last executing test programs: 17m25.872953228s ago: executing program 0 (id=171): bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1e00000000000000030000000700000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0xd, 0xfffffffffffffd04, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) setxattr$trusted_overlay_redirect(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x8, 0x2) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="424cb30e998bb5494a614f5c91f1ba7adfe584573eb63d6f2a2e2e0e88aef056277784744c0aa726bb879aae5000e81da024373d9ebfb01f9c3ee76ef5c1d601c3a8a5a4d7a07cfeb01b3fbb2a7d5ea816249bcc3b289277f1d9e853e0429194096d60b3e9d28136ce339064d1086973a3341c43d567251854cdc80ecf99ce73b50b072e9393ca49370784d1dff72fcbd28042cd8d174ac510b9f103c698aecfae1e00db2c1006e319fab2065533600eaec82864de034d115848e980e66145f17db2cf05914d3ac3b8df63372a5dcd6535180b581bbeaeb9dd7de47794a905087a38a3"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000040)={0x5f, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0, 0x0}, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r1 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ptrace$ARCH_GET_UNTAG_MASK(0x1e, r1, &(0x7f0000000380), 0x4001) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_vhci(0x0, 0xe) syz_emit_ethernet(0x3e, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000003000000018000180140002007665746830"], 0x2c}}, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000140), 0x10) r5 = socket$inet(0x2, 0x1, 0x801) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x27, &(0x7f0000000200)={@private=0xa010100, @local}, 0xc) setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f0000000140)=ANY=[@ANYBLOB="e0000001ac1414aa0000000003"], 0x1c) mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0) rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000fc0)={0x0, 0x0, 0x200}) setsockopt$inet_mreqn(r5, 0x0, 0x25, &(0x7f0000000080)={@multicast1, @local}, 0xc) 17m22.643091292s ago: executing program 0 (id=186): syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x21b7, 0x800, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100), &(0x7f0000000140), 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) geteuid() r0 = socket$igmp(0x2, 0x3, 0x2) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x41, 0x0) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r2, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xff, @loopback, 0x9}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000080)="1b", 0x1}], 0x1, &(0x7f00000001c0)=[@prinfo={0x18, 0x84, 0x5, {0x30, 0xb42}}, @dstaddrv4={0x18, 0x84, 0x7, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x30, 0x4855}, 0x24000052) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) socket$key(0xf, 0x3, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_VAPIC_ADDR(0xffffffffffffffff, 0x4008ae93, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902"], 0x0) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0x20d0}}}}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) 17m20.343159827s ago: executing program 0 (id=198): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r1}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) r4 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r4, &(0x7f0000ffc000/0x3000)=nil, 0x4000) shmctl$IPC_RMID(r4, 0x0) remap_file_pages(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newtfilter={0x60, 0x2c, 0xf3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x30, 0x2, [@TCA_BASIC_EMATCHES={0x2c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_META={0x1c, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x1}, {0x89, 0x40, 0x2}}}, @TCA_EM_META_LVALUE={0x4, 0x2, [@TCF_META_TYPE_VAR]}]}}]}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 17m19.966891963s ago: executing program 0 (id=199): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x100) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1}, './bus\x00'}) r3 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$unlink(0x9, r3, r3) keyctl$KEYCTL_PKEY_QUERY(0x18, r3, 0x0, &(0x7f0000000280)='\x00\x00\x8f\xc1?,\xe5\xe4!\x0e\x7fme!\xce\x8a\bk\xebf94\xa8^\x94\xb4}\x1d\xbb\xbfQw\\3.\xd0\xe41\xb2\xc5\xc5g\xb5\xd7W\xcf\xdc\xf9F\xd7', 0xffffffffffffffff) openat$snapshot(0xffffffffffffff9c, &(0x7f0000001d80), 0x1, 0x0) io_uring_setup(0x3d7d, &(0x7f0000000100)={0x0, 0xb2d0, 0x800, 0x2, 0x1f2}) openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="040e04c93520"], 0x7) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe78, 0x30, 0x25, 0x0, 0x0, {}, [{0xe64, 0x1, [@m_pedit={0xe60, 0x1, 0x0, 0x0, {{0xa}, {0xe34, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x10, 0x5, 0x0, 0x1, [{0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}]}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {0x0, 0x8001}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x0, 0x200000}, {}, {0x4}, {}, {}, {}, {0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0xfffffffc}, {0x0, 0x0, 0x0, 0x5, 0x80000}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0xfffffff8}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x800}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {0xff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x8000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {0x2}, {0x0, 0x0, 0x0, 0x1000000, 0x0, 0x20000}, {}, {}, {}, {0x0, 0x1000000, 0x0, 0x0, 0x8}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe78}}, 0x0) epoll_create1(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000240), 0x1, 0x8002) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r7 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r7, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x3, 0x0, 0x4}}, 0x26) ioctl$PPPIOCGL2TPSTATS(r7, 0x80047453, 0xffffffffffffffff) 17m18.852948212s ago: executing program 0 (id=204): socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) socket(0x15, 0x5, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000412ff8)='6', 0x1) r0 = accept(0xffffffffffffffff, 0x0, 0x0) recvmsg(r0, &(0x7f000000b680)={0x0, 0x0, &(0x7f000000b600)=[{0x0}, {0x0}], 0x2}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000100)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c1210680320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000400b9a6080000b80000010066b87a000f00d80f300f300fc79d53bf0000c4b9e16dc30101220f01c3", 0x64}], 0x1, 0x14, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r5 = accept$alg(r4, 0x0, 0x0) sendmsg$alg(r5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) write$binfmt_script(r5, &(0x7f0000000600), 0xfec8) recvmmsg(r5, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/200, 0x6}, {&(0x7f0000000140)=""/9, 0xa}, {&(0x7f0000000300)=""/225, 0x2}, {&(0x7f0000000400)=""/41, 0xfeb2}, {&(0x7f0000000440)=""/123, 0x7b}, {&(0x7f00000004c0)=""/203, 0xcb}], 0x6, &(0x7f0000000640)=""/123, 0x7b, 0x2000000}}, {{&(0x7f00000006c0), 0x80, &(0x7f0000000840), 0x0, &(0x7f0000000880)=""/24, 0xffffffffffffffe0}}], 0x2, 0xcb, &(0x7f0000008000)={0x0, 0x989680}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902"], 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x1900) 17m18.543012094s ago: executing program 0 (id=206): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$NILFS_IOCTL_GET_SUSTAT(r0, 0x80306e85, &(0x7f0000000040)) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') fcntl$notify(r1, 0x402, 0x80000014) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000300)={0x0, 0x0, 0x0, &(0x7f0000000280)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000440)={0x601, 0x1, &(0x7f0000000340)=[r3], 0x0, 0x0, 0x0, 0x0, 0x8}) r4 = io_uring_setup(0x22bf, &(0x7f0000000140)={0x0, 0x845b, 0x10000, 0x0, 0x181}) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r4, 0x25, 0x0, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) 17m17.984005236s ago: executing program 32 (id=206): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$NILFS_IOCTL_GET_SUSTAT(r0, 0x80306e85, &(0x7f0000000040)) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') fcntl$notify(r1, 0x402, 0x80000014) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000300)={0x0, 0x0, 0x0, &(0x7f0000000280)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000440)={0x601, 0x1, &(0x7f0000000340)=[r3], 0x0, 0x0, 0x0, 0x0, 0x8}) r4 = io_uring_setup(0x22bf, &(0x7f0000000140)={0x0, 0x845b, 0x10000, 0x0, 0x181}) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r4, 0x25, 0x0, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) 13m49.474633859s ago: executing program 1 (id=780): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a20000000000a03000000000000000000070000000900010073797a3000000000600000001c0a010400000000000000000700000208000a"], 0xa8}, 0x1, 0x0, 0x0, 0x4040054}, 0x0) 13m48.680630821s ago: executing program 1 (id=783): listen(0xffffffffffffffff, 0x10040) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000200)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, &(0x7f0000000740)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b704000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000000c0)=0x0) quotactl_fd$Q_QUOTAOFF(r4, 0xffffffff80000301, r5, 0x0) socket$netlink(0x10, 0x3, 0x400000000000004) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) socket(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYRES64=r6, @ANYRES32=r6, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) r8 = io_uring_setup(0xf08, &(0x7f0000000780)={0x0, 0x80003125, 0x3cd0, 0x4004, 0x181}) io_uring_register$IORING_REGISTER_FILES(r8, 0x20, &(0x7f0000000000)=[r8], 0x1) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000000780)={{0x0, 0x2, 0x5, 0x6, 0x8, 0xffffffffffffffff, 0x6, 0x6777, 0xf, 0x9, 0x1, 0x1000, 0xdda7, 0x3, 0x7fffffff}}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x4, 0x7ffff, &(0x7f0000006680)) munmap(&(0x7f0000400000/0xc00000)=nil, 0xc00000) remap_file_pages(&(0x7f0000950000/0x4000)=nil, 0x4000, 0x9, 0x1, 0x80000) ioctl$BTRFS_IOC_TREE_SEARCH(r8, 0xd0009411, &(0x7f0000001780)={{r9, 0x100, 0x1, 0x81, 0xfffffffffffffffd, 0x81, 0x7, 0x9, 0x100, 0x7, 0x401, 0x100000001, 0x2, 0x7ff, 0x8000}}) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b01000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1f, 0x15, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x800007d}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r10}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r10}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xa8}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x56, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r6, {0xd}, {0xf, 0x1}, {0xa, 0x1}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x60001d0}, 0xc8c4) 13m48.0631197s ago: executing program 1 (id=786): socket$inet_icmp_raw(0x2, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0xa}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r0 = getpgrp(0xffffffffffffffff) getpgrp(r0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) accept4(r2, 0x0, 0x0, 0x80800) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r3, 0xe503, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x81) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x2, 0x0, 0x3, 0xfffffffffffffffd, 0x3, 0x0, 0x0, 0xe}, 0x0, &(0x7f0000000300)={0x3ff, 0x7e7, 0x0, 0x9, 0x0, 0x0, 0x8, 0x3f8}, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0xc, 0x4, 0x2}, 0x50) openat$snapshot(0xffffffffffffff9c, &(0x7f0000001d80), 0x1, 0x0) 13m45.93708214s ago: executing program 1 (id=791): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x884}, 0x2) close(r1) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmmsg$inet(r4, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}, 0x11}], 0x1, 0x8000004) 13m44.684459779s ago: executing program 1 (id=795): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004380)="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", 0x2000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x4080, 0xa1) write$FUSE_INIT(r0, &(0x7f0000004300)={0x50, 0x0, r1, {0x7, 0x26, 0x0, 0xfffffffff323ca46, 0x0, 0xfffc, 0x1, 0x10, 0x0, 0x0, 0x1, 0x10001}}, 0x50) creat(&(0x7f0000000080)='./file0/file0\x00', 0x1) syz_fuse_handle_req(r0, &(0x7f00000083c0)="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", 0x2000, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)={0xa0, 0x0, 0x8, {{0x3, 0x0, 0x800, 0xbafd, 0x2, 0x8, {0x0, 0xf, 0x5, 0xfffffffffffffff5, 0x9, 0x4, 0x2, 0x6, 0xfffffbff, 0x8000, 0xfff, r2, 0x0, 0x0, 0x2}}, {0x0, 0x2}}}, 0x0, 0x0}) 13m43.110835721s ago: executing program 1 (id=798): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) (async) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x10000, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}}) (async) write$P9_RVERSION(r4, &(0x7f0000000000)={0x15, 0x65, 0xffff, 0x80000, 0x8, '9P2000.u'}, 0x15) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x6) (async) sendmsg$rds(0xffffffffffffffff, &(0x7f0000003a80)={&(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10, &(0x7f0000000dc0)=[{&(0x7f0000000200)=""/41, 0xfd83}], 0x1, 0x0, 0x0, 0x8000}, 0x48004) (async, rerun: 32) chroot(&(0x7f0000000280)='./file0\x00') (async, rerun: 32) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fec000/0x12000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000a42000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r6 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="dbaa00fea000000071101d0000000000d50000005dc5aabc755700000000"], 0x0, 0xb, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0) 13m28.127342074s ago: executing program 33 (id=798): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) (async) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x10000, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}}) (async) write$P9_RVERSION(r4, &(0x7f0000000000)={0x15, 0x65, 0xffff, 0x80000, 0x8, '9P2000.u'}, 0x15) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x6) (async) sendmsg$rds(0xffffffffffffffff, &(0x7f0000003a80)={&(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10, &(0x7f0000000dc0)=[{&(0x7f0000000200)=""/41, 0xfd83}], 0x1, 0x0, 0x0, 0x8000}, 0x48004) (async, rerun: 32) chroot(&(0x7f0000000280)='./file0\x00') (async, rerun: 32) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fec000/0x12000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000a42000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r6 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="dbaa00fea000000071101d0000000000d50000005dc5aabc755700000000"], 0x0, 0xb, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0) 9.011057291s ago: executing program 6 (id=3698): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) syz_open_dev$dvb_dvr(&(0x7f00000000c0), 0x0, 0x824ff) r1 = openat$mixer(0xffffffffffffff9c, 0x0, 0x121100, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) ioctl$SOUND_MIXER_READ_DEVMASK(r1, 0xc0044dff, &(0x7f0000004000)) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001bc0)=ANY=[], 0x48) bpf$MAP_UPDATE_CONST_STR(0x4, &(0x7f0000001800)={{r4}, 0x0, 0x0}, 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x50) r5 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) io_setup(0x3, &(0x7f0000000180)=0x0) io_submit(r6, 0x1, &(0x7f0000000100)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x5, 0x0, r5, 0x0}]) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x1e4011, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x14, &(0x7f0000000400)=ANY=[@ANYRESHEX=r4, @ANYRES32, @ANYRESOCT], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r7}, 0xc) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$uinput_user_dev(r8, &(0x7f0000000a80)={'syz1\x00', {0x5, 0x1, 0x173, 0x1004}, 0x4, [0x80, 0x2, 0x0, 0x0, 0xfffffffc, 0x1, 0xffffffff, 0x5, 0x6c, 0x4000000, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x6, 0xd127, 0x67c4, 0x0, 0x0, 0x3fffffd, 0xfffffffd, 0x0, 0x3, 0xfffff248, 0x400005, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0xab4, 0x0, 0xfffffffc, 0xfffffff0, 0x7fff, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1], [0x5, 0x4, 0x1, 0x2, 0x4000, 0x6, 0x0, 0x6, 0x0, 0x4, 0xfffffffd, 0x3fbc, 0x1, 0x4, 0x0, 0x0, 0x0, 0x42ac, 0x0, 0x3, 0x8000002, 0x3, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x200000, 0x4, 0x2, 0x0, 0x9, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6, 0xe43, 0xbb, 0xfffffffd, 0x2, 0x24001, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x5, 0x10000, 0x0, 0x3, 0x0, 0x0, 0x102, 0x4, 0x2], [0xfffffffe, 0xfffffffd, 0xfffffffd, 0x2, 0x6, 0x8, 0x322d, 0x8, 0x0, 0x0, 0x4, 0x2, 0xb, 0xcc5, 0x8, 0x0, 0x0, 0x2, 0xd38, 0x0, 0x0, 0x9fc7adae, 0x3, 0x4, 0x2, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfffffffe, 0x0, 0x3, 0x3, 0x2, 0x0, 0x0, 0x0, 0x2, 0x1, 0x5, 0x0, 0x0, 0x2000000, 0x0, 0x9, 0x0, 0x7e31, 0x1, 0x0, 0xfffffffc, 0x0, 0x8000, 0x0, 0xffffffff, 0x7fff], [0x0, 0x0, 0x40000001, 0x0, 0xab47, 0x0, 0x400526b, 0x2, 0x9, 0x80000000, 0x0, 0x0, 0x0, 0x7652fc9f, 0x0, 0x0, 0x2, 0x0, 0xfffffff9, 0x0, 0xffffffff, 0x6, 0xffffffff, 0x400, 0xfffffffd, 0x0, 0x102, 0x81, 0x1, 0xfffffffd, 0xe1a, 0x10004, 0x0, 0xff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, 0x0, 0xc, 0x3, 0x0, 0x1000, 0x0, 0x7, 0x0, 0xe3e]}, 0x45c) ioctl$UI_SET_RELBIT(r8, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r8, 0x40045564, 0x2) ioctl$UI_SET_EVBIT(r8, 0x40045564, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) 8.219545061s ago: executing program 4 (id=3699): getgroups(0x2, &(0x7f00000000c0)=[0x0, 0xffffffffffffffff]) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='gil=', @ANYRESHEX=r0, @ANYBLOB=',\x00']) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet(0xa, 0x801, 0x84) listen(r1, 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x0, &(0x7f0000000040)}) socket(0x10, 0x3, 0xd1f) openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) syz_open_dev$vim2m(0x0, 0x0, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c0000003f0007010000000000000000037c00001800378013000300"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x0) socket$inet6(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r5}, 0xc) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r6, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r7}) ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f00000007c0)={0x28, 0x4, r7, 0x0, &(0x7f0000561000/0x1000)=nil, 0x1000, 0x1004000}) close_range(r2, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0x800001c, @multicast1}, {0x0, 0x17c1, 0x8}}}}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) 7.685123389s ago: executing program 5 (id=3701): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="1201000000000040f30455070000000000010902240001000040b109040000010300010009210101000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, &(0x7f0000000340)={0x18, &(0x7f0000000700)=ANY=[@ANYBLOB=' \n\a'], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) r1 = syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) ioctl$HIDIOCGRDESC(r1, 0x90044802, &(0x7f0000000380)) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000800000000400ef23"], 0x50) (async, rerun: 64) write$hidraw(r1, &(0x7f0000000000)="8e20254f10d757046d8fd10dacc65f8f262c29d1164e6502d91762189e8280914f2475cd344b25faf6cc7735e27ae0aef430e74be3cc15bb90e428b64c329bfbb92251d608", 0x45) (rerun: 64) 6.860090081s ago: executing program 6 (id=3702): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$caif_seqpacket(0x25, 0x5, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_IOC_EXPIRE(r1, 0x810c9365, &(0x7f0000000480)={{0x0, 0x6f}, 0x100, './file0\x00'}) fsetxattr$security_selinux(r2, &(0x7f0000000000), &(0x7f00000000c0)='system_u:object_r:auth_cache_t:s0\x00', 0x22, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) r5 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x100000a, 0x10, r0, 0xfdc27000) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000240)=r5) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000040)={0x1, r5}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000140)={0x0, 0x1, 0x0, &(0x7f00000001c0)=""/43, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/245, &(0x7f0000000780)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000003c40)={0x1, 0x0, [{0x0, 0xb9, &(0x7f0000003a00)=""/185}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000340)=0x1) 6.786651612s ago: executing program 4 (id=3703): bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x28000000) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$P9_RLERRORu(r0, 0x0, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) open(0x0, 0x1, 0x104) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) socket$xdp(0x2c, 0x3, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1e, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200f0040000000000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f00000001c0)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) 5.893739999s ago: executing program 3 (id=3704): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x5) io_setup(0xd, &(0x7f0000000100)=0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) fsopen(0x0, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockopt$inet_mptcp_buf(r2, 0x11c, 0x2, &(0x7f0000000300)=""/236, &(0x7f0000000400)=0xec) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000005580)=""/102392, 0x18ff8) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r5) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x30, r6, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x0, 0x0, 0x0, 0x5}}}}, 0x30}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES32=r3, @ANYRES32, @ANYRESHEX], 0x50) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x101, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) accept4$packet(r7, 0x0, 0x0, 0x80000) socket$netlink(0x10, 0x3, 0x4) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r8, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r9, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r8, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r9, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r8, 0x3ba0, &(0x7f0000001200)={0x48, 0x8, r10, 0x0, 0x8003, 0x1, &(0x7f0000001140)='|', 0x4}) mkdir(&(0x7f0000000080)='./file0\x00', 0x90) write$sndseq(r2, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x0, @tick, {0xfc}, {0x0, 0x5}, @control={0x6, 0x5, 0x7}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @result={0x1, 0x6}}, {0x0, 0x0, 0x0, 0x4, @time={0x57, 0x26}, {}, {0xa9}, @control={0x0, 0x4}}, {0x0, 0x0, 0xfe, 0x0, @time, {0x3}, {}, @time=@tick=0xf}], 0x70) io_submit(r1, 0x1, &(0x7f0000000340)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x8, r0, 0x0, 0x0, 0xc1b8, 0x0, 0x0, r0}]) 5.479318205s ago: executing program 5 (id=3705): openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0xa0842, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) close(r0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r1, 0x10c, 0x6, &(0x7f0000000200), &(0x7f0000000480)=0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), r2) unshare(0x20040600) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000c0000000c00008008"], 0x20}}, 0x40816) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', 0x0, 0x4, 0x6, 0x8, 0x6, 0x30, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8, 0x40, 0x0, 0x9}}) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000440)={0x1}, 0x8) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000580)={@fallback=r0, 0xffffffffffffffff, 0x18, 0x0, 0x4, @void, @value=r0}, 0x20) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e23, 0x4a3, @local, 0x4ef}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f00000005c0)=ANY=[@ANYBLOB="03000000000000000a004e230000000cff010000000000000000000000000001f8ffffff000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003"], 0x210) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000180)={0x3, {{0xa, 0x4e20, 0xbe, @mcast1, 0xbfd}}, {{0xa, 0x4624, 0x9, @empty, 0xfffffe01}}}, 0x108) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@fallback=r0, 0x2, 0x0, 0x2, &(0x7f0000000080)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000100)=[0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x28000080) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000540)={0x3, &(0x7f0000000500)=[{0xff7f, 0xd, 0x1, 0x3}, {0x3, 0x1d, 0x5}, {0xc0, 0x5, 0x5, 0x4}]}) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f00000000c0)={0x1f, 0x3}, 0x6) write$bt_hci(r6, &(0x7f0000000040)=ANY=[@ANYBLOB="c02e040a000100008000000000ff"], 0xe) ioctl$SIOCSIFHWADDR(r0, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0008000000000000030000000000000000"], 0xfc}}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYRES8=r4], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r7, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x224e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) 4.97595345s ago: executing program 6 (id=3707): openat$snapshot(0xffffffffffffff9c, &(0x7f0000001d80), 0x1, 0x0) io_uring_setup(0x3d7d, &(0x7f0000000100)={0x0, 0xb2d0, 0x800, 0x2, 0x1f2}) openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) epoll_create1(0x0) r0 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000000000)={0x1, {"771c2e01f81effffffffee00", "000900000000000200"}, 0x7, 0x4}) syz_open_dev$sndpcmp(&(0x7f0000000240), 0x1, 0x8002) pselect6(0x40, &(0x7f0000000040)={0x3000000, 0x0, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x1000001000, 0x46}, 0x0, &(0x7f0000000000)={0x3ff, 0x1, 0x0, 0x6, 0x0, 0xf, 0x80000002, 0xf}, 0x0, 0x0) 4.900403609s ago: executing program 5 (id=3708): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0) fadvise64(r0, 0x6, 0x2040000000007, 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x109001, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$FUSE(r3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x3, 0x0) ioctl$KVM_GET_MSRS_sys(r4, 0x4018aee2, &(0x7f0000000000)) ioctl$FAT_IOCTL_GET_VOLUME_ID(r4, 0x80047213, &(0x7f00000002c0)) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40140, 0x1) close(r7) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x18082, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r7}}) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r8, 0xc058534f, &(0x7f00000001c0)={{0xf}, 0x1, 0x20001, 0xfcb0, {0x26}, 0x5, 0xffffffff}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) 4.577556647s ago: executing program 6 (id=3709): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x10001}, 0x0) socket$inet6(0xa, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000000010104000000000000000002001000240002801400018008000100e000000108000200e00000010c00028005000100000000001c0010800800014000000000d97405010000000008000240000000000800", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x2, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) r3 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r3, 0x0) r4 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r4, &(0x7f0000000080), 0x10) sendmmsg(r4, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000a40)=';', 0x1}], 0x1}}], 0x1, 0x2400c090) r5 = accept4$unix(r3, 0x0, 0x0, 0x0) recvfrom$unix(r5, &(0x7f00000004c0)=""/249, 0xf9, 0x10022, 0x0, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xffffffffffffffe0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$sock_int(r6, 0x1, 0x2e, &(0x7f0000000280)=0xce76, 0x4) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/bus/input/devices\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB='\a\x00\x00'], 0x50) sendfile(r3, r7, 0x0, 0x106f) 4.516722156s ago: executing program 3 (id=3710): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = memfd_create(&(0x7f0000000640)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\xfd\x89\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff}) r3 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r3, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000c08d) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000009110ba000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) shutdown(r3, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'lo\x00'}) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r8 = accept4(r7, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) 3.825489693s ago: executing program 4 (id=3713): socket$inet_udp(0x2, 0x2, 0x0) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r1 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x2ffe, 0x2) syz_init_net_socket$ax25(0x3, 0x3, 0x1) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0xd}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0xfffffffffffffd7a, &(0x7f0000000580)=0x8000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) read$msr(r2, &(0x7f000001aa40)=""/102392, 0x18ff8) r3 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000b80)='\xe0\"\xef\xb1\xea\xe6\x9c\xe6\xc8M\xdb\x86\xb3\x8b\xbe\xd5\xbdB\x92\xa0\x19-+a\x13qQ\xd5f39hSr\xafbB\xe2\xe8\xcd\x1bf\x18\x7f\xf27E#\"\xab\x99\xec\x88\x8d\xd8C\x0f\x95\xff\xfeG\xf9t\xb1 \xcc\xc5\xbb\x88\xb6\xd2\xf2Jwq\xf8oG0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000140)='%-010d \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x10, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000000000000000000005000000b7080000000000007b8af8ff00000000b70800000e0000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000640)={@map=r6, 0xffffffffffffffff, 0x6, 0x2020, 0xffffffffffffffff, @void, @void, @value=0xffffffffffffffff}, 0x20) mknodat(r4, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', 0x40, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001500)=ANY=[@ANYBLOB="28000000240007012bbd7000ffdbdf2503740000080001800400de800c0004"], 0x28}}, 0x48010) 2.848825722s ago: executing program 3 (id=3718): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000500)=ANY=[@ANYBLOB="b40000", @ANYRES16=r1, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r2, @ANYBLOB="9800028040000100240001006d6f646500000000000000000000000000000000000000000000000000000000050003"], 0xb4}, 0x1, 0x0, 0x0, 0x4000431}, 0x4040084) 2.83594419s ago: executing program 5 (id=3719): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000200)) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) r1 = dup2(r0, r0) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x5) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan0\x00', 0xfffffffe}) ioctl(r2, 0x8b21, &(0x7f0000000040)) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f00000001c0)={0x17, 0x9d, &(0x7f0000000100)="0652ba45d2561d543fafa7e9bb1176b2b3c3d689acafd872631957652e1039915e1dd56b337166980aa0fe1b6bf922f33380f194ae64e0410acdcab27048cf12236a1fe8b3e46e25ee869dadfd56d849c2f5a8ec31e43bb210ae0e5ed1617d9fb41141a424d5054b15f688994ae81a56f210c77d297b0e123de41015c5e71646f4242aa1fb2d8a6e68fe97dd1d8f92bff3bff2d31d47c4e619528719c9"}) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) read$FUSE(r1, &(0x7f0000004d80)={0x2020}, 0x2020) 2.755466334s ago: executing program 4 (id=3720): unshare(0x62000000) (async) socket$igmp(0x2, 0x3, 0x2) (async) r0 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpgrp(0xffffffffffffffff) prlimit64(r1, 0x6, &(0x7f0000000100)={0x8, 0x1000082}, 0x0) (async) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) (async) r2 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNDELRESOURCE(r2, 0x89ee, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) (async, rerun: 64) r3 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) (rerun: 64) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x8, 0x3, 0x390, 0x0, 0x11, 0x148, 0x1d8, 0x0, 0x2f8, 0x2a8, 0x2a8, 0x2f8, 0x2a8, 0x3, 0x0, {[{{@ip={@private=0xa010102, @multicast1, 0xffffffff, 0xff, 'pim6reg0\x00', 'netdevsim0\x00', {}, {}, 0x2f, 0x2, 0x41}, 0x0, 0x190, 0x1d8, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0x3, 0x7}}}, @common=@unspec=@conntrack3={{0xc8}, {{@ipv6=@mcast2, [0xff, 0xff, 0x0, 0xff], @ipv6=@mcast2, [0xffffffff, 0xffffff00, 0x0, 0xffffffff], @ipv6=@dev={0xfe, 0x80, '\x00', 0x27}, [0xffffffff, 0x0, 0x0, 0xff000000], @ipv4=@multicast2, [0x0, 0x0, 0x0, 0xffffff00], 0x6, 0x6, 0x0, 0x4e23, 0x4e24, 0x4e22, 0x4e23, 0x81}, 0x0, 0x480, 0x0, 0x0, 0x0, 0x4e20}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00', {}, {}, 0x0, 0x2}, 0x0, 0x100, 0x120, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x0, 0x0, 0x1}}, @common=@set={{0x40}, {{0xffffffffffffffff, [0x6, 0x5, 0x8, 0x2, 0x5], 0x6, 0x5}}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) (async, rerun: 64) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x12881, 0x0) r6 = socket$key(0xf, 0x3, 0x2) (async) setxattr$system_posix_acl(&(0x7f0000005700)='.\x00', &(0x7f0000005740)='system.posix_acl_default\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="020000000100050000000000040007000000000010000200000000002000020000000058066ac7b1c440aeea184fa85a0536ff0b0e5a90192c65da0163fda64b154be80d1e2e3bc70f64db"], 0x24, 0x1) (async) r7 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000002280), 0x169e41, 0x0) write$binfmt_format(r7, &(0x7f0000006240)='-1\x00', 0x3) fstat(r6, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000080)={0x4, "563e359cde7ccdca47d10000dc0000000000000000800a00000000007310717d", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000000)={0x5, "340b784fceefd131b8e6238c25f5998e5bf421e48f4b0a501922de974a3300", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r8, 0xc0303e03, &(0x7f0000000180)={"2486970284ed923431d400001f000000a9201be943f06f2f4000", r9}) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x35) dup(r11) 2.614380405s ago: executing program 5 (id=3721): socket$key(0xf, 0x3, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000001040)=ANY=[@ANYBLOB="1201000040154220a9055015bbe4010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$uac2(r1, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000100)={0x0, 0x15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x42043, 0x0) ioctl$IOMMU_GET_HW_INFO(r2, 0x3b8a, &(0x7f00000003c0)={0x28, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000000640)={0x84, &(0x7f00000000c0)=ANY=[@ANYBLOB="0017b150c0a203c2bd3505c5744a44690b935c812a9c88a1411ea9c92fbfc4e3b17b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000000)=0x200, 0x4) r4 = syz_open_dev$evdev(&(0x7f0000000240), 0x20000, 0x0) ioctl$EVIOCGLED(r4, 0x80284504, &(0x7f0000000000)=""/52) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)=[0x0, 0x0], &(0x7f0000000400), 0x0, 0x2, 0x0, 0x0, r5}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r3, 0xc01064ab, &(0x7f0000000500)={0x1, r6, r5}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRES32=0x0, @ANYBLOB="2010f7ff00000400100003007866706d3000000072a6000000950000"], 0x34}, 0x1, 0x0, 0x0, 0x20008004}, 0x4000000) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_smc(0x2b, 0x1, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_subtree(r7, &(0x7f0000000200), 0x2, 0x0) rmdir(&(0x7f0000000240)='./cgroup/../file0\x00') preadv2(r8, &(0x7f0000000340)=[{&(0x7f0000000480)=""/148, 0x94}], 0x1, 0x3, 0x88c7, 0x4) mount(&(0x7f00000001c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='efivarfs\x00', 0x810041, &(0x7f0000000300)='syz0\x00') syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) 2.578316138s ago: executing program 3 (id=3722): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0) fadvise64(r0, 0x6, 0x2040000000007, 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x109001, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$FUSE(r3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x3, 0x0) ioctl$KVM_GET_MSRS_sys(r4, 0x4018aee2, &(0x7f0000000000)) ioctl$FAT_IOCTL_GET_VOLUME_ID(r4, 0x80047213, &(0x7f00000002c0)) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r8 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40140, 0x1) close(r8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x18082, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r8}}) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r9, 0xc058534f, &(0x7f00000001c0)={{0xf}, 0x1, 0x20001, 0xfcb0, {0x26}, 0x5, 0xffffffff}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) 2.527424428s ago: executing program 4 (id=3723): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) r1 = io_uring_setup(0x194f, &(0x7f0000000800)={0x0, 0xef4, 0x200, 0x0, 0x19f}) syz_io_uring_setup(0x8d6, &(0x7f0000000340)={0x0, 0xdf2e, 0x8, 0x3, 0x2, 0x0, r1}, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000d40)=@filter={'filter\x00', 0x2, 0x4, 0x378, 0xffffffff, 0xd0, 0xd0, 0x0, 0xfeffffff, 0xffffffff, 0x2a8, 0x2a8, 0x2a8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev, @empty, [0x0, 0xff000000, 0xff000000], [0x0, 0xffffff00], 'macsec0\x00', 'bond_slave_0\x00', {}, {}, 0x6, 0x0, 0x1, 0x8}, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@private0, @empty, [0x0, 0xffffffff], [0x0, 0x0, 0xffffffff], 'sit0\x00', 'vxcan1\x00', {}, {}, 0x0, 0x0, 0x1}, 0x0, 0xe0, 0x108, 0x0, {}, [@common=@unspec=@time={{0x38}, {0x4, 0x2, 0x344, 0xe703, 0x4, 0x7, 0x3}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, [0xff000000, 0xffffff00, 0xff, 0xff000000], [0xffffff00, 0x0, 0x0, 0xff], 'veth1_virt_wifi\x00', 'erspan0\x00', {0xff}, {}, 0x29, 0x4, 0x0, 0x10}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x84) r3 = syz_open_dev$radio(&(0x7f0000000080), 0x1, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0600000400"/20, @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x200000000000015f, &(0x7f0000000940)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff8585000000040000001811", @ANYRESDEC=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095114c68a22f37b9fb6f7827113e0715bdfd6997d44932cd96508d0f"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x3, &(0x7f0000000040)=ANY=[@ANYRES32=r3], &(0x7f0000000300)='GPL\x00', 0x2, 0xb3, &(0x7f0000000140)=""/179, 0x41100, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8c, 0x0) r7 = socket$netlink(0x10, 0x3, 0x14) r8 = syz_open_dev$video(&(0x7f0000000440), 0x3ff, 0x0) ioctl$VIDIOC_STREAMOFF(r8, 0x40045613, &(0x7f0000000200)=0x1) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)=ANY=[@ANYBLOB="380000000314010000000000020000000900020073797a3000000000080041007369770014003300766c616e3100"/56], 0x38}, 0x1, 0x0, 0x0, 0x80c9}, 0x20000000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r9 = syz_open_dev$sndpcmc(&(0x7f0000000d00), 0x0, 0x0) mmap$snddsp_control(&(0x7f0000000000/0x3000)=nil, 0x5ffffffff000, 0x1, 0x13, r9, 0x81000000) 2.030547089s ago: executing program 2 (id=3724): socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000000)=0x5) r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000000)=""/149, &(0x7f00000000c0)=0x210) 1.82227049s ago: executing program 2 (id=3725): r0 = syz_open_dev$dri(&(0x7f0000000000), 0xfffffffffffffff7, 0x7a5f42) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb0100180000000000000054000000540000000b000000070000000000000c040000000c00000000000007000000000700000003000093090000000a00000000800000090000000d00cf00fcffffff070000000300000001000100050000000d0000000000001202000000005f5f6130416f005f6100"], &(0x7f0000000140)=""/73, 0x77, 0x49, 0x1, 0x1, 0x10000}, 0x28) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0xc8, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x98}}]}, @CTA_EXPECT_MASK={0x3c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x89}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x2a}}, {0x14, 0x4, @mcast1}}}]}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @loopback}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x86}}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x24000801}, 0x4) socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, 0x0, 0x0) wait4(0x0, 0x0, 0x20000000, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xbecd6000) mmap(&(0x7f0000048000/0x1000)=nil, 0x1000, 0xb, 0x31, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000000080), 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f00000002c0), &(0x7f0000048000), 0x0) ioctl$NILFS_IOCTL_GET_SUINFO(r1, 0x80186e84, &(0x7f0000000240)={&(0x7f0000000200), 0x0, 0x10, 0x7, 0xffffffff}) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000080)={0x5, 0x8, {}, {}, 0x2, 0x3}) ioctl$DRM_IOCTL_PANTHOR_GROUP_CREATE(r4, 0xc0386447, &(0x7f00000000c0)={{0x8, 0x4, &(0x7f0000000040)=[{0x4, 0x0, 0x400}, {0x3, 0x0, 0x40000}, {0x7, 0x0, 0x4a}, {0x9, 0x0, 0x1200}]}, 0x3, 0x6c, 0x2, 0x2, 0x0, 0x4540, 0xfffffffffffffff9, 0x8, 0x0, 0x0}) ioctl$DRM_IOCTL_PANTHOR_GROUP_GET_STATE(r4, 0xc010644a, &(0x7f0000000300)={r6}) 1.73745748s ago: executing program 6 (id=3726): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b0001000010000904"], 0x0) r1 = socket(0x10, 0x80002, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r2, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=r3, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000fd3f0000000000000922000085000000110000009510000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r1) sendmsg$DEVLINK_CMD_RATE_SET(r1, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x44, r6, 0x20, 0x7, 0x25dfdbfe, {}, [@DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x14}, 0x8804) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e20, 0x0, @loopback, 0x7}}, 0x0, 0x0, 0x47, 0x0, "09be2271b78506e6dd938d324c415acd403a4480fd1afa34432bcdfa64d957e93efafd27ad06a6f589bb643f167cf0fcd370239aaa93f6ded3c5032c96ead0cdc68474d402ab73e482db7ec1e0a57489"}, 0xd8) bind$inet6(r5, &(0x7f0000000a00)={0xa, 0x4e20, 0x4, @loopback, 0x5}, 0x1c) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0xeffffff1, @empty, 0x2}, 0x1c) close(0x3) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000000)=r4, 0x4) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000e00)=@newtaction={0x14, 0x30, 0x53b, 0x0, 0x0, {0x9}}, 0x14}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 1.586216795s ago: executing program 3 (id=3727): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) syz_open_dev$vim2m(&(0x7f0000000080), 0x50d65ad7, 0x2) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000940)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x5}, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x2000c804) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x60842, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0x1, 0x8, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) close_range(r3, r4, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5b5d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @empty}]}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'bridge0\x00'}]}, 0x50}, 0x1, 0xc3, 0x0, 0x20000000}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 883.072162ms ago: executing program 2 (id=3728): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e24, @multicast2}, 0x10) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) prlimit64(0xffffffffffffffff, 0xf, &(0x7f0000000140)={0x3, 0x54d}, &(0x7f0000000180)) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000002c0), 0x80042, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000001c0)={0x10000000}) prctl$PR_SCHED_CORE(0x3e, 0x4000000000001, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000021c0)=@delchain={0x104, 0x65, 0x300, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0xffe0}, {0x0, 0x1}, {0xd}}, [@filter_kind_options=@f_route={{0xa}, {0xd4, 0x2, [@TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_ACT={0xc8, 0x6, [@m_skbmod={0x48, 0xc, 0x0, 0x0, {{0xb}, {0x4}, {0x19, 0x6, "9aaad3a34a1adaa126f245a873aacd356f5a6069d7"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_skbedit={0x4c, 0xe, 0x0, 0x0, {{0xc}, {0x14, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x8}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x1}]}, {0xf, 0x6, "abe20e18a85ce02f8e5176"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_skbedit={0x30, 0x6, 0x0, 0x0, {{0xc}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x104}, 0x1, 0x0, 0x0, 0x40008c5}, 0x20000080) r3 = socket(0xa, 0x2400000001, 0x0) getsockopt$inet6_buf(r3, 0x29, 0x1000000000001f, 0x0, &(0x7f0000002280)) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) r8 = syz_open_procfs(0x0, &(0x7f0000002280)='net/ip6_mr_vif\x00') read$FUSE(r8, &(0x7f0000000100)={0x2020}, 0x2020) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) mq_open(&(0x7f0000000080)='veth0_macvtap\x00', 0x2, 0x20, &(0x7f0000002140)={0x8000, 0x5a6b, 0x3, 0xeb9c}) write$tun(r5, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000001400000060ec97000fc83b00fe8000000000"], 0xffe) r9 = socket(0x10, 0x803, 0x0) sendto(r9, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r9, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 0s ago: executing program 2 (id=3729): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x43, 0x0, 0x0) unshare(0x20000400) pselect6(0x40, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x1, 0x800}, 0x0, &(0x7f0000000240)={0x1f, 0x3}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) kernel console output (not intermixed with test programs): f RDS: false [ 1056.030932][T18746] vivid-004: RDS Reception: true [ 1056.035925][T18746] vivid-004: RDS Program Type: 0 inactive [ 1056.041866][T18746] vivid-004: RDS PS Name: inactive [ 1056.054591][T18746] vivid-004: RDS Radio Text: inactive [ 1056.060281][ T5926] usb 5-1: Using ep0 maxpacket: 16 [ 1056.065545][T18746] vivid-004: RDS Traffic Announcement: false inactive [ 1056.072456][T18746] vivid-004: RDS Traffic Program: false inactive [ 1056.080731][T18746] vivid-004: RDS Music: false inactive [ 1056.086605][T18746] vivid-004: ================== END STATUS ================== [ 1056.086702][ T5926] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1056.124057][ T5926] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1056.219509][ T5926] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1056.229262][ T5926] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1056.378517][ T5926] usb 5-1: config 0 descriptor?? [ 1057.168037][T18755] netlink: 'syz.5.3435': attribute type 4 has an invalid length. [ 1057.206196][T18755] netlink: 152 bytes leftover after parsing attributes in process `syz.5.3435'. [ 1057.229305][T18755] wlan1: mtu less than device minimum [ 1057.279683][T18751] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3435'. [ 1057.392173][T18731] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1057.429025][T18731] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1057.472953][T18763] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3437'. [ 1057.676307][T18767] EXT4-fs (nbd4): unable to read superblock [ 1058.218924][ T29] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 1058.303609][T18763] overlayfs: conflicting lowerdir path [ 1058.381358][ T5926] usbhid 5-1:0.0: can't add hid device: -71 [ 1058.389120][ T5926] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1058.408932][ T5926] usb 5-1: USB disconnect, device number 43 [ 1058.480580][ T30] kauditd_printk_skb: 241 callbacks suppressed [ 1058.480596][ T30] audit: type=1400 audit(1776142816.649:53627): avc: denied { create } for pid=18777 comm="syz.3.3441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1058.487097][ T29] usb 7-1: Using ep0 maxpacket: 16 [ 1058.490628][ T29] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 1058.550874][ T30] audit: type=1400 audit(1776142816.660:53628): avc: denied { bind } for pid=18777 comm="syz.3.3441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1058.590144][ T30] audit: type=1400 audit(1776142816.660:53629): avc: denied { create } for pid=18777 comm="syz.3.3441" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1058.600679][ T29] usb 7-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 1058.612761][ T30] audit: type=1400 audit(1776142816.660:53630): avc: denied { ioctl } for pid=18777 comm="syz.3.3441" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=66244 ioctlcmd=0xaa03 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1058.638661][ T29] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1058.662036][ T30] audit: type=1400 audit(1776142816.660:53631): avc: denied { ioctl } for pid=18770 comm="syz.6.3439" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1058.676807][ T29] usb 7-1: Product: syz [ 1058.695076][ T30] audit: type=1400 audit(1776142816.702:53632): avc: denied { ioctl } for pid=18770 comm="syz.6.3439" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1058.705321][ T29] usb 7-1: Manufacturer: syz [ 1058.720470][ T5865] usb 3-1: new full-speed USB device number 32 using dummy_hcd [ 1058.732955][ T30] audit: type=1400 audit(1776142816.702:53633): avc: denied { allowed } for pid=18777 comm="syz.3.3441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1058.743671][ T29] usb 7-1: SerialNumber: syz [ 1058.753799][ T30] audit: type=1400 audit(1776142816.712:53634): avc: denied { create } for pid=18777 comm="syz.3.3441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1058.781219][ T5844] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 1058.782079][ T30] audit: type=1400 audit(1776142816.723:53635): avc: denied { create } for pid=18779 comm="syz.5.3442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1058.789608][ T29] usb 7-1: config 0 descriptor?? [ 1058.824590][ T30] audit: type=1400 audit(1776142816.723:53636): avc: denied { allowed } for pid=18777 comm="syz.3.3441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1058.841050][ T29] hub 7-1:0.0: bad descriptor, ignoring hub [ 1058.857634][ T29] hub 7-1:0.0: probe with driver hub failed with error -5 [ 1058.865806][ T29] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1058.877190][ T5865] usb 3-1: device descriptor read/64, error -71 [ 1058.953639][ T5844] usb 4-1: Using ep0 maxpacket: 16 [ 1058.962990][ T5844] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 1058.994316][ T5844] usb 4-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 1059.004796][ T5844] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1059.017116][ T5844] usb 4-1: Product: syz [ 1059.022115][ T5844] usb 4-1: Manufacturer: syz [ 1059.026869][ T5844] usb 4-1: SerialNumber: syz [ 1059.047027][ T5844] usb 4-1: config 0 descriptor?? [ 1059.082514][ T5844] hub 4-1:0.0: bad descriptor, ignoring hub [ 1059.095210][ T5844] hub 4-1:0.0: probe with driver hub failed with error -5 [ 1059.107389][ T5844] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1059.114546][ T5865] usb 3-1: new full-speed USB device number 33 using dummy_hcd [ 1059.142471][T18783] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1059.158643][T18783] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1059.182093][T15253] usb 7-1: USB disconnect, device number 14 [ 1059.251811][ T5865] usb 3-1: device descriptor read/64, error -71 [ 1059.305757][ T5926] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 1059.366240][ T5865] usb usb3-port1: attempt power cycle [ 1059.450396][T18789] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1059.460283][T18789] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1059.502178][ T5844] usb 4-1: USB disconnect, device number 29 [ 1059.515257][ T5926] usb 5-1: Using ep0 maxpacket: 32 [ 1059.531360][ T5926] usb 5-1: config 0 has an invalid interface number: 61 but max is 1 [ 1059.549576][ T5926] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1059.560198][ T5926] usb 5-1: config 0 has no interface number 0 [ 1059.572229][ T5926] usb 5-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=b5.f6 [ 1059.581657][ T5926] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1059.589669][ T5926] usb 5-1: Product: syz [ 1059.594642][ T5926] usb 5-1: Manufacturer: syz [ 1059.599239][ T5926] usb 5-1: SerialNumber: syz [ 1059.610794][ T5926] usb 5-1: config 0 descriptor?? [ 1059.720418][ T5865] usb 3-1: new full-speed USB device number 34 using dummy_hcd [ 1059.733340][ T5926] viperboard 5-1:0.61: version 0.00 found at bus 005 address 044 [ 1059.774264][ T5926] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 1059.790467][ T5865] usb 3-1: device descriptor read/8, error -71 [ 1059.798185][ T5926] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 1059.853568][ T5926] usb 5-1: USB disconnect, device number 44 [ 1060.039005][ T5865] usb 3-1: new full-speed USB device number 35 using dummy_hcd [ 1060.081727][ T5865] usb 3-1: device descriptor read/8, error -71 [ 1060.382476][ T5865] usb usb3-port1: unable to enumerate USB device [ 1060.906099][T18813] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3450'. [ 1061.023239][T18813] netlink: 'syz.4.3450': attribute type 10 has an invalid length. [ 1061.031427][ T5865] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 1061.456051][T18813] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1061.465522][ T5865] usb 4-1: Using ep0 maxpacket: 32 [ 1061.478496][ T5865] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 1061.494169][ T5865] usb 4-1: config 0 has no interface number 0 [ 1061.536794][ T5865] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1061.548708][ T5865] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1061.557800][ T5865] usb 4-1: Product: syz [ 1061.562697][ T5865] usb 4-1: Manufacturer: syz [ 1061.591786][ T5926] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 1061.603037][ T5865] usb 4-1: SerialNumber: syz [ 1061.628331][ T5865] usb 4-1: config 0 descriptor?? [ 1061.649550][ T5865] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1061.840627][ T5926] usb 3-1: Using ep0 maxpacket: 32 [ 1061.901553][ T5844] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 1062.021656][ T5926] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 1062.031808][ T5865] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1062.049946][ T5926] usb 3-1: config 0 has no interface number 0 [ 1062.079446][ T5926] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1062.092011][ T5865] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1062.112007][T18808] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1062.121834][ T5844] usb 7-1: Using ep0 maxpacket: 16 [ 1062.127191][ T5926] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1062.147032][ T5844] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1062.152134][ T5926] usb 3-1: Product: syz [ 1062.172811][ T5844] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1062.194467][ T5926] usb 3-1: Manufacturer: syz [ 1062.199091][ T5926] usb 3-1: SerialNumber: syz [ 1062.255517][ T5844] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1062.281731][ T5926] usb 3-1: config 0 descriptor?? [ 1062.319364][ T5844] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1062.363971][ T5844] usb 7-1: Product: syz [ 1062.378669][ T5844] usb 7-1: Manufacturer: syz [ 1062.392810][ T5844] usb 7-1: SerialNumber: syz [ 1062.410004][ T5844] usb 7-1: config 0 descriptor?? [ 1062.426628][ T5844] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1062.437054][ T5844] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class) [ 1062.437171][ T5926] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1062.604652][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1062.613299][ T5865] usb 4-1: USB disconnect, device number 30 [ 1063.085957][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1063.104549][ T5865] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1063.116241][ T5926] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB2 [ 1063.129742][ T5865] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1063.143497][ T5926] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB3 [ 1063.159360][ T5865] quatech2 4-1:0.51: device disconnected [ 1063.257186][ T30] kauditd_printk_skb: 282 callbacks suppressed [ 1063.257202][ T30] audit: type=1400 audit(1776142821.656:53919): avc: denied { ioctl } for pid=18824 comm="syz.6.3455" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1063.271856][ T5926] usb 3-1: USB disconnect, device number 36 [ 1063.301390][ T5926] quatech-serial ttyUSB2: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB2 [ 1063.377919][ T5926] quatech-serial ttyUSB3: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB3 [ 1063.399895][ T5926] quatech2 3-1:0.51: device disconnected [ 1063.411746][ T30] audit: type=1400 audit(1776142821.656:53920): avc: denied { read write } for pid=15557 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1063.466430][ T30] audit: type=1400 audit(1776142821.656:53921): avc: denied { open } for pid=15557 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1063.496546][ T5844] em28xx 7-1:0.0: chip ID is em2884 [ 1063.793326][ T5844] em28xx 7-1:0.0: Config register raw data: 0xfffffffb [ 1063.864952][ T5844] em28xx 7-1:0.0: AC97 chip type couldn't be determined [ 1064.054317][ T30] audit: type=1400 audit(1776142821.656:53922): avc: denied { ioctl } for pid=15557 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1064.087964][ T5844] em28xx 7-1:0.0: No AC97 audio processor [ 1064.116026][ T5844] usb 7-1: USB disconnect, device number 15 [ 1064.128034][ T5844] em28xx 7-1:0.0: Disconnecting em28xx [ 1064.162870][ T30] audit: type=1400 audit(1776142821.919:53923): avc: denied { ioctl } for pid=18824 comm="syz.6.3455" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1064.192653][ T5844] em28xx 7-1:0.0: Freeing device [ 1064.213473][ T30] audit: type=1400 audit(1776142822.191:53924): avc: denied { read } for pid=18833 comm="syz.5.3457" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1064.281976][ T30] audit: type=1400 audit(1776142822.191:53925): avc: denied { open } for pid=18833 comm="syz.5.3457" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1064.311196][ T30] audit: type=1400 audit(1776142822.559:53926): avc: denied { read write } for pid=17938 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1064.400380][ T30] audit: type=1400 audit(1776142822.559:53927): avc: denied { read write open } for pid=17938 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1064.693224][ T30] audit: type=1400 audit(1776142822.559:53928): avc: denied { ioctl } for pid=17938 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1064.719115][ T5926] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 1064.814873][T18851] 9pnet_fd: Insufficient options for proto=fd [ 1064.972732][ T5926] usb 3-1: Using ep0 maxpacket: 8 [ 1064.980351][ T5926] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1064.992104][ T5926] usb 3-1: config 4 interface 0 has no altsetting 0 [ 1065.006867][ T5926] usb 3-1: string descriptor 0 read error: -22 [ 1065.013315][ T5926] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1065.026091][ T5926] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 1065.057109][ T5926] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1065.481385][ T5926] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1065.511210][ T5926] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1065.522395][T18854] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3460'. [ 1065.532386][ T5926] usb 3-1: media controller created [ 1065.566171][T18841] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1065.575770][T18841] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1065.597616][ T5926] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1065.609780][ T792] libceph: connect (1)[c::]:6789 error -101 [ 1065.616153][ T792] libceph: mon0 (1)[c::]:6789 connect error [ 1065.732931][T18841] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3458'. [ 1065.915269][ T5926] zl10353_read_register: readreg error (reg=127, ret==0) [ 1065.973382][ T5865] libceph: connect (1)[c::]:6789 error -101 [ 1065.979453][ T5865] libceph: mon0 (1)[c::]:6789 connect error [ 1066.111705][ T5926] usb 3-1: USB disconnect, device number 37 [ 1066.248919][T18863] ceph: No mds server is up or the cluster is laggy [ 1066.302893][ T5918] kernel read not supported for file /vcs (pid: 5918 comm: kworker/0:6) [ 1066.411447][ T29] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 1066.570689][ T29] usb 5-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 1066.620710][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1066.765135][ T29] usb 5-1: Product: syz [ 1066.772750][ T29] usb 5-1: Manufacturer: syz [ 1066.778035][ T5844] libceph: connect (1)[c::]:6789 error -101 [ 1066.792656][ T792] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 1066.801579][ T29] usb 5-1: SerialNumber: syz [ 1066.816972][ T5844] libceph: mon0 (1)[c::]:6789 connect error [ 1066.836990][ T29] usb 5-1: config 0 descriptor?? [ 1067.120810][ T5844] libceph: connect (1)[c::]:6789 error -101 [ 1067.146173][ T5844] libceph: mon0 (1)[c::]:6789 connect error [ 1067.175525][T18886] ceph: No mds server is up or the cluster is laggy [ 1067.192471][ T792] usb 7-1: Using ep0 maxpacket: 8 [ 1067.207684][ T792] usb 7-1: config index 0 descriptor too short (expected 74, got 45) [ 1067.234744][ T792] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 1067.261225][ T792] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1067.275005][ T792] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1067.287904][ T792] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1067.318148][ T792] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1067.343061][ T29] usb 5-1: ignoring: probably an ADSL modem [ 1067.345147][ T792] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1067.537486][T18906] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3474'. [ 1067.564249][T18906] netlink: 'syz.5.3474': attribute type 10 has an invalid length. [ 1067.613157][ T792] usb 7-1: GET_CAPABILITIES returned 0 [ 1067.627310][ T792] usbtmc 7-1:16.0: can't read capabilities [ 1067.678210][ T5918] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 1067.724727][ T29] cxacru 5-1:0.0: usbatm_usb_probe: bind failed: -19! [ 1067.816644][ T29] usb 7-1: USB disconnect, device number 16 [ 1067.843264][T18910] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3476'. [ 1067.916339][ T5918] usb 3-1: Using ep0 maxpacket: 8 [ 1067.964200][ T5918] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1068.022175][ T30] kauditd_printk_skb: 288 callbacks suppressed [ 1068.025497][ T30] audit: type=1400 audit(1776142826.659:54217): avc: denied { read write } for pid=18879 comm="syz.4.3468" name="v4l-subdev5" dev="devtmpfs" ino=947 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1068.072508][ T30] audit: type=1400 audit(1776142826.659:54218): avc: denied { open } for pid=18879 comm="syz.4.3468" path="/dev/v4l-subdev5" dev="devtmpfs" ino=947 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1068.106346][ T30] audit: type=1400 audit(1776142826.669:54219): avc: denied { ioctl } for pid=18879 comm="syz.4.3468" path="/dev/v4l-subdev5" dev="devtmpfs" ino=947 ioctlcmd=0x563d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1068.174786][ T30] audit: type=1400 audit(1776142826.680:54220): avc: denied { connect } for pid=18879 comm="syz.4.3468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1068.195569][ T5918] usb 3-1: config 4 interface 0 has no altsetting 0 [ 1068.263331][ T30] audit: type=1400 audit(1776142826.753:54221): avc: denied { create } for pid=18879 comm="syz.4.3468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1068.349066][ T30] audit: type=1400 audit(1776142826.753:54222): avc: denied { allowed } for pid=18879 comm="syz.4.3468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1068.465839][ T5918] usb 3-1: string descriptor 0 read error: -22 [ 1068.479988][ T30] audit: type=1400 audit(1776142826.753:54223): avc: denied { create } for pid=18879 comm="syz.4.3468" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1068.582884][ T30] audit: type=1400 audit(1776142826.753:54224): avc: denied { map } for pid=18879 comm="syz.4.3468" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=67501 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1068.718341][ T30] audit: type=1400 audit(1776142826.753:54225): avc: denied { read write } for pid=18879 comm="syz.4.3468" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=67501 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1068.769901][ T5918] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1068.839245][ T30] audit: type=1400 audit(1776142826.806:54226): avc: denied { ioctl } for pid=18902 comm="syz.2.3475" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1068.962301][ T5918] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 1069.014191][ T5918] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1069.062589][ T5918] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1069.121992][ T5918] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1069.149917][ T5918] usb 3-1: media controller created [ 1069.175199][T18900] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1069.189348][ T5918] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1069.261457][T18903] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1069.274347][T18903] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1069.337925][T18903] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3475'. [ 1069.428488][ T5918] zl10353_read_register: readreg error (reg=127, ret==0) [ 1069.499456][ T5918] usb 3-1: USB disconnect, device number 38 [ 1069.674622][T18923] QAT: failed to copy from user cfg_data. [ 1070.040503][T15489] Bluetooth: hci1: command 0x0405 tx timeout [ 1070.124368][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1070.130785][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1070.177350][T18928] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3479'. [ 1070.226183][T18928] netlink: 'syz.2.3479': attribute type 10 has an invalid length. [ 1071.057124][T18925] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1071.149756][ T5918] usb 5-1: USB disconnect, device number 45 [ 1071.402617][T18938] siw: device registration error -23 [ 1071.723972][T18944] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3483'. [ 1072.306525][T18960] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3489'. [ 1072.349593][T18960] overlayfs: conflicting lowerdir path [ 1072.498423][ T792] usb 3-1: new full-speed USB device number 39 using dummy_hcd [ 1072.516565][T18965] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 1073.589078][ T30] kauditd_printk_skb: 209 callbacks suppressed [ 1073.589095][ T30] audit: type=1400 audit(1776142831.566:54436): avc: denied { append } for pid=18963 comm="syz.3.3490" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1074.663217][ T792] usb 3-1: config 0 has no interfaces? [ 1074.851062][ T792] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1074.876450][ T30] audit: type=1400 audit(1776142831.566:54437): avc: denied { append open } for pid=18963 comm="syz.3.3490" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1074.913446][ T792] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1074.946694][ T792] usb 3-1: Product: syz [ 1074.957945][ T792] usb 3-1: Manufacturer: syz [ 1075.270701][ T792] usb 3-1: SerialNumber: syz [ 1075.277450][ T30] audit: type=1400 audit(1776142831.577:54438): avc: denied { ioctl } for pid=18963 comm="syz.3.3490" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1076.143960][ T792] usb 3-1: config 0 descriptor?? [ 1076.198561][ T30] audit: type=1400 audit(1776142831.671:54439): avc: denied { read write } for pid=18963 comm="syz.3.3490" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1076.198891][ T792] usb 3-1: can't set config #0, error -71 [ 1076.324691][ T30] audit: type=1400 audit(1776142832.039:54440): avc: denied { getopt } for pid=18963 comm="syz.3.3490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1076.437735][ T30] audit: type=1400 audit(1776142832.039:54441): avc: denied { read } for pid=18963 comm="syz.3.3490" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1076.471440][ T792] usb 3-1: USB disconnect, device number 39 [ 1076.570601][ T30] audit: type=1400 audit(1776142832.039:54442): avc: denied { open } for pid=18963 comm="syz.3.3490" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1076.670456][ T30] audit: type=1400 audit(1776142832.081:54443): avc: denied { read write } for pid=18963 comm="syz.3.3490" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1076.711520][T16294] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1076.724986][T18997] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1076.915805][T18997] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3496'. [ 1077.884338][T19007] infiniband syz2: set down [ 1077.889274][T19007] infiniband syz2: added ipvlan0 [ 1077.961167][T19007] RDS/IB: syz2: added [ 1077.968423][T19007] smc: adding ib device syz2 with port count 1 [ 1077.976341][T19007] smc: ib device syz2 port 1 has pnetid S (user defined) [ 1078.978664][ T30] kauditd_printk_skb: 150 callbacks suppressed [ 1078.978681][ T30] audit: type=1400 audit(1776142838.169:54530): avc: denied { read write } for pid=16294 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1079.192423][ T30] audit: type=1400 audit(1776142838.222:54531): avc: denied { read write open } for pid=16294 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1079.327582][ T30] audit: type=1400 audit(1776142838.222:54532): avc: denied { ioctl } for pid=16294 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1079.327628][ T30] audit: type=1400 audit(1776142838.348:54533): avc: denied { read write } for pid=15557 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1079.327664][ T30] audit: type=1400 audit(1776142838.348:54534): avc: denied { open } for pid=15557 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1079.327701][ T30] audit: type=1400 audit(1776142838.348:54535): avc: denied { ioctl } for pid=15557 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1079.327740][ T30] audit: type=1400 audit(1776142838.432:54536): avc: denied { read } for pid=19014 comm="syz.5.3502" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1079.327775][ T30] audit: type=1400 audit(1776142838.432:54537): avc: denied { open } for pid=19014 comm="syz.5.3502" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1079.340648][ T30] audit: type=1400 audit(1776142838.474:54538): avc: denied { read write } for pid=16294 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1079.340690][ T30] audit: type=1400 audit(1776142838.474:54539): avc: denied { open } for pid=16294 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1079.633190][ T5844] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 1079.640129][ T5918] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 1079.805126][ T5918] usb 5-1: Using ep0 maxpacket: 32 [ 1079.807502][ T5918] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 1079.807529][ T5918] usb 5-1: config 0 has no interface number 0 [ 1079.809267][ T5918] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1079.809294][ T5918] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1079.809314][ T5918] usb 5-1: Product: syz [ 1079.809330][ T5918] usb 5-1: Manufacturer: syz [ 1079.809346][ T5918] usb 5-1: SerialNumber: syz [ 1079.854278][ T5918] usb 5-1: config 0 descriptor?? [ 1079.858609][ T5918] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1079.910549][ T5844] usb 6-1: Using ep0 maxpacket: 16 [ 1079.967417][T19024] xt_hashlimit: max too large, truncated to 1048576 [ 1080.210105][ T5844] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1080.218371][ T5918] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1080.289137][T19030] random: crng reseeded on system resumption [ 1080.739354][ T5844] usb 6-1: config 13 has an invalid interface number: 50 but max is 0 [ 1080.749695][ T5844] usb 6-1: config 13 has no interface number 0 [ 1080.756303][ T5844] usb 6-1: config 13 interface 50 altsetting 167 bulk endpoint 0x88 has invalid maxpacket 16 [ 1080.767827][ T5844] usb 6-1: config 13 interface 50 has no altsetting 0 [ 1080.775032][ T5918] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1080.809107][ T5844] usb 6-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32 [ 1080.902789][ T5844] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1080.911482][ T5844] usb 6-1: Product: syz [ 1080.915648][ T5844] usb 6-1: Manufacturer: syz [ 1080.921199][ T5844] usb 6-1: SerialNumber: syz [ 1080.959771][T19019] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1081.006200][T19036] overlayfs: conflicting lowerdir path [ 1081.046528][T19040] FAULT_INJECTION: forcing a failure. [ 1081.046528][T19040] name failslab, interval 1, probability 0, space 0, times 0 [ 1081.060444][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1081.072008][T19040] CPU: 1 UID: 0 PID: 19040 Comm: syz.3.3509 Tainted: G L syzkaller #0 PREEMPT(full) [ 1081.072037][T19040] Tainted: [L]=SOFTLOCKUP [ 1081.072044][T19040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1081.072054][T19040] Call Trace: [ 1081.072060][T19040] [ 1081.072067][T19040] dump_stack_lvl+0x100/0x190 [ 1081.072104][T19040] should_fail_ex.cold+0x5/0xa [ 1081.072128][T19040] should_failslab+0xc2/0x120 [ 1081.072146][T19040] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1081.072171][T19040] ? security_file_alloc+0x34/0x2c0 [ 1081.072188][T19040] ? trace_kmem_cache_alloc+0xf3/0x120 [ 1081.072211][T19040] security_file_alloc+0x34/0x2c0 [ 1081.072228][T19040] init_file+0x95/0x480 [ 1081.072250][T19040] alloc_empty_backing_file+0x3f/0xd0 [ 1081.072274][T19040] backing_tmpfile_open+0x6d/0x110 [ 1081.072304][T19040] ovl_tmpfile+0x3c5/0x9c0 [ 1081.072327][T19040] ? __pfx_ovl_tmpfile+0x10/0x10 [ 1081.072348][T19040] ? _raw_spin_unlock+0x28/0x50 [ 1081.072379][T19040] vfs_tmpfile+0x2be/0x9a0 [ 1081.072406][T19040] path_openat+0x164e/0x31a0 [ 1081.072424][T19040] ? kasan_save_stack+0x3f/0x50 [ 1081.072449][T19040] ? kasan_save_stack+0x30/0x50 [ 1081.072478][T19040] ? __kasan_slab_alloc+0x89/0x90 [ 1081.072492][T19040] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 1081.072515][T19040] ? do_getname+0x35/0x390 [ 1081.072536][T19040] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1081.072557][T19040] ? __pfx_path_openat+0x10/0x10 [ 1081.072584][T19040] do_file_open+0x20e/0x430 [ 1081.072606][T19040] ? __pfx_do_file_open+0x10/0x10 [ 1081.072645][T19040] ? _raw_spin_unlock+0x28/0x50 [ 1081.072670][T19040] ? alloc_fd+0x476/0x790 [ 1081.072697][T19040] do_sys_openat2+0x10d/0x1e0 [ 1081.072721][T19040] ? __pfx_do_sys_openat2+0x10/0x10 [ 1081.072753][T19040] __x64_sys_openat2+0x244/0x380 [ 1081.072777][T19040] ? __pfx___x64_sys_openat2+0x10/0x10 [ 1081.072799][T19040] ? ksys_write+0x1ac/0x250 [ 1081.072824][T19040] do_syscall_64+0x106/0xf80 [ 1081.072841][T19040] ? clear_bhb_loop+0x40/0x90 [ 1081.072863][T19040] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1081.072882][T19040] RIP: 0033:0x7fcf0559c819 [ 1081.072898][T19040] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1081.072914][T19040] RSP: 002b:00007fcf064a5028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b5 [ 1081.072932][T19040] RAX: ffffffffffffffda RBX: 00007fcf05815fa0 RCX: 00007fcf0559c819 [ 1081.072943][T19040] RDX: 0000200000000140 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1081.072954][T19040] RBP: 00007fcf064a5090 R08: 0000000000000000 R09: 0000000000000000 [ 1081.072964][T19040] R10: 0000000000000018 R11: 0000000000000246 R12: 0000000000000002 [ 1081.072975][T19040] R13: 00007fcf05816038 R14: 00007fcf05815fa0 R15: 00007ffe94921448 [ 1081.072999][T19040] [ 1081.430420][ T29] usb 5-1: USB disconnect, device number 46 [ 1081.547860][ T29] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1081.597001][ T29] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1081.615779][ T29] quatech2 5-1:0.51: device disconnected [ 1081.783086][ T5844] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1081.793339][ T5844] usb 6-1: MIDIStreaming interface descriptor not found [ 1081.843809][ T5844] usb 6-1: USB disconnect, device number 70 [ 1082.161009][T19057] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3516'. [ 1082.706607][T19072] random: crng reseeded on system resumption [ 1083.481399][T19074] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 1083.778142][ T30] kauditd_printk_skb: 197 callbacks suppressed [ 1083.778154][ T30] audit: type=1400 audit(1776142843.208:54737): avc: denied { create } for pid=19075 comm="syz.4.3521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1083.804218][ T5844] usb 7-1: new full-speed USB device number 17 using dummy_hcd [ 1084.108724][T19081] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1084.941301][ T30] audit: type=1400 audit(1776142843.250:54738): avc: denied { execmem } for pid=19075 comm="syz.4.3521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1084.962206][ T30] audit: type=1400 audit(1776142843.345:54739): avc: denied { append } for pid=19068 comm="syz.2.3520" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1084.988964][ T30] audit: type=1400 audit(1776142843.345:54740): avc: denied { open } for pid=19068 comm="syz.2.3520" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1085.195298][ T30] audit: type=1400 audit(1776142843.345:54741): avc: denied { ioctl } for pid=19068 comm="syz.2.3520" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1085.262573][ T30] audit: type=1400 audit(1776142843.355:54742): avc: denied { read write } for pid=19068 comm="syz.2.3520" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1085.316213][ T30] audit: type=1400 audit(1776142843.450:54744): avc: denied { create } for pid=19075 comm="syz.4.3521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1085.329141][ T5844] usb 7-1: device not accepting address 17, error -71 [ 1086.340360][ T30] audit: type=1400 audit(1776142843.450:54745): avc: denied { write } for pid=19075 comm="syz.4.3521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1086.341059][T10940] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 1086.486366][ T30] audit: type=1400 audit(1776142843.555:54746): avc: denied { create } for pid=19075 comm="syz.4.3521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1086.541954][T19098] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3523'. [ 1086.608979][T19098] netlink: 'syz.6.3523': attribute type 10 has an invalid length. [ 1086.617559][ T30] audit: type=1400 audit(1776142843.555:54747): avc: denied { write } for pid=19075 comm="syz.4.3521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1086.624935][T10940] usb 5-1: Using ep0 maxpacket: 16 [ 1087.842410][T10940] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 1087.857975][T10940] usb 5-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 1087.868188][T10940] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1087.912494][T10940] usb 5-1: Product: syz [ 1087.925857][T10940] usb 5-1: Manufacturer: syz [ 1087.942602][T19110] netlink: 'syz.3.3526': attribute type 1 has an invalid length. [ 1087.955667][T10940] usb 5-1: SerialNumber: syz [ 1087.979437][T10940] usb 5-1: config 0 descriptor?? [ 1087.986264][T19110] netlink: 244 bytes leftover after parsing attributes in process `syz.3.3526'. [ 1088.012685][T10940] usb 5-1: can't set config #0, error -71 [ 1088.029941][T10940] usb 5-1: USB disconnect, device number 47 [ 1088.155522][T19088] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1088.338847][T19118] siw: device registration error -23 [ 1089.365735][T19098] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1089.424492][ T30] kauditd_printk_skb: 151 callbacks suppressed [ 1089.424508][ T30] audit: type=1400 audit(1776142849.129:54847): avc: denied { read write } for pid=17809 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1089.461918][ T30] audit: type=1400 audit(1776142849.129:54848): avc: denied { open } for pid=17809 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1089.486975][ T30] audit: type=1400 audit(1776142849.129:54849): avc: denied { ioctl } for pid=17809 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1089.548315][ T30] audit: type=1400 audit(1776142849.255:54850): avc: denied { read write } for pid=19124 comm="syz.3.3529" name="swradio6" dev="devtmpfs" ino=1034 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1090.431340][ T30] audit: type=1400 audit(1776142849.255:54851): avc: denied { open } for pid=19124 comm="syz.3.3529" path="/dev/swradio6" dev="devtmpfs" ino=1034 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1090.478485][ T30] audit: type=1400 audit(1776142849.255:54852): avc: denied { ioctl } for pid=19124 comm="syz.3.3529" path="/dev/swradio6" dev="devtmpfs" ino=1034 ioctlcmd=0x5639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1090.513377][ T30] audit: type=1400 audit(1776142849.287:54853): avc: denied { create } for pid=19124 comm="syz.3.3529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1090.540539][ T30] audit: type=1400 audit(1776142849.297:54854): avc: denied { write } for pid=19124 comm="syz.3.3529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1090.562108][ T30] audit: type=1400 audit(1776142849.297:54855): avc: denied { create } for pid=19124 comm="syz.3.3529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1090.588303][ T30] audit: type=1400 audit(1776142849.297:54856): avc: denied { setopt } for pid=19124 comm="syz.3.3529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1090.618577][T19129] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3530'. [ 1090.989332][T19138] random: crng reseeded on system resumption [ 1091.026319][T10940] usb 3-1: new full-speed USB device number 40 using dummy_hcd [ 1091.168415][ T5844] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 1091.198989][T10940] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1091.243707][T10940] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1091.340803][T10940] usb 3-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 1091.351120][T10940] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1091.363083][T10940] usb 3-1: Manufacturer: syz [ 1091.382573][T10940] usb 3-1: config 0 descriptor?? [ 1091.416501][ T5844] usb 5-1: Using ep0 maxpacket: 8 [ 1091.424138][ T5844] usb 5-1: config index 0 descriptor too short (expected 74, got 45) [ 1091.441813][ T5844] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 1091.468004][ T5844] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1091.491377][ T5844] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 1091.513113][ T5844] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1091.539723][ T5844] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1091.568352][ T5844] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1091.588432][ T5844] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1091.599365][T19143] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3536'. [ 1091.680381][T19145] overlayfs: conflicting lowerdir path [ 1091.816187][T10940] cougar 0003:060B:700A.0013: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 1091.829455][T19137] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1091.839323][ T5844] usb 5-1: usb_control_msg returned -32 [ 1091.854205][ T5844] usbtmc 5-1:16.0: can't read capabilities [ 1091.863948][T19137] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1092.029727][ T5865] usb 3-1: USB disconnect, device number 40 [ 1092.070370][T19151] fido_id[19151]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 1092.124053][T19156] netlink: 'syz.5.3539': attribute type 1 has an invalid length. [ 1092.158650][T19156] netlink: 244 bytes leftover after parsing attributes in process `syz.5.3539'. [ 1092.254775][ T5926] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 1092.293205][T19137] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1092.324794][T19137] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1092.644927][ T5926] usb 7-1: Using ep0 maxpacket: 16 [ 1092.671807][ T5926] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 1092.718574][ T5926] usb 7-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 1092.744511][ T5926] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1092.757801][ T5926] usb 7-1: Product: syz [ 1092.762911][T19167] netlink: 188 bytes leftover after parsing attributes in process `syz.3.3541'. [ 1092.772671][ T5926] usb 7-1: Manufacturer: syz [ 1092.777271][ T5926] usb 7-1: SerialNumber: syz [ 1092.800097][ T5926] usb 7-1: config 0 descriptor?? [ 1092.814103][ T5926] hub 7-1:0.0: bad descriptor, ignoring hub [ 1092.827129][ T5926] hub 7-1:0.0: probe with driver hub failed with error -5 [ 1092.846470][ T5926] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1092.946440][T19169] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3542'. [ 1093.037514][ T5865] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 1093.052223][T19169] netlink: 'syz.5.3542': attribute type 10 has an invalid length. [ 1093.094649][T19172] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1093.116001][T19172] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1093.128265][ T5926] usb 7-1: USB disconnect, device number 19 [ 1093.216557][ T5865] usb 4-1: Using ep0 maxpacket: 32 [ 1093.234126][ T5865] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1093.264208][ T5865] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1093.288671][ T5865] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 1093.297114][T19174] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3543'. [ 1093.342537][ T5865] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1093.385549][ T5865] usb 4-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 1093.402231][ T5865] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1093.422064][ T5865] usb 4-1: Product: syz [ 1093.435567][ T5865] usb 4-1: Manufacturer: syz [ 1093.437558][T19174] netlink: 'syz.2.3543': attribute type 10 has an invalid length. [ 1093.481944][ T5865] usb 4-1: SerialNumber: syz [ 1093.719281][T19167] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1093.766895][T19167] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1093.801287][T19165] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1093.869841][ T5926] usb 5-1: USB disconnect, device number 48 [ 1094.182317][T19181] random: crng reseeded on system resumption [ 1094.261505][ T30] kauditd_printk_skb: 274 callbacks suppressed [ 1094.261535][ T30] audit: type=1400 audit(1776142854.126:55131): avc: denied { write } for pid=19175 comm="syz.6.3544" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1094.674320][ T30] audit: type=1400 audit(1776142854.126:55132): avc: denied { open } for pid=19175 comm="syz.6.3544" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1094.766976][ T30] audit: type=1400 audit(1776142854.168:55133): avc: denied { create } for pid=19175 comm="syz.6.3544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1094.931314][ T30] audit: type=1400 audit(1776142854.179:55134): avc: denied { connect } for pid=19175 comm="syz.6.3544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1094.996522][ T30] audit: type=1400 audit(1776142854.609:55135): avc: denied { read write } for pid=9137 comm="syz-executor" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1095.070350][T19185] Cannot find del_set index 4 as target [ 1095.140710][T19185] overlayfs: overlapping lowerdir path [ 1095.221150][T19186] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3546'. [ 1095.510283][T19170] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1095.576527][ T30] audit: type=1400 audit(1776142854.609:55136): avc: denied { open } for pid=9137 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1095.685951][ T30] audit: type=1400 audit(1776142854.609:55137): avc: denied { ioctl } for pid=9137 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=653 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1095.756273][ T30] audit: type=1400 audit(1776142854.788:55138): avc: denied { execmem } for pid=19182 comm="syz.6.3546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1095.840817][ T30] audit: type=1400 audit(1776142855.050:55139): avc: denied { create } for pid=19182 comm="syz.6.3546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1095.846331][ T5865] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1095.911224][ T30] audit: type=1400 audit(1776142855.050:55140): avc: denied { setopt } for pid=19182 comm="syz.6.3546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1095.967668][ T5865] usb 4-1: MIDIStreaming interface descriptor not found [ 1096.005478][T10940] kernel read not supported for file /vcs (pid: 10940 comm: kworker/1:0) [ 1096.921972][ T5815] Bluetooth: hci4: command 0x0406 tx timeout [ 1096.929161][T10819] Bluetooth: hci0: command 0x0406 tx timeout [ 1097.007515][ T5865] usb 4-1: USB disconnect, device number 31 [ 1097.135421][T18620] udevd[18620]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1097.393451][T19207] netlink: 'syz.4.3553': attribute type 1 has an invalid length. [ 1097.402897][ T5865] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 1097.415584][T19207] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3553'. [ 1097.438171][ T5926] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 1097.458256][T19209] CUSE: info not properly terminated [ 1097.522213][ T5918] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 1097.819352][ T5865] usb 4-1: Using ep0 maxpacket: 8 [ 1097.836139][ T5926] usb 7-1: Using ep0 maxpacket: 8 [ 1097.843762][ T5865] usb 4-1: config index 0 descriptor too short (expected 74, got 45) [ 1097.852056][ T5865] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 1097.865584][ T5865] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1097.875997][ T5926] usb 7-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 1097.886409][ T5926] usb 7-1: config 179 has 0 interfaces, different from the descriptor's value: 1 [ 1097.896097][ T5918] usb 6-1: Using ep0 maxpacket: 16 [ 1097.903483][ T5918] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1097.914453][ T5865] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1097.924605][ T5918] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1097.941210][ T5926] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1097.958419][ T5865] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1097.978551][ T5918] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1097.992244][ T5926] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1098.046741][ T5865] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1098.058808][ T5918] usb 6-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1098.084160][ T5865] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1098.092767][ T5918] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1098.118105][ T5918] usb 6-1: config 0 descriptor?? [ 1098.131304][T19217] FAULT_INJECTION: forcing a failure. [ 1098.131304][T19217] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1098.145729][T19217] CPU: 0 UID: 0 PID: 19217 Comm: syz.2.3556 Tainted: G L syzkaller #0 PREEMPT(full) [ 1098.145757][T19217] Tainted: [L]=SOFTLOCKUP [ 1098.145763][T19217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1098.145774][T19217] Call Trace: [ 1098.145780][T19217] [ 1098.145787][T19217] dump_stack_lvl+0x100/0x190 [ 1098.145824][T19217] should_fail_ex.cold+0x5/0xa [ 1098.145849][T19217] _copy_from_user+0x2e/0xd0 [ 1098.145873][T19217] copy_msghdr_from_user+0x9f/0x4f0 [ 1098.145896][T19217] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1098.145930][T19217] ___sys_sendmsg+0x106/0x1e0 [ 1098.145952][T19217] ? __pfx____sys_sendmsg+0x10/0x10 [ 1098.146000][T19217] __sys_sendmsg+0x170/0x220 [ 1098.146027][T19217] ? __pfx___sys_sendmsg+0x10/0x10 [ 1098.146067][T19217] do_syscall_64+0x106/0xf80 [ 1098.146086][T19217] ? clear_bhb_loop+0x40/0x90 [ 1098.146106][T19217] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1098.146124][T19217] RIP: 0033:0x7f575f59c819 [ 1098.146139][T19217] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1098.146155][T19217] RSP: 002b:00007f57603ec028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1098.146171][T19217] RAX: ffffffffffffffda RBX: 00007f575f815fa0 RCX: 00007f575f59c819 [ 1098.146182][T19217] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 1098.146192][T19217] RBP: 00007f57603ec090 R08: 0000000000000000 R09: 0000000000000000 [ 1098.146201][T19217] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1098.146211][T19217] R13: 00007f575f816038 R14: 00007f575f815fa0 R15: 00007ffccc612ab8 [ 1098.146234][T19217] [ 1098.346716][ T5918] input: HID 0955:7214 Haptics as /devices/virtual/input/input42 [ 1098.404770][ T5865] usb 4-1: usb_control_msg returned -71 [ 1098.410453][ T5865] usbtmc 4-1:16.0: can't read capabilities [ 1098.422379][ T5865] usb 4-1: USB disconnect, device number 32 [ 1098.489107][ T5926] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 1099.078548][ T30] kauditd_printk_skb: 125 callbacks suppressed [ 1099.078565][ T30] audit: type=1400 audit(1776142859.267:55266): avc: denied { ioctl } for pid=19213 comm="syz.4.3555" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1099.144737][ T30] audit: type=1400 audit(1776142859.340:55267): avc: denied { ioctl } for pid=19213 comm="syz.4.3555" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1099.202343][ T30] audit: type=1400 audit(1776142859.403:55268): avc: denied { read write } for pid=17938 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1099.230586][ T5926] usb 5-1: Using ep0 maxpacket: 32 [ 1099.241430][ T5926] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 1099.258090][ T5926] usb 5-1: config 0 has no interface number 0 [ 1099.266685][ T30] audit: type=1400 audit(1776142859.403:55269): avc: denied { open } for pid=17938 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1099.268411][ T5918] shield 0003:0955:7214.0014: Registered Thunderstrike controller [ 1099.304319][ T5926] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1099.313914][ T5926] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1099.317140][ T30] audit: type=1400 audit(1776142859.403:55270): avc: denied { ioctl } for pid=17938 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1099.333256][ T5926] usb 5-1: Product: syz [ 1099.354352][ T5918] shield 0003:0955:7214.0014: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.5-1/input0 [ 1099.355610][ T30] audit: type=1400 audit(1776142859.445:55271): avc: denied { ioctl } for pid=19213 comm="syz.4.3555" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1099.390209][ T5926] usb 5-1: Manufacturer: syz [ 1099.390232][ T5926] usb 5-1: SerialNumber: syz [ 1099.392575][ T5926] usb 5-1: config 0 descriptor?? [ 1099.405009][ T30] audit: type=1400 audit(1776142859.498:55272): avc: denied { ioctl } for pid=19213 comm="syz.4.3555" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1099.418255][ T5926] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1099.451395][ T30] audit: type=1400 audit(1776142859.498:55273): avc: denied { ioctl } for pid=19213 comm="syz.4.3555" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1099.481479][T15253] shield 0003:0955:7214.0014: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 1099.500599][ T5918] usb 6-1: USB disconnect, device number 71 [ 1099.530893][T15253] shield 0003:0955:7214.0014: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1099.563982][ T30] audit: type=1400 audit(1776142859.519:55274): avc: denied { ioctl } for pid=19213 comm="syz.4.3555" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1099.592694][T15253] shield 0003:0955:7214.0014: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1099.629149][ T30] audit: type=1400 audit(1776142859.519:55275): avc: denied { create } for pid=19230 comm="syz.2.3558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1100.017879][T10940] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 1100.157717][T15253] shield 0003:0955:7214.0014: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1100.170702][ T5926] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1100.183041][ T5913] usb 7-1: USB disconnect, device number 20 [ 1100.190856][ T5926] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1100.258511][T10940] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1100.295825][T10940] usb 4-1: New USB device found, idVendor=68f5, idProduct=0200, bcdDevice= 0.40 [ 1100.314623][T10940] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1100.349001][T10940] usb 4-1: Product: syz [ 1100.365678][T10940] usb 4-1: Manufacturer: syz [ 1100.371371][T10940] usb 4-1: SerialNumber: syz [ 1100.413896][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1100.414269][ T5913] usb 5-1: USB disconnect, device number 49 [ 1100.449235][ T5913] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1100.472393][T19243] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3561'. [ 1100.488639][T19244] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 1100.506685][ T5913] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1100.535196][ T5913] quatech2 5-1:0.51: device disconnected [ 1100.538620][T19243] netlink: 'syz.6.3561': attribute type 10 has an invalid length. [ 1101.375800][T19237] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1101.409886][T19237] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1101.558403][T19238] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1101.589265][ T5918] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 1101.608612][ T5913] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 1101.741749][ T5918] usb 6-1: Using ep0 maxpacket: 16 [ 1101.823584][ T5913] usb 5-1: too many configurations: 23, using maximum allowed: 8 [ 1101.837986][ T5918] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 1101.843460][ T5913] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1101.858790][ T5913] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1101.871483][ T5913] usb 5-1: Product: syz [ 1101.876047][ T5913] usb 5-1: Manufacturer: syz [ 1101.878058][ T5918] usb 6-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 1101.880980][ T5913] usb 5-1: SerialNumber: syz [ 1101.919244][ T5918] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1101.919527][ T5913] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1101.948343][ T29] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1101.963307][T10940] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1101.987879][ T5918] usb 6-1: Product: syz [ 1102.009867][ T5918] usb 6-1: Manufacturer: syz [ 1102.025685][ T5918] usb 6-1: SerialNumber: syz [ 1102.049475][T10940] usb 4-1: USB disconnect, device number 33 [ 1102.081634][ T5918] usb 6-1: config 0 descriptor?? [ 1102.111216][ T5918] hub 6-1:0.0: bad descriptor, ignoring hub [ 1102.206381][ T5918] hub 6-1:0.0: probe with driver hub failed with error -5 [ 1102.245214][ T5918] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1102.601409][ T5926] usb 5-1: USB disconnect, device number 50 [ 1102.810021][ T5918] usb 6-1: USB disconnect, device number 72 [ 1102.962881][ T29] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 1102.980923][ T29] ath9k_htc: Failed to initialize the device [ 1103.016325][ T5926] usb 5-1: ath9k_htc: USB layer deinitialized [ 1103.069016][T19257] ceph: No mds server is up or the cluster is laggy [ 1103.260562][T19270] random: crng reseeded on system resumption [ 1103.380205][ T5918] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 1103.543235][ T5918] usb 7-1: Using ep0 maxpacket: 8 [ 1103.556450][ T5918] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1103.575643][ T5918] usb 7-1: config 4 interface 0 has no altsetting 0 [ 1103.588254][ T5918] usb 7-1: string descriptor 0 read error: -22 [ 1103.598374][ T5918] usb 7-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1103.608499][ T5918] usb 7-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 1103.619692][T10940] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 1103.641581][ T5918] usb 7-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1103.670111][ T5918] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1103.687086][ T5918] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1103.696319][ T5918] usb 7-1: media controller created [ 1103.713395][ T5918] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1103.789903][T10940] usb 4-1: Using ep0 maxpacket: 8 [ 1103.797411][T10940] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1103.806298][T10940] usb 4-1: config 4 interface 0 has no altsetting 0 [ 1103.815329][T10940] usb 4-1: string descriptor 0 read error: -22 [ 1103.821986][T10940] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1103.838387][T10940] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 1103.856179][ T30] kauditd_printk_skb: 244 callbacks suppressed [ 1103.856195][ T30] audit: type=1400 audit(1776142864.285:55520): avc: denied { ioctl } for pid=19276 comm="syz.3.3571" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1103.895715][T10940] usb 4-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1103.906664][T19266] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1103.921044][T19266] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1103.929971][T10940] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1103.944854][T10940] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1103.957721][ T30] audit: type=1400 audit(1776142864.285:55521): avc: denied { create } for pid=19264 comm="syz.6.3567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1103.978785][ T29] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 1103.994712][T10940] usb 4-1: media controller created [ 1104.002317][T19266] netlink: 256 bytes leftover after parsing attributes in process `syz.6.3567'. [ 1104.017537][T10940] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1104.032541][ T30] audit: type=1400 audit(1776142864.285:55522): avc: denied { write } for pid=19264 comm="syz.6.3567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1104.142575][ T30] audit: type=1400 audit(1776142864.285:55523): avc: denied { read } for pid=19264 comm="syz.6.3567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1104.170355][ T29] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1104.180849][ T29] usb 5-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00 [ 1104.194700][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1104.205787][ T30] audit: type=1400 audit(1776142864.327:55524): avc: denied { write } for pid=19264 comm="syz.6.3567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1104.236501][ T29] usb 5-1: config 0 descriptor?? [ 1104.244626][T19278] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1104.262910][ T5918] zl10353_read_register: readreg error (reg=127, ret==0) [ 1104.389791][ T30] audit: type=1400 audit(1776142864.338:55525): avc: denied { read write } for pid=19264 comm="syz.6.3567" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1104.417387][ T30] audit: type=1400 audit(1776142864.338:55526): avc: denied { read write open } for pid=19264 comm="syz.6.3567" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1104.425464][T19278] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1104.975019][ T30] audit: type=1400 audit(1776142864.338:55527): avc: denied { ioctl } for pid=19264 comm="syz.6.3567" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1105.003486][ T30] audit: type=1400 audit(1776142864.380:55528): avc: denied { ioctl } for pid=19283 comm="syz.4.3573" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1105.073040][T19278] netlink: 256 bytes leftover after parsing attributes in process `syz.3.3571'. [ 1105.110549][T15557] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1105.117190][T10940] zl10353_read_register: readreg error (reg=127, ret==0) [ 1105.152262][T19300] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3575'. [ 1105.226883][T19309] netlink: 'syz.6.3577': attribute type 72 has an invalid length. [ 1105.235038][T19309] netlink: 52 bytes leftover after parsing attributes in process `syz.6.3577'. [ 1105.388619][ T29] hid_mf 0003:0079:1846.0015: unknown main item tag 0x0 [ 1105.421539][ T29] hid_mf 0003:0079:1846.0015: unknown main item tag 0x0 [ 1105.446378][ T29] hid_mf 0003:0079:1846.0015: unknown main item tag 0x0 [ 1105.460338][T10940] usb 4-1: USB disconnect, device number 34 [ 1105.489287][ T29] hid_mf 0003:0079:1846.0015: unknown main item tag 0x0 [ 1105.604966][T19318] siw: device registration error -23 [ 1105.771813][ T5918] usb 7-1: USB disconnect, device number 21 [ 1105.798770][T19317] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3578'. [ 1105.813313][ T29] hid_mf 0003:0079:1846.0015: unknown main item tag 0x0 [ 1105.831300][ T29] hid_mf 0003:0079:1846.0015: unknown main item tag 0x0 [ 1105.848933][ T29] hid_mf 0003:0079:1846.0015: unknown main item tag 0x0 [ 1105.864914][T19317] netlink: 'syz.6.3578': attribute type 10 has an invalid length. [ 1105.888464][ T29] hid_mf 0003:0079:1846.0015: unknown main item tag 0x0 [ 1105.899607][ T29] hid_mf 0003:0079:1846.0015: unknown main item tag 0x0 [ 1105.911667][ T29] hid_mf 0003:0079:1846.0015: unknown main item tag 0x0 [ 1105.959929][ T29] hid_mf 0003:0079:1846.0015: hidraw0: USB HID v0.00 Device [HID 0079:1846] on usb-dummy_hcd.4-1/input0 [ 1106.003346][ T29] hid_mf 0003:0079:1846.0015: Invalid report, this should never happen! [ 1106.046045][ T29] hid_mf 0003:0079:1846.0015: Force feedback init failed. [ 1106.100443][ T29] usb 5-1: USB disconnect, device number 51 [ 1106.184722][T19312] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1106.382459][T19328] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3581'. [ 1106.403191][T19328] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3581'. [ 1106.947897][ T5926] IPVS: starting estimator thread 0... [ 1106.985908][T19335] IPVS: sh: FWM 3 0x00000003 - no destination available [ 1107.057363][T19336] IPVS: using max 71 ests per chain, 170400 per kthread [ 1107.156248][T19339] binder: 19337:19339 ioctl c0306201 0 returned -14 [ 1107.162268][ T5918] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 1107.219142][T19341] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1107.333271][ T5918] usb 6-1: Using ep0 maxpacket: 16 [ 1107.371004][ T5918] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=f4.9b [ 1107.390749][ T5918] usb 6-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1107.403081][ T5918] usb 6-1: Product: syz [ 1107.408105][ T5918] usb 6-1: SerialNumber: syz [ 1107.420999][ T5918] usb 6-1: config 0 descriptor?? [ 1107.422863][T19346] netlink: 52 bytes leftover after parsing attributes in process `syz.6.3588'. [ 1107.475468][ T5918] usb 6-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1107.496555][ T5918] dvb_usb_af9015 6-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 1107.541346][ T5918] usb 6-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1107.548568][ T5918] dvb_usb_af9035 6-1:0.0: probe with driver dvb_usb_af9035 failed with error -22 [ 1108.673236][ T30] kauditd_printk_skb: 283 callbacks suppressed [ 1108.673250][ T30] audit: type=1400 audit(1776142869.345:55810): avc: denied { create } for pid=19359 comm="syz.6.3592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1108.799479][ T30] audit: type=1400 audit(1776142869.377:55811): avc: denied { create } for pid=19359 comm="syz.6.3592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1108.829437][ T30] audit: type=1400 audit(1776142869.377:55812): avc: denied { setopt } for pid=19359 comm="syz.6.3592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1108.859388][ T30] audit: type=1400 audit(1776142869.377:55813): avc: denied { create } for pid=19359 comm="syz.6.3592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1108.913948][ T30] audit: type=1400 audit(1776142869.429:55814): avc: denied { ioctl } for pid=19359 comm="syz.6.3592" path="socket:[69549]" dev="sockfs" ino=69549 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1108.945735][ T30] audit: type=1400 audit(1776142869.429:55815): avc: denied { bind } for pid=19359 comm="syz.6.3592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1109.057245][ T30] audit: type=1400 audit(1776142869.429:55816): avc: denied { read write } for pid=19357 comm="syz.2.3591" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1109.154899][ T30] audit: type=1400 audit(1776142869.429:55817): avc: denied { open } for pid=19357 comm="syz.2.3591" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1109.250233][ T30] audit: type=1400 audit(1776142869.440:55818): avc: denied { ioctl } for pid=19357 comm="syz.2.3591" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1109.333337][ T30] audit: type=1400 audit(1776142869.545:55819): avc: denied { read } for pid=19359 comm="syz.6.3592" name="media3" dev="devtmpfs" ino=941 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1110.058486][ T5926] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 1110.181213][ T5913] usb 6-1: USB disconnect, device number 73 [ 1110.234365][ T5926] usb 4-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 1110.268030][ T5918] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 1110.275638][ T5926] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1110.285542][ T5926] usb 4-1: Product: syz [ 1110.290440][ T5926] usb 4-1: Manufacturer: syz [ 1110.295031][ T5926] usb 4-1: SerialNumber: syz [ 1110.304367][ T5926] usb 4-1: config 0 descriptor?? [ 1110.327304][ T5926] hub 4-1:0.0: bad descriptor, ignoring hub [ 1110.348020][ T5926] hub 4-1:0.0: probe with driver hub failed with error -5 [ 1110.361665][T19387] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3598'. [ 1110.457805][ T5918] usb 5-1: Using ep0 maxpacket: 16 [ 1110.668219][ T5918] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 1110.760644][T19369] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1110.769559][T19369] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1110.846149][T19390] bridge0: port 3(syz_tun) entered blocking state [ 1110.852731][T19390] bridge0: port 3(syz_tun) entered disabled state [ 1110.859417][T19390] syz_tun: entered allmulticast mode [ 1110.865829][T19390] syz_tun: entered promiscuous mode [ 1110.872133][T19390] bridge0: port 3(syz_tun) entered blocking state [ 1110.879458][T19390] bridge0: port 3(syz_tun) entered forwarding state [ 1110.890697][T19390] netlink: 'syz.3.3593': attribute type 10 has an invalid length. [ 1110.898951][T19390] bridge0: port 3(syz_tun) entered disabled state [ 1110.905515][T19390] bridge0: port 2(bridge_slave_1) entered disabled state [ 1110.912851][T19390] bridge0: port 1(bridge_slave_0) entered disabled state [ 1110.922735][T19390] bridge0: port 3(syz_tun) entered blocking state [ 1110.929237][T19390] bridge0: port 3(syz_tun) entered forwarding state [ 1110.936190][T19390] bridge0: port 2(bridge_slave_1) entered blocking state [ 1110.943289][T19390] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1110.950661][T19390] bridge0: port 1(bridge_slave_0) entered blocking state [ 1110.957747][T19390] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1110.967629][T19390] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1110.997160][T19389] netlink: 'syz.6.3598': attribute type 10 has an invalid length. [ 1110.997448][ T5918] usb 5-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 1111.092032][ T5918] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1111.115335][T14640] Bluetooth: hci1: command 0x0405 tx timeout [ 1111.129281][ T5918] usb 5-1: Product: syz [ 1111.146607][ T5918] usb 5-1: Manufacturer: syz [ 1111.167480][ T5918] usb 5-1: SerialNumber: syz [ 1111.195931][T19394] loop6: detected capacity change from 0 to 2640 [ 1111.206955][ T5918] usb 5-1: config 0 descriptor?? [ 1111.219266][ T5918] hub 5-1:0.0: bad descriptor, ignoring hub [ 1111.230441][ T5918] hub 5-1:0.0: probe with driver hub failed with error -5 [ 1111.236705][T19381] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1111.264950][T19394] buffer_io_error: 138 callbacks suppressed [ 1111.264966][T19394] Buffer I/O error on dev loop6, logical block 0, async page read [ 1111.293829][T19394] Buffer I/O error on dev loop6, logical block 0, async page read [ 1111.308693][ T5918] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1111.325601][T19394] loop6: unable to read partition table [ 1111.358849][T19394] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 1111.359433][T19400] Buffer I/O error on dev loop6, logical block 0, lost async page write [ 1111.394658][T19400] Buffer I/O error on dev loop6, logical block 1, lost async page write [ 1111.413452][T19400] Buffer I/O error on dev loop6, logical block 2, lost async page write [ 1111.432798][T19400] Buffer I/O error on dev loop6, logical block 3, lost async page write [ 1111.461946][T19400] Buffer I/O error on dev loop6, logical block 4, lost async page write [ 1111.472296][T19400] Buffer I/O error on dev loop6, logical block 5, lost async page write [ 1111.481622][T19400] Buffer I/O error on dev loop6, logical block 6, lost async page write [ 1111.490093][T19400] Buffer I/O error on dev loop6, logical block 7, lost async page write [ 1111.601758][T19406] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1111.680504][T19406] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1111.787980][ T29] usb 5-1: USB disconnect, device number 52 [ 1111.905986][T18349] udevd[18349]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1112.489114][ T5926] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 1112.555165][ T5926] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1112.578107][ T5178] ldm_validate_partition_table(): Disk read failed. [ 1112.612128][ T5178] Dev loop6: unable to read RDB block 0 [ 1112.637990][ T5926] dib0700: firmware download failed at 7 with -22 [ 1112.649626][ T5178] loop6: unable to read partition table [ 1112.670223][T19416] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 1112.846516][T19420] siw: device registration error -23 [ 1112.973517][ T5926] usb 4-1: USB disconnect, device number 35 [ 1113.233243][T19424] 9p: Bad value for 'wfdno' [ 1114.023256][ T30] kauditd_printk_skb: 206 callbacks suppressed [ 1114.023274][ T30] audit: type=1400 audit(1776142874.048:56026): avc: denied { append } for pid=19409 comm="syz.4.3604" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1114.062547][ T5178] ldm_validate_partition_table(): Disk read failed. [ 1114.078406][ T5178] Dev loop6: unable to read RDB block 0 [ 1114.084261][ T5178] loop6: unable to read partition table [ 1114.127772][ T30] audit: type=1400 audit(1776142874.048:56027): avc: denied { open } for pid=19409 comm="syz.4.3604" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1114.239164][ T30] audit: type=1400 audit(1776142874.048:56028): avc: denied { ioctl } for pid=19409 comm="syz.4.3604" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1114.317569][T19429] audit: audit_lost=765 audit_rate_limit=0 audit_backlog_limit=64 [ 1114.346380][T19429] audit: out of memory in audit_log_start [ 1114.353422][ T30] audit: type=1400 audit(1776142874.069:56029): avc: denied { read write } for pid=19409 comm="syz.4.3604" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1114.600156][ T30] audit: type=1400 audit(1776142874.132:56030): avc: denied { mounton } for pid=19412 comm="syz.6.3606" path="/514/file0" dev="tmpfs" ino=2776 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1114.735432][T19440] SET target dimension over the limit! [ 1114.965921][T19432] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1115.041956][ T30] audit: type=1400 audit(1776142874.342:56031): avc: denied { getopt } for pid=19409 comm="syz.4.3604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1115.062223][ T30] audit: type=1400 audit(1776142874.384:56032): avc: denied { read write } for pid=19409 comm="syz.4.3604" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1115.102239][T19432] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1115.115478][T19432] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1115.128816][T19432] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1115.129415][T19442] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3613'. [ 1115.150020][ T30] audit: type=1400 audit(1776142874.384:56033): avc: denied { open } for pid=19409 comm="syz.4.3604" path="/dev/loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1115.213831][T19432] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1115.228623][T19432] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1115.383365][T19432] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1115.518608][T19432] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1115.534893][T19443] bridge0: port 1(erspan0) entered blocking state [ 1115.541904][T19443] bridge0: port 1(erspan0) entered disabled state [ 1115.558329][T19443] erspan0: entered allmulticast mode [ 1115.574070][T19443] erspan0: entered promiscuous mode [ 1115.582011][T19443] bridge0: port 1(erspan0) entered blocking state [ 1115.588702][T19443] bridge0: port 1(erspan0) entered forwarding state [ 1115.596942][T19432] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1115.665740][T19432] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1116.076645][T19432] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1116.093199][T19432] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1116.726095][T19463] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3616'. [ 1116.739421][T19463] netlink: 'syz.5.3616': attribute type 10 has an invalid length. [ 1116.755096][T19447] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3614'. [ 1116.907071][ T5926] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 1116.916530][T15489] Bluetooth: hci5: command 0x0405 tx timeout [ 1117.085514][T14640] Bluetooth: hci6: command 0x2016 tx timeout [ 1117.092076][T15489] Bluetooth: hci4: command 0x0406 tx timeout [ 1117.130102][ T5926] usb 5-1: Using ep0 maxpacket: 16 [ 1117.154868][ T5926] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 1117.179817][ T5926] usb 5-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 1117.189487][ T5926] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1117.198800][ T5926] usb 5-1: Product: syz [ 1117.204061][ T5926] usb 5-1: Manufacturer: syz [ 1117.210993][ T5926] usb 5-1: SerialNumber: syz [ 1117.276663][ T5926] usb 5-1: config 0 descriptor?? [ 1117.307785][ T5926] hub 5-1:0.0: bad descriptor, ignoring hub [ 1117.314787][ T5926] hub 5-1:0.0: probe with driver hub failed with error -5 [ 1117.350402][T19454] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1117.376792][ T5926] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1117.516179][T15489] Bluetooth: hci0: command 0x0406 tx timeout [ 1117.549936][T10940] usb 5-1: USB disconnect, device number 53 [ 1117.629721][T18620] udevd[18620]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1117.668646][ T5918] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 1117.830899][ T5918] usb 7-1: Using ep0 maxpacket: 8 [ 1117.847496][T19476] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3620'. [ 1117.869135][ T5918] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 1117.892620][ T5918] usb 7-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1117.930056][ T5918] usb 7-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1117.967706][ T5918] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1117.992665][T10940] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 1118.013702][ T5918] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1118.044691][ T5918] usbtmc 7-1:16.0: bulk endpoints not found [ 1118.054796][T15489] Bluetooth: hci1: command 0x0405 tx timeout [ 1118.256905][T19480] 9p: Bad value for 'wfdno' [ 1118.594528][T10940] usb 5-1: Using ep0 maxpacket: 8 [ 1118.609508][T10940] usb 5-1: config 0 has an invalid interface number: 186 but max is 0 [ 1118.621769][T10940] usb 5-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1118.633158][T10940] usb 5-1: config 0 has no interface number 0 [ 1118.640173][T10940] usb 5-1: config 0 interface 186 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1118.656752][T10940] usb 5-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 1118.674861][T10940] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1118.695224][T10940] usb 5-1: Product: syz [ 1118.710038][T10940] usb 5-1: Manufacturer: syz [ 1118.714657][T10940] usb 5-1: SerialNumber: syz [ 1118.731701][T10940] usb 5-1: config 0 descriptor?? [ 1118.799403][ T30] kauditd_printk_skb: 225 callbacks suppressed [ 1118.799431][ T30] audit: type=1400 audit(1776142879.965:56259): avc: denied { read } for pid=19483 comm="syz.5.3623" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1118.901398][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1119.006438][T19485] siw: device registration error -23 [ 1119.024099][ T30] audit: type=1400 audit(1776142879.965:56260): avc: denied { open } for pid=19483 comm="syz.5.3623" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1119.088125][T15489] Bluetooth: hci4: command 0x0406 tx timeout [ 1119.229686][T19216] usb 3-1: new full-speed USB device number 41 using dummy_hcd [ 1119.273986][ T30] audit: type=1400 audit(1776142879.965:56261): avc: denied { ioctl } for pid=19481 comm="syz.2.3622" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1119.279867][T10940] iowarrior 5-1:0.186: no interrupt-in endpoint found [ 1119.350774][T10940] usb 5-1: USB disconnect, device number 54 [ 1119.365684][ T30] audit: type=1400 audit(1776142880.165:56262): avc: denied { ioctl } for pid=19481 comm="syz.2.3622" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1119.433193][T19216] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1119.452737][T19216] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1119.463926][ T30] audit: type=1400 audit(1776142880.175:56263): avc: denied { write } for pid=19483 comm="syz.5.3623" name="demux0" dev="devtmpfs" ino=927 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1119.489495][T19216] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1119.498867][T15489] Bluetooth: hci0: command 0x0406 tx timeout [ 1119.506247][T19216] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1119.515960][ T30] audit: type=1400 audit(1776142880.175:56264): avc: denied { open } for pid=19483 comm="syz.5.3623" path="/dev/dvb/adapter0/demux0" dev="devtmpfs" ino=927 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1119.542482][ T30] audit: type=1400 audit(1776142880.186:56265): avc: denied { write } for pid=19483 comm="syz.5.3623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1119.565239][T19216] usb 3-1: config 0 descriptor?? [ 1119.581845][T19216] hub 3-1:0.0: USB hub found [ 1119.920351][T19482] xt_cgroup: path and classid specified [ 1119.926038][ T30] audit: type=1400 audit(1776142880.280:56266): avc: denied { read write } for pid=17809 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1120.041089][T15489] Bluetooth: hci1: command 0x0405 tx timeout [ 1120.041252][ T30] audit: type=1400 audit(1776142880.280:56267): avc: denied { open } for pid=17809 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1120.197785][T19506] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1120.216498][T19216] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 1121.409984][T15489] Bluetooth: hci4: command 0x0406 tx timeout [ 1121.442415][T19216] usbhid 3-1:0.0: can't add hid device: -71 [ 1121.456163][T19216] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1121.635120][T15489] Bluetooth: hci0: command 0x0406 tx timeout [ 1121.798926][T19216] usb 3-1: USB disconnect, device number 41 [ 1122.802986][ T5913] usb 7-1: USB disconnect, device number 22 [ 1123.324326][T19537] 9p: Bad value for 'wfdno' [ 1123.441075][T15489] Bluetooth: hci4: command 0x0406 tx timeout [ 1123.731844][ T30] kauditd_printk_skb: 142 callbacks suppressed [ 1123.731860][ T30] audit: type=1400 audit(1776142885.152:56408): avc: denied { create } for pid=19530 comm="syz.4.3633" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1123.814014][ T30] audit: type=1400 audit(1776142885.205:56409): avc: denied { getopt } for pid=19530 comm="syz.4.3633" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1123.894059][ T30] audit: type=1400 audit(1776142885.205:56410): avc: denied { create } for pid=19515 comm="syz.2.3629" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1123.916439][ T30] audit: type=1400 audit(1776142885.205:56411): avc: denied { ioctl } for pid=19515 comm="syz.2.3629" path="socket:[71068]" dev="sockfs" ino=71068 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1123.943362][ T30] audit: type=1400 audit(1776142885.205:56412): avc: denied { setopt } for pid=19515 comm="syz.2.3629" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1123.964287][ T30] audit: type=1400 audit(1776142885.215:56413): avc: denied { write } for pid=19530 comm="syz.4.3633" name="event2" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1124.070752][ T30] audit: type=1400 audit(1776142885.215:56414): avc: denied { open } for pid=19530 comm="syz.4.3633" path="/dev/input/event2" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1124.117821][ T5913] usb 7-1: new full-speed USB device number 23 using dummy_hcd [ 1124.146668][ T30] audit: type=1400 audit(1776142885.226:56416): avc: denied { bind } for pid=19515 comm="syz.2.3629" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1124.219608][ T30] audit: type=1400 audit(1776142885.226:56415): avc: denied { read write } for pid=9137 comm="syz-executor" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1124.286125][T19544] 9p: Bad value for 'rfdno' [ 1124.303221][ T30] audit: type=1400 audit(1776142885.226:56417): avc: denied { open } for pid=9137 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1124.340344][ T5913] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1124.350192][ T5913] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1124.368031][ T5913] usb 7-1: Product: syz [ 1124.381217][ T5913] usb 7-1: Manufacturer: syz [ 1124.394595][ T5913] usb 7-1: SerialNumber: syz [ 1124.440577][ T5913] usb 7-1: config 0 descriptor?? [ 1124.998845][ T29] libceph: connect (1)[c::]:6789 error -101 [ 1125.023181][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 1125.156966][T19551] ceph: No mds server is up or the cluster is laggy [ 1125.206013][ T5913] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1125.388870][T15489] Bluetooth: hci4: command 0x0406 tx timeout [ 1125.411175][T19216] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 1125.680939][T19216] usb 4-1: Using ep0 maxpacket: 8 [ 1125.694461][T19216] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1125.709755][T19541] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1125.729559][T19216] usb 4-1: config 4 interface 0 has no altsetting 0 [ 1125.736846][T19541] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1125.788747][T19216] usb 4-1: string descriptor 0 read error: -22 [ 1125.800950][T19216] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1125.814588][T19216] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 1125.835478][T19216] usb 4-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1125.952625][T19216] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1125.965680][T19216] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1125.972882][T19216] usb 4-1: media controller created [ 1125.989567][T19562] ceph: No mds server is up or the cluster is laggy [ 1125.999764][T19216] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1126.373666][ T5913] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1126.440803][ T5913] usb 7-1: USB disconnect, device number 23 [ 1126.510237][T19557] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1126.544359][T19557] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1126.601527][T19557] netlink: 256 bytes leftover after parsing attributes in process `syz.3.3639'. [ 1126.783912][T19216] zl10353_read_register: readreg error (reg=127, ret==0) [ 1126.855954][T19585] overlayfs: conflicting lowerdir path [ 1126.882162][T19216] usb 4-1: USB disconnect, device number 36 [ 1127.102138][T19590] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3643'. [ 1127.216412][T19592] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (at-a2150c) [ 1127.967235][T19600] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3649'. [ 1128.537778][ T30] kauditd_printk_skb: 232 callbacks suppressed [ 1128.537795][ T30] audit: type=1400 audit(1776142890.203:56650): avc: denied { create } for pid=19608 comm="syz.3.3652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1128.613068][T19611] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3652'. [ 1128.636799][ T30] audit: type=1400 audit(1776142890.255:56651): avc: denied { create } for pid=19608 comm="syz.3.3652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1128.646473][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1128.666040][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1128.780905][T19611] netlink: 'syz.3.3652': attribute type 10 has an invalid length. [ 1128.809188][ T30] audit: type=1400 audit(1776142890.255:56652): avc: denied { write } for pid=19608 comm="syz.3.3652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1128.897127][ T30] audit: type=1400 audit(1776142890.255:56653): avc: denied { read } for pid=19608 comm="syz.3.3652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1128.940565][ T30] audit: type=1400 audit(1776142890.381:56654): avc: denied { create } for pid=19608 comm="syz.3.3652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1128.986635][ T30] audit: type=1400 audit(1776142890.402:56655): avc: denied { write } for pid=19608 comm="syz.3.3652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1128.993500][T19611] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1129.166022][ T30] audit: type=1400 audit(1776142890.402:56656): avc: denied { read } for pid=19608 comm="syz.3.3652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1129.438386][ T30] audit: type=1400 audit(1776142890.413:56657): avc: denied { ioctl } for pid=19608 comm="syz.3.3652" path="socket:[70481]" dev="sockfs" ino=70481 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1129.504927][T19608] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1129.549846][ T30] audit: type=1400 audit(1776142890.959:56658): avc: denied { read write } for pid=9137 comm="syz-executor" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1129.575235][ T30] audit: type=1400 audit(1776142890.959:56659): avc: denied { open } for pid=9137 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1129.747288][ T29] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 1129.902478][ T29] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1129.912796][ T29] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1129.924829][ T29] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1129.957978][ T29] usb 6-1: config 0 descriptor?? [ 1129.978508][ T29] pwc: Askey VC010 type 2 USB webcam detected. [ 1130.552273][ T29] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1130.572424][ T29] pwc: recv_control_msg error -32 req 02 val 2700 [ 1130.600406][ T29] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1130.632484][ T29] pwc: recv_control_msg error -32 req 04 val 1000 [ 1130.641957][ T29] pwc: recv_control_msg error -32 req 04 val 1300 [ 1130.656496][ T29] pwc: recv_control_msg error -32 req 04 val 1400 [ 1130.665452][ T29] pwc: recv_control_msg error -32 req 02 val 2000 [ 1130.675980][ T29] pwc: recv_control_msg error -32 req 02 val 2100 [ 1130.699569][ T29] pwc: recv_control_msg error -32 req 04 val 1500 [ 1130.717779][ T29] pwc: recv_control_msg error -32 req 02 val 2500 [ 1130.926420][ T29] pwc: recv_control_msg error -71 req 02 val 2600 [ 1130.942825][ T29] pwc: recv_control_msg error -71 req 02 val 2900 [ 1130.950266][ T29] pwc: recv_control_msg error -71 req 02 val 2800 [ 1130.960227][ T29] pwc: recv_control_msg error -71 req 04 val 1100 [ 1130.973035][ T29] pwc: recv_control_msg error -71 req 04 val 1200 [ 1130.983590][ T29] pwc: Registered as video103. [ 1130.998277][ T29] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input43 [ 1131.018065][ T29] usb 6-1: USB disconnect, device number 74 [ 1131.148169][T10940] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 1131.424012][T10940] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1131.471362][T10940] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1131.482612][T10940] usb 4-1: Product: syz [ 1131.488501][T10940] usb 4-1: Manufacturer: syz [ 1131.494451][T10940] usb 4-1: SerialNumber: syz [ 1131.508685][T10940] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1131.528157][ T5913] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1131.996158][T19644] ceph: No mds server is up or the cluster is laggy [ 1132.321838][T19664] 9p: Bad value for 'rfdno' [ 1132.377472][T19660] xt_hashlimit: max too large, truncated to 1048576 [ 1132.539705][ T5913] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 1132.546809][ T5913] ath9k_htc: Failed to initialize the device [ 1132.729202][ T5913] usb 4-1: ath9k_htc: USB layer deinitialized [ 1132.844628][T19675] 9p: Bad value for 'wfdno' [ 1133.340948][ T30] kauditd_printk_skb: 227 callbacks suppressed [ 1133.340965][ T30] audit: type=1400 audit(1776142895.237:56887): avc: denied { create } for pid=19683 comm="syz.2.3673" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1133.371692][ T30] audit: type=1400 audit(1776142895.237:56888): avc: denied { write } for pid=19683 comm="syz.2.3673" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1134.343894][ T30] audit: type=1400 audit(1776142895.237:56889): avc: denied { read } for pid=19683 comm="syz.2.3673" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1134.405175][ T30] audit: type=1400 audit(1776142895.237:56890): avc: denied { write } for pid=19683 comm="syz.2.3673" name="dev" dev="proc" ino=4026534660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 1134.428248][ T30] audit: type=1400 audit(1776142895.237:56891): avc: denied { create } for pid=19683 comm="syz.2.3673" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1134.448221][ T30] audit: type=1400 audit(1776142895.266:56892): avc: denied { read } for pid=19683 comm="syz.2.3673" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1135.015746][ T30] audit: type=1400 audit(1776142895.266:56893): avc: denied { open } for pid=19683 comm="syz.2.3673" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1135.157920][ T30] audit: type=1400 audit(1776142896.295:56894): avc: denied { read write } for pid=15557 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1135.185526][ T30] audit: type=1400 audit(1776142896.295:56895): avc: denied { open } for pid=15557 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1135.212641][ T30] audit: type=1400 audit(1776142896.295:56896): avc: denied { ioctl } for pid=15557 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1135.246146][T19216] usb 4-1: USB disconnect, device number 37 [ 1135.419715][T19694] siw: device registration error -23 [ 1135.503921][T19635] block nbd3: shutting down sockets [ 1135.676465][T19696] bond3: down delay (5) is not a multiple of miimon (100), value rounded to 0 ms [ 1135.720460][T19696] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(7) [ 1135.727003][T19696] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1135.744739][T19696] vhci_hcd vhci_hcd.0: Device attached [ 1135.938724][T10940] IPVS: starting estimator thread 0... [ 1135.967253][ T29] usb 45-1: new low-speed USB device number 2 using vhci_hcd [ 1135.980048][ T5865] libceph: connect (1)[c::]:6789 error -101 [ 1135.986410][ T5865] libceph: mon0 (1)[c::]:6789 connect error [ 1135.987374][ T5913] usb 7-1: new low-speed USB device number 24 using dummy_hcd [ 1136.059582][T19712] IPVS: using max 56 ests per chain, 134400 per kthread [ 1136.275909][ T5865] libceph: connect (1)[c::]:6789 error -101 [ 1136.291841][ T5865] libceph: mon0 (1)[c::]:6789 connect error [ 1136.375292][T10940] libceph: connect (1)[c::]:6789 error -101 [ 1136.381674][ T5913] usb 7-1: config index 0 descriptor too short (expected 8192, got 45) [ 1136.400733][T10940] libceph: mon0 (1)[c::]:6789 connect error [ 1136.407052][ T5913] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1136.440712][ T5913] usb 7-1: config 0 has no interfaces? [ 1136.463408][ T5913] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1136.473140][ T5913] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1136.510950][ T5913] usb 7-1: config 0 descriptor?? [ 1136.634456][T19709] ceph: No mds server is up or the cluster is laggy [ 1136.672537][ T5844] libceph: connect (1)[c::]:6789 error -101 [ 1136.678571][ T5844] libceph: mon0 (1)[c::]:6789 connect error [ 1136.719259][T19700] usb 45-1: recv xbuf, 0 [ 1136.720654][ T5913] usb 7-1: string descriptor 0 read error: -71 [ 1136.729884][ T9173] vhci_hcd vhci_hcd.6: stop threads [ 1136.735957][ T9173] vhci_hcd vhci_hcd.6: release socket [ 1136.751738][ T9173] vhci_hcd vhci_hcd.6: disconnect device [ 1136.778354][T19718] ceph: No mds server is up or the cluster is laggy [ 1136.791125][ T5913] usb 7-1: USB disconnect, device number 24 [ 1136.797824][ T29] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 1137.349156][T19737] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 1138.225207][T19216] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 1138.246030][ T30] kauditd_printk_skb: 123 callbacks suppressed [ 1138.246046][ T30] audit: type=1400 audit(1776142900.389:57020): avc: denied { ioctl } for pid=19732 comm="syz.4.3683" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1138.319239][ T30] audit: type=1400 audit(1776142900.462:57021): avc: denied { ioctl } for pid=19732 comm="syz.4.3683" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1138.587399][ T30] audit: type=1400 audit(1776142900.473:57022): avc: denied { read write } for pid=9137 comm="syz-executor" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1138.616066][ T30] audit: type=1400 audit(1776142900.473:57023): avc: denied { open } for pid=9137 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1138.645387][T19216] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 1138.701638][T19216] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1138.768106][T19216] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1138.789873][ T30] audit: type=1400 audit(1776142900.473:57024): avc: denied { ioctl } for pid=9137 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=653 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1138.825775][T19216] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1138.852382][T19216] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1138.863747][T19216] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1138.875099][ T30] audit: type=1400 audit(1776142900.777:57025): avc: denied { ioctl } for pid=19732 comm="syz.4.3683" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1138.914453][T19216] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1139.250333][T19745] siw: device registration error -23 [ 1139.473505][T19216] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1139.488045][T19216] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1139.499645][ T30] audit: type=1400 audit(1776142900.809:57026): avc: denied { ioctl } for pid=19732 comm="syz.4.3683" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1139.526672][T19216] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1139.555646][T19216] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1139.569943][T19216] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1139.602625][ T30] audit: type=1400 audit(1776142900.819:57027): avc: denied { create } for pid=19738 comm="syz.6.3685" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1139.638038][T19216] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1139.648812][ T30] audit: type=1400 audit(1776142900.851:57028): avc: denied { ioctl } for pid=19732 comm="syz.4.3683" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1139.648910][T19216] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1139.682957][ T30] audit: type=1400 audit(1776142900.861:57029): avc: denied { ioctl } for pid=19732 comm="syz.4.3683" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1139.713958][T19216] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1139.737157][T19216] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1139.746557][T19216] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1139.757633][T19216] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1139.769602][T19216] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1139.784327][T19216] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1139.793830][T19216] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1139.805180][T19216] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1139.822003][T19216] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1139.840788][T19216] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1139.853980][T19216] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1139.875706][T19216] usb 5-1: string descriptor 0 read error: -71 [ 1139.882133][T19216] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1139.902029][T19216] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1139.924522][T19216] usb 5-1: config 0 descriptor?? [ 1139.940119][T19216] usb 5-1: can't set config #0, error -71 [ 1139.986065][T19216] usb 5-1: USB disconnect, device number 55 [ 1140.421575][T19766] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 1141.333933][T19765] Cannot find add_set index 65532 as target [ 1142.356300][T19778] 9p: Bad value for 'wfdno' [ 1142.568586][ T29] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 1143.047537][ T30] kauditd_printk_skb: 190 callbacks suppressed [ 1143.047550][ T30] audit: type=1400 audit(1776142905.427:57220): avc: denied { ioctl } for pid=19780 comm="syz.2.3696" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1143.101430][ T30] audit: type=1400 audit(1776142905.458:57221): avc: denied { read write } for pid=9137 comm="syz-executor" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1143.121315][ T29] usb 3-1: Using ep0 maxpacket: 8 [ 1143.132190][ T30] audit: type=1400 audit(1776142905.458:57222): avc: denied { open } for pid=9137 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1143.161420][ T30] audit: type=1400 audit(1776142905.458:57223): avc: denied { ioctl } for pid=9137 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=653 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1143.162486][ T29] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1143.192599][ T30] audit: type=1400 audit(1776142905.553:57224): avc: denied { ioctl } for pid=19780 comm="syz.2.3696" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1143.227416][ T30] audit: type=1400 audit(1776142905.616:57225): avc: denied { ioctl } for pid=19780 comm="syz.2.3696" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1143.227978][ T29] usb 3-1: config 4 interface 0 has no altsetting 0 [ 1143.287128][ T29] usb 3-1: string descriptor 0 read error: -22 [ 1143.289603][ T30] audit: type=1400 audit(1776142905.679:57226): avc: denied { ioctl } for pid=19780 comm="syz.2.3696" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1143.294348][ T29] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1143.328547][ T30] audit: type=1400 audit(1776142905.731:57227): avc: denied { read append } for pid=19786 comm="syz.6.3698" name="dvr0" dev="devtmpfs" ino=928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1143.360985][ T30] audit: type=1400 audit(1776142905.731:57228): avc: denied { ioctl open } for pid=19786 comm="syz.6.3698" path="/dev/dvb/adapter0/dvr0" dev="devtmpfs" ino=928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1143.871638][ T29] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 1143.915119][ T30] audit: type=1400 audit(1776142906.277:57229): avc: denied { read write } for pid=16294 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1144.225247][ T29] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1144.268791][ T29] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1144.326605][ T29] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1144.341949][ T29] usb 3-1: media controller created [ 1144.366759][T19793] tmpfs: Unknown parameter 'gil' [ 1144.385025][ T29] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1144.780407][T19781] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1144.791545][T19781] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1144.819240][T19781] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3696'. [ 1145.018781][T19804] siw: device registration error -23 [ 1145.045452][ T5844] usb 6-1: new full-speed USB device number 75 using dummy_hcd [ 1145.206565][T19792] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1145.290341][ T29] zl10353_read_register: readreg error (reg=127, ret==0) [ 1145.345367][ T5844] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1145.384666][ T5844] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1145.509872][ T5844] usb 6-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1145.525095][ T29] usb 3-1: USB disconnect, device number 42 [ 1145.535269][ T5844] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1145.548052][ T5844] usb 6-1: config 0 descriptor?? [ 1146.171923][T19811] SELinux: Context system_u:object_r:auth_cache_t:s0 is not valid (left unmapped). [ 1146.211064][ T5844] hid_parser_main: 27 callbacks suppressed [ 1146.211084][ T5844] elan 0003:04F3:0755.0016: unknown main item tag 0x0 [ 1146.313127][ T5844] elan 0003:04F3:0755.0016: unknown main item tag 0x0 [ 1146.400779][ T5844] elan 0003:04F3:0755.0016: unknown main item tag 0x0 [ 1146.444426][ T5844] elan 0003:04F3:0755.0016: unknown main item tag 0x0 [ 1146.478961][ T5844] elan 0003:04F3:0755.0016: unknown main item tag 0x0 [ 1146.570493][ T5844] elan 0003:04F3:0755.0016: failed to start in urb: -90 [ 1146.652933][ T5844] elan 0003:04F3:0755.0016: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.5-1/input0 [ 1146.654094][T19822] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3705'. [ 1146.998828][T19820] dlm: Unknown command passed to DLM device : 252 [ 1146.998828][T19820] [ 1147.041638][ T5844] usb 6-1: USB disconnect, device number 75 [ 1147.096866][T19826] fido_id[19826]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:04F3:0755.0016/report_descriptor': No such file or directory [ 1147.129933][T19827] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=19827 comm=syz.2.3706 [ 1147.166872][T19832] random: crng reseeded on system resumption [ 1147.475318][T19837] 9p: Bad value for 'wfdno' [ 1147.589250][T19846] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3709'. [ 1147.817760][ T30] kauditd_printk_skb: 253 callbacks suppressed [ 1147.817776][ T30] audit: type=1400 audit(1776142910.434:57483): avc: denied { write } for pid=19848 comm="syz.3.3710" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1147.845509][T19856] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (at-a2150c) [ 1147.875056][ T30] audit: type=1400 audit(1776142910.455:57484): avc: denied { write } for pid=19848 comm="syz.3.3710" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1147.896688][ T30] audit: type=1400 audit(1776142910.466:57485): avc: denied { write } for pid=19848 comm="syz.3.3710" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1147.930636][ T30] audit: type=1400 audit(1776142910.539:57486): avc: denied { write } for pid=19848 comm="syz.3.3710" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1147.981559][ T30] audit: type=1400 audit(1776142910.550:57487): avc: denied { read } for pid=19848 comm="syz.3.3710" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1148.008583][ T30] audit: type=1400 audit(1776142910.550:57488): avc: denied { open } for pid=19848 comm="syz.3.3710" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1148.033272][ T30] audit: type=1400 audit(1776142910.581:57489): avc: denied { read write } for pid=17938 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1148.061320][ T30] audit: type=1400 audit(1776142910.581:57490): avc: denied { open } for pid=17938 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1148.090518][ T30] audit: type=1400 audit(1776142910.581:57491): avc: denied { ioctl } for pid=17938 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1148.116843][ T30] audit: type=1400 audit(1776142910.602:57492): avc: denied { write } for pid=19859 comm="syz.2.3711" name="demux0" dev="devtmpfs" ino=927 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1148.796821][T19870] siw: device registration error -23 [ 1149.831264][T19899] 9p: Bad value for 'wfdno' [ 1150.024144][ T5844] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 1150.143395][T19905] siw: device registration error -23 [ 1150.170177][ T5844] usb 6-1: Using ep0 maxpacket: 32 [ 1150.193801][ T5844] usb 6-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 1150.203246][ T5844] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1150.218099][ T5844] usb 6-1: Product: syz [ 1150.223549][ T5844] usb 6-1: Manufacturer: syz [ 1150.228749][T19878] netlink: 'syz.6.3717': attribute type 4 has an invalid length. [ 1150.238794][ T5844] usb 6-1: SerialNumber: syz [ 1150.248492][ T5844] usb 6-1: config 0 descriptor?? [ 1150.273968][ T5844] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1150.665546][T10940] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 1150.836748][T10940] usb 7-1: Using ep0 maxpacket: 32 [ 1150.860481][T10940] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1150.903650][T10940] usb 7-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1150.937934][T10940] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1150.965585][T10940] usb 7-1: Product: syz [ 1150.991391][T10940] usb 7-1: Manufacturer: syz [ 1151.010449][T10940] usb 7-1: SerialNumber: syz [ 1151.033974][T10940] usb 7-1: config 0 descriptor?? [ 1151.065221][T10940] quatech2 7-1:0.0: Quatech 2nd gen USB to Serial Driver converter detected [ 1151.378142][T19920] xt_hashlimit: size too large, truncated to 1048576 [ 1151.780840][T19910] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19910 comm=syz.6.3726 [ 1151.900739][T10940] usb 7-1: qt2_attach - failed to power on unit: -71 [ 1151.923948][T10940] quatech2 7-1:0.0: probe with driver quatech2 failed with error -71 [ 1151.959359][T10940] usb 7-1: USB disconnect, device number 25 [ 1152.213630][T19895] [ 1152.215984][T19895] ====================================================== [ 1152.222980][T19895] WARNING: possible circular locking dependency detected [ 1152.230003][T19895] syzkaller #0 Tainted: G L [ 1152.235971][T19895] ------------------------------------------------------ [ 1152.242984][T19895] syz.5.3721/19895 is trying to acquire lock: [ 1152.249027][T19895] ffff88801c6af220 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_unlink_sibling+0xa3/0x320 [ 1152.259541][T19895] [ 1152.259541][T19895] but task is already holding lock: [ 1152.266895][T19895] ffff88801c6af188 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x3d/0xf0 [ 1152.277062][T19895] [ 1152.277062][T19895] which lock already depends on the new lock. [ 1152.277062][T19895] [ 1152.287444][T19895] [ 1152.287444][T19895] the existing dependency chain (in reverse order) is: [ 1152.296446][T19895] [ 1152.296446][T19895] -> #10 (&root->kernfs_rwsem){++++}-{4:4}: [ 1152.304502][T19895] down_write+0x8b/0x1f0 [ 1152.309268][T19895] kernfs_add_one+0x38/0x850 [ 1152.314369][T19895] kernfs_create_dir_ns+0xfc/0x1a0 [ 1152.320020][T19895] internal_create_group+0x36f/0xf40 [ 1152.325838][T19895] cpuhp_invoke_callback+0x3ab/0x9a0 [ 1152.331638][T19895] cpuhp_issue_call+0x1b8/0x970 [ 1152.337005][T19895] __cpuhp_setup_state_cpuslocked+0x431/0x880 [ 1152.343593][T19895] __cpuhp_setup_state+0xf4/0x300 [ 1152.349133][T19895] do_one_initcall+0x11d/0x760 [ 1152.354408][T19895] kernel_init_freeable+0x6e5/0x7a0 [ 1152.360113][T19895] kernel_init+0x1f/0x1e0 [ 1152.364963][T19895] ret_from_fork+0x754/0xd80 [ 1152.370059][T19895] ret_from_fork_asm+0x1a/0x30 [ 1152.375333][T19895] [ 1152.375333][T19895] -> #9 (cpuhp_state_mutex){+.+.}-{4:4}: [ 1152.383136][T19895] [ 1152.383136][T19895] -> #8 (cpu_hotplug_lock){++++}-{0:0}: [ 1152.390845][T19895] cpus_read_lock+0x42/0x170 [ 1152.395950][T19895] static_key_disable+0x12/0x20 [ 1152.401316][T19895] __inet_hash_connect+0x1378/0x1e40 [ 1152.407121][T19895] tcp_v4_connect+0xeb0/0x1b40 [ 1152.412396][T19895] __inet_stream_connect+0x208/0xfa0 [ 1152.418184][T19895] inet_stream_connect+0x57/0xa0 [ 1152.423642][T19895] __sys_connect_file+0x141/0x1a0 [ 1152.429173][T19895] __sys_connect+0x141/0x170 [ 1152.434265][T19895] __x64_sys_connect+0x72/0xb0 [ 1152.439537][T19895] do_syscall_64+0x106/0xf80 [ 1152.444640][T19895] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1152.451043][T19895] [ 1152.451043][T19895] -> #7 (sk_lock-AF_INET){+.+.}-{0:0}: [ 1152.458666][T19895] lock_sock_nested+0x41/0xf0 [ 1152.463850][T19895] inet_shutdown+0x67/0x410 [ 1152.468861][T19895] nbd_mark_nsock_dead+0xae/0x5c0 [ 1152.474395][T19895] sock_shutdown+0x16b/0x200 [ 1152.479488][T19895] nbd_config_put+0x1eb/0x750 [ 1152.484667][T19895] nbd_release+0xb7/0x190 [ 1152.485044][ T5844] gspca_ov534_9: reg_r err -110 [ 1152.489508][T19895] blkdev_put_whole+0xb0/0xf0 [ 1152.489536][T19895] bdev_release+0x47f/0x6d0 [ 1152.504514][T19895] blkdev_release+0x15/0x20 [ 1152.509523][T19895] __fput+0x3ff/0xb40 [ 1152.514006][T19895] task_work_run+0x150/0x240 [ 1152.519094][T19895] do_exit+0x8b8/0x2b60 [ 1152.523755][T19895] do_group_exit+0xd5/0x2a0 [ 1152.528776][T19895] get_signal+0x1ec7/0x21e0 [ 1152.533779][T19895] arch_do_signal_or_restart+0x91/0x7a0 [ 1152.539822][T19895] exit_to_user_mode_loop+0x86/0x4a0 [ 1152.545603][T19895] do_syscall_64+0x67c/0xf80 [ 1152.550687][T19895] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1152.557081][T19895] [ 1152.557081][T19895] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 1152.564713][T19895] __mutex_lock+0x1a2/0x1b90 [ 1152.569810][T19895] nbd_queue_rq+0x428/0x1080 [ 1152.574904][T19895] blk_mq_dispatch_rq_list+0x422/0x1e70 [ 1152.580959][T19895] __blk_mq_sched_dispatch_requests+0xcea/0x1620 [ 1152.587793][T19895] blk_mq_sched_dispatch_requests+0xd7/0x1c0 [ 1152.594279][T19895] blk_mq_run_hw_queue+0x23c/0x670 [ 1152.599894][T19895] blk_mq_dispatch_list+0x51d/0x1360 [ 1152.605686][T19895] blk_mq_flush_plug_list+0x130/0x600 [ 1152.611567][T19895] __blk_flush_plug+0x2c4/0x4b0 [ 1152.616925][T19895] __submit_bio+0x584/0x6c0 [ 1152.621936][T19895] submit_bio_noacct_nocheck+0x562/0xc10 [ 1152.628076][T19895] submit_bio_noacct+0xd17/0x2010 [ 1152.633612][T19895] submit_bh_wbc+0x59c/0x770 [ 1152.638720][T19895] block_read_full_folio+0x264/0x8e0 [ 1152.644515][T19895] filemap_read_folio+0xfc/0x3b0 [ 1152.649960][T19895] do_read_cache_folio+0x2d7/0x6b0 [ 1152.655579][T19895] read_part_sector+0xd1/0x370 [ 1152.660845][T19895] adfspart_check_ICS+0x93/0x910 [ 1152.666289][T19895] bdev_disk_changed+0x7f8/0xc80 [ 1152.671728][T19895] blkdev_get_whole+0x187/0x290 [ 1152.677084][T19895] bdev_open+0x2c7/0xe40 [ 1152.681831][T19895] blkdev_open+0x34e/0x4f0 [ 1152.686755][T19895] do_dentry_open+0x6d8/0x1660 [ 1152.692019][T19895] vfs_open+0x82/0x3f0 [ 1152.696592][T19895] path_openat+0x208c/0x31a0 [ 1152.701686][T19895] do_file_open+0x20e/0x430 [ 1152.706691][T19895] do_sys_openat2+0x10d/0x1e0 [ 1152.711873][T19895] __x64_sys_openat+0x12d/0x210 [ 1152.717236][T19895] do_syscall_64+0x106/0xf80 [ 1152.722329][T19895] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1152.728725][T19895] [ 1152.728725][T19895] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 1152.735916][T19895] __mutex_lock+0x1a2/0x1b90 [ 1152.741026][T19895] nbd_queue_rq+0xba/0x1080 [ 1152.746032][T19895] blk_mq_dispatch_rq_list+0x422/0x1e70 [ 1152.752087][T19895] __blk_mq_sched_dispatch_requests+0xcea/0x1620 [ 1152.758918][T19895] blk_mq_sched_dispatch_requests+0xd7/0x1c0 [ 1152.765404][T19895] blk_mq_run_hw_queue+0x23c/0x670 [ 1152.771021][T19895] blk_mq_dispatch_list+0x51d/0x1360 [ 1152.776811][T19895] blk_mq_flush_plug_list+0x130/0x600 [ 1152.782690][T19895] __blk_flush_plug+0x2c4/0x4b0 [ 1152.788047][T19895] __submit_bio+0x584/0x6c0 [ 1152.793056][T19895] submit_bio_noacct_nocheck+0x562/0xc10 [ 1152.799193][T19895] submit_bio_noacct+0xd17/0x2010 [ 1152.804722][T19895] submit_bh_wbc+0x59c/0x770 [ 1152.809821][T19895] block_read_full_folio+0x264/0x8e0 [ 1152.815617][T19895] filemap_read_folio+0xfc/0x3b0 [ 1152.821063][T19895] do_read_cache_folio+0x2d7/0x6b0 [ 1152.826681][T19895] read_part_sector+0xd1/0x370 [ 1152.831948][T19895] adfspart_check_ICS+0x93/0x910 [ 1152.837394][T19895] bdev_disk_changed+0x7f8/0xc80 [ 1152.842836][T19895] blkdev_get_whole+0x187/0x290 [ 1152.848190][T19895] bdev_open+0x2c7/0xe40 [ 1152.852939][T19895] blkdev_open+0x34e/0x4f0 [ 1152.857864][T19895] do_dentry_open+0x6d8/0x1660 [ 1152.863136][T19895] vfs_open+0x82/0x3f0 [ 1152.867705][T19895] path_openat+0x208c/0x31a0 [ 1152.872798][T19895] do_file_open+0x20e/0x430 [ 1152.877802][T19895] do_sys_openat2+0x10d/0x1e0 [ 1152.882999][T19895] __x64_sys_openat+0x12d/0x210 [ 1152.888356][T19895] do_syscall_64+0x106/0xf80 [ 1152.893452][T19895] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1152.899848][T19895] [ 1152.899848][T19895] -> #4 (set->srcu){.+.+}-{0:0}: [ 1152.906954][T19895] __synchronize_srcu+0xa2/0x300 [ 1152.912394][T19895] blk_mq_quiesce_queue+0x149/0x1c0 [ 1152.918096][T19895] elevator_switch+0x17b/0x7e0 [ 1152.923364][T19895] elevator_change+0x352/0x530 [ 1152.928638][T19895] elevator_set_default+0x29e/0x360 [ 1152.934344][T19895] blk_register_queue+0x412/0x590 [ 1152.939872][T19895] __add_disk+0x73f/0xe40 [ 1152.944702][T19895] add_disk_fwnode+0x118/0x5c0 [ 1152.949967][T19895] nbd_dev_add+0x77a/0xb10 [ 1152.954882][T19895] nbd_init+0x291/0x2b0 [ 1152.959548][T19895] do_one_initcall+0x11d/0x760 [ 1152.964816][T19895] kernel_init_freeable+0x6e5/0x7a0 [ 1152.970514][T19895] kernel_init+0x1f/0x1e0 [ 1152.975353][T19895] ret_from_fork+0x754/0xd80 [ 1152.980446][T19895] ret_from_fork_asm+0x1a/0x30 [ 1152.985722][T19895] [ 1152.985722][T19895] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 1152.993525][T19895] __mutex_lock+0x1a2/0x1b90 [ 1152.998617][T19895] elevator_change+0x1bc/0x530 [ 1153.003898][T19895] elevator_set_none+0x92/0xf0 [ 1153.009168][T19895] blk_mq_update_nr_hw_queues+0x4c1/0x15f0 [ 1153.015483][T19895] nbd_start_device+0x1a6/0xbd0 [ 1153.020836][T19895] nbd_genl_connect+0xff2/0x1a40 [ 1153.026287][T19895] genl_family_rcv_msg_doit+0x214/0x300 [ 1153.032359][T19895] genl_rcv_msg+0x560/0x800 [ 1153.037382][T19895] netlink_rcv_skb+0x159/0x420 [ 1153.042647][T19895] genl_rcv+0x28/0x40 [ 1153.047133][T19895] netlink_unicast+0x5aa/0x870 [ 1153.052411][T19895] netlink_sendmsg+0x8b0/0xda0 [ 1153.057690][T19895] ____sys_sendmsg+0x9e1/0xb70 [ 1153.062965][T19895] ___sys_sendmsg+0x190/0x1e0 [ 1153.068146][T19895] __sys_sendmsg+0x170/0x220 [ 1153.073246][T19895] do_syscall_64+0x106/0xf80 [ 1153.078338][T19895] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1153.084733][T19895] [ 1153.084733][T19895] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 1153.093314][T19895] blk_alloc_queue+0x610/0x790 [ 1153.098584][T19895] blk_mq_alloc_queue+0x174/0x290 [ 1153.104118][T19895] __blk_mq_alloc_disk+0x29/0x120 [ 1153.109653][T19895] nbd_dev_add+0x492/0xb10 [ 1153.114570][T19895] nbd_init+0x291/0x2b0 [ 1153.119234][T19895] do_one_initcall+0x11d/0x760 [ 1153.124503][T19895] kernel_init_freeable+0x6e5/0x7a0 [ 1153.130201][T19895] kernel_init+0x1f/0x1e0 [ 1153.135036][T19895] ret_from_fork+0x754/0xd80 [ 1153.140128][T19895] ret_from_fork_asm+0x1a/0x30 [ 1153.145397][T19895] [ 1153.145397][T19895] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 1153.152586][T19895] fs_reclaim_acquire+0xc4/0x100 [ 1153.158028][T19895] kmem_cache_alloc_noprof+0x4c/0x6e0 [ 1153.163906][T19895] __kernfs_iattrs+0x124/0x3e0 [ 1153.169176][T19895] __kernfs_setattr+0x4d/0x3c0 [ 1153.174438][T19895] kernfs_iop_setattr+0xda/0x130 [ 1153.179875][T19895] notify_change+0xb25/0x1330 [ 1153.185059][T19895] do_truncate+0x1df/0x240 [ 1153.189979][T19895] path_openat+0x2a55/0x31a0 [ 1153.195070][T19895] do_file_open+0x20e/0x430 [ 1153.200076][T19895] do_sys_openat2+0x10d/0x1e0 [ 1153.205259][T19895] __x64_sys_openat+0x12d/0x210 [ 1153.210613][T19895] do_syscall_64+0x106/0xf80 [ 1153.215704][T19895] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1153.222096][T19895] [ 1153.222096][T19895] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 1153.230585][T19895] __lock_acquire+0x14b8/0x2630 [ 1153.235935][T19895] lock_acquire+0x1cf/0x380 [ 1153.240935][T19895] down_write+0x8b/0x1f0 [ 1153.245682][T19895] kernfs_unlink_sibling+0xa3/0x320 [ 1153.251385][T19895] __kernfs_remove+0x308/0x910 [ 1153.256652][T19895] kernfs_remove_by_name_ns+0x68/0xf0 [ 1153.262533][T19895] cgroup_addrm_files+0x790/0xb90 [ 1153.268063][T19895] css_clear_dir+0x117/0x2c0 [ 1153.273162][T19895] kill_css+0x16f/0x490 [ 1153.277817][T19895] cgroup_destroy_locked+0x281/0x710 [ 1153.283605][T19895] cgroup_rmdir+0x7b/0x300 [ 1153.288524][T19895] kernfs_iop_rmdir+0x106/0x170 [ 1153.293891][T19895] vfs_rmdir+0x328/0x8a0 [ 1153.298641][T19895] filename_rmdir+0x31a/0x5c0 [ 1153.303819][T19895] __x64_sys_rmdir+0x46/0x70 [ 1153.308909][T19895] do_syscall_64+0x106/0xf80 [ 1153.313998][T19895] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1153.320390][T19895] [ 1153.320390][T19895] other info that might help us debug this: [ 1153.320390][T19895] [ 1153.330592][T19895] Chain exists of: [ 1153.330592][T19895] &root->kernfs_iattr_rwsem --> cpuhp_state_mutex --> &root->kernfs_rwsem [ 1153.330592][T19895] [ 1153.344993][T19895] Possible unsafe locking scenario: [ 1153.344993][T19895] [ 1153.352417][T19895] CPU0 CPU1 [ 1153.357759][T19895] ---- ---- [ 1153.363101][T19895] lock(&root->kernfs_rwsem); [ 1153.367844][T19895] lock(cpuhp_state_mutex); [ 1153.374929][T19895] lock(&root->kernfs_rwsem); [ 1153.382194][T19895] lock(&root->kernfs_iattr_rwsem); [ 1153.387460][T19895] [ 1153.387460][T19895] *** DEADLOCK *** [ 1153.387460][T19895] [ 1153.395577][T19895] 5 locks held by syz.5.3721/19895: [ 1153.400747][T19895] #0: ffff88807858a420 (sb_writers#10){.+.+}-{0:0}, at: filename_rmdir+0x1ff/0x5c0 [ 1153.410126][T19895] #1: ffff888075220b38 (&type->i_mutex_dir_key#6/1){+.+.}-{4:4}, at: filename_rmdir+0x258/0x5c0 [ 1153.420649][T19895] #2: ffff888067c8a908 (&type->i_mutex_dir_key#6){++++}-{4:4}, at: vfs_rmdir+0xed/0x8a0 [ 1153.430468][T19895] #3: ffffffff8e84a808 (cgroup_mutex){+.+.}-{4:4}, at: cgroup_kn_lock_live+0x116/0x520 [ 1153.440189][T19895] #4: ffff88801c6af188 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x3d/0xf0 [ 1153.450782][T19895] [ 1153.450782][T19895] stack backtrace: [ 1153.456653][T19895] CPU: 0 UID: 0 PID: 19895 Comm: syz.5.3721 Tainted: G L syzkaller #0 PREEMPT(full) [ 1153.456678][T19895] Tainted: [L]=SOFTLOCKUP [ 1153.456685][T19895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1153.456696][T19895] Call Trace: [ 1153.456703][T19895] [ 1153.456709][T19895] dump_stack_lvl+0x100/0x190 [ 1153.456738][T19895] print_circular_bug.cold+0x178/0x1c7 [ 1153.456766][T19895] check_noncircular+0x146/0x160 [ 1153.456797][T19895] __lock_acquire+0x14b8/0x2630 [ 1153.456815][T19895] ? __lock_acquire+0x4a5/0x2630 [ 1153.456832][T19895] lock_acquire+0x1cf/0x380 [ 1153.456848][T19895] ? kernfs_unlink_sibling+0xa3/0x320 [ 1153.456867][T19895] ? __pfx___might_resched+0x10/0x10 [ 1153.456889][T19895] down_write+0x8b/0x1f0 [ 1153.456912][T19895] ? kernfs_unlink_sibling+0xa3/0x320 [ 1153.456927][T19895] ? __pfx_down_write+0x10/0x10 [ 1153.456945][T19895] kernfs_unlink_sibling+0xa3/0x320 [ 1153.456960][T19895] __kernfs_remove+0x308/0x910 [ 1153.456976][T19895] kernfs_remove_by_name_ns+0x68/0xf0 [ 1153.456995][T19895] cgroup_addrm_files+0x790/0xb90 [ 1153.457016][T19895] ? __pfx_cgroup_addrm_files+0x10/0x10 [ 1153.457038][T19895] ? preempt_schedule_thunk+0x16/0x30 [ 1153.457058][T19895] ? preempt_schedule_common+0x42/0xc0 [ 1153.457072][T19895] css_clear_dir+0x117/0x2c0 [ 1153.457094][T19895] kill_css+0x16f/0x490 [ 1153.457106][T19895] cgroup_destroy_locked+0x281/0x710 [ 1153.457127][T19895] cgroup_rmdir+0x7b/0x300 [ 1153.457147][T19895] kernfs_iop_rmdir+0x106/0x170 [ 1153.457163][T19895] ? security_inode_rmdir+0xe2/0x280 [ 1153.457185][T19895] vfs_rmdir+0x328/0x8a0 [ 1153.457206][T19895] filename_rmdir+0x31a/0x5c0 [ 1153.457222][T19895] ? __pfx_filename_rmdir+0x10/0x10 [ 1153.457242][T19895] ? do_getname+0x191/0x390 [ 1153.457260][T19895] __x64_sys_rmdir+0x46/0x70 [ 1153.457276][T19895] do_syscall_64+0x106/0xf80 [ 1153.457291][T19895] ? clear_bhb_loop+0x40/0x90 [ 1153.457306][T19895] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1153.457321][T19895] RIP: 0033:0x7f796cf9c819 [ 1153.457333][T19895] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1153.457348][T19895] RSP: 002b:00007f796deb9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 1153.457362][T19895] RAX: ffffffffffffffda RBX: 00007f796d215fa0 RCX: 00007f796cf9c819 [ 1153.457371][T19895] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000240 [ 1153.457384][T19895] RBP: 00007f796d032c91 R08: 0000000000000000 R09: 0000000000000000 [ 1153.457392][T19895] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1153.457401][T19895] R13: 00007f796d216038 R14: 00007f796d215fa0 R15: 00007ffe63e455c8 [ 1153.457414][T19895] [ 1154.010463][ T30] kauditd_printk_skb: 238 callbacks suppressed [ 1154.010480][ T30] audit: type=1400 audit(1776142916.943:57731): avc: denied { read write } for pid=17938 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1154.132743][ T30] audit: type=1400 audit(1776142916.943:57732): avc: denied { open } for pid=17938 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1154.170719][ T30] audit: type=1400 audit(1776142916.943:57733): avc: denied { ioctl } for pid=17938 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1154.197504][ T30] audit: type=1400 audit(1776142917.017:57734): avc: denied { read write } for pid=9137 comm="syz-executor" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1154.222943][ T30] audit: type=1400 audit(1776142917.017:57735): avc: denied { open } for pid=9137 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1154.247368][ T30] audit: type=1400 audit(1776142917.017:57736): avc: denied { ioctl } for pid=9137 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=653 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1154.272985][ T5844] gspca_ov534_9: Unknown sensor 0000 [ 1154.273033][ T5844] ov534_9 6-1:0.0: probe with driver ov534_9 failed with error -22 [ 1154.274540][ T5844] usb 6-1: USB disconnect, device number 76 [ 1154.280383][ T30] audit: type=1400 audit(1776142917.048:57737): avc: denied { read write } for pid=17809 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1154.318590][ T30] audit: type=1400 audit(1776142917.048:57738): avc: denied { read write open } for pid=17809 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1154.346007][ T30] audit: type=1400 audit(1776142917.048:57739): avc: denied { ioctl } for pid=17809 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1154.444274][ T30] audit: type=1400 audit(1776142917.394:57740): avc: denied { read write } for pid=16294 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1