last executing test programs: 9m16.950339632s ago: executing program 3 (id=944): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/4\x00') read$FUSE(r1, &(0x7f0000000480)={0x2020}, 0x2020) r2 = syz_genetlink_get_family_id$ethtool(0x0, r1) r3 = socket(0x10, 0x803, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$FOU_CMD_ADD(r3, 0x0, 0x4000) getsockname$packet(r3, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c40)=@newlink={0x48, 0x10, 0x401, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r5, 0xa20, 0x1114}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}}}]}, 0x48}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40001}, 0x20004090) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x4) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000340)={0x0, @dev, @multicast2}, &(0x7f0000000380)=0xc) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000024c0)={0x0, @private, @multicast2}, &(0x7f0000002500)=0xc) getsockname$packet(r1, &(0x7f0000002540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000002580)=0x14) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f00000027c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002780)={&(0x7f0000002680)={0xe4, r2, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) r10 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x60000) ioctl$SG_GET_SG_TABLESIZE(r10, 0x227f, &(0x7f0000000040)) 9m16.638370187s ago: executing program 3 (id=947): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f0000000880)={0x0, 0x0, @pic={0x3, 0x3, 0x7, 0x7, 0x2, 0x3, 0xa, 0x1, 0x9, 0xbf, 0x4, 0x7f, 0xe, 0xb, 0x5, 0xe8}}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$inet(r3, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, 0x0}}], 0x1, 0x8004) r4 = shmget$private(0x0, 0x800000, 0x880, &(0x7f0000173000/0x800000)=nil) shmctl$IPC_RMID(r4, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), r5) sendmsg$NLBL_MGMT_C_ADDDEF(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x1c, r6, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24064095}, 0x400c054) shmctl$SHM_LOCK(r4, 0xb) munmap(&(0x7f0000ff3000/0xb000)=nil, 0xb000) personality(0x87bf5ac905ea0f7f) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff3000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) brk(0x200000ffc000) connect$llc(r3, &(0x7f00000000c0)={0x1a, 0x3, 0x41, 0x6, 0xa, 0x3, @random="3050e9ae9a3c"}, 0x10) listen(r3, 0x3e9) r7 = userfaultfd(0x80801) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) write$sndseq(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000b40)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="38000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r11, @ANYBLOB="100012800800010076746900040002806772cdf10998874e49e04b6b847ac53b7e30a0"], 0x38}, 0x1, 0x0, 0x0, 0x45844}, 0x0) 9m15.483885448s ago: executing program 3 (id=950): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x14, 0x2, 0x7, 0x5, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x20000000) 9m14.470537952s ago: executing program 3 (id=952): r0 = syz_open_dev$video(&(0x7f0000000180), 0x800000020000007, 0x22000) socketpair$unix(0x1, 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() dup3(r0, r0, 0x80000) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="6000000002060500000000000000000000000000140007800800064020000000080013400000000005000100060000000900020073797a32000000000500040000000000050005000a00000011000300686173683a6970"], 0x60}}, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f00000000c0)={0xf000000, 0x8d, 0xd, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x990a75, 0xffffffff, '\x00', @value64=0x843a}}) 9m13.478421372s ago: executing program 3 (id=954): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000004, 0x4000010, r0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) ftruncate(r0, 0x800) r1 = openat$kvm(0x0, 0x0, 0xc40001, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f00000002c0)={0x1, 0x0, [{0x40000073, 0x0, 0x81}]}) r6 = eventfd2(0x0, 0x801) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r7, 0x89e3, &(0x7f0000000280)={0x42, 0x1, 0x400004, 0x0, 0x7}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x156) r8 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) r9 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r9, 0xc018937c, &(0x7f0000000100)={{0x1, 0x1, 0x18, r8, {0x2}}, './file1\x00'}) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000100)={0x4, 0x70000, 0x8228c3286eb72873, r6}) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000180)={0x15016910, 0x0, 0x4, r6}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) 9m12.409628546s ago: executing program 3 (id=961): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/16, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/25], 0x50) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) write$rfkill(0xffffffffffffffff, &(0x7f0000000000)={0x9, 0x1, 0x2, 0x0, 0x1}, 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x20000000) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) syz_genetlink_get_family_id$ipvs(&(0x7f00000018c0), 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r3, &(0x7f0000001a40)=""/102392, 0x18ff8) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc0f8565c, &(0x7f0000000540)={0xfffffffd, 0x9, 0x4, {0x3, @vbi={0x271, 0x4, 0xfffffff8, 0x4f424752, [0x4, 0xe], [0x3], 0x1}}, 0x4}) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000400)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16, @ANYBLOB="01002bbd700000000000020000", @ANYRES32=r6, @ANYBLOB="0c00990009000000440000000800020001000000894d8caea7af86ffb47e144d4d607047a06322f817673a69e635874c3c666b0a5a9a7dc776dcc9608efbb56b1e32e744c0c34335b20f713b1019c940bc1f4cd5986ab0946d527457718f30f63b72fd1ce4641d2bec2ea0cba02a12671658f1473b67cb330c7990e5a0200cf7d316df8376fcf25a2eac98e6b7a0297102f36742c0d4400d0b731e0eecf850cad70f1bc1e5ad8ea442759b9bfebe482350fb9d1fdf97cef0"], 0x30}, 0x1, 0x0, 0x0, 0x2400c891}, 0x0) sendmsg$NL80211_CMD_SET_PMK(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x4000001}, 0x4080) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0xfff0}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x3801}, {0x2c}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0xffc0}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) 8m42.873799828s ago: executing program 32 (id=961): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/16, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/25], 0x50) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) write$rfkill(0xffffffffffffffff, &(0x7f0000000000)={0x9, 0x1, 0x2, 0x0, 0x1}, 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x20000000) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) syz_genetlink_get_family_id$ipvs(&(0x7f00000018c0), 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r3, &(0x7f0000001a40)=""/102392, 0x18ff8) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc0f8565c, &(0x7f0000000540)={0xfffffffd, 0x9, 0x4, {0x3, @vbi={0x271, 0x4, 0xfffffff8, 0x4f424752, [0x4, 0xe], [0x3], 0x1}}, 0x4}) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000400)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16, @ANYBLOB="01002bbd700000000000020000", @ANYRES32=r6, @ANYBLOB="0c00990009000000440000000800020001000000894d8caea7af86ffb47e144d4d607047a06322f817673a69e635874c3c666b0a5a9a7dc776dcc9608efbb56b1e32e744c0c34335b20f713b1019c940bc1f4cd5986ab0946d527457718f30f63b72fd1ce4641d2bec2ea0cba02a12671658f1473b67cb330c7990e5a0200cf7d316df8376fcf25a2eac98e6b7a0297102f36742c0d4400d0b731e0eecf850cad70f1bc1e5ad8ea442759b9bfebe482350fb9d1fdf97cef0"], 0x30}, 0x1, 0x0, 0x0, 0x2400c891}, 0x0) sendmsg$NL80211_CMD_SET_PMK(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x4000001}, 0x4080) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0xfff0}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x3801}, {0x2c}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0xffc0}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) 1m38.905936521s ago: executing program 4 (id=2502): r0 = gettid() mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000004, 0x6031, 0xffffffffffffffff, 0x5d686000) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x2000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x1, &(0x7f0000000200)=@raw=[@jmp={0x4, 0x0, 0xd, 0x1, 0x6, 0x100, 0x10}], 0x0, 0x5, 0x9c, &(0x7f0000000000)=""/156, 0x0, 0x6}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b0000000800000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x2000300, 0xe, 0x0, &(0x7f0000000600)="63e4ed8e46080000003389f7f986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) ioctl$TCSETS(r1, 0x5402, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc), 0x80, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x17) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r5, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) fchmod(r5, 0x50) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) 1m37.94305281s ago: executing program 4 (id=2504): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) timer_create(0x0, 0x0, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000080)) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000040)=0xdfe5) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x1f00000000000000, 0x0}}, 0xfc36) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x80400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[], 0x2c}}, 0x20008000) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f0000000180)={'pcl812\x00', [0x100, 0xf, 0xd0, 0x2, 0x5, 0x100, 0x7, 0x6, 0x8, 0xb, 0x0, 0x7, 0x1, 0x401, 0x10001, 0x1, 0x0, 0x5, 0xfe9, 0x401, 0x7, 0x2, 0x7, 0x29, 0x48, 0x9, 0x7, 0x6a77, 0x5, 0x7, 0x8]}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xb5a8}, 0x1c) 1m37.840036747s ago: executing program 4 (id=2506): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd2d, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@local, 0x40, 0x8, 0x0, 0xe8, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x400, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7f, 0x1}, {0x0, 0xa00, 0x9, 0x800000000000002}, 0xffffffff, 0x0, 0x1, 0x1, 0x6}}, 0xb8}, 0x1, 0x0, 0x0, 0x8000}, 0x4048880) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0xc00, @remote, 0x9}], 0x1c) 1m36.647656519s ago: executing program 4 (id=2512): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x2642, 0x0) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000140)="93d90400000300", 0x7}, {&(0x7f0000000100)='\x00', 0x1}], 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x9801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x38}}, 0x0) sendto$packet(r1, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c642b4a1b7880610cc9", 0x26, 0x0, &(0x7f0000000040)={0xc9, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000340)={'syztnl2\x00', &(0x7f0000000240)={'ip_vti0\x00', r4, 0x40, 0x8000, 0x2, 0x4, {{0xc, 0x4, 0x3, 0x8, 0x30, 0x64, 0x0, 0x7, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}, {[@ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x17, 0x16, [@rand_addr=0x64010102, @multicast2, @private=0xa010102, @private=0xa010102, @local]}]}}}}}) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000380)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1a, r5}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x20, 0xfffffffb, 0x2, 0x0, 0x10001, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0xfffffffb}, 0x50) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff30}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) io_uring_setup(0x1195, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000840)={r8, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xb5, 0x7, 0x4}, 0x9c) 1m35.488180019s ago: executing program 4 (id=2518): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000480)=[{0x6, 0xfc, 0x1, 0x7fff8000}]}) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_emit_ethernet(0x6f, &(0x7f0000000280)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x61, 0x0, 0x0, 0xa2, 0x6, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0xb}}, {{0x4e26, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}, {"ac949ae5499cd2ac3b7b061cadcdd2f8080fe93eaf45c9ea124c703daeed8a50a9386b6eff215325656a4b2f91c8dad8e75c3d134b7105bddf"}}}}}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000100)={0x2710, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000340)={0x3, 0x0, [{0xb65}, {0x3f6, 0x0, 0x6}, {0x4b564d01, 0x0, 0x1000000000000200}]}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x6, 0xf3b8, 0x0, 0x9, 0x400, 0x4002004c4, 0x1000, 0x0, 0x97, 0x10, 0x0, 0x3, 0x6], 0xeeee8000, 0x140640}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events.local\x00', 0x275a, 0x0) fcntl$lock(r4, 0x7, &(0x7f00000006c0)={0x0, 0x0, 0xac1d}) prlimit64(0x0, 0x2, &(0x7f0000000140)={0xc, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0x7, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r6 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) 1m34.734594249s ago: executing program 4 (id=2524): mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x1000001, 0x2172, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000003000/0x4000)=nil, 0x4000) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xdf}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) write$binfmt_misc(r0, 0x0, 0x0) socket(0x1d, 0x2, 0x6) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x25, &(0x7f0000000000)={0x1}) r3 = socket(0x2, 0x80805, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, 0x0, &(0x7f0000000300)) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000100)={0x0, 0xe3}, &(0x7f0000000140)=0x8) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x60, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x9, 0xffffffff}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x2}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x60}}, 0x8000) 1m18.626910535s ago: executing program 33 (id=2524): mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x1000001, 0x2172, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000003000/0x4000)=nil, 0x4000) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xdf}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) write$binfmt_misc(r0, 0x0, 0x0) socket(0x1d, 0x2, 0x6) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x25, &(0x7f0000000000)={0x1}) r3 = socket(0x2, 0x80805, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, 0x0, &(0x7f0000000300)) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000100)={0x0, 0xe3}, &(0x7f0000000140)=0x8) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x60, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x9, 0xffffffff}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x2}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x60}}, 0x8000) 12.249481918s ago: executing program 0 (id=2823): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x900, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$netlink(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x64, r7, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r8}, {0x48, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000401}, 0x4c004) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x7, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10104}, [@IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x3c}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000000440)={0x0, 0xa1ff, &(0x7f0000000400)={&(0x7f0000000280)={0x34, r4, 0x1, 0x0, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'team0\x00'}}}}}, 0x34}}, 0x0) 8.874406297s ago: executing program 0 (id=2831): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x21041, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x19) writev(r0, &(0x7f00000017c0)=[{&(0x7f0000001800)="bc82", 0x2}], 0x1) 8.81178775s ago: executing program 0 (id=2832): ioctl$USBDEVFS_ALLOC_STREAMS(0xffffffffffffffff, 0x8008551c, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r3, &(0x7f0000000180), 0x3ef, 0x0) syz_open_procfs(0x0, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) ioctl$FBIOBLANK(r4, 0x4611, 0x2) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0x14, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000fcffffff1801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000730000001811", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = syz_open_dev$cec(0x0, 0x0, 0x0) ioctl$CEC_TRANSMIT(r7, 0xc0386105, 0x0) r8 = socket$inet(0x2, 0x2, 0x1) setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000000040)=0xffffffffffffff40, 0x4) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f00000001c0)=[{0x6, 0x1}]}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r6, 0x0, 0x7, 0xf, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000780)=""/15, 0x60fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200003}, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) 8.645917883s ago: executing program 2 (id=2835): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x2042, 0x19d) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r4 = fanotify_init(0xf00, 0x1000) fanotify_mark(r4, 0x105, 0x10000839, r3, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) readv(r4, &(0x7f0000000c40)=[{&(0x7f0000000500)=""/169, 0xffffffa0}], 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x80002, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f0000000000)={0x0, 'team0\x00', {0x4}, 0x4}) 7.834816799s ago: executing program 0 (id=2837): ioctl$USBDEVFS_ALLOC_STREAMS(0xffffffffffffffff, 0x8008551c, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a0000000000000400000000000000000000002100000000000100000000000002000100010000000000010200fd000005000500000000000a"], 0x70}}, 0x0) sendmmsg(r1, &(0x7f0000000180), 0x3ef, 0x0) syz_open_procfs(0x0, 0x0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) ioctl$FBIOBLANK(r2, 0x4611, 0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0x14, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000fcffffff1801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000018", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = syz_open_dev$cec(&(0x7f00000003c0), 0x0, 0x0) ioctl$CEC_TRANSMIT(r5, 0xc0386105, 0x0) r6 = socket$inet(0x2, 0x2, 0x1) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000040)=0xffffffffffffff40, 0x4) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f00000001c0)=[{0x6, 0x1}]}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r4, 0x0, 0x7, 0xf, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000780)=""/15, 0x60fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200003}, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) 7.634025302s ago: executing program 0 (id=2838): socket$nl_route(0x10, 0x3, 0x0) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000740)=@ethtool_eee={0x44, 0x0, 0x33, 0x6, 0x2, 0x10000, 0x800, 0x6, [0x2, 0xb943]}}) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001400)=@filter={'filter\x00', 0x4, 0x4, 0x380, 0xffffffff, 0x0, 0x0, 0x0, 0xfeffffff, 0xffffffff, 0x2b0, 0x2b0, 0x2b0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x0, 0x35, {0x3}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x1, 0x14865e40, {0x6}}}}, {{@ipv6={@mcast1, @loopback, [0xffffffff, 0xff000000, 0xffffff00, 0xffffff00], [0xff000000, 0x0, 0x0, 0xffffffff], 'ip6tnl0\x00', 'gretap0\x00', {}, {}, 0x2c, 0x3a, 0x5, 0x5}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e0) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000002c0)={'veth0_to_hsr\x00', &(0x7f0000000900)=@ethtool_wolinfo={0x5, 0x9, 0x9, "188f1fcc6959"}}) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[], 0x88}}, 0x20000000) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r5, &(0x7f0000000400)=""/4096, 0x1000) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 7.632246232s ago: executing program 2 (id=2839): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) membarrier(0x10, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000300)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000440)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 7.529828318s ago: executing program 1 (id=2840): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) bind$inet(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1c, 0x20000000000000cc, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xd, 0x10}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x10001}]}}]}, 0x38}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) socket$inet(0x2, 0x2, 0x1) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0xd, 0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0x1}]}}]}, 0x38}}, 0x0) 7.397898009s ago: executing program 1 (id=2841): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f000000e280), 0x58a, 0x42, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r4, &(0x7f0000000100)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18) connect$can_j1939(r4, &(0x7f0000000080)={0x1d, 0x0, 0x0, {0x0, 0xf0}, 0x1}, 0x18) sendmsg$can_j1939(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0x0) pselect6(0x0, 0x0, &(0x7f00000000c0)={0x9, 0xe, 0x8000, 0x0, 0x4, 0x3, 0xc, 0x1f}, 0x0, &(0x7f0000000240)={0x77359400}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 6.05520236s ago: executing program 5 (id=2842): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) accept4$bt_l2cap(r0, 0x0, 0x0, 0x80800) 6.038213922s ago: executing program 1 (id=2843): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000240)=[@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x32}}]}, &(0x7f00000001c0)=0x10) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000100)={r1, 0xffffff37}, &(0x7f0000000300)=0x8) 6.011947743s ago: executing program 2 (id=2844): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 5.902317553s ago: executing program 5 (id=2845): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40010080, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(0xffffffffffffffff) fanotify_init(0x1, 0x101000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) fcntl$setownex(r1, 0xf, &(0x7f0000000000)={0x1}) add_key$user(0x0, 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) keyctl$read(0xb, 0x0, &(0x7f0000000240)=""/112, 0x349b7f55) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000080)=0xa) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 5.901833186s ago: executing program 2 (id=2846): get_mempolicy(0x0, &(0x7f0000000140), 0x9, &(0x7f0000129000/0x8000)=nil, 0x2) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000ffffff00000000000000008510000002000000850000000f00000095"], 0x0, 0xfffffdfe, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$xdp(0x2c, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, 0x0, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)={0x114, 0x14, 0x1, 0x70bd2d, 0x25dfdbfc, "", [@nested={0x102, 0x4e, 0x0, 0x1, [@typed={0xc, 0x2, 0x0, 0x0, @u64=0x8}, @typed={0x14, 0x2001, 0x0, 0x0, @ipv6=@empty}, @generic="2a725624d55e18f54ca5798d3fe7955ef9868c011de6a6d4494d7aba163930e7a6d17e0b2db61f06be12a8fe12bf5df24b2807a60c94c81f539deb8a1f987eb7669e1395c2ce8f7c2854902221ce978006451bd593aa73c50e0dfd544fd4fa321cbe1ddd38f2dfb0cec37543dac9e03b4dc38a9d937e23023ab86a8ce5f7a6d9772d2c9b91825cd6f77be8203cbe17d83dbb0590b1ef553211edef00ead1ebbe1b58e5b323435a913a2e5ce557c4ec021c723d2022c694102308a8fb6114ab4d007089b6a2816f689a565d4e70637725b2ff732144f7ad7c1b9d", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x40004}, 0x0) fsetxattr$trusted_overlay_upper(r3, &(0x7f0000000080), &(0x7f0000000500)=ANY=[@ANYBLOB="00fb7d014e53e592d7754702d14cd9bfd350f6289422c0a15faaff9d026e9261321c82a17b88235b1232b5b16b05dad0dbac2c8dd3b4b695e7c0fd433580b114a9ba8f07fa77db4dc241f91cdea8c19ad04f6824e934b95709b644148051e7dcf1b66be5fac11de53efaed9a938a60b796379cbab0c9ae8feba010c8bd95f428f39b1f4a0ea7759a352660febf4e5386059236b4241d070c0bb7e2cd1c0d9bf15cab2efbeafd1223447bdfe27a2e"], 0x7d, 0x1) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@private1, 0x0, 0x2, 0x0, 0x0, 0x2, 0x20, 0x0, 0x0, 0x0, 0xee01}, {0x5, 0x0, 0x1, 0x4, 0x0, 0xfffffffffffffff8, 0x0, 0x2}, {0x0, 0xaf, 0x400000003, 0xfffffffffffffffc}, 0x1, 0x0, 0x1, 0x0, 0x3}, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4cf, 0x32}, 0x0, @in=@broadcast, 0x0, 0x0, 0x1, 0xb7, 0x3, 0xfffffffe}}, 0xe4) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) timerfd_create(0x0, 0x800) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, 0x0) 5.759128579s ago: executing program 0 (id=2847): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x25, 0x0, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = io_uring_setup(0xaae, &(0x7f0000000380)={0x0, 0xbfffeff1, 0x800, 0x7, 0x2}) setrlimit(0x40000000000008, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x2300000000000000, &(0x7f0000002200)=[{&(0x7f0000002700)=""/4095, 0xfff}], 0x1f) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) syz_io_uring_modify_offsets$generic(0x0, 0x0, 0x54, 0x10000) signalfd4(0xffffffffffffffff, &(0x7f00000002c0)={[0xd]}, 0x8, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo/3\x00') r2 = syz_open_dev$sndctrl(&(0x7f0000000200), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r2, 0xc1205531, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000001c0)={0x2020}, 0x2020) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x8, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x646d00, 0x0) 5.733807131s ago: executing program 5 (id=2848): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240), &(0x7f0000000040)}) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x24, 0x4, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x11}, 0x28000080) 4.620746666s ago: executing program 2 (id=2850): getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000dc0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a", 0x27}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) readv(r5, &(0x7f0000000900)=[{&(0x7f0000000600)=""/137, 0x89}, {&(0x7f00000006c0)=""/225, 0xe1}], 0x2) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0) 4.465397008s ago: executing program 5 (id=2851): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[], 0x50}}, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904000001a7a00f00090582020002"], 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, 0x0, 0x0) 4.406234846s ago: executing program 1 (id=2852): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x123e00, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x40901, 0x8) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[], 0x118) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) ioctl$TCSETSW2(r0, 0x5408, &(0x7f0000000540)={0xff, 0x37, 0xffffffee, 0x7fffffef, 0x0, "b850e43615b1b70500000000000400", 0x81002, 0x2}) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x8000) 3.638299542s ago: executing program 6 (id=2854): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000300)=[{0x6, 0x9, 0xfb, 0x7fff0000}]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x20000000}) close_range(r0, 0xffffffffffffffff, 0x0) 3.550380668s ago: executing program 2 (id=2855): r0 = syz_usb_connect$printer(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) write$char_usb(r1, &(0x7f0000000100)="f2", 0x1) 3.531786149s ago: executing program 6 (id=2856): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000040)=@x86={0x81, 0x7, 0x63, 0x0, 0x7, 0xa, 0x0, 0x3, 0x7, 0x92, 0x3, 0x6, 0x0, 0x7f, 0x5ab, 0x2, 0xc9, 0x9, 0x1, '\x00', 0x8, 0x800}) r3 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r3, &(0x7f0000000000), 0x10) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f00000000c0), 0xf00) close(r3) 3.498262634s ago: executing program 1 (id=2857): prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) unshare(0x6a040000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x3}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x4c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001880)=ANY=[@ANYBLOB="60000000090603000000000000000000050000000900020073797a3100000000050001000700000038000780060004404e21000005000700840000000c000180080001400a0101010c00028008000140e00000020c00148008000140"], 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 2.135389499s ago: executing program 6 (id=2858): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x41, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000100)={0x40001, 0x0, {[0x1c, 0xa, 0x3, 0x2, 0x87c8, 0x4, 0x27b6, 0x7]}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.222809629s ago: executing program 5 (id=2859): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x49f0, 0x20, 0x8001, 0x48024e}, 0x0, 0x0, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x4) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x60, 0x1403, 0xc23, 0x70bd2a, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'virt_wifi0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vxcan1\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x400c080}, 0x40480c0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000380)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mknod$loop(0x0, 0xfff, 0x0) utimes(&(0x7f0000000100)='./file0\x00', 0x0) writev(0xffffffffffffffff, &(0x7f0000000680)=[{&(0x7f0000000000)="abece2d4d226b486b0a1f9a926c03ad36cb13c094188a732bb73fce5f8dc9af0", 0x20}, {&(0x7f0000000240)="919f8d5bc6d82af9278cf76cbb8e73729643f3fdebd0c73e9618882cad8e0244e349719c0e4c3b5e6d76d3ea4a9c6e7008ed89ea6ff5007161c80b9ee8ddaa905c76ef93dc93e77c1a01a6418ffdd2f58ff0a151571c5b13982d1929ca1ff45ad66681c0698116c352112395456180e7450b32e54810ba1ac949cdb928e2b63233cfd30078848ed30958e2d2e396a1673858", 0x92}, {&(0x7f0000000300)}, {&(0x7f0000000480)="c7e15b2bc70647e69c36be04fe2df8d561734dd3f9f720bb4a9da02c15f40aab2709a36c3773cf2721272ee04d8d84cf54b4fbf4637ad607f341c42203ab30b83664bdbbf0b931ccdcbb41127ac4acc875f312c853bce4130f701bffe4bef222315eea99ebeeceb38df5361cd73fc615e14f6179710cb137be7941478d2c801e61f33e7c89b73af695ecda2bf4c4c4b40151b518a51397f747b14dec18c5bf26b8aba4", 0xa3}, {&(0x7f0000000140)}, {&(0x7f0000000540)="2f163a2f68addf39d73cc629e0fb9a7bb592b2a853673124f4fb9293dc1ab64f2cb73364faece42f0d368c62618774edf6d55f26a139be5a426a93e82bb49a2790db66b2fa74661dfeec722721", 0x4d}, {&(0x7f00000005c0)="23efe404e968624b13539b7fa5bc86bb70339cd3918296718a19920f02ac6e6f4ed102e05106b2eec934746f2ed8fe422705449b3ff263712daa75a76a3e513caf72f36a1e9f781d923fc07b6694f09b4bf4df1a96bf9ca48d619b76c6903ecf549a3ebe7e16dd935960577479bba38b1c1e29bac866c7a3693bb55ca92441a457ebf61fbf6c1c483dd2ceed", 0x8c}], 0x7) r4 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f0000000040)={0xfffffffc, 0x1003, 0x4, {0x6, @pix_mp={0x12, 0x5be7, 0xb5315258, 0x6, 0xb, [{0x80000004, 0x7}, {0x7ff, 0x5}, {0x10000001, 0x9}, {0x63d, 0x7fd}, {0x1, 0xb}, {0x7, 0x489aa92e}, {0x800005}, {0xff, 0x7}], 0x1, 0xc, 0x2, 0x0, 0x3}}, 0xfffffffd}) syz_emit_vhci(&(0x7f00000039c0)=ANY=[@ANYBLOB="040f04ff000104"], 0x7) 414.076473ms ago: executing program 6 (id=2860): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 306.24652ms ago: executing program 6 (id=2861): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1000485, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000001dc0)={0x50, 0x0, r1, {0x7, 0x2b, 0x0, 0x44448000, 0x6}}, 0x50) chown(&(0x7f0000000000)='./file0/file1\x00', r2, r3) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x90, 0x0, 0x7ff, {0x2, 0x2, 0xdc, 0x5, 0x7, 0x6, {0x6, 0x638, 0x3, 0x8, 0x3, 0x79, 0xfffffffe, 0x7, 0x1, 0x8000, 0x4, r2, r3, 0x7, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 288.551325ms ago: executing program 1 (id=2862): r0 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$inet_mreq(r0, 0x0, 0x24, 0x0, &(0x7f0000000140)) 124.212743ms ago: executing program 6 (id=2863): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r0 = socket(0x2b, 0x1, 0x1) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x5) r1 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x4e22, @remote}, 0x10) 0s ago: executing program 5 (id=2864): setresgid(0x0, 0xee01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x1cb) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000010c0), 0x80c000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001180)='mountinfo\x00') read$char_usb(r0, &(0x7f0000000040)=""/4109, 0x100d) kernel console output (not intermixed with test programs): 0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14253 comm="syz.1.2233" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f246659ce59 code=0x7fc00000 [ 749.220454][ T30] audit: type=1326 audit(1779636580.537:1873): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14253 comm="syz.1.2233" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f246659ce59 code=0x7fc00000 [ 749.261724][ T5817] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 749.272858][ T5817] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 749.279983][ T30] audit: type=1326 audit(1779636580.537:1874): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14253 comm="syz.1.2233" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f246659ce59 code=0x7fc00000 [ 749.315610][ T5817] usb 6-1: config 1 has no interface number 0 [ 749.342954][ T30] audit: type=1326 audit(1779636580.537:1875): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14253 comm="syz.1.2233" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f246659ce59 code=0x7fc00000 [ 749.349901][ T5817] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 749.531349][ T5817] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 749.542838][ T5817] usb 6-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 749.563964][ T5817] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 749.575535][ T5817] usb 6-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 749.595796][ T5817] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 749.605744][ T5817] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 749.922760][ T5817] usb 6-1: Product: syz [ 749.931588][ T5817] usb 6-1: Manufacturer: syz [ 749.942152][ T5817] usb 6-1: SerialNumber: syz [ 749.950618][T14273] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 750.172608][ T5773] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 750.185388][T14273] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 750.385767][ T5773] usb 3-1: Using ep0 maxpacket: 32 [ 750.410598][T14273] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 750.411281][ T5773] usb 3-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 750.441915][ T5773] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 750.451102][ T5773] usb 3-1: Product: syz [ 750.455710][ T5773] usb 3-1: Manufacturer: syz [ 750.464494][ T5773] usb 3-1: SerialNumber: syz [ 750.478811][ T5773] usb 3-1: config 0 descriptor?? [ 750.582467][ T30] audit: type=1400 audit(1779636582.034:1876): avc: denied { create } for pid=14292 comm="syz.0.2242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 750.876570][T14273] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 750.898264][ T5817] cdc_ncm 6-1:1.1: bind() failure [ 750.921230][ T5773] airspy 3-1:0.0: Board ID: 00 [ 750.937816][ T5773] airspy 3-1:0.0: Firmware version: [ 750.995014][ T5773] airspy 3-1:0.0: usb_control_msg() failed -71 request 11 [ 751.032882][ T5773] airspy 3-1:0.0: Registered as swradio24 [ 751.054926][ T5773] airspy 3-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 751.118432][ T5773] usb 3-1: USB disconnect, device number 49 [ 751.387035][ T5815] usb 6-1: USB disconnect, device number 24 [ 752.190831][ T30] audit: type=1400 audit(1779636583.541:1877): avc: denied { mount } for pid=14310 comm="syz.1.2247" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 752.751448][T14327] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 754.612547][T14339] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 754.621555][T14339] UDF-fs: Scanning with blocksize 512 failed [ 754.640707][T14339] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 754.651659][T14339] UDF-fs: Scanning with blocksize 1024 failed [ 754.662052][T14339] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 754.670441][T14339] UDF-fs: Scanning with blocksize 2048 failed [ 754.678125][T14339] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 754.686095][T14339] UDF-fs: Scanning with blocksize 4096 failed [ 755.851840][T14351] bridge_slave_0: left allmulticast mode [ 756.006048][T14359] SELinux: security_context_str_to_sid (5] S9q#) failed with errno=-22 [ 756.023061][T14359] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2259'. [ 756.032742][T14359] openvswitch: netlink: Missing key (keys=40, expected=80) [ 756.102478][T14359] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=39 sclass=netlink_route_socket pid=14359 comm=syz.0.2259 [ 757.255201][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 757.255217][ T30] audit: type=1400 audit(1779636588.267:1883): avc: denied { name_connect } for pid=14383 comm="syz.4.2258" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 757.490609][ T5815] usb 2-1: new full-speed USB device number 53 using dummy_hcd [ 757.497717][ T30] audit: type=1400 audit(1779636588.454:1884): avc: denied { read } for pid=14380 comm="syz.2.2269" name="sg0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 757.530674][ T30] audit: type=1400 audit(1779636588.454:1885): avc: denied { open } for pid=14380 comm="syz.2.2269" path="/dev/sg0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 757.557028][ T5773] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 757.654388][ T5815] usb 2-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 757.668332][ T5815] usb 2-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 757.686043][ T5815] usb 2-1: Product: syz [ 757.695035][ T5815] usb 2-1: Manufacturer: syz [ 757.704438][ T5815] usb 2-1: SerialNumber: syz [ 757.732440][ T5815] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 757.875309][ T5773] usb 1-1: Using ep0 maxpacket: 32 [ 757.884136][ T5773] usb 1-1: unable to get BOS descriptor or descriptor too short [ 757.894094][ T5773] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 757.904865][ T5773] usb 1-1: config 0 has no interfaces? [ 757.913706][ T5773] usb 1-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 757.923597][ T5773] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 757.931962][ T5773] usb 1-1: Product: syz [ 757.936437][ T5773] usb 1-1: Manufacturer: syz [ 757.941199][ T5773] usb 1-1: SerialNumber: syz [ 757.949621][ T5773] usb 1-1: config 0 descriptor?? [ 757.959304][ T30] audit: type=1400 audit(1779636588.931:1886): avc: denied { nlmsg_read } for pid=14374 comm="syz.1.2266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 758.171784][ T30] audit: type=1400 audit(1779636589.128:1887): avc: denied { listen } for pid=14392 comm="syz.2.2271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 758.196141][T14393] team0: No ports can be present during mode change [ 758.415387][ T30] audit: type=1400 audit(1779636589.362:1888): avc: denied { append } for pid=14373 comm="syz.0.2267" name="sg0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 759.118829][ T5815] vp7045: USB control message 'out' went wrong. [ 759.125250][ T5815] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 759.131551][ T30] audit: type=1400 audit(1779636589.371:1889): avc: denied { map } for pid=14373 comm="syz.0.2267" path="/dev/sg0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 759.207893][ T30] audit: type=1400 audit(1779636589.371:1890): avc: denied { write execute } for pid=14373 comm="syz.0.2267" path="/dev/sg0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 759.267202][ T5815] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 759.302402][ T30] audit: type=1400 audit(1779636590.185:1891): avc: denied { unmount } for pid=5609 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 759.313122][ T5815] usb 2-1: USB disconnect, device number 53 [ 759.434833][T14407] siw: device registration error -23 [ 760.939603][ T30] audit: type=1400 audit(1779636591.720:1892): avc: denied { setopt } for pid=14404 comm="syz.1.2275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 760.979885][T14418] overlayfs: missing 'lowerdir' [ 761.284144][ T5815] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 761.314845][T14428] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2282'. [ 761.446231][ T5815] usb 3-1: config 0 has an invalid interface number: 117 but max is 0 [ 761.454487][ T5815] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 761.482212][ T5815] usb 3-1: config 0 has no interface number 0 [ 761.497147][ T5815] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 761.511201][ T5815] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 761.521482][ T5815] usb 3-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 761.542409][ T5815] usb 3-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 761.551757][ T5815] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 761.560253][ T5815] usb 3-1: Product: syz [ 761.564728][ T5815] usb 3-1: Manufacturer: syz [ 761.569383][ T5815] usb 3-1: SerialNumber: syz [ 761.577184][ T5815] usb 3-1: config 0 descriptor?? [ 762.363094][ T24] usb 1-1: USB disconnect, device number 60 [ 762.641538][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 762.641572][ T30] audit: type=1400 audit(1779636593.301:1902): avc: denied { getopt } for pid=14439 comm="syz.5.2285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 762.753833][T14448] : renamed from vlan0 (while UP) [ 763.972205][ T5815] usb 3-1: USB disconnect, device number 50 [ 764.155092][ T30] audit: type=1400 audit(1779636594.733:1903): avc: denied { ioctl } for pid=14451 comm="syz.0.2289" path="socket:[50941]" dev="sockfs" ino=50941 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 764.869246][ T30] audit: type=1400 audit(1779636595.379:1904): avc: denied { create } for pid=14460 comm="syz.0.2290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 764.994829][T14472] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2290'. [ 765.297985][T14469] siw: device registration error -23 [ 765.408157][ T30] audit: type=1400 audit(1779636595.379:1905): avc: denied { ioctl } for pid=14460 comm="syz.0.2290" path="socket:[50958]" dev="sockfs" ino=50958 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 765.706482][T14478] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 765.714713][T14478] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 765.734078][T14478] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 765.743189][T14478] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 765.762733][ T30] audit: type=1400 audit(1779636596.240:1906): avc: denied { create } for pid=14479 comm="syz.0.2296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 765.782768][ T30] audit: type=1400 audit(1779636596.240:1907): avc: denied { write } for pid=14479 comm="syz.0.2296" path="socket:[51040]" dev="sockfs" ino=51040 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 765.844054][T14483] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 765.873448][T14483] bond2: (slave lo): Enslaving as an active interface with an up link [ 765.898165][T14483] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 765.915568][ T30] audit: type=1400 audit(1779636596.380:1908): avc: denied { create } for pid=14479 comm="syz.0.2296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 765.936314][ T30] audit: type=1400 audit(1779636596.380:1909): avc: denied { connect } for pid=14479 comm="syz.0.2296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 765.958753][ T5817] lo speed is unknown, defaulting to 1000 [ 765.966350][ T10] lo speed is unknown, defaulting to 1000 [ 765.979574][ T10] syz2: Port: 1 Link ACTIVE [ 765.996720][ T5815] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 766.011715][ T30] audit: type=1400 audit(1779636596.474:1910): avc: denied { write } for pid=14479 comm="syz.0.2296" laddr=fe80::13 lport=5831 faddr=ff02::1 fport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 766.062269][ T30] audit: type=1400 audit(1779636596.483:1911): avc: denied { mounton } for pid=14479 comm="syz.0.2296" path="/423/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 766.085047][ T24] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 766.167803][ T5815] usb 3-1: Using ep0 maxpacket: 8 [ 766.233191][ T24] usb 6-1: device descriptor read/64, error -71 [ 766.509704][ T24] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 766.680711][ T24] usb 6-1: device descriptor read/64, error -71 [ 766.824684][ T24] usb usb6-port1: attempt power cycle [ 767.134720][ T5815] usb 3-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 767.547995][ T5815] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 767.556209][ T5815] usb 3-1: Product: syz [ 767.560726][ T5815] usb 3-1: Manufacturer: syz [ 767.565369][ T5815] usb 3-1: SerialNumber: syz [ 767.644209][ T24] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 767.661113][T14501] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 767.668838][T14501] UDF-fs: Scanning with blocksize 512 failed [ 767.680337][T14501] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 767.688111][T14501] UDF-fs: Scanning with blocksize 1024 failed [ 767.697407][T14501] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 767.705161][T14501] UDF-fs: Scanning with blocksize 2048 failed [ 767.714226][T14501] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 767.721989][T14501] UDF-fs: Scanning with blocksize 4096 failed [ 768.036148][ T24] usb 6-1: device descriptor read/8, error -71 [ 768.309460][ T24] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 768.457565][ T24] usb 6-1: device descriptor read/8, error -71 [ 768.661899][ T24] usb usb6-port1: unable to enumerate USB device [ 769.172868][T14520] siw: device registration error -23 [ 769.811412][ T5815] usb 3-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 769.933082][ T5815] usb 3-1: clock source 0 is not valid, cannot use [ 770.516039][ T30] audit: type=1400 audit(1779636600.282:1912): avc: denied { setopt } for pid=14521 comm="syz.5.2308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 770.544063][ T5815] usb 3-1: 1:1: cannot get freq (v2/v3): err -71 [ 770.574054][ T5815] usb 3-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 770.583572][ T5815] usb 3-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 770.592258][ T5815] usb 3-1: clock source 0 is not valid, cannot use [ 770.603092][ T5815] usb 3-1: 2:1: cannot get freq (v2/v3): err -71 [ 770.611340][ T5815] usb 3-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 770.935598][T14534] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2310'. [ 774.074891][T14523] lo speed is unknown, defaulting to 1000 [ 774.113183][T14523] lo speed is unknown, defaulting to 1000 [ 774.204391][ T30] audit: type=1400 audit(1779636604.119:1913): avc: denied { getopt } for pid=14539 comm="syz.1.2312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 774.626162][ T5815] usb 3-1: USB disconnect, device number 51 [ 775.018780][ T30] audit: type=1400 audit(1779636604.896:1914): avc: denied { nlmsg_read } for pid=14552 comm="syz.0.2318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 775.158000][T14557] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 775.605535][T14564] siw: device registration error -23 [ 775.772133][T14567] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2321'. [ 776.085469][ T5815] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 776.093489][T14573] netlink: 'syz.1.2322': attribute type 4 has an invalid length. [ 776.270619][ T5815] usb 3-1: Using ep0 maxpacket: 32 [ 776.307776][ T5815] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 776.307810][ T5815] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 776.310949][ T5815] usb 3-1: config 0 descriptor?? [ 776.431565][T14583] bridge0: port 2(bridge_slave_1) entered blocking state [ 776.431663][T14583] bridge0: port 2(bridge_slave_1) entered listening state [ 776.450228][T14583] bridge0: entered promiscuous mode [ 776.620545][ T5815] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 776.685292][T14590] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 776.692098][T14590] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 776.703999][ T5815] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 776.718596][ T5815] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 777.209447][T14600] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2327'. [ 777.482205][ T5815] usb 3-1: media controller created [ 777.518895][ T5815] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 777.680969][ T5815] DVB: Unable to find symbol dib7000p_attach() [ 777.693893][ T5815] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 777.826221][ T5815] rc_core: IR keymap rc-dib0700-rc5 not found [ 777.919260][ T5815] Registered IR keymap rc-empty [ 777.932272][ T30] audit: type=1400 audit(1779636607.619:1915): avc: denied { setopt } for pid=14604 comm="syz.2.2328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 777.959585][ T5815] dvb-usb: could not initialize remote control. [ 778.281501][ T5815] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 778.435998][ T5815] usb 3-1: USB disconnect, device number 52 [ 778.510749][T14624] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2334'. [ 778.603663][ T5815] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 781.467225][T14647] fuse: fd is not a fuse device [ 781.596551][T14649] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2343'. [ 781.613963][T14649] vlan2: left promiscuous mode [ 781.618788][T14649] macvlan0: left promiscuous mode [ 781.624075][T14649] bond2: left promiscuous mode [ 781.628850][T14649] bridge1: left promiscuous mode [ 783.731369][ T30] audit: type=1400 audit(1779636612.654:1916): avc: denied { sqpoll } for pid=14663 comm="syz.5.2348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 783.900782][T14670] overlayfs: workdir and upperdir must be separate subtrees [ 784.062245][ T30] audit: type=1400 audit(1779636613.355:1917): avc: denied { mount } for pid=14672 comm="syz.1.2350" name="/" dev="autofs" ino=52423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 784.401664][ T30] audit: type=1326 audit(1779636613.683:1918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14682 comm="syz.4.2353" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7feef5b9ce59 code=0x0 [ 785.252460][ T30] audit: type=1400 audit(1779636614.469:1919): avc: denied { unmount } for pid=9783 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 785.676729][ T30] audit: type=1400 audit(1779636614.684:1920): avc: denied { setopt } for pid=14695 comm="syz.1.2356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 785.744823][T14700] netlink: 277 bytes leftover after parsing attributes in process `syz.5.2357'. [ 786.695556][ T5773] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 787.935144][ T5773] usb 3-1: Using ep0 maxpacket: 32 [ 788.010153][ T5773] usb 3-1: unable to get BOS descriptor or descriptor too short [ 788.036284][ T5773] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 788.049009][ T5773] usb 3-1: config 0 has no interfaces? [ 788.065496][ T5773] usb 3-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 788.077678][ T5773] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 788.086082][ T5773] usb 3-1: Product: syz [ 788.090297][ T5773] usb 3-1: Manufacturer: syz [ 788.094972][ T5773] usb 3-1: SerialNumber: syz [ 788.102918][ T5773] usb 3-1: config 0 descriptor?? [ 788.134008][T14726] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2365'. [ 788.200368][T14726] macsec1: entered promiscuous mode [ 788.231498][T14726] macsec1: entered allmulticast mode [ 788.470214][ T30] audit: type=1400 audit(1779636617.295:1921): avc: denied { ioctl } for pid=14730 comm="syz.1.2368" path="socket:[52618]" dev="sockfs" ino=52618 ioctlcmd=0x89ef scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 788.668233][T14737] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2367'. [ 788.677863][T14737] 8021q: VLANs not supported on ip_vti0 [ 788.747273][ T989] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 788.918387][ T989] usb 6-1: Using ep0 maxpacket: 32 [ 788.928908][ T989] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 788.942641][ T989] usb 6-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 788.953948][ T5815] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 788.971324][ T989] usb 6-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 788.987151][ T989] usb 6-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 789.012533][ T989] usb 6-1: config 0 interface 0 has no altsetting 0 [ 789.025177][ T989] usb 6-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 789.041219][ T989] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 789.078192][ T989] usb 6-1: config 0 descriptor?? [ 789.123503][ T5815] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 789.138282][ T5815] usb 2-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00 [ 789.165095][ T5815] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 789.197928][ T5815] usb 2-1: config 0 descriptor?? [ 789.209191][T14739] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 789.301255][T14748] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2372'. [ 789.547941][ T989] corsair-cpro 0003:1B1C:0C10.0019: item fetching failed at offset 2/5 [ 789.572493][ T989] corsair-cpro 0003:1B1C:0C10.0019: probe with driver corsair-cpro failed with error -22 [ 789.597186][ T30] audit: type=1400 audit(1779636618.540:1922): avc: denied { watch watch_reads } for pid=14754 comm="syz.4.2375" path="/518" dev="tmpfs" ino=2785 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 789.674733][ T5815] hid_parser_main: 2 callbacks suppressed [ 789.674748][ T5815] asus 0003:0B05:1ABE.001A: unknown main item tag 0x0 [ 789.699363][ T5815] asus 0003:0B05:1ABE.001A: unknown main item tag 0x0 [ 789.730503][ T5815] asus 0003:0B05:1ABE.001A: unknown main item tag 0x0 [ 789.763298][ T5815] asus 0003:0B05:1ABE.001A: unknown main item tag 0x0 [ 789.783906][ T5815] asus 0003:0B05:1ABE.001A: unknown main item tag 0x0 [ 789.806045][ T5815] asus 0003:0B05:1ABE.001A: unknown main item tag 0x0 [ 789.815287][ T5815] asus 0003:0B05:1ABE.001A: unknown main item tag 0x0 [ 789.826629][ T5815] asus 0003:0B05:1ABE.001A: unknown main item tag 0x0 [ 789.837344][ T5815] asus 0003:0B05:1ABE.001A: unknown main item tag 0x0 [ 789.850537][ T5815] asus 0003:0B05:1ABE.001A: unknown main item tag 0x0 [ 790.181508][ T5815] asus 0003:0B05:1ABE.001A: hidraw0: USB HID v7f.fd Device [HID 0b05:1abe] on usb-dummy_hcd.1-1/input0 [ 790.213100][ T5815] usb 2-1: USB disconnect, device number 54 [ 790.269141][ T5773] usb 3-1: USB disconnect, device number 53 [ 790.295362][T14766] fido_id[14766]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 790.327512][T14726] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 790.354073][T14726] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 790.789016][T14778] Mount JFS Failure: -5 [ 790.970115][T14779] bridge2: entered promiscuous mode [ 790.975618][T14779] bridge2: entered allmulticast mode [ 791.932390][T14785] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2383'. [ 791.954541][ T30] audit: type=1400 audit(1779636620.692:1923): avc: denied { read } for pid=14784 comm="syz.1.2384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 792.331018][ T5773] usb 6-1: USB disconnect, device number 29 [ 792.398024][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 793.351206][T14807] overlayfs: failed to clone upperpath [ 793.359797][ T30] audit: type=1400 audit(1779636622.058:1924): avc: denied { shutdown } for pid=14797 comm="syz.4.2389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 793.393929][T14808] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2390'. [ 793.556260][ T804] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 793.726999][ T804] usb 2-1: Using ep0 maxpacket: 16 [ 793.736455][ T804] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 793.746115][ T804] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 793.755287][ T804] usb 2-1: Product: syz [ 793.759966][ T804] usb 2-1: Manufacturer: syz [ 793.764639][ T804] usb 2-1: SerialNumber: syz [ 793.773700][ T804] usb 2-1: config 0 descriptor?? [ 793.788508][ T804] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 793.797670][ T804] usb 2-1: Detected FT-X [ 794.082109][T14827] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 794.093012][T14827] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 794.131057][ T30] audit: type=1400 audit(1779636622.732:1925): avc: denied { connect } for pid=14800 comm="syz.1.2386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 794.397935][ T804] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 794.413919][ T804] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 794.428493][ T804] ftdi_sio 2-1:0.0: GPIO initialisation failed: -71 [ 794.450562][ T804] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 794.478403][ T804] usb 2-1: USB disconnect, device number 55 [ 794.503011][ T804] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 794.521212][T14829] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2396'. [ 794.528832][ T804] ftdi_sio 2-1:0.0: device disconnected [ 794.644353][T14831] Invalid ELF header type: 3 != 1 [ 794.650805][T14831] FAULT_INJECTION: forcing a failure. [ 794.650805][T14831] name failslab, interval 1, probability 0, space 0, times 0 [ 794.663634][T14831] CPU: 0 UID: 0 PID: 14831 Comm: syz.5.2397 Tainted: G L syzkaller #0 PREEMPT(full) [ 794.663659][T14831] Tainted: [L]=SOFTLOCKUP [ 794.663665][T14831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 794.663675][T14831] Call Trace: [ 794.663681][T14831] [ 794.663686][T14831] dump_stack_lvl+0x100/0x190 [ 794.663709][T14831] should_fail_ex.cold+0x5/0xa [ 794.663732][T14831] should_failslab+0xc2/0x120 [ 794.663752][T14831] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 794.663779][T14831] ? __alloc_skb+0x140/0x710 [ 794.663796][T14831] ? __alloc_skb+0x5b7/0x710 [ 794.663816][T14831] __alloc_skb+0x140/0x710 [ 794.663832][T14831] ? __alloc_skb+0x5b7/0x710 [ 794.663848][T14831] ? __pfx___alloc_skb+0x10/0x10 [ 794.663873][T14831] netlink_alloc_large_skb+0x69/0x150 [ 794.663900][T14831] netlink_sendmsg+0x680/0xda0 [ 794.663929][T14831] ? __pfx_netlink_sendmsg+0x10/0x10 [ 794.663963][T14831] ____sys_sendmsg+0x9e1/0xb70 [ 794.663986][T14831] ? __pfx_netlink_sendmsg+0x10/0x10 [ 794.664014][T14831] ? __pfx_____sys_sendmsg+0x10/0x10 [ 794.664044][T14831] ___sys_sendmsg+0x190/0x1e0 [ 794.664067][T14831] ? __pfx____sys_sendmsg+0x10/0x10 [ 794.664117][T14831] __sys_sendmsg+0x170/0x220 [ 794.664138][T14831] ? __pfx___sys_sendmsg+0x10/0x10 [ 794.664164][T14831] ? rcu_is_watching+0x12/0xc0 [ 794.664191][T14831] do_syscall_64+0x10b/0xf80 [ 794.664214][T14831] ? clear_bhb_loop+0x40/0x90 [ 794.664235][T14831] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 794.664253][T14831] RIP: 0033:0x7f920cf9ce59 [ 794.664268][T14831] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 794.664285][T14831] RSP: 002b:00007f920dd76028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 794.664302][T14831] RAX: ffffffffffffffda RBX: 00007f920d215fa0 RCX: 00007f920cf9ce59 [ 794.664314][T14831] RDX: 0000000000040004 RSI: 0000200000001f40 RDI: 0000000000000004 [ 794.664324][T14831] RBP: 00007f920dd76090 R08: 0000000000000000 R09: 0000000000000000 [ 794.664334][T14831] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 794.664344][T14831] R13: 00007f920d216038 R14: 00007f920d215fa0 R15: 00007fff878dccb8 [ 794.664367][T14831] [ 794.933779][T14833] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2398'. [ 795.555154][ T30] audit: type=1400 audit(1779636624.108:1926): avc: denied { execute } for pid=14843 comm="syz.0.2402" path="/439/memory.current" dev="tmpfs" ino=2319 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 795.612224][ T30] audit: type=1400 audit(1779636624.173:1927): avc: denied { connect } for pid=14837 comm="syz.2.2400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 796.015835][T14855] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2405'. [ 796.377140][ T5815] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 796.537506][ T5815] usb 3-1: Using ep0 maxpacket: 8 [ 796.547319][ T5815] usb 3-1: config index 0 descriptor too short (expected 5924, got 36) [ 796.563880][ T5815] usb 3-1: config 250 has an invalid interface number: 228 but max is -1 [ 796.589743][ T5815] usb 3-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 796.615581][ T5815] usb 3-1: config 250 has no interface number 0 [ 796.638574][ T5815] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 796.683786][ T5815] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 796.728648][ T5815] usb 3-1: config 250 interface 228 altsetting 255 has an endpoint descriptor with address 0xA2, changing to 0x82 [ 796.766238][ T5815] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 100 [ 796.806403][ T5815] usb 3-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 796.858451][ T5815] usb 3-1: config 250 interface 228 has no altsetting 0 [ 796.886643][ T5815] usb 3-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 796.903836][ T5815] usb 3-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 796.933547][ T5815] usb 3-1: Product: syz [ 796.946602][ T5815] usb 3-1: SerialNumber: syz [ 797.109520][ T5815] hub 3-1:250.228: bad descriptor, ignoring hub [ 797.191494][ T5815] hub 3-1:250.228: probe with driver hub failed with error -5 [ 797.351924][ T30] audit: type=1400 audit(1779636625.802:1928): avc: denied { name_bind } for pid=14856 comm="syz.2.2407" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 798.162756][ T5815] usblp 3-1:250.228: usblp0: USB Bidirectional printer dev 54 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 798.183375][T14857] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 798.194928][T14857] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 798.400776][ T5773] usb 3-1: USB disconnect, device number 54 [ 798.412439][ T5773] usblp0: removed [ 798.457186][ T30] audit: type=1400 audit(1779636626.831:1929): avc: denied { read } for pid=14890 comm="syz.0.2414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 798.856820][ T9] usb 6-1: new full-speed USB device number 30 using dummy_hcd [ 799.094920][ T9] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 799.103488][ T9] usb 6-1: config 0 has no interface number 0 [ 799.115286][ T9] usb 6-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 799.125895][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 799.134118][ T9] usb 6-1: Product: syz [ 799.138632][ T9] usb 6-1: Manufacturer: syz [ 799.143426][ T9] usb 6-1: SerialNumber: syz [ 799.158613][ T9] usb 6-1: config 0 descriptor?? [ 799.172465][ T9] usb 6-1: selecting invalid altsetting 1 [ 799.182494][ T9] dvb_ttusb_budget: ttusb_init_controller: error [ 799.191652][ T9] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 799.342007][ T9] DVB: Unable to find symbol stv0299_attach() [ 799.453331][ T9] DVB: Unable to find symbol tda8083_attach() [ 799.462690][ T9] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 799.486002][ T9] usb 6-1: USB disconnect, device number 30 [ 799.847245][ T5773] usb 2-1: new full-speed USB device number 56 using dummy_hcd [ 800.315220][ T5773] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 800.326623][ T5773] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 800.337733][ T5773] usb 2-1: config 1 has no interface number 0 [ 800.344954][ T5773] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 800.358173][ T5773] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 800.370735][ T5773] usb 2-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 800.476844][ T5773] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 800.558622][ T5773] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 800.567284][ T804] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 800.681760][ T5773] usb 2-1: Product: syz [ 800.696459][ T5773] usb 2-1: Manufacturer: syz [ 800.716957][ T5773] usb 2-1: SerialNumber: syz [ 800.740372][T14915] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 800.833208][ T804] usb 3-1: Using ep0 maxpacket: 16 [ 801.276880][ T30] audit: type=1400 audit(1779636629.470:1930): avc: denied { read append } for pid=14926 comm="syz.5.2427" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 801.309931][ T30] audit: type=1400 audit(1779636629.489:1931): avc: denied { open } for pid=14926 comm="syz.5.2427" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 801.336392][ T30] audit: type=1400 audit(1779636629.498:1932): avc: denied { bind } for pid=14926 comm="syz.5.2427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 801.360042][T14933] siw: device registration error -23 [ 801.366221][ T30] audit: type=1400 audit(1779636629.498:1933): avc: denied { listen } for pid=14926 comm="syz.5.2427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 801.394173][T14915] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 801.575382][ T804] usb 3-1: unable to get BOS descriptor or descriptor too short [ 801.804729][ T5773] cdc_ncm 2-1:1.1: failed GET_NTB_PARAMETERS [ 801.811615][ T5773] cdc_ncm 2-1:1.1: bind() failure [ 801.822921][ T804] usb 3-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice=d4.05 [ 801.838717][ T5773] usb 2-1: USB disconnect, device number 56 [ 801.844752][ T804] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 801.858302][ T804] usb 3-1: Product: syz [ 801.867064][ T804] usb 3-1: Manufacturer: syz [ 801.872510][ T804] usb 3-1: SerialNumber: syz [ 801.896663][T14943] : renamed from bond0 [ 801.969887][T14944] Context (ID=0x1) not attached to queue pair (handle=0x0:0x2) [ 802.293782][T14946] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 802.304149][T14946] openvswitch: netlink: Missing key (keys=240, expected=100) [ 802.706474][T14949] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 803.002441][ T30] audit: type=1400 audit(1779636631.080:1934): avc: denied { create } for pid=14961 comm="syz.5.2437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 803.225051][ T804] gspca_main: vc032x-2.14.0 probing 0ac8:c301 [ 803.237167][ T804] gspca_vc032x: reg_w err -71 [ 803.247840][ T804] gspca_vc032x: I2c Bus Busy Wait 00 [ 803.259029][ T804] gspca_vc032x: I2c Bus Busy Wait 00 [ 803.272619][ T804] gspca_vc032x: I2c Bus Busy Wait 00 [ 803.281537][ T804] gspca_vc032x: I2c Bus Busy Wait 00 [ 803.289914][ T804] gspca_vc032x: I2c Bus Busy Wait 00 [ 803.298525][ T804] gspca_vc032x: I2c Bus Busy Wait 00 [ 803.308137][ T804] gspca_vc032x: I2c Bus Busy Wait 00 [ 803.318158][ T804] gspca_vc032x: I2c Bus Busy Wait 00 [ 803.341480][ T804] gspca_vc032x: I2c Bus Busy Wait 00 [ 803.374856][ T804] gspca_vc032x: I2c Bus Busy Wait 00 [ 803.403101][ T804] gspca_vc032x: I2c Bus Busy Wait 00 [ 803.420674][ T804] gspca_vc032x: I2c Bus Busy Wait 00 [ 803.438879][ T804] gspca_vc032x: I2c Bus Busy Wait 00 [ 803.456652][ T804] gspca_vc032x: I2c Bus Busy Wait 00 [ 803.479613][ T804] gspca_vc032x: I2c Bus Busy Wait 00 [ 803.497216][ T804] gspca_vc032x: I2c Bus Busy Wait 00 [ 803.512651][ T804] gspca_vc032x: I2c Bus Busy Wait 00 [ 803.533908][ T804] gspca_vc032x: I2c Bus Busy Wait 00 [ 803.555878][ T804] gspca_vc032x: I2c Bus Busy Wait 00 [ 803.572949][ T804] gspca_vc032x: Unknown sensor... [ 803.586306][T14974] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2440'. [ 803.598082][ T804] vc032x 3-1:12.0: probe with driver vc032x failed with error -22 [ 803.645893][ T804] usb 3-1: USB disconnect, device number 55 [ 805.620805][ T30] audit: type=1400 audit(1779636633.541:1935): avc: denied { read } for pid=15005 comm="syz.0.2451" name="btrfs-control" dev="devtmpfs" ino=1315 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 805.647281][T15006] IPVS: set_ctl: invalid protocol: 43 100.1.1.2:20004 [ 805.723194][ T30] audit: type=1400 audit(1779636633.559:1936): avc: denied { open } for pid=15005 comm="syz.0.2451" path="/dev/btrfs-control" dev="devtmpfs" ino=1315 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 805.749132][ T30] audit: type=1400 audit(1779636633.559:1937): avc: denied { ioctl } for pid=15005 comm="syz.0.2451" path="/dev/btrfs-control" dev="devtmpfs" ino=1315 ioctlcmd=0x9427 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 805.834923][T15010] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 806.538977][T15015] trusted_key: encrypted_key: insufficient parameters specified [ 806.564376][T15015] trusted_key: encrypted_key: insufficient parameters specified [ 806.614653][ T30] audit: type=1400 audit(1779636634.439:1938): avc: denied { create } for pid=15012 comm="syz.5.2452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 806.998023][T15017] lo speed is unknown, defaulting to 1000 [ 807.004511][T15017] lo speed is unknown, defaulting to 1000 [ 808.098767][T15030] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2457'. [ 808.663562][T15038] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2460'. [ 808.673634][T15038] bridge0: port 2(bridge_slave_1) entered disabled state [ 809.292425][T15051] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8296 sclass=netlink_route_socket pid=15051 comm=syz.4.2465 [ 809.491430][T15067] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 809.500703][T15067] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 809.744921][ T30] audit: type=1400 audit(1779636637.293:1939): avc: denied { listen } for pid=15064 comm="syz.4.2469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 810.920878][ T5815] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 811.067723][ T5773] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 811.279625][ T5773] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 811.330206][ T5773] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 811.430588][ T5773] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 811.584301][ T5773] usb 2-1: config 0 descriptor?? [ 812.185547][ T5773] keytouch 0003:0926:3333.001B: fixing up Keytouch IEC report descriptor [ 812.454165][ T30] audit: type=1400 audit(1779636639.923:1940): avc: denied { ioctl } for pid=15098 comm="syz.4.2479" path="socket:[54017]" dev="sockfs" ino=54017 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 812.480992][ T5815] usb 3-1: Using ep0 maxpacket: 32 [ 812.527509][T15101] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2479'. [ 812.560943][ T5773] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.001B/input/input37 [ 812.759833][ T5815] usb 3-1: unable to get BOS descriptor or descriptor too short [ 812.771845][ T5815] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 812.782016][ T5815] usb 3-1: config 0 has no interfaces? [ 812.789588][ T5815] usb 3-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 812.798811][ T5815] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 812.806924][ T5815] usb 3-1: Product: syz [ 812.812824][ T5815] usb 3-1: Manufacturer: syz [ 812.817621][ T5815] usb 3-1: SerialNumber: syz [ 812.833408][ T5815] usb 3-1: config 0 descriptor?? [ 813.379535][ T5773] keytouch 0003:0926:3333.001B: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 813.393734][ T5802] usb 3-1: USB disconnect, device number 56 [ 813.436762][ T5773] usb 2-1: USB disconnect, device number 57 [ 813.546715][T15112] fido_id[15112]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 813.607263][T15117] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=128 sclass=netlink_route_socket pid=15117 comm=syz.5.2483 [ 813.625980][ T30] audit: type=1400 audit(1779636641.027:1941): avc: denied { setopt } for pid=15107 comm="syz.1.2480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 813.671327][T15117] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2483'. [ 814.651483][ T9] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 814.714420][ T5802] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 814.880066][ T5802] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 814.891970][ T5802] usb 6-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 814.902101][ T5802] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 814.921689][ T5802] usb 6-1: config 0 descriptor?? [ 814.944056][T15124] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 815.173887][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 815.180414][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 815.191432][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 815.201721][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 815.215178][ T9] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2c24, bcdDevice= 0.00 [ 815.224298][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 815.234191][ T9] usb 1-1: config 0 descriptor?? [ 815.398421][ T5802] hid_parser_main: 457 callbacks suppressed [ 815.398443][ T5802] hid-picolcd 0003:04D8:C002.001C: unknown main item tag 0x0 [ 815.421521][ T5802] hid-picolcd 0003:04D8:C002.001C: unknown main item tag 0x0 [ 815.437054][ T5802] hid-picolcd 0003:04D8:C002.001C: unknown main item tag 0x0 [ 815.444870][ T5802] hid-picolcd 0003:04D8:C002.001C: unknown main item tag 0x0 [ 815.453715][ T5802] hid-picolcd 0003:04D8:C002.001C: unknown main item tag 0x0 [ 815.463008][ T5802] hid-picolcd 0003:04D8:C002.001C: unknown main item tag 0x0 [ 815.474895][ T5802] hid-picolcd 0003:04D8:C002.001C: unknown main item tag 0x0 [ 815.487747][ T5802] hid-picolcd 0003:04D8:C002.001C: unknown main item tag 0x0 [ 815.500380][ T5802] hid-picolcd 0003:04D8:C002.001C: unknown main item tag 0x0 [ 815.513768][ T5802] hid-picolcd 0003:04D8:C002.001C: unknown main item tag 0x0 [ 815.523060][ T5802] hid-picolcd 0003:04D8:C002.001C: item fetching failed at offset 318/483 [ 815.532255][ T5802] hid-picolcd 0003:04D8:C002.001C: device report parse failed [ 815.539976][ T5802] hid-picolcd 0003:04D8:C002.001C: probe with driver hid-picolcd failed with error -22 [ 815.610913][T15124] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 815.690059][T15124] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 815.698360][ T9] pyra 0003:1E7D:2C24.001D: hidraw0: USB HID v0.04 Device [HID 1e7d:2c24] on usb-dummy_hcd.0-1/input0 [ 815.896991][T15132] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2487'. [ 815.920417][T15132] openvswitch: netlink: Flow actions attr not present in new flow. [ 816.074308][ T30] audit: type=1400 audit(1779636643.320:1942): avc: denied { ioctl } for pid=15131 comm="syz.0.2487" path="socket:[54475]" dev="sockfs" ino=54475 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 817.089408][ T9] usb 6-1: USB disconnect, device number 31 [ 817.609585][ T5815] usb 1-1: USB disconnect, device number 61 [ 817.813600][ T30] audit: type=1400 audit(1779636644.939:1943): avc: denied { ioctl } for pid=15206 comm="syz.2.2509" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4605 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 817.897091][T15210] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2510'. [ 818.684932][T15219] rdma_op ffff88807ba6c1f0 conn xmit_rdma 0000000000000000 [ 819.690387][ T30] audit: type=1400 audit(1779636646.698:1944): avc: denied { write } for pid=15237 comm="syz.0.2519" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 819.983340][ T5802] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 820.155865][ T5802] usb 1-1: Using ep0 maxpacket: 32 [ 820.173348][ T5802] usb 1-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 820.189809][ T5802] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 820.206335][ T5802] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 820.278687][T15235] mmap: syz.4.2518 (15235): VmData 25968640 exceed data ulimit 12. Update limits or use boot option ignore_rlimit_data. [ 820.378025][ T9] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 820.550492][ T9] usb 3-1: config 0 has no interfaces? [ 820.556090][ T9] usb 3-1: New USB device found, idVendor=056a, idProduct=0045, bcdDevice= 0.00 [ 820.565267][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 820.575275][ T9] usb 3-1: config 0 descriptor?? [ 820.659853][ T30] audit: type=1400 audit(1779636647.606:1945): avc: denied { search } for pid=5274 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 820.692009][ T30] audit: type=1400 audit(1779636647.606:1946): avc: denied { search } for pid=5274 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 820.717776][ T30] audit: type=1400 audit(1779636647.606:1947): avc: denied { search } for pid=5274 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 820.744946][ T30] audit: type=1400 audit(1779636647.606:1948): avc: denied { read } for pid=5274 comm="dhcpcd" name="n42" dev="tmpfs" ino=11037 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 820.780438][ T30] audit: type=1400 audit(1779636647.606:1949): avc: denied { open } for pid=5274 comm="dhcpcd" path="/run/udev/data/n42" dev="tmpfs" ino=11037 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 820.819018][T15253] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 820.829808][ T5802] gspca_nw80x: reg_r err -71 [ 820.834834][ T5802] nw80x 1-1:3.0: probe with driver nw80x failed with error -71 [ 820.843218][T15253] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 820.872773][ T30] audit: type=1400 audit(1779636647.606:1950): avc: denied { getattr } for pid=5274 comm="dhcpcd" path="/run/udev/data/n42" dev="tmpfs" ino=11037 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 820.878622][ T5802] usb 1-1: USB disconnect, device number 62 [ 820.914877][T15253] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 820.931456][T15253] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 820.944696][ T24] usb 3-1: USB disconnect, device number 57 [ 820.984280][ T30] audit: type=1400 audit(1779636647.905:1951): avc: denied { read } for pid=15261 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 821.142406][T15268] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2528'. [ 821.152264][T15268] openvswitch: netlink: Missing key (keys=40, expected=80) [ 821.489462][ T5802] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 821.519964][T15277] Invalid ELF header type: 2 != 1 [ 821.695401][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 821.695417][ T30] audit: type=1400 audit(1779636648.579:1954): avc: denied { write } for pid=15257 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 821.746845][ T5802] usb 3-1: Using ep0 maxpacket: 8 [ 821.754767][ T5802] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 821.771993][ T5802] usb 3-1: config 0 has no interface number 0 [ 821.779732][ T5802] usb 3-1: config 0 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 821.790715][ T5802] usb 3-1: config 0 interface 1 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 0 [ 821.795613][ T30] audit: type=1400 audit(1779636648.579:1955): avc: denied { add_name } for pid=15257 comm="dhcpcd-run-hook" name="resolv.conf.sl0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 821.823396][ T24] usb 6-1: new low-speed USB device number 32 using dummy_hcd [ 821.854681][ T30] audit: type=1400 audit(1779636648.579:1956): avc: denied { create } for pid=15257 comm="dhcpcd-run-hook" name="resolv.conf.sl0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 821.863407][ T5802] usb 3-1: config 0 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 821.878882][ T30] audit: type=1400 audit(1779636648.579:1957): avc: denied { write } for pid=15257 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.sl0.link" dev="tmpfs" ino=11059 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 821.915069][ T30] audit: type=1400 audit(1779636648.579:1958): avc: denied { append } for pid=15257 comm="dhcpcd-run-hook" name="resolv.conf.sl0.link" dev="tmpfs" ino=11059 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 821.938197][ T5802] usb 3-1: config 0 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 821.939928][ T30] audit: type=1400 audit(1779636648.775:1959): avc: denied { write } for pid=15286 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 821.981447][ T30] audit: type=1400 audit(1779636648.794:1960): avc: denied { remove_name } for pid=15286 comm="rm" name="resolv.conf.sl0.link" dev="tmpfs" ino=11059 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 822.005675][ T30] audit: type=1400 audit(1779636648.794:1961): avc: denied { unlink } for pid=15286 comm="rm" name="resolv.conf.sl0.link" dev="tmpfs" ino=11059 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 822.005743][ T5802] usb 3-1: config 0 interface 1 has no altsetting 0 [ 822.046802][ T24] usb 6-1: Invalid ep0 maxpacket: 32 [ 822.053302][ T5802] usb 3-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 822.062545][ T5802] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 822.106730][ T5802] usb 3-1: config 0 descriptor?? [ 822.184608][ T24] usb 6-1: new low-speed USB device number 33 using dummy_hcd [ 822.344286][ T24] usb 6-1: Invalid ep0 maxpacket: 32 [ 822.349929][ T24] usb usb6-port1: attempt power cycle [ 822.404444][ T30] audit: type=1400 audit(1779636649.243:1962): avc: denied { write } for pid=15288 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 822.510366][ T30] audit: type=1400 audit(1779636649.337:1963): avc: denied { write } for pid=15299 comm="syz.0.2531" name="001" dev="devtmpfs" ino=746 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 822.742046][T15305] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2532'. [ 822.750339][ T24] usb 6-1: new low-speed USB device number 34 using dummy_hcd [ 822.986035][ T24] usb 6-1: Invalid ep0 maxpacket: 32 [ 823.030635][T15307] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=61479 sclass=netlink_xfrm_socket pid=15307 comm=syz.1.2533 [ 823.124337][ T5815] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 823.172596][ T24] usb 6-1: new low-speed USB device number 35 using dummy_hcd [ 823.199574][ T24] usb 6-1: Invalid ep0 maxpacket: 32 [ 823.205218][ T24] usb usb6-port1: unable to enumerate USB device [ 823.305287][T15311] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2534'. [ 823.677772][ T24] usb 3-1: USB disconnect, device number 58 [ 824.333475][ T5815] usb 1-1: Using ep0 maxpacket: 8 [ 824.704564][ T5815] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 824.734701][ T5815] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 824.764548][ T5815] usb 1-1: Product: syz [ 824.772952][ T5815] usb 1-1: Manufacturer: syz [ 824.777747][ T5815] usb 1-1: SerialNumber: syz [ 824.787201][ T5815] usb 1-1: config 0 descriptor?? [ 825.057709][T15324] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2538'. [ 825.079148][T15324] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2538'. [ 825.090135][T15324] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2538'. [ 825.107071][T15324] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2538'. [ 825.117329][T15324] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2538'. [ 825.212664][T15323] kAFS: unable to lookup cell '' [ 825.237454][T15323] kAFS: unable to lookup cell '(,c' [ 825.274036][ T5815] usb 1-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 827.613604][ T5815] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 827.765350][ T5815] dvbdev: DVB: registering new adapter (Terratec H7) [ 827.866043][ T5815] usb 1-1: media controller created [ 827.925274][ T5815] usb read operation failed. (-71) [ 828.225238][ T5815] dvb_usb_az6007 1-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 828.242664][ T5815] usb 1-1: USB disconnect, device number 63 [ 828.376268][T15349] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 828.384073][T15349] UDF-fs: Scanning with blocksize 512 failed [ 828.394543][T15349] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 828.402283][T15349] UDF-fs: Scanning with blocksize 1024 failed [ 828.411904][T15349] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 828.419713][T15349] UDF-fs: Scanning with blocksize 2048 failed [ 828.431283][T15349] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 828.439014][T15349] UDF-fs: Scanning with blocksize 4096 failed [ 828.825030][T15362] netlink: 'syz.5.2548': attribute type 3 has an invalid length. [ 828.896635][T15364] usb usb7: selecting invalid altsetting 6 [ 829.016158][ T5817] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 829.624668][T15354] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2546'. [ 829.636295][T15354] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 829.645240][T15354] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 829.730760][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 829.730780][ T30] audit: type=1326 audit(1779636656.103:1966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15353 comm="syz.2.2546" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff84319ce59 code=0x7ffc0000 [ 829.764033][ T30] audit: type=1326 audit(1779636656.103:1967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15353 comm="syz.2.2546" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff84319ce59 code=0x7ffc0000 [ 829.791337][ T30] audit: type=1326 audit(1779636656.103:1968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15353 comm="syz.2.2546" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff84319ce59 code=0x7ffc0000 [ 829.836375][ T30] audit: type=1326 audit(1779636656.103:1969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15353 comm="syz.2.2546" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff84319ce59 code=0x7ffc0000 [ 829.875922][ T30] audit: type=1326 audit(1779636656.103:1970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15353 comm="syz.2.2546" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff84319ce59 code=0x7ffc0000 [ 829.921841][ T24] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 829.953010][ T30] audit: type=1326 audit(1779636656.159:1971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15353 comm="syz.2.2546" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff84319ce59 code=0x7ffc0000 [ 829.981884][ T30] audit: type=1326 audit(1779636656.159:1972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15353 comm="syz.2.2546" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff84319ce59 code=0x7ffc0000 [ 830.032605][ T30] audit: type=1326 audit(1779636656.159:1973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15353 comm="syz.2.2546" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff84319ce59 code=0x7ffc0000 [ 830.077407][ T30] audit: type=1326 audit(1779636656.159:1974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15353 comm="syz.2.2546" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff84319ce59 code=0x7ffc0000 [ 830.105065][ T30] audit: type=1326 audit(1779636656.196:1975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15353 comm="syz.2.2546" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff84319caeb code=0x7ffc0000 [ 830.155786][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 830.170660][ T24] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 830.180487][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 830.428928][T15389] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2555'. [ 830.446508][T15389] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2555'. [ 831.238946][ T24] usb 1-1: config 0 descriptor?? [ 832.328618][ T24] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 832.343575][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 832.353791][ T24] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 832.361885][ T24] usb 1-1: media controller created [ 832.507562][ T5817] usb 3-1: unable to get BOS descriptor or descriptor too short [ 832.523618][ T5817] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 832.531956][ T5817] usb 3-1: can't read configurations, error -71 [ 832.533446][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 832.560374][T15403] trusted_key: encrypted_key: insufficient parameters specified [ 832.568746][T15403] trusted_key: encrypted_key: insufficient parameters specified [ 833.493762][T15417] tipc: Started in network mode [ 833.498791][T15417] tipc: Node identity ac1414aa, cluster identity 4711 [ 833.512122][T15417] tipc: Enabled bearer , priority 10 [ 833.926164][ T24] az6027: usb out operation failed. (-71) [ 833.946398][ T24] az6027: usb out operation failed. (-71) [ 833.963209][ T24] stb0899_attach: Driver disabled by Kconfig [ 833.977926][ T24] az6027: no front-end attached [ 833.977926][ T24] [ 834.000672][ T24] az6027: usb out operation failed. (-71) [ 834.024138][ T24] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 834.049347][ T24] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input38 [ 834.087810][ T24] dvb-usb: schedule remote query interval to 400 msecs. [ 834.171230][ T24] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 834.196277][ T24] usb 1-1: USB disconnect, device number 64 [ 834.617619][ T5773] tipc: Node number set to 2886997162 [ 835.267036][ T24] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 835.679632][T15440] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 835.687333][T15440] UDF-fs: Scanning with blocksize 512 failed [ 835.695702][T15440] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 835.703381][T15440] UDF-fs: Scanning with blocksize 1024 failed [ 835.711689][T15440] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 835.719319][T15440] UDF-fs: Scanning with blocksize 2048 failed [ 835.727085][T15440] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 835.734733][T15440] UDF-fs: Scanning with blocksize 4096 failed [ 835.973905][ T30] kauditd_printk_skb: 239 callbacks suppressed [ 835.973918][ T30] audit: type=1400 audit(1779636661.942:2215): avc: denied { ioctl } for pid=15441 comm="syz.2.2573" path="/dev/sg0" dev="devtmpfs" ino=737 ioctlcmd=0x5393 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 836.589408][ T30] audit: type=1400 audit(1779636662.522:2216): avc: denied { read write } for pid=15455 comm="syz.5.2579" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 836.663705][ T30] audit: type=1400 audit(1779636662.522:2217): avc: denied { open } for pid=15455 comm="syz.5.2579" path="/dev/uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 836.689039][T15459] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 836.770124][T15459] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 836.807352][T15459] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 836.808004][T15465] netlink: 'syz.5.2579': attribute type 3 has an invalid length. [ 836.830431][T15459] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 836.843409][T15459] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 837.314858][ T5617] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 837.323068][ T5617] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 837.331072][ T5617] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 837.339602][ T5617] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 837.353602][ T5617] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 837.383021][ T30] audit: type=1400 audit(1779636663.252:2218): avc: denied { mounton } for pid=15458 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 838.635643][ T30] audit: type=1400 audit(1779636664.431:2219): avc: denied { connect } for pid=15491 comm="syz.5.2587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 838.742488][T15458] lo speed is unknown, defaulting to 1000 [ 838.773426][ T76] Bluetooth: hci6: Frame reassembly failed (-84) [ 838.800579][T15458] lo speed is unknown, defaulting to 1000 [ 838.838870][ T30] audit: type=1400 audit(1779636664.619:2220): avc: denied { setopt } for pid=15491 comm="syz.5.2587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 839.415945][T15458] bridge0: port 1(bridge_slave_0) entered blocking state [ 839.423786][T15458] bridge0: port 1(bridge_slave_0) entered disabled state [ 839.434594][T15458] bridge_slave_0: entered allmulticast mode [ 839.442247][T15458] bridge_slave_0: entered promiscuous mode [ 839.454836][T15458] bridge0: port 2(bridge_slave_1) entered blocking state [ 839.464054][T15458] bridge0: port 2(bridge_slave_1) entered disabled state [ 839.475057][T15458] bridge_slave_1: entered allmulticast mode [ 839.489130][T15458] bridge_slave_1: entered promiscuous mode [ 839.558355][T15458] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 839.570257][ T5617] Bluetooth: hci5: command tx timeout [ 839.587455][T15458] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 839.615071][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807905a800: rx timeout, send abort [ 839.645548][T15458] team0: Port device team_slave_0 added [ 839.662631][T15458] team0: Port device team_slave_1 added [ 839.707049][T15458] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 839.714772][T15458] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 839.741306][ T5773] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 839.742229][T15458] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 839.761979][T15458] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 839.769265][T15458] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 839.804777][T15458] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 839.901867][ T5773] usb 1-1: Using ep0 maxpacket: 8 [ 839.908575][ T5773] usb 1-1: config 0 has an invalid interface number: 176 but max is 2 [ 839.919050][ T5773] usb 1-1: config 0 has no interface number 1 [ 839.925586][ T5773] usb 1-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 839.938287][ T5773] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 839.988460][T15513] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2591'. [ 839.991743][ T5773] usb 1-1: config 0 descriptor?? [ 840.007319][T15513] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2591'. [ 840.024737][T15458] hsr_slave_0: entered promiscuous mode [ 840.031130][T15458] hsr_slave_1: entered promiscuous mode [ 840.037262][T15458] debugfs: 'hsr0' already exists in 'hsr' [ 840.043311][T15458] Cannot create hsr debugfs directory [ 840.157658][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807905a800: abort rx timeout. Force session deactivation [ 840.274979][ T5773] qcserial 1-1:0.2: Qualcomm USB modem converter detected [ 840.564478][ T30] audit: type=1400 audit(1779636666.237:2221): avc: denied { write } for pid=15510 comm="syz.0.2590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 840.622053][T15524] netlink: 'syz.2.2594': attribute type 1 has an invalid length. [ 840.667272][T15524] 8021q: adding VLAN 0 to HW filter on device bond3 [ 840.689066][T15524] vlan0: entered allmulticast mode [ 840.694413][T15524] bond3: entered allmulticast mode [ 840.714595][T15524] bond3: (slave geneve3): making interface the new active one [ 840.722239][T15524] geneve3: entered allmulticast mode [ 840.730274][T15524] bond3: (slave geneve3): Enslaving as an active interface with an up link [ 840.939966][ T5617] Bluetooth: hci6: command 0xfc11 tx timeout [ 840.939977][T15459] Bluetooth: hci6: Entering manufacturer mode failed (-110) [ 840.969166][T15458] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 841.028824][T15458] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 841.067154][T15458] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 841.115511][T15458] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 841.150987][T15458] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 841.170719][T15458] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 841.239529][T15458] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 841.304370][T15458] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 841.461876][ T30] audit: type=1400 audit(1779636667.080:2222): avc: denied { read write } for pid=15549 comm="syz.2.2600" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 841.530755][ T30] audit: type=1400 audit(1779636667.098:2223): avc: denied { open } for pid=15549 comm="syz.2.2600" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 841.564234][T15511] tmpfs: Bad value for 'mpol' [ 841.616718][T15458] 8021q: adding VLAN 0 to HW filter on device bond0 [ 841.638303][ T30] audit: type=1400 audit(1779636667.108:2224): avc: denied { ioctl } for pid=15549 comm="syz.2.2600" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 841.818640][T15459] Bluetooth: hci5: command tx timeout [ 842.083049][T15458] 8021q: adding VLAN 0 to HW filter on device team0 [ 842.127681][ T5815] usb 1-1: USB disconnect, device number 65 [ 842.132527][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 842.140803][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 842.151018][ T5815] qcserial 1-1:0.2: device disconnected [ 842.199776][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 842.206963][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 842.221540][ T30] audit: type=1400 audit(1779636667.782:2225): avc: denied { egress } for pid=5773 comm="kworker/1:6" daddr=ff02::16 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 842.275955][ T30] audit: type=1400 audit(1779636667.791:2226): avc: denied { sendto } for pid=5773 comm="kworker/1:6" daddr=ff02::16 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 843.714400][T15458] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 843.960380][ T30] audit: type=1400 audit(1779636669.410:2227): avc: denied { getopt } for pid=15586 comm="syz.5.2607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 844.016040][T15459] Bluetooth: hci5: command tx timeout [ 844.242387][T15590] lo speed is unknown, defaulting to 1000 [ 844.258476][T15590] lo speed is unknown, defaulting to 1000 [ 844.660344][ T30] audit: type=1400 audit(1779636670.065:2228): avc: denied { relabelfrom } for pid=15584 comm="syz.1.2606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 844.770150][ T30] audit: type=1400 audit(1779636670.074:2229): avc: denied { relabelto } for pid=15584 comm="syz.1.2606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 844.790153][ T30] audit: type=1400 audit(1779636670.074:2230): avc: denied { attach_queue } for pid=15584 comm="syz.1.2606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 844.812543][T15458] veth0_vlan: entered promiscuous mode [ 845.917534][T15458] veth1_vlan: entered promiscuous mode [ 846.577316][T15459] Bluetooth: hci5: command tx timeout [ 846.628968][T15458] veth0_macvtap: entered promiscuous mode [ 846.650391][T15458] veth1_macvtap: entered promiscuous mode [ 846.698593][T15458] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 846.721133][ T9] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 846.741522][T15458] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 846.766215][ T36] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 846.776269][ T36] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 846.785984][ T36] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 846.797363][ T36] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 846.879652][ T9] usb 1-1: device descriptor read/64, error -71 [ 847.671551][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 847.741495][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 847.766455][ T9] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 849.211172][ T30] audit: type=1400 audit(1779636674.323:2231): avc: denied { map } for pid=15622 comm="syz.0.2614" path="/proc/1619/net/xfrm_stat" dev="proc" ino=4026532826 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 849.462067][T15620] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 849.470646][T15620] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 849.490151][ T30] audit: type=1400 audit(1779636674.585:2232): avc: denied { mounton } for pid=15458 comm="syz-executor" path="/root/syzkaller.kFkL8L/syz-tmp" dev="sda1" ino=2050 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 849.599266][ T30] audit: type=1400 audit(1779636674.678:2233): avc: denied { mounton } for pid=15458 comm="syz-executor" path="/root/syzkaller.kFkL8L/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 849.903595][ T30] audit: type=1400 audit(1779636674.678:2234): avc: denied { mounton } for pid=15458 comm="syz-executor" path="/root/syzkaller.kFkL8L/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=57701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 849.999839][T15635] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2617'. [ 850.049248][ T30] audit: type=1400 audit(1779636674.968:2235): avc: denied { mounton } for pid=15458 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 850.125507][ T30] audit: type=1400 audit(1779636674.968:2236): avc: denied { mount } for pid=15458 comm="syz-executor" name="/" dev="gadgetfs" ino=7089 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 850.208275][T15639] netlink: 277 bytes leftover after parsing attributes in process `syz.0.2617'. [ 851.105175][T15657] FAULT_INJECTION: forcing a failure. [ 851.105175][T15657] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 851.119256][T15657] CPU: 0 UID: 0 PID: 15657 Comm: syz.5.2622 Tainted: G L syzkaller #0 PREEMPT(full) [ 851.119287][T15657] Tainted: [L]=SOFTLOCKUP [ 851.119294][T15657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 851.119304][T15657] Call Trace: [ 851.119311][T15657] [ 851.119317][T15657] dump_stack_lvl+0x100/0x190 [ 851.119343][T15657] should_fail_ex.cold+0x5/0xa [ 851.119369][T15657] _copy_from_iter+0x1f4/0x1690 [ 851.119401][T15657] ? __asan_memset+0x23/0x50 [ 851.119428][T15657] ? __pfx__copy_from_iter+0x10/0x10 [ 851.119454][T15657] ? __pfx___alloc_skb+0x10/0x10 [ 851.119481][T15657] netlink_sendmsg+0x808/0xda0 [ 851.119512][T15657] ? __pfx_netlink_sendmsg+0x10/0x10 [ 851.119533][T15657] ? __might_fault+0x40/0x140 [ 851.119566][T15657] ____sys_sendmsg+0x9e1/0xb70 [ 851.119588][T15657] ? __pfx_netlink_sendmsg+0x10/0x10 [ 851.119614][T15657] ? __pfx_____sys_sendmsg+0x10/0x10 [ 851.119649][T15657] ___sys_sendmsg+0x190/0x1e0 [ 851.119676][T15657] ? __pfx____sys_sendmsg+0x10/0x10 [ 851.119734][T15657] __sys_sendmsg+0x170/0x220 [ 851.119755][T15657] ? __pfx___sys_sendmsg+0x10/0x10 [ 851.119784][T15657] ? rcu_is_watching+0x12/0xc0 [ 851.119816][T15657] do_syscall_64+0x10b/0xf80 [ 851.119842][T15657] ? clear_bhb_loop+0x40/0x90 [ 851.119863][T15657] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 851.119882][T15657] RIP: 0033:0x7f920cf9ce59 [ 851.119898][T15657] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 851.119915][T15657] RSP: 002b:00007f920dd76028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 851.119933][T15657] RAX: ffffffffffffffda RBX: 00007f920d215fa0 RCX: 00007f920cf9ce59 [ 851.119945][T15657] RDX: 000000000000c800 RSI: 0000200000000080 RDI: 0000000000000003 [ 851.119957][T15657] RBP: 00007f920dd76090 R08: 0000000000000000 R09: 0000000000000000 [ 851.119968][T15657] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 851.119978][T15657] R13: 00007f920d216038 R14: 00007f920d215fa0 R15: 00007fff878dccb8 [ 851.120003][T15657] [ 851.229860][T15658] netlink: 84 bytes leftover after parsing attributes in process `syz.6.2623'. [ 851.377511][ T30] audit: type=1400 audit(1779636676.353:2237): avc: denied { lock } for pid=15659 comm="syz.1.2625" path="socket:[57749]" dev="sockfs" ino=57749 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 852.322405][ T30] audit: type=1400 audit(1779636676.672:2238): avc: denied { block_suspend } for pid=15661 comm="syz.0.2624" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 853.098802][ T30] audit: type=1400 audit(1779636677.851:2239): avc: denied { create } for pid=15676 comm="syz.6.2626" name="#2b" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 853.565118][ T30] audit: type=1400 audit(1779636677.851:2240): avc: denied { link } for pid=15676 comm="syz.6.2626" name="#2b" dev="tmpfs" ino=43 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 854.163978][T15693] netlink: 6968 bytes leftover after parsing attributes in process `syz.6.2631'. [ 854.488789][T15700] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2633'. [ 854.733918][T15700] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(12) [ 854.740553][T15700] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 854.748421][T15700] vhci_hcd vhci_hcd.0: Device attached [ 854.970554][ T9] usb 2-1: new full-speed USB device number 58 using dummy_hcd [ 855.140317][ T24] usb 37-1: new high-speed USB device number 2 using vhci_hcd [ 856.627521][T15715] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 857.441790][ T9] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 857.467980][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 857.555845][ T9] usb 2-1: config 0 descriptor?? [ 857.585881][ T9] usb 2-1: can't set config #0, error -71 [ 857.597062][ T9] usb 2-1: USB disconnect, device number 58 [ 858.048508][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 858.223531][T15731] IPVS: set_ctl: invalid protocol: 43 100.1.1.2:20004 [ 858.623446][ T5773] usb 6-1: new full-speed USB device number 36 using dummy_hcd [ 858.714291][T15702] vhci_hcd: connection reset by peer [ 858.727280][ T48] vhci_hcd vhci_hcd.2: stop threads [ 858.738425][ T48] vhci_hcd vhci_hcd.2: release socket [ 858.744111][ T48] vhci_hcd vhci_hcd.2: disconnect device [ 858.762567][ T5773] usb 6-1: device descriptor read/64, error -71 [ 859.031542][ T5773] usb 6-1: new full-speed USB device number 37 using dummy_hcd [ 859.189746][ T5773] usb 6-1: device descriptor read/64, error -71 [ 859.329390][ T5773] usb usb6-port1: attempt power cycle [ 859.706082][ T5773] usb 6-1: new full-speed USB device number 38 using dummy_hcd [ 859.784436][ T5773] usb 6-1: device descriptor read/8, error -71 [ 860.055754][ T5773] usb 6-1: new full-speed USB device number 39 using dummy_hcd [ 860.139565][ T5773] usb 6-1: device descriptor read/8, error -71 [ 860.278537][ T5773] usb usb6-port1: unable to enumerate USB device [ 860.576995][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 860.577011][ T30] audit: type=1400 audit(1779636684.963:2242): avc: denied { read } for pid=15760 comm="syz.2.2650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 860.630802][T15764] netlink: 'syz.6.2651': attribute type 3 has an invalid length. [ 860.659596][T15759] lo speed is unknown, defaulting to 1000 [ 860.675288][ T24] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 860.687786][T15759] lo speed is unknown, defaulting to 1000 [ 860.707248][ T9972] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 861.097067][T15771] netlink: 72 bytes leftover after parsing attributes in process `syz.6.2651'. [ 861.149305][T15770] comedi comedi3: comedi_test: 10 microvolt, 2046 microsecond waveform attached [ 861.773349][T15773] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 861.787249][T15774] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 861.861347][ T9] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 861.971503][T15779] iommufd_mock iommufd_mock2: Adding to iommu group 2 [ 861.996702][ T9972] usb 1-1: Using ep0 maxpacket: 8 [ 862.016284][T15774] iommufd_mock iommufd_mock3: Adding to iommu group 3 [ 862.215390][ T9972] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 862.235146][ T9972] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 862.270559][ T9972] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 862.290576][ T30] audit: type=1400 audit(1779636686.563:2243): avc: denied { write } for pid=15781 comm="syz.6.2655" lport=57762 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 862.318477][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 862.329541][ T9972] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 862.344580][ T9] usb 2-1: New USB device found, idVendor=048d, idProduct=8595, bcdDevice= 0.00 [ 862.358398][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 862.372682][ T9972] usb 1-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 862.384223][ T9972] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 862.398426][ T9] usb 2-1: config 0 descriptor?? [ 862.407066][ T9972] usb 1-1: Product: syz [ 862.421223][ T9972] usb 1-1: Manufacturer: syz [ 862.455547][ T9972] usb 1-1: SerialNumber: syz [ 862.482715][ T9972] usb 1-1: config 0 descriptor?? [ 862.493617][T15757] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 862.698182][ T30] audit: type=1400 audit(1779636686.947:2244): avc: denied { mount } for pid=15786 comm="syz.2.2657" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 862.700847][T15788] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2657'. [ 862.755669][ T30] audit: type=1400 audit(1779636686.993:2245): avc: denied { mounton } for pid=15786 comm="syz.2.2657" path="/521/file0" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 862.806041][ T9972] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 862.817989][ T9972] input: Griffin SoundKnob as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input39 [ 862.874623][ C0] powermate: config urb returned -71 [ 862.880364][ C0] powermate: config urb returned -71 [ 862.882204][T15759] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 862.886727][ C0] powermate: config urb returned -71 [ 862.899929][ C0] powermate: config urb returned -71 [ 862.910322][T15759] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 862.912297][ T9972] usb 1-1: USB disconnect, device number 68 [ 862.918159][ C0] powermate 1-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 863.064136][ T9] hid_parser_main: 283 callbacks suppressed [ 863.064152][ T9] itetech 0003:048D:8595.001E: unknown main item tag 0x0 [ 863.082598][ T9] itetech 0003:048D:8595.001E: unknown main item tag 0x4 [ 863.191174][T15803] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 863.995964][ T9] itetech 0003:048D:8595.001E: unknown main item tag 0x0 [ 864.003460][ T9] itetech 0003:048D:8595.001E: unknown main item tag 0x0 [ 864.011505][ T9] itetech 0003:048D:8595.001E: unknown main item tag 0x0 [ 864.018668][ T9] itetech 0003:048D:8595.001E: unknown main item tag 0x2 [ 864.025868][ T9] itetech 0003:048D:8595.001E: unknown main item tag 0x0 [ 864.034372][ T9] itetech 0003:048D:8595.001E: unknown main item tag 0x0 [ 864.041599][ T9] itetech 0003:048D:8595.001E: unknown main item tag 0x0 [ 864.048728][ T9] itetech 0003:048D:8595.001E: unknown main item tag 0x0 [ 864.055916][ T9] itetech 0003:048D:8595.001E: item fetching failed at offset 40/41 [ 864.064357][ T9] itetech 0003:048D:8595.001E: probe with driver itetech failed with error -22 [ 864.127157][ T9] usb 2-1: USB disconnect, device number 59 [ 864.206509][ T30] audit: type=1400 audit(1779636688.360:2246): avc: denied { unmount } for pid=5609 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 864.354927][T15815] program syz.0.2662 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 864.553777][T15822] FAULT_INJECTION: forcing a failure. [ 864.553777][T15822] name failslab, interval 1, probability 0, space 0, times 0 [ 864.566661][T15822] CPU: 0 UID: 0 PID: 15822 Comm: syz.5.2665 Tainted: G L syzkaller #0 PREEMPT(full) [ 864.566691][T15822] Tainted: [L]=SOFTLOCKUP [ 864.566698][T15822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 864.566708][T15822] Call Trace: [ 864.566716][T15822] [ 864.566724][T15822] dump_stack_lvl+0x100/0x190 [ 864.566752][T15822] should_fail_ex.cold+0x5/0xa [ 864.566779][T15822] ? tomoyo_realpath_from_path+0xb6/0x690 [ 864.566807][T15822] should_failslab+0xc2/0x120 [ 864.566829][T15822] __kmalloc_noprof+0xe0/0x850 [ 864.566855][T15822] ? kfree+0x1dd/0x6c0 [ 864.566883][T15822] tomoyo_realpath_from_path+0xb6/0x690 [ 864.566916][T15822] tomoyo_path_number_perm+0x23c/0x580 [ 864.566939][T15822] ? tomoyo_path_number_perm+0x22e/0x580 [ 864.566963][T15822] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 864.567011][T15822] ? find_held_lock+0x2b/0x80 [ 864.567033][T15822] ? __fget_files+0x215/0x3d0 [ 864.567055][T15822] ? hook_file_ioctl_common+0x149/0x410 [ 864.567071][T15822] ? __fget_files+0x215/0x3d0 [ 864.567099][T15822] ? __fget_files+0x21f/0x3d0 [ 864.567127][T15822] security_file_ioctl+0xd3/0x230 [ 864.567153][T15822] __x64_sys_ioctl+0xb7/0x210 [ 864.567176][T15822] do_syscall_64+0x10b/0xf80 [ 864.567203][T15822] ? clear_bhb_loop+0x40/0x90 [ 864.567226][T15822] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 864.567245][T15822] RIP: 0033:0x7f920cf9ce59 [ 864.567261][T15822] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 864.567279][T15822] RSP: 002b:00007f920b1d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 864.567296][T15822] RAX: ffffffffffffffda RBX: 00007f920d216180 RCX: 00007f920cf9ce59 [ 864.567309][T15822] RDX: 0000200000000340 RSI: 00000000c01c64a3 RDI: 000000000000000b [ 864.567320][T15822] RBP: 00007f920b1d5090 R08: 0000000000000000 R09: 0000000000000000 [ 864.567331][T15822] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 864.567342][T15822] R13: 00007f920d216218 R14: 00007f920d216180 R15: 00007fff878dccb8 [ 864.567368][T15822] [ 864.567395][T15822] ERROR: Out of memory at tomoyo_realpath_from_path. [ 865.482930][T15813] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 865.503181][T15813] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 866.418906][ T9972] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 866.606030][ T9972] usb 6-1: Using ep0 maxpacket: 16 [ 866.613196][ T9972] usb 6-1: config index 0 descriptor too short (expected 16456, got 72) [ 866.623348][ T9972] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 866.632649][ T9972] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 866.641127][ T9972] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 866.650131][ T9972] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 866.662912][ T9972] usb 6-1: config 0 has no interface number 0 [ 866.679087][ T9972] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 866.690860][ T9972] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 866.701297][ T9972] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 866.712044][ T9972] usb 6-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 866.725730][ T9972] usb 6-1: config 0 interface 125 has no altsetting 0 [ 866.735958][ T9972] usb 6-1: config 0 interface 125 has no altsetting 2 [ 866.746660][ T9972] usb 6-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 866.756177][ T9972] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 866.764520][ T9972] usb 6-1: Product: syz [ 866.769202][ T9972] usb 6-1: Manufacturer: syz [ 866.773989][ T9972] usb 6-1: SerialNumber: syz [ 866.781202][ T9972] usb 6-1: config 0 descriptor?? [ 866.794631][ T9972] usb 6-1: selecting invalid altsetting 2 [ 866.798301][ T24] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 866.971283][ T24] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 866.980607][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 867.003985][ T24] usb 2-1: config 0 descriptor?? [ 867.525675][ T24] usb 2-1: Cannot read MAC address [ 867.540733][ T24] MOSCHIP usb-ethernet driver 2-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 867.577168][ T24] usb 2-1: USB disconnect, device number 60 [ 867.706580][ T9] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 867.868886][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 867.880203][ T9] usb 1-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 867.889321][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 867.899993][ T9] usb 1-1: config 0 descriptor?? [ 867.905718][T15868] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 867.952449][ T9972] get_1284_register timeout [ 867.957167][ C0] usb 6-1: async_complete: urb error -104 [ 867.963000][ C0] usb 6-1: async_complete: urb error -104 [ 867.968800][ C0] usb 6-1: async_complete: urb error -104 [ 868.395624][ T9] hid-picolcd 0003:04D8:C002.001F: item fetching failed at offset 318/483 [ 868.435618][ T9] hid-picolcd 0003:04D8:C002.001F: device report parse failed [ 868.461193][ T9] hid-picolcd 0003:04D8:C002.001F: probe with driver hid-picolcd failed with error -22 [ 868.691641][T15868] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 868.713965][T15868] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 869.401749][ T30] audit: type=1400 audit(1779636693.217:2247): avc: denied { ioctl } for pid=15888 comm="syz.6.2685" path="/dev/binderfs/binder0" dev="binder" ino=15 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 869.436222][T15889] binder: BINDER_SET_CONTEXT_MGR already set [ 869.455352][T15889] binder: 15888:15889 ioctl 4018620d 200000004a80 returned -16 [ 869.485538][ T30] audit: type=1400 audit(1779636693.217:2248): avc: denied { set_context_mgr } for pid=15888 comm="syz.6.2685" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 869.529414][ T30] audit: type=1400 audit(1779636693.254:2249): avc: denied { map } for pid=15888 comm="syz.6.2685" path="/dev/binderfs/binder0" dev="binder" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 869.783002][T15898] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 869.794240][T15898] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 869.821058][T15898] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 869.830493][T15898] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 869.845411][ T30] audit: type=1400 audit(1779636693.638:2250): avc: denied { bind } for pid=15897 comm="syz.5.2688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 869.873771][ T30] audit: type=1400 audit(1779636693.656:2251): avc: denied { listen } for pid=15897 comm="syz.5.2688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 870.004348][ T24] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 870.275980][ T24] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 870.288998][ T24] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 870.327583][ T24] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 870.386357][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 870.834215][T15894] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 870.868168][ T24] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 870.922591][ T24] usb 2-1: invalid MIDI out EP 0 [ 870.931075][ T5773] usb 1-1: USB disconnect, device number 69 [ 871.255953][T15914] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 871.316555][T15914] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 872.000347][ T24] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 872.029885][ T24] usb 2-1: USB disconnect, device number 61 [ 872.146296][T15931] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2700'. [ 872.169261][T15931] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2700'. [ 872.286447][T15923] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 872.330061][T15938] binder: 15937:15938 ioctl c0306201 200000000080 returned -14 [ 872.353253][T15938] binder: 15937:15938 ioctl c0306201 2000000003c0 returned -14 [ 872.388752][ T30] audit: type=1400 audit(1779636696.024:2252): avc: denied { call } for pid=15937 comm="syz.6.2704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 872.619916][T15946] bridge_slave_0: left allmulticast mode [ 872.651320][T15946] bridge_slave_0: left promiscuous mode [ 872.671585][T15946] bridge0: port 1(bridge_slave_0) entered disabled state [ 872.838658][T15946] batman_adv: batadv0: Adding interface: bridge_slave_0 [ 872.857759][T15946] batman_adv: batadv0: The MTU of interface bridge_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 872.900973][T15946] batman_adv: batadv0: Interface activated: bridge_slave_0 [ 873.105012][T15946] SELinux: security_context_str_to_sid (5] S9q#) failed with errno=-22 [ 873.130883][T15946] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2707'. [ 873.140106][T15946] openvswitch: netlink: Missing key (keys=40, expected=80) [ 873.195647][ T9] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 873.245163][T15948] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=39 sclass=netlink_route_socket pid=15948 comm=syz.6.2707 [ 873.342967][T15944] lo speed is unknown, defaulting to 1000 [ 873.386121][T15944] lo speed is unknown, defaulting to 1000 [ 873.428527][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 873.453596][ T9] usb 2-1: New USB device found, idVendor=048d, idProduct=8595, bcdDevice= 0.00 [ 873.478453][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 873.512561][ T9] usb 2-1: config 0 descriptor?? [ 873.678312][T15960] netlink: 'syz.6.2710': attribute type 10 has an invalid length. [ 873.737441][T15960] team0 (unregistering): Port device team_slave_0 removed [ 873.783573][T15960] team0 (unregistering): Port device team_slave_1 removed [ 873.814833][ T30] audit: type=1400 audit(1779636697.353:2253): avc: denied { append } for pid=15967 comm="syz.0.2713" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 873.896155][ T30] audit: type=1400 audit(1779636697.353:2254): avc: denied { ioctl } for pid=15967 comm="syz.0.2713" path="socket:[59538]" dev="sockfs" ino=59538 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 874.468941][T15974] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 874.607973][ T30] audit: type=1400 audit(1779636698.092:2255): avc: denied { append } for pid=15976 comm="syz.2.2716" name="001" dev="devtmpfs" ino=746 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 875.060391][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 875.066585][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 875.077606][ T9] usb 2-1: USB disconnect, device number 62 [ 875.272324][ T9972] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 875.411248][ T9972] usb 1-1: device descriptor read/64, error -71 [ 875.611572][T15985] veth0_to_team: entered promiscuous mode [ 875.619991][T15985] veth0_to_team: left promiscuous mode [ 875.667663][ T9972] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 875.826917][ T30] audit: type=1400 audit(1779636699.206:2256): avc: denied { setattr } for pid=15988 comm="syz.5.2721" name="SCTPv6" dev="sockfs" ino=59659 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 875.861353][ T9972] usb 1-1: device descriptor read/64, error -71 [ 875.977962][ T9972] usb usb1-port1: attempt power cycle [ 876.123979][ T30] audit: type=1400 audit(1779636699.505:2257): avc: denied { write } for pid=16003 comm="syz.5.2726" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 876.192768][ T30] audit: type=1400 audit(1779636699.505:2258): avc: denied { ioctl } for pid=16003 comm="syz.5.2726" path="/329/file0/file0" dev="fuse" ino=64 ioctlcmd=0x4d18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 876.337017][T16011] netlink: 'syz.5.2726': attribute type 1 has an invalid length. [ 876.364079][ T30] audit: type=1400 audit(1779636699.617:2259): avc: denied { read } for pid=16005 comm="syz.1.2727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 876.486011][T16011] netlink: 'syz.5.2726': attribute type 2 has an invalid length. [ 876.571637][T16011] netlink: 'syz.5.2726': attribute type 1 has an invalid length. [ 876.668274][ T9972] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 877.198883][ T5802] usb 3-1: new full-speed USB device number 61 using dummy_hcd [ 877.490359][ T5802] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 877.538367][ T9972] usb 1-1: device descriptor read/8, error -71 [ 877.542403][ T5802] usb 3-1: New USB device found, idVendor=3344, idProduct=22f0, bcdDevice=ef.4d [ 877.571449][ T5802] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 877.591155][ T5802] usb 3-1: Product: syz [ 877.595674][ T5802] usb 3-1: Manufacturer: syz [ 877.625678][ T5802] usb 3-1: SerialNumber: syz [ 877.804877][ T9972] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 877.826684][ T9972] usb 1-1: device descriptor read/8, error -71 [ 877.862386][ T5802] usb 3-1: selecting invalid altsetting 1 [ 877.944090][ T9972] usb usb1-port1: unable to enumerate USB device [ 878.076832][ T5802] LME2510(C): Firmware Status: 00 00 00 00 00 00 [ 878.076890][ T5802] dvb_usb_lmedm04 3-1:2.0: probe with driver dvb_usb_lmedm04 failed with error -22 [ 879.809292][T16013] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 879.835828][T16013] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 879.865115][T16013] ve: left promiscuous mode [ 879.927344][ T24] syz1: Port: 1 Link DOWN [ 879.939762][ T5773] lo speed is unknown, defaulting to 1000 [ 879.945246][ T704] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 879.950451][ T5773] syz0: Port: 1 Link DOWN [ 880.412611][ T704] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 880.421651][ T704] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 880.443254][ T24] usb 3-1: USB disconnect, device number 61 [ 880.446168][ T704] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 880.470669][ T704] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 880.479758][ T9] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 880.502318][ T704] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 880.552165][ T704] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 880.565713][ T704] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 880.591361][T16020] lo speed is unknown, defaulting to 1000 [ 880.615102][T16028] lo speed is unknown, defaulting to 1000 [ 880.629328][T16020] lo speed is unknown, defaulting to 1000 [ 880.681254][T16028] lo speed is unknown, defaulting to 1000 [ 880.710467][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 880.730992][ T9] usb 1-1: New USB device found, idVendor=048d, idProduct=8595, bcdDevice= 0.00 [ 880.754526][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 880.792323][ T9] usb 1-1: config 0 descriptor?? [ 880.965701][ T30] audit: type=1400 audit(1779636704.044:2260): avc: denied { write } for pid=16034 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 881.849645][T16032] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 882.120970][T16032] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 882.132679][ T5802] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 882.171114][ T30] audit: type=1400 audit(1779636705.148:2261): avc: denied { write } for pid=16070 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 882.243846][ T30] audit: type=1400 audit(1779636705.148:2262): avc: denied { map } for pid=16071 comm="syz.2.2743" path="socket:[58936]" dev="sockfs" ino=58936 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 882.325043][ T5802] usb 2-1: device descriptor read/64, error -71 [ 882.602901][ T5802] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 882.861838][ T5802] usb 2-1: device descriptor read/64, error -71 [ 883.323800][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 883.338742][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 883.345617][ T30] audit: type=1400 audit(1779636706.262:2263): avc: denied { write } for pid=16077 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 883.379242][ T9] usb 1-1: USB disconnect, device number 74 [ 883.381595][ T5802] usb usb2-port1: attempt power cycle [ 883.619321][ T30] audit: type=1400 audit(1779636706.430:2264): avc: denied { ioctl } for pid=16106 comm="syz.6.2749" path="/dev/vhost-net" dev="devtmpfs" ino=1273 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 883.789122][ T5802] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 883.888937][ T5802] usb 2-1: device descriptor read/8, error -71 [ 884.003639][ T24] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 884.173862][ T5802] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 884.355443][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 884.467489][ T30] audit: type=1400 audit(1779636706.458:2265): avc: denied { mount } for pid=16106 comm="syz.6.2749" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 884.490145][ T24] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 884.535002][ T30] audit: type=1400 audit(1779636706.589:2266): avc: denied { ioctl } for pid=16106 comm="syz.6.2749" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9374 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 884.535880][ T5802] usb 2-1: device descriptor read/8, error -71 [ 884.573432][ T30] audit: type=1400 audit(1779636707.057:2267): avc: denied { write } for pid=16111 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 884.625672][ T24] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 884.682661][ T24] usb 3-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 884.711862][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 884.747187][ T24] usb 3-1: Product: syz [ 884.753202][ T30] audit: type=1400 audit(1779636707.590:2268): avc: denied { unmount } for pid=15458 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 884.764537][ T24] usb 3-1: Manufacturer: syz [ 884.854208][ T5802] usb usb2-port1: unable to enumerate USB device [ 884.887035][ T24] usb 3-1: SerialNumber: syz [ 884.939372][ T24] usb 3-1: config 0 descriptor?? [ 884.978428][ T24] uvcvideo 3-1:0.0: Found UVC 34.00 device syz (8086:0b5b) [ 885.002391][ T24] uvcvideo 3-1:0.0: No valid video chain found. [ 885.173876][T16135] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2755'. [ 885.588852][T16144] 9p: Bad value for 'port' [ 886.424196][ T30] audit: type=1400 audit(1779636709.153:2269): avc: denied { write } for pid=16120 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 887.035806][ T30] audit: type=1400 audit(1779636709.724:2270): avc: denied { write } for pid=16154 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 887.180096][T16158] netlink: 'syz.1.2760': attribute type 12 has an invalid length. [ 887.405007][ T24] usb 3-1: USB disconnect, device number 62 [ 888.951474][T16171] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 889.000950][T16171] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 890.177131][T16189] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2768'. [ 890.606136][ T30] audit: type=1400 audit(1779636713.055:2271): avc: denied { map } for pid=16180 comm="syz.2.2768" path="socket:[59150]" dev="sockfs" ino=59150 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 890.774475][T16193] tmpfs: Bad value for 'mpol' [ 891.032946][T16195] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2772'. [ 894.465870][ T30] audit: type=1400 audit(1779636716.677:2272): avc: denied { append } for pid=16229 comm="syz.1.2785" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 894.498187][ T30] audit: type=1400 audit(1779636716.696:2273): avc: denied { open } for pid=16232 comm="syz.2.2786" path="/dev/ptyq8" dev="devtmpfs" ino=127 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 894.996555][ T30] audit: type=1400 audit(1779636717.098:2274): avc: denied { ioctl } for pid=16232 comm="syz.2.2786" path="/dev/ptyq8" dev="devtmpfs" ino=127 ioctlcmd=0x5420 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 896.826563][T16266] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2796'. [ 897.820219][T16284] netlink: 324 bytes leftover after parsing attributes in process `syz.5.2801'. [ 898.448264][T16301] kAFS: unable to lookup cell '({^@' [ 898.456522][T16301] netlink: 'syz.5.2808': attribute type 1 has an invalid length. [ 898.480582][T16301] 8021q: adding VLAN 0 to HW filter on device bond2 [ 898.585847][T16307] Invalid ELF header type: 3 != 1 [ 899.554137][T16301] 8021q: adding VLAN 0 to HW filter on device bond2 [ 899.605281][T16301] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 899.616375][T16301] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 899.699765][T16313] No such timeout policy "syz1" [ 900.244283][ T30] audit: type=1400 audit(1779636722.011:2275): avc: denied { read } for pid=16316 comm="syz.5.2812" name="cgroup.procs" dev="cgroup" ino=468 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object" [ 900.270031][ T30] audit: type=1400 audit(1779636722.011:2276): avc: denied { open } for pid=16316 comm="syz.5.2812" path="/syzcgroup/cpu/syz5/cgroup.procs" dev="cgroup" ino=468 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object" [ 901.820578][ T30] audit: type=1400 audit(1779636723.555:2277): avc: denied { read } for pid=16331 comm="syz.5.2818" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 901.852034][ T30] audit: type=1400 audit(1779636723.555:2278): avc: denied { open } for pid=16331 comm="syz.5.2818" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 902.917515][ T5802] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 903.141437][ T5802] usb 2-1: Using ep0 maxpacket: 8 [ 904.702814][T16359] batman_adv: batadv0: Interface deactivated: bridge_slave_0 [ 904.710438][T16359] batman_adv: batadv0: Removing interface: bridge_slave_0 [ 904.800772][T16359] bridge_slave_1: left allmulticast mode [ 904.806706][T16359] bridge_slave_1: left promiscuous mode [ 904.815196][T16359] bridge0: port 2(bridge_slave_1) entered disabled state [ 904.835675][T16359] bond0: (slave bond_slave_0): Releasing backup interface [ 904.846350][T16359] bond0: (slave bond_slave_1): Releasing backup interface [ 904.905182][ T5802] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 905.010464][ T30] audit: type=1400 audit(1779636726.512:2279): avc: denied { connect } for pid=16363 comm="syz.2.2826" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 905.032712][ T5802] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 905.106310][ T5802] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 905.117292][ T5802] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 905.131242][ T5802] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 905.150718][ T5802] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 905.290093][T16359] team0: Port device team_slave_0 removed [ 905.293978][ T5802] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 905.306978][T16359] team0: Port device team_slave_1 removed [ 905.320968][ T5802] usb 2-1: can't set config #16, error -71 [ 905.322188][T16359] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 905.329350][ T5802] usb 2-1: USB disconnect, device number 67 [ 905.340330][T16359] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 905.365576][T16359] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 905.373098][T16359] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 905.418671][T16359] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 905.448843][T16361] team0: Mode changed to "activebackup" [ 905.602858][T16365] vlan0: entered promiscuous mode [ 905.636873][T16365] team0: Port device vlan0 added [ 906.024516][T16368] tipc: Enabled bearer , priority 0 [ 906.179487][ T30] audit: type=1400 audit(1779636727.635:2280): avc: denied { bind } for pid=16380 comm="syz.1.2830" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 906.212533][ T30] audit: type=1400 audit(1779636727.673:2281): avc: denied { listen } for pid=16380 comm="syz.1.2830" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 906.233539][ T30] audit: type=1400 audit(1779636727.691:2282): avc: denied { read } for pid=16380 comm="syz.1.2830" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 906.680248][ T30] audit: type=1400 audit(1779636728.094:2283): avc: denied { write } for pid=16385 comm="syz.0.2832" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 906.965997][ T30] audit: type=1400 audit(1779636728.197:2284): avc: denied { watch } for pid=16392 comm="syz.2.2835" path="/564/file0" dev="tmpfs" ino=2994 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 907.024673][ T30] audit: type=1400 audit(1779636728.197:2285): avc: denied { watch_sb watch_reads } for pid=16392 comm="syz.2.2835" path="/564/file0" dev="tmpfs" ino=2994 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 907.566144][ T30] audit: type=1400 audit(1779636728.936:2286): avc: denied { name_bind } for pid=16412 comm="syz.1.2840" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 907.748569][T16420] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 907.910081][T16420] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 907.922620][T16420] overlayfs: failed to look up (tracing) for ino (-66) [ 908.202364][ T30] audit: type=1400 audit(1779636729.095:2287): avc: denied { mount } for pid=16408 comm="syz.0.2838" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 909.085432][ T30] audit: type=1400 audit(1779636730.358:2288): avc: denied { accept } for pid=16423 comm="syz.5.2842" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 909.427060][T16431] netlink: 'syz.2.2846': attribute type 2 has an invalid length. [ 909.434948][T16431] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2846'. [ 909.475526][ T30] audit: type=1400 audit(1779636730.695:2289): avc: denied { setattr } for pid=16429 comm="syz.2.2846" name="NETLINK" dev="sockfs" ino=60739 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 910.793846][T16443] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 910.820660][T16443] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 911.856794][ T5802] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 912.812390][ T5802] usb 3-1: Using ep0 maxpacket: 32 [ 912.819201][ T5802] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 912.828118][ T5802] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 912.837574][ T5802] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 912.847268][ T5802] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 912.857609][ T5802] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 912.870987][ T5802] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 912.902499][ T5802] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 912.912693][ T5802] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 912.919844][T15459] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 912.926083][ T5617] Bluetooth: hci4: command 0x1003 tx timeout [ 912.987097][T16468] lo speed is unknown, defaulting to 1000 [ 912.993705][T16468] lo speed is unknown, defaulting to 1000 [ 913.051052][ T5802] usb 3-1: config 0 descriptor?? [ 913.826587][ T5802] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 63 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 914.041597][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 914.041617][ T30] audit: type=1400 audit(1779636734.991:2295): avc: denied { read write } for pid=16460 comm="syz.2.2855" name="lp0" dev="devtmpfs" ino=3696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 914.343023][ T30] audit: type=1400 audit(1779636734.991:2296): avc: denied { open } for pid=16460 comm="syz.2.2855" path="/dev/usb/lp0" dev="devtmpfs" ino=3696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 914.558713][T16468] Set syz1 is full, maxelem 65536 reached [ 914.582537][T16477] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 914.643096][ T989] usb 3-1: USB disconnect, device number 63 [ 914.666923][ T989] usblp0: removed [ 914.700862][ T30] audit: type=1326 audit(1779636735.515:2297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16474 comm="syz.5.2859" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f920cf9ce59 code=0x7ffc0000 [ 914.750958][ T30] audit: type=1326 audit(1779636735.515:2298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16474 comm="syz.5.2859" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f920cf9ce59 code=0x7ffc0000 [ 914.786705][ T30] audit: type=1326 audit(1779636735.515:2299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16474 comm="syz.5.2859" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f920cf9ce59 code=0x7ffc0000 [ 914.824742][ T30] audit: type=1326 audit(1779636735.515:2300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16474 comm="syz.5.2859" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7f920cf9ce59 code=0x7ffc0000 [ 914.861497][ T30] audit: type=1326 audit(1779636735.524:2301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16474 comm="syz.5.2859" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f920cf9ce59 code=0x7ffc0000 [ 914.899024][ T30] audit: type=1326 audit(1779636735.524:2302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16474 comm="syz.5.2859" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f920cf9ce59 code=0x7ffc0000 [ 914.925908][ T30] audit: type=1326 audit(1779636735.524:2303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16474 comm="syz.5.2859" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f920cf9ce59 code=0x7ffc0000 [ 914.958480][ T30] audit: type=1326 audit(1779636735.524:2304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16474 comm="syz.5.2859" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f920cf9ce59 code=0x7ffc0000 [ 915.167107][T16484] [ 915.169483][T16484] ====================================================== [ 915.176483][T16484] WARNING: possible circular locking dependency detected [ 915.183496][T16484] syzkaller #0 Tainted: G L [ 915.189465][T16484] ------------------------------------------------------ [ 915.196546][T16484] syz.6.2863/16484 is trying to acquire lock: [ 915.202602][T16484] ffff88802aa7c8e8 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}, at: __flush_work+0x4ca/0xcb0 [ 915.214240][T16484] [ 915.214240][T16484] but task is already holding lock: [ 915.221592][T16484] ffff88802aa7cd60 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x3a5/0x620 [ 915.230638][T16484] [ 915.230638][T16484] which lock already depends on the new lock. [ 915.230638][T16484] [ 915.241116][T16484] [ 915.241116][T16484] the existing dependency chain (in reverse order) is: [ 915.250115][T16484] [ 915.250115][T16484] -> #1 (sk_lock-AF_SMC/1){+.+.}-{0:0}: [ 915.257828][T16484] lock_sock_nested+0x41/0xf0 [ 915.263026][T16484] smc_listen_out+0x1f5/0x4b0 [ 915.268226][T16484] smc_listen_work+0x767/0x50e0 [ 915.273578][T16484] process_one_work+0xa0e/0x1980 [ 915.279033][T16484] worker_thread+0x5ef/0xe50 [ 915.284126][T16484] kthread+0x370/0x450 [ 915.288696][T16484] ret_from_fork+0x72b/0xd50 [ 915.293788][T16484] ret_from_fork_asm+0x1a/0x30 [ 915.299057][T16484] [ 915.299057][T16484] -> #0 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}: [ 915.309193][T16484] __lock_acquire+0x14b8/0x2630 [ 915.314545][T16484] lock_acquire+0x1b1/0x370 [ 915.319644][T16484] __flush_work+0x4de/0xcb0 [ 915.324761][T16484] cancel_work_sync+0xd1/0xf0 [ 915.329948][T16484] smc_clcsock_release+0x5f/0xe0 [ 915.335392][T16484] __smc_release+0x5c2/0x880 [ 915.340571][T16484] smc_close_non_accepted+0xda/0x200 [ 915.346368][T16484] smc_close_active+0x4ff/0x1070 [ 915.351819][T16484] __smc_release+0x634/0x880 [ 915.356924][T16484] smc_release+0x1fc/0x620 [ 915.361842][T16484] __sock_release+0xb3/0x260 [ 915.366953][T16484] sock_close+0x1c/0x30 [ 915.371608][T16484] __fput+0x3ff/0xb50 [ 915.376094][T16484] task_work_run+0x150/0x240 [ 915.381184][T16484] exit_to_user_mode_loop+0x107/0x4f0 [ 915.387058][T16484] do_syscall_64+0x706/0xf80 [ 915.392153][T16484] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 915.398548][T16484] [ 915.398548][T16484] other info that might help us debug this: [ 915.398548][T16484] [ 915.408748][T16484] Possible unsafe locking scenario: [ 915.408748][T16484] [ 915.416172][T16484] CPU0 CPU1 [ 915.421511][T16484] ---- ---- [ 915.426851][T16484] lock(sk_lock-AF_SMC/1); [ 915.431341][T16484] lock((work_completion)(&new_smc->smc_listen_work)); [ 915.440770][T16484] lock(sk_lock-AF_SMC/1); [ 915.447776][T16484] lock((work_completion)(&new_smc->smc_listen_work)); [ 915.454686][T16484] [ 915.454686][T16484] *** DEADLOCK *** [ 915.454686][T16484] [ 915.462808][T16484] 3 locks held by syz.6.2863/16484: [ 915.467987][T16484] #0: ffff8880748bb240 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: __sock_release+0x86/0x260 [ 915.478580][T16484] #1: ffff88802aa7cd60 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x3a5/0x620 [ 915.487960][T16484] #2: ffffffff8e7e5620 (rcu_read_lock){....}-{1:3}, at: __flush_work+0xfd/0xcb0 [ 915.497085][T16484] [ 915.497085][T16484] stack backtrace: [ 915.503056][T16484] CPU: 1 UID: 0 PID: 16484 Comm: syz.6.2863 Tainted: G L syzkaller #0 PREEMPT(full) [ 915.503075][T16484] Tainted: [L]=SOFTLOCKUP [ 915.503080][T16484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 915.503088][T16484] Call Trace: [ 915.503094][T16484] [ 915.503100][T16484] dump_stack_lvl+0x100/0x190 [ 915.503116][T16484] print_circular_bug.cold+0x178/0x1c7 [ 915.503139][T16484] check_noncircular+0x146/0x160 [ 915.503162][T16484] __lock_acquire+0x14b8/0x2630 [ 915.503182][T16484] lock_acquire+0x1b1/0x370 [ 915.503198][T16484] ? __flush_work+0x4ca/0xcb0 [ 915.503216][T16484] ? mark_held_locks+0x40/0x70 [ 915.503233][T16484] ? __flush_work+0x4ca/0xcb0 [ 915.503250][T16484] __flush_work+0x4de/0xcb0 [ 915.503267][T16484] ? __flush_work+0x4ca/0xcb0 [ 915.503285][T16484] ? __pfx___flush_work+0x10/0x10 [ 915.503304][T16484] ? __pfx_wq_barrier_func+0x10/0x10 [ 915.503328][T16484] ? __pfx___might_resched+0x10/0x10 [ 915.503350][T16484] cancel_work_sync+0xd1/0xf0 [ 915.503370][T16484] smc_clcsock_release+0x5f/0xe0 [ 915.503389][T16484] __smc_release+0x5c2/0x880 [ 915.503406][T16484] ? __pfx_sock_def_readable+0x10/0x10 [ 915.503419][T16484] smc_close_non_accepted+0xda/0x200 [ 915.503438][T16484] smc_close_active+0x4ff/0x1070 [ 915.503456][T16484] __smc_release+0x634/0x880 [ 915.503472][T16484] smc_release+0x1fc/0x620 [ 915.503489][T16484] __sock_release+0xb3/0x260 [ 915.503504][T16484] ? __pfx_sock_close+0x10/0x10 [ 915.503518][T16484] sock_close+0x1c/0x30 [ 915.503531][T16484] __fput+0x3ff/0xb50 [ 915.503550][T16484] ? _raw_spin_unlock_irq+0x23/0x50 [ 915.503569][T16484] task_work_run+0x150/0x240 [ 915.503586][T16484] ? __pfx_task_work_run+0x10/0x10 [ 915.503603][T16484] ? rcu_is_watching+0x12/0xc0 [ 915.503624][T16484] exit_to_user_mode_loop+0x107/0x4f0 [ 915.503642][T16484] ? rcu_is_watching+0x12/0xc0 [ 915.503662][T16484] do_syscall_64+0x706/0xf80 [ 915.503681][T16484] ? clear_bhb_loop+0x40/0x90 [ 915.503697][T16484] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 915.503710][T16484] RIP: 0033:0x7f6a9b39ce59 [ 915.503722][T16484] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 915.503735][T16484] RSP: 002b:00007ffdb420e8e8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 915.503748][T16484] RAX: 0000000000000000 RBX: 00007f6a9b617da0 RCX: 00007f6a9b39ce59 [ 915.503757][T16484] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 915.503766][T16484] RBP: 00007f6a9b617da0 R08: 00007f6a9b616038 R09: 0000000000000000 [ 915.503774][T16484] R10: 00000000005ec39c R11: 0000000000000246 R12: 00000000000d290d [ 915.503782][T16484] R13: 00007f6a9b615fac R14: 00000000000d2631 R15: 00007ffdb420e9f0 [ 915.503795][T16484] [ 923.691544][ T1308] ieee802154 phy1 wpan1: encryption failed: -22