][ T5888] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 809.846298][ T5888] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 809.885160][ T24] usb 5-1: USB disconnect, device number 41 [ 809.974832][ T5888] usb 1-1: config 0 descriptor?? [ 810.049983][ T9716] usb 4-1: Using ep0 maxpacket: 16 [ 810.057022][ T9716] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 810.068149][ T9716] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 810.078498][ T9716] usb 4-1: config 0 interface 0 has no altsetting 0 [ 810.085302][ T9716] usb 4-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00 [ 810.094448][ T9716] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 810.104626][ T9716] usb 4-1: config 0 descriptor?? [ 810.192403][ T5888] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 810.206926][ T5888] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 810.224530][ T5888] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 810.237777][ T5888] usb 1-1: media controller created [ 810.259495][ T5888] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 810.401725][ T5888] az6027: usb out operation failed. (-71) [ 810.428871][ T5888] az6027: usb out operation failed. (-71) [ 810.435673][ T5888] stb0899_attach: Driver disabled by Kconfig [ 810.442752][ T5888] az6027: no front-end attached [ 810.442752][ T5888] [ 810.452261][ T5888] az6027: usb out operation failed. (-71) [ 810.458050][ T5888] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 810.489183][ T5888] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input38 [ 810.728577][ T5888] dvb-usb: schedule remote query interval to 400 msecs. [ 810.735856][ T5888] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 810.752896][ T5888] usb 1-1: USB disconnect, device number 44 [ 811.624016][ T5888] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 812.308974][ T9716] usbhid 4-1:0.0: can't add hid device: -71 [ 812.320848][ T9716] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 812.341300][ T9716] usb 4-1: USB disconnect, device number 43 [ 812.444132][T14839] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 812.453026][T14839] cramfs: wrong magic [ 813.171840][ T30] audit: type=1400 audit(2000002705.247:4784): avc: denied { create } for pid=14840 comm="syz.5.2222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 813.436006][T12772] Bluetooth: hci5: Frame reassembly failed (-84) [ 813.770172][ T24] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 813.782752][T14856] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 813.964663][T14856] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 813.979969][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 814.154455][ T24] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 814.192349][T14856] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 814.207362][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 814.404591][ T24] usb 4-1: config 0 descriptor?? [ 814.491821][T14856] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 814.538532][ T30] audit: type=1400 audit(2000002706.617:4785): avc: denied { write } for pid=14863 comm="syz.2.2228" name="001" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 814.635165][T14864] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2228'. [ 814.646019][T14864] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2228'. [ 814.662705][ T30] audit: type=1400 audit(2000002706.747:4786): avc: denied { create } for pid=14863 comm="syz.2.2228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 814.684118][ T24] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 814.701011][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 814.720507][ T30] audit: type=1400 audit(2000002706.747:4787): avc: denied { write } for pid=14863 comm="syz.2.2228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 814.741280][ T24] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 814.748791][ T24] usb 4-1: media controller created [ 814.762887][ T6073] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 814.782718][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 814.824284][ T6073] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 814.842580][ T6073] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 814.867494][ T6073] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 814.887242][ T30] audit: type=1400 audit(2000002706.967:4788): avc: denied { ioctl } for pid=14866 comm="syz.5.2229" path="socket:[47288]" dev="sockfs" ino=47288 ioctlcmd=0xf50b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 814.940600][ T30] audit: type=1400 audit(2000002706.997:4789): avc: denied { getopt } for pid=14866 comm="syz.5.2229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 814.945083][ T24] az6027: usb out operation failed. (-71) [ 814.993357][ T24] az6027: usb out operation failed. (-71) [ 814.999263][ T24] stb0899_attach: Driver disabled by Kconfig [ 815.006973][ T24] az6027: no front-end attached [ 815.006973][ T24] [ 815.131262][ T24] az6027: usb out operation failed. (-71) [ 815.137615][ T24] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 815.166330][ T24] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input39 [ 815.450259][T12452] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 815.865060][ T24] dvb-usb: schedule remote query interval to 400 msecs. [ 815.893540][ T24] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 815.911546][ T24] usb 4-1: USB disconnect, device number 44 [ 816.176685][ T24] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 816.909989][ T5812] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 817.139149][T14895] netlink: 164 bytes leftover after parsing attributes in process `syz.4.2236'. [ 817.150406][T14895] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2236'. [ 818.320608][ T5812] usb 3-1: Using ep0 maxpacket: 16 [ 818.335779][ T5812] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 818.351235][ T5812] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 818.368222][ T5812] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 818.393112][ T5812] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 818.402649][ T5812] usb 3-1: Product: syz [ 818.407196][ T5812] usb 3-1: Manufacturer: syz [ 818.434028][ T5812] usb 3-1: SerialNumber: syz [ 818.456203][ T30] audit: type=1400 audit(2000002710.537:4790): avc: denied { read } for pid=14896 comm="syz.4.2238" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 818.463827][ T5812] usb 3-1: config 0 descriptor?? [ 818.484335][ T30] audit: type=1400 audit(2000002710.537:4791): avc: denied { open } for pid=14896 comm="syz.4.2238" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 818.590571][ T5812] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 818.601988][ T5812] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 818.719953][ T24] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 818.850987][ T30] audit: type=1400 audit(2000002710.897:4792): avc: denied { ioctl } for pid=14904 comm="syz.4.2241" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x9370 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 819.190574][T14913] xt_hashlimit: max too large, truncated to 1048576 [ 819.204159][T14913] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 819.210161][ T977] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 819.240067][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 819.254551][ T24] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 819.292692][ T5812] em28xx 3-1:0.0: chip ID is em2870 [ 819.298576][ T24] usb 4-1: config 0 has no interface number 0 [ 819.332656][ T24] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid maxpacket 19117, setting to 64 [ 819.352523][ T24] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 819.369671][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 819.377848][ T977] usb 6-1: Using ep0 maxpacket: 16 [ 819.383400][ T24] usb 4-1: Product: syz [ 819.389394][ T977] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 819.401475][ T24] usb 4-1: Manufacturer: syz [ 819.406078][ T24] usb 4-1: SerialNumber: syz [ 819.411625][ T977] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 819.424643][ T24] usb 4-1: config 0 descriptor?? [ 819.431687][ T977] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 819.440851][ T977] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 819.448830][ T977] usb 6-1: Product: syz [ 819.455476][ T24] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 819.465796][ T24] em28xx 4-1:0.132: Video interface 132 found: [ 819.472070][ T977] usb 6-1: Manufacturer: syz [ 819.476681][ T977] usb 6-1: SerialNumber: syz [ 819.486321][ T977] usb 6-1: config 0 descriptor?? [ 819.520461][ T977] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 819.535936][ T977] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 819.536387][ T847] usb 3-1: USB disconnect, device number 54 [ 819.550828][ T847] em28xx 3-1:0.0: Disconnecting em28xx [ 819.564817][ T847] em28xx 3-1:0.0: Freeing device [ 820.014926][ T24] em28xx 4-1:0.132: unknown em28xx chip ID (0) [ 820.072689][T14926] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 820.080996][T14926] cramfs: wrong magic [ 820.165686][T12761] Bluetooth: hci5: Frame reassembly failed (-84) [ 820.173376][ T977] em28xx 6-1:0.0: chip ID is em2870 [ 820.300088][ T5812] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 820.430273][T14901] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2239'. [ 820.446258][T14901] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 820.460039][ T5812] usb 1-1: Using ep0 maxpacket: 32 [ 820.468687][ T5812] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 820.479308][T14901] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 820.492387][ T5812] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 820.507462][ T5812] usb 1-1: config 0 descriptor?? [ 820.673532][ T977] usb 6-1: USB disconnect, device number 42 [ 820.685891][ T977] em28xx 6-1:0.0: Disconnecting em28xx [ 820.693491][ T977] em28xx 6-1:0.0: Freeing device [ 820.856013][ T5812] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 820.867902][ T30] audit: type=1400 audit(2000002712.947:4793): avc: denied { append } for pid=14900 comm="syz.3.2239" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 821.146828][ T24] em28xx 4-1:0.132: failed to read eeprom (err=-110) [ 821.205847][ T5812] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 821.231970][ T24] em28xx 4-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-110] [ 821.241953][ T5812] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 821.249215][ T5812] usb 1-1: media controller created [ 821.460827][ T5812] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 821.504185][ T5812] az6027: usb out operation failed. (-71) [ 821.598031][ T5812] az6027: usb out operation failed. (-71) [ 821.608326][ T5812] stb0899_attach: Driver disabled by Kconfig [ 821.666817][ T5812] az6027: no front-end attached [ 821.666817][ T5812] [ 821.675681][ T30] audit: type=1326 audit(2000002713.757:4794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14934 comm="syz.5.2249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f9dd8f6c9 code=0x7ffc0000 [ 821.728114][ T30] audit: type=1326 audit(2000002713.787:4795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14934 comm="syz.5.2249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f9dd8f6c9 code=0x7ffc0000 [ 821.769138][ T30] audit: type=1326 audit(2000002713.787:4796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14934 comm="syz.5.2249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f8f9dd8f6c9 code=0x7ffc0000 [ 821.798108][ T30] audit: type=1326 audit(2000002713.787:4797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14934 comm="syz.5.2249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f9dd8f6c9 code=0x7ffc0000 [ 821.823783][ T30] audit: type=1326 audit(2000002713.787:4798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14934 comm="syz.5.2249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f9dd8f6c9 code=0x7ffc0000 [ 821.830777][ T5812] az6027: usb out operation failed. (-71) [ 821.849939][ T30] audit: type=1326 audit(2000002713.787:4799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14934 comm="syz.5.2249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f8f9dd8f6c9 code=0x7ffc0000 [ 821.920003][ T24] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 821.927878][ T24] em28xx 4-1:0.132: analog set to bulk mode. [ 822.140255][T14905] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 822.152771][T12452] Bluetooth: hci5: command 0x1003 tx timeout [ 822.160310][ T5819] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 822.525595][ T30] audit: type=1326 audit(2000002713.787:4800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14934 comm="syz.5.2249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f9dd8f6c9 code=0x7ffc0000 [ 822.560935][ T30] audit: type=1326 audit(2000002713.787:4801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14934 comm="syz.5.2249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f9dd8f6c9 code=0x7ffc0000 [ 822.586454][ T30] audit: type=1326 audit(2000002713.797:4802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14934 comm="syz.5.2249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8f9dd8f6c9 code=0x7ffc0000 [ 823.163162][ T5888] em28xx 4-1:0.132: Registering V4L2 extension [ 823.172093][ T5812] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 823.186402][ T5812] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input40 [ 823.198533][ T24] usb 4-1: USB disconnect, device number 45 [ 823.220266][ T24] em28xx 4-1:0.132: Disconnecting em28xx [ 823.239676][T14905] usb 3-1: Using ep0 maxpacket: 32 [ 823.246369][ T5812] dvb-usb: schedule remote query interval to 400 msecs. [ 823.259225][ T5812] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 823.268162][T14905] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 823.285753][T14905] usb 3-1: config 0 has no interface number 0 [ 823.317567][ T5812] usb 1-1: USB disconnect, device number 45 [ 823.335826][T14905] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 824.085251][T14905] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 824.096327][T14905] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 824.104464][T14905] usb 3-1: Product: syz [ 824.127373][T14905] usb 3-1: Manufacturer: syz [ 824.146654][T14905] usb 3-1: SerialNumber: syz [ 824.300532][T14905] usb 3-1: config 0 descriptor?? [ 824.335255][T14905] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 824.355719][T14905] em28xx 3-1:0.132: Video interface 132 found: [ 824.841602][ T5812] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 825.800273][T14905] em28xx 3-1:0.132: unknown em28xx chip ID (0) [ 825.824992][ T5888] em28xx 4-1:0.132: Config register raw data: 0xffffffed [ 825.853460][ T5888] em28xx 4-1:0.132: AC97 chip type couldn't be determined [ 825.871909][T14905] em28xx 3-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 825.889991][ T5888] em28xx 4-1:0.132: No AC97 audio processor [ 825.895999][T14905] em28xx 3-1:0.132: board has no eeprom [ 825.930115][ T5888] usb 4-1: Decoder not found [ 825.955031][ T5888] em28xx 4-1:0.132: failed to create media graph [ 825.965478][ T5888] em28xx 4-1:0.132: V4L2 device video103 deregistered [ 825.980954][T14905] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 825.993788][ T5888] em28xx 4-1:0.132: Remote control support is not available for this card. [ 826.006915][T14905] em28xx 3-1:0.132: analog set to bulk mode. [ 826.018838][ T5812] em28xx 3-1:0.132: Registering V4L2 extension [ 826.050353][T14905] usb 3-1: USB disconnect, device number 55 [ 826.067001][T14992] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 826.074930][T14992] cramfs: wrong magic [ 826.083730][ T30] kauditd_printk_skb: 48 callbacks suppressed [ 826.083748][ T30] audit: type=1400 audit(2000002718.097:4851): avc: denied { create } for pid=14984 comm="syz.3.2265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 826.100013][T14905] em28xx 3-1:0.132: Disconnecting em28xx [ 826.158918][ T30] audit: type=1400 audit(2000002718.097:4852): avc: denied { setopt } for pid=14984 comm="syz.3.2265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 826.729449][ T6044] Bluetooth: hci5: Frame reassembly failed (-84) [ 827.120183][T15016] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 827.127603][T15016] cramfs: wrong magic [ 827.264619][ T5812] em28xx 3-1:0.132: Config register raw data: 0xffffffed [ 827.275082][ T5812] em28xx 3-1:0.132: AC97 chip type couldn't be determined [ 827.282401][ T5812] em28xx 3-1:0.132: No AC97 audio processor [ 827.316076][ T5812] usb 3-1: Decoder not found [ 827.405625][ T5812] em28xx 3-1:0.132: failed to create media graph [ 827.412122][ T5812] em28xx 3-1:0.132: V4L2 device video103 deregistered [ 827.444145][ T5812] em28xx 3-1:0.132: Remote control support is not available for this card. [ 827.458339][ T24] em28xx 4-1:0.132: Closing input extension [ 827.466592][T14905] em28xx 3-1:0.132: Closing input extension [ 827.495373][ T24] em28xx 4-1:0.132: Freeing device [ 827.645279][T14905] em28xx 3-1:0.132: Freeing device [ 828.270041][T14905] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 828.463278][T14905] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 829.366218][ T5809] Bluetooth: hci5: command 0x1003 tx timeout [ 829.372544][ T5819] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 829.410069][T14905] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 829.438553][T14905] usb 3-1: Product: syz [ 829.452045][T14905] usb 3-1: Manufacturer: syz [ 829.481348][ T30] audit: type=1400 audit(2000002721.567:4853): avc: denied { shutdown } for pid=15043 comm="syz.4.2278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 829.501446][T14905] usb 3-1: SerialNumber: syz [ 829.517539][T14905] usb 3-1: config 0 descriptor?? [ 829.585932][ T30] audit: type=1400 audit(2000002721.587:4854): avc: denied { write } for pid=15043 comm="syz.4.2278" lport=36930 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 829.670008][T12452] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 829.670065][ T5819] Bluetooth: hci6: command 0x1003 tx timeout [ 830.965994][T15069] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 830.973947][T15069] cramfs: wrong magic [ 830.984405][T14905] usb 3-1: non-Atmel transceiver xxxxbb54 [ 831.192974][T15023] overlayfs: failed to resolve './file0': -2 [ 832.077134][T14905] usb 3-1: Firmware version (0.0) predates our first public release. [ 832.090661][T14905] usb 3-1: Please update to version 0.2 or newer [ 832.099412][T14905] usb 3-1: atusb_probe: initialization failed, error = -19 [ 833.734024][ T847] usb 3-1: USB disconnect, device number 56 [ 834.599960][T14905] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 834.921832][T14905] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 835.056120][T14905] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 835.181334][ T847] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 835.197500][T14905] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 835.207083][T14905] usb 1-1: Product: syz [ 835.233761][T14905] usb 1-1: Manufacturer: syz [ 835.252424][T14905] usb 1-1: SerialNumber: syz [ 835.430231][ T847] usb 3-1: Using ep0 maxpacket: 8 [ 835.437684][ T847] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 835.447820][ T847] usb 3-1: config 179 has no interface number 0 [ 835.454505][ T847] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 835.466240][ T847] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 835.478245][ T847] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 835.490644][ T847] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 835.502066][ T847] usb 3-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 835.516931][ T847] usb 3-1: config 179 interface 65 has no altsetting 0 [ 835.525693][ T847] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 835.537087][ T847] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 835.569064][ T847] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input41 [ 835.679436][T14905] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 46 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 835.749991][T12452] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 835.819446][ T847] usb 3-1: USB disconnect, device number 57 [ 835.938411][ T30] audit: type=1400 audit(2000002728.017:4855): avc: denied { read write } for pid=15085 comm="syz.0.2289" name="lp0" dev="devtmpfs" ino=3860 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 836.057292][ T30] audit: type=1400 audit(2000002728.017:4856): avc: denied { open } for pid=15085 comm="syz.0.2289" path="/dev/usb/lp0" dev="devtmpfs" ino=3860 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 836.290008][ T9716] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 836.446545][ T9716] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 836.457200][ T9716] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 836.480089][ T9716] usb 5-1: Product: syz [ 836.490154][ T9716] usb 5-1: Manufacturer: syz [ 836.510068][ T9716] usb 5-1: SerialNumber: syz [ 836.560368][ T9716] usb 5-1: config 0 descriptor?? [ 836.749922][T15128] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 837.587410][T14905] usb 1-1: USB disconnect, device number 46 [ 837.658151][T14905] usblp0: removed [ 837.673243][ T9716] usb 5-1: non-Atmel transceiver xxxxbb54 [ 837.842783][T15139] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2303'. [ 837.875888][T15113] overlayfs: failed to resolve './file0': -2 [ 837.899158][ T9716] usb 5-1: Firmware version (0.0) predates our first public release. [ 837.921175][ T30] audit: type=1400 audit(2000002729.997:4857): avc: denied { setopt } for pid=15138 comm="syz.2.2303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 837.950712][ T9716] usb 5-1: Please update to version 0.2 or newer [ 837.989819][ T9716] usb 5-1: atusb_probe: initialization failed, error = -19 [ 838.025481][ T9716] usb 5-1: USB disconnect, device number 42 [ 838.187496][T14905] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 839.054764][T14905] usb 1-1: Using ep0 maxpacket: 32 [ 839.079169][T14905] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 839.967520][T14905] usb 1-1: config 0 has no interface number 0 [ 839.974180][T14905] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 839.986812][T14905] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 839.996361][T14905] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 840.004794][T14905] usb 1-1: Product: syz [ 840.009007][T14905] usb 1-1: Manufacturer: syz [ 840.014040][T14905] usb 1-1: SerialNumber: syz [ 840.133160][T14905] usb 1-1: config 0 descriptor?? [ 840.200031][T14905] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 840.210967][T14905] em28xx 1-1:0.132: Video interface 132 found: [ 840.653242][T15162] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2309'. [ 840.690189][T15162] netlink: 'syz.5.2309': attribute type 5 has an invalid length. [ 840.700606][T15162] netlink: 'syz.5.2309': attribute type 8 has an invalid length. [ 840.727397][T15162] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2309'. [ 840.798923][T15162] geneve2: entered promiscuous mode [ 840.839595][T15162] geneve2: entered allmulticast mode [ 840.910069][T14905] em28xx 1-1:0.132: unknown em28xx chip ID (0) [ 840.923689][ T7145] netdevsim netdevsim5 eth0: set [1, 1] type 2 family 0 port 256 - 0 [ 840.935688][ T7145] netdevsim netdevsim5 eth1: set [1, 1] type 2 family 0 port 256 - 0 [ 840.966785][ T7145] netdevsim netdevsim5 eth2: set [1, 1] type 2 family 0 port 256 - 0 [ 841.125104][T15165] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2310'. [ 841.135491][ T7145] netdevsim netdevsim5 eth3: set [1, 1] type 2 family 0 port 256 - 0 [ 842.495593][T14905] em28xx 1-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 842.517054][T14905] em28xx 1-1:0.132: board has no eeprom [ 842.650891][T14905] em28xx 1-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 842.659219][T14905] em28xx 1-1:0.132: analog set to bulk mode. [ 842.665861][ T24] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 842.676675][T14905] em28xx 1-1:0.132: Registering V4L2 extension [ 842.798874][T15189] netlink: 108 bytes leftover after parsing attributes in process `syz.2.2315'. [ 842.819998][T15189] netlink: 108 bytes leftover after parsing attributes in process `syz.2.2315'. [ 843.199495][T14905] em28xx 1-1:0.132: failed to trigger read from i2c address 0x4a (error=-5) [ 843.208649][T14905] em28xx 1-1:0.132: failed to trigger read from i2c address 0x48 (error=-5) [ 843.210637][ T9716] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 843.235168][ T24] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 843.252713][ T24] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 843.293602][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 843.302208][T14905] em28xx 1-1:0.132: failed to trigger read from i2c address 0x42 (error=-5) [ 843.311497][ T24] usb 5-1: Product: syz [ 843.316085][ T24] usb 5-1: Manufacturer: syz [ 843.316254][T14905] em28xx 1-1:0.132: failed to trigger read from i2c address 0x40 (error=-5) [ 843.332175][ T24] usb 5-1: SerialNumber: syz [ 843.468991][ T9716] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 843.533392][ T9716] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 843.545730][ T24] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 43 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 843.564130][ T9716] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 843.602921][ T9716] usb 4-1: Product: syz [ 843.615614][T14905] em28xx 1-1:0.132: failed to trigger read from i2c address 0x84 (error=-5) [ 843.620302][ T9716] usb 4-1: Manufacturer: syz [ 843.677072][ T9716] usb 4-1: SerialNumber: syz [ 843.682443][T14905] em28xx 1-1:0.132: failed to trigger read from i2c address 0x86 (error=-5) [ 843.715774][T14905] em28xx 1-1:0.132: failed to trigger read from i2c address 0x94 (error=-5) [ 843.777083][T14905] em28xx 1-1:0.132: failed to trigger read from i2c address 0x96 (error=-5) [ 843.944281][ T9716] usblp 4-1:1.0: usblp1: USB Unidirectional printer dev 46 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 844.063037][T14905] em28xx 1-1:0.132: failed to trigger read from i2c address 0xc0 (error=-5) [ 844.114399][T14905] em28xx 1-1:0.132: failed to trigger read from i2c address 0xc2 (error=-5) [ 844.141132][T14905] em28xx 1-1:0.132: failed to trigger read from i2c address 0xc4 (error=-5) [ 844.156232][T14905] em28xx 1-1:0.132: failed to trigger read from i2c address 0xc6 (error=-5) [ 844.173510][T14905] em28xx 1-1:0.132: failed to trigger read from i2c address 0xc8 (error=-5) [ 844.196502][T14905] em28xx 1-1:0.132: Config register raw data: 0xfffffffb [ 844.204082][ T5812] usb 1-1: USB disconnect, device number 47 [ 844.215888][ T5812] em28xx 1-1:0.132: Disconnecting em28xx [ 844.245650][T14905] em28xx 1-1:0.132: AC97 chip type couldn't be determined [ 844.261540][T14905] em28xx 1-1:0.132: No AC97 audio processor [ 844.269661][T14905] usb 1-1: Decoder not found [ 844.276388][T14905] em28xx 1-1:0.132: failed to create media graph [ 844.286192][T14905] em28xx 1-1:0.132: V4L2 device video103 deregistered [ 844.306198][T14905] em28xx 1-1:0.132: Remote control support is not available for this card. [ 844.322434][ T5812] em28xx 1-1:0.132: Closing input extension [ 844.343246][ T5812] em28xx 1-1:0.132: Freeing device [ 844.352194][ T24] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 844.520062][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 844.527208][ T24] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 844.539669][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 844.562811][ T24] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 844.572025][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 844.580112][ T24] usb 6-1: Product: syz [ 844.584463][ T24] usb 6-1: Manufacturer: syz [ 844.590284][ T24] usb 6-1: SerialNumber: syz [ 844.612319][ T24] usb 6-1: config 0 descriptor?? [ 844.621331][ T24] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 844.638942][ T24] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 844.670226][ T5812] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 844.843036][ T5812] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 844.854387][ T5812] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 844.873743][ T5812] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 844.892008][ T5812] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 844.900494][ T5812] usb 1-1: Manufacturer: syz [ 844.915007][ T5812] usb 1-1: config 0 descriptor?? [ 844.990342][ T5812] rc_core: IR keymap rc-hauppauge not found [ 844.996294][ T30] audit: type=1400 audit(2000002737.077:4858): avc: denied { mount } for pid=15212 comm="syz.2.2321" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 845.021820][ T5812] Registered IR keymap rc-empty [ 845.038026][ T5812] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 845.040976][ T30] audit: type=1400 audit(2000002737.117:4859): avc: denied { unmount } for pid=5821 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 845.050439][ T5812] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input42 [ 845.216751][ T9716] usb 4-1: USB disconnect, device number 46 [ 845.225134][ T9716] usblp1: removed [ 845.229444][ T24] em28xx 6-1:0.0: chip ID is em2870 [ 845.417015][T15221] netlink: 'syz.0.2320': attribute type 1 has an invalid length. [ 845.427173][T15221] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 845.434984][T15221] IPv6: NLM_F_CREATE should be set when creating new route [ 845.442452][T15221] IPv6: NLM_F_CREATE should be set when creating new route [ 845.532739][ T5812] usb 5-1: USB disconnect, device number 43 [ 845.580165][ T5812] usblp0: removed [ 845.756312][ T30] audit: type=1400 audit(2000002737.807:4860): avc: denied { ioctl } for pid=15202 comm="syz.0.2320" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0x6629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 846.520390][ T5812] usb 6-1: USB disconnect, device number 43 [ 846.695182][ T5812] em28xx 6-1:0.0: Disconnecting em28xx [ 846.711307][ T5812] em28xx 6-1:0.0: Freeing device [ 848.311078][ T5812] usb 1-1: USB disconnect, device number 48 [ 848.694834][ T30] audit: type=1400 audit(2000002740.777:4861): avc: denied { create } for pid=15251 comm="syz.3.2330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 849.215089][ T30] audit: type=1400 audit(2000002740.777:4862): avc: denied { connect } for pid=15251 comm="syz.3.2330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 849.541348][ T30] audit: type=1400 audit(2000002740.777:4863): avc: denied { bind } for pid=15251 comm="syz.3.2330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 849.658507][T15272] tmpfs: Bad value for 'huge' [ 849.709935][ T30] audit: type=1400 audit(2000002740.777:4864): avc: denied { write } for pid=15251 comm="syz.3.2330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 849.840195][ T9716] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 849.888938][ T30] audit: type=1400 audit(2000002741.377:4865): avc: denied { override_creds } for pid=15254 comm="syz.0.2331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 850.051370][ T9716] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 850.087356][ T9716] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 850.105451][ T9716] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 850.117903][ T9716] usb 5-1: Product: syz [ 850.223716][ T9716] usb 5-1: Manufacturer: syz [ 850.228341][ T9716] usb 5-1: SerialNumber: syz [ 850.775140][ T9716] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 44 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 852.444566][ T9716] usb 5-1: USB disconnect, device number 44 [ 852.453479][ T9716] usblp0: removed [ 852.804593][T15316] netlink: 'syz.0.2341': attribute type 1 has an invalid length. [ 852.995652][ T30] audit: type=1400 audit(2000002745.077:4866): avc: denied { accept } for pid=15313 comm="syz.0.2341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 853.508096][ T30] audit: type=1400 audit(2000002745.587:4867): avc: denied { ioctl } for pid=15326 comm="syz.4.2345" path="/dev/binderfs/binder0" dev="binder" ino=16 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 853.574867][T15329] input: syz1 as /devices/virtual/input/input43 [ 853.576816][ T30] audit: type=1400 audit(2000002745.587:4868): avc: denied { set_context_mgr } for pid=15326 comm="syz.4.2345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 853.601544][ T30] audit: type=1400 audit(2000002745.587:4869): avc: denied { write } for pid=15326 comm="syz.4.2345" name="binder1" dev="binder" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 853.751130][ T30] audit: type=1326 audit(2000002745.587:4870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15326 comm="syz.4.2345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f135278f6c9 code=0x7ffc0000 [ 853.781350][T15337] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 853.789431][T15337] cramfs: wrong magic [ 853.867582][T15341] sp0: Synchronizing with TNC [ 853.898805][T15339] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 853.906278][T15339] cramfs: wrong magic [ 853.918732][ T30] audit: type=1326 audit(2000002745.587:4871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15326 comm="syz.4.2345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f135278f6c9 code=0x7ffc0000 [ 853.949372][ T30] audit: type=1326 audit(2000002745.587:4872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15326 comm="syz.4.2345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f135278f6c9 code=0x7ffc0000 [ 853.993250][ T30] audit: type=1326 audit(2000002745.587:4873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15326 comm="syz.4.2345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f135278f6c9 code=0x7ffc0000 [ 854.031804][T15341] sp0: Found TNC [ 854.331841][ T1006] Bluetooth: hci5: Frame reassembly failed (-84) [ 854.460032][ T30] audit: type=1326 audit(2000002745.587:4874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15326 comm="syz.4.2345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f135278f6c9 code=0x7ffc0000 [ 854.589151][ T30] audit: type=1326 audit(2000002745.587:4875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15326 comm="syz.4.2345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f135278f6c9 code=0x7ffc0000 [ 854.751220][ T36] Bluetooth: hci6: Frame reassembly failed (-84) [ 854.772096][T15348] tmpfs: Bad value for 'huge' [ 856.309963][T12452] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 856.729992][ T9716] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 856.753707][T15365] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2354'. [ 856.803717][ T5819] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 856.813171][T12452] Bluetooth: hci6: command 0x1003 tx timeout [ 857.176338][ T9716] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 857.232042][ T9716] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 857.265759][ T9716] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 857.350806][ T9716] usb 1-1: Product: syz [ 857.364890][ T9716] usb 1-1: Manufacturer: syz [ 857.376205][ T9716] usb 1-1: SerialNumber: syz [ 857.566642][T15377] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 857.574074][T15377] cramfs: wrong magic [ 857.602450][ T9716] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 49 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 857.732899][ T6044] Bluetooth: hci5: Frame reassembly failed (-84) [ 857.970839][ T9716] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 858.131512][ T9716] usb 5-1: Using ep0 maxpacket: 32 [ 858.146024][ T9716] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 858.154623][ T9716] usb 5-1: config 0 has no interface number 0 [ 858.161818][ T9716] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 858.186408][ T9716] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 858.196217][ T9716] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 858.204854][ T9716] usb 5-1: Product: syz [ 858.209788][ T9716] usb 5-1: Manufacturer: syz [ 858.215833][ T9716] usb 5-1: SerialNumber: syz [ 858.224288][ T9716] usb 5-1: config 0 descriptor?? [ 858.233736][ T9716] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 858.245681][ T9716] em28xx 5-1:0.132: Video interface 132 found: [ 859.211103][ T9716] em28xx 5-1:0.132: unknown em28xx chip ID (0) [ 859.230452][ T5875] usb 1-1: USB disconnect, device number 49 [ 859.267301][ T5875] usblp0: removed [ 859.750140][ T5819] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 859.801105][ T5875] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 860.283677][T15379] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 860.347935][T15379] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 860.401994][ T5875] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 860.428076][ T5875] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 860.448280][ T5875] usb 1-1: New USB device found, idVendor=1d34, idProduct=0004, bcdDevice= 0.00 [ 860.463446][ T5875] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 860.501623][ T5875] usb 1-1: config 0 descriptor?? [ 860.619185][ T847] usb 3-1: new full-speed USB device number 58 using dummy_hcd [ 860.819885][ T9716] em28xx 5-1:0.132: failed to trigger write to i2c address 0xa0 (error=-5) [ 860.848570][ T9716] em28xx 5-1:0.132: failed to read eeprom (err=-5) [ 860.860310][ T9716] em28xx 5-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5] [ 860.931742][ T847] usb 3-1: config 8 has an invalid interface number: 223 but max is 0 [ 860.940227][ T847] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 860.950855][ T9716] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 860.964232][ T5875] hid-led 0003:1D34:0004.0015: unknown main item tag 0x0 [ 860.976997][ T9716] em28xx 5-1:0.132: analog set to bulk mode. [ 860.983659][ T847] usb 3-1: config 8 has no interface number 0 [ 860.989806][ T847] usb 3-1: config 8 interface 223 altsetting 0 endpoint 0x7 has invalid maxpacket 15872, setting to 64 [ 861.012032][ T5927] em28xx 5-1:0.132: Registering V4L2 extension [ 861.028356][ T847] usb 3-1: config 8 interface 223 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 861.061204][ T847] usb 3-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 861.100069][ T847] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 861.121254][ T847] usb 3-1: Product: syz [ 861.164885][ T5875] hid-led 0003:1D34:0004.0015: probe with driver hid-led failed with error -71 [ 861.181459][ T5875] usb 1-1: USB disconnect, device number 50 [ 861.190728][ T847] usb 3-1: Manufacturer: syz [ 861.195342][ T847] usb 3-1: SerialNumber: syz [ 861.262324][T15416] tipc: Trying to set illegal importance in message [ 861.285099][T15416] ipt_REJECT: TCP_RESET invalid for non-tcp [ 861.672667][ T5927] em28xx 5-1:0.132: failed to trigger read from i2c address 0x4a (error=-5) [ 861.682353][ T5927] em28xx 5-1:0.132: failed to trigger read from i2c address 0x48 (error=-5) [ 861.728770][ T30] kauditd_printk_skb: 55 callbacks suppressed [ 861.728785][ T30] audit: type=1326 audit(2000002753.807:4931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15418 comm="syz.3.2370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2cbd8f6c9 code=0x7ffc0000 [ 861.758655][ C0] vkms_vblank_simulate: vblank timer overrun [ 861.769976][ T5927] em28xx 5-1:0.132: failed to trigger read from i2c address 0x42 (error=-5) [ 861.784477][ T5927] em28xx 5-1:0.132: failed to trigger read from i2c address 0x40 (error=-5) [ 861.799047][ T5812] usb 5-1: USB disconnect, device number 45 [ 861.812142][ T5812] em28xx 5-1:0.132: Disconnecting em28xx [ 861.833621][ T30] audit: type=1326 audit(2000002753.817:4932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15418 comm="syz.3.2370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff2cbd8f6c9 code=0x7ffc0000 [ 861.947728][ T847] usb 3-1: USB disconnect, device number 58 [ 861.977013][ T5927] em28xx 5-1:0.132: Config register raw data: 0xffffffed [ 862.000367][ T5927] em28xx 5-1:0.132: AC97 chip type couldn't be determined [ 862.022075][T15428] syzkaller1: entered promiscuous mode [ 862.028855][ T5927] em28xx 5-1:0.132: No AC97 audio processor [ 862.046396][T15428] syzkaller1: entered allmulticast mode [ 862.059135][ T5927] usb 5-1: Decoder not found [ 862.065195][ T30] audit: type=1326 audit(2000002753.817:4933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15418 comm="syz.3.2370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2cbd8f6c9 code=0x7ffc0000 [ 862.092334][ T5927] em28xx 5-1:0.132: failed to create media graph [ 862.104084][ T30] audit: type=1326 audit(2000002753.817:4934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15418 comm="syz.3.2370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff2cbd8f6c9 code=0x7ffc0000 [ 862.149553][ T30] audit: type=1326 audit(2000002753.817:4935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15418 comm="syz.3.2370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2cbd8f6c9 code=0x7ffc0000 [ 862.412408][ T30] audit: type=1326 audit(2000002753.817:4936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15418 comm="syz.3.2370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff2cbd8f6c9 code=0x7ffc0000 [ 862.564380][ T5927] em28xx 5-1:0.132: V4L2 device video103 deregistered [ 862.583882][ T30] audit: type=1326 audit(2000002753.817:4937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15418 comm="syz.3.2370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2cbd8f6c9 code=0x7ffc0000 [ 862.597142][ T5927] em28xx 5-1:0.132: Remote control support is not available for this card. [ 862.616401][ T30] audit: type=1326 audit(2000002753.817:4938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15418 comm="syz.3.2370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=200 compat=0 ip=0x7ff2cbd8f6c9 code=0x7ffc0000 [ 862.617115][ T5812] em28xx 5-1:0.132: Closing input extension [ 862.639916][ C0] vkms_vblank_simulate: vblank timer overrun [ 862.653075][T15431] ================================================================== [ 862.661136][T15431] BUG: KASAN: slab-use-after-free in v4l2_fh_init+0x27d/0x2c0 [ 862.668582][T15431] Read of size 8 at addr ffff88805748c740 by task v4l_id/15431 [ 862.676104][T15431] [ 862.678416][T15431] CPU: 0 UID: 0 PID: 15431 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(full) [ 862.678437][T15431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 862.678448][T15431] Call Trace: [ 862.678454][T15431] [ 862.678461][T15431] dump_stack_lvl+0x116/0x1f0 [ 862.678489][T15431] print_report+0xcd/0x630 [ 862.678509][T15431] ? __virt_addr_valid+0x81/0x610 [ 862.678531][T15431] ? __phys_addr+0xe8/0x180 [ 862.678553][T15431] ? v4l2_fh_init+0x27d/0x2c0 [ 862.678569][T15431] kasan_report+0xe0/0x110 [ 862.678588][T15431] ? v4l2_fh_init+0x27d/0x2c0 [ 862.678606][T15431] v4l2_fh_init+0x27d/0x2c0 [ 862.678622][T15431] v4l2_fh_open+0x64/0xa0 [ 862.678638][T15431] em28xx_v4l2_open+0x24e/0x7e0 [ 862.678657][T15431] v4l2_open+0x1d2/0x5e0 [ 862.678681][T15431] ? __pfx_v4l2_open+0x10/0x10 [ 862.678703][T15431] chrdev_open+0x234/0x6a0 [ 862.678722][T15431] ? __pfx_chrdev_open+0x10/0x10 [ 862.678741][T15431] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 862.678763][T15431] do_dentry_open+0x982/0x1530 [ 862.678780][T15431] ? __pfx_chrdev_open+0x10/0x10 [ 862.678800][T15431] vfs_open+0x82/0x3f0 [ 862.678821][T15431] path_openat+0x1de4/0x2cb0 [ 862.678843][T15431] ? __pfx_path_openat+0x10/0x10 [ 862.678860][T15431] ? __lock_acquire+0xb8a/0x1c90 [ 862.678878][T15431] do_filp_open+0x20b/0x470 [ 862.678894][T15431] ? __pfx_do_filp_open+0x10/0x10 [ 862.678920][T15431] ? alloc_fd+0x471/0x7d0 [ 862.678940][T15431] do_sys_openat2+0x11b/0x1d0 [ 862.678987][T15431] ? __pfx_do_sys_openat2+0x10/0x10 [ 862.679007][T15431] ? find_held_lock+0x2b/0x80 [ 862.679028][T15431] ? handle_mm_fault+0x2ab/0xd10 [ 862.679054][T15431] __x64_sys_openat+0x174/0x210 [ 862.679075][T15431] ? __pfx___x64_sys_openat+0x10/0x10 [ 862.679097][T15431] ? do_user_addr_fault+0x843/0x1370 [ 862.679118][T15431] do_syscall_64+0xcd/0xfa0 [ 862.679138][T15431] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 862.679156][T15431] RIP: 0033:0x7fcb1a8a7407 [ 862.679170][T15431] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 862.679187][T15431] RSP: 002b:00007ffd5e440f70 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 862.679204][T15431] RAX: ffffffffffffffda RBX: 00007fcb1b023880 RCX: 00007fcb1a8a7407 [ 862.679216][T15431] RDX: 0000000000000000 RSI: 00007ffd5e442f1b RDI: ffffffffffffff9c [ 862.679227][T15431] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 862.679238][T15431] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 862.679248][T15431] R13: 00007ffd5e4411c0 R14: 00007fcb1b18a000 R15: 0000561ed58ed4d8 [ 862.679269][T15431] [ 862.679275][T15431] [ 862.938677][T15431] Allocated by task 5927: [ 862.942981][T15431] kasan_save_stack+0x33/0x60 [ 862.947638][T15431] kasan_save_track+0x14/0x30 [ 862.952291][T15431] __kasan_kmalloc+0xaa/0xb0 [ 862.956860][T15431] em28xx_v4l2_init+0x114/0x4080 [ 862.961774][T15431] em28xx_init_extension+0x13a/0x200 [ 862.967046][T15431] request_module_async+0x61/0x70 [ 862.972049][T15431] process_one_work+0x9cf/0x1b70 [ 862.976965][T15431] worker_thread+0x6c8/0xf10 [ 862.981540][T15431] kthread+0x3c5/0x780 [ 862.985586][T15431] ret_from_fork+0x675/0x7d0 [ 862.990151][T15431] ret_from_fork_asm+0x1a/0x30 [ 862.994899][T15431] [ 862.997243][T15431] Freed by task 5927: [ 863.001194][T15431] kasan_save_stack+0x33/0x60 [ 863.005849][T15431] kasan_save_track+0x14/0x30 [ 863.010503][T15431] __kasan_save_free_info+0x3b/0x60 [ 863.015682][T15431] __kasan_slab_free+0x5f/0x80 [ 863.020421][T15431] kfree+0x2b8/0x6d0 [ 863.024306][T15431] em28xx_v4l2_init+0x22b5/0x4080 [ 863.029308][T15431] em28xx_init_extension+0x13a/0x200 [ 863.034573][T15431] request_module_async+0x61/0x70 [ 863.039577][T15431] process_one_work+0x9cf/0x1b70 [ 863.044494][T15431] worker_thread+0x6c8/0xf10 [ 863.049071][T15431] kthread+0x3c5/0x780 [ 863.053124][T15431] ret_from_fork+0x675/0x7d0 [ 863.057693][T15431] ret_from_fork_asm+0x1a/0x30 [ 863.062444][T15431] [ 863.064746][T15431] The buggy address belongs to the object at ffff88805748c000 [ 863.064746][T15431] which belongs to the cache kmalloc-8k of size 8192 [ 863.078781][T15431] The buggy address is located 1856 bytes inside of [ 863.078781][T15431] freed 8192-byte region [ffff88805748c000, ffff88805748e000) [ 863.092735][T15431] [ 863.095039][T15431] The buggy address belongs to the physical page: [ 863.101430][T15431] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x57488 [ 863.110164][T15431] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 863.118640][T15431] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 863.126593][T15431] page_type: f5(slab) [ 863.130556][T15431] raw: 00fff00000000040 ffff88813ffa7280 ffffea0000a4fc00 0000000000000005 [ 863.139118][T15431] raw: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000 [ 863.147680][T15431] head: 00fff00000000040 ffff88813ffa7280 ffffea0000a4fc00 0000000000000005 [ 863.156329][T15431] head: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000 [ 863.164977][T15431] head: 00fff00000000003 ffffea00015d2201 00000000ffffffff 00000000ffffffff [ 863.173625][T15431] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 863.182272][T15431] page dumped because: kasan: bad access detected [ 863.188674][T15431] page_owner tracks the page as allocated [ 863.194364][T15431] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5888, tgid 5888 (kworker/1:5), ts 823171043171, free_ts 823162242804 [ 863.215799][T15431] post_alloc_hook+0x1c0/0x230 [ 863.220566][T15431] get_page_from_freelist+0x10a3/0x3a30 [ 863.226110][T15431] __alloc_frozen_pages_noprof+0x25f/0x2470 [ 863.231994][T15431] alloc_pages_mpol+0x1fb/0x550 [ 863.236824][T15431] new_slab+0x24a/0x360 [ 863.240968][T15431] ___slab_alloc+0xd79/0x1a50 [ 863.245634][T15431] __slab_alloc.constprop.0+0x63/0x110 [ 863.251079][T15431] __kmalloc_cache_noprof+0x477/0x780 [ 863.256439][T15431] em28xx_v4l2_init+0x114/0x4080 [ 863.261358][T15431] em28xx_init_extension+0x13a/0x200 [ 863.266627][T15431] request_module_async+0x61/0x70 [ 863.271639][T15431] process_one_work+0x9cf/0x1b70 [ 863.276559][T15431] worker_thread+0x6c8/0xf10 [ 863.281128][T15431] kthread+0x3c5/0x780 [ 863.285175][T15431] ret_from_fork+0x675/0x7d0 [ 863.289741][T15431] ret_from_fork_asm+0x1a/0x30 [ 863.294491][T15431] page last free pid 36 tgid 36 stack trace: [ 863.300444][T15431] __free_frozen_pages+0x7df/0x1160 [ 863.305633][T15431] __put_partials+0x130/0x170 [ 863.310302][T15431] qlist_free_all+0x4d/0x120 [ 863.314874][T15431] kasan_quarantine_reduce+0x195/0x1e0 [ 863.320322][T15431] __kasan_slab_alloc+0x69/0x90 [ 863.325160][T15431] kmem_cache_alloc_lru_noprof+0x254/0x6e0 [ 863.330957][T15431] sock_alloc_inode+0x25/0x1c0 [ 863.335712][T15431] alloc_inode+0x64/0x240 [ 863.340023][T15431] sock_alloc+0x40/0x280 [ 863.344251][T15431] __sock_create+0xc1/0x8d0 [ 863.348730][T15431] rds_tcp_conn_path_connect+0x2d0/0x7f0 [ 863.354346][T15431] rds_connect_worker+0x1af/0x2c0 [ 863.359348][T15431] process_one_work+0x9cf/0x1b70 [ 863.364261][T15431] worker_thread+0x6c8/0xf10 [ 863.368832][T15431] kthread+0x3c5/0x780 [ 863.372877][T15431] ret_from_fork+0x675/0x7d0 [ 863.377451][T15431] [ 863.379754][T15431] Memory state around the buggy address: [ 863.385359][T15431] ffff88805748c600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 863.393405][T15431] ffff88805748c680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 863.401443][T15431] >ffff88805748c700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 863.409476][T15431] ^ [ 863.415600][T15431] ffff88805748c780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 863.423637][T15431] ffff88805748c800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 863.431669][T15431] ================================================================== [ 863.439768][ C0] vkms_vblank_simulate: vblank timer overrun [ 863.536285][ T30] audit: type=1326 audit(2000002753.817:4939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15418 comm="syz.3.2370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2cbd8f6c9 code=0x7ffc0000 [ 863.559782][ C0] vkms_vblank_simulate: vblank timer overrun [ 863.579965][ T30] audit: type=1326 audit(2000002753.817:4940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15418 comm="syz.3.2370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2cbd8f6c9 code=0x7ffc0000 [ 863.628111][T15431] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 863.635326][T15431] CPU: 1 UID: 0 PID: 15431 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(full) [ 863.644340][T15431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 863.654368][T15431] Call Trace: [ 863.657624][T15431] [ 863.660531][T15431] dump_stack_lvl+0x3d/0x1f0 [ 863.665104][T15431] vpanic+0x640/0x6f0 [ 863.669071][T15431] panic+0xca/0xd0 [ 863.672778][T15431] ? __pfx_panic+0x10/0x10 [ 863.677173][T15431] ? v4l2_fh_init+0x27d/0x2c0 [ 863.681827][T15431] ? preempt_schedule_common+0x44/0xc0 [ 863.687267][T15431] ? preempt_schedule_thunk+0x16/0x30 [ 863.692638][T15431] ? check_panic_on_warn+0x1f/0xb0 [ 863.697729][T15431] check_panic_on_warn+0xab/0xb0 [ 863.702644][T15431] end_report+0x107/0x170 [ 863.706952][T15431] kasan_report+0xee/0x110 [ 863.711344][T15431] ? v4l2_fh_init+0x27d/0x2c0 [ 863.716003][T15431] v4l2_fh_init+0x27d/0x2c0 [ 863.720486][T15431] v4l2_fh_open+0x64/0xa0 [ 863.724796][T15431] em28xx_v4l2_open+0x24e/0x7e0 [ 863.729639][T15431] v4l2_open+0x1d2/0x5e0 [ 863.733877][T15431] ? __pfx_v4l2_open+0x10/0x10 [ 863.738635][T15431] chrdev_open+0x234/0x6a0 [ 863.743046][T15431] ? __pfx_chrdev_open+0x10/0x10 [ 863.747967][T15431] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 863.754276][T15431] do_dentry_open+0x982/0x1530 [ 863.759024][T15431] ? __pfx_chrdev_open+0x10/0x10 [ 863.763943][T15431] vfs_open+0x82/0x3f0 [ 863.767997][T15431] path_openat+0x1de4/0x2cb0 [ 863.772569][T15431] ? __pfx_path_openat+0x10/0x10 [ 863.777486][T15431] ? __lock_acquire+0xb8a/0x1c90 [ 863.782402][T15431] do_filp_open+0x20b/0x470 [ 863.786883][T15431] ? __pfx_do_filp_open+0x10/0x10 [ 863.791893][T15431] ? alloc_fd+0x471/0x7d0 [ 863.796204][T15431] do_sys_openat2+0x11b/0x1d0 [ 863.800863][T15431] ? __pfx_do_sys_openat2+0x10/0x10 [ 863.806044][T15431] ? find_held_lock+0x2b/0x80 [ 863.810706][T15431] ? handle_mm_fault+0x2ab/0xd10 [ 863.815630][T15431] __x64_sys_openat+0x174/0x210 [ 863.820462][T15431] ? __pfx___x64_sys_openat+0x10/0x10 [ 863.825815][T15431] ? do_user_addr_fault+0x843/0x1370 [ 863.831085][T15431] do_syscall_64+0xcd/0xfa0 [ 863.835569][T15431] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 863.841440][T15431] RIP: 0033:0x7fcb1a8a7407 [ 863.845833][T15431] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 863.865418][T15431] RSP: 002b:00007ffd5e440f70 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 863.873810][T15431] RAX: ffffffffffffffda RBX: 00007fcb1b023880 RCX: 00007fcb1a8a7407 [ 863.881759][T15431] RDX: 0000000000000000 RSI: 00007ffd5e442f1b RDI: ffffffffffffff9c [ 863.889709][T15431] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 863.897656][T15431] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 863.905606][T15431] R13: 00007ffd5e4411c0 R14: 00007fcb1b18a000 R15: 0000561ed58ed4d8 [ 863.913566][T15431] [ 863.916807][T15431] Kernel Offset: disabled [ 863.921106][T15431] Rebooting in 86400 seconds..