last executing test programs: 11.64187188s ago: executing program 1 (id=409): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x2) mmap(&(0x7f000076b000/0x4000)=nil, 0x4000, 0x3000002, 0x11012, r0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000001000"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ffffffff00"/28], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) prctl$PR_MCE_KILL(0x35, 0x1, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000080000000000000000000080850000000f00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000725e850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680)={r2}, 0xc) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000005, 0x3032, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) read$char_usb(r3, &(0x7f00000000c0)=""/245, 0xf5) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r5, 0x2, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000001c0)='m', 0xfffffdfc}]) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r4, 0xc04c5349, &(0x7f0000000000)={0x7, 0x4, 0xc}) sendmsg$AUDIT_USER(r4, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x54, 0x3ed, 0x300, 0x70bd29, 0x25dfdbfe, "73204bf120b94ee405b822a15b488bf1cc460c9915a1638fd26601d025a90fa3dc53c43b0dcd639b7ddd02c889bc54fe9c0c355df791f9c47f198da6662eb6c5bc", ["", ""]}, 0x54}, 0x1, 0x0, 0x0, 0x4004000}, 0x4000) 8.712389668s ago: executing program 1 (id=417): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) writev(r0, &(0x7f0000000600)=[{&(0x7f00000000c0)='s', 0x1}], 0x1) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f0000000100)={0x0, 0xa00}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r4, @ANYBLOB="080003"], 0x44}}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/\x00et/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44\x8cm\xa0\x8dN\xd4\xa2\x88\x00\xd1l,'}, 0x30) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1, 0x0, 0x1, 0x3, 0x7}, 0x20) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r6, 0x8b32, &(0x7f0000000040)) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r7, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000000208010100000800000000000000000609000100731bc7797a310000c33d473bbfac426027f083e72c752f7031c97e520fb82143ea84a3b78347657152d818c3855cd7cd04e25492fc27cb43c85e0fc3dcfbc913d992949330a3446b16ca9940e2fe810630aa8d41d019956db04c5127ee077d2779e48adff1d420fa5796f5d680be097bf82fe775009b01d1712f23c282d7edc06492e6c120c50a502f6490e9596a5da449"], 0x20}}, 0x40014) fchdir(r5) chroot(&(0x7f0000000300)='.\x00') openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) 8.249461622s ago: executing program 0 (id=419): socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x84, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioprio_set$pid(0x3, 0x0, 0x0) syz_init_net_socket$ax25(0x3, 0x3, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000440), r4) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000a00)={0x2c, &(0x7f0000000780)=ANY=[], 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0x7, 0x10001, 0x9, 0x8080, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5, 0x0, @value, @void, @void, @value}, 0x50) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/anycast6\x00') close_range(r5, 0xffffffffffffffff, 0x0) close(0x3) 8.16317116s ago: executing program 1 (id=420): socket$nl_route(0x10, 0x3, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYRES32], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xfffffffffffffec8) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async) prctl$PR_MCE_KILL(0x35, 0x0, 0x8) (async) prctl$PR_MCE_KILL(0x35, 0x0, 0x10) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x13, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x0, 0x801) (async) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x800) read(r3, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x0, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async) syz_open_dev$usbfs(0x0, 0x75, 0x101301) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) (async) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) (async) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f0000000340)={0x48}) (async) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000300)={0x28, 0x4, r7, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3}) r8 = fsmount(r4, 0x1, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) (async) syz_usb_connect(0x5, 0x94, &(0x7f0000000240)=ANY=[@ANYBLOB="12015002fea29d1040200029ea1001020301090282000104f8900109049c0806aa21810909050f1000020508fe09050a10400004e60f09050f002000050105090508102000000709072501023b08000005c50f00027c030f09050f1048000b06f2020631239ab8ec1a5cc4dcfdd79cdbc3640cbbc6166dfb67d817a289a4c88cb1fdc4c82fd96c303f79b25ba1058f4d9c6e5179"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) fchdir(r8) ioprio_set$pid(0x3, r0, 0x2000) (async) open(&(0x7f0000000040)='./file1\x00', 0x80202, 0x0) 8.052332434s ago: executing program 1 (id=421): r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010bd28710000000000000109022400010000000009040100010300000009210200000122050009058103"], 0x0) (async) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010bd28710000000000000109022400010000000009040100010300000009210200000122050009058103"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000000c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000c05"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_control_io(r1, &(0x7f00000000c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000c05"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000280)=0xffffffffffffff7b) setreuid(0x0, r2) 6.758799157s ago: executing program 0 (id=427): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$VIDIOC_CROPCAP(0xffffffffffffffff, 0xc02c563a, 0x0) r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000bc0)={0x24, 0x0, &(0x7f0000000b00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x4ff}}, 0x0, 0x0}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000940)={0x84, &(0x7f0000000040)=ANY=[@ANYBLOB="001006000000c63284f8bbbbbcfdfff393c0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) fcntl$setsig(0xffffffffffffffff, 0xa, 0x12) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00) ppoll(&(0x7f0000000100)=[{}], 0x1, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$setown(0xffffffffffffffff, 0x8, r0) tkill(r0, 0x13) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) preadv(r2, &(0x7f0000002400)=[{&(0x7f0000000100)=""/128, 0x80}, {&(0x7f00000001c0)=""/4091, 0xffb}, {&(0x7f00000011c0)=""/125, 0x7d}, {&(0x7f0000001240)=""/45, 0x2d}, {&(0x7f0000001280)=""/135, 0x87}, {&(0x7f0000001340)=""/4096, 0x1000}, {&(0x7f0000002340)=""/35, 0x23}], 0x7, 0x6, 0xe) socket(0x10, 0x3, 0x0) read$char_usb(r2, &(0x7f0000000000)=""/188, 0xbc) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) 6.162249085s ago: executing program 1 (id=432): r0 = syz_usb_connect$cdc_ecm(0x0, 0x53, &(0x7f0000000540)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x41, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x10, 0x2, 0x6, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x0, "0501000000c4"}, {0x5, 0x24, 0x0, 0x81}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, 0x0) syz_emit_vhci(&(0x7f0000000880)=ANY=[@ANYRESOCT=r0, @ANYRES16=0x0, @ANYRES8=r0, @ANYRES8=r0, @ANYRES32=r0], 0xf) r1 = io_uring_setup(0x4f01, &(0x7f0000000180)={0x0, 0x200fe}) r2 = socket$inet6(0xa, 0x6, 0x0) listen(r2, 0x400000001ffffffd) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYRES64=r1], &(0x7f0000000200)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_tracing={0x1a, 0x8, &(0x7f0000000280)=@raw=[@ldst={0x0, 0x2, 0x4, 0x7, 0x8, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @jmp={0x5, 0x1, 0x5, 0x7, 0x3, 0xfffffffffffffff4, 0x10}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x3}], &(0x7f0000000740)='GPL\x00', 0x3, 0x9e, &(0x7f0000000780)=""/158, 0x40f00, 0x40, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, &(0x7f0000000840)={0x8, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x1a8ea, 0xffffffffffffffff, 0x4, &(0x7f00000009c0)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000a00)=[{0x0, 0x4, 0x6}, {0x0, 0x1, 0xe, 0x2}, {0x3, 0x3, 0x10, 0x4}, {0x4, 0x2, 0x8, 0x6}], 0x10, 0x40, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, 0x49, 0x0, &(0x7f0000000680)="755bb05395201ad875a81f08fbf73c46403cbcf9922ed5e124d4576314b9d703e2270ea77e8be9b7d6a78d90f5cd95c2293b2397fd6fbb743e63ffe5e2e2d924e7f40180f4b1704f0f", 0x0}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) socket$rxrpc(0x21, 0x2, 0xa) r8 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r8, 0xc0285700, &(0x7f0000000100)={0x4, "000000000000de6bd7e000000009000000f01800"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r8, 0xc0285700, &(0x7f0000000300)={0x4, "a9780d4dc37a1d5c99c42eafb2723b49e4ed00a0172578e35bde00010000ff00", 0xffffffffffffffff}) read$FUSE(0xffffffffffffffff, &(0x7f0000001200)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$SYNC_IOC_MERGE(r9, 0xc0303e03, &(0x7f0000000040)={"bab0f85254d4c7f4ad5e8ba99afbd30a1fcfd9e5205901c46fef939368b7fa4e"}) mount$fuseblk(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', &(0x7f0000000240), 0x20034, &(0x7f0000000a40)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB="2c272a3d8330726f6f746d6f64653d303030303030303030303030303030303030363c3030302c757365", @ANYRESDEC=r10, @ANYBLOB=',group_id=', @ANYRESDEC=r11, @ANYBLOB=',uid>', @ANYRESDEC=0xee00, @ANYBLOB=',fowner=', @ANYRESDEC=r10, @ANYBLOB=',fsmagic=0x0000000000000009,\x00']) r12 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r12, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4e20, 0x0, @empty}, {0xa, 0x0, 0xf5, @mcast2}, 0xffffffffffffffff, 0x6}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r12, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}, {0xa, 0xfffc, 0x3, @local}}}, 0x48) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) 5.983303456s ago: executing program 3 (id=434): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000008100000008000300", @ANYRES32=r2, @ANYBLOB="200033c4e2250374472103d21c9cf4be515446006888fc00ffffffffffff08021100000171e1e2a30600840006000480"], 0x3c}, 0x1, 0x0, 0x0, 0x11}, 0x0) 5.957080199s ago: executing program 3 (id=435): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000001c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_STATFS(r1, &(0x7f0000002200)={0x60, 0x0, r2, {{0x0, 0x9, 0x1, 0xdd23, 0x80, 0x594f, 0x9, 0xd}}}, 0x60) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000040)={0x191, 0x258, 0x1e0, 0x40, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3}) dup(r1) ioctl$FBIOGET_FSCREENINFO(r0, 0x4602, &(0x7f0000000100)) 5.436776539s ago: executing program 2 (id=437): r0 = socket$inet6_dccp(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000400)={0xa, 0x4e21, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000040)=0x4, 0x4) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000003c0)={'syz0\x00', {0x0, 0x0, 0x0, 0x400}, 0xfffffffe, [0x0, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x8, 0x3, 0x0, 0xfffffffa, 0x711, 0x0, 0x80000001, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800004], [0x1, 0xffffffff, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x6e3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1ff, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xee, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffe1b, 0x0, 0x0, 0x0, 0xfffffffd, 0x8000]}, 0x45c) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r2, &(0x7f0000005940)=[{{&(0x7f0000000300)={0xa, 0x4e23, 0x80000000, @local, 0x4}, 0x1c, 0x0, 0x0, &(0x7f0000001940)=[@hoplimit_2292={{0x18, 0x29, 0x8, 0xcbe5}}], 0x18}}], 0x1, 0x200000c0) r3 = getpid() fchownat(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x1000) quotactl_fd$Q_GETINFO(0xffffffffffffffff, 0xffffffff80000501, 0x0, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r4, 0x0, 0x33, &(0x7f0000000000)=0xffffffff, 0x4) listen(r4, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x80049367, &(0x7f0000000840)) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = socket(0x15, 0x5, 0x0) getsockopt(r7, 0x200000000114, 0x2710, &(0x7f0000005ec0)=""/102394, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r1, &(0x7f00000000c0)="8f2a0a65bd8c002b0304000e0580a7b6070d63e286a5cefe", 0x5ac) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000080)=0xa, 0x4) 5.436596933s ago: executing program 3 (id=438): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) io_setup(0x222, &(0x7f0000000180)=0x0) io_submit(r1, 0x1a, &(0x7f00000000c0)=[&(0x7f0000000200)={0x900, 0x700, 0x8, 0x0, 0x0, r0, &(0x7f0000000000)='%', 0x1a000}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x30, 0x0, 0xffffffffffffffff, 0x0}]) 4.66931884s ago: executing program 3 (id=440): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) io_setup(0xa, 0x0) io_submit(0x0, 0x0, &(0x7f0000000180)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000000706010800000000000000000a0000040500018816117755"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYRES32=r1, @ANYRES32, @ANYBLOB="0100000000000000009ed683cf69bbe014f77624457436d3d7fdad9396d76f0cf381d484", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0300000000000000050100000400"/28], 0x50) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffd}, 0x18) r9 = openat$rtc(0xffffffffffffff9c, &(0x7f00000005c0), 0x4000, 0x0) getgroups(0x3, &(0x7f0000000600)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff]) sendmmsg$unix(r2, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000014c0)="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", 0x1000}, {&(0x7f0000000180)}, {&(0x7f00000024c0)="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", 0x1000}, {&(0x7f00000001c0)="4aaa7ced6a6347427ffeb75d510a843b4fc56f7e39ed87c521fee55a29aed872178a5693afe87cd01b0dfdd560254006d74799e446042a6a0d9a8d9b658d9241b64c03492aba0f628d462872bd8ab29c7361fcc05166fd780ec672646d9c3177f910fb3290235d8425dc7d037c211a6fe6df62b146b86f24b42a2dd7ab40b2ce353088027d4754346d62e21171736790469796015878b45252ccc19a7b79d79d6ca4888a1951b62f4e650bab42e3621a3191660066d44e9d66859d952c22da0e9150332639ea3038f8943dc88ecda40d741a8f790e7be5bfebadd9b2a013", 0xde}, {&(0x7f0000000340)="eb7f2ba04d936ac7fd56b69d5bf89a4f3565e4952f4c0c1f73f280bc466fc27a10620b79a55ea41526ce8031ba3b2264d5a354ecb472aa23b0f89ffd032855bec03b0b44923dad951376337804a761ba994bdd5cd6ed74c4f6374cda128ad328b89600026b933cac758029c2d4ad04177e81a21ed651c60c2c0b9352412663ccc5b6", 0x82}], 0x5, &(0x7f0000000640)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="800000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000028b5bd104bdaf8b0000000000800", @ANYRES32, @ANYRES32=r6, @ANYRES32=r7, @ANYRES32, @ANYRES32=r1, @ANYRES32, @ANYRES32=r3, @ANYRES32=r7, @ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32=r11, @ANYRES32=r1, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32, @ANYRES32=r8, @ANYRES32=r9, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r10, @ANYRES32=0xee01, @ANYRES32=r10, @ANYBLOB='\x00\x00\x00\x00'], 0xf0, 0x20000080}}], 0x1, 0x40815) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = syz_open_dev$vim2m(&(0x7f0000000140), 0x200000001003, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r13, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r14, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @random="0106002010ff"}) unshare(0x68060200) 4.174963753s ago: executing program 2 (id=441): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x8142, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) utimensat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x1100) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24004054}, 0x4040000) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS(r1, 0x4068aea3, &(0x7f0000000000)={0x74, 0x0, 0x12}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_REGS(r9, 0x4090ae82, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@text64={0x40, 0x0}], 0x1, 0x2d, &(0x7f0000000100)=[@cr4={0x1, 0x40000}], 0x1) 3.379286926s ago: executing program 0 (id=442): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r2, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) close_range(r0, 0xffffffffffffffff, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_SEND_PRIO(r3, 0x6b, 0x3, &(0x7f0000000000), &(0x7f0000000080)=0x4) 3.031149864s ago: executing program 2 (id=444): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc1105518, &(0x7f0000000040)={{0x2, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, [0x7, 0xfffffffffffffffc, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5fa, 0x0, 0x0, 0x8000000000000, 0x0, 0x9, 0x2592c14d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8, 0x40000, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7ff, 0xfffffffffffffffe, 0x8, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x200000, 0x6, 0x4, 0x6, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2000, 0x0, 0xfcbfffff, 0x8001]}) 3.030865987s ago: executing program 4 (id=445): ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0xb0a82) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) acct(&(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00') getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={0x0}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000040)={r1, 0x6, 0x20}, 0xc) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r2, 0x301, 0x0) 2.908198031s ago: executing program 0 (id=446): r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r1 = socket$netlink(0x10, 0x3, 0x0) (rerun: 32) ioctl$sock_SIOCETHTOOL(r1, 0x894a, &(0x7f0000000040)={'vlan1\x00', 0x0}) (async, rerun: 32) r2 = syz_open_dev$vcsn(&(0x7f0000000100), 0xffffffffffffffbd, 0xc0000) (async, rerun: 32) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0) (async) r4 = socket$vsock_stream(0x28, 0x1, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000200000080000000000000", @ANYRES32=r2, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000180)=0x13, 0x4) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0xfffffffffffffe01, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a0b04000000000000000002000000300004802c0001800b00010074617267657400001c000280080002400000000005000300ef00000008000240000000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000200000a9579d8adbc8e4358da7a2bef81b01b0a4b7e5a6f72e7d763fd6ad1ef03a166f5bf0093d088c5c65d35e2b7d941fb7f8d278244c4b2bb3ada6e2f6cba4d2e249296aacdcb0b9c743f27785c052a4f4c149ee998adb91a5124f835350094"], 0x84}}, 0x14b6deac033214c2) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r6}, 0x10) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000005"], 0x48) (async) io_setup(0x7e, &(0x7f0000000080)=0x0) (async) r8 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) io_submit(r7, 0x1, &(0x7f0000001d00)=[&(0x7f00000000c0)={0x200000000000000, 0x0, 0x0, 0x7, 0x0, r8, &(0x7f0000000340)='p', 0x300, 0xeffdffffffffffff}]) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f00000004c0)={0xbe, 0x0, 0x1}) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r10}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r12, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) (async) recvmsg$unix(r11, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 32) connect$vsock_stream(r4, &(0x7f0000000000)={0x28, 0x0, 0x0, @host}, 0x10) (async, rerun: 32) setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000040)=0x40000, 0x4) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r3) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001000010026bd70000000000000000000", @ANYRES32=0x0, @ANYRESHEX=r1, @ANYRES32=0x0, @ANYRESHEX=r0], 0x54}}, 0x24040800) 2.906854847s ago: executing program 1 (id=447): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1e, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000630120000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000100)) sync_file_range(0xffffffffffffffff, 0x7, 0xa2, 0x7) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x3) ioctl$EXT4_IOC_CHECKPOINT(r2, 0x4004662b, &(0x7f0000000000)=0x4) socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009e173610ef171e7206de0102c9db090212000100000000090400000002"], 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x58, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x7ffc, 0x6, 0x1, 0x0, 0x4000}, 0x1c) timer_create(0x9, &(0x7f0000000180)={0x0, 0x1e, 0x1}, &(0x7f0000000700)=0x0) timer_settime(r4, 0x1, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x77359400}, {0x0, 0x989680}}, &(0x7f0000000300)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.815264106s ago: executing program 2 (id=448): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) io_setup(0x222, &(0x7f0000000180)=0x0) io_submit(r1, 0x1a, &(0x7f00000000c0)=[&(0x7f0000000200)={0x900, 0x0, 0x8, 0x0, 0x0, r0, &(0x7f0000000000)='%', 0x1a000}, &(0x7f0000000040)={0x0, 0x0, 0x30, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 2.734307696s ago: executing program 4 (id=449): r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000580)={0x0, 0x2, 0x6, 0x1}) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000000c0)={{}, {@val={r1}, @max}}) timer_create(0x3, 0x0, &(0x7f0000000100)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6}]}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x2c240, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000000440)={r2, 0x0, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1c, "339f020bbe78b39843d601010000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323695c58d66500", "a1163939c787a16c1ca43f8539f3d3289737f0374c72a964a0193b3e8772fd29f35239d200", "24431a1e77a68e174f000000000000000010e200", [0x1]}}) ioctl$LOOP_SET_STATUS(r3, 0x4c02, &(0x7f0000000140)={0x0, {}, 0x0, {}, 0x0, 0x6, 0x4, 0x0, "cd0d05a286a8d9c7b457dd4340274fc803519e9ad2a58b00770034728428556b2b5a97d6203497d63e98ec4682e0d499db318cb04c00", "e39fb4a6d3333aba8405d70d523a5a783847b8bc04869aad25d757c86a08e932", [0xd026, 0x36e1]}) 2.723143527s ago: executing program 0 (id=450): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0xfb5, 0xfffffffe}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@bridge_delvlan={0xfffffffffffffe53, 0x71, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5, 0x6, 0x80}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x4d, 0x2}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x0, 0x6, 0x2}}]}, 0x48}, 0x1, 0x0, 0x0, 0x810}, 0x8080) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xee01}}, './file0\x00'}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x1a, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xbde, 0x0, 0x0, 0x0, 0x80000000}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @func, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff, @void, @value}, 0x94) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x41, 0x0) r5 = syz_open_dev$media(&(0x7f00000006c0), 0x2c29, 0x28004) mkdirat(0xffffffffffffff9c, 0x0, 0xa0) socket$inet_sctp(0x2, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[], 0x18}}, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r5, 0x80047c05, &(0x7f0000000940)=0xffffffffffffffff) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r9, 0x7c80, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r4, 0xc008640a, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r2}, 0x18) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) 2.643815174s ago: executing program 2 (id=451): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000008100000008000300", @ANYRES32=r2, @ANYBLOB="200033c4e2250374472103d21c9cf4be515446006888fc00ffffffffffff08021100000171e1e2a30600840006000480"], 0x3c}, 0x1, 0x0, 0x0, 0x11}, 0x0) 2.542338036s ago: executing program 2 (id=452): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000280)={0x1b, 0x3, r4, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x2000, 0xffffffffffffff2b}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098000000030a01020000000000000000020000000900010073797a30000000000900030073797a32000000006b00030091abc12404d0c4c731"], 0xfc}, 0x1, 0x0, 0x0, 0x40010}, 0x4000914) r6 = socket$packet(0x11, 0x3, 0x300) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io(r7, &(0x7f0000000080)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}, 0x0) r8 = syz_usb_connect$uac1(0x6, 0x0, 0x0, 0x0) syz_usb_control_io$uac1(r8, &(0x7f0000000500)={0x14, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="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"]}, &(0x7f0000000a40)={0x44, 0x0, 0x0, &(0x7f00000008c0)={0x0, 0x8, 0x1, 0x11}, &(0x7f0000000900)={0x20, 0x81, 0x1, "03"}, &(0x7f0000000940)=ANY=[@ANYBLOB="208203000000005a66"], 0x0, 0x0, 0x0}) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_ep_write(r7, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ioctl$IOMMU_IOAS_MAP(r3, 0x3b85, &(0x7f00000001c0)={0x28, 0x2, r4, 0x0, &(0x7f0000000440)='O', 0x1, 0x6}) r9 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) getsockopt$llc_int(r9, 0x10c, 0x2, &(0x7f000000da80), &(0x7f0000000240)=0x4) 1.131264377s ago: executing program 0 (id=453): r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="fd014101f2c59620d016b8108ede0102030109022400010000100009040002020083ec0009050602000202000a09058202"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000000)={0x0, 0x30, 0xc, "00004700000040f400bec073"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000340)={0x0, 0x17, 0x2a, "cfe1fd130ea00dfe3b2f9d3e23f833c79ea688d81edcb5182f5ff295d832acb3c8574cd5e64f5cb4169a"}, 0x0, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000480)={0x20, 0x81, 0x3, '_G\v'}, &(0x7f0000000500)={0x20, 0x82, 0x2, "b0e5"}, &(0x7f0000000540)={0x20, 0x83, 0x3, "9367c4"}, &(0x7f0000000580)={0x20, 0x84, 0x2, '5,'}, &(0x7f00000005c0)={0x20, 0x85, 0x3, "fb92dd"}}) 1.024598077s ago: executing program 4 (id=454): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x800) (async) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r5], 0x54}}, 0x0) (async, rerun: 32) r6 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000001000250800170000000000000a000000", @ANYRES32=r8, @ANYBLOB="0174"], 0x20}}, 0x0) 863.749792ms ago: executing program 4 (id=455): iopl(0x3) syz_open_dev$vim2m(0x0, 0xb53a, 0x2) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x803341) socket$igmp6(0xa, 0x3, 0x2) r1 = dup(r0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x4) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000080)='./file1\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r3, 0xffffffff80000800, 0x0, &(0x7f00000003c0)={0x3, 0x5, 0x8, 0x0, 0x0, 0xfffffffffffffff9, 0xf96, 0x0, 0x1}) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000180), 0xfea7) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000140)=0x80) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) sendto$inet_nvme_pdu(0xffffffffffffffff, &(0x7f00000000c0)=@data_c2h={{0x7, 0x0, 0x18, 0x1, 0x8}, 0x5, 0xb30b, 0x3, 0x80000000, "2ae7064a"}, 0x80, 0x0, 0x0, 0x0) r4 = shmget$private(0x0, 0x9000, 0x0, &(0x7f0000ff7000/0x9000)=nil) shmat(r4, &(0x7f0000ff9000/0x1000)=nil, 0x5000) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f00007b1000/0x1000)=nil) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000002700)=""/102392, 0x18ff8) fcntl$addseals(0xffffffffffffffff, 0x409, 0x8) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0x9) write(r1, &(0x7f00000000c0)="2400000058001f0014f9f407002304000afff511080001000f1f47f19a5ea46c01000000267e6638892ca02830a4769b", 0x30) 794.809975ms ago: executing program 3 (id=456): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) (async) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) (async) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r1, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) (async) listen(r1, 0xda90) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)={0x2}) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x801, 0x95) move_mount(r3, &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x40) (async) accept4(r1, 0x0, 0x0, 0x0) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$TIPC_CONN_TIMEOUT(r4, 0x10f, 0x82, &(0x7f0000000040)=0x4, 0x4) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) r5 = fspick(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r5, 0x4, &(0x7f0000000600)='\x00', &(0x7f0000000640)='./file0\x00', 0xffffffffffffff9c) 175.151764ms ago: executing program 3 (id=457): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x141040, 0xec) listen(0xffffffffffffffff, 0x10008) prctl$PR_SCHED_CORE(0x3e, 0xfffffffffffffffd, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000086}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYRESDEC=r0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xd, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa6982a9, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x16, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1/file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[], 0x48) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f0000000380)={0x48, 0x2, r6}) 131.746955ms ago: executing program 4 (id=458): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc1105518, &(0x7f0000000040)={{0x2, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, [0x7, 0xfffffffffffffffc, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5fa, 0x0, 0x0, 0x8000000000000, 0x0, 0x9, 0x2592c14d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8, 0x40000, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7ff, 0xfffffffffffffffe, 0x8, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x200000, 0x6, 0x4, 0x6, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2000, 0x0, 0xffffbffc, 0x8001]}) 0s ago: executing program 4 (id=459): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000200)={{{@in=@private, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@private0}}, &(0x7f0000000100)=0xe8) r2 = geteuid() r3 = syz_open_procfs(0x0, &(0x7f0000000100)='fd\x00') fchdir(r3) statx(r3, &(0x7f0000000140)='./bus\x00', 0x100, 0x1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r1, r2, r4) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0xfd) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000001680)=0x7e) syz_open_dev$tty1(0xc, 0x4, 0x4) r5 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x766c618eb221465a) quotactl_fd$Q_SETINFO(r5, 0xffffffff80000600, 0x0, &(0x7f00000001c0)={0x1, 0xfffffffffffffffc, 0x0, 0x6}) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000000)=0x3e) kernel console output (not intermixed with test programs): enied { setopt } for pid=5996 comm="syz.1.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 69.329579][ T30] audit: type=1400 audit(1742408479.677:186): avc: denied { ioctl } for pid=5992 comm="syz.3.21" path="socket:[8547]" dev="sockfs" ino=8547 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 69.356549][ T5899] usb 1-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00 [ 69.356577][ T5899] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.361286][ T5899] usb 1-1: config 0 descriptor?? [ 69.364326][ T6000] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 69.593784][ T5899] hid (null): unknown global tag 0xe [ 69.611752][ T6004] netlink: 'syz.4.24': attribute type 1 has an invalid length. [ 69.622010][ T5899] macally 0003:060B:0001.0001: unknown global tag 0xe [ 69.640836][ T5899] macally 0003:060B:0001.0001: item 0 0 1 14 parsing failed [ 69.664929][ T5899] macally 0003:060B:0001.0001: probe with driver macally failed with error -22 [ 69.688322][ T5999] netlink: 12 bytes leftover after parsing attributes in process `syz.1.23'. [ 69.716119][ T6005] netlink: 8 bytes leftover after parsing attributes in process `syz.4.24'. [ 69.732372][ T5910] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 69.815153][ T5899] usb 1-1: USB disconnect, device number 2 [ 69.890301][ T5910] usb 3-1: Using ep0 maxpacket: 32 [ 69.897243][ T5910] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 69.907308][ T5910] usb 3-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 69.922389][ T5910] usb 3-1: config 0 interface 0 has no altsetting 0 [ 69.954018][ T5910] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 69.965237][ T5910] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.996504][ T5910] usb 3-1: Product: syz [ 70.015548][ T5910] usb 3-1: Manufacturer: syz [ 70.033790][ T5910] usb 3-1: SerialNumber: syz [ 70.059888][ T5910] usb 3-1: config 0 descriptor?? [ 70.554345][ T5910] gs_usb 3-1:0.0: Configuring for 1 interfaces [ 71.164532][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.217630][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.226678][ T5910] gs_usb 3-1:0.0: Couldn't get bit timing const for channel 0 (-EPIPE) [ 71.315312][ T5910] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -32 [ 71.361345][ T6010] veth0_vlan: entered allmulticast mode [ 71.373093][ T6011] veth0_vlan: left promiscuous mode [ 71.379490][ T6011] veth0_vlan: entered promiscuous mode [ 71.387009][ T5910] usb 3-1: USB disconnect, device number 3 [ 72.214541][ T6025] veth0_vlan: left promiscuous mode [ 72.224668][ T6025] veth0_vlan: entered promiscuous mode [ 73.282261][ T6036] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 73.406919][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 73.436607][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 73.436987][ T30] audit: type=1400 audit(1742408483.857:196): avc: denied { setopt } for pid=6027 comm="syz.2.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 73.918859][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 74.036118][ T30] audit: type=1400 audit(1742408484.207:197): avc: denied { name_bind } for pid=6038 comm="syz.0.32" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 74.167657][ T30] audit: type=1400 audit(1742408484.207:198): avc: denied { node_bind } for pid=6038 comm="syz.0.32" saddr=224.0.0.1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 74.226172][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 74.366842][ T5899] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 74.460440][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 74.642683][ T5899] usb 4-1: Using ep0 maxpacket: 32 [ 74.680282][ T5899] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 74.690069][ T5899] usb 4-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 74.703125][ T5899] usb 4-1: config 0 interface 0 has no altsetting 0 [ 74.770551][ T5871] usb 1-1: new low-speed USB device number 3 using dummy_hcd [ 74.782416][ T5899] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 74.828621][ T5899] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.839692][ T5899] usb 4-1: Product: syz [ 74.848937][ T5899] usb 4-1: Manufacturer: syz [ 74.927139][ T5899] usb 4-1: SerialNumber: syz [ 74.960494][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 75.140299][ T6058] veth0_vlan: left promiscuous mode [ 75.150157][ T6058] veth0_vlan: entered promiscuous mode [ 75.457193][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 75.557476][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 75.567727][ T0] NOHZ tick-stop error: local softirq work is pending, handler #48!!! [ 75.744703][ T5871] usb 1-1: config 4 has an invalid interface number: 231 but max is 0 [ 75.810263][ T5899] usb 4-1: config 0 descriptor?? [ 75.869043][ T5871] usb 1-1: config 4 has no interface number 0 [ 76.168652][ T6062] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1926430720 (3852861440 ns) > initial count (2369312970 ns). Using initial count to start timer. [ 76.209432][ T26] cfg80211: failed to load regulatory.db [ 76.283884][ T6066] use of bytesused == 0 is deprecated and will be removed in the future, [ 76.292976][ T5899] gs_usb 4-1:0.0: Configuring for 1 interfaces [ 76.296888][ T6066] use the actual size instead. [ 76.493366][ T5899] gs_usb 4-1:0.0: Couldn't get bit timing const for channel 0 (-EPIPE) [ 76.518321][ T5899] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -32 [ 76.584988][ T6069] netlink: 36 bytes leftover after parsing attributes in process `syz.2.39'. [ 76.720501][ T30] audit: type=1400 audit(1742408487.007:199): avc: denied { setopt } for pid=6065 comm="syz.2.39" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 76.871183][ T30] audit: type=1400 audit(1742408487.007:200): avc: denied { ioctl } for pid=6065 comm="syz.2.39" path="socket:[8776]" dev="sockfs" ino=8776 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 77.074877][ T5899] usb 4-1: USB disconnect, device number 2 [ 77.083081][ T30] audit: type=1400 audit(1742408487.217:201): avc: denied { write } for pid=6071 comm="syz.1.40" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 77.281925][ T6079] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.493614][ T5871] usb 1-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 77.532974][ T5871] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.826062][ T5871] usb 1-1: can't set config #4, error -71 [ 77.923704][ T5871] usb 1-1: USB disconnect, device number 3 [ 78.020898][ T30] audit: type=1400 audit(1742408488.447:202): avc: denied { create } for pid=6088 comm="syz.0.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 78.050752][ T5870] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 78.058391][ T47] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 78.247152][ T30] audit: type=1400 audit(1742408488.667:203): avc: denied { ioctl } for pid=6094 comm="syz.3.45" path="socket:[9242]" dev="sockfs" ino=9242 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 78.346184][ T5870] usb 3-1: Using ep0 maxpacket: 32 [ 78.362191][ T5870] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 78.371092][ T5870] usb 3-1: config 0 has no interface number 0 [ 78.379879][ T5870] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 78.389102][ T47] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 78.399942][ T5870] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.408089][ T5870] usb 3-1: Product: syz [ 78.412814][ T47] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 78.424740][ T5870] usb 3-1: Manufacturer: syz [ 78.429374][ T5870] usb 3-1: SerialNumber: syz [ 78.439195][ T47] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 78.538822][ T5870] usb 3-1: config 0 descriptor?? [ 78.567461][ T47] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 78.697571][ T5870] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 78.745247][ T47] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.760488][ T6063] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4234274794 (67748396704 ns) > initial count (26801589552 ns). Using initial count to start timer. [ 78.795077][ T47] usb 2-1: Product: syz [ 78.805658][ T47] usb 2-1: Manufacturer: syz [ 78.822568][ T47] usb 2-1: SerialNumber: syz [ 78.840991][ T47] usb 2-1: config 0 descriptor?? [ 78.847502][ T6079] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 78.857358][ T6079] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 78.876713][ T5870] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 78.886893][ T47] usb 2-1: ucan: probing device on interface #0 [ 78.891257][ T30] audit: type=1400 audit(1742408489.317:204): avc: denied { relabelfrom } for pid=6098 comm="syz.3.47" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 78.897819][ T5870] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 78.919129][ T30] audit: type=1400 audit(1742408489.337:205): avc: denied { relabelto } for pid=6098 comm="syz.3.47" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 79.216964][ T30] audit: type=1400 audit(1742408489.607:206): avc: denied { write } for pid=6078 comm="syz.1.41" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 79.483100][ C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 79.500494][ T5870] usb 3-1: USB disconnect, device number 4 [ 79.524180][ T5870] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 79.656922][ T6107] mmap: syz.4.50 (6107) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 79.735162][ T5870] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 79.747417][ T5870] quatech2 3-1:0.51: device disconnected [ 80.386121][ T47] usb 2-1: ucan: could not read protocol version, ret=-71 [ 80.395860][ T47] usb 2-1: ucan: probe failed; try to update the device firmware [ 80.420552][ T47] usb 2-1: USB disconnect, device number 2 [ 81.154906][ T30] audit: type=1400 audit(1742408491.567:207): avc: denied { create } for pid=6122 comm="syz.1.55" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 81.438155][ T30] audit: type=1400 audit(1742408491.567:208): avc: denied { setopt } for pid=6122 comm="syz.1.55" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 81.802846][ T6121] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 81.969555][ T30] audit: type=1400 audit(1742408491.567:209): avc: denied { ioctl } for pid=6122 comm="syz.1.55" path="socket:[8850]" dev="sockfs" ino=8850 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 82.007377][ T30] audit: type=1400 audit(1742408491.567:210): avc: denied { write } for pid=6122 comm="syz.1.55" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 82.126581][ T6136] siw: device registration error -23 [ 82.631026][ T30] audit: type=1400 audit(1742408491.627:211): avc: denied { read } for pid=6122 comm="syz.1.55" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 82.688053][ T30] audit: type=1400 audit(1742408491.627:212): avc: denied { open } for pid=6122 comm="syz.1.55" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 82.712145][ T30] audit: type=1400 audit(1742408491.637:213): avc: denied { write } for pid=6117 comm="syz.0.53" path="socket:[9362]" dev="sockfs" ino=9362 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 84.055443][ T6149] af_packet: tpacket_rcv: packet too big, clamped from 32 to 4294967272. macoff=96 [ 84.138947][ T6153] netlink: 32 bytes leftover after parsing attributes in process `syz.1.62'. [ 84.160352][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 84.160367][ T30] audit: type=1400 audit(1742408494.547:217): avc: denied { mounton } for pid=6152 comm="syz.1.62" path="/10/file0" dev="tmpfs" ino=79 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 84.235855][ T30] audit: type=1400 audit(1742408494.557:218): avc: denied { write } for pid=5910 comm="kworker/0:7" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=9546 scontext=system_u:system_r:kernel_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 85.074732][ T6161] siw: device registration error -23 [ 85.226909][ T6158] binfmt_misc: register: failed to install interpreter file ./file0 [ 86.269984][ T6153] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 86.591849][ T6172] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 86.605928][ T30] audit: type=1400 audit(1742408496.997:219): avc: denied { connect } for pid=6168 comm="syz.2.66" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 87.060344][ T30] audit: type=1400 audit(1742408497.127:220): avc: denied { read } for pid=5181 comm="acpid" name="mouse1" dev="devtmpfs" ino=2752 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 87.085919][ T30] audit: type=1400 audit(1742408497.127:221): avc: denied { open } for pid=5181 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=2752 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 87.109615][ T30] audit: type=1400 audit(1742408497.147:222): avc: denied { ioctl } for pid=5181 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=2752 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 87.390067][ T6179] veth0_vlan: left promiscuous mode [ 87.398636][ T6179] veth0_vlan: entered promiscuous mode [ 89.063726][ T6187] siw: device registration error -23 [ 89.153204][ T6182] veth0_vlan: left promiscuous mode [ 89.159442][ T6182] veth0_vlan: entered promiscuous mode [ 89.565097][ T6194] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 89.783325][ T30] audit: type=1400 audit(1742408500.207:223): avc: denied { write } for pid=6199 comm="syz.1.72" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 90.886096][ T6210] siw: device registration error -23 [ 91.879351][ T30] audit: type=1400 audit(1742408500.207:224): avc: denied { connect } for pid=6199 comm="syz.1.72" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 91.990370][ T30] audit: type=1400 audit(1742408500.207:225): avc: denied { name_connect } for pid=6199 comm="syz.1.72" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 92.192301][ T6226] SELinux: Context system_u:object_r:semanage_exec_t:s0 is not valid (left unmapped). [ 92.269728][ T30] audit: type=1400 audit(1742408502.647:226): avc: denied { relabelto } for pid=6224 comm="syz.1.79" name="cgroup.procs" dev="cgroup" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:semanage_exec_t:s0" [ 92.347410][ T30] audit: type=1400 audit(1742408502.747:227): avc: denied { associate } for pid=6224 comm="syz.1.79" name="cgroup.procs" dev="cgroup" ino=236 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object_r:semanage_exec_t:s0" [ 93.021048][ T5871] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 93.164591][ T30] audit: type=1400 audit(1742408503.587:228): avc: denied { ioctl } for pid=6238 comm="syz.0.80" path="socket:[9160]" dev="sockfs" ino=9160 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 93.234016][ T5871] usb 2-1: Using ep0 maxpacket: 16 [ 93.240789][ T5871] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 93.259109][ T5871] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 93.289150][ T5871] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 93.327150][ T5871] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 93.344300][ T5871] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 93.739339][ T5871] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 93.759387][ T5871] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 93.781178][ T5871] usb 2-1: Manufacturer: syz [ 93.809688][ T30] audit: type=1400 audit(1742408504.227:229): avc: denied { connect } for pid=6253 comm="syz.2.85" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 93.830390][ T5871] usb 2-1: config 0 descriptor?? [ 94.130760][ T6226] netlink: 'syz.1.79': attribute type 2 has an invalid length. [ 94.170618][ T30] audit: type=1400 audit(1742408504.517:230): avc: denied { bind } for pid=6256 comm="syz.4.86" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 94.211663][ T6228] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.253135][ T6228] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.260916][ T30] audit: type=1400 audit(1742408504.547:231): avc: denied { listen } for pid=6256 comm="syz.4.86" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 94.280350][ T30] audit: type=1400 audit(1742408504.557:232): avc: denied { connect } for pid=6256 comm="syz.4.86" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 94.578225][ T5871] rc_core: IR keymap rc-hauppauge not found [ 94.594390][ T5871] Registered IR keymap rc-empty [ 94.599769][ T5871] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 94.631306][ T5871] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 94.980585][ T5871] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 95.011498][ T5871] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input6 [ 95.366189][ T5871] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 95.422164][ T5871] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 95.461929][ T5871] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 95.500395][ T5871] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 95.523115][ T5871] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 95.570406][ T5871] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 95.584270][ T6276] netlink: 5 bytes leftover after parsing attributes in process `syz.2.91'. [ 95.620681][ T5871] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 95.621567][ T6276] netlink: 4 bytes leftover after parsing attributes in process `syz.2.91'. [ 95.650665][ T5871] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 95.677344][ T6276] netlink: 5 bytes leftover after parsing attributes in process `syz.2.91'. [ 95.794007][ T5871] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 95.801517][ T6276] netlink: 4 bytes leftover after parsing attributes in process `syz.2.91'. [ 95.801584][ T6276] netlink: 4 bytes leftover after parsing attributes in process `syz.2.91'. [ 96.434717][ T5871] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 96.581126][ T5871] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 96.659192][ T5871] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 96.991834][ T5871] usb 2-1: USB disconnect, device number 3 [ 98.201089][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 98.201100][ T30] audit: type=1400 audit(1742408508.617:236): avc: denied { ioctl } for pid=6304 comm="syz.0.101" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=10298 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 98.276136][ T30] audit: type=1400 audit(1742408508.687:237): avc: denied { append } for pid=6300 comm="syz.4.100" name="event3" dev="devtmpfs" ino=1027 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 98.311611][ T30] audit: type=1400 audit(1742408508.687:238): avc: denied { ioctl } for pid=6300 comm="syz.4.100" path="/dev/input/event2" dev="devtmpfs" ino=926 ioctlcmd=0x4591 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 98.547879][ T6313] netlink: 'syz.2.105': attribute type 1 has an invalid length. [ 98.590799][ T30] audit: type=1400 audit(1742408509.007:239): avc: denied { setopt } for pid=6307 comm="syz.1.102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 98.631246][ T6321] netlink: 8 bytes leftover after parsing attributes in process `syz.2.105'. [ 98.714317][ T6321] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 98.770465][ T6329] netlink: 8 bytes leftover after parsing attributes in process `syz.0.108'. [ 98.824562][ T6321] bond1: (slave batadv1): Enslaving as a backup interface with an up link [ 98.845111][ T30] audit: type=1400 audit(1742408509.267:240): avc: denied { create } for pid=6333 comm="syz.1.109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 98.850554][ T6335] capability: warning: `syz.0.110' uses deprecated v2 capabilities in a way that may be insecure [ 98.897172][ T6313] bond1 (unregistering): (slave batadv1): Releasing backup interface [ 98.913091][ T6313] bond1 (unregistering): Released all slaves [ 98.933098][ T6335] netlink: 24 bytes leftover after parsing attributes in process `syz.0.110'. [ 99.240375][ T47] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 99.421903][ T47] usb 2-1: config 0 has an invalid interface number: 95 but max is 0 [ 99.588368][ T6340] veth0_vlan: left promiscuous mode [ 99.594491][ T6340] veth0_vlan: entered promiscuous mode [ 99.627077][ T47] usb 2-1: config 0 has no interface number 0 [ 99.636600][ T30] audit: type=1400 audit(1742408510.047:241): avc: denied { create } for pid=6332 comm="syz.0.110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 99.638264][ T47] usb 2-1: config 0 interface 95 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 99.699467][ T47] usb 2-1: New USB device found, idVendor=7725, idProduct=b0a8, bcdDevice= 7.46 [ 99.708661][ T47] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.743289][ T30] audit: type=1400 audit(1742408510.057:242): avc: denied { bind } for pid=6332 comm="syz.0.110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 99.762458][ T30] audit: type=1400 audit(1742408510.097:243): avc: denied { accept } for pid=6332 comm="syz.0.110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 99.781986][ T30] audit: type=1400 audit(1742408510.097:244): avc: denied { write } for pid=6332 comm="syz.0.110" path="socket:[10359]" dev="sockfs" ino=10359 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 99.847108][ T30] audit: type=1400 audit(1742408510.257:245): avc: denied { create } for pid=6344 comm="syz.4.113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 99.889025][ T47] usb 2-1: Product: syz [ 99.926488][ T47] usb 2-1: Manufacturer: syz [ 99.970384][ T47] usb 2-1: SerialNumber: syz [ 99.999239][ T47] usb 2-1: config 0 descriptor?? [ 100.011640][ T6334] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 100.399639][ T5899] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 100.578704][ T47] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 100.598945][ T47] usb 2-1: MIDIStreaming interface descriptor not found [ 100.656427][ T6360] xt_socket: unknown flags 0x8 [ 100.681378][ T5899] usb 5-1: Using ep0 maxpacket: 32 [ 100.779063][ T5899] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 100.824983][ T6362] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.116'. [ 100.863060][ T5899] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 100.964596][ T5899] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 100.977000][ T5899] usb 5-1: Product: syz [ 100.981592][ T5899] usb 5-1: Manufacturer: syz [ 100.991143][ T5899] usb 5-1: SerialNumber: syz [ 101.023595][ T47] usb 2-1: USB disconnect, device number 4 [ 101.104192][ T5899] usb 5-1: config 0 descriptor?? [ 101.110703][ T6352] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 101.371461][ T5838] udevd[5838]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.95/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 101.625737][ T5869] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 101.809875][ T5899] usb 5-1: USB disconnect, device number 2 [ 101.820332][ T5869] usb 4-1: Using ep0 maxpacket: 32 [ 101.924932][ T5869] usb 4-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 101.945393][ T5869] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.014486][ T5869] usb 4-1: config 0 descriptor?? [ 102.082151][ T5869] gspca_main: sq930x-2.14.0 probing 041e:403c [ 102.160829][ T5871] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 102.320277][ T5871] usb 2-1: Using ep0 maxpacket: 32 [ 102.327959][ T5871] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 102.355455][ T5871] usb 2-1: config 0 has no interface number 0 [ 102.396598][ T5871] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 102.430183][ T5871] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.458258][ T5871] usb 2-1: Product: syz [ 102.484875][ T6365] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.542361][ T6365] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.685807][ T5871] usb 2-1: Manufacturer: syz [ 102.722528][ T5871] usb 2-1: SerialNumber: syz [ 102.771674][ T5869] gspca_sq930x: ucbus_write failed -110 [ 102.875052][ T5871] usb 2-1: config 0 descriptor?? [ 102.881333][ T5869] sq930x 4-1:0.0: probe with driver sq930x failed with error -110 [ 102.881983][ T5871] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 103.022272][ T6389] veth0_vlan: entered allmulticast mode [ 103.087460][ T6380] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.096227][ T6380] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.212878][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 103.212895][ T30] audit: type=1400 audit(1742408513.637:256): avc: denied { read } for pid=6379 comm="syz.1.120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 103.220843][ T5871] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 103.247999][ T10] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 103.259132][ T5871] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 103.404605][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.416100][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 103.429077][ T10] usb 5-1: New USB device found, idVendor=1223, idProduct=3f07, bcdDevice= 0.00 [ 103.438207][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.448113][ T10] usb 5-1: config 0 descriptor?? [ 103.510332][ T5899] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 103.656054][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 103.656268][ T26] usb 2-1: USB disconnect, device number 5 [ 103.663739][ T5899] usb 1-1: Using ep0 maxpacket: 16 [ 103.685446][ T26] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 103.703217][ T26] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 103.732779][ T26] quatech2 2-1:0.51: device disconnected [ 103.840327][ T5899] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 192, changing to 11 [ 103.852152][ T5899] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 103.852516][ T30] audit: type=1400 audit(1742408514.277:257): avc: denied { ioctl } for pid=6386 comm="syz.4.123" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 103.887511][ C0] vkms_vblank_simulate: vblank timer overrun [ 103.893970][ T5899] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 103.911482][ T5899] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 103.920859][ T5899] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 103.931747][ T5899] usb 1-1: SerialNumber: syz [ 103.941922][ T6390] raw-gadget.5 gadget.0: fail, usb_ep_enable returned -22 [ 103.967372][ T6397] netlink: 'syz.2.125': attribute type 1 has an invalid length. [ 103.998850][ T6397] 8021q: adding VLAN 0 to HW filter on device bond1 [ 104.022814][ T6397] veth3: entered promiscuous mode [ 104.032062][ T6397] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 104.137955][ T6400] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1926430720 (3852861440 ns) > initial count (2369312970 ns). Using initial count to start timer. [ 104.188412][ T5871] usb 4-1: USB disconnect, device number 3 [ 104.606343][ T5899] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 104.623081][ T5899] usb 1-1: USB disconnect, device number 4 [ 104.754734][ T30] audit: type=1400 audit(1742408515.177:258): avc: denied { bind } for pid=6414 comm="syz.3.131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 104.907012][ T47] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 104.914708][ T30] audit: type=1400 audit(1742408515.177:259): avc: denied { name_bind } for pid=6414 comm="syz.3.131" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 104.942474][ T30] audit: type=1400 audit(1742408515.177:260): avc: denied { node_bind } for pid=6414 comm="syz.3.131" saddr=ff02::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 105.042544][ T30] audit: type=1400 audit(1742408515.467:261): avc: denied { map } for pid=6414 comm="syz.3.131" path="socket:[10572]" dev="sockfs" ino=10572 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 105.067222][ T30] audit: type=1400 audit(1742408515.467:262): avc: denied { read accept } for pid=6414 comm="syz.3.131" path="socket:[10572]" dev="sockfs" ino=10572 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 105.090828][ C0] vkms_vblank_simulate: vblank timer overrun [ 105.121856][ T47] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 105.136994][ T47] usb 2-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 105.146892][ T47] usb 2-1: New USB device strings: Mfr=32, Product=0, SerialNumber=9 [ 105.165819][ T47] usb 2-1: Manufacturer: syz [ 105.175892][ T47] usb 2-1: SerialNumber: syz [ 105.188080][ T47] usb 2-1: config 0 descriptor?? [ 105.216315][ T47] usb 2-1: Found UVC 0.00 device (046d:08c1) [ 105.271542][ T47] usb 2-1: No valid video chain found. [ 105.421634][ T47] usb 2-1: USB disconnect, device number 6 [ 105.692779][ T30] audit: type=1400 audit(1742408516.107:263): avc: denied { map } for pid=6419 comm="syz.0.132" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 106.047943][ T10] usbhid 5-1:0.0: can't add hid device: -71 [ 106.086401][ T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 106.141119][ T10] usb 5-1: USB disconnect, device number 3 [ 106.508621][ T6400] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4234274794 (67748396704 ns) > initial count (26801589552 ns). Using initial count to start timer. [ 106.780536][ T26] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 107.050098][ T26] usb 4-1: config 0 interface 0 has no altsetting 0 [ 107.108623][ T26] usb 4-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 107.188273][ T26] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.297677][ T26] usb 4-1: config 0 descriptor?? [ 107.468044][ T30] audit: type=1400 audit(1742408517.887:264): avc: denied { create } for pid=6444 comm="syz.2.142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 108.135470][ T26] video4linux radio48: keene_cmd_main failed (-110) [ 108.148465][ T30] audit: type=1400 audit(1742408518.567:265): avc: denied { bind } for pid=6450 comm="syz.1.143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 108.151258][ T26] radio-keene 4-1:0.0: V4L2 device registered as radio48 [ 108.206475][ T10] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 108.219400][ T973] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 108.506002][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 108.571446][ T10] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 108.590283][ T973] usb 3-1: Using ep0 maxpacket: 16 [ 108.600801][ T10] usb 1-1: config 0 has no interface number 0 [ 108.610810][ T973] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 108.622525][ T973] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 108.632756][ T973] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.653902][ T10] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 108.668963][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.680341][ T973] usb 3-1: Product: syz [ 108.684520][ T973] usb 3-1: Manufacturer: syz [ 108.696180][ T6460] netlink: 'syz.4.144': attribute type 1 has an invalid length. [ 108.709471][ T10] usb 1-1: Product: syz [ 108.717819][ T973] usb 3-1: SerialNumber: syz [ 108.730306][ T10] usb 1-1: Manufacturer: syz [ 108.747155][ T973] usb 3-1: config 0 descriptor?? [ 108.752533][ T10] usb 1-1: SerialNumber: syz [ 108.760861][ T6460] netlink: 8 bytes leftover after parsing attributes in process `syz.4.144'. [ 108.784063][ T10] usb 1-1: config 0 descriptor?? [ 108.794074][ T973] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 108.805199][ T30] audit: type=1400 audit(1742408519.207:266): avc: denied { ioctl } for pid=6443 comm="syz.0.140" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 108.853266][ T973] usb 3-1: Detected FT232R [ 108.865636][ T6460] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 108.873479][ T10] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 108.901799][ T6460] bond1: (slave batadv1): Enslaving as a backup interface with an up link [ 108.952638][ T6462] bond1 (unregistering): (slave batadv1): Releasing backup interface [ 108.997562][ T973] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 109.004745][ T10] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 109.019310][ T6462] bond1 (unregistering): Released all slaves [ 109.023114][ T973] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 109.040546][ T10] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB2 [ 109.051218][ T973] ftdi_sio 3-1:0.0: GPIO initialisation failed: -71 [ 109.068266][ T973] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 109.102627][ T973] usb 3-1: USB disconnect, device number 5 [ 109.141007][ T973] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 109.177612][ T973] ftdi_sio 3-1:0.0: device disconnected [ 109.189089][ T30] audit: type=1400 audit(1742408519.607:267): avc: denied { rename } for pid=5178 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 109.233861][ T30] audit: type=1400 audit(1742408519.607:268): avc: denied { unlink } for pid=5178 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 109.278519][ T30] audit: type=1400 audit(1742408519.607:269): avc: denied { create } for pid=5178 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 109.310832][ T30] audit: type=1400 audit(1742408519.737:270): avc: denied { setopt } for pid=6465 comm="syz.4.146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 109.336350][ T6466] netlink: 20 bytes leftover after parsing attributes in process `syz.4.146'. [ 109.398940][ C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 109.408506][ T10] usb 1-1: USB disconnect, device number 5 [ 109.418017][ T10] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 109.451022][ T10] quatech-serial ttyUSB2: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB2 [ 109.485377][ T10] quatech2 1-1:0.51: device disconnected [ 109.495726][ T6469] netlink: 'syz.4.147': attribute type 10 has an invalid length. [ 109.521653][ T6469] netlink: 8 bytes leftover after parsing attributes in process `syz.4.147'. [ 109.679009][ T973] usb 4-1: USB disconnect, device number 4 [ 111.234492][ T30] audit: type=1400 audit(1742408521.627:271): avc: denied { getopt } for pid=6484 comm="syz.1.152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 111.305880][ T30] audit: type=1400 audit(1742408521.637:272): avc: denied { name_connect } for pid=6484 comm="syz.1.152" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 112.132385][ T30] audit: type=1400 audit(1742408522.527:273): avc: denied { ioctl } for pid=6501 comm="syz.3.156" path="socket:[11368]" dev="sockfs" ino=11368 ioctlcmd=0x937c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 112.188095][ T30] audit: type=1400 audit(1742408522.527:274): avc: denied { getopt } for pid=6501 comm="syz.3.156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 112.425910][ T6519] netlink: 'syz.1.159': attribute type 10 has an invalid length. [ 112.439865][ T6520] netlink: 'syz.3.160': attribute type 1 has an invalid length. [ 112.460342][ T6519] netlink: 8 bytes leftover after parsing attributes in process `syz.1.159'. [ 112.524437][ T6520] netlink: 8 bytes leftover after parsing attributes in process `syz.3.160'. [ 112.574153][ T6524] netlink: 5 bytes leftover after parsing attributes in process `syz.0.161'. [ 112.619880][ T6524] netlink: 4 bytes leftover after parsing attributes in process `syz.0.161'. [ 112.629304][ T6520] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 112.629917][ T6524] netlink: 5 bytes leftover after parsing attributes in process `syz.0.161'. [ 112.637006][ T30] audit: type=1400 audit(1742408523.047:275): avc: denied { append } for pid=6527 comm="syz.2.163" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 112.670122][ T6524] netlink: 4 bytes leftover after parsing attributes in process `syz.0.161'. [ 112.811707][ T6520] bond1: (slave batadv1): Enslaving as a backup interface with an up link [ 113.060654][ T6526] bond1 (unregistering): (slave batadv1): Releasing backup interface [ 113.074424][ T6524] netlink: 4 bytes leftover after parsing attributes in process `syz.0.161'. [ 113.088031][ T6526] bond1 (unregistering): Released all slaves [ 115.217044][ T6562] netlink: 'syz.3.170': attribute type 33 has an invalid length. [ 115.224914][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 115.224948][ T30] audit: type=1400 audit(1742408525.637:280): avc: denied { read } for pid=6560 comm="syz.0.171" name="sg0" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 115.254696][ T6562] netlink: 152 bytes leftover after parsing attributes in process `syz.3.170'. [ 115.544048][ T30] audit: type=1400 audit(1742408525.967:281): avc: denied { getopt } for pid=6564 comm="syz.4.172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 116.118708][ T30] audit: type=1326 audit(1742408526.537:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6560 comm="syz.0.171" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd8ff58d169 code=0x0 [ 116.169591][ T6572] netlink: 'syz.2.174': attribute type 10 has an invalid length. [ 116.179650][ T6572] netlink: 8 bytes leftover after parsing attributes in process `syz.2.174'. [ 116.293115][ T30] audit: type=1400 audit(1742408526.707:283): avc: denied { read } for pid=6575 comm="syz.2.177" path="socket:[11532]" dev="sockfs" ino=11532 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 116.322511][ T6578] Zero length message leads to an empty skb [ 116.447976][ T30] audit: type=1326 audit(1742408526.867:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6581 comm="syz.2.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84e358d169 code=0x7ffc0000 [ 116.488785][ T30] audit: type=1326 audit(1742408526.897:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6581 comm="syz.2.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84e358d169 code=0x7ffc0000 [ 116.581460][ T30] audit: type=1326 audit(1742408526.897:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6581 comm="syz.2.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f84e358d169 code=0x7ffc0000 [ 116.666984][ T30] audit: type=1326 audit(1742408526.897:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6581 comm="syz.2.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84e358d169 code=0x7ffc0000 [ 116.921251][ T30] audit: type=1326 audit(1742408526.897:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6581 comm="syz.2.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f84e358d169 code=0x7ffc0000 [ 116.949429][ T30] audit: type=1326 audit(1742408526.897:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6581 comm="syz.2.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84e358d169 code=0x7ffc0000 [ 116.982511][ T973] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 117.060470][ T6060] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 117.231071][ T6060] usb 2-1: Using ep0 maxpacket: 32 [ 117.232807][ T973] usb 3-1: New USB device found, idVendor=11c0, idProduct=5506, bcdDevice= 0.00 [ 117.272579][ T6060] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 117.283627][ T973] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.292581][ T6060] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 117.300778][ T973] usb 3-1: config 0 descriptor?? [ 117.314584][ T6060] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 117.401390][ T6060] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 117.410829][ T6060] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.430814][ T6060] usb 2-1: config 0 descriptor?? [ 117.440682][ T6588] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 117.452134][ T6060] hub 2-1:0.0: USB hub found [ 117.681889][ T6060] hub 2-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 117.812460][ T973] betop 0003:11C0:5506.0002: unknown main item tag 0x0 [ 117.822008][ T973] betop 0003:11C0:5506.0002: item fetching failed at offset 3/5 [ 117.832076][ T973] betop 0003:11C0:5506.0002: parse failed [ 117.838499][ T973] betop 0003:11C0:5506.0002: probe with driver betop failed with error -22 [ 118.017464][ T973] usb 3-1: USB disconnect, device number 6 [ 118.051500][ T5869] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 118.237727][ T6603] ======================================================= [ 118.237727][ T6603] WARNING: The mand mount option has been deprecated and [ 118.237727][ T6603] and is ignored by this kernel. Remove the mand [ 118.237727][ T6603] option from the mount to silence this warning. [ 118.237727][ T6603] ======================================================= [ 118.262011][ T5869] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 118.288136][ T6603] tmpfs: Bad value for 'usrquota_block_hardlimit' [ 118.307238][ T6603] netlink: 112 bytes leftover after parsing attributes in process `syz.0.184'. [ 118.325219][ T5869] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 118.338572][ T5869] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 118.374341][ T5869] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.404576][ T5869] usb 4-1: config 0 descriptor?? [ 118.419303][ T5869] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 118.431557][ T5869] dvb-usb: bulk message failed: -22 (3/0) [ 118.468868][ T5869] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 118.479509][ T5869] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 118.491660][ T5869] usb 4-1: media controller created [ 118.511247][ T5869] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 118.524757][ T5869] dvb-usb: bulk message failed: -22 (6/0) [ 118.530674][ T5869] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 118.538947][ T5869] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input8 [ 118.566902][ T5869] dvb-usb: schedule remote query interval to 150 msecs. [ 118.574599][ T5869] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 118.672997][ T5869] usb 4-1: USB disconnect, device number 5 [ 118.700375][ T973] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 118.747793][ T5869] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 118.883382][ T973] usb 5-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 118.897198][ T973] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.915442][ T973] usb 5-1: Product: syz [ 118.920055][ T973] usb 5-1: Manufacturer: syz [ 118.942817][ T973] usb 5-1: SerialNumber: syz [ 118.977626][ T973] usb 5-1: config 0 descriptor?? [ 119.167090][ T6620] netlink: 20 bytes leftover after parsing attributes in process `syz.2.190'. [ 119.191204][ T973] cx82310_eth 5-1:0.0: probe with driver cx82310_eth failed with error -22 [ 119.208452][ T973] cxacru 5-1:0.0: usbatm_usb_probe: bind failed: -19! [ 119.271603][ T973] usb 5-1: USB disconnect, device number 4 [ 119.297664][ T6060] usbhid 2-1:0.0: can't add hid device: -71 [ 119.361746][ T6060] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 119.435759][ T6060] usb 2-1: USB disconnect, device number 7 [ 119.738737][ T6634] trusted_key: encrypted_key: keylen parameter is missing [ 120.276513][ T30] kauditd_printk_skb: 80 callbacks suppressed [ 120.276529][ T30] audit: type=1400 audit(1742408530.697:370): avc: denied { read write } for pid=6636 comm="syz.1.196" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 120.431643][ T30] audit: type=1400 audit(1742408530.697:371): avc: denied { ioctl open } for pid=6636 comm="syz.1.196" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 120.549650][ T30] audit: type=1400 audit(1742408530.817:372): avc: denied { name_bind } for pid=6641 comm="syz.4.197" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 120.577941][ T30] audit: type=1400 audit(1742408530.817:373): avc: denied { node_bind } for pid=6641 comm="syz.4.197" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 120.607335][ T30] audit: type=1400 audit(1742408530.957:374): avc: denied { wake_alarm } for pid=6643 comm="syz.4.199" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 120.629691][ T30] audit: type=1400 audit(1742408530.977:375): avc: denied { read write } for pid=6643 comm="syz.4.199" name="video3" dev="devtmpfs" ino=934 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 120.936208][ T6639] netlink: 'syz.1.196': attribute type 1 has an invalid length. [ 120.969184][ T6639] 8021q: adding VLAN 0 to HW filter on device bond1 [ 121.004444][ T30] audit: type=1400 audit(1742408530.977:376): avc: denied { open } for pid=6643 comm="syz.4.199" path="/dev/video3" dev="devtmpfs" ino=934 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 121.045384][ T6650] bond1: (slave gretap1): making interface the new active one [ 121.070451][ T47] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 121.100546][ T6650] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 121.118685][ T30] audit: type=1400 audit(1742408530.997:377): avc: denied { ioctl } for pid=6643 comm="syz.4.199" path="/dev/video3" dev="devtmpfs" ino=934 ioctlcmd=0x5608 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 121.232870][ T47] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 121.246633][ T30] audit: type=1400 audit(1742408531.007:378): avc: denied { ioctl } for pid=6644 comm="syz.3.198" path="socket:[11086]" dev="sockfs" ino=11086 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 121.247742][ T47] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 121.310346][ T30] audit: type=1400 audit(1742408531.007:379): avc: denied { write } for pid=6643 comm="syz.4.199" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 121.344770][ T47] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 121.417440][ T47] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 121.481053][ T47] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 121.540323][ T47] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.551463][ T6656] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1926430720 (3852861440 ns) > initial count (2369312970 ns). Using initial count to start timer. [ 121.571288][ T6650] syz.1.196 (6650) used greatest stack depth: 21344 bytes left [ 121.582533][ T6657] netlink: 44 bytes leftover after parsing attributes in process `syz.0.201'. [ 121.592946][ T47] usb 5-1: config 0 descriptor?? [ 121.600453][ T6645] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 121.809932][ T6663] tipc: Started in network mode [ 121.815121][ T6663] tipc: Node identity c66ba3a87fa, cluster identity 4711 [ 121.822735][ T6663] tipc: Enabled bearer , priority 0 [ 121.835934][ T6661] tipc: Resetting bearer [ 122.041984][ T47] plantronics 0003:047F:FFFF.0003: unknown main item tag 0xd [ 122.056467][ T47] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 122.083389][ T47] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 122.340399][ T973] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 122.512452][ T973] usb 3-1: Using ep0 maxpacket: 8 [ 122.528162][ T973] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 122.539752][ T973] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.549174][ T973] usb 3-1: Product: syz [ 122.564977][ T973] usb 3-1: Manufacturer: syz [ 122.570345][ T973] usb 3-1: SerialNumber: syz [ 122.609634][ T973] usb 3-1: config 0 descriptor?? [ 122.825167][ T973] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 122.853018][ T10] tipc: Node number set to 3117130664 [ 123.474461][ T6678] ubi31: attaching mtd0 [ 123.492087][ T6678] ubi31: scanning is finished [ 123.496940][ T6678] ubi31: empty MTD device detected [ 123.745086][ T6677] ip6t_REJECT: ECHOREPLY is not supported [ 123.922681][ T6662] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4234274794 (67748396704 ns) > initial count (26801589552 ns). Using initial count to start timer. [ 123.953857][ T6678] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 123.961856][ T6678] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 123.969286][ T6678] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 123.978864][ T6678] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 123.986686][ T6678] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 123.996643][ T6678] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 124.065484][ T6678] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3285644610 [ 124.124574][ T973] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 124.141974][ T6678] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 124.182314][ T6680] ubi31: background thread "ubi_bgt31d" started, PID 6680 [ 124.494663][ T6661] tipc: Disabling bearer [ 124.579162][ T973] usb 5-1: USB disconnect, device number 5 [ 124.659103][ T6686] netlink: 5 bytes leftover after parsing attributes in process `syz.1.211'. [ 124.687755][ T6686] netlink: 4 bytes leftover after parsing attributes in process `syz.1.211'. [ 124.707407][ T6686] netlink: 5 bytes leftover after parsing attributes in process `syz.1.211'. [ 124.749146][ T6686] netlink: 4 bytes leftover after parsing attributes in process `syz.1.211'. [ 125.050257][ T6686] netlink: 4 bytes leftover after parsing attributes in process `syz.1.211'. [ 125.082270][ T5909] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 125.089269][ T5869] usb 3-1: USB disconnect, device number 7 [ 125.450267][ T5909] usb 1-1: Using ep0 maxpacket: 16 [ 125.462229][ T30] kauditd_printk_skb: 46 callbacks suppressed [ 125.462238][ T30] audit: type=1400 audit(1742408535.887:426): avc: denied { create } for pid=6702 comm="syz.1.216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 125.491472][ T5909] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 192, changing to 11 [ 125.520476][ T5909] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 125.557407][ T5909] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 125.614737][ T30] audit: type=1400 audit(1742408536.007:427): avc: denied { map_read map_write } for pid=6704 comm="syz.2.217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 125.654362][ T5909] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 125.665234][ T5909] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 125.688807][ T5909] usb 1-1: SerialNumber: syz [ 125.706308][ T6683] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 125.730567][ T973] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 125.756494][ T30] audit: type=1400 audit(1742408536.177:428): avc: denied { map } for pid=6704 comm="syz.2.217" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 125.812011][ T6710] xt_hashlimit: size too large, truncated to 1048576 [ 125.818949][ T30] audit: type=1400 audit(1742408536.237:429): avc: denied { setopt } for pid=6709 comm="syz.4.219" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 126.074605][ T973] usb 2-1: config 0 has an invalid interface number: 95 but max is 0 [ 126.083484][ T973] usb 2-1: config 0 has no interface number 0 [ 126.093082][ T973] usb 2-1: config 0 interface 95 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 126.132828][ T30] audit: type=1400 audit(1742408536.547:430): avc: denied { setopt } for pid=6711 comm="syz.3.220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 126.221328][ T973] usb 2-1: New USB device found, idVendor=7725, idProduct=b0a8, bcdDevice= 7.46 [ 126.230699][ T973] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.238722][ T973] usb 2-1: Product: syz [ 126.256216][ T973] usb 2-1: Manufacturer: syz [ 126.287318][ T973] usb 2-1: SerialNumber: syz [ 126.309283][ T973] usb 2-1: config 0 descriptor?? [ 126.319306][ T6703] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 126.548132][ T30] audit: type=1400 audit(1742408536.967:431): avc: denied { read } for pid=6702 comm="syz.1.216" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 126.594195][ T5909] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 126.612184][ T973] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 126.903657][ T5909] usb 1-1: USB disconnect, device number 6 [ 126.910264][ T973] usb 2-1: MIDIStreaming interface descriptor not found [ 126.910539][ T30] audit: type=1400 audit(1742408536.997:432): avc: denied { open } for pid=6702 comm="syz.1.216" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 127.018244][ T973] usb 2-1: USB disconnect, device number 8 [ 127.266224][ T30] audit: type=1400 audit(1742408537.687:433): avc: denied { relabelfrom } for pid=6731 comm="syz.4.224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 127.308822][ T30] audit: type=1400 audit(1742408537.687:434): avc: denied { relabelto } for pid=6731 comm="syz.4.224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 128.043071][ T6113] udevd[6113]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.95/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 128.129532][ T30] audit: type=1400 audit(1742408537.867:435): avc: denied { create } for pid=6728 comm="syz.2.223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 129.390563][ T973] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 129.447646][ T6757] tipc: Enabling of bearer rejected, media not registered [ 129.530647][ T5870] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 129.583558][ T973] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 129.601047][ T973] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 129.621373][ T973] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 129.642392][ T973] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 129.656300][ T973] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.678248][ T973] usb 1-1: config 0 descriptor?? [ 129.700614][ T5870] usb 3-1: Using ep0 maxpacket: 32 [ 129.707135][ T5870] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 129.722116][ T5870] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 129.740323][ T5870] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 129.765418][ T5870] usb 3-1: Product: syz [ 129.770772][ T5870] usb 3-1: Manufacturer: syz [ 129.775388][ T5870] usb 3-1: SerialNumber: syz [ 129.799814][ T5870] usb 3-1: config 0 descriptor?? [ 129.811839][ T6750] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 130.132684][ T973] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 130.169218][ T973] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 130.329358][ T973] plantronics 0003:047F:FFFF.0004: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 130.332502][ T5870] usb 3-1: USB disconnect, device number 8 [ 130.593228][ T973] usb 1-1: USB disconnect, device number 7 [ 130.808164][ T6784] vxcan2: entered allmulticast mode [ 130.950367][ T5871] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 131.451058][ T5871] usb 5-1: device descriptor read/64, error -71 [ 131.506311][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 131.506325][ T30] audit: type=1400 audit(1742408541.927:447): avc: denied { ioctl } for pid=6794 comm="syz.2.239" path="socket:[12710]" dev="sockfs" ino=12710 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 131.537134][ C1] vkms_vblank_simulate: vblank timer overrun [ 131.686855][ T30] audit: type=1400 audit(1742408542.047:448): avc: denied { sqpoll } for pid=6794 comm="syz.2.239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 131.718049][ T5871] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 131.942869][ T6808] Driver unsupported XDP return value 0 on prog (id 63) dev N/A, expect packet loss! [ 132.033924][ T30] audit: type=1400 audit(1742408542.107:449): avc: denied { read write } for pid=6805 comm="syz.0.241" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 132.092817][ T5871] usb 5-1: device descriptor read/64, error -71 [ 132.147952][ T30] audit: type=1400 audit(1742408542.107:450): avc: denied { open } for pid=6805 comm="syz.0.241" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 132.201769][ T30] audit: type=1400 audit(1742408542.137:451): avc: denied { mounton } for pid=6805 comm="syz.0.241" path="/49/file0" dev="tmpfs" ino=277 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 132.226914][ T5871] usb usb5-port1: attempt power cycle [ 132.237354][ T30] audit: type=1400 audit(1742408542.137:452): avc: denied { mount } for pid=6805 comm="syz.0.241" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 132.526423][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.543067][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.972921][ T5871] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 133.047275][ T5871] usb 5-1: device descriptor read/8, error -71 [ 133.358740][ T30] audit: type=1400 audit(1742408543.597:453): avc: denied { unmount } for pid=5818 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 133.400516][ T5871] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 133.464314][ T5871] usb 5-1: device descriptor read/8, error -71 [ 133.590448][ T5869] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 134.205062][ T5871] usb usb5-port1: unable to enumerate USB device [ 134.450114][ T6840] netlink: 20 bytes leftover after parsing attributes in process `syz.0.250'. [ 134.468432][ T30] audit: type=1400 audit(1742408544.887:454): avc: denied { write } for pid=6841 comm="syz.2.253" name="sg0" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 134.509204][ T6843] netlink: 'syz.4.251': attribute type 72 has an invalid length. [ 134.525860][ T5869] usb 2-1: Using ep0 maxpacket: 16 [ 134.532681][ T5869] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 134.548672][ T6843] netlink: 24 bytes leftover after parsing attributes in process `syz.4.251'. [ 134.559058][ T5869] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 134.572466][ T30] audit: type=1400 audit(1742408544.997:455): avc: denied { ioctl } for pid=6841 comm="syz.2.253" path="/dev/sg0" dev="devtmpfs" ino=729 ioctlcmd=0x227b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 134.600906][ T5869] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 134.613392][ T5869] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 134.622707][ T5869] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.630886][ T5869] usb 2-1: Product: syz [ 134.636328][ T5869] usb 2-1: Manufacturer: syz [ 134.664808][ T5869] usb 2-1: SerialNumber: syz [ 134.878853][ T30] audit: type=1400 audit(1742408545.257:456): avc: denied { write } for pid=6844 comm="syz.3.252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 135.115529][ T6853] Cannot find del_set index 0 as target [ 135.184384][ T6854] netlink: 12 bytes leftover after parsing attributes in process `syz.4.254'. [ 135.495237][ T5869] usb 2-1: 0:2 : does not exist [ 137.123620][ T5870] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 137.137709][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 137.137723][ T30] audit: type=1400 audit(1742408547.557:465): avc: denied { bind } for pid=6824 comm="syz.1.246" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 137.185535][ T30] audit: type=1400 audit(1742408547.557:466): avc: denied { name_bind } for pid=6824 comm="syz.1.246" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 137.208609][ T30] audit: type=1400 audit(1742408547.557:467): avc: denied { node_bind } for pid=6824 comm="syz.1.246" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 137.320437][ T5870] usb 1-1: device descriptor read/64, error -71 [ 137.374987][ T6826] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.390099][ T6826] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.570820][ T6876] netlink: 4 bytes leftover after parsing attributes in process `syz.4.261'. [ 137.580554][ T6876] netlink: 'syz.4.261': attribute type 1 has an invalid length. [ 137.588195][ T6876] netlink: 'syz.4.261': attribute type 2 has an invalid length. [ 137.595898][ T5870] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 137.609920][ T30] audit: type=1400 audit(1742408548.027:468): avc: denied { connect } for pid=6875 comm="syz.4.261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 137.638486][ T30] audit: type=1400 audit(1742408548.027:469): avc: denied { name_connect } for pid=6875 comm="syz.4.261" dest=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 137.661739][ T6876] syz.4.261: attempt to access beyond end of device [ 137.661739][ T6876] loop4: rw=0, sector=2, nr_sectors = 1 limit=0 [ 137.675595][ T973] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 137.684048][ T6876] hfs: can't find a HFS filesystem on dev loop4 [ 137.697006][ T30] audit: type=1400 audit(1742408548.117:470): avc: denied { create } for pid=6875 comm="syz.4.261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 137.718389][ T30] audit: type=1400 audit(1742408548.117:471): avc: denied { write } for pid=6875 comm="syz.4.261" path="socket:[12245]" dev="sockfs" ino=12245 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 137.742594][ T5870] usb 1-1: device descriptor read/64, error -71 [ 137.749159][ T30] audit: type=1400 audit(1742408548.117:472): avc: denied { nlmsg_read } for pid=6875 comm="syz.4.261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 137.809732][ T30] audit: type=1400 audit(1742408548.227:473): avc: denied { ioctl } for pid=6877 comm="syz.4.262" path="socket:[12252]" dev="sockfs" ino=12252 ioctlcmd=0xf509 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 137.850465][ T973] usb 3-1: Using ep0 maxpacket: 32 [ 137.857032][ T973] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 137.865381][ T973] usb 3-1: config 0 has no interface number 0 [ 137.870582][ T5870] usb usb1-port1: attempt power cycle [ 137.877047][ T973] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 137.886673][ T973] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.895003][ T973] usb 3-1: Product: syz [ 137.903786][ T973] usb 3-1: Manufacturer: syz [ 137.910044][ T973] usb 3-1: SerialNumber: syz [ 137.939644][ T973] usb 3-1: config 0 descriptor?? [ 137.951646][ T973] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 138.061256][ T5869] usb 2-1: 1:0: cannot get min/max values for control 6 (id 1) [ 138.121604][ T5869] usb 2-1: USB disconnect, device number 9 [ 138.164219][ T973] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 138.178053][ T973] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 138.216424][ T6888] siw: device registration error -23 [ 138.280408][ T10] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 138.295949][ T30] audit: type=1400 audit(1742408548.717:474): avc: denied { create } for pid=6889 comm="syz.3.266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 138.372298][ T6447] udevd[6447]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 138.479269][ T10] usb 5-1: New USB device found, idVendor=1943, idProduct=2250, bcdDevice= 0.01 [ 138.491787][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.499950][ T10] usb 5-1: Product: syz [ 138.504351][ T10] usb 5-1: Manufacturer: syz [ 138.508987][ T10] usb 5-1: SerialNumber: syz [ 138.533005][ T10] usb 5-1: config 0 descriptor?? [ 138.587115][ T10] go7007 5-1:0.0: Sensoray 2250 found [ 138.607355][ T10] go7007 5-1:0.0: probe with driver go7007 failed with error -12 [ 138.731215][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 138.739508][ T10] usb 3-1: USB disconnect, device number 9 [ 138.770216][ T10] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 139.370383][ T10] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 139.405523][ T6883] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.414410][ T10] quatech2 3-1:0.51: device disconnected [ 139.427534][ T6883] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.508169][ T6883] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.556552][ T6911] netlink: 'syz.2.272': attribute type 1 has an invalid length. [ 139.568752][ T6883] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.606372][ T6911] netlink: 8 bytes leftover after parsing attributes in process `syz.2.272'. [ 139.620783][ T5869] usb 5-1: USB disconnect, device number 10 [ 139.628321][ T6911] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 139.648476][ T6911] bond2: (slave batadv2): Enslaving as a backup interface with an up link [ 139.708225][ T6911] bond2 (unregistering): (slave batadv2): Releasing backup interface [ 139.734580][ T6911] bond2 (unregistering): Released all slaves [ 140.750524][ T5869] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 140.824234][ T6948] netlink: 5 bytes leftover after parsing attributes in process `syz.3.281'. [ 140.840080][ T6948] netlink: 4 bytes leftover after parsing attributes in process `syz.3.281'. [ 140.851244][ T6948] netlink: 5 bytes leftover after parsing attributes in process `syz.3.281'. [ 140.866217][ T6948] netlink: 4 bytes leftover after parsing attributes in process `syz.3.281'. [ 140.876374][ T6948] netlink: 4 bytes leftover after parsing attributes in process `syz.3.281'. [ 140.886171][ T6950] process 'syz.4.282' launched './file1' with NULL argv: empty string added [ 140.921751][ T5869] usb 3-1: config 0 has an invalid interface number: 235 but max is 0 [ 140.931076][ T5869] usb 3-1: config 0 has no interface number 0 [ 140.937186][ T5869] usb 3-1: config 0 interface 235 altsetting 16 endpoint 0x5 has invalid wMaxPacketSize 0 [ 140.985586][ T5869] usb 3-1: config 0 interface 235 has no altsetting 0 [ 141.015032][ T5869] usb 3-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice=3e.18 [ 141.037481][ T5869] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.053556][ T5869] usb 3-1: Product: syz [ 141.057881][ T5869] usb 3-1: Manufacturer: syz [ 141.186257][ T5869] usb 3-1: SerialNumber: syz [ 141.193820][ T5869] usb 3-1: config 0 descriptor?? [ 141.202580][ T5869] keyspan 3-1:0.235: Keyspan 1 port adapter converter detected [ 141.210821][ T5869] keyspan 3-1:0.235: found no endpoint descriptor for endpoint 87 [ 141.218750][ T5869] keyspan 3-1:0.235: found no endpoint descriptor for endpoint 7 [ 141.227340][ T5869] keyspan 3-1:0.235: found no endpoint descriptor for endpoint 81 [ 141.240307][ T5870] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 141.257525][ T5869] keyspan 3-1:0.235: found no endpoint descriptor for endpoint 1 [ 141.330437][ T5869] keyspan 3-1:0.235: found no endpoint descriptor for endpoint 85 [ 141.338455][ T5869] keyspan 3-1:0.235: unsupported endpoint type 0 [ 141.353004][ T5869] usb 3-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 141.390221][ T5870] usb 5-1: device descriptor read/64, error -71 [ 141.730483][ T5870] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 141.808108][ T10] usb 3-1: USB disconnect, device number 10 [ 141.818374][ T10] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 141.830866][ T10] keyspan 3-1:0.235: device disconnected [ 141.929392][ T6964] netlink: 'syz.0.287': attribute type 1 has an invalid length. [ 141.948858][ T5870] usb 5-1: device descriptor read/64, error -71 [ 141.978247][ T6964] netlink: 8 bytes leftover after parsing attributes in process `syz.0.287'. [ 141.996308][ T6964] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 142.004653][ T6964] bond1: (slave batadv1): Enslaving as a backup interface with an up link [ 142.024884][ T6964] bond1 (unregistering): (slave batadv1): Releasing backup interface [ 142.046442][ T6964] bond1 (unregistering): Released all slaves [ 142.065116][ T5870] usb usb5-port1: attempt power cycle [ 142.086506][ T6967] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1926430720 (3852861440 ns) > initial count (2369312970 ns). Using initial count to start timer. [ 142.166564][ T6971] netlink: 8 bytes leftover after parsing attributes in process `syz.0.289'. [ 142.176164][ T6971] netlink: 8 bytes leftover after parsing attributes in process `syz.0.289'. [ 142.186284][ T6972] netlink: 8 bytes leftover after parsing attributes in process `syz.0.289'. [ 142.245128][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 142.245142][ T30] audit: type=1400 audit(1742408552.667:497): avc: denied { name_bind } for pid=6974 comm="syz.0.290" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 142.410380][ T5870] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 142.430800][ T5870] usb 5-1: device descriptor read/8, error -71 [ 142.490741][ T30] audit: type=1400 audit(1742408552.917:498): avc: denied { create } for pid=6984 comm="syz.2.293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 142.510645][ T30] audit: type=1400 audit(1742408552.917:499): avc: denied { connect } for pid=6984 comm="syz.2.293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 142.670253][ T5870] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 142.777694][ T10] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 142.826812][ T10] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 142.861186][ T5870] usb 5-1: device descriptor read/8, error -71 [ 142.970642][ T5870] usb usb5-port1: unable to enumerate USB device [ 143.486118][ T30] audit: type=1400 audit(1742408553.887:500): avc: denied { nlmsg_read } for pid=6998 comm="syz.1.297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 144.271378][ T30] audit: type=1400 audit(1742408554.657:501): avc: denied { unmount } for pid=5823 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 144.476357][ T6968] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4234274794 (67748396704 ns) > initial count (26801589552 ns). Using initial count to start timer. [ 144.532750][ T30] audit: type=1400 audit(1742408554.957:502): avc: denied { listen } for pid=7014 comm="syz.4.301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 144.822531][ T7020] Bluetooth: MGMT ver 1.23 [ 144.852122][ T30] audit: type=1400 audit(1742408555.237:503): avc: denied { setopt } for pid=7014 comm="syz.4.301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 145.082231][ T30] audit: type=1400 audit(1742408555.247:504): avc: denied { getopt } for pid=7014 comm="syz.4.301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 145.226930][ T30] audit: type=1400 audit(1742408555.247:505): avc: denied { write } for pid=7014 comm="syz.4.301" path="socket:[13283]" dev="sockfs" ino=13283 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 146.041211][ T7030] pim6reg1: entered promiscuous mode [ 146.046644][ T7030] pim6reg1: entered allmulticast mode [ 146.544785][ T5871] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 146.795025][ T5871] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 146.807719][ T5871] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 146.817663][ T5871] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 146.831261][ T5871] usb 1-1: New USB device found, idVendor=172f, idProduct=0501, bcdDevice= 0.00 [ 146.970950][ T30] audit: type=1400 audit(1742408557.347:506): avc: denied { create } for pid=7042 comm="syz.4.310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 147.462691][ T5871] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.491251][ T5871] usb 1-1: config 0 descriptor?? [ 147.599702][ T30] audit: type=1400 audit(1742408558.017:507): avc: denied { sys_module } for pid=7048 comm="syz.2.312" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 147.621296][ T7049] Invalid ELF header type: 0 != 1 [ 147.630371][ T30] audit: type=1400 audit(1742408558.047:508): avc: denied { module_load } for pid=7048 comm="syz.2.312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 147.631753][ T10] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 147.793772][ T30] audit: type=1400 audit(1742408558.217:509): avc: denied { open } for pid=7050 comm="syz.2.313" path="/dev/ptyq9" dev="devtmpfs" ino=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 147.821757][ T10] usb 2-1: config 0 has no interfaces? [ 147.827336][ T10] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 147.857956][ T30] audit: type=1400 audit(1742408558.267:510): avc: denied { ioctl } for pid=7050 comm="syz.2.313" path="/dev/ttyq9" dev="devtmpfs" ino=384 ioctlcmd=0x540a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 147.884950][ T30] audit: type=1400 audit(1742408558.277:511): avc: denied { read write } for pid=7050 comm="syz.2.313" name="vhost-net" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 147.888666][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.909639][ T30] audit: type=1400 audit(1742408558.277:512): avc: denied { open } for pid=7050 comm="syz.2.313" path="/dev/vhost-net" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 147.938399][ T7036] syz.0.307 (7036): /proc/7036/oom_adj is deprecated, please use /proc/7036/oom_score_adj instead. [ 147.952002][ T30] audit: type=1400 audit(1742408558.277:513): avc: denied { ioctl } for pid=7050 comm="syz.2.313" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 147.978406][ T7036] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 148.016601][ T10] usb 2-1: config 0 descriptor?? [ 148.240277][ T5869] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 148.252965][ T7046] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.273159][ T7046] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.321170][ T7046] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.339631][ T7046] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.373200][ T5870] usb 2-1: USB disconnect, device number 10 [ 148.390940][ T5869] usb 4-1: Using ep0 maxpacket: 16 [ 148.401816][ T5869] usb 4-1: config 2 has an invalid interface number: 32 but max is 2 [ 148.411195][ T5869] usb 4-1: config 2 has an invalid interface number: 55 but max is 2 [ 148.419291][ T5869] usb 4-1: config 2 has no interface number 1 [ 148.426521][ T5869] usb 4-1: config 2 has no interface number 2 [ 148.450279][ T5869] usb 4-1: config 2 interface 32 has no altsetting 0 [ 148.467216][ T5869] usb 4-1: config 2 interface 0 has no altsetting 0 [ 148.487460][ T5869] usb 4-1: config 2 interface 55 has no altsetting 0 [ 148.498336][ T5869] usb 4-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=65.11 [ 148.514848][ T5869] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.522799][ T7068] netlink: 'syz.2.317': attribute type 1 has an invalid length. [ 148.531505][ T5869] usb 4-1: Product: syz [ 148.539991][ T5869] usb 4-1: Manufacturer: syz [ 148.545471][ T5869] usb 4-1: SerialNumber: syz [ 148.578910][ T7068] __nla_validate_parse: 6 callbacks suppressed [ 148.578926][ T7068] netlink: 8 bytes leftover after parsing attributes in process `syz.2.317'. [ 148.622525][ T7068] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 148.646565][ T7068] bond2: (slave batadv3): Enslaving as a backup interface with an up link [ 148.666472][ T7070] bond2 (unregistering): (slave batadv3): Releasing backup interface [ 148.685255][ T7070] bond2 (unregistering): Released all slaves [ 148.721848][ T5871] usbhid 1-1:0.0: can't add hid device: -71 [ 148.735380][ T5871] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 148.777046][ T7054] IPVS: set_ctl: invalid protocol: 11612 172.30.1.4:20003 [ 148.788151][ T6960] Bluetooth: hci5: Frame reassembly failed (-84) [ 148.791147][ T5871] usb 1-1: USB disconnect, device number 11 [ 148.830594][ T10] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 148.954288][ T7077] warning: `syz.0.320' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 149.068377][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 149.076025][ T7079] netlink: 'syz.2.319': attribute type 1 has an invalid length. [ 149.159281][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 149.204139][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 149.367234][ T10] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 1.40 [ 149.376434][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.384492][ T10] usb 2-1: Product: syz [ 149.389089][ T10] usb 2-1: Manufacturer: syz [ 149.393744][ T10] usb 2-1: SerialNumber: syz [ 149.437930][ T7079] 8021q: adding VLAN 0 to HW filter on device bond2 [ 149.524042][ T7081] gretap1: entered promiscuous mode [ 149.709361][ T30] audit: type=1400 audit(1742408560.127:514): avc: denied { getopt } for pid=7094 comm="syz.0.323" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 149.730158][ T5870] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 149.785850][ T30] audit: type=1400 audit(1742408560.207:515): avc: denied { read } for pid=5490 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 149.803487][ T10] usb 2-1: 0:2 : does not exist [ 149.820128][ T30] audit: type=1400 audit(1742408560.237:516): avc: denied { search } for pid=5490 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 149.890387][ T5870] usb 5-1: Using ep0 maxpacket: 32 [ 149.917840][ T5870] usb 5-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 149.939953][ T7101] sctp: [Deprecated]: syz.2.325 (pid 7101) Use of struct sctp_assoc_value in delayed_ack socket option. [ 149.939953][ T7101] Use struct sctp_sack_info instead [ 149.956291][ T5870] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.964932][ T5870] usb 5-1: Product: syz [ 149.969331][ T5870] usb 5-1: Manufacturer: syz [ 149.974390][ T5870] usb 5-1: SerialNumber: syz [ 150.032441][ T5870] usb 5-1: config 0 descriptor?? [ 150.069464][ T5870] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 150.222987][ T10] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 150.246589][ T10] usb 2-1: 5:0: cannot get min/max values for control 4 (id 5) [ 150.282046][ T10] usb 2-1: 5:0: cannot get min/max values for control 5 (id 5) [ 150.323745][ T10] usb 2-1: 5:0: cannot get min/max values for control 5 (id 5) [ 150.342578][ T10] usb 2-1: USB disconnect, device number 11 [ 150.566415][ T6447] udevd[6447]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 150.653590][ T7087] netlink: 12 bytes leftover after parsing attributes in process `syz.4.321'. [ 150.840465][ T5820] Bluetooth: hci5: command 0x1003 tx timeout [ 150.848020][ T5828] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 151.200562][ T5869] usb 4-1: USB disconnect, device number 6 [ 152.187529][ T5870] gspca_stk1135: reg_w 0xf err -110 [ 152.199170][ T5870] gspca_stk1135: serial bus timeout: status=0x00 [ 152.249470][ T5870] gspca_stk1135: Sensor write failed [ 152.271025][ T5870] gspca_stk1135: serial bus timeout: status=0x00 [ 152.284919][ T5870] gspca_stk1135: Sensor write failed [ 152.304070][ T5870] gspca_stk1135: serial bus timeout: status=0x00 [ 152.391263][ T5870] gspca_stk1135: Sensor read failed [ 152.408423][ T5870] gspca_stk1135: serial bus timeout: status=0x00 [ 152.429109][ T5870] gspca_stk1135: Sensor read failed [ 152.438216][ T5870] gspca_stk1135: Detected sensor type unknown (0x0) [ 152.482176][ T5870] gspca_stk1135: serial bus timeout: status=0x00 [ 152.503265][ T5870] gspca_stk1135: Sensor read failed [ 152.508532][ T5870] gspca_stk1135: serial bus timeout: status=0x00 [ 152.534783][ T5870] gspca_stk1135: Sensor read failed [ 152.550049][ T6448] udevd[6448]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:2.55/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 152.551380][ T6364] udevd[6364]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:2.32/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 152.582699][ T5971] udevd[5971]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:2.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 152.608670][ T5870] gspca_stk1135: serial bus timeout: status=0x00 [ 152.640286][ T5870] gspca_stk1135: Sensor write failed [ 152.645633][ T5870] gspca_stk1135: serial bus timeout: status=0x00 [ 152.655604][ T5870] gspca_stk1135: Sensor write failed [ 152.666700][ T5870] stk1135 5-1:0.0: probe with driver stk1135 failed with error -110 [ 153.521503][ T10] usb 5-1: USB disconnect, device number 15 [ 153.878237][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 153.878253][ T30] audit: type=1400 audit(1742408564.277:536): avc: denied { create } for pid=7182 comm="syz.4.337" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 153.914599][ T7186] IPVS: stopping backup sync thread 7187 ... [ 153.980458][ T5869] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 154.180314][ T30] audit: type=1400 audit(1742408564.277:537): avc: denied { write } for pid=7182 comm="syz.4.337" name="file0" dev="tmpfs" ino=360 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 154.212849][ T7189] netlink: 5 bytes leftover after parsing attributes in process `syz.1.339'. [ 154.226719][ T7189] netlink: 4 bytes leftover after parsing attributes in process `syz.1.339'. [ 154.239023][ T30] audit: type=1400 audit(1742408564.277:538): avc: denied { open } for pid=7182 comm="syz.4.337" path="/66/file0" dev="tmpfs" ino=360 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 154.264086][ T30] audit: type=1400 audit(1742408564.277:539): avc: denied { ioctl } for pid=7182 comm="syz.4.337" path="/66/file0" dev="tmpfs" ino=360 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 154.297453][ T7189] netlink: 5 bytes leftover after parsing attributes in process `syz.1.339'. [ 154.301784][ T5869] usb 4-1: unable to get BOS descriptor or descriptor too short [ 154.309968][ T7189] netlink: 4 bytes leftover after parsing attributes in process `syz.1.339'. [ 154.316066][ T5869] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 154.334834][ T5869] usb 4-1: config 1 has no interface number 1 [ 154.334845][ T7189] netlink: 4 bytes leftover after parsing attributes in process `syz.1.339'. [ 154.350290][ T5869] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 154.365589][ T5869] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 154.376203][ T5869] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.384543][ T5869] usb 4-1: Product: syz [ 154.389432][ T5869] usb 4-1: Manufacturer: syz [ 154.395007][ T5869] usb 4-1: SerialNumber: syz [ 154.442787][ T30] audit: type=1400 audit(1742408564.867:540): avc: denied { setopt } for pid=7192 comm="syz.1.341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 154.466651][ T30] audit: type=1400 audit(1742408564.887:541): avc: denied { ioctl } for pid=7192 comm="syz.1.341" path="socket:[14727]" dev="sockfs" ino=14727 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 154.560442][ T5832] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 154.595531][ T7200] tipc: Failed to obtain node identity [ 154.607819][ T7200] tipc: Enabling of bearer rejected, failed to enable media [ 154.638637][ T5869] usb 4-1: 2:1 : format type 0 is detected, processed as PCM [ 154.657607][ T5869] usb 4-1: 2:1: cannot set freq 3887962 to ep 0x82 [ 154.698812][ T30] audit: type=1400 audit(1742408565.117:542): avc: denied { unlink } for pid=5821 comm="syz-executor" name="file0" dev="tmpfs" ino=360 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 154.742800][ T5832] usb 1-1: Using ep0 maxpacket: 32 [ 154.782146][ T5832] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 154.798444][ T5869] usb 4-1: USB disconnect, device number 7 [ 154.804501][ T5832] usb 1-1: config 0 has no interface number 0 [ 154.823198][ T5832] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 154.839175][ T5832] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.854880][ T5832] usb 1-1: Product: syz [ 154.859267][ T5832] usb 1-1: Manufacturer: syz [ 154.864232][ T5832] usb 1-1: SerialNumber: syz [ 154.999893][ T7214] siw: device registration error -23 [ 155.051348][ T5832] usb 1-1: config 0 descriptor?? [ 155.070666][ T5832] smsc95xx v2.0.0 [ 155.205141][ T5811] udevd[5811]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 155.678544][ T30] audit: type=1400 audit(1742408566.097:543): avc: denied { append } for pid=7224 comm="syz.4.348" name="001" dev="devtmpfs" ino=746 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 155.750322][ T30] audit: type=1400 audit(1742408566.097:544): avc: denied { read } for pid=7224 comm="syz.4.348" dev="sockfs" ino=14112 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 155.916498][ T7225] 9pnet_fd: Insufficient options for proto=fd [ 155.972631][ T30] audit: type=1400 audit(1742408566.377:545): avc: denied { create } for pid=7230 comm="syz.2.350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 155.995298][ T10] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 156.167037][ T5832] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 156.200388][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 156.209866][ T7191] netlink: 12 bytes leftover after parsing attributes in process `syz.0.340'. [ 156.229428][ T10] usb 4-1: config 8 has an invalid interface number: 39 but max is 0 [ 156.252658][ T10] usb 4-1: config 8 has no interface number 0 [ 156.265066][ T10] usb 4-1: config 8 interface 39 altsetting 1 has an endpoint descriptor with address 0xDF, changing to 0x8F [ 156.290306][ T10] usb 4-1: config 8 interface 39 altsetting 1 endpoint 0x8F has invalid wMaxPacketSize 0 [ 156.323803][ T10] usb 4-1: config 8 interface 39 altsetting 1 bulk endpoint 0x8F has invalid maxpacket 0 [ 156.348364][ T10] usb 4-1: config 8 interface 39 has no altsetting 0 [ 156.367699][ T10] usb 4-1: New USB device found, idVendor=05ac, idProduct=c704, bcdDevice=62.77 [ 156.383160][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.420295][ T10] usb 4-1: Product: syz [ 156.444458][ T10] usb 4-1: Manufacturer: syz [ 156.469411][ T10] usb 4-1: SerialNumber: syz [ 157.217150][ T10] ipheth 4-1:8.39: ipheth_get_macaddr: usb_control_msg: -71 [ 157.237468][ T10] ipheth 4-1:8.39: probe with driver ipheth failed with error -71 [ 157.276202][ T10] usb 4-1: USB disconnect, device number 8 [ 157.953884][ T7265] openvswitch: netlink: Missing valid actions attribute. [ 157.961255][ T7265] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 158.542144][ T7270] siw: device registration error -23 [ 158.575986][ T5832] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 158.606523][ T5832] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 158.659491][ T5832] usb 1-1: USB disconnect, device number 12 [ 158.702446][ T7274] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 158.787488][ T7274] CIFS: Unable to determine destination address [ 158.935537][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 158.935555][ T30] audit: type=1400 audit(1742408569.357:557): avc: denied { bind } for pid=7286 comm="syz.2.365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 159.570400][ T30] audit: type=1400 audit(1742408569.987:558): avc: denied { create } for pid=7295 comm="syz.1.368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 159.779660][ T30] audit: type=1400 audit(1742408570.057:559): avc: denied { ioctl } for pid=7295 comm="syz.1.368" path="socket:[14205]" dev="sockfs" ino=14205 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 160.518694][ T30] audit: type=1400 audit(1742408570.587:560): avc: denied { mount } for pid=7293 comm="syz.2.367" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 160.528330][ T7296] block device autoloading is deprecated and will be removed. [ 160.550366][ T7296] syz.1.368: attempt to access beyond end of device [ 160.550366][ T7296] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 161.038991][ T30] audit: type=1400 audit(1742408571.457:561): avc: denied { getopt } for pid=7289 comm="syz.4.366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 161.065580][ T5832] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 161.230283][ T5832] usb 4-1: Using ep0 maxpacket: 16 [ 161.239124][ T5832] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 161.267338][ T5832] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 161.298590][ T5832] usb 4-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 161.326376][ T5832] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.340434][ T10] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 161.361867][ T5832] usb 4-1: config 0 descriptor?? [ 161.500061][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 161.517035][ T10] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 161.561160][ T10] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 161.580284][ T10] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 161.646244][ T10] usb 2-1: Product: syz [ 161.660247][ T10] usb 2-1: Manufacturer: syz [ 161.668538][ T10] usb 2-1: SerialNumber: syz [ 161.680777][ T10] usb 2-1: config 0 descriptor?? [ 161.894443][ T5832] appleir 0003:05AC:8241.0006: unknown main item tag 0x0 [ 162.211458][ T7320] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 162.348507][ T30] audit: type=1400 audit(1742408572.167:562): avc: denied { mount } for pid=7323 comm="syz.2.374" name="/" dev="ramfs" ino=14935 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 162.372128][ T5832] appleir 0003:05AC:8241.0006: unknown main item tag 0x0 [ 162.379185][ T5832] appleir 0003:05AC:8241.0006: unknown main item tag 0x0 [ 162.387059][ T5832] appleir 0003:05AC:8241.0006: unknown main item tag 0x0 [ 162.403744][ T5832] appleir 0003:05AC:8241.0006: unknown main item tag 0x0 [ 162.418531][ T5832] appleir 0003:05AC:8241.0006: No inputs registered, leaving [ 162.420248][ T30] audit: type=1400 audit(1742408572.217:563): avc: denied { ioctl } for pid=7323 comm="syz.2.374" path="socket:[14938]" dev="sockfs" ino=14938 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 162.460668][ T30] audit: type=1400 audit(1742408572.757:564): avc: denied { unmount } for pid=5831 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 162.498104][ T5832] appleir 0003:05AC:8241.0006: hiddev1,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.3-1/input0 [ 162.541520][ T5871] usb 2-1: USB disconnect, device number 12 [ 162.770653][ T30] audit: type=1400 audit(1742408573.187:565): avc: denied { mount } for pid=7329 comm="syz.2.375" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 162.836765][ T30] audit: type=1400 audit(1742408573.197:566): avc: denied { read write } for pid=7329 comm="syz.2.375" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 162.989251][ T7335] netlink: 'syz.4.377': attribute type 10 has an invalid length. [ 163.019448][ T7335] netlink: 'syz.4.377': attribute type 19 has an invalid length. [ 163.032503][ T7335] netlink: 156 bytes leftover after parsing attributes in process `syz.4.377'. [ 163.103002][ T7338] netlink: 'syz.1.379': attribute type 10 has an invalid length. [ 163.122575][ T7338] netlink: 8 bytes leftover after parsing attributes in process `syz.1.379'. [ 163.475890][ T7343] syz.1.380: attempt to access beyond end of device [ 163.475890][ T7343] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 163.663148][ T7347] 9pnet_fd: Insufficient options for proto=fd [ 164.008229][ T10] usb 4-1: USB disconnect, device number 9 [ 164.961227][ T5832] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 165.077160][ T7372] netlink: 'syz.0.390': attribute type 10 has an invalid length. [ 165.105762][ T7372] netlink: 8 bytes leftover after parsing attributes in process `syz.0.390'. [ 165.224159][ T5832] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 165.224222][ T5832] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.244179][ T5832] usb 5-1: config 0 descriptor?? [ 165.275889][ T5832] cp210x 5-1:0.0: cp210x converter detected [ 165.339255][ T7374] dvmrp0: entered allmulticast mode [ 165.656940][ T5832] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 165.797209][ T7367] dvmrp0: left allmulticast mode [ 165.974512][ T5832] usb 5-1: cp210x converter now attached to ttyUSB0 [ 165.974573][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 165.974585][ T30] audit: type=1400 audit(1742408576.397:569): avc: denied { read } for pid=7380 comm="syz.2.393" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 166.177185][ T7360] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.262092][ T7360] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 166.275431][ T30] audit: type=1400 audit(1742408576.417:570): avc: denied { open } for pid=7380 comm="syz.2.393" path="/dev/ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 166.317467][ T10] usb 5-1: USB disconnect, device number 16 [ 166.340633][ T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 166.366926][ T10] cp210x 5-1:0.0: device disconnected [ 166.401804][ T30] audit: type=1400 audit(1742408576.827:571): avc: denied { create } for pid=7394 comm="syz.4.395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 166.429838][ T30] audit: type=1400 audit(1742408576.847:572): avc: denied { create } for pid=7394 comm="syz.4.395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 166.479889][ T7397] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 166.520985][ T5832] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 166.690300][ T5832] usb 3-1: Using ep0 maxpacket: 32 [ 166.729318][ T30] audit: type=1400 audit(1742408577.147:573): avc: denied { ioctl } for pid=7403 comm="syz.3.398" path="socket:[15098]" dev="sockfs" ino=15098 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 166.771697][ T5832] usb 3-1: config 0 has an invalid interface number: 145 but max is 1 [ 166.804576][ T5832] usb 3-1: config 0 has an invalid interface number: 43 but max is 1 [ 166.837521][ T5832] usb 3-1: config 0 has no interface number 0 [ 166.857868][ T5832] usb 3-1: config 0 has no interface number 1 [ 166.877097][ T5832] usb 3-1: config 0 interface 43 altsetting 250 bulk endpoint 0xF has invalid maxpacket 1023 [ 166.896021][ T5832] usb 3-1: config 0 interface 43 altsetting 250 has a duplicate endpoint with address 0x2, skipping [ 166.908306][ T5832] usb 3-1: config 0 interface 43 altsetting 250 has an endpoint descriptor with address 0xCE, changing to 0x8E [ 166.926413][ T5832] usb 3-1: config 0 interface 43 altsetting 250 endpoint 0x8E has an invalid bInterval 180, changing to 11 [ 166.939900][ T5832] usb 3-1: config 0 interface 43 altsetting 250 endpoint 0x8E has invalid maxpacket 16902, setting to 1024 [ 166.955477][ T5832] usb 3-1: config 0 interface 43 altsetting 250 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 166.969000][ T5832] usb 3-1: config 0 interface 145 has no altsetting 0 [ 166.976122][ T5832] usb 3-1: config 0 interface 43 has no altsetting 0 [ 166.985128][ T5832] usb 3-1: New USB device found, idVendor=06cd, idProduct=0104, bcdDevice=c8.6a [ 166.994423][ T5832] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.003717][ T5832] usb 3-1: Product: syz [ 167.008070][ T5832] usb 3-1: Manufacturer: syz [ 167.012770][ T5832] usb 3-1: SerialNumber: syz [ 167.025682][ T5832] usb 3-1: config 0 descriptor?? [ 167.060341][ T6060] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 167.114785][ T7414] netlink: 5 bytes leftover after parsing attributes in process `syz.0.402'. [ 167.124815][ T7414] netlink: 4 bytes leftover after parsing attributes in process `syz.0.402'. [ 167.134337][ T7414] netlink: 5 bytes leftover after parsing attributes in process `syz.0.402'. [ 167.143929][ T7414] netlink: 4 bytes leftover after parsing attributes in process `syz.0.402'. [ 167.154062][ T7414] netlink: 4 bytes leftover after parsing attributes in process `syz.0.402'. [ 167.210335][ T6060] usb 5-1: Using ep0 maxpacket: 16 [ 167.240860][ T6060] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 167.279284][ T6060] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 167.301859][ T6060] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 167.311929][ T6060] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.319985][ T6060] usb 5-1: Product: syz [ 167.324483][ T6060] usb 5-1: Manufacturer: syz [ 167.329291][ T6060] usb 5-1: SerialNumber: syz [ 167.490935][ T6060] usb 5-1: config 0 descriptor?? [ 167.509323][ T6060] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 167.560387][ T6060] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 168.138587][ T6060] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 168.162407][ T6060] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 169.206168][ T5869] IPVS: starting estimator thread 0... [ 169.213963][ T6060] em28xx 5-1:0.0: Unknown AC97 audio processor detected! [ 169.251363][ T5832] keyspan_pda 3-1:0.145: required endpoints missing [ 169.268212][ T5832] keyspan_pda 3-1:0.43: Keyspan PDA converter detected [ 169.281763][ T5832] usb 3-1: Keyspan PDA converter now attached to ttyUSB0 [ 169.303516][ T5832] usb 3-1: USB disconnect, device number 11 [ 169.310474][ T7429] IPVS: using max 32 ests per chain, 76800 per kthread [ 169.370491][ T5832] keyspan_pda ttyUSB0: Keyspan PDA converter now disconnected from ttyUSB0 [ 169.381271][ T5832] keyspan_pda 3-1:0.43: device disconnected [ 170.439195][ T6060] em28xx 5-1:0.0: couldn't setup AC97 register 2 [ 170.567954][ T6060] em28xx 5-1:0.0: couldn't setup AC97 register 4 [ 170.631463][ T30] audit: type=1400 audit(1742408580.797:574): avc: denied { audit_read } for pid=7434 comm="syz.2.408" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 170.712598][ T6060] em28xx 5-1:0.0: couldn't setup AC97 register 6 [ 170.769629][ T5869] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 170.814237][ T6060] em28xx 5-1:0.0: couldn't setup AC97 register 54 [ 170.923136][ T6060] em28xx 5-1:0.0: couldn't setup AC97 register 56 [ 170.938013][ T30] audit: type=1400 audit(1742408580.927:575): avc: denied { map } for pid=7448 comm="syz.1.409" path="/dev/bus/usb/003/001" dev="devtmpfs" ino=727 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 171.184630][ T5869] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 171.326888][ T5869] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 171.546786][ T5869] usb 4-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.00 [ 171.668440][ T5869] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.895627][ T5869] usb 4-1: config 0 descriptor?? [ 172.080511][ T7458] netlink: 8 bytes leftover after parsing attributes in process `syz.0.413'. [ 172.092720][ T26] usb 5-1: USB disconnect, device number 17 [ 172.298418][ T7462] veth0_vlan: left promiscuous mode [ 172.327876][ T7462] veth0_vlan: entered promiscuous mode [ 172.397232][ T5869] hid-retrode 0003:0403:97C1.0007: ignoring exceeding usage max [ 172.446308][ T5869] hid-retrode 0003:0403:97C1.0007: unknown global tag 0xd [ 172.501828][ T5869] hid-retrode 0003:0403:97C1.0007: item 0 1 1 13 parsing failed [ 172.509881][ T5869] hid-retrode 0003:0403:97C1.0007: probe with driver hid-retrode failed with error -22 [ 172.531199][ T30] audit: type=1400 audit(1742408582.957:576): avc: denied { ioctl } for pid=7469 comm="syz.1.417" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 172.625993][ T5832] usb 4-1: USB disconnect, device number 10 [ 172.784083][ T7473] siw: device registration error -23 [ 173.196020][ T7487] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.491871][ T7487] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.814516][ T30] audit: type=1400 audit(1742408584.237:577): avc: denied { append } for pid=7490 comm="syz.4.422" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 173.842388][ T7491] loop6: detected capacity change from 0 to 524287999 [ 173.849594][ T5869] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 173.875110][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 173.884440][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 173.903782][ T30] audit: type=1400 audit(1742408584.297:578): avc: denied { getopt } for pid=7490 comm="syz.4.422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 173.931927][ T7492] loop6: detected capacity change from 524287999 to 0 [ 173.943208][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 173.952387][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 173.960466][ T7491] ldm_validate_partition_table(): Disk read failed. [ 173.969426][ T7491] Dev loop6: unable to read RDB block 0 [ 173.980516][ T7491] loop6: unable to read partition table [ 173.990490][ T7491] loop6: partition table beyond EOD, truncated [ 173.998988][ T7491] loop_reread_partitions: partition scan of loop6 (‰u0AŠ°ßjû$UX àÈ¿`LÊAó‰8üú9>õià¼òD»K#U[ì«fÇÒW 7ÐðŽŠØ–ºg v–Þ) failed (rc=-5) [ 174.030272][ T5869] usb 2-1: Using ep0 maxpacket: 16 [ 174.048103][ T5869] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 174.071208][ T5869] usb 2-1: config 0 has no interface number 0 [ 174.103912][ T5869] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 174.130404][ T5869] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 174.160407][ T5869] usb 2-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 174.178098][ T7499] netlink: 8 bytes leftover after parsing attributes in process `syz.4.425'. [ 174.190586][ T5869] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.208936][ T5869] usb 2-1: config 0 descriptor?? [ 174.434172][ T5869] usbhid 2-1:0.1: can't add hid device: -71 [ 174.557206][ T30] audit: type=1400 audit(1742408584.977:579): avc: denied { bind } for pid=7507 comm="syz.4.430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 174.597404][ T30] audit: type=1400 audit(1742408584.977:580): avc: denied { connect } for pid=7507 comm="syz.4.430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 174.662225][ T5869] usbhid 2-1:0.1: probe with driver usbhid failed with error -71 [ 174.698725][ T5869] usb 2-1: USB disconnect, device number 13 [ 174.922006][ T5832] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 175.412258][ T5909] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 175.477324][ T7514] ubi: mtd0 is already attached to ubi31 [ 175.617260][ T5909] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 16 [ 175.651527][ T5909] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 175.683381][ T5909] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 175.692624][ T30] audit: type=1400 audit(1742408586.107:581): avc: denied { bind } for pid=7531 comm="syz.2.437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 175.720093][ T5909] usb 2-1: SerialNumber: syz [ 175.726814][ T30] audit: type=1400 audit(1742408586.107:582): avc: denied { name_bind } for pid=7531 comm="syz.2.437" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 175.749995][ T30] audit: type=1400 audit(1742408586.107:583): avc: denied { node_bind } for pid=7531 comm="syz.2.437" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1 [ 176.003711][ T30] audit: type=1400 audit(1742408586.407:584): avc: denied { getopt } for pid=7531 comm="syz.2.437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 176.919874][ T30] audit: type=1400 audit(1742408587.077:585): avc: denied { ioctl } for pid=7520 comm="syz.1.432" path="socket:[15912]" dev="sockfs" ino=15912 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 177.597399][ T7548] veth0_vlan: left promiscuous mode [ 177.649778][ T7548] veth0_vlan: entered promiscuous mode [ 177.807894][ T7560] netlink: 'syz.0.442': attribute type 4 has an invalid length. [ 177.948596][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 177.948611][ T30] audit: type=1400 audit(1742408588.357:587): avc: denied { unmount } for pid=5821 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 177.991393][ T7562] netlink: 'syz.0.442': attribute type 4 has an invalid length. [ 178.062364][ T30] audit: type=1400 audit(1742408588.487:588): avc: denied { getopt } for pid=7559 comm="syz.0.442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 178.175685][ T5909] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -71 [ 178.203358][ T5909] usb 2-1: USB disconnect, device number 14 [ 178.231124][ T30] audit: type=1400 audit(1742408588.567:589): avc: denied { append } for pid=7566 comm="syz.4.445" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 178.254066][ C1] vkms_vblank_simulate: vblank timer overrun [ 178.359941][ T30] audit: type=1400 audit(1742408588.567:590): avc: denied { open } for pid=7566 comm="syz.4.445" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 178.383713][ C1] vkms_vblank_simulate: vblank timer overrun [ 178.500704][ T30] audit: type=1326 audit(1742408588.927:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7580 comm="syz.4.449" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f66c138d169 code=0x0 [ 178.659411][ T7587] loop6: detected capacity change from 0 to 524287999 [ 178.676915][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 178.681730][ T30] audit: type=1400 audit(1742408588.947:592): avc: denied { ioctl } for pid=7582 comm="syz.0.450" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x64a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 178.686131][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 178.723854][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 178.733068][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 178.749417][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 178.758605][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 178.771204][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 178.780399][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 178.790378][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 178.799574][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 179.708560][ T5909] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 179.722374][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 179.731566][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 179.739444][ T30] audit: type=1326 audit(1742408589.547:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7586 comm="syz.2.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84e358d169 code=0x7ffc0000 [ 179.926471][ T30] audit: type=1326 audit(1742408589.547:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7586 comm="syz.2.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84e358d169 code=0x7ffc0000 [ 179.950082][ T30] audit: type=1326 audit(1742408589.567:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7586 comm="syz.2.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f84e358d169 code=0x7ffc0000 [ 179.981116][ T7590] loop6: detected capacity change from 524287999 to 524288000 [ 179.993181][ T7587] Dev loop6: unable to read RDB block 8 [ 179.999420][ T30] audit: type=1326 audit(1742408589.577:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7586 comm="syz.2.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84e358d169 code=0x7ffc0000 [ 180.024502][ T7587] loop6: unable to read partition table [ 180.030963][ T5909] usb 2-1: Using ep0 maxpacket: 16 [ 180.040105][ T7587] loop_reread_partitions: partition scan of loop6 (Í¢†¨ÙÇ´WÝC@'OÈQžšÒ¥‹) failed (rc=-5) [ 180.042870][ T5909] usb 2-1: too many configurations: 219, using maximum allowed: 8 [ 180.050596][ T5832] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 180.112563][ T5909] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 180.142628][ T5909] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 180.151865][ T5909] usb 2-1: Product: syz [ 180.156110][ T5909] usb 2-1: Manufacturer: syz [ 180.172146][ T5909] usb 2-1: SerialNumber: syz [ 180.178994][ T7598] netlink: 'syz.4.454': attribute type 1 has an invalid length. [ 180.187484][ T5909] r8152-cfgselector 2-1: Unknown version 0x0000 [ 180.200081][ T5909] r8152-cfgselector 2-1: config 0 descriptor?? [ 180.241712][ T5832] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 180.253412][ T5832] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 180.262550][ T5832] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.279660][ T5832] usb 3-1: config 0 descriptor?? [ 180.300296][ T10] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 180.464939][ T7610] sg_write: data in/out 2031668/2 bytes for SCSI command 0x26-- guessing data in; [ 180.464939][ T7610] program syz.4.455 not setting count and/or reply_len properly [ 180.487527][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 180.616114][ T10] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 180.761287][ T5135] Bluetooth: hci3: command 0x0406 tx timeout [ 180.761374][ T5830] Bluetooth: hci2: command 0x0406 tx timeout [ 180.768452][ T55] Bluetooth: hci1: command 0x0406 tx timeout [ 180.773737][ T10] usb 1-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 180.815498][ T5832] keytouch 0003:0926:3333.0008: fixing up Keytouch IEC report descriptor [ 180.865396][ T5832] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0008/input/input11 [ 180.903708][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 180.971812][ T10] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 180.997390][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.025756][ T5832] keytouch 0003:0926:3333.0008: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 181.030210][ T10] usb 1-1: Product: syz [ 181.070074][ T10] usb 1-1: Manufacturer: syz [ 181.087948][ T10] usb 1-1: SerialNumber: syz [ 181.109086][ T10] usb 1-1: config 0 descriptor?? [ 181.258737][ T47] [ 181.258755][ T47] ====================================================== [ 181.258761][ T47] WARNING: possible circular locking dependency detected [ 181.258768][ T47] 6.14.0-rc7-syzkaller-00069-g81e4f8d68c66 #0 Not tainted [ 181.258778][ T47] ------------------------------------------------------ [ 181.258784][ T47] kworker/1:1/47 is trying to acquire lock: [ 181.258794][ T47] ffff88801b0990b8 (&buf->lock){+.+.}-{4:4}, at: tty_buffer_flush+0x72/0x310 [ 181.258840][ T47] [ 181.258840][ T47] but task is already holding lock: [ 181.258845][ T47] ffffffff8e1aaa40 (console_lock){+.+.}-{0:0}, at: vc_SAK+0x13/0x310 [ 181.258876][ T47] [ 181.258876][ T47] which lock already depends on the new lock. [ 181.258876][ T47] [ 181.258881][ T47] [ 181.258881][ T47] the existing dependency chain (in reverse order) is: [ 181.258887][ T47] [ 181.258887][ T47] -> #2 (console_lock){+.+.}-{0:0}: [ 181.258907][ T47] console_lock+0x7a/0xa0 [ 181.258921][ T47] con_flush_chars+0x5e/0x80 [ 181.258937][ T47] n_tty_write+0xe17/0x1140 [ 181.258959][ T47] file_tty_write.constprop.0+0x506/0x9a0 [ 181.258977][ T47] vfs_write+0x5ae/0x1150 [ 181.259000][ T47] ksys_write+0x12b/0x250 [ 181.259011][ T47] do_syscall_64+0xcd/0x250 [ 181.259033][ T47] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.259054][ T47] [ 181.259054][ T47] -> #1 (&tty->termios_rwsem){++++}-{4:4}: [ 181.259076][ T47] down_write+0x93/0x200 [ 181.259097][ T47] tty_unthrottle+0x1f/0x110 [ 181.259109][ T47] hci_uart_tty_receive+0x394/0x780 [ 181.259130][ T47] tty_ldisc_receive_buf+0x153/0x190 [ 181.259147][ T47] tty_port_default_receive_buf+0x70/0xb0 [ 181.259166][ T47] flush_to_ldisc+0x264/0x780 [ 181.259182][ T47] process_one_work+0x9c5/0x1ba0 [ 181.259202][ T47] worker_thread+0x6c8/0xf00 [ 181.259221][ T47] kthread+0x3af/0x750 [ 181.259238][ T47] ret_from_fork+0x45/0x80 [ 181.259258][ T47] ret_from_fork_asm+0x1a/0x30 [ 181.259274][ T47] [ 181.259274][ T47] -> #0 (&buf->lock){+.+.}-{4:4}: [ 181.259294][ T47] __lock_acquire+0x249e/0x3c40 [ 181.259314][ T47] lock_acquire.part.0+0x11b/0x380 [ 181.259335][ T47] __mutex_lock+0x19b/0xb10 [ 181.259354][ T47] tty_buffer_flush+0x72/0x310 [ 181.259371][ T47] tty_ldisc_flush+0x64/0xe0 [ 181.259385][ T47] __do_SAK+0x6a7/0x800 [ 181.259403][ T47] vc_SAK+0x7f/0x310 [ 181.259414][ T47] process_one_work+0x9c5/0x1ba0 [ 181.259433][ T47] worker_thread+0x6c8/0xf00 [ 181.259451][ T47] kthread+0x3af/0x750 [ 181.259468][ T47] ret_from_fork+0x45/0x80 [ 181.259487][ T47] ret_from_fork_asm+0x1a/0x30 [ 181.259502][ T47] [ 181.259502][ T47] other info that might help us debug this: [ 181.259502][ T47] [ 181.259507][ T47] Chain exists of: [ 181.259507][ T47] &buf->lock --> &tty->termios_rwsem --> console_lock [ 181.259507][ T47] [ 181.259532][ T47] Possible unsafe locking scenario: [ 181.259532][ T47] [ 181.259536][ T47] CPU0 CPU1 [ 181.259540][ T47] ---- ---- [ 181.259545][ T47] lock(console_lock); [ 181.259555][ T47] lock(&tty->termios_rwsem); [ 181.259566][ T47] lock(console_lock); [ 181.259578][ T47] lock(&buf->lock); [ 181.259587][ T47] [ 181.259587][ T47] *** DEADLOCK *** [ 181.259587][ T47] [ 181.259592][ T47] 4 locks held by kworker/1:1/47: [ 181.259600][ T47] #0: ffff88801b078d48 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1293/0x1ba0 [ 181.259642][ T47] #1: ffffc90000b77d18 ((work_completion)(&vc_cons[currcons].SAK_work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 181.259684][ T47] #2: ffffffff8e1aaa40 (console_lock){+.+.}-{0:0}, at: vc_SAK+0x13/0x310 [ 181.259717][ T47] #3: ffff88805b7cf0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_flush+0x1c/0xe0 [ 181.259759][ T47] [ 181.259759][ T47] stack backtrace: [ 181.259766][ T47] CPU: 1 UID: 0 PID: 47 Comm: kworker/1:1 Not tainted 6.14.0-rc7-syzkaller-00069-g81e4f8d68c66 #0 [ 181.259783][ T47] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 181.259794][ T47] Workqueue: events vc_SAK [ 181.259806][ T47] Call Trace: [ 181.259811][ T47] [ 181.259817][ T47] dump_stack_lvl+0x116/0x1f0 [ 181.259838][ T47] print_circular_bug+0x490/0x760 [ 181.259860][ T47] check_noncircular+0x31a/0x400 [ 181.259881][ T47] ? __pfx_check_noncircular+0x10/0x10 [ 181.259903][ T47] ? lockdep_lock+0xc6/0x200 [ 181.259919][ T47] ? __pfx_lockdep_lock+0x10/0x10 [ 181.259937][ T47] __lock_acquire+0x249e/0x3c40 [ 181.259961][ T47] ? __pfx___lock_acquire+0x10/0x10 [ 181.259981][ T47] ? __pfx_stack_trace_save+0x10/0x10 [ 181.260001][ T47] lock_acquire.part.0+0x11b/0x380 [ 181.260022][ T47] ? tty_buffer_flush+0x72/0x310 [ 181.260041][ T47] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 181.260062][ T47] ? rcu_is_watching+0x12/0xc0 [ 181.260078][ T47] ? trace_lock_acquire+0x14e/0x1f0 [ 181.260094][ T47] ? __pfx___lock_acquire+0x10/0x10 [ 181.260114][ T47] ? tty_buffer_flush+0x72/0x310 [ 181.260132][ T47] ? lock_acquire+0x2f/0xb0 [ 181.260151][ T47] ? tty_buffer_flush+0x72/0x310 [ 181.260169][ T47] __mutex_lock+0x19b/0xb10 [ 181.260188][ T47] ? tty_buffer_flush+0x72/0x310 [ 181.260207][ T47] ? tty_buffer_flush+0x72/0x310 [ 181.260226][ T47] ? __pfx___mutex_lock+0x10/0x10 [ 181.260246][ T47] ? rcu_is_watching+0x12/0xc0 [ 181.260262][ T47] ? lock_acquire.part.0+0x11b/0x380 [ 181.260284][ T47] ? tty_ldisc_flush+0x1c/0xe0 [ 181.260302][ T47] ? tty_buffer_flush+0x72/0x310 [ 181.260319][ T47] tty_buffer_flush+0x72/0x310 [ 181.260339][ T47] tty_ldisc_flush+0x64/0xe0 [ 181.260354][ T47] __do_SAK+0x6a7/0x800 [ 181.260373][ T47] ? lock_acquire+0x2f/0xb0 [ 181.260392][ T47] ? vc_SAK+0x13/0x310 [ 181.260407][ T47] vc_SAK+0x7f/0x310 [ 181.260419][ T47] process_one_work+0x9c5/0x1ba0 [ 181.260442][ T47] ? __pfx_console_callback+0x10/0x10 [ 181.260462][ T47] ? __pfx_process_one_work+0x10/0x10 [ 181.260485][ T47] ? assign_work+0x1a0/0x250 [ 181.260503][ T47] worker_thread+0x6c8/0xf00 [ 181.260526][ T47] ? __pfx_worker_thread+0x10/0x10 [ 181.260547][ T47] kthread+0x3af/0x750 [ 181.260564][ T47] ? __pfx_kthread+0x10/0x10 [ 181.260582][ T47] ? lock_acquire+0x2f/0xb0 [ 181.260604][ T47] ? __pfx_kthread+0x10/0x10 [ 181.260622][ T47] ret_from_fork+0x45/0x80 [ 181.260642][ T47] ? __pfx_kthread+0x10/0x10 [ 181.260659][ T47] ret_from_fork_asm+0x1a/0x30 [ 181.260680][ T47] [ 181.262729][ T47] tty tty1: SAK: killed process 7571 (syz.1.447): by fd#5 [ 181.262867][ T47] tty tty1: SAK: killed process 7572 (syz.1.447): by fd#5 [ 181.276127][ T5909] r8152-cfgselector 2-1: USB disconnect, device number 15 [ 181.385537][ T7618] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 181.738330][ T10] gs_usb 1-1:0.0: Configuring for 1 interfaces [ 182.471477][ T10] usb 1-1: USB disconnect, device number 14 [ 182.642360][ T5909] usb 3-1: USB disconnect, device number 12