last executing test programs: 9.417141757s ago: executing program 2 (id=692): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe, 0x300}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) 9.29884706s ago: executing program 4 (id=694): syz_usb_connect(0x5, 0x24, &(0x7f0000002040)=ANY=[@ANYBLOB="12010000fe76181004160780a6af011703010902120001000000000904"], 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000380), 0x40000000000008, 0xbc81) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f0000000180)=""/135) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0xb, 0xfffffffffffffffe, 0xfffffffc}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x50) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') ioctl$TIOCMBIC(r3, 0x5417, &(0x7f00000190c0)=0x101) pread64(r3, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000019140)={'team0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2c000000130001c3000000000000000000000800", @ANYRES32=r6, @ANYBLOB="0000d400000000000a00010000"], 0x2c}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000140)='keyring\x00', 0x0, &(0x7f0000000380)='/dev/ttyS3\x00', 0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000900)={'bridge0\x00', @random="000000000100"}) bpf$MAP_CREATE(0x0, 0x0, 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0)={0x0, r0}, 0x8) 9.047345871s ago: executing program 2 (id=696): r0 = socket$nl_route(0x10, 0x3, 0x0) write$sequencer(0xffffffffffffffff, &(0x7f00000001c0)=[@t={0x81, 0x4, 0x3, 0x1}, @e={0xff, 0xb, 0x1, 0xfd, @SEQ_CONTROLLER=0xfe, 0x0, 0x1, 0x3}], 0x10) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x441c2, 0x0) ftruncate(r1, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendfile(r2, r1, 0x0, 0x578410eb) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={@private0={0xfc, 0x0, '\x00', 0x1}, @local, 0x20, 0xd}}) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f00000002c0)) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="6800000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="20000000810200002f0012800b00010062726964676500000c00028008000400090000002c0012800a00010069706f69620000001c0002800600030000000000060001"], 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_raw(r3, &(0x7f0000000000), 0x10) read(r3, &(0x7f00000017c0)=""/4090, 0xffa) setsockopt$CAN_RAW_RECV_OWN_MSGS(r3, 0x65, 0x4, 0x0, 0x0) ioctl$SIOCGSTAMP(r3, 0x8906, 0x0) sendmsg$can_raw(r3, &(0x7f0000000240)={&(0x7f0000000780)={0x1d, r4}, 0x10, &(0x7f0000000200)={&(0x7f0000000140)=@can={{0x3, 0x0, 0x1, 0x1}, 0x0, 0x0, 0x0, 0x0, "e5631d6f20af6daa"}, 0x10}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@gettfilter={0x34, 0x2e, 0x100, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x10, 0xb}, {0xb, 0xfff2}, {0x7, 0x5}}, [{0x8, 0xb, 0x200}, {0x8, 0xb, 0x1ff}]}, 0x34}, 0x1, 0x0, 0x0, 0x50}, 0x800) 7.987956719s ago: executing program 2 (id=698): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000005000000000800040001000000", 0x24) 7.902848097s ago: executing program 2 (id=700): socket$kcm(0x29, 0x5, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/dev\x00') read$FUSE(r0, &(0x7f0000000180)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) read$FUSE(r0, &(0x7f0000004400)={0x2020}, 0x2020) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000780)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@getqdisc={0x44, 0x26, 0x400, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x2, 0x4}, {0xc, 0xd}, {0xe, 0xfff2}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x44}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(r2, 0x6, &(0x7f0000000180)=0x3) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) ioprio_set$uid(0x3, r1, 0x6000) readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000021c0)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001380)={r8, &(0x7f00000004c0)}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)={0x200000, 0x200000}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x1ca) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000380), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x22, &(0x7f0000004240)=ANY=[@ANYBLOB="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"], 0x0) 7.048179933s ago: executing program 3 (id=702): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r1, &(0x7f00000005c0)=ANY=[@ANYBLOB="7f454c4604070003040000000000000002000300030000000903000038000000ce0000000e0000000b0020000100050005000000000000000300000008000000f30000007f0000000402000004002000e10c0000000400"/461], 0x258) close(r1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r1, 0x58, &(0x7f0000000180)}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB="e000", @ANYRES16], 0xe0}, 0x1, 0x0, 0x0, 0x4002841}, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) r6 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0) sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f00000007c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000}, 0x60600d2c1f23ab1c, &(0x7f0000000880)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="10002dbd7000fcdbdf25110080000801060006000000"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40000c4) add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000340)={0x0, "8527d2413790af54bfbca283be11c0de7af30e90937920fcba13d90af61beaa44d66a6535daf1bc35fb3af1e9197e31d26589ddb3c101840af347c1a253ec5fb", 0x18}, 0x48, 0xffffffffffffffff) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, &(0x7f0000000140)={'c6xdigio\x00', [0xb013, 0x5, 0x800000, 0x4, 0x88d7, 0x8000008f, 0xf19, 0x8012, 0x1002, 0x1, 0x200, 0x10ffff, 0x10000009, 0x4, 0x5, 0x5, 0x8, 0x6, 0x9, 0x8e, 0x10b, 0x3, 0x4, 0xa, 0x7, 0x2, 0xb0c6, 0x1ff, 0xc, 0x400002, 0x2]}) 6.631432061s ago: executing program 0 (id=704): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fcdbdf2501"], 0x28}, 0x1, 0x0, 0x0, 0x890}, 0x800) 6.570019929s ago: executing program 0 (id=705): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bond0\x00'}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) recvmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/189, 0xbd}, {&(0x7f00000003c0)=""/152, 0x98}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_usb_connect(0x2, 0x9a2, &(0x7f0000000840)=ANY=[], 0x0) syz_open_dev$I2C(0x0, 0x1, 0x80000) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 6.119424879s ago: executing program 3 (id=706): socket$inet_mptcp(0x2, 0x1, 0x106) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) socket$caif_seqpacket(0x25, 0x5, 0x1) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="0430f5c7c90034d9493ad3c6a2247a769bcc8203a462b70ef8f6102c57f4c6078eb7680df7ef6363d49068bdf124d44d66ea113597ab8730ea7a4c0f9b1346ea2556d7b8a7d238bfca953d17bf15fb2e0600000000000000cb9b002adb1213ceaebce539fd9a53263db49e0b47a8be0b10d6dae171728dcadef3e0c5"], 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0xa880) socket$nl_route(0x10, 0x3, 0x0) mknod$loop(0x0, 0x80, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x3, 0x6576, 0xd}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$rds(0x15, 0x5, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000839f82f6dafdff38b5c8037daa8e42115fbdc27037361202b9ced51be341303606b002449152b879d2e0a718bd3a42637d9b0e2df3c70ee9fd426c5c378e4f73dfaaa0d12ab8fa716f3257a0b2e90d97f81741a1a26928e4a11474b5e882552fcd0b3a0413decc96"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x43, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r5, 0x4001af84, &(0x7f0000000500)) ioctl$VHOST_SET_OWNER(r5, 0xaf01, 0x0) 6.030472504s ago: executing program 4 (id=708): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000000, 0x30, 0xffffffffffffffff, 0x0) r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) r1 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEAUTHENTICATE(r2, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) read$msr(r3, &(0x7f0000048040)=""/102392, 0x18ff8) tkill(r1, 0xb) getgroups(0xfffffffffffffdb2, 0xfffffffffffffffe) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0xffffa000) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000ff2000/0xe000)=nil, 0xe000}, 0x2}) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x12) 5.827817329s ago: executing program 1 (id=709): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x20000, 0x0, 'queue1\x00', 0x6}) write$sndseq(r0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4200, 0x100) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000100), 0x0, 0x3400c815) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_io_uring_setup(0x890, &(0x7f0000000140)={0x0, 0x1a64, 0x800, 0xffffffff, 0x696}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) ioctl$KVM_SET_SREGS2(0xffffffffffffffff, 0x4140aecd, 0x0) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r4, 0x47f6, 0x0, 0x4, 0x0, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f00000000c0)=0xc) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) mmap(&(0x7f00003ba000/0x3000)=nil, 0x3000, 0x1000003, 0x810, r7, 0x26d79000) syz_open_dev$tty1(0xc, 0x4, 0x1) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) 4.899827587s ago: executing program 3 (id=710): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=@newtfilter={0x43c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {}, {0xffff, 0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0x40c, 0x2, [@TCA_FLOW_POLICE={0x408, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0xffffffff, 0xda, 0x3, 0x0, 0x2a, 0x100, 0x73d, 0x3509, 0x3, 0x10000, 0x7, 0x1000, 0x9, 0x3, 0x3, 0x882e, 0x8, 0x8, 0x2, 0x9, 0xfffffffb, 0x2, 0x6, 0x80000000, 0x400, 0x9, 0xffff, 0x7a, 0x5, 0x7, 0x7fff, 0xffffff40, 0x9, 0x6, 0x8, 0x2, 0x57, 0x0, 0x4, 0x7fff, 0x9, 0xfffffffb, 0x2, 0xcf9f, 0x0, 0x1, 0x8, 0x1, 0x5, 0xfffffff9, 0xd5, 0x80000001, 0x6, 0x4, 0x9, 0x8, 0xfffffffd, 0x15, 0x7, 0xc, 0x8, 0x4, 0x3, 0xfffffe00, 0x7, 0x3, 0x800, 0x1, 0x4, 0x2, 0x1, 0x1, 0x801e, 0x7, 0x4, 0x0, 0x8, 0x5, 0x8001, 0x5, 0x1, 0x1000, 0x9, 0x3, 0x7ff, 0xd0, 0x8, 0x0, 0x3, 0x1, 0x9, 0xe, 0x7fff, 0xfffffff8, 0x7, 0x0, 0xb1, 0x3, 0xffffff44, 0x1, 0x8, 0xf, 0x6, 0x556, 0x1, 0x2c, 0x5, 0x80000001, 0x1, 0x0, 0xffffff00, 0x3, 0x2, 0x7, 0x9, 0x1c00, 0x5, 0xa2, 0x3, 0x8, 0x0, 0x5, 0x8001, 0xbfffffff, 0x7, 0x80, 0x7, 0x0, 0x743, 0x5, 0x3, 0x7, 0x200, 0x5, 0x0, 0x8, 0x3, 0x100, 0x2, 0x8, 0x1, 0x1, 0x8, 0xe, 0x5, 0x6, 0x4, 0x7ff, 0x5, 0xfffffffe, 0x7, 0xf80, 0x7, 0x5a, 0x2302, 0xffff, 0x3ff, 0x2, 0x5, 0x1, 0x6, 0x3, 0x401, 0x10001, 0x512d, 0x1, 0xe, 0x2, 0xa3c0, 0x4, 0x8000, 0x10001, 0x15a, 0x6, 0x120000, 0x9, 0x7fffffff, 0x7, 0x9, 0x80000004, 0x5, 0x7e9, 0x48, 0x9, 0x3, 0x0, 0x5, 0x6, 0xf, 0xff, 0xd, 0x6, 0x9, 0x0, 0x200, 0x9, 0xff, 0x4, 0x7, 0x7, 0x924a, 0x4, 0x56, 0x4a82, 0xffff0000, 0x7ff, 0x3e1, 0x6, 0x80000000, 0x4c0, 0x5, 0xa, 0x6, 0x2, 0x6, 0x8, 0x48, 0x1a, 0x2000000, 0x1ff, 0x844, 0x6, 0x3ff, 0x2, 0x100, 0x6, 0xffffffff, 0x200, 0xc26, 0x4, 0x5, 0x1, 0x7fff, 0xf, 0x401, 0x401, 0x4, 0x7, 0x3565, 0x2, 0x4, 0xebf, 0x9, 0x1000, 0x1, 0x71f, 0x2, 0x7, 0x6e8, 0x8, 0x0, 0x80000000, 0x6, 0x9, 0x2]}]}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x1}, 0x800) r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f00000000c0)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000200), 0x4, r2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, &(0x7f0000000500)={0x601, 0x1, &(0x7f0000000180)=[r4], &(0x7f0000000480)=[0x2], &(0x7f0000000440)=[r3], &(0x7f0000000040), 0x0, 0x8}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000001740)={&(0x7f0000001480)=[0x0, 0x0, 0x0], &(0x7f00000014c0)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f00000016c0)=[0x0, 0x0, 0x0], &(0x7f0000001700)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x3, 0x3}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000001840)={0x400, 0x8, &(0x7f0000000d40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000d80)=[0x7, 0x19, 0x3, 0x10, 0x9], &(0x7f00000017c0)=[0x0, 0x0, 0x0, 0x0, 0x0, r3, r5], &(0x7f0000001800)=[0x100000001, 0x9, 0x10000, 0x3, 0x1, 0x80000000, 0x2], 0x0, 0x5}) r6 = socket(0x200000000000011, 0x2, 0x0) r7 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r7, 0x40045612, &(0x7f0000000040)=0x1) ioctl$vim2m_VIDIOC_STREAMOFF(r7, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_QBUF(r7, 0xc058560f, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000ffe000000007400", @ANYRES32=r8, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000000000800010015000800050025000000000008000400000000000c002e"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r9, 0x1, 0x1d, &(0x7f0000000200)=0x4, 0x4) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) syz_emit_ethernet(0x256, &(0x7f00000020c0)=ANY=[@ANYBLOB="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"], 0x0) r10 = accept4$ax25(0xffffffffffffffff, &(0x7f0000000180)={{0x3, @null}, [@default, @null, @netrom, @rose, @default, @null, @null, @bcast]}, &(0x7f0000000000)=0x48, 0x800) ioctl$sock_FIOGETOWN(r10, 0x8903, &(0x7f0000000140)=0x0) capset(&(0x7f00000000c0)={0x20080522, r11}, &(0x7f0000000100)={0x6, 0xc, 0xff99, 0xffff, 0xf2c8, 0x5}) futex(0x0, 0xa, 0x0, 0x0, 0x0, 0x0) r12 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r12, 0x400448e2, 0x0) 4.803731707s ago: executing program 4 (id=711): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000200)=[{0x20, 0x0, 0x0, 0x6d8d}, {0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) sendmmsg$inet(r0, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3, 0x3}, 0x18, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x442, 0x1ff) write$binfmt_elf32(r3, &(0x7f0000000480)=ANY=[@ANYBLOB="7f454c460fc6040d002000000002000002"], 0x38) close(r3) sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100000b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_submit(0x0, 0x0, 0x0) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r5, &(0x7f0000000580)='1\x00', 0x2) prctl$PR_GET_TSC(0x43, &(0x7f0000000040)) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) landlock_restrict_self(r2, 0x3) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.current\x00', 0x275a, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') lseek(r7, 0x0, 0x1) fcntl$lock(r6, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) write$binfmt_misc(r6, &(0x7f00000002c0)="cdd4d6e4896157de13652dfd163d7f2094a4512b6547920711b20d6a81814c8e819eb14a0804496002a4f78fd5e6949a68a979138a9fbab0244f44fac8802952698df68d66b34444965462", 0x4b) fcntl$lock(r2, 0x6, &(0x7f0000000100)={0x1, 0x2, 0x6, 0x9fffffff}) ioctl$HIDIOCGREPORTINFO(r6, 0xc00c4809, &(0x7f0000000000)={0x1, 0x2, 0x1}) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$pokeuser(0x6, r8, 0x388, 0xffffffffffffffa0) 4.61940178s ago: executing program 2 (id=712): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002", 0x29}], 0x1}, 0x40) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8000) 3.71087884s ago: executing program 4 (id=713): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0x3}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, 0x0, 0x0) syz_emit_ethernet(0x19, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_init(0x200, 0x400) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0e0000000400000004000000f8ff", @ANYBLOB='\x00\x00Sc', @ANYRES32=0x0, @ANYRES32], 0x48) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=@newtaction={0xe4, 0x32, 0x216822a75a8bdd29, 0x40ffe4, 0x0, {}, [{0xd0, 0x1, [@m_connmark={0x88, 0x2, 0x0, 0x0, {{0xd}, {0x58, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0x0, 0x7, 0x7, 0x7f}, 0x8000}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x1000006, 0x7, 0xffffffb3, 0xffff}, 0x7}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xe0, 0xdd7, 0xffffffffffffffff, 0x3}, 0x4}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x0, 0x0, 0x3}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40800}, 0x0) 3.50013277s ago: executing program 0 (id=714): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x6, 0x9, 0xc2, 0x0, 0x2d83, 0x9, 0x100, 0x0, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) ptrace$setopts(0xc60a, 0x0, 0x99a, 0x40) syz_open_dev$usbfs(0x0, 0x76, 0x101301) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400), 0x49ac00, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000240)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaabaaaa0086dd60003a0400000000008000000000000000000000000000bbff02000000000080000000000000000102009078000000006050835900000000fc010000000000000000000000000000fe880000000000000000001000000001abd5e199efaa513b8c7083bc93bbdcc8d2705b132fd9c1e7f9767e561b707dcd75fdd171e950ed3d243fe6120c"], 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="180300000005000000000000000000001801000011af000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000838500000073000000180100002020752500000000806020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000040)='sys_exit\x00', r5}, 0x10) inotify_rm_watch(0xffffffffffffffff, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000001c0)={0x11, 0x2, 0x1}) r6 = epoll_create1(0x80000) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000180)={0xc0002000}) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="0380c2000000bbbbbbbbbbbb0800450000380000000000781200183f2500000000000000000400007f0000017f00000100186371ae9b1c0300"/70], 0x0) ioctl$TCSETSW2(r7, 0x402c542c, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r8 = syz_io_uring_setup(0x188, &(0x7f0000000080)={0x0, 0x3416, 0x13100}, &(0x7f0000000100), &(0x7f0000000000)) io_uring_enter(r8, 0x2def, 0x0, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000080)=0x2) close_range(r3, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x43}, 0xd}, 0x1c) 2.931202655s ago: executing program 1 (id=715): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fcdbdf2501"], 0x28}, 0x1, 0x0, 0x0, 0x890}, 0x800) 2.910207377s ago: executing program 2 (id=716): ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'ip_vti0\x00', &(0x7f0000000380)={'sit0\x00', 0x0, 0x40, 0x20, 0xffffff7f, 0x80000000, {{0x1a, 0x4, 0x1, 0x3b, 0x68, 0x68, 0x0, 0x81, 0x4, 0x0, @private=0xa010101, @rand_addr=0x64010101, {[@noop, @rr={0x7, 0x17, 0xce, [@remote, @local, @rand_addr=0x64010100, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_prespec={0x44, 0x3c, 0xc6, 0x3, 0x5, [{@broadcast, 0x3}, {@broadcast, 0x5}, {@multicast2, 0xe0}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}, {@dev={0xac, 0x14, 0x14, 0x2b}, 0x81}, {@loopback, 0x98000000}, {@private=0xa010100}]}]}}}}}) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000002c80)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYRESDEC=r1, @ANYRES32=r2, @ANYBLOB="40003a000a000200ffffffffffff000008000f"], 0x30}}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, 0x2}, 0x94) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000600)=ANY=[@ANYBLOB="1201000035ffaa20cd0caf104e380102030109021b00010000100009045902019b042a00090582"], 0x0) connect$pppl2tp(r4, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @multicast2}, 0x3}}, 0x2e) connect$pppl2tp(r4, &(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x4f06, 0x4, 0x1, 0x1, {0xa, 0x4e21, 0xa, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5}}}, 0x32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r6 = getpid() syz_usb_connect$hid(0x4, 0x3f, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x6666, 0x8801, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x5, 0x10, 0x64, [{{0x9, 0x4, 0x0, 0xc0, 0x2, 0x3, 0x1, 0x0, 0x3, {0x9, 0x21, 0xfffc, 0x30, 0x1, {0x22, 0x4b0}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0xc, 0x5, 0x8}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x4, 0x3, 0x8}}]}}}]}}]}}, &(0x7f0000000a00)={0xa, &(0x7f0000000480)={0xa, 0x6, 0x200, 0xf, 0x3, 0x5, 0x40, 0x4}, 0x104, &(0x7f0000000640)={0x5, 0xf, 0x104, 0x1, [@generic={0xff, 0x10, 0x4, "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"}]}, 0x9, [{0x92, &(0x7f0000000780)=@string={0x92, 0x3, "911380d386af84856902479e4e881101531d118b4354a769651dacaa12254506b23c3f602f96f7429e59d92a97b368a8f2df2643ad64cadbb84a0f36a48be383010dc9302695b8a6816b31c70e3e064a60b30fdc66394d0e2a25e0733a6e325948ce6ec548e9b8fc54988c11da66405bf65367289b47cf857d6e247c45884b3f41f22e8171308d2a30ed59d1ec9ed388"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x44c}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0xf0ff}}, {0x21, &(0x7f0000000580)=@string={0x21, 0x3, "4d185a823b215811005e884cf8bf43d28a74228d720cb6705042bfa90051b2"}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x455}}, {0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x458}}, {0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0x81a}}, {0x3a, &(0x7f00000008c0)=@string={0x3a, 0x3, "0da9efefc4f45df04f85caacf714e78796e4d87c0607c50fa0d2916590ab2446157d241cf108ad6ab95435dd9515b00f3984b0c80827c104"}}, {0xcc, &(0x7f0000000900)=@string={0xcc, 0x3, "49e4934a9c6a9b9e7c2b0b3899630f904d09a28610c3007a37d2b4c782664adc263fb0c62510826497cf143c7ef1062a0d1437143037689a5fdb72b1de5abb9ebd90dd3e8280f8d8bc5fb3403f5da51104a6a2521e073e6b3a8c52263b765ce41519c558b51ec521c1f901872efde30febdba14f13dbe779ff77eeaace279306dea1be3050d3420091f0097cc57f3567298a11c071a70d5243e30c33295f0e5f78d8a162585bbd5c9bb136d02fe611c8f9589e8351a847d909f99167e58201af3d2d7c6295e563b85ba6"}}]}) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) timer_create(0x1, &(0x7f0000000ac0)={0x0, 0x27, 0x4, @tid=r6}, &(0x7f0000000b00)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x57, 0x0, &(0x7f0000000300)="002ad09bfe0000c287575e54bbf9b6a43941b7bf2a2c40da02c0dc452ef30917168637f6016778f75c7c8aaa2aa104d65fac2c5d06a8b7a5f34583fc4fcac6f7411704d7375b55163c25bed3fc1ae60200000000000000", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) r9 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r9, 0x0, 0x0) syz_usb_control_io$hid(r9, &(0x7f0000000840)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00220f000000540b4550182195f51584b3"], 0x0}, 0x0) r10 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGREPORT(r10, 0x400c4807, &(0x7f0000000040)={0x3, 0x100, 0x7}) syz_usb_control_io(r9, 0x0, &(0x7f0000000a80)={0x84, &(0x7f0000000580)=ANY=[@ANYBLOB="000b01"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 2.826689729s ago: executing program 1 (id=717): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r1, &(0x7f00000005c0)=ANY=[@ANYBLOB="7f454c4604070003040000000000000002000300030000000903000038000000ce0000000e0000000b0020000100050005000000000000000300000008000000f30000007f0000000402000004002000e10c0000000400"/461], 0x258) close(r1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262cc35c40682138cf13a49aa9f27abec00002f01ba1251aaf2385416ca719300"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r1, 0x58, &(0x7f0000000180)}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB="e000", @ANYRES16], 0xe0}, 0x1, 0x0, 0x0, 0x4002841}, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) r6 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0) sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f00000007c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000}, 0x60600d2c1f23ab1c, &(0x7f0000000880)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="10002dbd7000fcdbdf25110080000801060006000000"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40000c4) add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000340)={0x0, "8527d2413790af54bfbca283be11c0de7af30e90937920fcba13d90af61beaa44d66a6535daf1bc35fb3af1e9197e31d26589ddb3c101840af347c1a253ec5fb", 0x18}, 0x48, 0xffffffffffffffff) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, &(0x7f0000000140)={'c6xdigio\x00', [0xb013, 0x5, 0x800000, 0x4, 0x88d7, 0x8000008f, 0xf19, 0x8012, 0x1002, 0x1, 0x200, 0x10ffff, 0x10000009, 0x4, 0x5, 0x5, 0x8, 0x6, 0x9, 0x8e, 0x10b, 0x3, 0x4, 0xa, 0x7, 0x2, 0xb0c6, 0x1ff, 0xc, 0x400002, 0x2]}) 2.678854331s ago: executing program 4 (id=718): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x18, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x8844) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000080)='sched_switch\x00', r2, 0x0, 0xc8d}, 0x18) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) io_setup(0x7, &(0x7f0000000280)) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) r5 = socket(0x15, 0x5, 0x0) r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f0000000200)) getsockopt(r5, 0x200000000114, 0x2716, &(0x7f0000c35fff)=""/1, 0x0) close(r4) openat$sysfs(0xffffff9c, &(0x7f00000000c0)='/sys/power/wakeup_count', 0x42, 0x0) 1.827854643s ago: executing program 1 (id=719): openat$comedi(0xffffff9c, &(0x7f0000000080)='/dev/comedi1\x00', 0x2180, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x34}}, 0x880) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f00000004c0)) 1.801816144s ago: executing program 3 (id=720): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x110, r0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f00000002c0)={0x0, 0x6}, 0x8) 1.336206039s ago: executing program 1 (id=721): openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e) r2 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) mkdir(&(0x7f0000000300)='./file0\x00', 0x40) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r4, &(0x7f00000000c0)=""/55, 0x37) rename(&(0x7f0000000a80)='./file0\x00', &(0x7f00000001c0)='./bus\x00') ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000700)={0xb0, 0x0, {r0}, {0xee01}, 0x62, 0x4}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000002840)={{{@in6=@mcast2, @in=@multicast1}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000740)=0xe8) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) getpid() r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$UHID_INPUT(r8, &(0x7f0000010140)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r8, 0x0) ioctl$KVM_GET_NESTED_STATE(r7, 0xc080aebe, &(0x7f0000000480)={{0x0, 0x0, 0xffffffffffffffca, {0x0, 0x3000}}, "0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffe700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000069fe00", "00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000eeffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f56900000000000000000000000000000000000000000000000000000000f3ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005a8c285400"}) read$FUSE(0xffffffffffffffff, &(0x7f0000000680)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r10 = getpid() msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000380)={{0x1, 0xffffffffffffffff, r9, 0xffffffffffffffff, 0x0, 0x5, 0xfff9}, 0x0, 0x0, 0x0, 0x8, 0x8, 0x6, 0x5, 0x6979, 0x4, 0x5, 0x0, r10}) 1.207627248s ago: executing program 3 (id=722): socket$inet_mptcp(0x2, 0x1, 0x106) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) socket$caif_seqpacket(0x25, 0x5, 0x1) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="0430f5c7c90034d9493ad3c6a2247a769bcc8203a462b70ef8f6102c57f4c6078eb7680df7ef6363d49068bdf124d44d66ea113597ab8730ea7a4c0f9b1346ea2556d7b8a7d238bfca953d17bf15fb2e0600000000000000cb9b002adb1213ceaebce539fd9a53263db49e0b47a8be0b10d6dae171728dcadef3e0c5"], 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0xa880) socket$nl_route(0x10, 0x3, 0x0) mknod$loop(0x0, 0x80, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x3, 0x6576, 0xd}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000839f82f6dafdff38b5c8037daa8e42115fbdc27037361202b9ced51be341303606b002449152b879d2e0a718bd3a42637d9b0e2df3c70ee9fd426c5c378e4f73dfaaa0d12ab8fa716f3257a0b2e90d97f81741a1a26928e4a11474b5e882552fcd0b3a0413decc96"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x43, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r5, 0x4001af84, &(0x7f0000000500)) ioctl$VHOST_SET_OWNER(r5, 0xaf01, 0x0) 1.195678857s ago: executing program 4 (id=723): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) getpid() getsockname$llc(0xffffffffffffffff, 0x0, &(0x7f0000000500)) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10c4, 0xea90, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x18, &(0x7f0000000440)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x1, 0x3, "c282fe"}, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="20010e"], 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000002c0)={0x2c, &(0x7f0000000580)={0x40, 0x16, 0x33, "b985e9aee4c9852719103948206837937786e837dda8656d0c06e85250e55479cfbd188db6b4c7effeb005dc973f61a4c2a01d"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x6}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000240), &(0x7f0000000280)={0x40, 0x5, 0x5, "1be6ef7a9f"}}) 866.324456ms ago: executing program 1 (id=724): r0 = openat(0xffffffffffffff9c, 0x0, 0xc4042, 0x1ff) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000280)={'bridge_slave_1\x00', &(0x7f0000000180)=@ethtool_eee={0x45, 0x0, 0x81, 0x1, 0x2, 0xb, 0x4, 0x8, [0x9, 0x5]}}) read$msr(r1, &(0x7f000001b000)=""/102384, 0x18ff0) r2 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$sock_linger(r2, 0x1, 0xd, 0x0, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x2) getsockopt$netlink(r3, 0x10e, 0x9, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, &(0x7f0000000380)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x80049367, &(0x7f0000000300)) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000040)={0x0, 0x7, {0xffffffffffffffff}, {}, 0xfff, 0x4}) sched_setattr(r7, &(0x7f0000000200)={0x38, 0x3, 0x2, 0x38, 0x7, 0x80000001, 0x1, 0x3, 0x6, 0x3f4f}, 0x0) bind$can_j1939(r5, &(0x7f00000000c0)={0x1d, r6}, 0x18) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000001200)=@sha1={0x1, "133f9613e19d9ae35fcacf2bf3c557a71b10d14b"}, 0x15, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) sendmmsg(r5, &(0x7f000000a200), 0x400000000000283, 0x60000800) 713.667734ms ago: executing program 0 (id=725): fchdir(0xffffffffffffffff) (async) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async, rerun: 64) ustat(0xb, 0x0) (rerun: 64) ioctl$TUNGETVNETLE(r0, 0x4010744d, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c1) (async) mkdirat(0xffffffffffffff9c, 0x0, 0x0) (async) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) (async) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) (async) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000040)={0x10000, 0xf, {0xffffffffffffffff}, {}, 0x0, 0x8}) prctl$PR_SCHED_CORE(0x3e, 0x4, r4, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa15, 0xffffffff}, 0x0) (async, rerun: 32) socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001", @ANYRESDEC=r3, @ANYRESOCT=r2, @ANYRES32=r1], 0xa8}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000002bc0)={0x0, 0x0, &(0x7f0000002b80)={&(0x7f0000002980)=@dellink={0x34, 0x11, 0x1, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0xc0, 0x1400}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'wg2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000100}, 0x40004) 279.626873ms ago: executing program 0 (id=726): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) semctl$SETALL(0x0, 0x0, 0x14, &(0x7f0000000100)=[0x1, 0x8873]) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) syz_open_dev$sndctrl(&(0x7f0000000000), 0x2, 0x167a80) r3 = openat$dsp(0xffffff9c, &(0x7f0000000080), 0x82040, 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(r3, 0xc0044dff, 0x0) sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, 0x0, 0x810) syz_io_uring_setup(0x111, 0x0, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$EVIOCGKEY(0xffffffffffffffff, 0x80404518, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) preadv(r4, &(0x7f0000000380)=[{&(0x7f0000000580)=""/128, 0x80}], 0x1, 0x5b, 0x0) r6 = socket(0x28, 0x5, 0x0) r7 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r7, &(0x7f0000000140)={0x28, 0x0, 0x0, @local}, 0x10) listen(r7, 0x4) connect$vsock_stream(r6, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r8}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) 60.759279ms ago: executing program 3 (id=727): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000000000000f0070000000900010073797a300000000080000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d3c00128014000180090001006c617374000000000400028010000180090001006c61737400000000140001800c000100636f756e74"], 0xc8}, 0x1, 0x0, 0x0, 0x40000}, 0x20050800) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40800181}, 0xc, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0xc4}, 0x840) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) read$msr(r2, &(0x7f000001b700)=""/102392, 0x18ff8) bind$unix(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$SG_IO(r3, 0x2285, 0x0) writev(r3, 0x0, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x24, 0x0, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x46401905ed3ee4d9}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x44001) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r5, r4, &(0x7f0000002080)=0x64, 0x21c) 0s ago: executing program 0 (id=728): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0x3}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, 0x0, 0x0) syz_emit_ethernet(0x19, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_init(0x200, 0x400) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0e0000000400000004000000f8ff", @ANYBLOB='\x00\x00Sc', @ANYRES32=0x0, @ANYRES32], 0x48) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=@newtaction={0xe4, 0x32, 0x216822a75a8bdd29, 0x40ffe4, 0x0, {}, [{0xd0, 0x1, [@m_connmark={0x88, 0x2, 0x0, 0x0, {{0xd}, {0x58, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0x0, 0x7, 0x7, 0x7f}, 0x8000}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x1000006, 0x7, 0xffffffb3, 0xffff}, 0x7}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xe0, 0xdd7, 0xffffffffffffffff, 0x3}, 0x4}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x0, 0x0, 0x3}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40800}, 0x0) kernel console output (not intermixed with test programs): t: syz [ 175.871478][ T30] audit: type=1400 audit(1762892144.180:370): avc: denied { listen } for pid=7236 comm="syz.1.343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 175.921982][ T5856] usb 5-1: SerialNumber: syz [ 176.059123][ T7239] netlink: 4 bytes leftover after parsing attributes in process `syz.3.344'. [ 176.068994][ T7239] netlink: 8 bytes leftover after parsing attributes in process `syz.3.344'. [ 176.092207][ T5823] Bluetooth: hci2: unexpected event for opcode 0x2028 [ 176.093428][ T5930] ft260 0003:0403:6030.0008: chip code: 6424 8183 [ 176.100065][ T30] audit: type=1400 audit(1762892144.520:371): avc: denied { ioctl } for pid=7240 comm="syz.1.345" path="socket:[14543]" dev="sockfs" ino=14543 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 176.192387][ T7242] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 176.192387][ T7242] program syz.3.344 not setting count and/or reply_len properly [ 176.328334][ T30] audit: type=1400 audit(1762892144.750:372): avc: denied { mount } for pid=7240 comm="syz.1.345" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 176.331402][ T5930] ft260 0003:0403:6030.0008: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.0-1/input0 [ 176.499198][ T5930] ft260 0003:0403:6030.0008: failed to retrieve status: -32, no wakeup [ 176.617298][ T7248] xt_CT: You must specify a L4 protocol and not use inversions on it [ 177.558961][ T5946] usb 1-1: reset high-speed USB device number 13 using dummy_hcd [ 177.579649][ T7253] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (comedi_parport) [ 177.811168][ T7242] syz.3.344 (7242): drop_caches: 2 [ 177.821610][ T7242] syz.3.344 (7242): drop_caches: 2 [ 178.276022][ T30] audit: type=1400 audit(1762892146.370:373): avc: denied { bind } for pid=7251 comm="syz.1.347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 178.453973][ T30] audit: type=1400 audit(1762892146.380:374): avc: denied { setopt } for pid=7251 comm="syz.1.347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 178.535073][ T5856] usb 5-1: USB disconnect, device number 23 [ 179.049654][ T30] audit: type=1400 audit(1762892147.480:375): avc: denied { read } for pid=7264 comm="syz.1.352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 179.109576][ T30] audit: type=1400 audit(1762892147.540:376): avc: denied { write } for pid=7260 comm="syz.4.351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 180.448599][ T7282] dlm: no local IP address has been set [ 180.483211][ T7282] dlm: cannot start dlm midcomms -107 [ 180.515747][ T30] audit: type=1400 audit(1762892148.930:377): avc: denied { bind } for pid=7277 comm="syz.0.354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 180.765856][ T5930] usb 1-1: USB disconnect, device number 13 [ 181.050759][ T7287] netlink: 8 bytes leftover after parsing attributes in process `syz.0.356'. [ 182.544511][ T30] audit: type=1400 audit(1762892150.980:378): avc: denied { setopt } for pid=7300 comm="syz.0.359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 182.634501][ T30] audit: type=1400 audit(1762892151.000:379): avc: denied { read } for pid=7300 comm="syz.0.359" path="socket:[14648]" dev="sockfs" ino=14648 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 182.676058][ T5930] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 182.853204][ T5930] usb 5-1: Using ep0 maxpacket: 32 [ 182.869951][ T5930] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 182.880653][ T5930] usb 5-1: config 0 has no interface number 0 [ 182.888052][ T5930] usb 5-1: config 0 interface 184 has no altsetting 0 [ 182.903386][ T5930] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 182.913595][ T5930] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.921726][ T5930] usb 5-1: Product: syz [ 182.928119][ T5930] usb 5-1: Manufacturer: syz [ 182.940866][ T5930] usb 5-1: SerialNumber: syz [ 183.040685][ T5930] usb 5-1: config 0 descriptor?? [ 183.101691][ T5930] smsc75xx v1.0.0 [ 183.974261][ T5930] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 184.029386][ T5930] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 184.128541][ T7329] netlink: 28 bytes leftover after parsing attributes in process `syz.3.364'. [ 184.555194][ T5930] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000010: -71 [ 184.568225][ T5930] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to write HW_CFG: -71 [ 184.578081][ T5930] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 184.587709][ T5930] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 184.603291][ T5930] usb 5-1: USB disconnect, device number 24 [ 184.683124][ T976] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 184.690810][ T9] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 184.853749][ T976] usb 3-1: Using ep0 maxpacket: 16 [ 184.858924][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 184.867168][ T976] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 184.935624][ T7336] netlink: 4 bytes leftover after parsing attributes in process `syz.0.365'. [ 185.348882][ T9] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 185.357583][ T976] usb 3-1: config 0 has no interface number 0 [ 185.364202][ T9] usb 2-1: config 0 has no interface number 0 [ 185.370882][ T976] usb 3-1: config 0 interface 1 has no altsetting 0 [ 185.382015][ T9] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 185.392138][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.401445][ T9] usb 2-1: Product: syz [ 185.401569][ T976] usb 3-1: New USB device found, idVendor=10c4, idProduct=eac1, bcdDevice=ff.7e [ 185.417049][ T9] usb 2-1: Manufacturer: syz [ 185.427864][ T976] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.436099][ T9] usb 2-1: SerialNumber: syz [ 185.444092][ T9] usb 2-1: config 0 descriptor?? [ 185.449937][ T976] usb 3-1: Product: syz [ 185.454695][ T976] usb 3-1: Manufacturer: syz [ 185.460846][ T9] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 185.469991][ T976] usb 3-1: SerialNumber: syz [ 185.478640][ T976] usb 3-1: config 0 descriptor?? [ 185.667148][ T9] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 185.680328][ T9] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 185.710712][ T976] i2c-cp2615 3-1:0.1: probe with driver i2c-cp2615 failed with error -22 [ 185.732875][ T5930] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 185.761452][ T5856] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 185.925646][ T5856] usb 5-1: Using ep0 maxpacket: 16 [ 185.940696][ T5856] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 185.951220][ T5856] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 186.013063][ T5856] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 186.022586][ T5856] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 186.069040][ T5856] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 186.078795][ T5856] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.088202][ T5856] usb 5-1: Product: syz [ 186.093621][ T5856] usb 5-1: Manufacturer: syz [ 186.098373][ T5856] usb 5-1: SerialNumber: syz [ 186.312846][ T5930] usb 4-1: Using ep0 maxpacket: 16 [ 186.344109][ T7350] block nbd2: shutting down sockets [ 186.357359][ T5930] usb 4-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 186.366891][ T5930] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 186.380267][ T5930] usb 4-1: Product: syz [ 186.386868][ T5930] usb 4-1: Manufacturer: syz [ 186.397354][ T30] audit: type=1400 audit(1762892154.830:380): avc: denied { append } for pid=7339 comm="syz.4.368" name="sg0" dev="devtmpfs" ino=740 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 186.424309][ T5930] usb 4-1: SerialNumber: syz [ 186.555062][ T30] audit: type=1400 audit(1762892154.830:381): avc: denied { map } for pid=7339 comm="syz.4.368" path="/dev/sg0" dev="devtmpfs" ino=740 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 186.878490][ T30] audit: type=1400 audit(1762892154.830:382): avc: denied { execute } for pid=7339 comm="syz.4.368" path="/dev/sg0" dev="devtmpfs" ino=740 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 186.913806][ T5930] usb 4-1: config 0 descriptor?? [ 186.949916][ T30] audit: type=1326 audit(1762892155.380:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7322 comm="syz.1.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f011e18f6c9 code=0x7ffc0000 [ 186.976880][ T30] audit: type=1326 audit(1762892155.410:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7322 comm="syz.1.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f011e18f6c9 code=0x7ffc0000 [ 187.085931][ T30] audit: type=1326 audit(1762892155.410:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7322 comm="syz.1.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f011e18df10 code=0x7ffc0000 [ 187.138694][ T30] audit: type=1326 audit(1762892155.410:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7322 comm="syz.1.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f011e18f6c9 code=0x7ffc0000 [ 187.197055][ T30] audit: type=1326 audit(1762892155.410:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7322 comm="syz.1.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f011e18f6c9 code=0x7ffc0000 [ 187.306480][ T7361] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.314066][ T7361] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.331377][ T7361] bridge_slave_1: left allmulticast mode [ 187.337439][ T7361] bridge_slave_1: left promiscuous mode [ 187.343852][ T7361] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.354506][ T7361] bridge_slave_0: left allmulticast mode [ 187.362704][ T7361] bridge_slave_0: left promiscuous mode [ 187.368863][ T7361] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.390164][ T5856] usb 5-1: 0:2 : does not exist [ 187.613940][ T5930] usb 5-1: USB disconnect, device number 25 [ 188.030144][ T5856] usb 3-1: USB disconnect, device number 13 [ 188.084172][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 188.095808][ T976] usb 2-1: USB disconnect, device number 11 [ 188.118259][ T976] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 188.194052][ T976] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 188.336663][ T976] quatech2 2-1:0.51: device disconnected [ 189.136866][ T9] usb 4-1: USB disconnect, device number 18 [ 189.393187][ T976] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 189.921115][ T7376] netlink: 8 bytes leftover after parsing attributes in process `syz.4.376'. [ 190.643092][ T43] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 190.684662][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 190.684679][ T30] audit: type=1400 audit(1762892159.120:399): avc: denied { name_bind } for pid=7386 comm="syz.4.380" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 190.712613][ T30] audit: type=1400 audit(1762892159.120:400): avc: denied { setopt } for pid=7386 comm="syz.4.380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 190.764493][ T976] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 190.792813][ T976] usb 2-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 190.809448][ T976] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.818193][ T30] audit: type=1400 audit(1762892159.240:401): avc: denied { read } for pid=7384 comm="syz.0.381" path="socket:[14118]" dev="sockfs" ino=14118 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 190.846018][ T43] usb 3-1: Using ep0 maxpacket: 32 [ 190.847966][ T976] usb 2-1: config 0 descriptor?? [ 190.874921][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 190.887227][ T7392] netlink: 596 bytes leftover after parsing attributes in process `syz.4.382'. [ 190.890955][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 190.908458][ T43] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 190.917671][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.929460][ T43] usb 3-1: config 0 descriptor?? [ 191.431509][ T976] usbhid 2-1:0.0: can't add hid device: -71 [ 191.456618][ T976] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 191.497089][ T976] usb 2-1: USB disconnect, device number 12 [ 191.628511][ T43] ft260 0003:0403:6030.0009: unknown main item tag 0x7 [ 192.268210][ T43] ft260 0003:0403:6030.0009: chip code: 6424 8183 [ 192.420318][ T7413] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 192.466477][ T43] ft260 0003:0403:6030.0009: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.2-1/input0 [ 192.522943][ T30] audit: type=1400 audit(1762892160.950:402): avc: denied { sqpoll } for pid=7402 comm="syz.3.385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 192.587491][ T7421] bridge_slave_1: left allmulticast mode [ 192.613079][ T7421] bridge_slave_1: left promiscuous mode [ 192.618801][ T7421] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.645377][ T7421] bridge_slave_0: left allmulticast mode [ 192.651429][ T7421] bridge_slave_0: left promiscuous mode [ 192.659042][ T7421] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.702851][ T5877] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 192.930129][ T43] ft260 0003:0403:6030.0009: failed to retrieve status: -32, no wakeup [ 192.933075][ T976] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 193.086576][ T5877] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 193.094718][ T5856] usb 3-1: reset high-speed USB device number 14 using dummy_hcd [ 193.103704][ T5877] usb 1-1: config 0 has no interface number 0 [ 193.111961][ T5877] usb 1-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 193.120378][ T976] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 193.132482][ T976] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 193.143666][ T976] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 193.143717][ T5877] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.161177][ T976] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 193.173232][ T976] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 193.186420][ T976] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 193.196086][ T976] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 193.206983][ T976] usb 5-1: Product: syz [ 193.212125][ T976] usb 5-1: Manufacturer: syz [ 193.212918][ T5877] usb 1-1: config 0 descriptor?? [ 193.230265][ T976] cdc_wdm 5-1:1.0: skipping garbage [ 193.237471][ T976] cdc_wdm 5-1:1.0: skipping garbage [ 193.247829][ T5877] usb 1-1: selecting invalid altsetting 1 [ 193.247990][ T976] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 193.261167][ T976] cdc_wdm 5-1:1.0: Unknown control protocol [ 193.280428][ T5877] dvb_ttusb_budget: ttusb_init_controller: error [ 193.348177][ T5877] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 193.422662][ T5877] DVB: Unable to find symbol cx22700_attach() [ 193.519602][ T5877] DVB: Unable to find symbol tda10046_attach() [ 193.532301][ T30] audit: type=1400 audit(1762892161.960:403): avc: denied { read write } for pid=7416 comm="syz.4.389" name="cdc-wdm0" dev="devtmpfs" ino=3112 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 193.557736][ T7418] cdc_wdm 5-1:1.0: Error submitting int urb - -90 [ 193.567953][ T5877] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 193.587270][ T5884] usb 5-1: USB disconnect, device number 26 [ 193.599999][ T30] audit: type=1400 audit(1762892161.960:404): avc: denied { open } for pid=7416 comm="syz.4.389" path="/dev/cdc-wdm0" dev="devtmpfs" ino=3112 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 193.627115][ T5877] usb 1-1: USB disconnect, device number 14 [ 193.806838][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.814226][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.330385][ T7443] netlink: 4 bytes leftover after parsing attributes in process `syz.2.397'. [ 195.339421][ T7443] netlink: 8 bytes leftover after parsing attributes in process `syz.2.397'. [ 195.374041][ T30] audit: type=1400 audit(1762892163.800:405): avc: denied { link } for pid=7444 comm="syz.0.396" name="file1" dev="tmpfs" ino=447 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 195.509494][ T7448] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 195.509494][ T7448] program syz.2.397 not setting count and/or reply_len properly [ 195.755047][ T5884] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 195.759028][ T43] usb 3-1: USB disconnect, device number 14 [ 195.988988][ T7443] syz.2.397 (7443): drop_caches: 2 [ 196.000961][ T7443] syz.2.397 (7443): drop_caches: 2 [ 196.023351][ T5884] usb 5-1: Using ep0 maxpacket: 32 [ 196.031233][ T5884] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 196.071113][ T5884] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 196.138018][ T5884] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 196.197229][ T5884] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.285059][ T5884] usb 5-1: config 0 descriptor?? [ 196.351752][ T7464] input: syz1 as /devices/virtual/input/input12 [ 196.364609][ T30] audit: type=1400 audit(1762892164.800:406): avc: denied { mounton } for pid=7465 comm="syz.3.403" path="/72/file0" dev="tmpfs" ino=408 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 196.397362][ T7467] netlink: 4 bytes leftover after parsing attributes in process `syz.0.401'. [ 197.063142][ T5884] kone 0003:1E7D:2CED.000A: hidraw0: USB HID v0.00 Device [HID 1e7d:2ced] on usb-dummy_hcd.4-1/input0 [ 197.324053][ T5884] kone 0003:1E7D:2CED.000A: couldn't init struct kone_device [ 197.334858][ T5884] kone 0003:1E7D:2CED.000A: couldn't install mouse [ 197.384062][ T5884] kone 0003:1E7D:2CED.000A: probe with driver kone failed with error -5 [ 197.417432][ T5884] usb 5-1: USB disconnect, device number 27 [ 198.034252][ T976] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 198.773919][ T976] usb 4-1: Using ep0 maxpacket: 32 [ 198.781922][ T30] audit: type=1400 audit(1762892166.800:407): avc: denied { getopt } for pid=7480 comm="syz.1.406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 198.814191][ T976] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 198.825248][ T976] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 198.836693][ T976] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 198.857001][ T976] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.879889][ T976] usb 4-1: config 0 descriptor?? [ 199.232640][ T30] audit: type=1326 audit(1762892167.650:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7490 comm="syz.2.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5e2b8f6c9 code=0x7ffc0000 [ 199.645692][ T976] ft260 0003:0403:6030.000B: unknown main item tag 0x7 [ 199.654446][ T30] audit: type=1326 audit(1762892167.650:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7490 comm="syz.2.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa5e2b8f6c9 code=0x7ffc0000 [ 199.681710][ T30] audit: type=1326 audit(1762892167.650:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7490 comm="syz.2.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5e2b8f6c9 code=0x7ffc0000 [ 199.755668][ T976] ft260 0003:0403:6030.000B: chip code: 6424 8183 [ 199.875074][ T30] audit: type=1326 audit(1762892167.650:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7490 comm="syz.2.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa5e2b8f6c9 code=0x7ffc0000 [ 199.906876][ T30] audit: type=1326 audit(1762892167.660:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7490 comm="syz.2.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5e2b8f6c9 code=0x7ffc0000 [ 199.950054][ T976] ft260 0003:0403:6030.000B: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.3-1/input0 [ 200.045388][ T30] audit: type=1326 audit(1762892167.660:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7490 comm="syz.2.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa5e2b8f6c9 code=0x7ffc0000 [ 200.083776][ T7502] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 200.309012][ T976] ft260 0003:0403:6030.000B: failed to retrieve status: -32, no wakeup [ 200.318272][ T30] audit: type=1326 audit(1762892167.660:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7490 comm="syz.2.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5e2b8f6c9 code=0x7ffc0000 [ 200.342410][ T30] audit: type=1326 audit(1762892167.660:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7490 comm="syz.2.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=200 compat=0 ip=0x7fa5e2b8f6c9 code=0x7ffc0000 [ 200.607321][ T7504] netlink: 8 bytes leftover after parsing attributes in process `syz.1.411'. [ 201.063221][ T9] usb 4-1: reset high-speed USB device number 19 using dummy_hcd [ 201.787103][ T5930] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 201.943125][ T5930] usb 2-1: Using ep0 maxpacket: 32 [ 201.957610][ T30] kauditd_printk_skb: 29 callbacks suppressed [ 201.957625][ T30] audit: type=1400 audit(1762892170.390:445): avc: denied { write } for pid=7513 comm="syz.4.415" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 202.000549][ T5930] usb 2-1: config 0 has an invalid descriptor of length 141, skipping remainder of the config [ 202.020444][ T5930] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 202.032584][ T5930] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 202.044628][ T5930] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.052724][ T5930] usb 2-1: Product: syz [ 202.058324][ T5930] usb 2-1: Manufacturer: syz [ 202.070065][ T5930] usb 2-1: SerialNumber: syz [ 202.085289][ T5930] usb 2-1: config 0 descriptor?? [ 202.216381][ T7525] netlink: 4 bytes leftover after parsing attributes in process `syz.3.419'. [ 202.225536][ T7525] netlink: 8 bytes leftover after parsing attributes in process `syz.3.419'. [ 202.392961][ T5930] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 202.797901][ T7528] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 202.797901][ T7528] program syz.3.419 not setting count and/or reply_len properly [ 202.879296][ T7528] syz.3.419 (7528): drop_caches: 2 [ 202.885710][ T7528] syz.3.419 (7528): drop_caches: 2 [ 202.993993][ T976] usb 4-1: USB disconnect, device number 19 [ 203.065721][ T7533] overlayfs: missing 'lowerdir' [ 203.091152][ T30] audit: type=1400 audit(1762892171.510:446): avc: denied { getopt } for pid=7530 comm="syz.0.420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 203.115389][ T5930] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 203.128210][ T5930] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 203.142491][ T5930] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 203.151977][ T5930] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.161745][ T5930] usb 5-1: config 0 descriptor?? [ 203.242435][ T7538] tipc: Can't bind to reserved service type 2 [ 203.250870][ T30] audit: type=1400 audit(1762892171.670:447): avc: denied { bind } for pid=7530 comm="syz.0.420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 203.593819][ T5930] cp2112 0003:10C4:EA90.000C: unknown main item tag 0x0 [ 203.600804][ T5930] cp2112 0003:10C4:EA90.000C: unknown main item tag 0x0 [ 203.608051][ T5930] cp2112 0003:10C4:EA90.000C: unknown main item tag 0x0 [ 203.622836][ T5930] cp2112 0003:10C4:EA90.000C: unknown main item tag 0x0 [ 203.629862][ T5930] cp2112 0003:10C4:EA90.000C: unknown main item tag 0x0 [ 203.637530][ T5930] cp2112 0003:10C4:EA90.000C: unknown main item tag 0x0 [ 203.645999][ T5930] cp2112 0003:10C4:EA90.000C: unknown main item tag 0x0 [ 203.683727][ T5930] cp2112 0003:10C4:EA90.000C: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 203.886730][ T7545] netlink: 24 bytes leftover after parsing attributes in process `syz.1.413'. [ 203.945523][ T30] audit: type=1400 audit(1762892172.380:448): avc: denied { map } for pid=7534 comm="syz.2.421" path="socket:[15518]" dev="sockfs" ino=15518 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 203.990378][ T5930] cp2112 0003:10C4:EA90.000C: Part Number: 0x82 Device Version: 0xFE [ 204.026306][ T30] audit: type=1400 audit(1762892172.380:449): avc: denied { read } for pid=7534 comm="syz.2.421" path="socket:[15518]" dev="sockfs" ino=15518 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 204.099271][ T30] audit: type=1400 audit(1762892172.380:450): avc: denied { append } for pid=7534 comm="syz.2.421" name="video2" dev="devtmpfs" ino=932 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 204.187674][ T5930] cp2112 0003:10C4:EA90.000C: error requesting SMBus config [ 204.210450][ T7551] netlink: 4 bytes leftover after parsing attributes in process `syz.3.424'. [ 204.229421][ T5930] cp2112 0003:10C4:EA90.000C: probe with driver cp2112 failed with error -5 [ 204.488911][ T30] audit: type=1400 audit(1762892172.920:451): avc: denied { module_load } for pid=7553 comm="syz.2.425" path="/79/bus" dev="tmpfs" ino=438 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 204.530475][ T7557] Invalid ELF header magic: != ELF [ 205.640267][ T5930] usb 2-1: USB disconnect, device number 13 [ 205.673807][ T9] usb 5-1: USB disconnect, device number 28 [ 206.803177][ T9] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 207.479448][ T5930] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 207.503005][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 207.509656][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 207.520697][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 207.531640][ T9] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 207.543375][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.561583][ T9] usb 5-1: config 0 descriptor?? [ 207.567211][ T30] audit: type=1400 audit(1762892175.990:452): avc: denied { kexec_image_load } for pid=7576 comm="syz.3.432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 207.613270][ T5930] usb 1-1: device descriptor read/64, error -71 [ 207.842807][ T43] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 207.852960][ T5930] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 207.963099][ T5946] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 207.983035][ T5930] usb 1-1: device descriptor read/64, error -71 [ 207.994758][ T43] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 208.002942][ T43] usb 4-1: config 0 has no interface number 0 [ 208.006456][ T9] ft260 0003:0403:6030.000D: unknown main item tag 0x7 [ 208.010696][ T43] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 208.025725][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.036957][ T43] usb 4-1: config 0 descriptor?? [ 208.044546][ T43] usb 4-1: selecting invalid altsetting 1 [ 208.061775][ T43] dvb_ttusb_budget: ttusb_init_controller: error [ 208.068944][ T43] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 208.094490][ T5930] usb usb1-port1: attempt power cycle [ 208.124848][ T5946] usb 2-1: config 0 has an invalid interface number: 120 but max is 0 [ 208.135130][ T5946] usb 2-1: config 0 has no interface number 0 [ 208.141249][ T5946] usb 2-1: config 0 interface 120 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 208.143864][ T43] DVB: Unable to find symbol cx22700_attach() [ 208.153728][ T5946] usb 2-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 208.167828][ T5946] usb 2-1: New USB device strings: Mfr=32, Product=0, SerialNumber=0 [ 208.176181][ T5946] usb 2-1: Manufacturer: syz [ 208.188660][ T5946] usb 2-1: config 0 descriptor?? [ 208.199613][ T5946] input: syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.120/input/input13 [ 208.204032][ T43] DVB: Unable to find symbol tda10046_attach() [ 208.215319][ T43] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 208.274940][ T9] ft260 0003:0403:6030.000D: chip code: 6424 8183 [ 208.302029][ T5946] usb 4-1: USB disconnect, device number 20 [ 208.405368][ T5856] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 208.437685][ T43] usb 2-1: USB disconnect, device number 14 [ 208.453319][ T5930] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 208.482185][ T9] ft260 0003:0403:6030.000D: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.4-1/input0 [ 208.495736][ T5930] usb 1-1: device descriptor read/8, error -71 [ 208.572868][ T5856] usb 3-1: Using ep0 maxpacket: 32 [ 208.579478][ T5856] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 208.591337][ T5856] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 208.600544][ T5856] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.609006][ T5856] usb 3-1: Product: syz [ 208.613980][ T5856] usb 3-1: Manufacturer: syz [ 208.618575][ T5856] usb 3-1: SerialNumber: syz [ 208.624947][ T5856] usb 3-1: config 0 descriptor?? [ 208.631685][ T5856] quatech2 3-1:0.0: Quatech 2nd gen USB to Serial Driver converter detected [ 208.686508][ T9] ft260 0003:0403:6030.000D: failed to retrieve status: -32, no wakeup [ 208.755284][ T5930] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 208.839888][ T5856] usb 3-1: qt2_attach - failed to power on unit: -71 [ 208.856176][ T5856] quatech2 3-1:0.0: probe with driver quatech2 failed with error -71 [ 208.888231][ T5856] usb 3-1: USB disconnect, device number 15 [ 208.973955][ T5930] usb 1-1: device not accepting address 18, error -71 [ 208.987975][ T7598] input: syz1 as /devices/virtual/input/input14 [ 209.001200][ T5930] usb usb1-port1: unable to enumerate USB device [ 209.036096][ T7117] udevd[7117]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 209.081569][ T30] audit: type=1400 audit(1762892177.510:453): avc: denied { setopt } for pid=7594 comm="syz.3.437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 209.272833][ T9] usb 5-1: reset high-speed USB device number 29 using dummy_hcd [ 209.768442][ T7610] netlink: 4 bytes leftover after parsing attributes in process `syz.1.441'. [ 209.772835][ T24] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 209.779285][ T7610] netlink: 8 bytes leftover after parsing attributes in process `syz.1.441'. [ 209.947279][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 209.990852][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 210.005361][ T7615] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 210.005361][ T7615] program syz.1.441 not setting count and/or reply_len properly [ 210.046732][ T7620] netlink: 4 bytes leftover after parsing attributes in process `syz.0.442'. [ 210.200675][ T24] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 210.245720][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.305375][ T24] usb 3-1: config 0 descriptor?? [ 210.721477][ T24] cp2112 0003:10C4:EA90.000E: unknown main item tag 0x0 [ 210.735326][ T24] cp2112 0003:10C4:EA90.000E: unknown main item tag 0x0 [ 210.768899][ T24] cp2112 0003:10C4:EA90.000E: unknown main item tag 0x0 [ 210.796083][ T24] cp2112 0003:10C4:EA90.000E: unknown main item tag 0x0 [ 210.826297][ T24] cp2112 0003:10C4:EA90.000E: unknown main item tag 0x0 [ 210.863867][ T24] cp2112 0003:10C4:EA90.000E: unknown main item tag 0x0 [ 210.900132][ T24] cp2112 0003:10C4:EA90.000E: unknown main item tag 0x0 [ 211.023492][ T5930] usb 5-1: USB disconnect, device number 29 [ 211.058093][ T24] cp2112 0003:10C4:EA90.000E: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 211.704210][ T24] cp2112 0003:10C4:EA90.000E: Part Number: 0x82 Device Version: 0xFE [ 211.786522][ T24] cp2112 0003:10C4:EA90.000E: error requesting SMBus config [ 211.804914][ T24] cp2112 0003:10C4:EA90.000E: probe with driver cp2112 failed with error -5 [ 212.322974][ T5930] usb 5-1: new full-speed USB device number 30 using dummy_hcd [ 212.492393][ T7640] netlink: 8 bytes leftover after parsing attributes in process `syz.0.445'. [ 212.532832][ T52] Bluetooth: hci4: command 0x0c1a tx timeout [ 212.672860][ T5856] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 213.154749][ T5856] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 213.170902][ T5856] usb 4-1: config 0 has no interface number 0 [ 213.189916][ T5856] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 213.216011][ T5856] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.239291][ T5856] usb 4-1: config 0 descriptor?? [ 213.247561][ T5856] usb 4-1: selecting invalid altsetting 1 [ 213.316951][ T5930] usb 5-1: device descriptor read/64, error -71 [ 213.620848][ T5856] dvb_ttusb_budget: ttusb_init_controller: error [ 213.627259][ T5856] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 213.681133][ T24] usb 3-1: USB disconnect, device number 16 [ 213.892332][ T5856] DVB: Unable to find symbol cx22700_attach() [ 214.688422][ T5930] usb 5-1: new full-speed USB device number 31 using dummy_hcd [ 215.358370][ T5930] usb 5-1: device descriptor read/64, error -71 [ 215.414749][ T5856] DVB: Unable to find symbol tda10046_attach() [ 215.430666][ T5856] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 215.474269][ T5856] usb 4-1: USB disconnect, device number 21 [ 215.493054][ T5930] usb usb5-port1: attempt power cycle [ 215.668037][ T7672] netlink: 4 bytes leftover after parsing attributes in process `syz.1.454'. [ 215.682933][ T24] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 215.853126][ T5930] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 215.853704][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 216.068564][ T5930] usb 5-1: Using ep0 maxpacket: 16 [ 216.128177][ T24] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 216.128530][ T5930] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 216.146307][ T24] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 216.146385][ T24] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 216.146537][ T24] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 216.158462][ T9] usb 1-1: new low-speed USB device number 19 using dummy_hcd [ 216.185645][ T30] audit: type=1400 audit(1762892184.530:454): avc: denied { create } for pid=7674 comm="syz.3.457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 216.264740][ T5930] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 216.275722][ T5930] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 216.292933][ T5930] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 216.324453][ T5930] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 216.333577][ T5930] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.344076][ T30] audit: type=1400 audit(1762892184.780:455): avc: denied { ioctl } for pid=7674 comm="syz.3.457" path="socket:[16614]" dev="sockfs" ino=16614 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 216.369054][ T5930] usb 5-1: Product: syz [ 216.374078][ T5930] usb 5-1: Manufacturer: syz [ 216.375815][ T7677] syz.3.457 (7677): /proc/7674/oom_adj is deprecated, please use /proc/7674/oom_score_adj instead. [ 216.391062][ T5930] usb 5-1: SerialNumber: syz [ 216.422290][ T24] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 216.431769][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.440145][ T24] usb 3-1: Product: syz [ 216.446368][ T24] usb 3-1: Manufacturer: syz [ 216.448367][ T7683] netlink: 'syz.1.458': attribute type 1 has an invalid length. [ 216.451041][ T24] usb 3-1: SerialNumber: syz [ 216.464560][ T9] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 216.483141][ T9] usb 1-1: config 0 has no interface number 0 [ 216.489374][ T9] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 216.499031][ T7683] bond1: (slave gretap1): making interface the new active one [ 216.500882][ T9] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 216.520093][ T7683] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 216.529078][ T9] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 216.531939][ T7683] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8 sclass=netlink_route_socket pid=7683 comm=syz.1.458 [ 216.538618][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.567951][ T9] usb 1-1: config 0 descriptor?? [ 216.574592][ T7673] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 216.594017][ T9] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 216.885881][ T7688] netlink: 8 bytes leftover after parsing attributes in process `syz.1.459'. [ 218.361590][ T5930] usb 5-1: 0:2 : does not exist [ 218.913044][ T24] usb 3-1: 0:2 : does not exist [ 218.919722][ T5930] usb 5-1: USB disconnect, device number 32 [ 218.973301][ T24] usb 3-1: USB disconnect, device number 17 [ 219.033876][ T5799] udevd[5799]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 219.113970][ T5877] usb 1-1: USB disconnect, device number 19 [ 219.231306][ T30] audit: type=1400 audit(1762892187.660:456): avc: denied { read } for pid=7705 comm="syz.3.464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 219.251494][ T30] audit: type=1400 audit(1762892187.680:457): avc: denied { read } for pid=7705 comm="syz.3.464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 221.106176][ T5930] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 221.168025][ T7728] team0: Port device dummy0 removed [ 221.188976][ T7728] bridge_slave_0: left allmulticast mode [ 221.204006][ T7728] bridge_slave_0: left promiscuous mode [ 221.215413][ T7728] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.227891][ T7728] bridge_slave_1: left allmulticast mode [ 221.235181][ T7728] bridge_slave_1: left promiscuous mode [ 221.240872][ T7728] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.254010][ T5930] usb 3-1: device descriptor read/64, error -71 [ 221.271860][ T7728] bond0: (slave bond_slave_0): Releasing backup interface [ 221.428315][ T7735] fuse: Bad value for 'rootmode' [ 221.452624][ T7735] ptrace attach of "./syz-executor exec"[5806] was attempted by ""[7735] [ 221.482234][ T7728] bond0: (slave bond_slave_1): Releasing backup interface [ 221.575056][ T7728] team0: Port device team_slave_0 removed [ 221.583250][ T5930] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 221.599195][ T7728] team0: Port device team_slave_1 removed [ 221.611668][ T7728] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 221.619661][ T7728] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 221.628569][ T7728] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 221.724992][ T7728] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 221.749138][ T7728] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 221.771994][ T7732] team0: Mode changed to "loadbalance" [ 221.783189][ T5930] usb 3-1: device descriptor read/64, error -71 [ 221.931486][ T5930] usb usb3-port1: attempt power cycle [ 222.382867][ T5877] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 222.616639][ T5877] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 222.882663][ T5877] usb 1-1: config 0 interface 0 has no altsetting 0 [ 222.902669][ T7745] genirq: Flags mismatch irq 7. 00200000 (comedi_parport) vs. 00200080 (ttyS3) [ 222.920144][ T5877] usb 1-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=b1.f9 [ 222.932860][ T5930] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 222.939830][ T5877] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.960338][ T5877] usb 1-1: Product: syz [ 222.964770][ T5877] usb 1-1: Manufacturer: syz [ 222.970791][ T5877] usb 1-1: SerialNumber: syz [ 222.979922][ T5930] usb 3-1: device descriptor read/8, error -71 [ 222.992682][ T5877] usb 1-1: config 0 descriptor?? [ 223.026529][ T5877] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 223.130274][ T5877] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 223.145884][ T5877] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 223.155294][ T5877] usb 1-1: media controller created [ 223.752820][ T976] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 223.792133][ T5877] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 223.843673][ T5877] DVB: Unable to find symbol tda10046_attach() [ 223.850022][ T5877] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 223.978885][ T5877] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 224.043311][ T976] usb 2-1: Using ep0 maxpacket: 16 [ 224.054987][ T976] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 224.582956][ T5877] dvb_usb_m920x 1-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 224.608469][ T5877] usb 1-1: USB disconnect, device number 20 [ 224.632033][ T976] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 224.638297][ T30] audit: type=1400 audit(1762892193.060:458): avc: denied { block_suspend } for pid=7762 comm="syz.3.477" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 224.663525][ T976] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 224.663565][ T976] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 224.669745][ T976] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 226.052836][ T976] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.060851][ T976] usb 2-1: Product: syz [ 226.232098][ T976] usb 2-1: Manufacturer: syz [ 226.997201][ T976] usb 2-1: SerialNumber: syz [ 227.028988][ T7765] SELinux: Context system_u:object is not valid (left unmapped). [ 227.078603][ T30] audit: type=1400 audit(1762892195.500:459): avc: denied { relabelto } for pid=7756 comm="syz.4.476" name="cgroup.procs" dev="cgroup" ino=178 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object" [ 227.224266][ T976] usb 2-1: can't set config #1, error -71 [ 227.836729][ T976] usb 2-1: USB disconnect, device number 15 [ 227.844257][ T30] audit: type=1400 audit(1762892195.500:460): avc: denied { associate } for pid=7756 comm="syz.4.476" name="cgroup.procs" dev="cgroup" ino=178 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object" [ 227.871247][ T30] audit: type=1326 audit(1762892195.640:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7772 comm="syz.0.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62fdf8f6c9 code=0x7ffc0000 [ 228.027604][ T30] audit: type=1326 audit(1762892195.640:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7772 comm="syz.0.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62fdf8f6c9 code=0x7ffc0000 [ 228.203670][ T30] audit: type=1326 audit(1762892195.640:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7772 comm="syz.0.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f62fdf8f6c9 code=0x7ffc0000 [ 228.235843][ T30] audit: type=1326 audit(1762892195.640:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7772 comm="syz.0.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62fdf8f6c9 code=0x7ffc0000 [ 228.269929][ T30] audit: type=1326 audit(1762892195.640:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7772 comm="syz.0.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62fdf8f6c9 code=0x7ffc0000 [ 228.298388][ T30] audit: type=1326 audit(1762892195.660:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7772 comm="syz.0.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f62fdf8f6c9 code=0x7ffc0000 [ 228.324454][ T30] audit: type=1326 audit(1762892195.660:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7772 comm="syz.0.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62fdf8f6c9 code=0x7ffc0000 [ 228.759742][ T976] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 228.809048][ T5930] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 228.994497][ T976] usb 3-1: Using ep0 maxpacket: 32 [ 229.035500][ T976] usb 3-1: config 0 has an invalid interface number: 182 but max is 0 [ 229.093361][ T976] usb 3-1: config 0 has no interface number 0 [ 229.240407][ T5930] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 229.251841][ T976] usb 3-1: config 0 interface 182 has no altsetting 0 [ 229.269526][ T5930] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 229.294573][ T976] usb 3-1: New USB device found, idVendor=05e9, idProduct=0009, bcdDevice=73.db [ 229.338954][ T5930] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.352545][ T976] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.394662][ T5930] usb 1-1: config 0 descriptor?? [ 229.404878][ T976] usb 3-1: Product: syz [ 229.414493][ T976] usb 3-1: Manufacturer: syz [ 229.419916][ T976] usb 3-1: SerialNumber: syz [ 229.425928][ T5930] pwc: Askey VC010 type 2 USB webcam detected. [ 229.444571][ T976] usb 3-1: config 0 descriptor?? [ 229.453358][ T976] hub 3-1:0.182: bad descriptor, ignoring hub [ 229.461059][ T976] hub 3-1:0.182: probe with driver hub failed with error -5 [ 229.572823][ T43] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 229.668244][ T976] kaweth 3-1:0.182: Firmware present in device. [ 229.712842][ T43] usb 2-1: device descriptor read/64, error -71 [ 229.742866][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 229.742884][ T30] audit: type=1400 audit(1762892198.160:472): avc: denied { write } for pid=7802 comm="syz.4.487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 229.938491][ T5930] pwc: recv_control_msg error -32 req 02 val 2b00 [ 229.946360][ T976] kaweth 3-1:0.182: Statistics collection: 0 [ 229.952979][ T5930] pwc: recv_control_msg error -32 req 02 val 2700 [ 229.963698][ T976] kaweth 3-1:0.182: Multicast filter limit: 0 [ 229.970256][ T5930] pwc: recv_control_msg error -32 req 02 val 2c00 [ 229.978708][ T5930] pwc: recv_control_msg error -32 req 04 val 1000 [ 229.987339][ T976] kaweth 3-1:0.182: MTU: 0 [ 229.992148][ T5930] pwc: recv_control_msg error -32 req 04 val 1300 [ 230.001440][ T5930] pwc: recv_control_msg error -32 req 04 val 1400 [ 230.011692][ T30] audit: type=1400 audit(1762892198.160:473): avc: denied { ioctl } for pid=7802 comm="syz.4.487" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 230.011787][ T976] kaweth 3-1:0.182: Read MAC address 00:00:00:00:00:00 [ 230.053398][ T5930] pwc: recv_control_msg error -32 req 02 val 2000 [ 230.063459][ T5930] pwc: recv_control_msg error -32 req 02 val 2100 [ 230.097048][ T5930] pwc: recv_control_msg error -32 req 04 val 1500 [ 230.097120][ T30] audit: type=1400 audit(1762892198.160:474): avc: denied { map } for pid=7802 comm="syz.4.487" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 230.107837][ T5930] pwc: recv_control_msg error -32 req 02 val 2500 [ 230.136950][ T43] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 230.138221][ T5930] pwc: recv_control_msg error -32 req 02 val 2400 [ 230.185206][ T30] audit: type=1400 audit(1762892198.160:475): avc: denied { execute } for pid=7802 comm="syz.4.487" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 230.233063][ T5930] pwc: recv_control_msg error -32 req 02 val 2600 [ 230.242132][ T30] audit: type=1400 audit(1762892198.650:476): avc: denied { setopt } for pid=7807 comm="syz.3.488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 230.323025][ T43] usb 2-1: device descriptor read/64, error -71 [ 230.454203][ T43] usb usb2-port1: attempt power cycle [ 230.812849][ T43] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 230.833275][ T43] usb 2-1: device descriptor read/8, error -71 [ 230.839991][ T5930] pwc: recv_control_msg error -71 req 02 val 2900 [ 230.888345][ T5930] pwc: recv_control_msg error -71 req 02 val 2800 [ 230.898655][ T5930] pwc: recv_control_msg error -71 req 04 val 1100 [ 230.928759][ T5930] pwc: recv_control_msg error -71 req 04 val 1200 [ 230.958823][ T5930] pwc: Registered as video103. [ 230.989167][ T5930] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input15 [ 231.046616][ T5930] usb 1-1: USB disconnect, device number 21 [ 231.125155][ T43] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 231.219799][ T43] usb 2-1: device descriptor read/8, error -71 [ 231.538800][ T43] usb usb2-port1: unable to enumerate USB device [ 231.703695][ T7819] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 231.715156][ T7819] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 233.784051][ T7842] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 235.683216][ T5930] usb 2-1: new low-speed USB device number 20 using dummy_hcd [ 235.845044][ T5930] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 235.853576][ T5930] usb 2-1: config 0 has no interface number 0 [ 235.874303][ T5930] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 235.891807][ T5930] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 235.994441][ T5930] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 236.004548][ T5930] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.024381][ T5930] usb 2-1: config 0 descriptor?? [ 236.030293][ T7855] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 236.613792][ T5930] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 236.674357][ T976] kaweth 3-1:0.182: Error setting SOFS wait [ 236.680416][ T976] kaweth 3-1:0.182: probe with driver kaweth failed with error -5 [ 236.753510][ T976] usb 3-1: USB disconnect, device number 22 [ 237.655604][ T5922] usb 2-1: USB disconnect, device number 20 [ 237.673139][ T976] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 237.813333][ T976] usb 3-1: device descriptor read/64, error -71 [ 238.053151][ T976] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 238.222805][ T976] usb 3-1: device descriptor read/64, error -71 [ 238.333811][ T976] usb usb3-port1: attempt power cycle [ 239.034949][ T976] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 239.063706][ T976] usb 3-1: device descriptor read/8, error -71 [ 239.293759][ T7895] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 240.023493][ T976] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 240.650386][ T7908] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 240.772320][ T976] usb 3-1: device not accepting address 26, error -71 [ 240.840839][ T976] usb usb3-port1: unable to enumerate USB device [ 240.871449][ T30] audit: type=1400 audit(1762892209.300:477): avc: denied { getopt } for pid=7912 comm="syz.4.512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 240.904963][ T7914] FAULT_INJECTION: forcing a failure. [ 240.904963][ T7914] name failslab, interval 1, probability 0, space 0, times 0 [ 240.982848][ T7914] CPU: 1 UID: 0 PID: 7914 Comm: syz.0.513 Not tainted syzkaller #0 PREEMPT(full) [ 240.982870][ T7914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 240.982879][ T7914] Call Trace: [ 240.982883][ T7914] [ 240.982888][ T7914] dump_stack_lvl+0x16c/0x1f0 [ 240.982908][ T7914] should_fail_ex+0x512/0x640 [ 240.982921][ T7914] ? fs_reclaim_acquire+0xae/0x150 [ 240.982935][ T7914] should_failslab+0xc2/0x120 [ 240.982948][ T7914] __kmalloc_noprof+0xdd/0x880 [ 240.982962][ T7914] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 240.982978][ T7914] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 240.982989][ T7914] tomoyo_realpath_from_path+0xc2/0x6e0 [ 240.983002][ T7914] ? tomoyo_profile+0x47/0x60 [ 240.983017][ T7914] tomoyo_path_number_perm+0x245/0x580 [ 240.983026][ T7914] ? tomoyo_path_number_perm+0x237/0x580 [ 240.983037][ T7914] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 240.983048][ T7914] ? find_held_lock+0x2b/0x80 [ 240.983074][ T7914] ? find_held_lock+0x2b/0x80 [ 240.983086][ T7914] ? hook_file_ioctl_common+0x145/0x410 [ 240.983103][ T7914] ? __fget_files+0x20e/0x3c0 [ 240.983116][ T7914] security_file_ioctl+0x9b/0x240 [ 240.983129][ T7914] __x64_sys_ioctl+0xb7/0x210 [ 240.983145][ T7914] do_syscall_64+0xcd/0xfa0 [ 240.983157][ T7914] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.983167][ T7914] RIP: 0033:0x7f62fdf8f6c9 [ 240.983176][ T7914] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 240.983187][ T7914] RSP: 002b:00007f62fc1f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 240.983197][ T7914] RAX: ffffffffffffffda RBX: 00007f62fe1e5fa0 RCX: 00007f62fdf8f6c9 [ 240.983204][ T7914] RDX: 00002000000001c0 RSI: 0000000000005600 RDI: 0000000000000003 [ 240.983210][ T7914] RBP: 00007f62fc1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 240.983216][ T7914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 240.983222][ T7914] R13: 00007f62fe1e6038 R14: 00007f62fe1e5fa0 R15: 00007ffd7f360cb8 [ 240.983236][ T7914] [ 240.983253][ T7914] ERROR: Out of memory at tomoyo_realpath_from_path. [ 241.255430][ T7917] ocfs2: Bad value for 'barrier' [ 241.410529][ T30] audit: type=1400 audit(1762892209.840:478): avc: denied { listen } for pid=7922 comm="syz.0.515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 241.905127][ T5930] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 242.052995][ T43] usb 3-1: new low-speed USB device number 27 using dummy_hcd [ 242.073014][ T5930] usb 4-1: Using ep0 maxpacket: 32 [ 242.079412][ T5930] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 242.091090][ T5930] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 242.101340][ T5930] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 242.111631][ T5930] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.128772][ T5930] usb 4-1: config 0 descriptor?? [ 242.216521][ T43] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 242.233837][ T43] usb 3-1: config 0 has no interface number 0 [ 242.241020][ T43] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 242.252835][ T5877] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 242.302822][ T43] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 242.322427][ T43] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 242.332425][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.356967][ T43] usb 3-1: config 0 descriptor?? [ 242.402832][ T5877] usb 2-1: Using ep0 maxpacket: 16 [ 242.458484][ T5877] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 242.467495][ T5877] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 242.478819][ T7930] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 242.492929][ T5877] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 242.502651][ T5877] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 243.012936][ T30] audit: type=1400 audit(1762892210.990:479): avc: denied { write } for pid=7935 comm="syz.4.520" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 243.036189][ T43] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 243.069628][ T5930] usbhid 4-1:0.0: can't add hid device: -32 [ 243.097701][ T5930] usbhid 4-1:0.0: probe with driver usbhid failed with error -32 [ 243.109935][ T5877] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 243.117169][ T5930] usb 4-1: USB disconnect, device number 22 [ 243.119404][ T5877] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.141317][ T5877] usb 2-1: Product: syz [ 243.146880][ T5877] usb 2-1: Manufacturer: syz [ 243.158999][ T5877] usb 2-1: SerialNumber: syz [ 243.730692][ T5877] usb 2-1: 0:2 : does not exist [ 243.746741][ T5877] usb 2-1: USB disconnect, device number 21 [ 243.789442][ T24] usb 3-1: USB disconnect, device number 27 [ 243.829909][ T5799] udevd[5799]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 244.343077][ T5893] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 244.472831][ T5893] usb 4-1: device descriptor read/64, error -71 [ 244.743143][ T5893] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 244.872799][ T5893] usb 4-1: device descriptor read/64, error -71 [ 245.011173][ T5893] usb usb4-port1: attempt power cycle [ 245.512855][ T5893] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 245.652852][ T5893] usb 4-1: device descriptor read/8, error -71 [ 246.062864][ T5893] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 246.184705][ T5893] usb 4-1: device descriptor read/8, error -71 [ 246.247605][ T7974] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (comedi_parport) [ 246.368213][ T7958] FAT-fs (loop3): unable to read boot sector [ 246.375258][ T30] audit: type=1400 audit(1762892214.770:480): avc: denied { create } for pid=7952 comm="syz.1.523" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 246.435996][ T30] audit: type=1400 audit(1762892214.800:481): avc: denied { mounton } for pid=7952 comm="syz.1.523" path="/114/file0" dev="tmpfs" ino=622 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 246.447947][ T5893] usb usb4-port1: unable to enumerate USB device [ 247.366979][ T24] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 247.862926][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 247.877507][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 247.890214][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 247.900056][ T24] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 247.910146][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.922421][ T24] usb 4-1: config 0 descriptor?? [ 247.976146][ T5893] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 248.043175][ T5946] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 248.103676][ T30] audit: type=1400 audit(1762892216.540:482): avc: denied { unlink } for pid=5813 comm="syz-executor" name="file0" dev="tmpfs" ino=622 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 248.133390][ T5930] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 248.153548][ T5893] usb 5-1: Using ep0 maxpacket: 16 [ 248.160311][ T5893] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 248.169233][ T5893] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 248.179866][ T5893] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 248.191071][ T5893] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 248.213364][ T5893] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 248.222417][ T5893] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.230862][ T5946] usb 1-1: Using ep0 maxpacket: 16 [ 248.237106][ T5893] usb 5-1: Product: syz [ 248.241822][ T5893] usb 5-1: Manufacturer: syz [ 248.247083][ T5946] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 248.256701][ T5946] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 248.268189][ T5893] usb 5-1: SerialNumber: syz [ 248.273341][ T5946] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 248.284278][ T5946] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 248.323209][ T5930] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 248.336512][ T5930] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 248.346490][ T5930] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 248.356138][ T5930] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.358479][ T24] usbhid 4-1:0.0: can't add hid device: -32 [ 248.365725][ T5946] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 248.371761][ T24] usbhid 4-1:0.0: probe with driver usbhid failed with error -32 [ 248.381857][ T5946] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.498583][ T5930] usb 3-1: config 0 descriptor?? [ 248.902291][ T5946] usb 1-1: Product: syz [ 248.915075][ T24] usb 4-1: USB disconnect, device number 27 [ 248.917414][ T5946] usb 1-1: Manufacturer: syz [ 249.004859][ T5946] usb 1-1: SerialNumber: syz [ 249.244773][ T5930] cp2112 0003:10C4:EA90.000F: unknown main item tag 0x0 [ 249.274990][ T5893] usb 5-1: 0:2 : does not exist [ 249.279992][ T5930] cp2112 0003:10C4:EA90.000F: unknown main item tag 0x0 [ 249.302048][ T5930] cp2112 0003:10C4:EA90.000F: unknown main item tag 0x0 [ 249.310360][ T5893] usb 5-1: USB disconnect, device number 33 [ 249.320391][ T5930] cp2112 0003:10C4:EA90.000F: unknown main item tag 0x0 [ 249.328209][ T5930] cp2112 0003:10C4:EA90.000F: unknown main item tag 0x0 [ 249.336406][ T5930] cp2112 0003:10C4:EA90.000F: unknown main item tag 0x0 [ 249.344286][ T5930] cp2112 0003:10C4:EA90.000F: unknown main item tag 0x0 [ 249.362067][ T5930] cp2112 0003:10C4:EA90.000F: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 249.443832][ T5930] cp2112 0003:10C4:EA90.000F: Part Number: 0x82 Device Version: 0xFE [ 249.532941][ T5922] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 249.692830][ T5922] usb 2-1: Using ep0 maxpacket: 16 [ 249.774654][ T5922] usb 2-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 249.792318][ T5922] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 249.793426][ T5946] usb 1-1: 0:2 : does not exist [ 249.805467][ T5922] usb 2-1: Product: syz [ 249.805486][ T5922] usb 2-1: Manufacturer: syz [ 249.805500][ T5922] usb 2-1: SerialNumber: syz [ 249.811306][ T5922] usb 2-1: config 0 descriptor?? [ 249.884879][ T5946] usb 1-1: USB disconnect, device number 22 [ 250.303138][ T5930] cp2112 0003:10C4:EA90.000F: error reading lock byte: -32 [ 250.331233][ T5930] usb 3-1: USB disconnect, device number 28 [ 252.408698][ T5940] usb 5-1: new full-speed USB device number 34 using dummy_hcd [ 252.464123][ T5922] usb 2-1: USB disconnect, device number 22 [ 252.562862][ T5940] usb 5-1: device descriptor read/64, error -71 [ 252.579347][ T30] audit: type=1400 audit(1762892221.010:483): avc: denied { accept } for pid=8033 comm="syz.2.545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 252.688339][ T8035] netlink: 8 bytes leftover after parsing attributes in process `syz.2.545'. [ 252.703077][ T8039] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 252.738262][ T8035] 8021q: adding VLAN 0 to HW filter on device bond1 [ 252.815676][ T5940] usb 5-1: new full-speed USB device number 35 using dummy_hcd [ 252.982873][ T5922] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 252.982887][ T5930] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 252.993235][ T5940] usb 5-1: device descriptor read/64, error -71 [ 253.115200][ T5940] usb usb5-port1: attempt power cycle [ 253.133193][ T5930] usb 4-1: Using ep0 maxpacket: 32 [ 253.141157][ T5930] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 253.161024][ T5922] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 253.170221][ T5922] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.178515][ T5922] usb 2-1: Product: syz [ 253.182896][ T5930] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 253.182922][ T5922] usb 2-1: Manufacturer: syz [ 253.182978][ T5922] usb 2-1: SerialNumber: syz [ 253.215107][ T5930] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 253.222699][ T5922] usb 2-1: config 0 descriptor?? [ 253.244444][ T5930] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.268865][ T5930] usb 4-1: config 0 descriptor?? [ 253.343107][ T5946] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 253.483159][ T5940] usb 5-1: new full-speed USB device number 36 using dummy_hcd [ 253.493288][ T5946] usb 3-1: Using ep0 maxpacket: 16 [ 253.501254][ T5946] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 253.511030][ T5940] usb 5-1: device descriptor read/8, error -71 [ 253.518483][ T5946] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 253.530804][ T5946] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 253.539992][ T5946] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 253.547709][ T30] audit: type=1400 audit(1762892221.980:484): avc: denied { bind } for pid=8048 comm="syz.0.551" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 253.555314][ T5946] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 253.585781][ T30] audit: type=1400 audit(1762892221.980:485): avc: denied { node_bind } for pid=8048 comm="syz.0.551" saddr=fec0:ffff::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 253.609196][ T5946] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.619171][ T5946] usb 3-1: Product: syz [ 253.623648][ T5946] usb 3-1: Manufacturer: syz [ 253.628288][ T5946] usb 3-1: SerialNumber: syz [ 253.706160][ T5930] usbhid 4-1:0.0: can't add hid device: -32 [ 253.718826][ T5930] usbhid 4-1:0.0: probe with driver usbhid failed with error -32 [ 253.749918][ T5930] usb 4-1: USB disconnect, device number 28 [ 253.862119][ T5922] usb 2-1: Firmware: major: 9, minor: 0, hardware type: ATUSB (0) [ 253.903092][ T24] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 254.239670][ T5922] usb 2-1: failed to fetch extended address, random address set [ 254.243418][ T5946] usb 3-1: 0:2 : does not exist [ 254.304473][ T5946] usb 3-1: USB disconnect, device number 29 [ 254.308195][ T30] audit: type=1400 audit(1762892222.740:486): avc: denied { search } for pid=5478 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 254.357931][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 254.373685][ T5799] udevd[5799]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 254.377546][ T30] audit: type=1400 audit(1762892222.760:487): avc: denied { search } for pid=5478 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 254.413861][ T5922] usb 2-1: USB disconnect, device number 23 [ 254.420107][ T30] audit: type=1400 audit(1762892222.760:488): avc: denied { search } for pid=5478 comm="dhcpcd" name="data" dev="tmpfs" ino=13 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 254.425303][ T24] usb 1-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice=30.46 [ 254.455930][ T30] audit: type=1400 audit(1762892222.770:489): avc: denied { read } for pid=5478 comm="dhcpcd" name="n102" dev="tmpfs" ino=4770 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 254.478280][ T30] audit: type=1400 audit(1762892222.770:490): avc: denied { open } for pid=5478 comm="dhcpcd" path="/run/udev/data/n102" dev="tmpfs" ino=4770 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 254.501994][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.544683][ T24] usb 1-1: config 0 descriptor?? [ 254.562817][ T30] audit: type=1400 audit(1762892222.770:491): avc: denied { getattr } for pid=5478 comm="dhcpcd" path="/run/udev/data/n102" dev="tmpfs" ino=4770 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 255.246797][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.254093][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.511524][ T30] audit: type=1400 audit(1762892223.940:492): avc: denied { append } for pid=8068 comm="syz.4.557" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 255.723130][ T5922] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 255.817833][ T8078] netlink: 4 bytes leftover after parsing attributes in process `syz.1.559'. [ 255.903145][ T5922] usb 3-1: Using ep0 maxpacket: 16 [ 255.946274][ T5922] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 255.983280][ T5922] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 256.012172][ T5922] usb 3-1: Product: syz [ 256.025940][ T5922] usb 3-1: Manufacturer: syz [ 256.039932][ T5922] usb 3-1: SerialNumber: syz [ 256.062211][ T5922] usb 3-1: config 0 descriptor?? [ 256.871741][ T5946] usb 1-1: USB disconnect, device number 23 [ 257.602940][ T24] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 257.712851][ T5922] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 257.842797][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 257.849482][ T24] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 257.859451][ T24] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 257.879975][ T24] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 257.892632][ T24] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 257.918315][ T24] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 257.931475][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.945715][ T24] usb 2-1: Product: syz [ 257.951012][ T24] usb 2-1: Manufacturer: syz [ 257.959669][ T24] usb 2-1: SerialNumber: syz [ 257.985565][ T5922] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 257.998712][ T5922] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 258.012102][ T5922] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 258.026960][ T5922] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 258.041055][ T5922] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 258.054846][ T5922] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.069699][ T5922] usb 4-1: config 0 descriptor?? [ 258.558203][ T24] usb 2-1: 0:2 : does not exist [ 258.563197][ T5940] usb 3-1: USB disconnect, device number 30 [ 258.623115][ T24] usb 2-1: USB disconnect, device number 24 [ 258.683228][ T8121] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 258.699140][ T8121] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 258.788011][ T5922] hdpvr 4-1:0.0: firmware version 0x26 dated S¶zŸŒ‹“î‹ŽhHfÐï3;¨&X^„œ wÒΖŠ g/ƒ µn#»† [ 259.368561][ T5922] hdpvr 4-1:0.0: untested firmware, the driver might not work. [ 260.518847][ T5922] hdpvr 4-1:0.0: device init failed [ 260.544652][ T5922] hdpvr 4-1:0.0: probe with driver hdpvr failed with error -12 [ 260.586467][ T5922] usb 4-1: USB disconnect, device number 29 [ 260.641886][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 260.641901][ T30] audit: type=1400 audit(1762892229.070:494): avc: denied { write } for pid=8139 comm="syz.3.577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 260.723095][ T5893] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 261.463678][ T5893] usb 2-1: Using ep0 maxpacket: 32 [ 261.688684][ T5893] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 261.731028][ T5893] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 261.794794][ T8150] netlink: 4 bytes leftover after parsing attributes in process `syz.4.580'. [ 261.807733][ T5893] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.833053][ T8150] netlink: 8 bytes leftover after parsing attributes in process `syz.4.580'. [ 261.833231][ T5893] usb 2-1: Product: syz [ 261.863048][ T5893] usb 2-1: Manufacturer: syz [ 261.868061][ T5893] usb 2-1: SerialNumber: syz [ 261.939006][ T8153] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 261.939006][ T8153] program syz.4.580 not setting count and/or reply_len properly [ 262.326548][ T8153] syz.4.580 (8153): drop_caches: 2 [ 262.332611][ T8153] syz.4.580 (8153): drop_caches: 2 [ 262.362879][ T5946] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 262.458506][ T8135] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 262.479658][ T8135] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 262.490605][ T8135] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 262.501253][ T8135] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 262.524163][ T5946] usb 4-1: Using ep0 maxpacket: 32 [ 262.533996][ T5946] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 262.546719][ T5946] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 262.558106][ T8135] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 262.580753][ T5946] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 262.601730][ T5946] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.618172][ T8135] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 262.657628][ T8135] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 262.694365][ T5946] usb 4-1: config 0 descriptor?? [ 262.702455][ T8135] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 262.712372][ T8135] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 262.721041][ T8135] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 262.759520][ T5893] cdc_ncm 2-1:1.0: bind() failure [ 263.282950][ T5946] ft260 0003:0403:6030.0010: unknown main item tag 0x7 [ 263.300634][ T5893] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 263.321860][ T5893] cdc_ncm 2-1:1.1: bind() failure [ 263.343835][ T5893] usb 2-1: USB disconnect, device number 25 [ 263.527025][ T5946] ft260 0003:0403:6030.0010: chip code: 6424 8183 [ 263.536884][ T8170] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.544177][ T8170] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.733172][ T5877] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 263.756925][ T5893] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 263.765476][ T5946] ft260 0003:0403:6030.0010: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.3-1/input0 [ 263.782242][ T30] audit: type=1400 audit(1762892232.210:495): avc: denied { wake_alarm } for pid=8180 comm="syz.0.589" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 263.886346][ T30] audit: type=1400 audit(1762892232.270:496): avc: denied { listen } for pid=8180 comm="syz.0.589" lport=55915 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 263.909902][ T30] audit: type=1400 audit(1762892232.270:497): avc: denied { write } for pid=8180 comm="syz.0.589" lport=55915 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 263.937016][ T5877] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 263.937061][ T5946] ft260 0003:0403:6030.0010: failed to retrieve status: -32, no wakeup [ 263.955827][ T30] audit: type=1400 audit(1762892232.270:498): avc: denied { setopt } for pid=8180 comm="syz.0.589" lport=55915 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 263.981186][ T5877] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 264.023416][ T5893] usb 2-1: Using ep0 maxpacket: 16 [ 264.032266][ T5893] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 264.067846][ T5877] usb 5-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 264.077117][ T5877] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.079568][ T8188] netlink: 12 bytes leftover after parsing attributes in process `syz.2.590'. [ 264.087234][ T5877] usb 5-1: Product: syz [ 264.098949][ T5877] usb 5-1: Manufacturer: syz [ 264.103630][ T5877] usb 5-1: SerialNumber: syz [ 264.109444][ T5893] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 264.123831][ T5877] usb 5-1: config 0 descriptor?? [ 264.133320][ T8176] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 264.145023][ T8176] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 264.152293][ T5893] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 264.192107][ T8188] ip6tnl1: entered promiscuous mode [ 264.198310][ T5893] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 264.236191][ T5893] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 264.277838][ T8193] FAULT_INJECTION: forcing a failure. [ 264.277838][ T8193] name failslab, interval 1, probability 0, space 0, times 0 [ 264.291759][ T8193] CPU: 0 UID: 0 PID: 8193 Comm: syz.0.591 Not tainted syzkaller #0 PREEMPT(full) [ 264.291782][ T8193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 264.291793][ T8193] Call Trace: [ 264.291798][ T8193] [ 264.291805][ T8193] dump_stack_lvl+0x16c/0x1f0 [ 264.291838][ T8193] should_fail_ex+0x512/0x640 [ 264.291859][ T8193] ? __kvmalloc_node_noprof+0x12e/0x9c0 [ 264.291881][ T8193] should_failslab+0xc2/0x120 [ 264.291902][ T8193] __kvmalloc_node_noprof+0x141/0x9c0 [ 264.291921][ T8193] ? proc_sys_call_handler+0x286/0x570 [ 264.291945][ T8193] ? sysctl_perm+0x14c/0x1b0 [ 264.291972][ T8193] ? proc_sys_call_handler+0x286/0x570 [ 264.291993][ T8193] proc_sys_call_handler+0x286/0x570 [ 264.292020][ T8193] ? __pfx_proc_sys_call_handler+0x10/0x10 [ 264.292046][ T8193] ? splice_from_pipe_next+0x1f7/0x5d0 [ 264.292070][ T8193] iter_file_splice_write+0xa24/0x12e0 [ 264.292104][ T8193] ? __pfx_iter_file_splice_write+0x10/0x10 [ 264.292125][ T8193] ? __pfx_copy_splice_read+0x10/0x10 [ 264.292154][ T8193] ? __pfx_iter_file_splice_write+0x10/0x10 [ 264.292173][ T8193] direct_splice_actor+0x192/0x6c0 [ 264.292193][ T8193] splice_direct_to_actor+0x345/0xa30 [ 264.292211][ T8193] ? __pfx_direct_splice_actor+0x10/0x10 [ 264.292232][ T8193] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 264.292247][ T8193] ? get_pid_task+0xfc/0x250 [ 264.292269][ T8193] do_splice_direct+0x174/0x240 [ 264.292286][ T8193] ? __pfx_do_splice_direct+0x10/0x10 [ 264.292302][ T8193] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 264.292334][ T8193] ? rw_verify_area+0xcf/0x6c0 [ 264.292362][ T8193] do_sendfile+0xb06/0xe50 [ 264.292392][ T8193] ? __pfx_do_sendfile+0x10/0x10 [ 264.292427][ T8193] __x64_sys_sendfile64+0x154/0x220 [ 264.292449][ T8193] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 264.292468][ T8193] ? xfd_validate_state+0x61/0x180 [ 264.292508][ T8193] do_syscall_64+0xcd/0xfa0 [ 264.292527][ T8193] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.292542][ T8193] RIP: 0033:0x7f62fdf8f6c9 [ 264.292557][ T8193] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 264.292574][ T8193] RSP: 002b:00007f62fc1d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 264.292591][ T8193] RAX: ffffffffffffffda RBX: 00007f62fe1e6090 RCX: 00007f62fdf8f6c9 [ 264.292603][ T8193] RDX: 0000200000002080 RSI: 0000000000000005 RDI: 0000000000000006 [ 264.292613][ T8193] RBP: 00007f62fc1d5090 R08: 0000000000000000 R09: 0000000000000000 [ 264.292623][ T8193] R10: 000000000000021c R11: 0000000000000246 R12: 0000000000000002 [ 264.292633][ T8193] R13: 00007f62fe1e6128 R14: 00007f62fe1e6090 R15: 00007ffd7f360cb8 [ 264.292658][ T8193] [ 264.683132][ T5893] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.691220][ T5893] usb 2-1: Product: syz [ 264.695504][ T5893] usb 2-1: Manufacturer: syz [ 264.700116][ T5893] usb 2-1: SerialNumber: syz [ 264.785086][ T8176] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 264.902945][ T5946] usb 4-1: reset high-speed USB device number 30 using dummy_hcd [ 264.938133][ T8176] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 265.427959][ T5893] usb 2-1: 0:2 : does not exist [ 265.501045][ T5893] usb 2-1: USB disconnect, device number 26 [ 265.643198][ T5877] dm9601 5-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 265.922897][ T5922] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 266.272330][ T5877] usb 5-1: USB disconnect, device number 38 [ 267.477590][ T5922] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 268.439007][ T5930] usb 4-1: USB disconnect, device number 30 [ 268.483076][ T5922] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.491093][ T5922] usb 1-1: Product: syz [ 268.576958][ T30] audit: type=1400 audit(1762892237.000:499): avc: denied { write } for pid=8215 comm="syz.3.597" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 268.597354][ T5922] usb 1-1: Manufacturer: syz [ 268.601959][ T5922] usb 1-1: SerialNumber: syz [ 268.615752][ T5922] usb 1-1: config 0 descriptor?? [ 268.783065][ T5893] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 268.804181][ T5922] usb 1-1: Firmware version (0.0) predates our first public release. [ 268.812413][ T5922] usb 1-1: Please update to version 0.2 or newer [ 268.822630][ T30] audit: type=1326 audit(1762892237.250:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8227 comm="syz.0.601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62fdf8f6c9 code=0x7ffc0000 [ 268.854448][ T30] audit: type=1326 audit(1762892237.250:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8227 comm="syz.0.601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62fdf8f6c9 code=0x7ffc0000 [ 269.378877][ T30] audit: type=1326 audit(1762892237.260:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8227 comm="syz.0.601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62fdf8f6c9 code=0x7ffc0000 [ 269.419190][ T30] audit: type=1326 audit(1762892237.260:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8227 comm="syz.0.601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f62fdf8f6c9 code=0x7ffc0000 [ 269.446661][ T5922] usb 1-1: USB disconnect, device number 24 [ 269.459137][ T30] audit: type=1326 audit(1762892237.260:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8227 comm="syz.0.601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62fdf8f6c9 code=0x7ffc0000 [ 269.499635][ T30] audit: type=1326 audit(1762892237.260:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8227 comm="syz.0.601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62fdf8f6c9 code=0x7ffc0000 [ 269.540339][ T30] audit: type=1326 audit(1762892237.260:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8227 comm="syz.0.601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62fdf8f6c9 code=0x7ffc0000 [ 269.585646][ T5893] usb 5-1: Using ep0 maxpacket: 16 [ 269.600728][ T30] audit: type=1326 audit(1762892237.260:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8227 comm="syz.0.601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62fdf8f6c9 code=0x7ffc0000 [ 269.631412][ T30] audit: type=1326 audit(1762892237.260:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8227 comm="syz.0.601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f62fdf8f6c9 code=0x7ffc0000 [ 269.665926][ T5893] usb 5-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 269.692215][ T5893] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 269.715784][ T5893] usb 5-1: Product: syz [ 269.722103][ T5893] usb 5-1: Manufacturer: syz [ 269.732442][ T5893] usb 5-1: SerialNumber: syz [ 269.826094][ T5893] usb 5-1: config 0 descriptor?? [ 270.265164][ T5922] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 270.475130][ T5922] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 270.499502][ T5922] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 270.516716][ T5922] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.535717][ T5922] usb 1-1: config 0 descriptor?? [ 270.571048][ T8248] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 270.582470][ T8248] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 271.316317][ T5922] keytouch 0003:0926:3333.0011: fixing up Keytouch IEC report descriptor [ 271.363556][ T5922] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0011/input/input16 [ 271.402207][ T4332] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.411376][ T4332] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.422387][ T8259] netlink: 'syz.2.606': attribute type 14 has an invalid length. [ 271.423803][ T4332] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.439476][ T8259] netlink: 4 bytes leftover after parsing attributes in process `syz.2.606'. [ 271.440154][ T4332] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.475986][ T4332] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 271.484773][ T8259] netlink: 'syz.2.606': attribute type 14 has an invalid length. [ 271.495019][ T4332] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 271.504355][ T8259] netlink: 4 bytes leftover after parsing attributes in process `syz.2.606'. [ 271.507708][ T5922] keytouch 0003:0926:3333.0011: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 271.526464][ T4332] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 271.590295][ T4332] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 272.073083][ T5930] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 272.233281][ T5930] usb 4-1: Using ep0 maxpacket: 16 [ 272.242482][ T5930] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 272.257297][ T5930] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 272.276438][ T5930] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 272.291813][ T5930] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 272.307867][ T5930] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 272.317874][ T5930] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.326551][ T5930] usb 4-1: Product: syz [ 272.330869][ T5930] usb 4-1: Manufacturer: syz [ 272.336100][ T5930] usb 4-1: SerialNumber: syz [ 272.512705][ T5946] usb 5-1: USB disconnect, device number 39 [ 273.070521][ T8228] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 273.086306][ T8279] netlink: 4 bytes leftover after parsing attributes in process `syz.2.612'. [ 273.104695][ T8280] fuse: Bad value for 'fd' [ 273.109279][ T8279] netlink: 8 bytes leftover after parsing attributes in process `syz.2.612'. [ 273.123609][ T8228] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 273.136405][ T8228] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 273.146121][ T8228] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 273.208983][ T8281] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 273.208983][ T8281] program syz.2.612 not setting count and/or reply_len properly [ 273.235860][ T5930] usb 4-1: 0:2 : does not exist [ 273.313577][ T8281] syz.2.612 (8281): drop_caches: 2 [ 273.403707][ T8281] syz.2.612 (8281): drop_caches: 2 [ 273.422965][ T5856] usb 5-1: new full-speed USB device number 40 using dummy_hcd [ 273.555785][ T5930] usb 4-1: USB disconnect, device number 31 [ 273.601996][ T5946] usb 1-1: USB disconnect, device number 25 [ 273.651253][ T5856] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 273.682189][ T5856] usb 5-1: config 0 interface 0 has no altsetting 0 [ 273.700236][ T5856] usb 5-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.00 [ 273.709639][ T5856] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.735771][ T5856] usb 5-1: config 0 descriptor?? [ 273.831786][ T8280] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 273.911518][ T8291] autofs: Bad value for 'fd' [ 274.315500][ T5823] Bluetooth: hci1: command 0x0c1a tx timeout [ 274.383784][ T8294] overlay: Unknown parameter '/' [ 274.433905][ T8294] tipc: Failed to remove unknown binding: 66,1,1/0:65298265/65298267 [ 274.646815][ T8294] tipc: Failed to remove unknown binding: 66,1,1/0:65298265/65298267 [ 274.675844][ T5856] logitech 0003:046D:C293.0012: item fetching failed at offset 5/7 [ 274.679261][ T30] kauditd_printk_skb: 445 callbacks suppressed [ 274.679275][ T30] audit: type=1400 audit(1762892243.110:934): avc: denied { listen } for pid=8293 comm="syz.1.618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 274.703866][ T5856] logitech 0003:046D:C293.0012: parse failed [ 274.765098][ T5856] logitech 0003:046D:C293.0012: probe with driver logitech failed with error -22 [ 274.936693][ T5856] usb 5-1: USB disconnect, device number 40 [ 275.039072][ T5946] usb 2-1: new full-speed USB device number 27 using dummy_hcd [ 275.153882][ T5823] Bluetooth: hci4: command 0x0c1a tx timeout [ 275.160237][ T5823] Bluetooth: hci3: command 0x0c1a tx timeout [ 275.166768][ T5823] Bluetooth: hci2: command 0x0c1a tx timeout [ 275.397754][ T5946] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 275.418427][ T8305] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 275.433072][ T5946] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 275.444299][ T5946] usb 2-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 275.455402][ T5946] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 275.463663][ T5946] usb 2-1: Manufacturer: syz [ 275.666708][ T5946] usb 2-1: config 0 descriptor?? [ 276.050912][ T8315] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (comedi_parport) [ 276.180460][ T5946] cougar 0003:060B:700A.0013: unknown main item tag 0x0 [ 276.195058][ T5946] cougar 0003:060B:700A.0013: unknown main item tag 0x0 [ 276.205198][ T5946] cougar 0003:060B:700A.0013: unknown main item tag 0x0 [ 276.273914][ T5946] cougar 0003:060B:700A.0013: unknown main item tag 0x0 [ 276.313605][ T5946] cougar 0003:060B:700A.0013: unknown main item tag 0x0 [ 276.676562][ T5946] cougar 0003:060B:700A.0013: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 276.708955][ T5946] usb 2-1: USB disconnect, device number 27 [ 276.869728][ T8321] fido_id[8321]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 276.948369][ T30] audit: type=1400 audit(1762892245.380:935): avc: denied { watch } for pid=8323 comm="syz.3.624" path="/117/file0" dev="tmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 278.219037][ T8357] autofs: Bad value for 'fd' [ 278.635650][ T5946] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 278.901472][ T8350] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check. [ 278.960664][ T5946] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 278.974697][ T5946] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 279.003683][ T30] audit: type=1400 audit(1762892247.430:936): avc: denied { bind } for pid=8363 comm="syz.0.630" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 279.128521][ T5946] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 279.140438][ T5946] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.150522][ T30] audit: type=1400 audit(1762892247.580:937): avc: denied { connect } for pid=8363 comm="syz.0.630" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 279.170737][ T30] audit: type=1400 audit(1762892247.580:938): avc: denied { write } for pid=8363 comm="syz.0.630" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 279.193791][ T5946] usb 4-1: config 0 descriptor?? [ 279.256128][ T30] audit: type=1400 audit(1762892247.690:939): avc: denied { read } for pid=8363 comm="syz.0.630" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 281.214159][ T5922] usb 5-1: new low-speed USB device number 41 using dummy_hcd [ 281.618466][ T5922] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 282.032686][ T5922] usb 5-1: config 0 has no interface number 0 [ 282.048973][ T5946] usb 4-1: USB disconnect, device number 32 [ 282.049460][ T5922] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 282.137789][ T5922] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 282.149143][ T5922] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 282.158244][ T5922] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.204270][ T5922] usb 5-1: config 0 descriptor?? [ 282.209885][ T8384] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 282.312489][ T5922] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 282.512855][ T5856] usb 3-1: new low-speed USB device number 31 using dummy_hcd [ 282.707283][ T5856] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 282.715830][ C1] iowarrior 5-1:0.1: iowarrior_callback - usb_submit_urb failed with result -1 [ 282.725073][ T5856] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 282.725614][ T5893] usb 5-1: USB disconnect, device number 41 [ 282.735389][ T5856] usb 3-1: config 0 has no interface number 0 [ 282.735445][ T5856] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 282.735466][ T5856] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.766133][ T5856] usb 3-1: config 0 descriptor?? [ 282.787451][ T5856] iowarrior 3-1:0.1: no interrupt-in endpoint found [ 282.892838][ T5946] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 282.990529][ T5893] usb 3-1: USB disconnect, device number 31 [ 283.042823][ T5946] usb 2-1: Using ep0 maxpacket: 32 [ 283.050010][ T5946] usb 2-1: config 0 has an invalid descriptor of length 211, skipping remainder of the config [ 283.062535][ T5946] usb 2-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 283.071853][ T5946] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.083591][ T5946] usb 2-1: Product: syz [ 283.087761][ T5946] usb 2-1: Manufacturer: syz [ 283.092384][ T5946] usb 2-1: SerialNumber: syz [ 283.098876][ T5946] usb 2-1: config 0 descriptor?? [ 283.106873][ T5946] usb 2-1: bad CDC descriptors [ 283.112550][ T5946] usb 2-1: unsupported MDLM descriptors [ 283.329323][ T5856] usb 2-1: USB disconnect, device number 28 [ 284.302786][ T5946] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 284.517637][ T5922] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 284.541519][ T5946] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 284.637788][ T5946] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 284.649789][ T5946] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 284.676454][ T5946] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.753986][ T5946] usb 3-1: config 0 descriptor?? [ 284.756113][ T5922] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 284.877015][ T5922] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.929561][ T5922] usb 4-1: Product: syz [ 284.954164][ T5922] usb 4-1: Manufacturer: syz [ 284.972883][ T5922] usb 4-1: SerialNumber: syz [ 285.028914][ T5922] usb 4-1: config 0 descriptor?? [ 285.123714][ T8445] netlink: 4 bytes leftover after parsing attributes in process `syz.1.652'. [ 285.203465][ T5946] cp2112 0003:10C4:EA90.0014: unknown main item tag 0x0 [ 285.213903][ T5946] cp2112 0003:10C4:EA90.0014: unknown main item tag 0x0 [ 285.221609][ T5946] cp2112 0003:10C4:EA90.0014: unknown main item tag 0x0 [ 285.233100][ T5946] cp2112 0003:10C4:EA90.0014: unknown main item tag 0x0 [ 285.240297][ T5946] cp2112 0003:10C4:EA90.0014: unknown main item tag 0x0 [ 285.247367][ T5946] cp2112 0003:10C4:EA90.0014: unknown main item tag 0x0 [ 285.254830][ T5946] cp2112 0003:10C4:EA90.0014: unknown main item tag 0x0 [ 285.301912][ T5946] cp2112 0003:10C4:EA90.0014: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 285.789610][ T5946] cp2112 0003:10C4:EA90.0014: Part Number: 0x82 Device Version: 0xFE [ 286.001598][ T5922] usb 4-1: Firmware: major: 9, minor: 0, hardware type: ATUSB (0) [ 286.049097][ T8460] netlink: 140 bytes leftover after parsing attributes in process `syz.0.655'. [ 286.214851][ T5922] usb 4-1: failed to fetch extended address, random address set [ 286.283169][ T5922] usb 4-1: USB disconnect, device number 33 [ 287.014542][ T976] usb 3-1: reset high-speed USB device number 32 using dummy_hcd [ 287.525972][ T30] audit: type=1400 audit(1762892255.960:940): avc: denied { execute } for pid=8473 comm="syz.0.658" dev="hugetlbfs" ino=20672 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 287.745950][ T30] audit: type=1400 audit(1762892255.990:941): avc: denied { execute_no_trans } for pid=8473 comm="syz.0.658" path=2F6D656D66643A2D42D54E49C56A9A707070F00A84AE0A202864656C6574656429 dev="hugetlbfs" ino=20672 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 287.866093][ T30] audit: type=1400 audit(1762892256.050:942): avc: denied { mounton } for pid=8473 comm="syz.0.658" path="/proc/486/task" dev="proc" ino=20671 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 287.899097][ T5893] usb 3-1: USB disconnect, device number 32 [ 288.152939][ T8491] syz.4.663 (8491): drop_caches: 2 [ 288.219154][ T8491] syz.4.663 (8491): drop_caches: 2 [ 288.503109][ T5893] usb 3-1: new low-speed USB device number 33 using dummy_hcd [ 288.692994][ T5877] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 289.198827][ T5893] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 289.208835][ T5893] usb 3-1: config 0 has no interface number 0 [ 289.255075][ T5893] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 289.324117][ T5893] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 289.387631][ T5877] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 290.231924][ T5877] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.556486][ T5893] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 290.565822][ T5893] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.675647][ T5893] usb 3-1: config 0 descriptor?? [ 290.681969][ T8485] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 290.705759][ T5893] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 290.731985][ T5877] usb 2-1: Product: syz [ 290.743013][ T5877] usb 2-1: Manufacturer: syz [ 290.764047][ T5877] usb 2-1: SerialNumber: syz [ 290.787864][ T5877] usb 2-1: config 0 descriptor?? [ 290.883202][ T5893] usb 3-1: USB disconnect, device number 33 [ 291.025280][ T5922] usb 1-1: new full-speed USB device number 26 using dummy_hcd [ 291.161696][ T8528] netlink: 4 bytes leftover after parsing attributes in process `syz.3.670'. [ 291.263205][ T5893] usb 3-1: new full-speed USB device number 34 using dummy_hcd [ 291.652203][ T5877] usb 2-1: Firmware: major: 9, minor: 0, hardware type: ATUSB (0) [ 291.692833][ T5922] usb 1-1: device descriptor read/64, error -71 [ 291.825698][ T5893] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 291.846577][ T5893] usb 3-1: config 0 has no interface number 0 [ 291.855184][ T5877] usb 2-1: failed to fetch extended address, random address set [ 291.863068][ T5893] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 291.893560][ T5893] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.932852][ T5922] usb 1-1: new full-speed USB device number 27 using dummy_hcd [ 291.933216][ T5893] usb 3-1: config 0 descriptor?? [ 291.955093][ T5893] usb 3-1: selecting invalid altsetting 1 [ 291.989406][ T5893] dvb_ttusb_budget: ttusb_init_controller: error [ 292.005741][ T5893] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 292.065338][ T5877] usb 2-1: USB disconnect, device number 29 [ 292.125728][ T5922] usb 1-1: device descriptor read/64, error -71 [ 292.258220][ T5922] usb usb1-port1: attempt power cycle [ 292.299050][ T5893] DVB: Unable to find symbol cx22700_attach() [ 292.513269][ T5893] DVB: Unable to find symbol tda10046_attach() [ 292.521424][ T5893] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 292.611569][ T8554] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 292.618111][ T8554] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 292.681572][ T8554] vhci_hcd vhci_hcd.0: Device attached [ 292.860776][ T5893] usb 3-1: USB disconnect, device number 34 [ 292.984923][ T5877] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 293.583401][ T24] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 293.591234][ T5922] usb usb1-port1: Cannot enable. Maybe the USB cable is bad? [ 293.722896][ T5922] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 293.742789][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 293.748471][ T5922] usb 1-1: Using ep0 maxpacket: 8 [ 293.759363][ T5922] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 293.769890][ T5922] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 293.780255][ T24] usb 2-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 293.789696][ T24] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 293.798143][ T24] usb 2-1: Product: syz [ 293.803123][ T5922] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 293.812148][ T5922] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.820888][ T24] usb 2-1: Manufacturer: syz [ 293.825566][ T24] usb 2-1: SerialNumber: syz [ 293.839836][ T5922] usb 1-1: Product: syz [ 293.844671][ T24] usb 2-1: config 0 descriptor?? [ 293.849728][ T5922] usb 1-1: Manufacturer: syz [ 293.854474][ T5922] usb 1-1: SerialNumber: syz [ 293.942818][ T43] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 294.060112][ T8569] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (comedi_parport) [ 294.133305][ T43] usb 4-1: Using ep0 maxpacket: 32 [ 294.268294][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 294.280218][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 294.300214][ T43] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 294.309817][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.436702][ T43] usb 4-1: config 0 descriptor?? [ 294.541239][ T30] audit: type=1400 audit(1762892262.970:943): avc: denied { write } for pid=8575 comm="syz.2.680" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 294.566529][ T8576] tipc: Started in network mode [ 294.571500][ T8576] tipc: Node identity 1aab9dee24b2, cluster identity 4711 [ 294.580068][ T8576] tipc: Enabled bearer , priority 0 [ 294.630216][ T8576] syzkaller0: entered promiscuous mode [ 294.637954][ T8576] syzkaller0: entered allmulticast mode [ 294.645396][ T8576] tipc: Resetting bearer [ 294.685329][ T30] audit: type=1400 audit(1762892263.120:944): avc: denied { execute } for pid=8578 comm="syz.4.681" path="/proc/487/task/488/net/tcp6" dev="proc" ino=4026533303 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=file permissive=1 [ 294.710968][ T8575] tipc: Resetting bearer [ 294.900364][ T43] usbhid 4-1:0.0: can't add hid device: -32 [ 294.906471][ T43] usbhid 4-1:0.0: probe with driver usbhid failed with error -32 [ 294.932969][ T43] usb 4-1: USB disconnect, device number 34 [ 295.053141][ T976] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 295.223106][ T976] usb 5-1: Using ep0 maxpacket: 8 [ 295.230174][ T976] usb 5-1: config index 0 descriptor too short (expected 6427, got 27) [ 295.239281][ T976] usb 5-1: config 0 has an invalid interface number: 21 but max is 0 [ 295.247525][ T976] usb 5-1: config 0 has no interface number 0 [ 295.254005][ T976] usb 5-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 295.265671][ T976] usb 5-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 295.277178][ T976] usb 5-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 295.289610][ T976] usb 5-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 295.303454][ T976] usb 5-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 295.311596][ T976] usb 5-1: Product: syz [ 295.318717][ T976] usb 5-1: config 0 descriptor?? [ 295.324918][ T8581] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 295.527076][ T8583] netlink: 116 bytes leftover after parsing attributes in process `syz.3.683'. [ 295.593666][ T8584] SELinux: Context system_u:object_r:memory_device_t:s0 is not valid (left unmapped). [ 295.610020][ T30] audit: type=1400 audit(1762892264.040:945): avc: denied { relabelto } for pid=8582 comm="syz.3.683" name=E91F7189591E9233614B dev="tmpfs" ino=720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sock_file permissive=1 trawcon="system_u:object_r:memory_device_t:s0" [ 295.611674][ T8584] 9pnet_fd: p9_fd_create_unix (8584): problem connecting socket: éq‰Y’3aK: -111 [ 295.682121][ T30] audit: type=1400 audit(1762892264.040:946): avc: denied { associate } for pid=8582 comm="syz.3.683" name=E91F7189591E9233614B dev="tmpfs" ino=720 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:memory_device_t:s0" [ 295.711670][ T5893] usb 1-1: USB disconnect, device number 29 [ 295.718631][ T5946] usb 2-1: USB disconnect, device number 30 [ 295.724688][ T8555] vhci_hcd: connection reset by peer [ 295.727053][ T30] audit: type=1400 audit(1762892264.040:947): avc: denied { mounton } for pid=8582 comm="syz.3.683" path=2F3133312FE91F7189591E9233614B dev="tmpfs" ino=720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sock_file permissive=1 trawcon="system_u:object_r:memory_device_t:s0" [ 295.733534][ T12] vhci_hcd: stop threads [ 297.075502][ T30] audit: type=1400 audit(1762892264.040:948): avc: denied { write } for pid=8582 comm="syz.3.683" name=E91F7189591E9233614B dev="tmpfs" ino=720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sock_file permissive=1 trawcon="system_u:object_r:memory_device_t:s0" [ 297.103931][ T30] audit: type=1400 audit(1762892264.410:949): avc: denied { read } for pid=8580 comm="syz.4.682" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 297.116121][ T9] tipc: Node number set to 1041866222 [ 297.131115][ T12] vhci_hcd: release socket [ 297.136762][ T12] vhci_hcd: disconnect device [ 297.191530][ T976] usb 5-1: USB disconnect, device number 42 [ 297.261275][ T8589] netlink: 'syz.0.685': attribute type 10 has an invalid length. [ 297.435877][ T8575] tipc: Disabling bearer [ 297.453278][ T8589] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 297.477558][ T30] audit: type=1400 audit(1762892265.910:950): avc: denied { unlink } for pid=5807 comm="syz-executor" name=E91F7189591E9233614B dev="tmpfs" ino=720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sock_file permissive=1 trawcon="system_u:object_r:memory_device_t:s0" [ 298.113190][ T5877] vhci_hcd: vhci_device speed not set [ 298.802632][ T43] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 298.811650][ T30] audit: type=1400 audit(1762892266.730:951): avc: denied { module_request } for pid=8600 comm="syz.4.690" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 298.908815][ T976] usb 2-1: new full-speed USB device number 31 using dummy_hcd [ 298.963594][ T8609] netlink: 'syz.2.692': attribute type 27 has an invalid length. [ 299.002234][ T8609] bridge1: left promiscuous mode [ 299.023662][ T8609] ip6tnl1: left promiscuous mode [ 299.034737][ T4332] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 299.043636][ T4332] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 299.052121][ T4332] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 299.062825][ T43] usb 1-1: Using ep0 maxpacket: 32 [ 299.069553][ T43] usb 1-1: config 0 has an invalid interface number: 16 but max is 0 [ 299.086660][ T43] usb 1-1: config 0 has no interface number 0 [ 299.090540][ T8609] 8021q: adding VLAN 0 to HW filter on device bond0 [ 299.093619][ T43] usb 1-1: config 0 interface 16 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 299.102425][ T976] usb 2-1: device descriptor read/64, error -71 [ 299.110233][ T43] usb 1-1: config 0 interface 16 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 299.120017][ T8609] 8021q: adding VLAN 0 to HW filter on device team0 [ 299.131253][ T43] usb 1-1: New USB device found, idVendor=0499, idProduct=102a, bcdDevice=85.2d [ 299.145878][ T8609] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 299.145905][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.169850][ T4332] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 299.178320][ T43] usb 1-1: Product: syz [ 299.189200][ T43] usb 1-1: Manufacturer: syz [ 299.196821][ T43] usb 1-1: SerialNumber: syz [ 299.221246][ T43] usb 1-1: config 0 descriptor?? [ 299.240460][ T8603] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 299.250126][ T43] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 299.260040][ T43] usb 1-1: invalid MIDI in EP 0 [ 299.264941][ T5946] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 299.335818][ T8618] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (comedi_parport) [ 299.447598][ T976] usb 2-1: new full-speed USB device number 32 using dummy_hcd [ 299.492161][ T5946] usb 5-1: Using ep0 maxpacket: 16 [ 299.640987][ T8619] netlink: 8 bytes leftover after parsing attributes in process `syz.2.696'. [ 299.653996][ T8619] netlink: 19 bytes leftover after parsing attributes in process `syz.2.696'. [ 299.774677][ T976] usb 2-1: device descriptor read/64, error -71 [ 299.984152][ T5946] usb 5-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 299.993710][ T5946] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 300.002257][ T5946] usb 5-1: Product: syz [ 300.006834][ T5946] usb 5-1: Manufacturer: syz [ 300.016701][ T5946] usb 5-1: SerialNumber: syz [ 300.032224][ T43] snd-usb-audio 1-1:0.16: probe with driver snd-usb-audio failed with error -22 [ 300.047735][ T5946] usb 5-1: config 0 descriptor?? [ 300.093343][ T976] usb usb2-port1: attempt power cycle [ 300.127934][ T5970] udevd[5970]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.16/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 300.286218][ T24] usb 1-1: USB disconnect, device number 30 [ 301.060786][ T976] usb 2-1: new full-speed USB device number 33 using dummy_hcd [ 301.099114][ T976] usb 2-1: device descriptor read/8, error -71 [ 301.117068][ T8640] overlayfs: missing 'lowerdir' [ 302.230830][ T5946] usb 5-1: USB disconnect, device number 43 [ 302.399786][ T5893] usb 1-1: new full-speed USB device number 31 using dummy_hcd [ 303.028593][ T5893] usb 1-1: device descriptor read/64, error -71 [ 303.035905][ T8661] ceph: No mds server is up or the cluster is laggy [ 303.113157][ T976] libceph: mon0 (1)[c::]:6789 connect error [ 303.384394][ T5940] libceph: mon0 (1)[c::]:6789 connect error [ 303.492787][ T5893] usb 1-1: new full-speed USB device number 32 using dummy_hcd [ 303.517465][ T30] audit: type=1400 audit(1762892271.950:952): avc: denied { create } for pid=8667 comm="syz.1.709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 303.564102][ T30] audit: type=1400 audit(1762892271.950:953): avc: denied { map } for pid=8667 comm="syz.1.709" path="socket:[19943]" dev="sockfs" ino=19943 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 303.612782][ T30] audit: type=1400 audit(1762892271.950:954): avc: denied { read } for pid=8667 comm="syz.1.709" path="socket:[19943]" dev="sockfs" ino=19943 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 304.478286][ T5893] usb 1-1: device descriptor read/64, error -71 [ 304.576896][ T8681] netlink: 'syz.2.712': attribute type 10 has an invalid length. [ 304.606251][ T5893] usb usb1-port1: attempt power cycle [ 304.634399][ T8681] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 305.788548][ T5940] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 305.957000][ T8710] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (comedi_parport) [ 306.095834][ T5940] usb 3-1: Using ep0 maxpacket: 32 [ 306.111663][ T5940] usb 3-1: config 0 has an invalid interface number: 89 but max is 0 [ 306.137989][ T5940] usb 3-1: config 0 has no interface number 0 [ 306.190658][ T5940] usb 3-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 306.216119][ T5940] usb 3-1: config 0 interface 89 has no altsetting 0 [ 306.261687][ T5940] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 306.302486][ T5940] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.324090][ T5940] usb 3-1: Product: syz [ 306.336602][ T5940] usb 3-1: Manufacturer: syz [ 306.365737][ T5940] usb 3-1: SerialNumber: syz [ 306.395304][ T5940] usb 3-1: config 0 descriptor?? [ 306.403740][ T5940] em28xx 3-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 306.656590][ T5940] em28xx 3-1:0.89: Video interface 89 found: [ 306.921600][ T30] audit: type=1400 audit(1762892275.210:955): avc: denied { connect } for pid=8693 comm="syz.2.716" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 306.942489][ T8694] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 306.952308][ T8694] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 307.192840][ T30] audit: type=1400 audit(1762892275.600:956): avc: denied { mount } for pid=8717 comm="syz.1.721" name="/" dev="ramfs" ino=21074 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 307.464242][ T976] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 307.624474][ T976] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 307.650337][ T30] audit: type=1400 audit(1762892276.080:957): avc: denied { getattr } for pid=8733 comm="syz.0.725" name="/" dev="dmabuf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 307.677258][ T976] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 307.751208][ T976] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 307.781686][ T976] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.806485][ T5940] em28xx 3-1:0.89: unknown em28xx chip ID (0) [ 307.830183][ T976] usb 5-1: config 0 descriptor?? [ 307.908871][ T5940] em28xx 3-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 307.917789][ T5940] em28xx 3-1:0.89: board has no eeprom [ 307.982847][ T5940] em28xx 3-1:0.89: Identified as Terratec Grabby (card=67) [ 308.014678][ T5940] em28xx 3-1:0.89: analog set to bulk mode. [ 308.043850][ T5893] em28xx 3-1:0.89: Registering V4L2 extension [ 308.115377][ T5893] em28xx 3-1:0.89: reading from i2c device at 0x4a failed (error=-5) [ 308.126006][ T5893] em28xx 3-1:0.89: reading from i2c device at 0x48 failed (error=-5) [ 308.137200][ T5893] em28xx 3-1:0.89: reading from i2c device at 0x42 failed (error=-5) [ 308.151530][ T5893] em28xx 3-1:0.89: reading from i2c device at 0x40 failed (error=-5) [ 308.165105][ T5893] em28xx 3-1:0.89: Config register raw data: 0xfffffffb [ 308.174818][ T5893] em28xx 3-1:0.89: AC97 chip type couldn't be determined [ 308.181993][ T5893] em28xx 3-1:0.89: No AC97 audio processor [ 308.239762][ T5893] usb 3-1: Decoder not found [ 308.285239][ T8746] netlink: 4 bytes leftover after parsing attributes in process `syz.3.727'. [ 308.304297][ T8746] netlink: 8 bytes leftover after parsing attributes in process `syz.3.727'. [ 308.318953][ T976] cp2112 0003:10C4:EA90.0015: unknown main item tag 0x0 [ 308.335698][ T5893] em28xx 3-1:0.89: failed to create media graph [ 308.404045][ T976] cp2112 0003:10C4:EA90.0015: unknown main item tag 0x0 [ 308.411218][ T5893] em28xx 3-1:0.89: V4L2 device video103 deregistered [ 308.548269][ T8749] syz.3.727 (8749): drop_caches: 2 [ 308.570925][ T976] cp2112 0003:10C4:EA90.0015: unknown main item tag 0x0 [ 308.639349][ T976] cp2112 0003:10C4:EA90.0015: unknown main item tag 0x0 [ 308.654834][ T5893] em28xx 3-1:0.89: Registering snapshot button... [ 308.722190][ T976] cp2112 0003:10C4:EA90.0015: unknown main item tag 0x0 [ 308.732263][ T8748] ================================================================== [ 308.740331][ T8748] BUG: KASAN: slab-use-after-free in v4l2_fh_init+0x27d/0x2c0 [ 308.747784][ T8748] Read of size 8 at addr ffff888035938740 by task v4l_id/8748 [ 308.755229][ T8748] [ 308.757548][ T8748] CPU: 0 UID: 0 PID: 8748 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(full) [ 308.757568][ T8748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 308.757578][ T8748] Call Trace: [ 308.757586][ T8748] [ 308.757594][ T8748] dump_stack_lvl+0x116/0x1f0 [ 308.757625][ T8748] print_report+0xcd/0x630 [ 308.757644][ T8748] ? __virt_addr_valid+0x81/0x610 [ 308.757667][ T8748] ? __phys_addr+0xe8/0x180 [ 308.757690][ T8748] ? v4l2_fh_init+0x27d/0x2c0 [ 308.757706][ T8748] kasan_report+0xe0/0x110 [ 308.757725][ T8748] ? v4l2_fh_init+0x27d/0x2c0 [ 308.757743][ T8748] v4l2_fh_init+0x27d/0x2c0 [ 308.757759][ T8748] v4l2_fh_open+0x64/0xa0 [ 308.757773][ T8748] em28xx_v4l2_open+0x24e/0x7e0 [ 308.757793][ T8748] v4l2_open+0x1d2/0x5e0 [ 308.757817][ T8748] ? __pfx_v4l2_open+0x10/0x10 [ 308.757839][ T8748] chrdev_open+0x234/0x6a0 [ 308.757859][ T8748] ? __pfx_chrdev_open+0x10/0x10 [ 308.757877][ T8748] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 308.757899][ T8748] do_dentry_open+0x982/0x1530 [ 308.757916][ T8748] ? __pfx_chrdev_open+0x10/0x10 [ 308.757937][ T8748] vfs_open+0x82/0x3f0 [ 308.757958][ T8748] path_openat+0x1de4/0x2cb0 [ 308.757979][ T8748] ? __pfx_path_openat+0x10/0x10 [ 308.757996][ T8748] ? __lock_acquire+0xb8a/0x1c90 [ 308.758014][ T8748] do_filp_open+0x20b/0x470 [ 308.758036][ T8748] ? __pfx_do_filp_open+0x10/0x10 [ 308.758062][ T8748] ? alloc_fd+0x471/0x7d0 [ 308.758082][ T8748] do_sys_openat2+0x11b/0x1d0 [ 308.758102][ T8748] ? __pfx_do_sys_openat2+0x10/0x10 [ 308.758123][ T8748] ? find_held_lock+0x2b/0x80 [ 308.758143][ T8748] ? handle_mm_fault+0x2ab/0xd10 [ 308.758169][ T8748] __x64_sys_openat+0x174/0x210 [ 308.758191][ T8748] ? __pfx___x64_sys_openat+0x10/0x10 [ 308.758213][ T8748] ? do_user_addr_fault+0x843/0x1370 [ 308.758233][ T8748] do_syscall_64+0xcd/0xfa0 [ 308.758250][ T8748] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.758267][ T8748] RIP: 0033:0x7f97924a7407 [ 308.758281][ T8748] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 308.758298][ T8748] RSP: 002b:00007ffc892c9450 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 308.758314][ T8748] RAX: ffffffffffffffda RBX: 00007f9792b7c880 RCX: 00007f97924a7407 [ 308.758325][ T8748] RDX: 0000000000000000 RSI: 00007ffc892c9f1c RDI: ffffffffffffff9c [ 308.758336][ T8748] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 308.758346][ T8748] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 308.758356][ T8748] R13: 00007ffc892c96a0 R14: 00007f9792ce3000 R15: 000056215abd94d8 [ 308.758374][ T8748] [ 308.758379][ T8748] [ 309.017977][ T8748] Allocated by task 5893: [ 309.022286][ T8748] kasan_save_stack+0x33/0x60 [ 309.026945][ T8748] kasan_save_track+0x14/0x30 [ 309.031590][ T8748] __kasan_kmalloc+0xaa/0xb0 [ 309.036158][ T8748] em28xx_v4l2_init+0x114/0x4080 [ 309.041063][ T8748] em28xx_init_extension+0x13a/0x200 [ 309.046329][ T8748] request_module_async+0x61/0x70 [ 309.051323][ T8748] process_one_work+0x9cf/0x1b70 [ 309.056243][ T8748] worker_thread+0x6c8/0xf10 [ 309.060799][ T8748] kthread+0x3c5/0x780 [ 309.064834][ T8748] ret_from_fork+0x675/0x7d0 [ 309.069393][ T8748] ret_from_fork_asm+0x1a/0x30 [ 309.074142][ T8748] [ 309.076435][ T8748] Freed by task 5893: [ 309.080377][ T8748] kasan_save_stack+0x33/0x60 [ 309.085019][ T8748] kasan_save_track+0x14/0x30 [ 309.089661][ T8748] __kasan_save_free_info+0x3b/0x60 [ 309.094829][ T8748] __kasan_slab_free+0x5f/0x80 [ 309.099573][ T8748] kfree+0x2b8/0x6d0 [ 309.103440][ T8748] em28xx_v4l2_init+0x22b5/0x4080 [ 309.108430][ T8748] em28xx_init_extension+0x13a/0x200 [ 309.113681][ T8748] request_module_async+0x61/0x70 [ 309.118675][ T8748] process_one_work+0x9cf/0x1b70 [ 309.123594][ T8748] worker_thread+0x6c8/0xf10 [ 309.128163][ T8748] kthread+0x3c5/0x780 [ 309.132197][ T8748] ret_from_fork+0x675/0x7d0 [ 309.136765][ T8748] ret_from_fork_asm+0x1a/0x30 [ 309.141511][ T8748] [ 309.143820][ T8748] The buggy address belongs to the object at ffff888035938000 [ 309.143820][ T8748] which belongs to the cache kmalloc-8k of size 8192 [ 309.157856][ T8748] The buggy address is located 1856 bytes inside of [ 309.157856][ T8748] freed 8192-byte region [ffff888035938000, ffff88803593a000) [ 309.171815][ T8748] [ 309.174141][ T8748] The buggy address belongs to the physical page: [ 309.180528][ T8748] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x35938 [ 309.189267][ T8748] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 309.197731][ T8748] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 309.205686][ T8748] page_type: f5(slab) [ 309.209660][ T8748] raw: 00fff00000000040 ffff88813ffa7280 ffffea00013f3800 0000000000000005 [ 309.218231][ T8748] raw: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000 [ 309.226804][ T8748] head: 00fff00000000040 ffff88813ffa7280 ffffea00013f3800 0000000000000005 [ 309.235454][ T8748] head: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000 [ 309.244098][ T8748] head: 00fff00000000003 ffffea0000d64e01 00000000ffffffff 00000000ffffffff [ 309.252747][ T8748] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 309.261393][ T8748] page dumped because: kasan: bad access detected [ 309.267772][ T8748] page_owner tracks the page as allocated [ 309.273452][ T8748] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 8228, tgid 8227 (syz.0.601), ts 271605200354, free_ts 271387746012 [ 309.294694][ T8748] post_alloc_hook+0x1c0/0x230 [ 309.299434][ T8748] get_page_from_freelist+0x10a3/0x3a30 [ 309.304950][ T8748] __alloc_frozen_pages_noprof+0x25f/0x2470 [ 309.310812][ T8748] alloc_pages_mpol+0x1fb/0x550 [ 309.315701][ T8748] new_slab+0x24a/0x360 [ 309.319854][ T8748] ___slab_alloc+0xd79/0x1a50 [ 309.324529][ T8748] __slab_alloc.constprop.0+0x63/0x110 [ 309.329971][ T8748] __kmalloc_cache_noprof+0x477/0x780 [ 309.335329][ T8748] audit_log_d_path+0xed/0x200 [ 309.340074][ T8748] audit_log_d_path_exe+0x46/0x70 [ 309.345065][ T8748] audit_log_task+0x31d/0x3f0 [ 309.349730][ T8748] audit_seccomp+0x79/0x290 [ 309.354208][ T8748] __seccomp_filter+0xa74/0x11c0 [ 309.359113][ T8748] __secure_computing+0x287/0x3b0 [ 309.364102][ T8748] syscall_trace_enter+0x89/0x240 [ 309.369113][ T8748] do_syscall_64+0x3cd/0xfa0 [ 309.373684][ T8748] page last free pid 5799 tgid 5799 stack trace: [ 309.379984][ T8748] __free_frozen_pages+0x7df/0x1160 [ 309.385160][ T8748] __put_partials+0x130/0x170 [ 309.389817][ T8748] qlist_free_all+0x4d/0x120 [ 309.394382][ T8748] kasan_quarantine_reduce+0x195/0x1e0 [ 309.399818][ T8748] __kasan_slab_alloc+0x69/0x90 [ 309.404646][ T8748] kmem_cache_alloc_lru_noprof+0x254/0x6e0 [ 309.410432][ T8748] __d_alloc+0x32/0xae0 [ 309.414570][ T8748] d_alloc_parallel+0x111/0x1510 [ 309.419574][ T8748] __lookup_slow+0x193/0x460 [ 309.424145][ T8748] walk_component+0x353/0x5b0 [ 309.428804][ T8748] path_lookupat+0x142/0x6d0 [ 309.433381][ T8748] filename_lookup+0x224/0x5f0 [ 309.438393][ T8748] vfs_statx+0x101/0x3f0 [ 309.442611][ T8748] vfs_fstatat+0x7b/0xf0 [ 309.446830][ T8748] __do_sys_newfstatat+0x97/0x120 [ 309.451831][ T8748] do_syscall_64+0xcd/0xfa0 [ 309.456310][ T8748] [ 309.458609][ T8748] Memory state around the buggy address: [ 309.464211][ T8748] ffff888035938600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 309.472247][ T8748] ffff888035938680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 309.480282][ T8748] >ffff888035938700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 309.488324][ T8748] ^ [ 309.494447][ T8748] ffff888035938780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 309.502479][ T8748] ffff888035938800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 309.510511][ T8748] ================================================================== [ 309.522484][ T5893] input: em28xx snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.89/input/input18 [ 309.539518][ T8749] syz.3.727 (8749): drop_caches: 2 [ 309.544821][ T976] cp2112 0003:10C4:EA90.0015: unknown main item tag 0x0 [ 309.552402][ T976] cp2112 0003:10C4:EA90.0015: unknown main item tag 0x0 [ 309.565099][ T5877] usb 3-1: USB disconnect, device number 35 [ 309.572131][ T5877] em28xx 3-1:0.89: Disconnecting em28xx [ 309.581403][ T8748] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 309.588607][ T8748] CPU: 0 UID: 0 PID: 8748 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(full) [ 309.597522][ T8748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 309.607570][ T8748] Call Trace: [ 309.610845][ T8748] [ 309.613765][ T8748] dump_stack_lvl+0x3d/0x1f0 [ 309.618359][ T8748] vpanic+0x640/0x6f0 [ 309.622336][ T8748] panic+0xca/0xd0 [ 309.626057][ T8748] ? __pfx_panic+0x10/0x10 [ 309.630456][ T8748] ? v4l2_fh_init+0x27d/0x2c0 [ 309.635111][ T8748] ? preempt_schedule_common+0x44/0xc0 [ 309.640558][ T8748] ? preempt_schedule_thunk+0x16/0x30 [ 309.645913][ T8748] ? check_panic_on_warn+0x1f/0xb0 [ 309.651002][ T8748] check_panic_on_warn+0xab/0xb0 [ 309.655928][ T8748] end_report+0x107/0x170 [ 309.660235][ T8748] kasan_report+0xee/0x110 [ 309.664629][ T8748] ? v4l2_fh_init+0x27d/0x2c0 [ 309.669285][ T8748] v4l2_fh_init+0x27d/0x2c0 [ 309.673764][ T8748] v4l2_fh_open+0x64/0xa0 [ 309.678079][ T8748] em28xx_v4l2_open+0x24e/0x7e0 [ 309.682920][ T8748] v4l2_open+0x1d2/0x5e0 [ 309.687166][ T8748] ? __pfx_v4l2_open+0x10/0x10 [ 309.691911][ T8748] chrdev_open+0x234/0x6a0 [ 309.696312][ T8748] ? __pfx_chrdev_open+0x10/0x10 [ 309.701229][ T8748] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 309.707536][ T8748] do_dentry_open+0x982/0x1530 [ 309.712275][ T8748] ? __pfx_chrdev_open+0x10/0x10 [ 309.717190][ T8748] vfs_open+0x82/0x3f0 [ 309.721253][ T8748] path_openat+0x1de4/0x2cb0 [ 309.725835][ T8748] ? __pfx_path_openat+0x10/0x10 [ 309.730751][ T8748] ? __lock_acquire+0xb8a/0x1c90 [ 309.735669][ T8748] do_filp_open+0x20b/0x470 [ 309.740149][ T8748] ? __pfx_do_filp_open+0x10/0x10 [ 309.745169][ T8748] ? alloc_fd+0x471/0x7d0 [ 309.749480][ T8748] do_sys_openat2+0x11b/0x1d0 [ 309.754139][ T8748] ? __pfx_do_sys_openat2+0x10/0x10 [ 309.759315][ T8748] ? find_held_lock+0x2b/0x80 [ 309.763973][ T8748] ? handle_mm_fault+0x2ab/0xd10 [ 309.768897][ T8748] __x64_sys_openat+0x174/0x210 [ 309.773728][ T8748] ? __pfx___x64_sys_openat+0x10/0x10 [ 309.779092][ T8748] ? do_user_addr_fault+0x843/0x1370 [ 309.784388][ T8748] do_syscall_64+0xcd/0xfa0 [ 309.788897][ T8748] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.794782][ T8748] RIP: 0033:0x7f97924a7407 [ 309.799177][ T8748] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 309.818770][ T8748] RSP: 002b:00007ffc892c9450 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 309.827172][ T8748] RAX: ffffffffffffffda RBX: 00007f9792b7c880 RCX: 00007f97924a7407 [ 309.835125][ T8748] RDX: 0000000000000000 RSI: 00007ffc892c9f1c RDI: ffffffffffffff9c [ 309.843161][ T8748] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 309.851111][ T8748] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 309.859061][ T8748] R13: 00007ffc892c96a0 R14: 00007f9792ce3000 R15: 000056215abd94d8 [ 309.867016][ T8748] [ 309.870229][ T8748] Kernel Offset: disabled [ 309.874532][ T8748] Rebooting in 86400 seconds..